last executing test programs:

3m18.091205416s ago: executing program 0 (id=246):
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x12, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1e00, 0x61, '\x00', 0x0, @cgroup_sock_addr=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m17.931589851s ago: executing program 0 (id=247):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000001c0), 0x1, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
truncate(&(0x7f0000000680)='./bus\x00', 0xff)
write$FUSE_INIT(r0, &(0x7f000000a900)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xfffffffa, 0x201891, 0xff2e, 0xa, 0x9, 0x656d850d, 0x0, 0x0, 0x1, 0x5}}, 0x50)

3m17.817563962s ago: executing program 0 (id=250):
socket(0x10, 0x3, 0x0)
socket$vsock_stream(0x28, 0x5, 0x28)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x2, 0x1, 0x0, 0x2}, 0x20)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0)

3m16.469686808s ago: executing program 0 (id=267):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@barrier}]}, 0x3, 0x45b, &(0x7f0000000880)="$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")
socket(0x840000000002, 0x3, 0x100)
socket$inet6(0xa, 0x2, 0x3a)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
socket(0x28, 0x801, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020)

3m16.315548539s ago: executing program 0 (id=269):
syz_usb_connect(0x3, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002a91d21402577a8b046070102030109022b00010000000009045f00020103df000905050008000200e50905010208e600000007"], 0x0)

3m15.643693815s ago: executing program 0 (id=271):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_perm_addr})

3m15.494082063s ago: executing program 32 (id=271):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_perm_addr})

45.290271894s ago: executing program 1 (id=2027):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
r1 = syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7496, 0x800, 0x2, 0x1cf}, &(0x7f0000000380)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x1})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

45.128948609s ago: executing program 1 (id=2028):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0)

45.128645111s ago: executing program 1 (id=2029):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280)=0x3, 0x4)
sendto$inet(r0, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)

45.040188796s ago: executing program 1 (id=2031):
syz_mount_image$ext4(&(0x7f0000000980)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@auto_da_alloc}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10)

44.863674474s ago: executing program 1 (id=2034):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840)

44.560613562s ago: executing program 1 (id=2040):
r0 = socket(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_io_uring_setup(0x10d, &(0x7f0000000180)={0x0, 0x45888, 0x800, 0x0, 0x36c}, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000007c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)

44.389218303s ago: executing program 33 (id=2040):
r0 = socket(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_io_uring_setup(0x10d, &(0x7f0000000180)={0x0, 0x45888, 0x800, 0x0, 0x36c}, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000007c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)

2.221019471s ago: executing program 3 (id=2469):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f00000000c0)={0xa, 0x4e23, 0x8, @local, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000140)="88", 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000480)={0x0, 0x9}, 0x8)

2.082377891s ago: executing program 2 (id=2472):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c000280080002400100000a080001400000000108000340000000000900010073797a30"], 0xc8}}, 0x0)

2.081929523s ago: executing program 3 (id=2473):
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00')
preadv(r1, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0)

2.080549611s ago: executing program 2 (id=2474):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000050000000400000000000001000e01002000000000000000000000030000000001"], 0x0, 0x45, 0x0, 0x1}, 0x28)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x30, 0x0, 0x1}, 0x28)

2.017654202s ago: executing program 3 (id=2476):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a00"], 0xe0}}, 0x0)

2.017280371s ago: executing program 2 (id=2477):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000001140)={&(0x7f0000000b40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}, 0x8000)

1.879590647s ago: executing program 2 (id=2478):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002840)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0xfffffffc, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x0, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0x6, 0x6, "eb21"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0)

1.879108095s ago: executing program 3 (id=2480):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, 0x0, 0x0)
mount$nfs4(0x0, 0x0, &(0x7f0000000200), 0x2, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x800, &(0x7f0000000480)=@qipcrtr={0x2a, 0x4, 0x7ffe}, 0x80)
mount$cgroup2(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x18000, 0x0)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache}]}})

1.296894778s ago: executing program 3 (id=2482):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0)

1.249238183s ago: executing program 3 (id=2483):
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x53e}, 0x1c)
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000000c0)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="2014120000001b19fabda560da0781c2106a5bd2cb999f14"], 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[])

1.017329143s ago: executing program 2 (id=2484):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x34, 0x18, 0x1, 0x3, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x2800}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x5, 0x2, '\x00'}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

938.289483ms ago: executing program 2 (id=2485):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x13}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x2, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000500)={0x0, 0x10086f3, 0x2, 0x1, 0x17e}, &(0x7f0000000000), &(0x7f0000000280))
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f00000001c0)={[{@nobarrier}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nomblk_io_submit}]}, 0x3, 0x445, &(0x7f0000000800)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000091)

924.765364ms ago: executing program 4 (id=2486):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4640}, 0x2, 0x0, 0x0, 0x4000004}, 0x0)

692.643088ms ago: executing program 4 (id=2487):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x3)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60ca96460014060000000000000000000000000000000000fe8000000000000000000d00000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0)

589.35506ms ago: executing program 4 (id=2488):
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000003c0)={0x101, 0x2, 0x4, 0x0, 0xe1})
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000100)={0x2, 0x0, 0x2, 0x800})

588.929874ms ago: executing program 4 (id=2489):
syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x840, &(0x7f0000000080)={[{@gquota}, {@uqnoenforce}, {@dax_never}, {@filestreams}, {@grpquota}, {@allocsize={'allocsize', 0x3d, [0x30, 0x39, 0x6d]}}, {@largeio}]}, 0x4, 0x96a9, &(0x7f0000009680)="$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")
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, 0x0, &(0x7f0000000380))

299.948201ms ago: executing program 4 (id=2490):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000380), 0x12)
unshare(0x2a060400)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
read$FUSE(r2, &(0x7f0000000ec0)={0x2020}, 0x2020)

0s ago: executing program 4 (id=2491):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10)

kernel console output (not intermixed with test programs):

