last executing test programs:

26m11.474637521s ago: executing program 32 (id=77):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@noblock_validity}, {@discard}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xff}, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xc}}, {@jqfmt_vfsv1}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@lazytime}, {@resuid}, {@dax_always}, {@test_dummy_encryption_v1}, {@auto_da_alloc}, {@nodioread_nolock}, {@data_writeback}, {@noblock_validity}], [], 0x2c}, 0x0, 0x51b, &(0x7f0000001300)="$eJzs3M9vFNcdAPDvrtc2LlC79Be/WralVa1Wxdj8PPQAqJW4VKrUqqLHrW0QxUCFXQksq5iqAqmHVvwF/XGrlL8gp+QSJVEOiXIF5RpFQpEvkByiiWZ3ZrPr3bXXZu2V8ecjzfJm5s3M+87Mw2/e29kAdq1y+lGI2BcRTyJitDbbnKFc++fFytL0ZytL04VIkt9+Wqjme76yNJ1nzbfbm82MFyOKfy/EkdbDDs/fW7xRmZubvZMtmFgoZqmblWuz12ZvTZ0/f/rUyLmzU2d6EmdapueH/3r76KHLf3j86+krj//4zmtpeZNsfWMcNWPVz6GujzDQsqQc5eZz2eDH3Rd9R9jfkC6U0s9i/wpD19K7tpTV3ScxGgPVuZrR+NXf+lo4YEslSZIMtyyt/y1bThoVCrUNkuRBArwCCtHvEgD9kf+hf76SPgEsTbc+B7/anl2M6hNQGveLbKqtKVWfYMtjEYNRm7bCtyLiyvLn/06naNsPAQDQW29cjHh0qdbuyKfammJ8pyHf17OxobGI+EZEHIiIb2btl29HVPN+NyIONmyzv4tRgPKq+db2zwcjWaKxudozafvvF9nYVnP7r17ysYFsbn81/sHC1etzsyezczIeg8Pp/GTrruvdam/+8sN/dTp+uaH9l07p8fO2YFaOT0qrOuhmKguVl4079+xB9cTeb42/EKVCnoo4FBGHN7H/9Jxd/+n/j3Za3xR/GmdL/P/svPPSJgq0SvLfiJ/Urv9yVOPP+z5rwQ9lqYmFm3+emL+3+PPrjeOTk+fOTp2Z2BNzsycn8rui1bvvP/xNlmx5jGi+/knScP3zqrGlA2np9f9a2/u/PnI5lqbq47XzGz/Gw6ePOj7TbPb+Hyr8rprOx2fvVhYW7kxGDBWWW5dPfbXt3cpIU/40/vHj7ev/gYgv/pNtdyQi0pv4exHx/Yg4lpX9BxHxw4g4vkb8b1/60Z86PUKuH//WSuOf2dD1v7c4ElmiviRNXHgvonlJnhi48dbrLQf+R7kl/sHodP1PV1Pj2ZKZysKe9eJqU8C2iZc+gQAAALADHIuIfVEonsg6mvZFsXjiRMTeeg/K/MLPrt7+y62Z2jsCYzFYzHu6Rhv6QyezvuF0Pt1qqmE+XX+q2m+cJEkyks6nz+9zB/sbOux6ezvU/9THra+0AK+aDY2jdXqjDdiRVtf/p11v2fsvZADbqwffowF2KPUfdq+u6/9WvQUH9E27+n8/4kUfigJss3b1//ctSy5sS1mA7dWu/hv7h91h8/1/vgwAO53+f9iVunpJfhOJA5fXyFModbefUtev8a+XKMbavwIwFvXfNMjbNGvv8KNiRG/O2EBPz/xI0zUtts2zJ3pxrCium6e0gR9i2N5EsTI3l7/g0vfyDEfEOndv/Wa7nycWt7pg1XPzv/79zwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAbXwYAAP//363OhA==")

26m6.425981142s ago: executing program 33 (id=109):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000004c0)=@newqdisc={0x94, 0x24, 0xf0b, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x3, 0x0, 0x2, 0x0, 0x0, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x92, 0x0, 0x0, 0x0, 0x3}}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x2, 0xe000000, 0x51c4, 0x1, 0x1}}]}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x2004c084}, 0x40000d0)

25m42.120159193s ago: executing program 34 (id=317):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61125300000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28}, 0x48)

22m20.181088558s ago: executing program 35 (id=2624):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000060000000060a010400000000000000000100000008000b40000000003800048034000180090001007866726d000000002400028005000300010000000800044000000006080001400000001508000240000000010900010073797a30"], 0xd4}}, 0x4000040)

21m31.602129296s ago: executing program 36 (id=3211):
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$inet6(0xa, 0x1, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

20m56.480968635s ago: executing program 37 (id=3620):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x30, 0x15, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @generic="f93770"]}, 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x0)

19m40.394745801s ago: executing program 38 (id=4550):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

19m13.965585142s ago: executing program 39 (id=4856):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setresuid(0xee01, 0xee00, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)

18m35.487482738s ago: executing program 40 (id=5327):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettfilter={0x34, 0x2e, 0x2, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x8, 0xd}, {0xc, 0xc}, {0x0, 0xfff1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x3fffc}]}, 0x34}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054)

17m22.069524805s ago: executing program 41 (id=6306):
r0 = io_uring_setup(0x7d1, &(0x7f0000000580)={0x0, 0xddf5, 0x8, 0xfffffffe, 0x183})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
close_range(r0, r0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000026c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480))
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x8, 0x3, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x1, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0)

16m19.46411106s ago: executing program 42 (id=7191):
syz_emit_ethernet(0x34, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x1, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x12, 0x0, @opaque="000000000000000f0000"}}}}}, 0x0)

16m1.381620005s ago: executing program 43 (id=7419):
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000I00000,privport'])

14m32.367693553s ago: executing program 44 (id=8418):
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, {0x0, 0xfbff, 0x9, 0x0, 0x0, 0xffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8d1, 0x0, "d20bddda7d1db9342de76eec7967fe97752251560ed100"}})

12m4.703696462s ago: executing program 45 (id=10949):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x6, 0x7fff, 0x8d1}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x80, 0x54, 0x7fffdfff, 0x1, 0xc, 0x8, 0x8, 0x9, 0x3, 0xa000009, 0x40000, 0x1a, 0x126, 0x4, 0x40006, 0x4, 0xfffffff4, 0x1, 0x8, 0x3, 0xa7, 0x5, 0x2, 0x9, 0xe0000, 0x200, 0x400001, 0x1, 0x0, 0x7, 0xd, 0xd, 0x7, 0x51, 0x80000000, 0x9, 0x1, 0xfffffffe, 0x3, 0x3, 0xffffffff, 0x7, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0xffffffff, 0x1, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x400, 0x1], [0x66ac, 0xfffffff9, 0x2005, 0x8, 0x8e, 0x8, 0x80000001, 0x9, 0x9, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x200, 0x7ff, 0x7ff, 0x5, 0x9, 0x4000c00, 0x89, 0x7ff, 0x1, 0x40001, 0x10000, 0x4, 0x9, 0x4d26, 0x37, 0x8, 0x1, 0xa, 0x0, 0x4, 0x4c, 0xc, 0x8, 0x5, 0xe62, 0x8, 0x2, 0x81, 0x4b, 0x7d, 0x6, 0xd, 0x4, 0x8001, 0x776, 0x8d1, 0x86, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0xffffffff, 0x401, 0x80000000, 0x7f, 0x9], [0x8396, 0x40000007, 0x10000, 0x9, 0x8000, 0x1, 0x6, 0xe, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x7ffd, 0x7, 0x10000003, 0x74b, 0x5, 0x3, 0xc7, 0x4, 0x3, 0x20000, 0x2, 0xfb, 0xc, 0x5, 0xb10, 0x1e, 0x1, 0x7fe, 0x80008, 0x9, 0x3, 0x7, 0xfffffff7, 0x4, 0x9, 0x464b, 0x6, 0x2e7, 0x100007ff, 0x200, 0x6, 0x87ff, 0x2, 0x5fffffff, 0xfffffffb, 0x0, 0x2000fe00, 0x80, 0xa0c787d, 0xffffff4e, 0x9, 0x10006, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x3, 0x16], [0x10000013, 0x7, 0x5, 0x2, 0xa5e, 0xfe, 0x8, 0x8, 0x80000000, 0x0, 0xe, 0x2, 0x7, 0x7, 0x1, 0x2, 0xfffffffd, 0xfffffff8, 0xe, 0x4, 0x7, 0x7, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xdffffffa, 0x40, 0x0, 0x4, 0x7, 0x3, 0x40, 0x101, 0x7, 0x7, 0x1, 0xffff, 0x7, 0x6, 0x5, 0x2, 0x80000002, 0x80000002, 0xff, 0x9, 0x4, 0xfffff801, 0xfbefffff, 0x37d, 0x6, 0xc5, 0x87, 0xd, 0x8, 0x0, 0x0, 0x8, 0xff, 0x2, 0x5f, 0x5, 0x400]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0)

11m48.547142335s ago: executing program 46 (id=11178):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000001000000000000000000000018010000786c6c250000000000202020630af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202020dd00f5ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

11m32.563172195s ago: executing program 47 (id=11375):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000480)=r2, 0x4)

10m20.26008684s ago: executing program 48 (id=12303):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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")
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
r2 = openat(0xffffffffffffff9c, 0x0, 0x107b42, 0x32)
ftruncate(r2, 0x6000000)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
fallocate(r0, 0x0, 0xbf5, 0x2000402)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff})

9m32.761234532s ago: executing program 49 (id=13218):
r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x6f5e, 0x12b801)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001380)={0x53, 0xfffffffffffffffc, 0x6, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="5b1d2a834b9c", 0x0, 0x0, 0x2, 0x2, 0x0})

7m8.172774643s ago: executing program 50 (id=15285):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
setxattr$security_capability(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0, 0x1)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]})
llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/174, 0xae)

6m18.129751153s ago: executing program 4 (id=16031):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='pagemap\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

6m17.179684286s ago: executing program 4 (id=16046):
r0 = socket(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x3, 0x0, 0x0, r1}, 0xc)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x0, 0xc, r1}, 0xc)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000280)=0xa, 0x4)

6m17.178867138s ago: executing program 4 (id=16048):
r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000100)='\\%)$*:\x00', 0x0)

6m17.017485854s ago: executing program 4 (id=16053):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x131)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

6m16.752858224s ago: executing program 4 (id=16060):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, 0x0, 0x1, 0x204})

6m16.529704137s ago: executing program 4 (id=16066):
syz_mount_image$hfsplus(&(0x7f0000001140), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000180)=ANY=[], 0xfe, 0x66b, &(0x7f0000001180)="$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")
truncate(&(0x7f00000000c0)='./file1\x00', 0x8008)
creat(&(0x7f00000001c0)='./file1\x00', 0x50)

6m16.44776097s ago: executing program 51 (id=16066):
syz_mount_image$hfsplus(&(0x7f0000001140), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000180)=ANY=[], 0xfe, 0x66b, &(0x7f0000001180)="$eJzs3c1vHGcdB/DvbDZ2Ni3BTZM2oEq1GgkQFolf5IK5YBBCPlSoKgfOVuI0VjZpsV3kVog6vF576B9QDr4gTkjcIxUOXODWG/KxEhKXXjCnRTuetdfrl66TxrtpP59o93lmnplnfs/vmZl9saIN8IW1MJH6gxRZmHhlvb28tTnT3NqcudupJxlNspHUk9SSFP9ttVofJvNJsdtN0VMe8P7y3GsffbL18c5SvXqU29eO269Htd1Gz+qNzrrxJGeq8hHs6+/GI/dX7EY+n+RqVcLAnU3S2udnf396t6VL47C9z51KjMDjVey8bh4wlpyvLvT2+4DOK2/tdKPr32if2/W+gwAAAIAnTT+fgb+8ne2sFxdOIRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4XNjY+/3/onrUOvXxFJ3f/x+p1qWqD5cXT7b5g8cVBwAAAAAAAACcohe3s531XOgst4ryb/4vlQuXyuen8lZWs5SVXMt6FrOWtaxkKslYV0cj64traytTfew5feie058S6GhVNj6bcQMAAAAAAADA58yvsrD3938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgGRXJmp0hxv2v1WGr1JOeSjLRXbCT/7NSfZA8GHQAAAACcgtFkO+u50FluFbmU5LnyO4BzeSv3spblrKWZpdwsvxfY+dRf29qcaW5tztxtPw72+/3/nCiMssfsfPdw+JGvlFs0civL5ZpruZE30szN1Mo9265U8XR67Ynrfjum4nuVPiO7WZXtkb9XlQe8e6LBHuWEX6aMlRk5u5uRySq2djae6czM4TN0wtnpPdJUarvBXuo50sj+wTxUzs9XZXs8vzsq5wPRm4nprrPvueNznnz9L3/66WRVH54h9edMVbbK58bBTMx0ZeL5fjJxu3nvzu1bqxNPWiYOmCwzcXl3eSE/yk8ykfG8mpUs5+dZzFqWMp4flrXFavKLrkv+iEzN71t69dMiGanO0J3JOllML5X7Xshyfpw3cjNLebn8N52pfDuzmc1c1wxfPn6Gy6u+tu+q35vm1pcODf7qN6pKI8nvq3I4tPP6TFdeu++5Y2Vb95q9LF3sI0snvDfWv1pV2sf4dVUOh95MTHVl4tnjM/GH8ray2rx3Z+X24pv9He7ie1WlfWb9NhkfnhtJ+3y52J6scmn/2dFue/bQtqmy7dJuW+1A2+Xdtp0rdePIK3Wkeg93sKfpsu35Q9tmyrYrXW2Hvd8CYOid/+b5kca/G/9ofND4TeN245VzPxj9zugLIzn717PfrU+e+VrtheLP+SC/3Pv8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzVt9+5s9hsLq30VFqt1rtHNPVZqVdHeMjdH6GS8X891T7yIU2dnzM7xXi+8nRyemMf1sr/Wq1WtaY4Yps//m1oEtWqDEXqBlQZ3D0JOB3X1+6+eX317Xe+tXx38fWl15fuzc3Ozk3Ozb48c/3WcnNpcud50FECj8Pei/6gIwEAAAAAAAAAAAD6dRr/nWDQYwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACebAsTqT9IkanJa5Pt5a3NmWb70anvbVlPUktS/CIpPkzmi6phrKu74qjjvL8899pHn2x9vNdXvbN97bj9+rNRPTKe5MxOef+z6u9GVR6rOG4Ixe4I55NcrUoYuP8HAAD//xokBkA=")
truncate(&(0x7f00000000c0)='./file1\x00', 0x8008)
creat(&(0x7f00000001c0)='./file1\x00', 0x50)

5m48.324507785s ago: executing program 6 (id=16432):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1018ed8, &(0x7f0000000280)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@noload}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x64d, &(0x7f0000000d40)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa1)
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000005bc0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x0, 0x2, 0x6, 0x7e9, 0x2000000000, 0x2000000000002, 0x3, 0x100000000003, 0x7ffd})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)

5m48.159137064s ago: executing program 6 (id=16433):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0xa, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x5)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffe0)

5m46.883837698s ago: executing program 6 (id=16445):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x1, 0x8080)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000000)={0x0, [0x0, 0xffff133a, 0x3], [{0x0, 0x0, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x8}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xe6f6}], 0xc})

5m46.883624769s ago: executing program 6 (id=16446):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in=@remote, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xf84, 0x200}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x70bd28, 0x70bd2d, 0x70bd2c, 0x2}}, @algo_auth={0x48, 0x1, {{'cbcmac(sm4-generic)\x00'}}}]}, 0x154}}, 0x0)

5m46.837314758s ago: executing program 6 (id=16447):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x15b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00\x00\x00\x00\x00\x00\x00'}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)

5m46.765863254s ago: executing program 6 (id=16448):
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x100)

5m30.536346584s ago: executing program 52 (id=16448):
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x100)

4m39.230898848s ago: executing program 3 (id=17414):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48)

4m39.230408154s ago: executing program 3 (id=17416):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0)
fcntl$setlease(r0, 0x400, 0x1)
fcntl$getown(r0, 0x9)

4m39.164859967s ago: executing program 3 (id=17418):
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000005d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)

4m39.077635499s ago: executing program 3 (id=17421):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0)
mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x272)

4m38.991564121s ago: executing program 3 (id=17422):
syz_emit_ethernet(0x86, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x4, 0x0, '\x00', [@ra={0x5, 0x33}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0)

4m38.810962634s ago: executing program 3 (id=17423):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

4m38.549077377s ago: executing program 53 (id=17423):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

4m18.799096304s ago: executing program 8 (id=17666):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000001800))

4m18.716337331s ago: executing program 8 (id=17668):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0)
splice(r1, 0x0, r5, 0x0, 0x80, 0x6)
write$bt_hci(r5, 0x0, 0x7)
write(r3, 0x0, 0x0)

4m18.449195643s ago: executing program 8 (id=17677):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000500)={0x0, 0x0}, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @u32=0x1ff}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x44, 0x0, 0x0, @uid}, @nested={0xd9, 0x66, 0x0, 0x1, [@nested={0x24, 0x132, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @u32=0xb2}, @typed={0x8, 0xca, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x13d, 0x0, 0x0, @u32=0xfffffffc}, @nested={0x4, 0xc5}, @nested={0x4, 0x8a}]}, @nested={0x8, 0xa1, 0x0, 0x1, [@nested={0x4, 0xb}]}, @generic="c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb27a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9ebb5658776ab26"]}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

4m18.383977446s ago: executing program 8 (id=17680):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x112)