e_1) entered disabled state
[  145.655001][ T7741] bridge_slave_1: entered allmulticast mode
[  145.657793][ T7741] bridge_slave_1: entered promiscuous mode
[  145.682673][ T7741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  145.687757][ T7741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  145.711589][ T7741] team0: Port device team_slave_0 added
[  145.715328][ T7741] team0: Port device team_slave_1 added
[  145.735514][ T7741] batman_adv: batadv0: Adding interface: batadv_slave_0
[  145.737584][ T7741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.746082][ T7741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  145.752882][ T7741] batman_adv: batadv0: Adding interface: batadv_slave_1
[  145.755291][ T7741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.763354][ T7741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  145.811171][ T7741] hsr_slave_0: entered promiscuous mode
[  145.814188][ T7741] hsr_slave_1: entered promiscuous mode
[  145.816305][ T7741] debugfs: 'hsr0' already exists in 'hsr'
[  145.828693][ T7741] Cannot create hsr debugfs directory
[  145.871922][ T5943] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.041842][ T7741] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.155343][ T7741] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.275559][ T7741] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.368093][ T7741] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.583472][ T7741] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  146.602470][ T7741] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  146.612581][ T7741] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  146.622018][ T7741] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  146.691949][ T7741] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.706152][ T7741] 8021q: adding VLAN 0 to HW filter on device team0
[  146.717540][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.719997][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.731712][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.734035][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.220921][ T5237] Bluetooth: hci0: command tx timeout
[  147.525722][ T7741] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.585711][ T7741] veth0_vlan: entered promiscuous mode
[  147.597418][ T7741] veth1_vlan: entered promiscuous mode
[  147.642948][ T7741] veth0_macvtap: entered promiscuous mode
[  147.647766][ T7741] veth1_macvtap: entered promiscuous mode
[  147.677559][ T7741] batman_adv: batadv0: Interface activated: batadv_slave_0
[  147.688250][ T7741] batman_adv: batadv0: Interface activated: batadv_slave_1
[  147.698798][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.706767][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.723517][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.734753][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  147.793933][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.801364][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.843906][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.846430][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.976095][ T7810] fuse: Bad value for 'fd'
[  147.996414][ T7812] loop3: detected capacity change from 0 to 512
[  148.004255][ T7812] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  148.021856][ T7812] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.708: bad orphan inode 131083
[  148.031874][ T7812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  148.075315][ T7741] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.185825][ T7820] nbd: must specify a size in bytes for the device
[  148.528904][ T5314] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  148.690054][ T5314] usb 4-1: Using ep0 maxpacket: 8
[  148.695543][ T7826] loop1: detected capacity change from 0 to 4096
[  148.695970][ T5314] usb 4-1: config 32 has an invalid descriptor of length 48, skipping remainder of the config
[  148.701998][ T7826] EXT4-fs: Conflicting test_dummy_encryption options
[  148.712931][ T5314] usb 4-1: too many endpoints for config 32 interface 0 altsetting 48: 48, using maximum allowed: 30
[  148.726445][ T5314] usb 4-1: config 32 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  148.740556][ T5314] usb 4-1: config 32 interface 0 has no altsetting 0
[  148.746785][ T5314] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  148.760820][ T5314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.802658][ T7832] loop1: detected capacity change from 0 to 512
[  148.812898][ T7832] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.717: iget: bad i_size value: 38620345925642
[  148.818497][ T7832] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.717: couldn't read orphan inode 15 (err -117)
[  148.825700][ T7832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.891743][ T5943] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.987981][ T5314] usb 4-1: string descriptor 0 read error: -71
[  148.998610][ T5314] hub 4-1:32.0: bad descriptor, ignoring hub
[  149.001147][ T5314] hub 4-1:32.0: probe with driver hub failed with error -5
[  149.061896][ T5314] usb 4-1: USB disconnect, device number 6
[  149.134898][ T7843] loop1: detected capacity change from 0 to 1024
[  149.204143][ T7843] hfsplus: xattr searching failed
[  149.288818][ T5237] Bluetooth: hci0: command tx timeout
[  149.560262][ T7863] loop3: detected capacity change from 0 to 128
[  149.605449][   T33] audit: type=1326 audit(1755393987.065:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7864 comm="syz.2.733" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c878ebe9 code=0x7ffc0000
[  149.608676][ T5314] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  149.627037][   T33] audit: type=1326 audit(1755393987.085:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7864 comm="syz.2.733" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c878ebe9 code=0x7ffc0000
[  149.641845][   T33] audit: type=1326 audit(1755393987.095:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7864 comm="syz.2.733" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc0c878ebe9 code=0x7ffc0000
[  149.651783][   T33] audit: type=1326 audit(1755393987.095:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7864 comm="syz.2.733" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c878ebe9 code=0x7ffc0000
[  149.665480][   T33] audit: type=1326 audit(1755393987.095:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7864 comm="syz.2.733" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c878ebe9 code=0x7ffc0000
[  149.674983][   T33] audit: type=1326 audit(1755393987.105:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7864 comm="syz.2.733" exe="/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fc0c878ebe9 code=0x7ffc0000
[  149.686507][   T33] audit: type=1326 audit(1755393987.105:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7864 comm="syz.2.733" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c878ebe9 code=0x7ffc0000
[  149.695862][   T33] audit: type=1326 audit(1755393987.105:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7864 comm="syz.2.733" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c878ebe9 code=0x7ffc0000
[  149.714325][ T7867] validate_nla: 41 callbacks suppressed
[  149.714413][ T7867] netlink: 'syz.2.734': attribute type 3 has an invalid length.
[  149.722529][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.734'.
[  149.727691][ T7741] FAT-fs (loop3): error, invalid access to FAT (entry 0x266f0005)
[  149.734134][ T7741] FAT-fs (loop3): Filesystem has been set read-only
[  149.803105][ T5314] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  149.812869][ T5314] usb 2-1: Dual-Role OTG device on HNP port
[  149.815446][ T7871] netlink: 84 bytes leftover after parsing attributes in process `syz.2.736'.
[  149.817848][ T7869] loop3: detected capacity change from 0 to 4096
[  149.825051][ T7869] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  149.831676][ T5314] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1
[  149.839583][ T5314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.844395][ T5314] usb 2-1: Product: syz
[  149.846038][ T5314] usb 2-1: Manufacturer: syz
[  149.847733][ T5314] usb 2-1: SerialNumber: syz
[  149.858285][ T5314] usb 2-1: config 0 descriptor??
[  149.875945][ T5314] usb_ehset_test 2-1:0.0: probe with driver usb_ehset_test failed with error -32
[  149.900571][ T7869] ntfs3(loop3): ino=1d, mi_enum_attr
[  149.904470][ T7869] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  149.909972][ T7869] ntfs3(loop3): ino=1d, mi_enum_attr
[  149.916092][ T7869] ntfs3(loop3): ino=1d, mi_enum_attr
[  149.922379][ T7869] ntfs3(loop3): ino=1b, "file0" ntfs_readdir
[  150.068282][ T5314] usb 2-1: USB disconnect, device number 14
[  151.197593][   T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  151.349818][   T10] usb 2-1: config 0 has an invalid interface number: 95 but max is 0
[  151.352739][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  151.367709][ T5237] Bluetooth: hci0: command tx timeout
[  151.431167][   T10] usb 2-1: config 0 has no interface number 0
[  151.433559][   T10] usb 2-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8
[  151.444090][   T10] usb 2-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46
[  151.449969][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.453122][   T10] usb 2-1: Product: syz
[  151.454809][   T10] usb 2-1: Manufacturer: syz
[  151.456698][   T10] usb 2-1: SerialNumber: syz
[  151.470819][   T10] usb 2-1: config 0 descriptor??
[  151.473951][ T7894] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  151.624960][ T7919] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.753'.
[  151.696794][   T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  151.700386][   T10] usb 2-1: MIDIStreaming interface descriptor not found
[  151.745927][   T10] usb 2-1: USB disconnect, device number 15
[  151.800221][ T6456] udevd[6456]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  151.951952][ T7921] loop3: detected capacity change from 0 to 32768
[  151.969460][ T7921] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.755 (7921)
[  151.997101][ T7921] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  152.000164][ T7932] netlink: 56 bytes leftover after parsing attributes in process `syz.2.760'.
[  152.001025][ T7921] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  152.014603][ T7921] BTRFS info (device loop3): using free-space-tree
[  152.053360][ T7946] overlayfs: failed to clone upperpath
[  152.116325][   T33] audit: type=1800 audit(1755393989.576:157): pid=7921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.755" name="file1" dev="loop3" ino=260 res=0 errno=0
[  152.409771][ T7921] BTRFS info (device loop3): space_info DATA+METADATA (sub-group id 0) has 0 free, is not full
[  152.413209][ T7921] BTRFS info (device loop3): space_info total=3276800, used=167936, pinned=335872, reserved=53248, may_use=2719744, readonly=0 zone_unusable=0
[  152.417953][ T7921] BTRFS info (device loop3): global_block_rsv: size 1441792 reserved 1441792
[  152.420761][ T7921] BTRFS info (device loop3): trans_block_rsv: size 0 reserved 0
[  152.423107][ T7921] BTRFS info (device loop3): chunk_block_rsv: size 0 reserved 0
[  152.425692][ T7921] BTRFS info (device loop3): delayed_block_rsv: size 32768 reserved 32768
[  152.428593][ T7921] BTRFS info (device loop3): delayed_refs_rsv: size 1245184 reserved 1245184
[  152.691050][ T7741] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  152.852166][ T7968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  153.090324][ T8000] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  153.138307][ T8002] loop3: detected capacity change from 0 to 1024
[  153.161466][ T8002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.215964][ T7741] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.333179][ T8006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  153.507590][ T5237] Bluetooth: hci0: command tx timeout
[  153.917927][ T8018] loop1: detected capacity change from 0 to 2048
[  153.964537][ T8018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  154.114864][ T5943] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.344842][ T8031] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  155.240461][   T33] audit: type=1800 audit(1755393992.697:158): pid=8024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.787" name="/" dev="9p" ino=2 res=0 errno=0
[  156.168035][ T8075] netlink: 60 bytes leftover after parsing attributes in process `syz.3.808'.
[  156.263294][ T8081] erspan0: entered promiscuous mode
[  156.269939][ T8081] erspan0: left promiscuous mode
[  156.744860][  T794] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  156.897726][  T794] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  156.902076][  T794] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  156.916219][  T794] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  156.919646][  T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.936714][ T8084] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  156.950025][  T794] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  157.103262][ T8093] loop1: detected capacity change from 0 to 32768
[  157.122917][ T8093] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.816 (8093)
[  157.186682][ T8093] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  157.190854][ T8093] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  157.207145][ T8093] BTRFS info (device loop1): using free-space-tree
[  157.298693][  T794] usb 4-1: USB disconnect, device number 7
[  157.359990][ T5943] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  157.995985][  T794] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  158.144069][  T794] usb 2-1: Using ep0 maxpacket: 16
[  158.148690][ T8139] loop3: detected capacity change from 0 to 4096
[  158.205462][  T794] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  158.245459][  T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  158.279331][  T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  158.290921][  T794] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  158.340001][  T794] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  158.355289][  T794] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  158.360918][  T794] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  158.368378][  T794] usb 2-1: Manufacturer: syz
[  158.373352][  T794] usb 2-1: config 0 descriptor??
[  158.766035][  T794] rc_core: IR keymap rc-hauppauge not found
[  158.768404][  T794] Registered IR keymap rc-empty
[  158.770784][  T794] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  158.803771][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  158.807418][  T794] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  158.826678][  T794] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  158.841325][  T794] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8
[  158.857147][  T794] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  158.874072][  T794] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  158.893720][  T794] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  158.913795][  T794] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  158.934185][  T794] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  158.964949][  T794] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  158.983753][  T794] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  159.005048][  T794] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  159.023756][  T794] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  159.057691][  T794] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  159.078146][  T794] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  159.082002][  T794] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  159.127219][  T794] usb 2-1: USB disconnect, device number 16
[  159.613406][ T5237] Bluetooth: hci1: command tx timeout
[  159.763978][ T8154] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  159.768134][ T8154] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  159.772863][ T8154] overlayfs: missing 'lowerdir'
[  159.949569][ T8161] openvswitch: netlink: Message has 4 unknown bytes.
[  160.805826][ T8181] loop3: detected capacity change from 0 to 32768
[  160.835711][ T8181] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  160.855139][ T8181] XFS (loop3): Ending clean mount
[  160.860865][ T8181] XFS (loop3): Quotacheck needed: Please wait.
[  160.865373][ T8199] loop1: detected capacity change from 0 to 2048
[  160.894373][ T8199] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  160.898325][ T8181] XFS (loop3): Quotacheck: Done.
[  160.907307][ T8199] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  161.039485][ T7741] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  163.239576][ T8236] loop1: detected capacity change from 0 to 32768
[  163.488888][ T8254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.876'.
[  163.578574][ T8257] loop1: detected capacity change from 0 to 512
[  163.613441][ T8257] EXT4-fs (loop1): Test dummy encryption mode enabled
[  163.616035][ T8257] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  163.640782][ T8257] EXT4-fs (loop1): 1 truncate cleaned up
[  163.648267][ T8257] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.688246][ T5943] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.866079][ T8258] loop3: detected capacity change from 0 to 32768
[  163.917590][   T33] audit: type=1800 audit(1755394001.382:159): pid=8258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.878" name="file1" dev="loop3" ino=4 res=0 errno=0
[  165.066163][ T8288] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  165.069663][ T8290] loop3: detected capacity change from 0 to 64
[  165.102582][ T8290] BFS-fs: bfs_fill_super(): Last block not available on loop3: 163903
[  165.900423][ T8308] nbd: socks must be embedded in a SOCK_ITEM attr
[  165.918473][ T8308] block nbd0: shutting down sockets
[  165.928772][ T8310] loop3: detected capacity change from 0 to 16
[  165.944265][ T8310] erofs (device loop3): mounted with root inode @ nid 36.
[  165.968035][ T8305] syz.3.898: attempt to access beyond end of device
[  165.968035][ T8305] loop3: rw=524288, sector=8, nr_sectors = 32 limit=16
[  165.986058][ T8305] syz.3.898: attempt to access beyond end of device
[  165.986058][ T8305] loop3: rw=524288, sector=40, nr_sectors = 64 limit=16
[  166.017662][ T8305] syz.3.898: attempt to access beyond end of device
[  166.017662][ T8305] loop3: rw=0, sector=16, nr_sectors = 8 limit=16
[  166.058222][   T33] audit: type=1800 audit(1755394003.523:160): pid=8305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.898" name="file2" dev="loop3" ino=89 res=0 errno=0
[  166.809097][ T8339] loop3: detected capacity change from 0 to 64
[  168.736295][ T8413] loop4: detected capacity change from 0 to 524255232
[  168.785427][ T8415] loop3: detected capacity change from 0 to 512
[  168.847086][ T8413] loop4: detected capacity change from 524255232 to 524287956
[  169.551746][ T8431] loop3: detected capacity change from 0 to 164
[  170.040449][ T8440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.959'.
[  170.067118][ T8442] sctp: [Deprecated]: syz.2.960 (pid 8442) Use of int in max_burst socket option deprecated.