4m17.114350551s ago: executing program 8 (id=17700):
r0 = socket$netlink(0x10, 0x3, 0x2)
getsockopt$netlink(r0, 0x10e, 0x8, 0x0, &(0x7f0000000040))

4m16.930373475s ago: executing program 8 (id=17702):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x14, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0)

4m16.652774289s ago: executing program 54 (id=17702):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x14, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0)

4m4.13364556s ago: executing program 9 (id=17866):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_cmd={0x9, 0xf, 0x39d, 0x3, 0x9f, 0x9, 0x80, 0x6, 0x3, 0x63, 0x9, 0x7, 0x1, 0x3, 0x7, 0x8001, [0xfffffffc, 0x7]}})

4m4.07018856s ago: executing program 9 (id=17868):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x43}}, 0x1c)

4m3.983718295s ago: executing program 9 (id=17870):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x28, r1, 0x64bc7c9305072889, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x0)

4m3.983473755s ago: executing program 9 (id=17871):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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")
mkdir(&(0x7f0000000040)='./bus\x00', 0x10b)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)

4m3.852229846s ago: executing program 9 (id=17874):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="68000000100001002bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="4cf2040000000000140003006e657464657673696d3000000000000034001680300001802c000c801400010006000000dd0d0000090010008100000014"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40)

4m3.335248236s ago: executing program 9 (id=17879):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x242e80, 0x0)
pwrite64(r0, 0x0, 0x0, 0x7ffffffffffffffb)

4m3.156592757s ago: executing program 55 (id=17879):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x242e80, 0x0)
pwrite64(r0, 0x0, 0x0, 0x7ffffffffffffffb)

1m59.319084841s ago: executing program 0 (id=19708):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00')
preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1)

1m59.200333274s ago: executing program 0 (id=19709):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xce}, 0x1c)
r1 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)

1m59.199994075s ago: executing program 0 (id=19710):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003700000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

1m59.111081856s ago: executing program 0 (id=19711):
ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0)

1m59.004737337s ago: executing program 0 (id=19712):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1)
writev(r0, &(0x7f0000000780)=[{&(0x7f0000000040)='\a', 0xfc19}, {0x0, 0x2}], 0x2)

1m58.744059194s ago: executing program 0 (id=19713):
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x3, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x34}, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@private, 0x1}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@multicast1}, {@rand_addr, 0x10000}, {@dev}, {@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0)

1m58.544165591s ago: executing program 56 (id=19713):
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x3, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x34}, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@private, 0x1}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@multicast1}, {@rand_addr, 0x10000}, {@dev}, {@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0)

1m46.924281097s ago: executing program 7 (id=19917):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c0002800800024000000002080003400000000a080001"], 0x80}}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

1m46.85923013s ago: executing program 7 (id=19920):
r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10)
finit_module(r0, 0x0, 0x2)

1m46.784668182s ago: executing program 7 (id=19921):
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ffff1a40d8048200b7ce010282970902120001000000000904000000020201", @ANYRESHEX, @ANYRES8=0x0, @ANYRES8=0x0], 0x0)

1m43.497022925s ago: executing program 7 (id=19949):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x180000c, &(0x7f0000000540)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRES16, @ANYBLOB="2c747970653d0b3cbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2ef127e38e0aa2229f9cf6a850300"/71, @ANYRESDEC=0x0, @ANYRES8, @ANYRES32=0x0, @ANYRES8=0x0], 0x1, 0x6e6, &(0x7f0000001640)="$eJzs3UtoHOcdAPD/rFarXRUcOfEjLYEsMaSlorZkobTqpW4pRYdQQnroebHlWHgtB0kpsimN0se9h5x6Sg+6hR5Keje054aUkquOgUIuOemmMrMz+9Cudle2LG3T30/MzjfzPeab/7x2dhATwP+t1fkoP4kkVuff3Emn9/eWmlN7SzN5djMiKhFRiii3RpFsRJZ7Kx/im+nMvHzSbvhfvcv5cH3l7c+/2v+iNVXOh6x80lNvtEr/rN18iHpETOXjftPHtPjJ0cX3tHf72PbG1VnDNGDXisDFn56pVXhmh31223kf/zv7HFb9JMctMKGS1nWzz1zEbERUI1pX/fzsUDrb3p2+3fPuAAAAAJxU7eRVXjiIg9iJC8+jOwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPB1lb//P8mHUpGuR1K8/7+Sz4s8PYFGvwjxs5nW+Mnz7wwAAAAAAAAAPHevHsRB7MSFYvowyZ75v9b1jP8b8V5sxVpsxvXYiUZsx3ZsxmJEzHU1VNlpbG9vLmY1Iy4NqXkzPh1Q8+bxfbx1yusMAAAAAAAAABOuOiL//nT/vN/Gauf5PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATIIkYqo1yoZLRXouSuWIqBbldiM+jYjK+fb2RJJBM5+cfT8AAADgmVR7J5PqGHVeeD8OYicuFNOHSXbPfyW7X67Ge7ER27Ee29GMtbiT30Ond/2l/b2l5v7e0oN06G/3x1+eqOtZi9H67WHwkl/OStTibqxnc67H7UjiMFPKW3l5f28pHT8Y3K8P0j4lP8oN6c1UV/pO+nH1kyz9x95fEconWsWnVDo2Zy7LnW5HZCHvW1rjYhGBwZHo2TqDdpPy0CUtRqn9y8+l4UsaHPMPhq/z7JFSA3+5ORdHI3EzSu0tdGV4JCK+/bePf3mvuXH/3t2t+clZpYHeH1niaCSWuiJx9WsUidEWskhcbk+vxs/iFzEfX868FZuxHr+KRmzHWr3Ib+T7c/o5NzxSn812T701qifpMVlvn78G9akePX2Kevw0SzXitWybXoj1SOJhRKzFG9nfzVhsnw06W/jyGEd9aYwzbZdr38lG7TBF7fiyfxmvydOSxvViV1y7z7lzWV73nE6UXhwYpeJaN/71qEv5W3kibeF3Q68PZ+1oJBa7IvHScftLK6R/zq4mW82N+5v3Gu+OubzX83F6HP1hoq4S6dq8GNV85S5mn0l2TC1keS+1r7C98arkT1xaSn15l9v1Wkfqz+Nh3Ok5Ur8fy7EcK1npK1np6b4rVpp3td1S7zk8zUu/aZXbD3a6v289jGbr+xAAk232u7OV2n9q/6x9VPt97V7tzepPZn4w80olpv8x/cPywtTrpVeSv8ZH8ZvO/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD0th49vt9oNtc2BydKg7OS4bUazcPiRWJDyvQkkvxVOWMUTrYePT4c2eDwxEzevaesfpqJ4jV8owvXh7ZTfqZuJLtHt1d19LYo3vI0xiKSvoCnlZ86dMWSO3OmJ2BTHk3UT6/BYoftyjr53lsbtL2mImJQ4REnjqnTOPsA5+nG9oN3b2w9evy99QeNd9beWduYXl5eWVhZfmPpxt315tpC67Orwpm8/BY4C91fJ9oqEfHq6LpDXtQKAAAAAAAAAAAAPEdn8b8Q572OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP+21fkoP4kkFheuL6TT+3tLzXQo0p2S5YgoRUTy64jk7xG3ojXEXFdzyXHL+XB95e3Pv9r/otNWuShfitg9tt54dvMh6hExlY9Pq73bo9urdJIzA7KTdmTSgF0rAgfn7b8BAAD//0+S7AE=")
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0)
mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x28, &(0x7f0000000400)={[{}]})
read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020)

1m43.365744883s ago: executing program 7 (id=19951):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0)

1m43.155889381s ago: executing program 7 (id=19955):
r0 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x24008080}, 0x0)

1m42.920646202s ago: executing program 57 (id=19955):
r0 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x24008080}, 0x0)

2.021797841s ago: executing program 1 (id=21442):
request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95::\x01\x00\x00', 0x0)

1.573122475s ago: executing program 1 (id=21445):
syz_mount_image$jfs(&(0x7f0000005d00), &(0x7f0000005d40)='./file0\x00', 0x0, &(0x7f0000005d80), 0x1, 0x5ce8, &(0x7f0000005dc0)="$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")
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'trusted.overlay.upper\x00'}, 0x0, 0x0)

1.175385148s ago: executing program 1 (id=21448):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
syz_emit_ethernet(0xda, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet(0xa, 0x1, 0x186)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040f042f0106048af38192c7851755cb8bebfba5410dad4fce5306aafce527936fde08519e79563800000000005c63"], 0x7)
syz_open_procfs(0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r6=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000200)={r6}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000040)={r6, 0x9}, &(0x7f00000000c0)=0x8)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0)
r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000000940)={0x1, 0x2, 0x8aa5, 0x1, 0x3})

799.102857ms ago: executing program 2 (id=21450):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x11)
ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0)

798.707315ms ago: executing program 2 (id=21451):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_delrule={0x2c, 0x21, 0x105, 0x0, 0x25dfdbfc, {0x2, 0x20, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x8, 0x10001}, [@FRA_DST={0x8, 0x1, @remote}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000)

500.655519ms ago: executing program 2 (id=21459):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000))
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)=0x4)

436.127229ms ago: executing program 2 (id=21460):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x4, &(0x7f0000000080)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000e80)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xfbff, r0, 0x0, 0x0, 0x8, 0x0, 0x2}])

206.907115ms ago: executing program 5 (id=21466):
r0 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8954, 0x0)

142.001361ms ago: executing program 5 (id=21467):
sched_setscheduler(0x0, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x40, 0x7, 0x97c1, 0x7e06, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x66, 0x0, 0x8, 0x29, 0x0, @private=0xa010102, @local}}}})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)

141.38919ms ago: executing program 5 (id=21468):
syz_mount_image$ubifs(&(0x7f0000009e00), &(0x7f0000009e40)='./file1\x00', 0x800000, &(0x7f0000000980)={[{@compr_zstd}, {@norm_unmount}, {@norm_unmount}, {@compr_lzo}, {@compr_zlib}, {@compr_zstd}, {@norm_unmount}, {}, {@auth_hash_name={'auth_hash_name', 0x3d, 'ghash'}}, {@auth_key={'auth_key', 0x3d, 'norm_unmount'}}, {@auth_hash_name={'auth_hash_name', 0x3d, 'ghash'}}, {@compr_zlib}, {@compr_zlib}]}, 0x1, 0x9dea, &(0x7f0000009ec0)="$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")

74.367053ms ago: executing program 5 (id=21469):
r0 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe)
keyctl$assume_authority(0x10, r0)

73.948152ms ago: executing program 1 (id=21470):
r0 = socket$caif_stream(0x25, 0x1, 0x5)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0x0, 0x0)

1.372835ms ago: executing program 2 (id=21471):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x34, r1, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x0)

1.059326ms ago: executing program 5 (id=21472):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x2c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x90)

858.929µs ago: executing program 1 (id=21473):
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
epoll_create1(0x80000)

364.11µs ago: executing program 5 (id=21474):
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x10000}, 0x28)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x0, 0x399})
io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0)

246.623µs ago: executing program 1 (id=21475):
r0 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="08030000110001002cbd7000f8dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8000000001030000080013"], 0x308}}, 0x810)

0s ago: executing program 2 (id=21476):
r0 = socket$caif_stream(0x25, 0x1, 0x1)
connect$caif(r0, &(0x7f0000000040)=@dgm={0x25, 0x7ff, 0x88}, 0x54)

kernel console output (not intermixed with test programs):