[  170.067118][ T8442] Use struct sctp_assoc_value instead
[  170.140816][ T8435] loop3: detected capacity change from 0 to 32768
[  170.219194][ T8435] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  170.232194][ T5716] (kworker/u8:2,5716,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[  170.335563][ T7741] ocfs2: Unmounting device (7,3) on (node local)
[  170.364267][ T8444] loop1: detected capacity change from 0 to 32768
[  170.382599][ T8444] (syz.1.961,8444,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  170.400746][ T8444] (syz.1.961,8444,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  170.455693][ T8444] JBD2: Ignoring recovery information on journal
[  170.515958][ T8456] netlink: 'syz.3.965': attribute type 29 has an invalid length.
[  170.521623][ T8456] netlink: 'syz.3.965': attribute type 29 has an invalid length.
[  170.522058][ T8444] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  170.528906][ T8456] netlink: 'syz.3.965': attribute type 29 has an invalid length.
[  170.687382][ T5943] ocfs2: Unmounting device (7,1) on (node local)
[  171.082425][ T8476] netlink: 28 bytes leftover after parsing attributes in process `syz.1.973'.
[  171.514234][   T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  171.718408][   T10] usb 2-1: Using ep0 maxpacket: 16
[  171.784858][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  171.795098][   T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.00
[  171.805543][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.817645][   T10] usb 2-1: config 0 descriptor??
[  172.236136][   T10] apple 0003:05AC:023F.0009: reserved main item tag 0xd
[  172.246970][   T10] apple 0003:05AC:023F.0009: unexpected long global item
[  172.250379][   T10] apple 0003:05AC:023F.0009: parse failed
[  172.252237][   T10] apple 0003:05AC:023F.0009: probe with driver apple failed with error -22
[  172.469592][   T10] usb 2-1: USB disconnect, device number 17
[  173.459448][ T8522] MPI: mpi too large (107144 bits)
[  173.554720][ T8531] Driver unsupported XDP return value 0 on prog  (id 98) dev N/A, expect packet loss!
[  173.685926][ T8529] loop1: detected capacity change from 0 to 32768
[  173.701226][ T8529] 
[  173.701226][ T8529]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  173.701226][ T8529] 
[  173.718547][ T8529] ERROR: (device loop1): diWrite: ixpxd invalid
[  173.718547][ T8529] 
[  173.723485][ T8529] ERROR: (device loop1): txCommit: 
[  173.723485][ T8529] 
[  173.747092][ T5943] 
[  173.747092][ T5943]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  173.747092][ T5943] 
[  173.756707][ T5943] 
[  173.756707][ T5943]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  173.756707][ T5943] 
[  173.905906][ T8551] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1009'.
[  174.058315][ T8555] loop1: detected capacity change from 0 to 4096
[  174.066312][ T8555] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  174.109657][ T8555] ntfs3(loop1): ino=1a, mi_enum_attr
[  174.111911][ T8555] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  174.260879][ T8566] loop3: detected capacity change from 0 to 512
[  174.314861][ T8566] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  174.317569][ T8570] netlink: 'syz.2.1018': attribute type 3 has an invalid length.
[  174.321620][ T8570] netlink: 766 bytes leftover after parsing attributes in process `syz.2.1018'.
[  174.373033][ T8566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.390772][ T8566] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  174.444129][ T7741] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.535475][ T8588] loop3: detected capacity change from 0 to 512
[  174.541952][ T8588] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  174.551995][ T8588] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c11c, mo2=0102]
[  174.557083][ T8588] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.1024: corrupted in-inode xattr: e_value size too large
[  174.563026][ T8588] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1024: couldn't read orphan inode 15 (err -117)
[  174.570558][ T8588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.161634][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1029'.
[  175.166018][ T8599] chnl_net:caif_netlink_parms(): no params data found
[  175.478067][ T8603] loop1: detected capacity change from 0 to 32768
[  175.572596][ T7741] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.746370][ T8603] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,background_target=invalid device 79,nojournal_transaction_names
[  175.746385][ T8603]   allowing incompatible features above 0.0: (unknown version)
[  175.746390][ T8603]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  175.785852][ T8603] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  175.789139][ T8603] bcachefs (loop1): initializing new filesystem
[  175.800321][ T8603] bcachefs (loop1): going read-write
[  175.824744][ T8628] CUSE: unknown device info "!"
[  175.824958][ T8603] bcachefs (loop1): marking superblocks
[  175.828894][ T8628] CUSE: zero length info key specified
[  176.171116][   T10] IPVS: starting estimator thread 0...
[  176.206310][ T8603] bcachefs (loop1): initializing freespace
[  176.236902][ T8603] bcachefs (loop1): done initializing freespace
[  176.256594][ T8603] bcachefs (loop1): reading snapshots table
[  176.263104][ T8603] bcachefs (loop1): reading snapshots done
[  176.267275][ T8633] IPVS: using max 41 ests per chain, 98400 per kthread
[  176.312334][ T8603] bcachefs (loop1): done starting filesystem
[  176.437705][   T33] audit: type=1800 audit(1755394013.908:161): pid=8603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1031" name="file1" dev="loop1" ino=4098 res=0 errno=0
[  176.473444][ T8640] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1043'.
[  176.558536][ T8647] netlink: 'syz.2.1045': attribute type 1 has an invalid length.
[  176.749883][ T8603] syz.1.1031 (8603) used greatest stack depth: 16056 bytes left
[  176.780952][ T5943] bcachefs (loop1): shutting down
[  176.783204][ T5943] bcachefs (loop1): going read-only
[  176.785610][ T5943] bcachefs (loop1): finished waiting for writes to stop
[  176.801092][ T5943] bcachefs (loop1): flushing journal and stopping allocators, journal seq 37
[  176.824727][ T5943] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 37
[  176.834440][ T5943] bcachefs (loop1): clean shutdown complete, journal seq 38
[  176.838618][ T5943] bcachefs (loop1): marking filesystem clean
[  176.882270][ T5943] bcachefs (loop1): shutdown complete
[  177.864490][ T8660] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  178.388301][ T8672] loop3: detected capacity change from 0 to 4096
[  178.392824][ T8672] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  178.632588][ T8692] program syz.1.1059 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  178.844618][ T8700] loop3: detected capacity change from 0 to 128
[  178.873627][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  178.904276][ T8700] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  178.909520][ T8700] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  179.006098][ T7741] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  179.533272][ T5985] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  179.686151][ T5985] usb 4-1: Using ep0 maxpacket: 16
[  179.702901][ T5985] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  179.715005][ T5985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  179.728169][ T5985] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  179.731673][ T5985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.739766][ T5985] usb 4-1: Product: syz
[  179.741328][ T5985] usb 4-1: Manufacturer: syz
[  179.748967][ T5985] usb 4-1: SerialNumber: syz
[  179.754303][ T5985] usb 4-1: config 0 descriptor??
[  179.767268][ T5985] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  179.770992][ T5985] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  180.222034][ T8738] input: syz0 as /devices/virtual/input/input9
[  180.364355][ T5985] em28xx 4-1:0.0: chip ID is em2860
[  180.565017][ T5985] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  180.568155][ T5985] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[  180.571002][ T5985] em28xx 4-1:0.0: No AC97 audio processor
[  180.585995][ T5985] usb 4-1: USB disconnect, device number 8
[  180.589568][ T5985] em28xx 4-1:0.0: Disconnecting em28xx
[  180.597914][  T794] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  180.606920][ T5985] em28xx 4-1:0.0: Freeing device
[  180.762804][  T794] usb 2-1: Using ep0 maxpacket: 16
[  180.769788][  T794] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35
[  180.774067][  T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.777370][  T794] usb 2-1: Product: syz
[  180.779161][  T794] usb 2-1: Manufacturer: syz
[  180.780620][  T794] usb 2-1: SerialNumber: syz
[  180.787193][  T794] usb 2-1: config 0 descriptor??
[  180.807580][  T794] as10x_usb: device has been detected
[  180.810641][  T794] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led))
[  180.838003][  T794] usb 2-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))...
[  180.865964][  T794] as10x_usb: error during firmware upload part1
[  180.871472][  T794] Registered device Sky IT Digital Key (green led)
[  181.315722][ T8762] loop3: detected capacity change from 0 to 32768
[  181.320998][ T8762] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1089 (8762)
[  181.332013][ T8762] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  181.341003][ T8762] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  181.345423][ T8762] BTRFS info (device loop3): using free-space-tree
[  181.419441][ T7741] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  183.113505][ T5237] Bluetooth: hci1: command 0x0c1a tx timeout
[  183.115033][ T8744] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  183.343951][ T8744] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  183.355608][ T8744] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  183.362865][ T8744] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  183.365777][ T8744] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  183.375388][ T8744] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  183.386722][ T8744] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  183.389336][ T8744] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  183.395462][ T8744] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  183.426845][ T5314] usb 2-1: USB disconnect, device number 18
[  183.486839][ T5314] Unregistered device Sky IT Digital Key (green led)
[  183.501980][ T5314] as10x_usb: device has been disconnected
[  183.507089][ T8814] loop1: detected capacity change from 0 to 512
[  183.563168][ T8814] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  183.613946][ T8814] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  183.619432][ T8814] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  183.624385][ T8823] trusted_key: syz.2.1107 sent an empty control message without MSG_MORE.
[  183.654541][ T8814] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  183.745220][ T5943] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.902874][ T8840] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1114'.
[  184.320588][   T33] audit: type=1800 audit(1755394021.792:162): pid=8849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1118" name="cgroup.controllers" dev="tmpfs" ino=737 res=0 errno=0
[  184.610504][ T8865] loop3: detected capacity change from 0 to 1024
[  184.649919][ T8865] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84cc128, mo2=0102]
[  184.653195][ T8865] System zones: 1-12
[  184.655449][ T8865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.699801][ T7741] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.192057][ T5237] Bluetooth: hci1: command 0x0c1a tx timeout
[  185.195923][ T8902] openvswitch: netlink: Flow key attribute not present in set flow.
[  185.420019][ T8909] loop1: detected capacity change from 0 to 4096
[  185.428136][ T8909] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  185.430425][   T55] Bluetooth: hci0: command 0x0c1a tx timeout
[  185.436712][ T5237] Bluetooth: hci2: command 0x0c1a tx timeout
[  185.459431][ T8909] ntfs3(loop1): ino=19, mi_enum_attr
[  185.467428][ T8909] ntfs3(loop1): failed to convert "c46c" to iso8859-4
[  185.471418][ T8909] ntfs3(loop1): ino=20, mi_enum_attr
[  185.793216][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  186.171633][    T9] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[  186.340601][    T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  186.342197][   T33] audit: type=1326 audit(1755394023.823:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.2.1165" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c878ebe9 code=0x7ffc0000
[  186.345044][    T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  186.363851][   T33] audit: type=1326 audit(1755394023.833:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.2.1165" exe="/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7fc0c878ebe9 code=0x7ffc0000
[  186.385558][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64
[  186.388938][   T33] audit: type=1326 audit(1755394023.833:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.2.1165" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c878ebe9 code=0x7ffc0000
[  186.397857][   T33] audit: type=1326 audit(1755394023.833:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.2.1165" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c878ebe9 code=0x7ffc0000
[  186.406275][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  186.421609][    T9] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  186.425490][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.428663][    T9] usb 2-1: Product: syz
[  186.433925][    T9] usb 2-1: Manufacturer: syz
[  186.437600][    T9] usb 2-1: SerialNumber: syz
[  186.444217][    T9] usb 2-1: config 0 descriptor??
[  186.446625][ T8932] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  186.504912][ T8966] cgroup: Invalid name
[  186.531810][    T9] rc_core: IR keymap rc-imon-rsc not found
[  186.533692][    T9] Registered IR keymap rc-empty
[  186.535857][    T9] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  186.557279][    T9] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10
[  186.743146][ T8932] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  186.745418][ T8932] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  186.757266][ T8932] vhci_hcd vhci_hcd.0: Device attached
[  186.773634][ T8932] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6)
[  186.775771][ T8932] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  186.791699][ T8932] vhci_hcd vhci_hcd.0: Device attached
[  186.795697][ T8977] vhci_hcd: connection closed
[  186.800429][ T8973] vhci_hcd: connection closed
[  186.812820][ T5948] vhci_hcd: stop threads
[  186.817286][ T5948] vhci_hcd: release socket
[  186.819152][ T5948] vhci_hcd: disconnect device
[  186.832636][ T5948] vhci_hcd: stop threads
[  186.834335][ T5948] vhci_hcd: release socket
[  186.836319][ T5948] vhci_hcd: disconnect device
[  186.874076][  T794] usb 2-1: USB disconnect, device number 19
[  186.894880][ T8982] loop3: detected capacity change from 0 to 256
[  187.269485][   T55] Bluetooth: hci1: command 0x0c1a tx timeout
[  187.382674][ T8987] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1176'.
[  187.386291][ T8987] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1176'.
[  187.393162][ T8987] erspan0: entered promiscuous mode
[  187.395859][ T8987] gretap0: entered promiscuous mode
[  187.509820][   T55] Bluetooth: hci0: command 0x0c1a tx timeout
[  187.509922][ T8910] Bluetooth: hci2: command 0x0c1a tx timeout
[  188.956088][  T794] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  189.124360][  T794] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  189.133823][  T794] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  189.137402][  T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.151822][  T794] usb 4-1: Product: syz
[  189.154811][  T794] usb 4-1: Manufacturer: syz
[  189.160717][  T794] usb 4-1: SerialNumber: syz
[  189.167783][  T794] usb 4-1: config 0 descriptor??
[  189.181125][  T794] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  189.388010][   T47] usb 4-1: USB disconnect, device number 9
[  189.588275][ T8910] Bluetooth: hci0: command 0x0c1a tx timeout
[  189.600446][ T8910] Bluetooth: hci2: command 0x0c1a tx timeout
[  190.392358][ T9051] sctp: [Deprecated]: syz.3.1205 (pid 9051) Use of int in maxseg socket option.
[  190.392358][ T9051] Use struct sctp_assoc_value instead
[  190.572745][   T33] audit: type=1326 audit(1755394028.055:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.3.1210" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128158ebe9 code=0x7ffc0000
[  190.595011][   T33] audit: type=1326 audit(1755394028.055:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.3.1210" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128158ebe9 code=0x7ffc0000
[  190.613972][   T33] audit: type=1326 audit(1755394028.075:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.3.1210" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f128158ebe9 code=0x7ffc0000
[  190.623343][   T33] audit: type=1326 audit(1755394028.075:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.3.1210" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128158ebe9 code=0x7ffc0000
[  190.637154][   T33] audit: type=1326 audit(1755394028.075:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.3.1210" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128158ebe9 code=0x7ffc0000
[  190.647047][   T33] audit: type=1326 audit(1755394028.075:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.3.1210" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f128158ebe9 code=0x7ffc0000
[  190.660990][   T33] audit: type=1326 audit(1755394028.075:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.3.1210" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128158ebe9 code=0x7ffc0000
[  190.670767][   T33] audit: type=1326 audit(1755394028.075:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.3.1210" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128158ebe9 code=0x7ffc0000
[  190.682151][   T33] audit: type=1326 audit(1755394028.095:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.3.1210" exe="/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f128158ebe9 code=0x7ffc0000
[  190.698415][   T33] audit: type=1326 audit(1755394028.095:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.3.1210" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128158ebe9 code=0x7ffc0000
[  191.207184][ T9101] loop1: detected capacity change from 0 to 1024
[  191.245678][ T9101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  191.281370][ T9101] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1227: bg 0: block 280: padding at end of block bitmap is not set
[  191.297685][ T9101] EXT4-fs (loop1): Remounting filesystem read-only
[  191.310917][ T9101] EXT4-fs warning (device loop1): ext4_xattr_inode_lookup_create:1597: inode #18: comm syz.1.1227: cleanup dec ref error -117
[  191.353947][ T5943] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.370891][ T9097] loop3: detected capacity change from 0 to 40427