160] usb 1-1: USB disconnect, device number 28
[ 1477.953583][T16160] keyspan 1-1:0.0: device disconnected
[ 1478.172779][T18988] netlink: 14 bytes leftover after parsing attributes in process `syz.5.18975'.
[ 1479.247124][T19017] netlink: 'syz.0.18988': attribute type 3 has an invalid length.
[ 1479.544971][T19029] netlink: 76 bytes leftover after parsing attributes in process `syz.1.18994'.
[ 1479.548385][T19029] netlink: 76 bytes leftover after parsing attributes in process `syz.1.18994'.
[ 1479.631270][T19032] [U] 
[ 1479.722526][T19037] loop0: detected capacity change from 0 to 1024
[ 1479.772209][T19037] hfsplus: xattr searching failed
[ 1479.774548][   T34] kauditd_printk_skb: 24 callbacks suppressed
[ 1479.774564][   T34] audit: type=1800 audit(1933.467:830): pid=19037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.18998" name="file1" dev="loop0" ino=2 res=0 errno=0
[ 1480.159275][T24615] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[ 1480.345953][T24615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1480.353437][T24615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1480.365003][T24615] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00
[ 1480.368110][T24615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1480.373125][T24615] usb 1-1: config 0 descriptor??
[ 1480.618326][   T34] audit: type=1326 audit(1934.242:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19047 comm="syz.1.19003" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2db9f8f749 code=0x0
[ 1480.823701][T24615] aureal 0003:0755:2626.0029: unknown main item tag 0x0
[ 1480.840318][T24615] aureal 0003:0755:2626.0029: unknown main item tag 0x0
[ 1480.845695][T24615] aureal 0003:0755:2626.0029: unknown main item tag 0x0
[ 1480.848269][T24615] aureal 0003:0755:2626.0029: unknown main item tag 0x0
[ 1480.850919][T24615] aureal 0003:0755:2626.0029: unknown main item tag 0x0
[ 1480.878056][T24615] aureal 0003:0755:2626.0029: hidraw0: USB HID v0.00 Device [HID 0755:2626] on usb-dummy_hcd.0-1/input0
[ 1481.039169][T16160] usb 1-1: USB disconnect, device number 29
[ 1481.932301][T24615] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[ 1482.243978][T24615] usb 1-1: Using ep0 maxpacket: 16
[ 1482.248847][T24615] usb 1-1: config 0 has an invalid interface number: 4 but max is 0
[ 1482.253235][T24615] usb 1-1: config 0 has no interface number 0
[ 1482.260796][T24615] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x4 has invalid maxpacket 136, setting to 64
[ 1482.271380][T24615] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1482.295906][T24615] usb 1-1: New USB device found, idVendor=0742, idProduct=200a, bcdDevice=7e.46
[ 1482.299436][T24615] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1482.302383][T24615] usb 1-1: Product: syz
[ 1482.316821][T24615] usb 1-1: Manufacturer: syz
[ 1482.318711][T24615] usb 1-1: SerialNumber: syz
[ 1482.369719][T24615] usb 1-1: config 0 descriptor??
[ 1482.527863][T24615] HFC-S_USB 1-1:0.4: probe with driver HFC-S_USB failed with error -5
[ 1482.730706][T24615] usb 1-1: USB disconnect, device number 30
[ 1482.751577][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[ 1482.754291][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[ 1483.571910][T19113] xt_hashlimit: size too large, truncated to 1048576
[ 1483.639979][T19115] loop0: detected capacity change from 0 to 2048
[ 1483.665222][T19116] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1483.688024][T19115] syz.0.19033: attempt to access beyond end of device
[ 1483.688024][T19115] loop0: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048
[ 1483.705479][T19115] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15)
[ 1483.712696][T19115] syz.0.19033: attempt to access beyond end of device
[ 1483.712696][T19115] loop0: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048
[ 1483.734481][T19115] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15)
[ 1483.737857][T19115] NILFS (loop0): error -5 truncating bmap (ino=16)
[ 1483.982714][T19124] loop0: detected capacity change from 0 to 1024
[ 1484.072171][T19124] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[ 1484.075114][T19124] hfsplus: xattr search failed
[ 1484.138439][T19001] hfsplus: b-tree write err: -5, ino 4
[ 1484.193710][T19133] loop0: detected capacity change from 0 to 256
[ 1484.201297][T19133] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[ 1484.213404][   T34] audit: type=1800 audit(1937.565:832): pid=19133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.19042" name="file1" dev="loop0" ino=1048961 res=0 errno=0
[ 1484.432406][T19146] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1484.492386][T19150] netlink: 96 bytes leftover after parsing attributes in process `syz.0.19050'.
[ 1484.529947][T19152] loop0: detected capacity change from 0 to 512
[ 1484.579095][T19152] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.19051: inode has both inline data and extents flags
[ 1484.584228][T19152] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.19051: couldn't read orphan inode 15 (err -117)
[ 1484.590501][T19152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1484.624974][T16425] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1485.157033][T19171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19056'.
[ 1485.630616][T19197] 9pnet_fd: Insufficient options for proto=fd
[ 1485.725888][T19193] loop0: detected capacity change from 0 to 2048
[ 1485.751089][T19193] hpfs: filesystem error: improperly stopped; already mounted read-only
[ 1485.754260][T19193] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2
[ 1486.346214][T19232] overlayfs: failed to clone upperpath
[ 1487.457752][T19272] netlink: 'syz.5.19104': attribute type 6 has an invalid length.
[ 1487.830592][T19293] netlink: 'syz.1.19114': attribute type 3 has an invalid length.
[ 1487.907697][T19297] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19116'.
[ 1489.578918][T19330] 9pnet_fd: Insufficient options for proto=fd
[ 1490.210550][T19348] loop0: detected capacity change from 0 to 16
[ 1490.213887][T19348] MTD: Attempt to mount non-MTD device "/dev/loop0"
[ 1490.220724][T19348] cramfs: root is not a directory
[ 1491.763312][T16160] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[ 1491.927091][T16160] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[ 1491.931043][T16160] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1491.934715][T16160] usb 1-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2
[ 1491.938098][T16160] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1491.943605][T16160] usb 1-1: config 0 descriptor??
[ 1492.124687][T19386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19153'.
[ 1492.178815][ T5886] usb 1-1: USB disconnect, device number 31
[ 1492.532019][T19400] IPVS: ip_vs_add_dest(): server weight less than zero
[ 1493.281449][T19422] loop0: detected capacity change from 0 to 40427
[ 1493.285487][T19422] F2FS-fs (loop0): Image doesn't support compression
[ 1493.287662][T19422] F2FS-fs (loop0): build fault injection rate: 690
[ 1493.289883][T19422] F2FS-fs (loop0): build fault injection type: 0x35f7
[ 1493.311548][T19422] F2FS-fs (loop0): invalid crc value
[ 1493.369259][T19424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19169'.
[ 1493.372651][T19424] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19169'.
[ 1493.380394][T19422] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1493.384191][T19422] F2FS-fs (loop0): Start checkpoint disabled!
[ 1493.385299][T19424] geneve2: entered promiscuous mode
[ 1493.387915][T19422] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[ 1493.390514][T19424] geneve2: entered allmulticast mode
[ 1493.391517][T19422] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[ 1493.394480][T13579] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1493.398987][T13579] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1493.402238][T13579] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1493.423547][T24303] kworker/u10:14: attempt to access beyond end of device
[ 1493.423547][T24303] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1493.427563][T24303] CPU: 1 UID: 0 PID: 24303 Comm: kworker/u10:14 Not tainted syzkaller #0 PREEMPT(full) 
[ 1493.427576][T24303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1493.427582][T24303] Workqueue: writeback wb_workfn (flush-7:0)
[ 1493.427600][T24303] Call Trace:
[ 1493.427604][T24303]  <TASK>
[ 1493.427609][T24303]  dump_stack_lvl+0x189/0x250
[ 1493.427624][T24303]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1493.427635][T24303]  ? __pfx_queue_work_on+0x10/0x10
[ 1493.427644][T24303]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1493.427657][T24303]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1493.427674][T24303]  f2fs_handle_critical_error+0x37c/0x540
[ 1493.427691][T24303]  f2fs_write_end_io+0x886/0xb60
[ 1493.427710][T24303]  __submit_merged_bio+0x27a/0x6a0
[ 1493.427725][T24303]  __submit_merged_write_cond+0x255/0x530
[ 1493.427741][T24303]  f2fs_write_data_pages+0x261d/0x3000
[ 1493.427768][T24303]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1493.427784][T24303]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[ 1493.427812][T24303]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[ 1493.427832][T24303]  ? trace_f2fs_writepages+0x7f/0x200
[ 1493.427860][T24303]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1493.427868][T24303]  do_writepages+0x32e/0x550
[ 1493.427882][T24303]  ? reacquire_held_locks+0x127/0x1d0
[ 1493.427891][T24303]  ? writeback_sb_inodes+0x384/0x1010
[ 1493.427907][T24303]  __writeback_single_inode+0x145/0xff0
[ 1493.427919][T24303]  ? do_raw_spin_unlock+0x4d/0x240
[ 1493.427932][T24303]  writeback_sb_inodes+0x6c7/0x1010
[ 1493.427943][T24303]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1493.427968][T24303]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1493.428002][T24303]  ? rcu_is_watching+0x15/0xb0
[ 1493.428016][T24303]  wb_writeback+0x43b/0xaf0
[ 1493.428032][T24303]  ? queue_io+0x3b1/0x590
[ 1493.428045][T24303]  ? __pfx_wb_writeback+0x10/0x10
[ 1493.428080][T24303]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1493.428099][T24303]  wb_workfn+0x409/0xef0
[ 1493.428123][T24303]  ? __pfx_wb_workfn+0x10/0x10
[ 1493.428138][T24303]  ? __lock_acquire+0xab9/0xd20
[ 1493.428154][T24303]  ? process_scheduled_works+0x9ef/0x17b0
[ 1493.428171][T24303]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1493.428182][T24303]  ? process_scheduled_works+0x9ef/0x17b0
[ 1493.428191][T24303]  ? process_scheduled_works+0x9ef/0x17b0
[ 1493.428202][T24303]  process_scheduled_works+0xae1/0x17b0
[ 1493.428232][T24303]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1493.428256][T24303]  worker_thread+0x8a0/0xda0
[ 1493.428287][T24303]  kthread+0x711/0x8a0
[ 1493.428305][T24303]  ? __pfx_worker_thread+0x10/0x10
[ 1493.428327][T24303]  ? __pfx_kthread+0x10/0x10
[ 1493.428344][T24303]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1493.428360][T24303]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1493.428376][T24303]  ? __pfx_kthread+0x10/0x10
[ 1493.428390][T24303]  ret_from_fork+0x4bc/0x870
[ 1493.428406][T24303]  ? __pfx_ret_from_fork+0x10/0x10
[ 1493.428423][T24303]  ? __switch_to_asm+0x39/0x70
[ 1493.428432][T24303]  ? __switch_to_asm+0x33/0x70
[ 1493.428439][T24303]  ? __pfx_kthread+0x10/0x10
[ 1493.428455][T24303]  ret_from_fork_asm+0x1a/0x30
[ 1493.428478][T24303]  </TASK>
[ 1493.428483][T24303] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[ 1494.962427][T19467] sg_write: process 606 (syz.0.19187) changed security contexts after opening file descriptor, this is not allowed.
[ 1494.968385][T19467] program syz.0.19187 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1495.056605][T19471] loop0: detected capacity change from 0 to 512
[ 1495.063985][T19471] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.19189: inode has both inline data and extents flags
[ 1495.071351][T19471] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.19189: couldn't read orphan inode 15 (err -117)
[ 1495.077888][T19471] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1495.087145][T19471] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[ 1495.119512][T16425] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1495.374360][T19475] loop0: detected capacity change from 0 to 32768
[ 1495.381659][T19475] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.19190 (19475)
[ 1495.389336][T19475] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1495.394306][T19475] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[ 1495.424346][T19475] BTRFS info (device loop0): enabling ssd optimizations
[ 1495.427152][T19475] BTRFS info (device loop0): turning on async discard
[ 1495.429669][T19475] BTRFS info (device loop0): enabling free space tree
[ 1495.515065][T16425] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1495.992590][T19520] loop0: detected capacity change from 0 to 1024
[ 1496.022195][T11145] libceph: connect (1)[c::]:6789 error -22
[ 1496.025458][T11145] libceph: mon0 (1)[c::]:6789 connect error
[ 1496.067737][T19522] ceph: No mds server is up or the cluster is laggy
[ 1496.105319][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1496.161823][T19529] loop0: detected capacity change from 0 to 2048
[ 1496.226898][T19529] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c128, mo2=0002]
[ 1496.232257][T19529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1496.241656][T19529] EXT4-fs error (device loop0): ext4_ext_precache:649: inode #2: comm syz.0.19207: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[ 1496.259687][T19529] EXT4-fs (loop0): Remounting filesystem read-only
[ 1496.274663][T16425] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1496.329394][T19538] loop0: detected capacity change from 0 to 1024
[ 1496.332505][T19538] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1496.337966][T19538] EXT4-fs (loop0): revision level too high, forcing read-only mode
[ 1496.340516][T19538] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ee118, mo2=0000]
[ 1496.344336][T19538] System zones: 0-1, 3-12
[ 1496.346331][T19538] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 1496.349498][T19538] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.19210: Invalid inode table block 0 in block_group 0
[ 1496.356331][T19538] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem
[ 1496.359504][T19538] EXT4-fs error (device loop0): ext4_quota_write:7334: inode #3: comm syz.0.19210: mark_inode_dirty error
[ 1496.363172][T19538] Quota error (device loop0): write_blk: dquota write failed
[ 1496.365946][T19538] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[ 1496.369461][T19538] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.19210: Failed to acquire dquot type 0
[ 1496.373490][T19538] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.19210: Invalid inode table block 0 in block_group 0
[ 1496.378200][T19538] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem
[ 1496.381294][T19538] EXT4-fs error (device loop0): ext4_ext_truncate:4475: inode #15: comm syz.0.19210: mark_inode_dirty error
[ 1496.385332][T19538] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.19210: Invalid inode table block 0 in block_group 0
[ 1496.402105][T19538] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem
[ 1496.405514][T19538] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem
[ 1496.409291][T19538] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.19210: Invalid inode table block 0 in block_group 0
[ 1496.413806][T19538] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem
[ 1496.417208][T19538] EXT4-fs error (device loop0): ext4_truncate:4637: inode #15: comm syz.0.19210: mark_inode_dirty error
[ 1496.421433][T19538] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem
[ 1496.424632][T19538] EXT4-fs (loop0): 1 truncate cleaned up
[ 1496.427410][T19538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1496.446532][T16425] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1496.937193][T19581] loop0: detected capacity change from 0 to 8
[ 1496.947247][T19581] SQUASHFS error: zstd decompression error: 10
[ 1496.949250][T19581] SQUASHFS error: zstd decompression failed, data probably corrupt
[ 1496.952359][T19581] SQUASHFS error: Failed to read block 0x62b: -5
[ 1496.954577][T19581] SQUASHFS error: Unable to read metadata cache entry [629]
[ 1496.957094][T19581] SQUASHFS error: Unable to read directory block [629:ff26]
[ 1497.361737][T11146] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[ 1497.524662][T11146] usb 1-1: Using ep0 maxpacket: 32
[ 1497.531069][T11146] usb 1-1: config 0 has an invalid interface number: 63 but max is 0
[ 1497.540618][T11146] usb 1-1: config 0 has no interface number 0
[ 1497.543310][T11146] usb 1-1: config 0 interface 63 has no altsetting 0
[ 1497.546426][T11146] usb 1-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice=3b.9a
[ 1497.549795][T11146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1497.555071][T11146] usb 1-1: config 0 descriptor??
[ 1497.783077][T11146] usb 1-1: string descriptor 0 read error: -71
[ 1497.789899][T11146] gspca_main: t613-2.14.0 probing 17a1:0128
[ 1497.796323][T11146] gspca_t613: unknown sensor 0000
[ 1497.799939][T11146] t613 1-1:0.63: probe with driver t613 failed with error -22
[ 1497.804866][T11146] usb 1-1: USB disconnect, device number 32
[ 1498.041457][T19627] netlink: 20 bytes leftover after parsing attributes in process `syz.5.19253'.
[ 1498.471181][T19652] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19263'.
[ 1498.515025][T19654] loop0: detected capacity change from 0 to 256
[ 1498.519370][T19654] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1498.565477][T19656] netlink: 'syz.0.19265': attribute type 1 has an invalid length.
[ 1498.568606][T19656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19265'.
[ 1498.856959][T11145] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[ 1499.019103][T11145] usb 1-1: Using ep0 maxpacket: 32
[ 1499.023587][T11145] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1499.028018][T11145] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1499.033359][T11145] usb 1-1: config 0 descriptor??
[ 1499.037805][T11145] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 1499.257951][T11145] gspca_sunplus: reg_w_riv err -71
[ 1499.259948][T11145] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[ 1499.265178][T11145] usb 1-1: USB disconnect, device number 33
[ 1499.360582][T19694] overlayfs: failed to clone upperpath
[ 1500.139822][T19744] input: syz1 as /devices/virtual/input/input40
[ 1500.821332][T19754] loop0: detected capacity change from 0 to 40427
[ 1500.825784][T19754] F2FS-fs (loop0): Image doesn't support compression
[ 1500.832697][T19754] F2FS-fs (loop0): build fault injection rate: 690
[ 1500.837407][T19754] F2FS-fs (loop0): build fault injection type: 0x35f7
[ 1500.842274][T19754] F2FS-fs (loop0): invalid crc value
[ 1500.898451][T19754] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1500.902543][T19754] F2FS-fs (loop0): Start checkpoint disabled!
[ 1500.906274][T19754] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[ 1500.910474][T19754] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[ 1500.943639][T19001] kworker/u10:0: attempt to access beyond end of device
[ 1500.943639][T19001] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1500.950093][T19001] CPU: 1 UID: 0 PID: 19001 Comm: kworker/u10:0 Not tainted syzkaller #0 PREEMPT(full) 
[ 1500.950114][T19001] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1500.950123][T19001] Workqueue: writeback wb_workfn (flush-7:0)
[ 1500.950147][T19001] Call Trace:
[ 1500.950153][T19001]  <TASK>
[ 1500.950161][T19001]  dump_stack_lvl+0x189/0x250
[ 1500.950184][T19001]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1500.950201][T19001]  ? __pfx_queue_work_on+0x10/0x10
[ 1500.950215][T19001]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1500.950234][T19001]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1500.950261][T19001]  f2fs_handle_critical_error+0x37c/0x540
[ 1500.950288][T19001]  f2fs_write_end_io+0x886/0xb60
[ 1500.950318][T19001]  __submit_merged_bio+0x27a/0x6a0
[ 1500.950344][T19001]  __submit_merged_write_cond+0x255/0x530
[ 1500.950369][T19001]  f2fs_write_data_pages+0x261d/0x3000
[ 1500.950411][T19001]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1500.950437][T19001]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[ 1500.950482][T19001]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[ 1500.950547][T19001]  ? trace_f2fs_writepages+0x7f/0x200
[ 1500.950568][T19001]  ? f2fs_write_node_pages+0x478/0x6e0
[ 1500.950597][T19001]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[ 1500.950621][T19001]  ? __lock_acquire+0xab9/0xd20
[ 1500.950640][T19001]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1500.950653][T19001]  do_writepages+0x32e/0x550
[ 1500.950674][T19001]  ? reacquire_held_locks+0x127/0x1d0
[ 1500.950689][T19001]  ? writeback_sb_inodes+0x384/0x1010
[ 1500.950715][T19001]  __writeback_single_inode+0x145/0xff0
[ 1500.950734][T19001]  ? do_raw_spin_unlock+0x4d/0x240
[ 1500.950755][T19001]  writeback_sb_inodes+0x6c7/0x1010
[ 1500.950796][T19001]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1500.950853][T19001]  ? rcu_is_watching+0x15/0xb0
[ 1500.950877][T19001]  wb_writeback+0x43b/0xaf0
[ 1500.950901][T19001]  ? queue_io+0x3b1/0x590
[ 1500.950918][T19001]  ? __pfx_wb_writeback+0x10/0x10
[ 1500.950940][T19001]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1500.950960][T19001]  wb_workfn+0x409/0xef0
[ 1500.950986][T19001]  ? __pfx_wb_workfn+0x10/0x10
[ 1500.951003][T19001]  ? __lock_acquire+0xab9/0xd20
[ 1500.951025][T19001]  ? process_scheduled_works+0x9ef/0x17b0
[ 1500.951045][T19001]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1500.951061][T19001]  ? process_scheduled_works+0x9ef/0x17b0
[ 1500.951074][T19001]  ? process_scheduled_works+0x9ef/0x17b0
[ 1500.951089][T19001]  process_scheduled_works+0xae1/0x17b0
[ 1500.951124][T19001]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1500.951154][T19001]  worker_thread+0x8a0/0xda0
[ 1500.951171][T19001]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1500.951196][T19001]  ? __kthread_parkme+0x7b/0x200
[ 1500.951220][T19001]  kthread+0x711/0x8a0
[ 1500.951238][T19001]  ? __pfx_worker_thread+0x10/0x10