[  191.374456][ T9097] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  191.376511][ T9097] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  191.446068][ T9097] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  191.458339][ T9097] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  191.465552][ T9097] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  191.526809][ T9116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1232'.
[  191.667543][ T8910] Bluetooth: hci0: command 0x0c1a tx timeout
[  191.947311][ T2208] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  192.367372][ T2208] usb 2-1: Using ep0 maxpacket: 32
[  192.374241][ T2208] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  192.379338][ T2208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  192.383632][ T2208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  192.389366][ T2208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  192.393756][ T2208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  192.402092][ T2208] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  192.405653][ T2208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.409126][ T2208] usb 2-1: Product: syz
[  192.411163][ T2208] usb 2-1: Manufacturer: syz
[  192.413039][ T2208] usb 2-1: SerialNumber: syz
[  192.417374][ T2208] usb 2-1: config 0 descriptor??
[  192.831429][ T2208] iforce 2-1:0.0: usb_submit_urb failed: -32
[  192.834481][ T2208] input input11: Device does not respond to id packet M
[  192.839418][ T2208] iforce 2-1:0.0: usb_submit_urb failed: -32
[  192.841833][ T2208] input input11: Device does not respond to id packet P
[  192.850267][ T2208] iforce 2-1:0.0: usb_submit_urb failed: -32
[  192.852781][ T2208] input input11: Device does not respond to id packet B
[  192.883739][ T8910] Bluetooth: hci0: unexpected subevent 0x0e length: 30 > 15
[  192.886996][ T8910] Bluetooth: hci0: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  193.057896][ T2208] iforce 2-1:0.0: usb_submit_urb failed: -71
[  193.061997][ T2208] iforce 2-1:0.0: usb_submit_urb failed: -71
[  193.069080][ T2208] iforce 2-1:0.0: usb_submit_urb failed: -71
[  193.071792][ T2208] iforce 2-1:0.0: usb_submit_urb failed: -71
[  193.080684][ T2208] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11
[  193.100946][ T2208] usb 2-1: USB disconnect, device number 20
[  193.991413][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  193.994120][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.039178][ T9177] syzkaller0: entered promiscuous mode
[  194.041590][ T9177] syzkaller0: entered allmulticast mode
[  194.715122][ T9193] sctp: [Deprecated]: syz.2.1266 (pid 9193) Use of int in max_burst socket option deprecated.
[  194.715122][ T9193] Use struct sctp_assoc_value instead
[  196.430881][ T9208] loop3: detected capacity change from 0 to 512
[  196.439089][ T9208] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  196.457480][ T9208] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002c018, mo2=0002]
[  196.468407][ T9208] System zones: 0-7
[  196.474044][ T9208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.474499][ T9211] vlan2: entered allmulticast mode
[  196.481280][ T9211] erspan0: entered allmulticast mode
[  196.517271][ T7741] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.545005][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  197.532611][ T9235] IPv6: addrconf: prefix option has invalid lifetime
[  197.876990][ T9243] loop6: detected capacity change from 0 to 2560
[  197.890004][ T9243] buffer_io_error: 138 callbacks suppressed
[  197.890015][ T9243] Buffer I/O error on dev loop6, logical block 0, async page read
[  197.899652][ T9243] Buffer I/O error on dev loop6, logical block 0, async page read
[  197.902164][ T9243] Buffer I/O error on dev loop6, logical block 0, async page read
[  197.913174][ T9243] Buffer I/O error on dev loop6, logical block 0, async page read
[  197.921204][ T9243] Buffer I/O error on dev loop6, logical block 0, async page read
[  197.923814][ T9243] Buffer I/O error on dev loop6, logical block 0, async page read
[  197.927080][ T9243] Buffer I/O error on dev loop6, logical block 0, async page read
[  197.929509][ T9243] Buffer I/O error on dev loop6, logical block 0, async page read
[  197.932220][ T9243] ldm_validate_partition_table(): Disk read failed.
[  197.936509][ T9243] Buffer I/O error on dev loop6, logical block 0, async page read
[  197.939015][ T9243] Buffer I/O error on dev loop6, logical block 0, async page read
[  197.941524][ T9243] Dev loop6: unable to read RDB block 0
[  197.944322][ T9243]  loop6: unable to read partition table
[  197.948879][ T9243] loop_reread_partitions: partition scan of loop6 (3) failed (rc=-5)
[  198.247833][ T9269] loop1: detected capacity change from 0 to 1024
[  198.273166][   T33] kauditd_printk_skb: 4 callbacks suppressed
[  198.273179][   T33] audit: type=1800 audit(1755394035.749:181): pid=9269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1300" name="file1" dev="loop1" ino=2 res=0 errno=0
[  198.288080][ T9269] hfsplus: catalog searching failed
[  198.305496][   T36] hfsplus: bad catalog file entry
[  198.307513][   T36] hfsplus: b-tree write err: -5, ino 3
[  199.740138][ T9318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1321'.
[  199.995376][ T9334] can: request_module (can-proto-0) failed.
[  200.056825][ T9341] loop3: detected capacity change from 0 to 8
[  200.079769][ T9341] SQUASHFS error: zlib decompression failed, data probably corrupt
[  200.083240][ T9341] SQUASHFS error: Failed to read block 0x9b: -5
[  200.085761][ T9341] SQUASHFS error: Unable to read metadata cache entry [99]
[  200.088768][ T9341] SQUASHFS error: Unable to read inode 0x127
[  200.191646][ T9349] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1336'.
[  200.197427][ T9349] bond_slave_0: entered promiscuous mode
[  200.200170][ T9349] bond_slave_1: entered promiscuous mode
[  200.318781][ T9357] bond0: (slave bond_slave_1): Releasing backup interface
[  200.322666][ T9357] bond_slave_1: left allmulticast mode
[  200.327309][ T9357] bond_slave_1: left promiscuous mode
[  201.230020][   T47] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  201.463706][   T47] usb 2-1: Using ep0 maxpacket: 16
[  201.491458][   T47] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11
[  201.491489][   T47] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  201.492114][   T47] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  201.525188][   T47] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  201.525208][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  201.525217][   T47] usb 2-1: SerialNumber: syz
[  201.530485][ T9369] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  201.768505][   T47] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[  201.778189][   T47] usb 2-1: USB disconnect, device number 21
[  201.929456][ T9405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1361'.
[  202.142800][   T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  202.291950][   T10] usb 4-1: Using ep0 maxpacket: 16
[  202.305983][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  202.316670][   T10] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  202.319899][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.329545][ T9423] loop1: detected capacity change from 0 to 1024
[  202.332132][   T10] usb 4-1: Product: syz
[  202.333607][   T10] usb 4-1: Manufacturer: syz
[  202.335559][   T10] usb 4-1: SerialNumber: syz
[  202.339210][   T10] usb 4-1: config 0 descriptor??
[  202.354729][   T10] hub 4-1:0.0: bad descriptor, ignoring hub
[  202.367698][   T10] hub 4-1:0.0: probe with driver hub failed with error -5
[  202.387946][   T10] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12
[  203.048407][   T10] usb 4-1: USB disconnect, device number 10
[  203.371814][ T9433] loop3: detected capacity change from 0 to 256
[  203.815580][   T33] audit: type=1800 audit(1755394041.292:182): pid=9443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1378" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  203.927023][ T9448] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  204.540815][ T9461] loop1: detected capacity change from 0 to 32768
[  204.580915][ T9461] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  204.599345][ T9461] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  204.735316][ T5943] ocfs2: Unmounting device (7,1) on (node local)
[  205.075221][ T9503] overlayfs: failed to clone upperpath
[  205.109282][ T9507] sit0: entered promiscuous mode
[  205.133979][ T9507] netlink: 21 bytes leftover after parsing attributes in process `syz.2.1406'.
[  205.183086][ T9509] loop1: detected capacity change from 0 to 8192
[  205.213021][ T9513] fuse: Bad value for 'fd'
[  205.344784][   T33] audit: type=1326 audit(1755394042.832:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9518 comm="syz.1.1412" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe244d8ebe9 code=0x7ffc0000
[  205.363388][   T33] audit: type=1326 audit(1755394042.843:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9518 comm="syz.1.1412" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe244d8ebe9 code=0x7ffc0000
[  205.373355][   T33] audit: type=1326 audit(1755394042.843:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9518 comm="syz.1.1412" exe="/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fe244d8ebe9 code=0x7ffc0000
[  205.943332][ T9527] loop3: detected capacity change from 0 to 32768
[  205.947589][ T9527] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1416 (9527)
[  205.961774][ T9527] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  205.967690][ T9527] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  205.977838][ T9527] BTRFS info (device loop3): using free-space-tree
[  206.061562][  T731] BTRFS warning (device loop3): checksum verify failed on logical 5308416 mirror 1 wanted 0xe1d58233 found 0x05b99823 level 0
[  206.067301][ T9527] BTRFS: error (device loop3) in btrfs_fill_super:986: errno=-5 IO failure
[  206.075247][ T9527] BTRFS error (device loop3 state E): commit super ret -30
[  206.106631][ T9553] 9pnet_fd: Insufficient options for proto=fd
[  206.241182][ T9555] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1422'.
[  206.376675][   T10] kernel write not supported for file task/512/attr/fscreate (pid: 10 comm: kworker/0:1)
[  206.811873][ T9591] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1440'.
[  206.867019][ T9595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1442'.
[  206.872554][ T9595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1442'.
[  206.906634][ T9595] loop3: detected capacity change from 0 to 2048
[  206.910666][ T9595] EXT4-fs: Ignoring removed mblk_io_submit option
[  206.915160][ T9595] EXT4-fs: Ignoring removed nobh option
[  206.944203][ T9595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  206.949963][ T2208] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  206.957726][ T9595] EXT4-fs (loop3): shut down requested (0)
[  207.001221][ T7741] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.068495][ T9612] overlayfs: failed to clone upperpath
[  207.099811][ T2208] usb 2-1: Using ep0 maxpacket: 16
[  207.100803][ T9616] overlayfs: failed to clone upperpath
[  207.104322][ T2208] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  207.107598][ T2208] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  207.119813][ T2208] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  207.134814][ T2208] usb 2-1: config 0 interface 0 has no altsetting 0
[  207.142809][ T2208] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  207.146116][ T2208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.148730][ T2208] usb 2-1: Product: syz
[  207.152727][ T2208] usb 2-1: Manufacturer: syz
[  207.154533][ T2208] usb 2-1: SerialNumber: syz
[  207.159007][ T2208] usb 2-1: config 0 descriptor??
[  207.174538][ T9619] [U] 
[  207.175720][ T9622] netlink: 'syz.2.1454': attribute type 21 has an invalid length.
[  207.258419][ T9626] xfrm0: entered promiscuous mode
[  207.263802][ T9626] xfrm0: entered allmulticast mode
[  207.371283][ T9632] fuse: Bad value for 'fd'
[  207.592550][  T794] usb 2-1: USB disconnect, device number 22
[  208.079091][ T5903] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  208.239821][ T5903] usb 4-1: Using ep0 maxpacket: 32
[  208.244694][ T5903] usb 4-1: config 252 has an invalid interface number: 91 but max is 0
[  208.248073][ T5903] usb 4-1: config 252 has no interface number 0
[  208.251064][ T5903] usb 4-1: config 252 interface 91 has no altsetting 0
[  208.256389][ T5903] usb 4-1: New USB device found, idVendor=07ca, idProduct=a309, bcdDevice=7f.92
[  208.260261][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.263393][ T5903] usb 4-1: Product: syz
[  208.265135][ T5903] usb 4-1: Manufacturer: syz
[  208.267030][ T5903] usb 4-1: SerialNumber: syz
[  208.361510][ T2208] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  208.496328][ T5903] usb 4-1: USB disconnect, device number 11
[  208.508989][ T2208] usb 2-1: Using ep0 maxpacket: 8
[  208.522137][ T2208] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  208.531827][ T2208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.535014][ T2208] usb 2-1: Product: syz
[  208.536697][ T2208] usb 2-1: Manufacturer: syz
[  208.543110][ T2208] usb 2-1: SerialNumber: syz
[  208.552836][ T2208] usb 2-1: config 0 descriptor??
[  208.884798][  T794] usb 2-1: USB disconnect, device number 23
[  210.195569][ T9691] netlink: 'syz.1.1483': attribute type 1 has an invalid length.
[  210.411118][ T9707] input: syz1 as /devices/virtual/input/input13
[  210.427069][ T9709] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1492'.
[  210.525128][ T9712] loop3: detected capacity change from 0 to 2048
[  210.531633][ T9715] netlink: 'syz.2.1495': attribute type 2 has an invalid length.
[  210.577112][ T9719] sctp: [Deprecated]: syz.1.1497 (pid 9719) Use of int in max_burst socket option.
[  210.577112][ T9719] Use struct sctp_assoc_value instead
[  210.721199][ T9730] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[  210.786334][ T9734] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1504'.
[  211.467835][  T794] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  211.791132][  T794] usb 4-1: config 0 has no interfaces?
[  211.797984][  T794] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  211.807684][  T794] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  211.812106][  T794] usb 4-1: Product: syz
[  211.813833][  T794] usb 4-1: Manufacturer: syz
[  211.821840][  T794] usb 4-1: config 0 descriptor??
[  212.035925][ T2208] usb 4-1: USB disconnect, device number 12
[  212.246936][ T9784] loop1: detected capacity change from 0 to 128
[  212.255169][ T9784] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal
[  212.508518][ T9791] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  212.654858][ T9797] loop1: detected capacity change from 0 to 512
[  212.702960][ T9797] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.718533][ T9797] ext4 filesystem being mounted at /444/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  212.771536][ T5943] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.850318][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1533'.
[  213.544926][ T9828] loop1: detected capacity change from 0 to 512
[  213.590794][ T9828] EXT4-fs: Ignoring removed oldalloc option
[  213.619187][ T9828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.624196][ T9828] ext4 filesystem being mounted at /456/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  213.757478][ T5943] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.525879][ T9864] netlink: 'syz.3.1557': attribute type 12 has an invalid length.
[  216.119857][   T33] audit: type=1326 audit(1755394053.608:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9881 comm="syz.1.1566" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe244d8ebe9 code=0x0
[  217.070998][ T9894] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  217.321815][ T9900] fuse: Bad value for 'fd'
[  219.820594][ T9933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1586'.
[  219.824630][ T9933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1586'.
[  219.828069][ T9933] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1586'.
[  220.152971][ T2208] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[  220.306333][ T2208] usb 2-1: config 0 has an invalid descriptor of length 89, skipping remainder of the config
[  220.315032][ T2208] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  220.319778][ T2208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.324927][ T2208] usb 2-1: Product: syz
[  220.329995][ T2208] usb 2-1: Manufacturer: syz
[  220.331983][ T2208] usb 2-1: SerialNumber: syz
[  220.347236][ T2208] usb 2-1: config 0 descriptor??
[  220.385923][ T9941] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.407356][  T731] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.410374][  T731] bridge0: port 1(bridge_slave_0) entered forwarding state
[  220.563444][ T2208] usb 2-1: bad CDC descriptors
[  220.566372][ T2208] usb 2-1: unsupported MDLM descriptors
[  220.573284][ T2208] usb 2-1: USB disconnect, device number 24
[  221.868433][ T9977] loop1: detected capacity change from 0 to 8
[  221.891389][ T9977] SQUASHFS error: Unable to read inode 0x127
[  221.909449][ T9977] loop1: detected capacity change from 0 to 128
[  221.961847][ T9977] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  221.968383][ T9977] ext4 filesystem being mounted at /478/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  222.714943][ T9975] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  223.072717][ T9999] vlan0: entered promiscuous mode
[  223.996302][T10028] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1625'.
[  224.362351][T10059] loop3: detected capacity change from 0 to 4096
[  224.367168][T10059] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  224.381392][T10059] ntfs3(loop3): MFT: r=0, expect seq=1 instead of 0!
[  224.384818][T10059] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  224.391290][T10059] ntfs3(loop3): Failed to load $MFT (-22).
[  224.524330][T10070] netlink: 'syz.3.1644': attribute type 1 has an invalid length.
[  224.526916][T10070] netlink: 'syz.3.1644': attribute type 2 has an invalid length.
[  224.887537][T10089] syz.3.1652(10089): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  224.980044][T10098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1656'.
[  225.320419][   T10] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  225.472356][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  225.477231][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  225.481877][   T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00
[  225.485877][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.493871][   T10] usb 4-1: config 0 descriptor??
[  226.228602][   T10] konepure 0003:1E7D:2DBE.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.3-1/input0
[  226.253515][   T10] usb 4-1: USB disconnect, device number 13
[  226.418008][T10124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1667'.
[  227.053159][T10139] loop3: detected capacity change from 0 to 8
[  227.060125][T10139] SQUASHFS error: Unable to read inode 0x11f