[ 1500.951252][T19001]  ? __pfx_kthread+0x10/0x10
[ 1500.951269][T19001]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1500.951285][T19001]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1500.951299][T19001]  ? __pfx_kthread+0x10/0x10
[ 1500.951314][T19001]  ret_from_fork+0x4bc/0x870
[ 1500.951329][T19001]  ? __pfx_ret_from_fork+0x10/0x10
[ 1500.951349][T19001]  ? __switch_to_asm+0x39/0x70
[ 1500.951360][T19001]  ? __switch_to_asm+0x33/0x70
[ 1500.951370][T19001]  ? __pfx_kthread+0x10/0x10
[ 1500.951388][T19001]  ret_from_fork_asm+0x1a/0x30
[ 1500.951415][T19001]  </TASK>
[ 1500.951422][T19001] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[ 1501.386772][T19772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19318'.
[ 1501.497312][T19781] netlink: 'syz.1.19321': attribute type 83 has an invalid length.
[ 1501.531763][T19783] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19323'.
[ 1501.581555][T19785] dvmrp9: entered allmulticast mode
[ 1501.776159][T19797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19330'.
[ 1502.840915][T19857] loop0: detected capacity change from 0 to 2048
[ 1502.853224][T19859] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1502.882748][T19857] CPU: 1 UID: 0 PID: 19857 Comm: syz.0.19348 Not tainted syzkaller #0 PREEMPT(full) 
[ 1502.882772][T19857] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1502.882782][T19857] Call Trace:
[ 1502.882788][T19857]  <TASK>
[ 1502.882796][T19857]  dump_stack_lvl+0x189/0x250
[ 1502.882826][T19857]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1502.882885][T19857]  ? __asan_memset+0x22/0x50
[ 1502.882907][T19857]  ? nilfs_btree_alloc_path+0x5e5/0x610
[ 1502.882936][T19857]  nilfs_btree_last_key+0x491/0x620
[ 1502.882962][T19857]  nilfs_bmap_last_key+0x7a/0x130
[ 1502.882986][T19857]  nilfs_truncate_bmap+0xfe/0x340
[ 1502.883003][T19857]  ? __pfx_nilfs_truncate_bmap+0x10/0x10
[ 1502.883020][T19857]  ? nilfs_transaction_begin+0x52a/0x710
[ 1502.883037][T19857]  ? __pfx_nilfs_get_block+0x10/0x10
[ 1502.883059][T19857]  nilfs_truncate+0x279/0x4e0
[ 1502.883085][T19857]  ? __pfx_nilfs_truncate+0x10/0x10
[ 1502.883112][T19857]  ? truncate_setsize+0xcf/0xf0
[ 1502.883134][T19857]  nilfs_setattr+0x206/0x2b0
[ 1502.883151][T19857]  ? __pfx_nilfs_setattr+0x10/0x10
[ 1502.883171][T19857]  ? try_break_deleg+0x79/0x130
[ 1502.883189][T19857]  ? __pfx_nilfs_setattr+0x10/0x10
[ 1502.883205][T19857]  notify_change+0xc1a/0xf40
[ 1502.883234][T19857]  do_truncate+0x1a4/0x220
[ 1502.883257][T19857]  ? __pfx_do_truncate+0x10/0x10
[ 1502.883276][T19857]  ? apparmor_file_truncate+0x23e/0x2d0
[ 1502.883313][T19857]  path_openat+0x306c/0x3830
[ 1502.883393][T19857]  ? __pfx_path_openat+0x10/0x10
[ 1502.883433][T19857]  do_filp_open+0x1fa/0x410
[ 1502.883451][T19857]  ? __lock_acquire+0xab9/0xd20
[ 1502.883469][T19857]  ? __pfx_do_filp_open+0x10/0x10
[ 1502.883509][T19857]  ? _raw_spin_unlock+0x28/0x50
[ 1502.883528][T19857]  ? alloc_fd+0x64c/0x6c0
[ 1502.883552][T19857]  do_sys_openat2+0x121/0x1c0
[ 1502.883573][T19857]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1502.883598][T19857]  ? rcu_is_watching+0x15/0xb0
[ 1502.883618][T19857]  __x64_sys_openat+0x138/0x170
[ 1502.883641][T19857]  do_syscall_64+0xfa/0xfa0
[ 1502.883668][T19857]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1502.883688][T19857]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1502.883703][T19857]  ? exc_page_fault+0xab/0x100
[ 1502.883726][T19857]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1502.883740][T19857] RIP: 0033:0x7ff6d518f749
[ 1502.883755][T19857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1502.883768][T19857] RSP: 002b:00007ff6d60ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1502.883784][T19857] RAX: ffffffffffffffda RBX: 00007ff6d53e5fa0 RCX: 00007ff6d518f749
[ 1502.883795][T19857] RDX: 00000000000a2281 RSI: 0000200000000040 RDI: ffffffffffffff9c
[ 1502.883806][T19857] RBP: 00007ff6d5213f91 R08: 0000000000000000 R09: 0000000000000000
[ 1502.883816][T19857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1502.883825][T19857] R13: 00007ff6d53e6038 R14: 00007ff6d53e5fa0 R15: 00007fff6a661088
[ 1502.883854][T19857]  </TASK>
[ 1502.883861][T19857] NILFS (loop0): btree level mismatch (ino=16): 1 != 7
[ 1502.993590][T19867] netlink: 144 bytes leftover after parsing attributes in process `syz.1.19352'.
[ 1502.995700][T19857] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16)
[ 1503.004280][T19857] Remounting filesystem read-only
[ 1503.006302][T19857] NILFS (loop0): error -5 truncating bmap (ino=16)
[ 1503.056301][T16425] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[ 1503.142922][T19875] netlink: 16 bytes leftover after parsing attributes in process `syz.5.19356'.
[ 1505.486250][T24615] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[ 1505.661838][T24615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1505.665666][T24615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1505.675041][T24615] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1505.680586][T24615] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1505.684607][T24615] usb 1-1: Product: syz
[ 1505.686256][T24615] usb 1-1: Manufacturer: syz
[ 1505.687997][T24615] usb 1-1: SerialNumber: syz
[ 1505.693453][T24615] usb 1-1: config 0 descriptor??
[ 1505.700692][T24615] usb 1-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00
[ 1505.863795][T19962] futex_wake_op: syz.5.19393 tries to shift op by 144; fix this program
[ 1505.938452][T24615] usb 1-1: USB disconnect, device number 34
[ 1506.565943][T20001] loop0: detected capacity change from 0 to 256
[ 1506.590375][T20001] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[ 1506.606495][T20001] exFAT-fs (loop0): start_clu is invalid cluster(0x400)
[ 1506.675636][T20006] netlink: 'syz.0.19414': attribute type 1 has an invalid length.
[ 1506.886731][T20009] loop0: detected capacity change from 0 to 1764
[ 1508.123835][T20056] Bluetooth: hci0: unsupported parameter 30225
[ 1508.132237][T20056] Bluetooth: hci0: unsupported parameter 31232
[ 1508.134250][T20056] Bluetooth: hci0: unsupported parameter 30225
[ 1508.140652][T20056] Bluetooth: hci0: unsupported parameter 31232
[ 1508.230392][T20062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19439'.
[ 1508.859236][   T24] usb 1-1: new low-speed USB device number 35 using dummy_hcd
[ 1509.149986][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1509.154018][   T24] usb 1-1: config 7 has an invalid interface number: 199 but max is 0
[ 1509.159027][   T24] usb 1-1: config 7 has no interface number 0
[ 1509.163465][   T24] usb 1-1: config 7 interface 199 has no altsetting 0
[ 1509.171158][   T24] usb 1-1: string descriptor 0 read error: -22
[ 1509.173218][   T24] usb 1-1: New USB device found, idVendor=0c45, idProduct=6282, bcdDevice=cb.15
[ 1509.239137][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1509.446305][   T24] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6282
[ 1509.888049][   T24] gspca_sn9c20x: Write register 1000 failed -71
[ 1509.890299][   T24] gspca_sn9c20x: Device initialization failed
[ 1509.892628][   T24] gspca_sn9c20x 1-1:7.199: probe with driver gspca_sn9c20x failed with error -71
[ 1509.897972][   T24] usb 1-1: USB disconnect, device number 35
[ 1510.754381][T20119] loop0: detected capacity change from 0 to 32768
[ 1510.768873][T20119] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 1510.812694][T16425] ocfs2: Unmounting device (7,0) on (node local)
[ 1510.843115][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1510.947880][T20137] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[ 1511.024998][T20145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19477'.
[ 1511.028421][T20145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19477'.
[ 1511.033521][T20145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19477'.
[ 1511.036319][T20147] ubi: mtd0 is already attached to ubi31
[ 1511.036950][T20145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19477'.
[ 1511.073902][T20151] loop0: detected capacity change from 0 to 512
[ 1512.752835][T20207] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1513.393721][T20223] bond8: option packets_per_slave: mode dependency failed, not supported in mode broadcast(3)
[ 1513.401386][T20223] bond8 (unregistering): Released all slaves
[ 1513.420134][T20226] netlink: 'syz.0.19511': attribute type 5 has an invalid length.
[ 1513.429246][T20226] ip6erspan0: entered promiscuous mode
[ 1513.495692][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1513.525797][T20228] netlink: 'syz.0.19512': attribute type 1 has an invalid length.
[ 1513.596125][T20234] loop0: detected capacity change from 0 to 16
[ 1513.603592][T20234] erofs (device loop0): mounted with root inode @ nid 36.
[ 1514.495360][T20233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1515.168068][T20304] netlink: 'syz.0.19544': attribute type 11 has an invalid length.
[ 1515.306943][T20316] loop0: detected capacity change from 0 to 128
[ 1515.435787][T20325] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19554'.
[ 1515.440032][T20325] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19554'.
[ 1515.872601][T20351] loop0: detected capacity change from 0 to 32768
[ 1515.875536][T20355] netlink: 'syz.5.19568': attribute type 11 has an invalid length.
[ 1516.866242][T20390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19583'.
[ 1517.021140][T20396] netlink: 104 bytes leftover after parsing attributes in process `syz.0.19586'.
[ 1517.070227][T20399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19587'.
[ 1517.499932][T24615] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[ 1517.674707][T24615] usb 1-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice=3b.70
[ 1517.678273][T24615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1517.684340][T24615] usb 1-1: config 0 descriptor??
[ 1517.914616][   T24] usb 1-1: USB disconnect, device number 36
[ 1518.394489][T20430] futex_wake_op: syz.1.19599 tries to shift op by -1; fix this program
[ 1518.972742][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1518.979395][T20454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19611'.
[ 1519.067550][T20446] loop0: detected capacity change from 0 to 40427
[ 1519.071977][T20446] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[ 1519.074905][T20446] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[ 1519.080284][T20446] F2FS-fs (loop0): invalid crc value
[ 1519.153447][T20446] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1519.158683][T20446] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[ 1519.161370][T20446] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[ 1519.785183][T20469] loop0: detected capacity change from 0 to 2048
[ 1519.796617][T20469] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1519.905667][T20477] netlink: 16 bytes leftover after parsing attributes in process `syz.5.19620'.
[ 1519.917392][T20479] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input41
[ 1520.252452][T11136] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[ 1520.424635][T11136] usb 1-1: Using ep0 maxpacket: 8