[  227.716394][T10155] loop3: detected capacity change from 0 to 32768
[  227.739294][T10155] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  227.753013][T10155] XFS (loop3): Ending clean mount
[  227.773913][T10155] XFS (loop3): Quotacheck needed: Please wait.
[  227.809688][T10155] XFS (loop3): Quotacheck: Done.
[  227.844262][ T7741] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  228.232513][T10174] netlink: 'syz.1.1685': attribute type 2 has an invalid length.
[  228.237262][T10174] netlink: 'syz.1.1685': attribute type 1 has an invalid length.
[  228.277322][T10175] loop3: detected capacity change from 0 to 2048
[  228.297267][T10175] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  229.268217][T10214] netlink: 'syz.1.1703': attribute type 1 has an invalid length.
[  230.727724][   T47] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  230.879574][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  230.884067][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  230.889148][   T47] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[  230.892743][   T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.899687][   T47] usb 4-1: config 0 descriptor??
[  231.213062][T10296] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1740'.
[  231.270944][ T5948] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  231.272800][T10298] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  231.314332][   T47] hkems 0003:2006:0118.000B: unknown main item tag 0x2
[  231.326438][   T47] hkems 0003:2006:0118.000B: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.3-1/input0
[  231.335665][   T47] hkems 0003:2006:0118.000B: no inputs found
[  231.342580][   T47] hkems 0003:2006:0118.000B: force feedback init failed
[  231.397870][T10304] tipc: Started in network mode
[  231.400017][T10304] tipc: Node identity ac14140f, cluster identity 4711
[  231.403612][T10304] tipc: New replicast peer: 255.255.255.255
[  231.409596][T10304] tipc: Enabled bearer <udp:syz2>, priority 10
[  231.521425][ T2208] usb 4-1: USB disconnect, device number 14
[  231.641928][T10316] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1750'.
[  232.198840][T10354] netlink: zone id is out of range
[  232.201214][T10354] netlink: zone id is out of range
[  232.203352][T10354] netlink: zone id is out of range
[  232.205985][T10354] netlink: zone id is out of range
[  232.209392][T10354] netlink: zone id is out of range
[  232.213512][T10354] netlink: zone id is out of range
[  232.223165][T10354] netlink: zone id is out of range
[  232.224929][T10354] netlink: zone id is out of range
[  232.226764][T10354] netlink: zone id is out of range
[  232.229408][T10354] netlink: zone id is out of range
[  232.307682][T10362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1773'.
[  232.346433][T10360] loop3: detected capacity change from 0 to 8192
[  232.413134][  T794] tipc: Node number set to 2886997007
[  232.492981][T10373] FAT-fs (loop3): error, clusters badly computed (271 != 1)
[  232.503992][T10373] FAT-fs (loop3): Filesystem has been set read-only
[  232.514632][T10373] FAT-fs (loop3): error, clusters badly computed (357 != 2)
[  232.528099][T10373] FAT-fs (loop3): error, clusters badly computed (422 != 3)
[  232.528945][T10360] FAT-fs (loop3): error, clusters badly computed (424 != 423)
[  232.539457][T10373] FAT-fs (loop3): error, clusters badly computed (444 != 4)
[  232.542760][T10373] FAT-fs (loop3): error, clusters badly computed (445 != 5)
[  232.545911][T10373] FAT-fs (loop3): error, clusters badly computed (446 != 6)
[  232.549472][T10360] FAT-fs (loop3): error, clusters badly computed (448 != 445)
[  232.549991][T10373] FAT-fs (loop3): error, clusters badly computed (448 != 7)
[  232.552986][T10360] FAT-fs (loop3): error, clusters badly computed (450 != 446)
[  232.772542][T10392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1787'.
[  232.925527][T10405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1793'.
[  233.310230][T10412] loop3: detected capacity change from 0 to 2048
[  233.319094][T10412] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  233.346875][T10412] syz.3.1795: attempt to access beyond end of device
[  233.346875][T10412] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  233.353309][T10414] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  233.393451][T10412] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  233.415860][T10412] Remounting filesystem read-only
[  233.435840][T10412] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16)
[  233.441184][T10412] NILFS (loop3): error -5 truncating bmap (ino=16)
[  233.565046][ T7741] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  233.876911][T10431] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  234.036546][  T794] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  234.186422][  T794] usb 4-1: Using ep0 maxpacket: 8
[  234.190475][  T794] usb 4-1: config index 0 descriptor too short (expected 6427, got 27)
[  234.194130][  T794] usb 4-1: config 0 has an invalid interface number: 21 but max is 0
[  234.198735][  T794] usb 4-1: config 0 has no interface number 0
[  234.200747][  T794] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  234.204328][  T794] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  234.208097][  T794] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  234.213945][  T794] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  234.216947][  T794] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  234.219593][  T794] usb 4-1: Product: syz
[  234.222629][  T794] usb 4-1: config 0 descriptor??
[  234.226812][T10426] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  234.363309][T10460] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1816'.
[  234.841003][  T794] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input14
[  235.005294][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1829'.
[  235.049989][    C1] keyspan_remote 4-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[  235.053563][   T47] usb 4-1: USB disconnect, device number 15
[  235.152524][T10495] netlink: 'syz.2.1833': attribute type 1 has an invalid length.
[  235.245506][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  235.290751][T10504] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1837'.
[  235.296226][T10504] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1837'.
[  236.193116][   T33] audit: type=1326 audit(236.144:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10520 comm="syz.2.1843" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0c878ebe9 code=0x0
[  236.653543][T10524] loop3: detected capacity change from 0 to 512
[  236.717981][T10524] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1844: invalid indirect mapped block 4294967295 (level 1)
[  236.745055][T10524] EXT4-fs (loop3): Remounting filesystem read-only
[  236.748455][T10524] EXT4-fs (loop3): 2 truncates cleaned up
[  236.751796][T10524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.793093][ T7741] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.793755][    C0] vcan0: j1939_tp_rxtimer: 0xffff8881089e2000: rx timeout, send abort
[  236.805154][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881089e2000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  238.503834][   T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  238.655409][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  238.659067][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  238.662401][   T10] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  238.665781][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.671043][   T10] usb 4-1: config 0 descriptor??
[  239.084298][   T10] samsung 0003:0419:0600.000C: collection stack underflow
[  239.086714][   T10] samsung 0003:0419:0600.000C: item 0 0 0 12 parsing failed
[  239.089571][   T10] samsung 0003:0419:0600.000C: parse failed
[  239.092610][   T10] samsung 0003:0419:0600.000C: probe with driver samsung failed with error -22
[  239.191155][ T8910] Bluetooth: hci1: unexpected event for opcode 0x1004
[  239.290996][   T10] usb 4-1: USB disconnect, device number 16
[  239.588506][T10585] overlayfs: failed to clone upperpath
[  240.548158][T10605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1875'.
[  240.705927][T10613] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1879'.
[  240.720812][   T33] audit: type=1326 audit(240.676:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10614 comm="syz.1.1880" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe244d8ebe9 code=0x0
[  240.782155][T10617] loop3: detected capacity change from 0 to 512
[  240.788836][T10617] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  240.805855][T10617] EXT4-fs (loop3): 1 truncate cleaned up
[  240.809747][T10617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.821684][T10617] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #2: block 13: comm syz.3.1881: bad entry in directory: inode out of bounds - offset=0, inode=184549378, rec_len=12, size=1024 fake=1
[  240.847981][ T7741] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.966607][T10628] smc: net device bond0 applied user defined pnetid SYZ2
[  241.236331][ T5903] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  241.388891][ T5903] usb 4-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51
[  241.393588][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.396666][ T5903] usb 4-1: Product: syz
[  241.398565][ T5903] usb 4-1: Manufacturer: syz
[  241.400386][ T5903] usb 4-1: SerialNumber: syz
[  241.405534][ T5903] usb 4-1: config 0 descriptor??
[  241.414539][ T5903] rndis_host 4-1:0.0: skipping garbage
[  241.416698][ T5903] rndis_host 4-1:0.0: More than one union descriptor, skipping ...
[  241.419711][ T5903] usb 4-1: bad CDC descriptors
[  241.424782][ T5903] cdc_acm 4-1:0.0: skipping garbage
[  241.427211][ T5903] cdc_acm 4-1:0.0: More than one union descriptor, skipping ...
[  241.583816][T10645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1893'.
[  241.620259][ T5903] usb 4-1: USB disconnect, device number 17
[  242.170871][T10651] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1896'.
[  242.255637][T10654] input: syz0 as /devices/virtual/input/input15
[  243.237397][T10680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1909'.
[  243.244487][ T8910] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  243.247922][ T8910] Bluetooth: hci1: Injecting HCI hardware error event
[  243.257174][   T55] Bluetooth: hci1: hardware error 0x00
[  243.496361][T10694] loop3: detected capacity change from 0 to 1024
[  243.515468][T10694] hfsplus: bad catalog folder entry
[  243.628750][ T8910] Bluetooth: hci0: unexpected event for opcode 0x200b
[  243.882380][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  243.920691][T10708] : entered promiscuous mode
[  244.421321][T10712] loop3: detected capacity change from 0 to 32768
[  244.431404][T10712] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1923 (10712)
[  244.446221][ T8910] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  244.474782][T10712] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  244.478750][T10712] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  244.486359][T10712] BTRFS info (device loop3): using free-space-tree
[  244.648431][ T8910] Bluetooth: hci2: unexpected event 0x2f length: 1017 > 260
[  244.667703][ T5948] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  244.835001][ T7741] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  245.056496][T10753] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1933'.
[  245.113480][T10755] loop3: detected capacity change from 0 to 4096
[  245.139128][T10756] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  245.168274][T10755] NILFS error (device loop3): nilfs_dotdot: directory #12 missing '.'
[  245.178261][T10755] Remounting filesystem read-only
[  245.198234][ T7741] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  245.320439][   T55] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  245.439145][T10766] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1940'.
[  245.487867][T10768] tipc: Enabling <eth:lo> not permitted
[  245.491548][T10768] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  246.101809][T10786] atomic_op ffff888127e88998 conn xmit_atomic 0000000000000000
[  246.249412][T10794] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  246.948922][T10811] autofs: Bad value for 'fd'
[  247.414121][T10814] loop3: detected capacity change from 0 to 32768
[  247.420772][T10814] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1961 (10814)
[  247.447094][T10814] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  247.456051][T10814] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  247.463977][T10814] BTRFS info (device loop3): using free-space-tree
[  247.635739][ T7741] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  247.894697][T10851] netlink: 'syz.1.1971': attribute type 66 has an invalid length.
[  248.404177][T10891] tc_dump_action: action bad kind
[  248.864699][T10915] net_ratelimit: 63 callbacks suppressed
[  248.864716][T10915] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  248.870441][ T5903] IPVS: starting estimator thread 0...
[  248.959951][T10917] IPVS: using max 38 ests per chain, 91200 per kthread
[  249.238802][T10940] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2012'.
[  249.244102][T10940] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  249.287649][T10943] netlink: 'syz.2.2014': attribute type 21 has an invalid length.
[  249.295231][T10943] netlink: 'syz.2.2014': attribute type 6 has an invalid length.
[  249.309853][T10943] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2014'.
[  250.132211][T10974] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2028'.
[  250.420164][T10984] netlink: 'syz.3.2033': attribute type 1 has an invalid length.
[  250.422765][T10984] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2033'.
[  250.745305][T10990] loop3: detected capacity change from 0 to 32768
[  250.756323][T10990] XFS: attr2 mount option is deprecated.
[  250.769697][T10990] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  250.790463][T10990] XFS (loop3): Ending clean mount
[  250.799890][T10990] XFS (loop3): Quotacheck needed: Please wait.
[  250.843747][T10990] XFS (loop3): Quotacheck: Done.
[  250.870665][ T7741] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  251.181710][ T8910] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  251.188911][ T8910] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  251.192162][ T8910] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  251.194952][ T8910] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  251.197840][ T8910] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  251.776175][T11015] chnl_net:caif_netlink_parms(): no params data found
[  251.843637][T11015] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.845982][T11015] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.849009][T11015] bridge_slave_0: entered allmulticast mode
[  251.852194][T11015] bridge_slave_0: entered promiscuous mode
[  251.857717][T11015] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.860132][T11015] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.862934][T11015] bridge_slave_1: entered allmulticast mode
[  251.865882][T11015] bridge_slave_1: entered promiscuous mode
[  251.892228][T11015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  251.897625][T11015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  251.928134][T11015] team0: Port device team_slave_0 added
[  251.932432][T11015] team0: Port device team_slave_1 added
[  251.982493][T11015] batman_adv: batadv0: Adding interface: batadv_slave_0
[  251.992823][T11015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  252.006093][T11015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  252.011116][T11015] batman_adv: batadv0: Adding interface: batadv_slave_1
[  252.013300][T11015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  252.022416][T11015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  252.058200][T11015] hsr_slave_0: entered promiscuous mode
[  252.060590][T11015] hsr_slave_1: entered promiscuous mode
[  252.063180][T11015] debugfs: 'hsr0' already exists in 'hsr'
[  252.065073][T11015] Cannot create hsr debugfs directory
[  252.562594][T11015] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  252.582033][T11015] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  252.617217][T11015] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  252.630933][T11015] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  252.778742][T11015] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.781828][T11015] bridge0: port 2(bridge_slave_1) entered forwarding state
[  252.785316][T11015] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.788545][T11015] bridge0: port 1(bridge_slave_0) entered forwarding state
[  252.845083][ T4592] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.853824][ T4592] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.045940][T11015] 8021q: adding VLAN 0 to HW filter on device bond0
[  253.112733][T11015] 8021q: adding VLAN 0 to HW filter on device team0
[  253.144465][ T4592] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.147659][ T4592] bridge0: port 1(bridge_slave_0) entered forwarding state
[  253.181670][ T4592] bridge0: port 2(bridge_slave_1) entered blocking state
[  253.184710][ T4592] bridge0: port 2(bridge_slave_1) entered forwarding state
[  253.237387][ T8910] Bluetooth: hci1: command tx timeout
[  253.914642][T11065] lo speed is unknown, defaulting to 1000
[  253.919324][T11065] lo speed is unknown, defaulting to 1000
[  253.925458][T11015] 8021q: adding VLAN 0 to HW filter on device batadv0
[  253.933065][T11065] lo speed is unknown, defaulting to 1000
[  253.941460][T11065] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  253.952046][T11063] loop3: detected capacity change from 0 to 1024
[  253.972426][T11065] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  253.990527][T11063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  254.113531][T11065] lo speed is unknown, defaulting to 1000
[  254.127090][T11065] lo speed is unknown, defaulting to 1000
[  254.131837][T11065] lo speed is unknown, defaulting to 1000
[  254.142119][T11065] lo speed is unknown, defaulting to 1000
[  254.147720][T11065] lo speed is unknown, defaulting to 1000
[  254.497172][T11015] veth0_vlan: entered promiscuous mode
[  254.510990][T11015] veth1_vlan: entered promiscuous mode
[  254.605366][T11015] veth0_macvtap: entered promiscuous mode
[  254.643127][T11015] veth1_macvtap: entered promiscuous mode
[  254.744490][T11015] batman_adv: batadv0: Interface activated: batadv_slave_0
[  254.848063][T11015] batman_adv: batadv0: Interface activated: batadv_slave_1
[  254.904165][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  254.924030][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  254.994564][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  255.022543][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  255.316443][ T8910] Bluetooth: hci1: command tx timeout
[  255.409989][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.413621][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  255.652225][ T7741] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.657927][   T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.664904][   T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.763611][T11086] loop3: detected capacity change from 0 to 128
[  255.769183][ T5716] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  255.787497][ T5716] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.091463][ T5716] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  256.105015][ T5716] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.153750][ T4592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.158475][ T4592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.260142][ T5716] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  256.263781][ T5716] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.821433][T11108] netlink: 'syz.4.2073': attribute type 3 has an invalid length.
[  256.824422][T11108] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2073'.
[  257.458448][ T5716] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  257.513381][ T5716] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.391735][ T8910] Bluetooth: hci1: command tx timeout
[  258.463215][T11119] loop3: detected capacity change from 0 to 1024
[  258.466100][T11119] EXT4-fs: Ignoring removed nobh option
[  258.468114][T11119] EXT4-fs: Ignoring removed bh option
[  258.515392][T11119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  258.757426][ T7741] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.971700][ T5716] macvlan2: left promiscuous mode
[  258.975458][ T5716] bond0: left promiscuous mode
[  258.992813][ T5716] bridge0: port 3(macvlan2) entered disabled state
[  259.041751][ T5716] bridge_slave_1: left allmulticast mode
[  259.051068][ T5716] bridge_slave_1: left promiscuous mode
[  259.059081][ T5716] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.108641][ T5716] bridge_slave_0: left allmulticast mode
[  259.111950][ T5716] bridge_slave_0: left promiscuous mode
[  259.122971][ T5716] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.400238][ T5716] bond_slave_0: left promiscuous mode
[  259.402533][ T5716] dummy0: left promiscuous mode
[  259.409810][ T5716] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[  260.314840][ T5716] erspan0 (unregistering): left promiscuous mode
[  260.371962][ T5716] gretap0 (unregistering): left promiscuous mode
[  260.400800][T11148] loop3: detected capacity change from 0 to 1024
[  260.434175][ T8910] Bluetooth: hci1: command tx timeout
[  260.485434][T11148] hfsplus: walked past end of dir
[  260.956036][ T5716] bond0 (unregistering): left allmulticast mode
[  260.958661][ T5716] bond_slave_0: left allmulticast mode
[  260.961105][ T5716] dummy0: left allmulticast mode
[  260.963901][ T5716] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  260.988646][ T5716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  260.998927][ T5716] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  261.009785][ T5716] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  261.027541][ T5716] bond0 (unregistering): Released all slaves
[  261.164924][ T5716] k*]: left promiscuous mode
[  261.269990][ T5716] : left promiscuous mode
[  261.384379][T11184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2101'.
[  261.422469][ T5716] tipc: Disabling bearer <udp:syz2>
[  261.433163][ T5716] tipc: Left network mode
[  262.588105][ T5716] hsr_slave_0: left promiscuous mode
[  262.603374][ T5716] hsr_slave_1: left promiscuous mode
[  262.606043][ T5716] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  262.608917][ T5716] batman_adv: batadv0: Removing interface: batadv_slave_0
[  262.625096][ T5716] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  262.636662][ T5716] batman_adv: batadv0: Removing interface: batadv_slave_1
[  262.670925][ T5716] veth1_macvtap: left promiscuous mode
[  262.737084][ T5716] veth0_macvtap: left promiscuous mode
[  262.752424][ T5716] veth1_vlan: left promiscuous mode
[  262.974304][T11214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2110'.
[  264.187302][ T5716] team0 (unregistering): Port device team_slave_1 removed
[  264.985986][T11242] dns_resolver: Unsupported content type (218)
[  265.126144][T11246] netlink: 9896 bytes leftover after parsing attributes in process `syz.4.2120'.
[  265.191522][ T5716] IPVS: stop unused estimator thread 0...
[  265.320400][ T2208] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  265.472202][ T2208] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  265.476001][ T2208] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 24
[  265.481372][ T2208] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  265.484222][ T2208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.487741][ T2208] usb 4-1: Product: syz
[  265.491459][ T2208] usb 4-1: Manufacturer: syz
[  265.494616][ T2208] usb 4-1: SerialNumber: syz
[  265.502059][ T2208] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  265.506046][ T2208] cdc_ncm 4-1:1.0: bind() failure
[  265.513530][ T2208] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  265.515923][ T2208] cdc_ncm 4-1:1.1: bind() failure
[  265.707311][ T5903] usb 4-1: USB disconnect, device number 18
[  265.959895][T11288] loop4: detected capacity change from 0 to 512
[  266.023659][T11288] GUP no longer grows the stack in syz.4.2130 (11288): 200000004000-20000000a000 (200000002000)
[  266.028516][T11288] CPU: 0 UID: 0 PID: 11288 Comm: syz.4.2130 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  266.028537][T11288] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  266.028546][T11288] Call Trace:
[  266.028552][T11288]  <TASK>
[  266.028559][T11288]  dump_stack_lvl+0x189/0x250
[  266.028585][T11288]  ? __pfx_dump_stack_lvl+0x10/0x10
[  266.028603][T11288]  ? __pfx__printk+0x10/0x10
[  266.028620][T11288]  ? find_vma+0xe7/0x160
[  266.028649][T11288]  __get_user_pages+0x24d0/0x2ce0
[  266.028681][T11288]  ? mtree_load+0x100/0x700
[  266.028710][T11288]  get_user_pages_remote+0x2f1/0xad0
[  266.028728][T11288]  ? __pfx_mtree_load+0x10/0x10
[  266.028750][T11288]  ? __pfx_get_user_pages_remote+0x10/0x10
[  266.028769][T11288]  ? __access_remote_vm+0x367/0x7d0
[  266.028809][T11288]  __access_remote_vm+0x211/0x7d0
[  266.028838][T11288]  ? __pfx___access_remote_vm+0x10/0x10
[  266.028861][T11288]  ? alloc_pages_noprof+0xbe/0x190
[  266.028885][T11288]  proc_pid_cmdline_read+0x430/0x810
[  266.028909][T11288]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  266.028925][T11288]  ? rw_verify_area+0x2a6/0x4d0
[  266.028947][T11288]  vfs_readv+0x5aa/0x850
[  266.028961][T11288]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  266.029002][T11288]  ? __pfx_vfs_readv+0x10/0x10
[  266.029030][T11288]  ? __fget_files+0x2a/0x420
[  266.029047][T11288]  ? __fget_files+0x3a0/0x420
[  266.029059][T11288]  ? __fget_files+0x2a/0x420
[  266.029078][T11288]  __x64_sys_preadv+0x197/0x2a0
[  266.029098][T11288]  ? __pfx___se_sys_futex+0x10/0x10
[  266.029117][T11288]  ? __pfx___x64_sys_preadv+0x10/0x10
[  266.029135][T11288]  ? rcu_is_watching+0x15/0xb0
[  266.029154][T11288]  ? do_syscall_64+0xbe/0x3b0
[  266.029177][T11288]  do_syscall_64+0xfa/0x3b0
[  266.029195][T11288]  ? lockdep_hardirqs_on+0x9c/0x150
[  266.029213][T11288]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.029233][T11288]  ? exc_page_fault+0x9f/0xf0
[  266.029253][T11288]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.029267][T11288] RIP: 0033:0x7fe8b698ebe9
[  266.029280][T11288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  266.029292][T11288] RSP: 002b:00007fe8b7891038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  266.029307][T11288] RAX: ffffffffffffffda RBX: 00007fe8b6bb5fa0 RCX: 00007fe8b698ebe9
[  266.029318][T11288] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000005
[  266.029328][T11288] RBP: 00007fe8b6a11e19 R08: 0000000021000008 R09: 0000000000000000
[  266.029337][T11288] R10: 0000000000000304 R11: 0000000000000246 R12: 0000000000000000
[  266.029345][T11288] R13: 00007fe8b6bb6038 R14: 00007fe8b6bb5fa0 R15: 00007ffe8c28eea8
[  266.029369][T11288]  </TASK>
[  266.548458][T11313] loop4: detected capacity change from 0 to 4096
[  266.663606][T11313] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  267.405255][T11334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2142'.
[  267.412475][T11334] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2142'.
[  267.447256][T11336] loop4: detected capacity change from 0 to 16
[  267.468377][T11336] erofs (device loop4): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  267.493570][T11336] erofs (device loop4): mounted with root inode @ nid 36.
[  267.493575][T11341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2144'.
[  267.521199][T11336] erofs (device loop4): read error -117 @ 0 of nid 36
[  268.620507][T11370] loop4: detected capacity change from 0 to 128
[  268.863239][T11370] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  268.873094][T11370] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  268.926410][T11015] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  268.975688][T11380] 9pnet: p9_errstr2errno: server reported unknown error @΂00000000000000000005
[  269.013919][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2159'.
[  269.081037][T11385] loop3: detected capacity change from 0 to 128
[  269.084459][T11385] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4622: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  269.090116][T11385] EXT4-fs (loop3): Encoding requested by superblock is unknown
[  269.245181][ T8910] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  269.250668][ T8910] Bluetooth: hci1: Injecting HCI hardware error event
[  269.257017][ T8910] Bluetooth: hci1: hardware error 0x00
[  269.756187][T11394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2163'.
[  270.103915][T11413] hugetlbfs: syz.4.2166 (11413): Using mlock ulimits for SHM_HUGETLB is obsolete
[  270.113774][T11415] netlink: 'syz.3.2167': attribute type 4 has an invalid length.
[  270.315779][T11421] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  270.646256][T11439] loop3: detected capacity change from 0 to 8
[  271.763958][T11480] netlink: 'syz.4.2175': attribute type 26 has an invalid length.
[  271.787307][ T8910] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  272.071882][T11500] loop4: detected capacity change from 0 to 1024
[  272.085101][   T33] audit: type=1326 audit(2000000013.076:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11501 comm="syz.2.2187" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c878ebe9 code=0x7ffc0000
[  272.109895][   T33] audit: type=1326 audit(2000000013.096:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11501 comm="syz.2.2187" exe="/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fc0c878ebe9 code=0x7ffc0000
[  272.120425][   T33] audit: type=1326 audit(2000000013.096:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11501 comm="syz.2.2187" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c878ebe9 code=0x7ffc0000
[  272.121247][T11500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  272.129525][   T33] audit: type=1326 audit(2000000013.096:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11501 comm="syz.2.2187" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c878ebe9 code=0x7ffc0000
[  272.177996][T11015] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.484676][T11524] sp0: Synchronizing with TNC
[  273.511379][T11546] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2200'.
[  273.895833][T11554] loop3: detected capacity change from 0 to 32768
[  273.929835][T11559] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2206'.
[  274.269355][T11567] loop4: detected capacity change from 0 to 4096
[  274.352058][T11563] loop3: detected capacity change from 0 to 32768
[  274.361643][T11563] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section clean: entry type (unknown jset_entry_type 255) overruns end of section
[  274.361643][T11563] clean (size 2912):
[  274.361643][T11563] flags:          0
[  274.361643][T11563] journal_seq:    13
[  274.361643][T11563] usage: type=inodes v=8
[  274.361643][T11563] usage: type=key_version v=2
[  274.361643][T11563] usage: type=reserved v=0
[  274.361643][T11563] usage: type=reserved v=0
[  274.361643][T11563] usage: type=reserved v=0
[  274.361643][T11563] usage: type=reserved v=0
[  274.361643][T11563] data_usage: btree: 1/1 [0]=2816
[  274.361643][T11563] data_usage: journal: 1/1 [0]=0
[  274.361643][T11563] data_usage: user: 1/1 [0]=16
[  274.361643][T11563] datetime: 0
[  274.361643][T11563] clock: read=0
[  274.361643][T11563] clock: write=1280
[  274.361643][T11563] dev_usage: dev=1179915  
[  274.361643][T11563] 
[  274.399111][T11563] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  274.516223][T11460] ntfs3(loop4): ino=5, mi_enum_attr
[  275.127699][ T2208] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  275.310549][ T2208] usb 4-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55
[  275.314092][ T2208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.317413][ T2208] usb 4-1: Product: syz
[  275.319250][ T2208] usb 4-1: Manufacturer: syz
[  275.321144][ T2208] usb 4-1: SerialNumber: syz
[  275.325869][ T2208] usb 4-1: config 0 descriptor??
[  275.334413][ T2208] gspca_main: sonixb-2.14.0 probing 0c45:60a8
[  275.728272][T11603] netlink: 'syz.2.2224': attribute type 5 has an invalid length.
[  275.731693][T11603] netlink: 'syz.2.2224': attribute type 5 has an invalid length.
[  275.734870][T11603] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2224'.
[  275.851116][ T2208] input: sonixb as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16
[  275.975741][T11604] loop4: detected capacity change from 0 to 32768
[  276.008485][T11604] read_mapping_page failed!
[  276.010005][T11604] ERROR: (device loop4): txCommit: 
[  276.010005][T11604] 
[  276.020062][T11604] jfs_mkdir: dtSearch returned -17
[  276.062124][ T5998] usb 4-1: USB disconnect, device number 19
[  276.415350][T11622] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  276.417848][T11622] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  276.422196][T11622] vhci_hcd vhci_hcd.0: Device attached
[  276.428742][T11622] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5)
[  276.431230][T11622] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  276.434477][T11622] vhci_hcd vhci_hcd.0: Device attached
[  276.441798][T11622] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7)
[  276.444290][T11622] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  276.448675][T11622] vhci_hcd vhci_hcd.0: Device attached
[  276.454390][T11622] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(9)
[  276.456956][T11622] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  276.460091][T11622] vhci_hcd vhci_hcd.0: Device attached
[  276.465248][T11622] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11)
[  276.467792][T11622] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  276.471932][T11622] vhci_hcd vhci_hcd.0: Device attached
[  276.518627][T11631] vhci_hcd: connection closed
[  276.519015][T11623] vhci_hcd: connection closed
[  276.519144][T11629] vhci_hcd: connection closed
[  276.522994][T11627] vhci_hcd: connection closed
[  276.523304][T11625] vhci_hcd: connection closed
[  276.525278][T11096] vhci_hcd: stop threads
[  276.531323][T11096] vhci_hcd: release socket
[  276.533068][T11096] vhci_hcd: disconnect device
[  276.538239][T11096] vhci_hcd: stop threads
[  276.540007][T11096] vhci_hcd: release socket
[  276.546063][T11096] vhci_hcd: disconnect device
[  276.550166][T11096] vhci_hcd: stop threads
[  276.552431][T11096] vhci_hcd: release socket
[  276.556247][T11096] vhci_hcd: disconnect device
[  276.558581][T11096] vhci_hcd: stop threads
[  276.560437][T11096] vhci_hcd: release socket
[  276.562354][T11096] vhci_hcd: disconnect device
[  276.564595][T11096] vhci_hcd: stop threads
[  276.568874][T11096] vhci_hcd: release socket
[  276.570802][T11096] vhci_hcd: disconnect device
[  276.616917][ T2208] vhci_hcd: vhci_device speed not set
[  276.680462][T11636] netlink: 'syz.3.2235': attribute type 3 has an invalid length.
[  276.683785][T11636] netlink: 'syz.3.2235': attribute type 1 has an invalid length.
[  276.688044][T11636] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2235'.
[  277.283747][T11667] binder: 11666:11667 ioctl c0046209 0 returned -22
[  278.084329][  T794] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  278.235766][  T794] usb 5-1: config 8 interface 0 has no altsetting 0
[  278.242955][  T794] usb 5-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=fb.bc
[  278.246687][  T794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.458619][  T794] usb 5-1: string descriptor 0 read error: -71
[  278.469504][  T794] pwc: Logitech QuickCam detected (reserved ID).
[  278.473520][  T794] pwc: Failed to set LED on/off time (-71)
[  278.484445][  T794] pwc: send_video_command error -71
[  278.486424][  T794] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  278.488919][  T794] Philips webcam 5-1:8.0: probe with driver Philips webcam failed with error -71
[  278.493790][  T794] usb 5-1: USB disconnect, device number 2
[  279.164877][T11737] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2267'.
[  279.421295][T11751] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2273'.
[  279.580619][T11757] loop3: detected capacity change from 0 to 256
[  279.595460][T11757] exfat: Deprecated parameter 'utf8'
[  279.597350][T11757] exfat: Deprecated parameter 'utf8'
[  279.625604][T11757] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7bac8b1f, utbl_chksum : 0xe619d30d)
[  280.311668][T11786] tipc: Started in network mode
[  280.318026][T11786] tipc: Node identity debdcc5882cc, cluster identity 4711
[  280.320331][T11786] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  280.328181][T11786] syzkaller0: entered promiscuous mode
[  280.330095][T11786] syzkaller0: entered allmulticast mode
[  280.370527][T11786] tipc: Resetting bearer <eth:syzkaller0>
[  280.376875][T11785] tipc: Resetting bearer <eth:syzkaller0>
[  280.417420][T11785] tipc: Disabling bearer <eth:syzkaller0>
[  280.734915][T11810] loop3: detected capacity change from 0 to 512
[  280.749765][T11810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  280.797825][ T7741] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.877404][   T33] audit: type=1326 audit(2000000021.880:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11814 comm="syz.2.2294" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0c878ebe9 code=0x0
[  281.047262][   T33] audit: type=1400 audit(2000000022.051:194): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5D15F47DB2D pid=11826 comm="syz.3.2299"
[  281.636947][T11843] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2306'.
[  281.647254][    T9] IPVS: starting estimator thread 0...
[  281.690298][T11848] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  281.693549][T11848] IPv6: NLM_F_CREATE should be set when creating new route
[  281.710480][T11848] lo: entered allmulticast mode
[  281.718216][T11848] tunl0: entered allmulticast mode
[  281.724987][T11848] gre0: entered allmulticast mode
[  281.737610][T11848] gretap0: entered allmulticast mode
[  281.742785][T11846] IPVS: using max 37 ests per chain, 88800 per kthread
[  281.756108][T11848] erspan0: entered allmulticast mode
[  281.771074][T11848] ip_vti0: entered allmulticast mode
[  281.778659][T11848] ip6_vti0: entered allmulticast mode
[  281.787391][T11848] sit0: entered allmulticast mode
[  281.797701][T11848] ip6tnl0: entered allmulticast mode
[  281.809818][T11848] ip6gre0: entered allmulticast mode
[  281.827088][T11848] syz_tun: entered allmulticast mode
[  281.832989][T11848] ip6gretap0: entered allmulticast mode
[  281.837664][T11848] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.841734][T11848] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.848245][T11848] bridge0: entered allmulticast mode
[  281.853062][T11848] vcan0: entered allmulticast mode
[  281.859389][T11848] bond0: entered allmulticast mode
[  281.862502][T11848] bond_slave_0: entered allmulticast mode
[  281.865908][T11848] bond_slave_1: entered allmulticast mode
[  281.875316][T11848] team0: entered allmulticast mode
[  281.877456][T11848] team_slave_0: entered allmulticast mode
[  281.879740][T11848] team_slave_1: entered allmulticast mode
[  281.888952][T11848] dummy0: entered allmulticast mode
[  281.899448][T11848] nlmon0: entered allmulticast mode
[  281.903271][T11848] caif0: entered allmulticast mode
[  281.905842][T11848] batadv0: entered allmulticast mode
[  281.912906][T11848] vxcan0: entered allmulticast mode
[  281.915981][T11848] vxcan1: entered allmulticast mode
[  281.919397][T11848] veth0: entered allmulticast mode
[  281.931023][T11848] veth1: entered allmulticast mode
[  281.944525][T11848] wg0: entered allmulticast mode
[  281.949729][T11848] wg1: entered allmulticast mode
[  281.996362][T11848] wg2: entered allmulticast mode
[  281.999948][T11848] veth0_to_bridge: entered allmulticast mode
[  282.007475][T11848] veth1_to_bridge: entered allmulticast mode
[  282.014951][T11848] veth0_to_bond: entered allmulticast mode
[  282.037608][T11848] veth1_to_bond: entered allmulticast mode
[  282.049035][T11848] veth0_to_team: entered allmulticast mode
[  282.056605][T11848] veth1_to_team: entered allmulticast mode
[  282.061782][T11848] veth0_to_batadv: entered allmulticast mode
[  282.065982][T11848] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  282.068847][T11848] batadv_slave_0: entered allmulticast mode
[  282.083599][T11848] veth1_to_batadv: entered allmulticast mode
[  282.089249][T11848] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  282.097386][T11848] batadv_slave_1: entered allmulticast mode
[  282.107663][T11848] xfrm0: entered allmulticast mode
[  282.114531][T11848] veth0_to_hsr: entered allmulticast mode
[  282.119703][T11848] hsr_slave_0: entered allmulticast mode
[  282.123713][T11848] veth1_to_hsr: entered allmulticast mode
[  282.127248][T11848] hsr_slave_1: entered allmulticast mode
[  282.133863][T11848] hsr0: entered allmulticast mode
[  282.137675][T11848] veth1_virt_wifi: entered allmulticast mode
[  282.142924][T11848] veth0_virt_wifi: entered allmulticast mode
[  282.149078][T11848] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  282.154618][T11848] veth1_vlan: entered allmulticast mode
[  282.159994][T11848] veth0_vlan: entered allmulticast mode
[  282.169357][T11848] vlan0: entered allmulticast mode
[  282.171428][T11848] vlan1: entered allmulticast mode
[  282.175827][T11848] macvlan0: entered allmulticast mode
[  282.193566][T11848] macvlan1: entered allmulticast mode
[  282.205256][T11848] ipvlan0: entered allmulticast mode
[  282.207485][T11848] ipvlan1: entered allmulticast mode
[  282.210113][T11848] veth1_macvtap: entered allmulticast mode
[  282.217250][T11848] veth0_macvtap: entered allmulticast mode
[  282.224363][T11848] macvtap0: entered allmulticast mode
[  282.239247][T11848] macsec0: entered allmulticast mode
[  282.259956][T11848] geneve0: entered allmulticast mode
[  282.283728][T11848] geneve1: entered allmulticast mode
[  282.294528][T11848] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  282.303848][T11848] netdevsim netdevsim4 netdevsim1: entered allmulticast mode
[  282.315728][T11848] netdevsim netdevsim4 netdevsim2: entered allmulticast mode
[  282.333445][T11848] netdevsim netdevsim4 netdevsim3: entered allmulticast mode
[  282.353317][T11848] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode
[  282.363159][T11848] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode
[  282.367942][T11848] vti0: entered allmulticast mode
[  282.371078][T11096] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  282.374192][T11096] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  282.377333][T11096] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  282.381249][T11096] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  282.529051][T11873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2318'.
[  282.767636][T11885] loop3: detected capacity change from 0 to 4096
[  282.799710][T11885] ntfs3(loop3): Failed to load $MFT (-22).
[  284.280879][   T33] audit: type=1800 audit(2000000025.282:195): pid=11925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2339" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  284.551450][T11940] loop3: detected capacity change from 0 to 8
[  284.557089][T11940] SQUASHFS error: zlib decompression failed, data probably corrupt
[  284.560379][T11940] SQUASHFS error: Failed to read block 0x9b: -5
[  284.565318][T11940] SQUASHFS error: Unable to read metadata cache entry [99]
[  284.569389][T11940] SQUASHFS error: Unable to read inode 0x127
[  285.220824][   T24] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  285.394172][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  285.406893][   T24] usb 5-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54
[  285.409944][   T24] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7
[  285.413513][   T24] usb 5-1: Product: syz
[  285.416501][   T24] usb 5-1: Manufacturer: syz
[  285.418581][   T24] usb 5-1: SerialNumber: syz
[  285.433754][   T24] usb 5-1: config 0 descriptor??
[  285.456131][   T24] gspca_main: conex-2.14.0 probing 0572:0041
[  285.571456][T11954] netlink: 'syz.2.2351': attribute type 4 has an invalid length.
[  285.863394][   T24] usb 5-1: USB disconnect, device number 3
[  286.303153][T11972] loop4: detected capacity change from 0 to 512
[  286.320770][T11972] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  286.332516][T11972] EXT4-fs (loop4): external journal device major/minor numbers have changed
[  286.336022][T11972] EXT4-fs (loop4): filesystem has both journal inode and journal device!
[  286.428874][T11982] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2364'.
[  286.790061][ T5314] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  286.939694][ T5314] usb 4-1: Using ep0 maxpacket: 16
[  286.944172][ T5314] usb 4-1: unable to get BOS descriptor or descriptor too short
[  286.952223][ T5314] usb 4-1: config 9 has an invalid interface number: 111 but max is 0
[  286.955428][ T5314] usb 4-1: config 9 has no interface number 0
[  286.958527][ T5314] usb 4-1: config 9 interface 111 has no altsetting 0
[  286.964102][ T5314] usb 4-1: New USB device found, idVendor=05ac, idProduct=2536, bcdDevice=e0.5e
[  286.967777][ T5314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.972286][ T5314] usb 4-1: Product: syz
[  286.974091][ T5314] usb 4-1: Manufacturer: syz
[  286.975930][ T5314] usb 4-1: SerialNumber: syz
[  287.200992][ T5314] usb 4-1: USB disconnect, device number 20
[  288.232057][T12026] loop3: detected capacity change from 0 to 2048
[  288.269730][ T6100]  loop3: p3 p4 < >
[  288.298281][T12026]  loop3: p3 p4 < >
[  288.506887][ T5939] udevd[5939]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  288.523657][ T6100] udevd[6100]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  289.457584][T12062] netlink: 'syz.2.2401': attribute type 2 has an invalid length.
[  289.667578][T12068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2405'.
[  290.206102][T12080] loop3: detected capacity change from 0 to 32768
[  290.246030][T12080] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  290.345684][ T7741] ocfs2: Unmounting device (7,3) on (node local)
[  290.406195][   T33] audit: type=1326 audit(2000000031.405:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12104 comm="syz.2.2422" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c878ebe9 code=0x7ffc0000
[  290.421515][   T33] audit: type=1326 audit(2000000031.415:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12104 comm="syz.2.2422" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fc0c878ebe9 code=0x7ffc0000
[  290.429333][   T55] Bluetooth: hci3: unexpected event 0x0f length: 0 < 4
[  290.445358][   T33] audit: type=1326 audit(2000000031.415:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12104 comm="syz.2.2422" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c878ebe9 code=0x7ffc0000
[  290.460091][   T33] audit: type=1326 audit(2000000031.415:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12104 comm="syz.2.2422" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c878ebe9 code=0x7ffc0000
[  290.718493][T12125] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2431'.
[  290.722307][T12125] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2431'.
[  290.726168][T12125] netlink: 'syz.2.2431': attribute type 6 has an invalid length.
[  290.731375][T12125] netlink: 'syz.2.2431': attribute type 5 has an invalid length.
[  290.734544][T12125] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2431'.
[  290.826470][T12129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2433'.
[  290.848915][    T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  290.992841][T12139] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2438'.
[  290.998584][    T9] usb 4-1: Using ep0 maxpacket: 32
[  291.000051][T12139] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2438'.
[  291.002454][    T9] usb 4-1: config 0 has too many interfaces: 66, using maximum allowed: 32
[  291.009599][    T9] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  291.017551][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  291.021745][    T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 66
[  291.028678][    T9] usb 4-1: New USB device found, idVendor=d084, idProduct=c487, bcdDevice=f4.ce
[  291.032375][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.035526][    T9] usb 4-1: Product: syz
[  291.037156][    T9] usb 4-1: Manufacturer: syz
[  291.040712][    T9] usb 4-1: SerialNumber: syz
[  291.045045][    T9] usb 4-1: config 0 descriptor??
[  291.261190][ T5314] usb 4-1: USB disconnect, device number 21
[  292.417333][   T55] Bluetooth: hci3: command 0x1003 tx timeout
[  292.420374][ T8910] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  292.493745][T12182] loop3: detected capacity change from 0 to 4096
[  292.521771][T12186] loop4: detected capacity change from 0 to 1024
[  292.525275][T12186] EXT4-fs: Ignoring removed bh option
[  292.547695][T12189] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  292.589439][T12186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  292.611841][T12186] EXT4-fs error (device loop4): ext4_get_first_dir_block:3544: inode #11: comm syz.4.2459: directory missing '.'
[  292.638277][T12186] EXT4-fs (loop4): Remounting filesystem read-only
[  292.651638][T12196] loop3: detected capacity change from 0 to 1024
[  292.669694][T12196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  292.685456][T12196] ext4 filesystem being mounted at /516/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  292.704010][T11015] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.745460][ T7741] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  292.855111][T12204] loop3: detected capacity change from 0 to 256
[  292.886274][T12204] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[  293.070576][T12210] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2468'.
[  293.074519][T12210] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2468'.
[  293.548057][T12240] netlink: 'syz.2.2478': attribute type 9 has an invalid length.
[  293.551806][T12240] netlink: 'syz.2.2478': attribute type 7 has an invalid length.
[  293.554934][T12240] netlink: 'syz.2.2478': attribute type 8 has an invalid length.
[  293.972263][T12238] loop4: detected capacity change from 0 to 32768
[  293.982027][T12238] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2481 (12238)
[  294.031643][T12238] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  294.038574][T12238] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  294.082119][T12238] BTRFS info (device loop4): rebuilding free space tree
[  294.127725][T12238] BTRFS info (device loop4): disabling free space tree
[  294.130982][T12238] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  294.137839][T12238] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  294.298403][ T5998] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  294.383780][T11015] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  294.447284][T12267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2485'.
[  294.457294][ T5998] usb 4-1: Using ep0 maxpacket: 16
[  294.460737][T12267] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  294.470308][ T5998] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  294.473537][ T5998] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  294.480136][ T5998] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  294.483319][ T5998] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  294.489872][ T5998] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  294.505382][ T5998] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  294.509605][ T5998] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  294.516089][ T5998] usb 4-1: Manufacturer: syz
[  294.519185][ T5998] usb 4-1: config 0 descriptor??
[  294.785898][ T5998] rc_core: IR keymap rc-hauppauge not found
[  294.788510][ T5998] Registered IR keymap rc-empty
[  294.791223][ T5998] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  294.806429][ T5998] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  294.826819][ T5998] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  294.831783][ T5998] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input17
[  294.839483][ T5998] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  294.855844][ T5998] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  294.876313][T12276] loop4: detected capacity change from 0 to 32768
[  294.885912][ T5998] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  294.903951][T12276] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  294.919245][ T5998] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  294.924335][T12276] XFS (loop4): Ending clean mount
[  294.928397][T12276] XFS (loop4): Quotacheck needed: Please wait.
[  294.937974][ T5998] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  294.942283][    C1] mceusb 4-1:0.0: short-range (0x3e) receiver active
[  294.962527][T12276] XFS (loop4): Quotacheck: Done.
[  294.966417][ T5998] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  294.980868][   T33] audit: type=1800 audit(2000000035.987:200): pid=12276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2489" name="bus" dev="loop4" ino=9291 res=0 errno=0
[  294.996951][ T5998] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  295.006774][T11015] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  295.027650][ T5998] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  295.050513][ T5998] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  295.071597][ T5998] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  295.088568][ T5998] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  295.093523][ T5998] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x3e active)
[  295.207863][ T5998] usb 4-1: USB disconnect, device number 22
[  295.489376][T12293] 
[  295.490545][T12293] =============================
[  295.492127][T12293] WARNING: suspicious RCU usage
[  295.494486][T12293] 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 Not tainted
[  295.499023][T12293] -----------------------------
[  295.501131][T12293] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage!
[  295.503825][T12293] 
[  295.503825][T12293] other info that might help us debug this:
[  295.503825][T12293] 
[  295.507746][T12293] 
[  295.507746][T12293] rcu_scheduler_active = 2, debug_locks = 1
[  295.511113][T12293] 1 lock held by syz.4.2491/12293:
[  295.513236][T12293]  #0: ffffffff8e13a0c0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80
[  295.517541][T12293] 
[  295.517541][T12293] stack backtrace:
[  295.520093][T12293] CPU: 1 UID: 0 PID: 12293 Comm: syz.4.2491 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  295.520115][T12293] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  295.520126][T12293] Call Trace:
[  295.520135][T12293]  <TASK>
[  295.520143][T12293]  dump_stack_lvl+0x189/0x250
[  295.520170][T12293]  ? __pfx_dump_stack_lvl+0x10/0x10
[  295.520188][T12293]  ? __pfx__printk+0x10/0x10
[  295.520213][T12293]  lockdep_rcu_suspicious+0x140/0x1d0
[  295.520230][T12293]  get_callchain_entry+0x2b6/0x3c0
[  295.520256][T12293]  get_perf_callchain+0xa1/0x6b0
[  295.520282][T12293]  ? __pfx_get_perf_callchain+0x10/0x10
[  295.520301][T12293]  ? futex_unqueue+0x22/0x240
[  295.520315][T12293]  ? futex_unqueue+0x211/0x240
[  295.520329][T12293]  ? __futex_wait+0x1d1/0x3e0
[  295.520350][T12293]  ? __futex_wait+0x34f/0x3e0
[  295.520371][T12293]  __bpf_get_stack+0x3fc/0xa60
[  295.520401][T12293]  ? __pfx___bpf_get_stack+0x10/0x10
[  295.520423][T12293]  ? __lock_acquire+0xab9/0xd20
[  295.520442][T12293]  bpf_get_stack+0x33/0x50
[  295.520461][T12293]  ? bpf_prog_d43750871481577d+0x46/0x4e
[  295.520474][T12293]  bpf_get_stack_raw_tp+0x1a9/0x220
[  295.520497][T12293]  bpf_prog_d43750871481577d+0x46/0x4e
[  295.520510][T12293]  bpf_prog_run_pin_on_cpu+0x6a/0x150
[  295.520536][T12293]  bpf_prog_test_run_syscall+0x312/0x4b0
[  295.520553][T12293]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[  295.520571][T12293]  ? __fget_files+0x2a/0x420
[  295.520588][T12293]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[  295.520609][T12293]  bpf_prog_test_run+0x2c7/0x340
[  295.520634][T12293]  __sys_bpf+0x581/0x870
[  295.520655][T12293]  ? __pfx___sys_bpf+0x10/0x10
[  295.520676][T12293]  ? exc_page_fault+0x76/0xf0
[  295.520696][T12293]  ? rcu_is_watching+0x15/0xb0
[  295.520723][T12293]  __x64_sys_bpf+0x7c/0x90
[  295.520741][T12293]  do_syscall_64+0xfa/0x3b0
[  295.520765][T12293]  ? lockdep_hardirqs_on+0x9c/0x150
[  295.520783][T12293]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.520798][T12293]  ? exc_page_fault+0x9f/0xf0
[  295.520821][T12293]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.520834][T12293] RIP: 0033:0x7fe8b698ebe9
[  295.520847][T12293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  295.520861][T12293] RSP: 002b:00007fe8b784f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  295.520886][T12293] RAX: ffffffffffffffda RBX: 00007fe8b6bb6180 RCX: 00007fe8b698ebe9
[  295.520897][T12293] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a
[  295.520906][T12293] RBP: 00007fe8b6a11e19 R08: 0000000000000000 R09: 0000000000000000
[  295.520914][T12293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  295.520919][T12293] R13: 00007fe8b6bb6218 R14: 00007fe8b6bb6180 R15: 00007ffe8c28eea8
[  295.520969][T12293]  </TASK>
[  295.626368][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration

VM DIAGNOSIS:
01:24:37  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=dffffc0000000000 RCX=40e85c151f9aca00 RDX=0000000000000001
RSI=0000000000000008 RDI=ffffc900029f7660 RBP=0000000000000000 RSP=ffffc900029f7878
R8 =ffffc900029f7667 R9 =1ffff9200053eecc R10=dffffc0000000000 R11=fffff5200053eecd
R12=ffffffff8a2835e0 R13=ffffffff8ca0ecb0 R14=ffff88802e5d2a00 R15=ffffc900029f7ce0
RIP=ffffffff81bfab90 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe8b78706c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe8b784efc8 CR3=00000000346bc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fc0c8812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000f62 RDI=0000000000000f63 RBP=00000000000003f8 RSP=ffffc900029d72b0
R8 =ffff888108438237 R9 =1ffff11021087046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af98cb R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe8b784f6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2a9663 CR3=00000000346bc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fe8b6b87498 00007fe8b6b87470 XMM03=00007fe8b6b874a8 00007fe8b6b874a0
XMM04=00007fe8b76ed100 00007fe8b6b87460 XMM05=00007fe8b6b87478 00007fe8b6b874c0
XMM06=00007fe8b6b874b8 00007fe8b6b874b0 XMM07=00007fe8b6b874a8 00007fe8b6b874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fe8b6a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