[ 1520.432861][T11136] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1520.437602][T11136] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[ 1520.441194][T11136] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1520.445540][T11136] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1520.449352][T11136] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1520.457237][T11136] usb 1-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f
[ 1520.460565][T11136] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1520.463456][T11136] usb 1-1: Product: syz
[ 1520.465030][T11136] usb 1-1: Manufacturer: syz
[ 1520.466771][T11136] usb 1-1: SerialNumber: syz
[ 1520.471383][T11136] usb 1-1: config 0 descriptor??
[ 1520.698469][   T24] usb 1-1: USB disconnect, device number 37
[ 1521.524460][T20517] loop0: detected capacity change from 0 to 32768
[ 1521.526902][T20517] btrfs: Deprecated parameter 'usebackuproot'
[ 1521.528782][T20517] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[ 1521.532603][T20517] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.19639 (20517)
[ 1521.540383][T20517] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1521.543454][T20517] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[ 1521.572760][T20517] BTRFS info (device loop0): rebuilding free space tree
[ 1521.581456][T20517] BTRFS info (device loop0): allowing degraded mounts
[ 1521.584553][T20517] BTRFS info (device loop0): enabling ssd optimizations
[ 1521.587232][T20517] BTRFS info (device loop0): turning on flush-on-commit
[ 1521.589821][T20517] BTRFS info (device loop0): enabling free space tree
[ 1521.592143][T20517] BTRFS info (device loop0): force clearing of disk cache
[ 1521.594563][T20517] BTRFS info (device loop0): trying to use backup root at mount time
[ 1521.597302][T20517] BTRFS info (device loop0): use zstd compression, level 3
[ 1521.667881][T20543] netlink: 'syz.5.19644': attribute type 3 has an invalid length.
[ 1521.847483][T16425] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1521.859151][T20547] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[ 1521.892276][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1521.902443][T20547] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[ 1521.945749][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1522.181866][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1522.223568][T20553] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.19646'.
[ 1522.448626][T20567] netlink: 152 bytes leftover after parsing attributes in process `syz.5.19656'.
[ 1523.133280][   T24] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[ 1523.297912][   T24] usb 1-1: config 2 has an invalid interface number: 174 but max is 0
[ 1523.301303][   T24] usb 1-1: config 2 has no interface number 0
[ 1523.304972][   T24] usb 1-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E
[ 1523.317783][   T24] usb 1-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023
[ 1523.325388][   T24] usb 1-1: config 2 interface 174 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1523.334055][   T24] usb 1-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1523.345633][   T24] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e
[ 1523.349315][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1523.356044][   T24] usb 1-1: Product: syz
[ 1523.360979][   T24] usb 1-1: Manufacturer: syz
[ 1523.366396][   T24] usb 1-1: SerialNumber: syz
[ 1523.376287][T20578] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1523.616610][   T24] usb 1-1: probing VID:PID(0424:012C)   
[ 1523.631618][   T24] usb 1-1: vub300 testing BULK IN EndPoint(0) 8E
[ 1523.633539][   T24] usb 1-1: vub300 testing BULK IN EndPoint(1) 82
[ 1523.636588][   T24] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs
[ 1523.638929][   T24] vub300 1-1:2.174: probe with driver vub300 failed with error -22
[ 1523.643627][   T24] usb 1-1: USB disconnect, device number 38
[ 1524.361450][T20632] Invalid ELF header magic: != ELF
[ 1524.783956][T20644] netlink: 'syz.1.19692': attribute type 10 has an invalid length.
[ 1524.790508][T11145] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[ 1524.958896][T11145] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1524.965753][T11145] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1524.970814][T11145] usb 1-1: config 0 descriptor??
[ 1524.978052][T11145] cp210x 1-1:0.0: cp210x converter detected
[ 1525.633794][T11145] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71
[ 1525.636679][T11145] cp210x 1-1:0.0: GPIO initialisation failed: -71
[ 1525.640171][T11145] usb 1-1: cp210x converter now attached to ttyUSB0
[ 1525.643527][T11145] usb 1-1: USB disconnect, device number 39
[ 1525.649117][T11145] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1525.651866][T11145] cp210x 1-1:0.0: device disconnected
[ 1526.404882][T20684] loop0: detected capacity change from 0 to 512
[ 1526.409893][T20684] EXT4-fs: Ignoring removed oldalloc option
[ 1526.412692][T20684] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1526.422224][T20684] EXT4-fs (loop0): 1 truncate cleaned up
[ 1526.425448][T20684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1526.469946][T20684] loop0: detected capacity change from 512 to 64
[ 1526.514589][T16425] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[ 1526.520013][T16425] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[ 1526.760182][T16425] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1527.136718][T12209] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1527.144619][T12209] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1527.149088][T12209] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1527.156086][T12209] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1527.159702][T12209] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1527.224146][T20694] ip6_vti0 speed is unknown, defaulting to 1000
[ 1527.249911][T20699] overlayfs: failed to clone upperpath
[ 1527.335589][T20694] wg1 speed is unknown, defaulting to 1000
[ 1527.387207][T20703] syz_tun (unregistering): left allmulticast mode
[ 1527.618658][T20694] chnl_net:caif_netlink_parms(): no params data found
[ 1527.679253][T20694] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1527.681378][T20694] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1527.684044][T20694] bridge_slave_0: entered allmulticast mode
[ 1527.686905][T20694] bridge_slave_0: entered promiscuous mode
[ 1527.690377][T20694] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1527.692595][T20694] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1527.695143][T20694] bridge_slave_1: entered allmulticast mode
[ 1527.697853][T20694] bridge_slave_1: entered promiscuous mode
[ 1527.721277][T20694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1527.726556][T20694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1527.754133][T20694] team0: Port device team_slave_0 added
[ 1527.757689][T20694] team0: Port device team_slave_1 added
[ 1527.779363][T20694] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1527.782574][T20694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1527.792382][T20694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1527.802818][T20694] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1527.805404][T20694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1527.813690][T20694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1527.850414][T20694] hsr_slave_0: entered promiscuous mode
[ 1527.852867][T20694] hsr_slave_1: entered promiscuous mode
[ 1527.855067][T20694] debugfs: 'hsr0' already exists in 'hsr'
[ 1527.857134][T20694] Cannot create hsr debugfs directory
[ 1528.034894][T20694] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1528.053676][T20694] 8021q: adding VLAN 0 to HW filter on device team0
[ 1528.061499][T24303] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1528.064330][T24303] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1528.075749][T24303] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1528.078521][T24303] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1528.236963][T20694] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1528.393333][T20694] veth0_vlan: entered promiscuous mode
[ 1528.401448][T20694] veth1_vlan: entered promiscuous mode
[ 1528.423140][T20694] veth0_macvtap: entered promiscuous mode
[ 1528.427921][T20694] veth1_macvtap: entered promiscuous mode
[ 1528.440306][T20694] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1528.448831][T20694] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1528.601679][T24297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1528.605826][T24297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1528.657944][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1528.673821][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1529.059585][T20755] netlink: 36 bytes leftover after parsing attributes in process `syz.7.19733'.
[ 1529.068252][T20759] netlink: 80 bytes leftover after parsing attributes in process `syz.1.19735'.
[ 1529.079830][T20755] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1529.082566][T20755] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1529.238969][T20770] loop7: detected capacity change from 0 to 512
[ 1529.261933][T20770] fscrypt (loop7, inode 2): Error -61 getting encryption context
[ 1529.268048][T20770] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -61
[ 1529.274458][T20770] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #13: comm syz.7.19740: iget: bad i_size value: 12154757448730
[ 1529.285646][T20770] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.19740: couldn't read orphan inode 13 (err -117)
[ 1529.299843][T20770] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1529.311032][T20770] fscrypt (loop7, inode 2): Error -61 getting encryption context
[ 1529.341911][T20694] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1529.390725][ T5823] Bluetooth: hci2: command tx timeout
[ 1529.505548][T20789] CIFS: Unable to determine destination address
[ 1530.247520][T20832] netlink: 'syz.1.19769': attribute type 1 has an invalid length.
[ 1530.270696][T20832] bond8: entered promiscuous mode
[ 1530.276998][T20832] bond8: entered allmulticast mode
[ 1530.280646][T20832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19769'.
[ 1530.290637][T20832] bridge6: the hash_elasticity option has been deprecated and is always 16
[ 1530.307669][T20832] bond8: (slave bridge6): making interface the new active one
[ 1530.310319][T20832] bridge6: entered promiscuous mode
[ 1530.312812][T20832] bridge6: entered allmulticast mode
[ 1530.316906][T20832] bond8: (slave bridge6): Enslaving as an active interface with an up link
[ 1530.323227][T20832] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19769'.
[ 1530.359666][T20832] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1530.415324][T20838] overlayfs: failed to clone upperpath
[ 1530.905704][T20854] loop7: detected capacity change from 0 to 40427
[ 1530.910405][T20854] F2FS-fs (loop7): Image doesn't support compression
[ 1530.914832][T20854] F2FS-fs (loop7): build fault injection rate: 2
[ 1530.917644][T20854] F2FS-fs (loop7): build fault injection type: 0x35f7
[ 1530.920352][T20854] F2FS-fs (loop7): inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x2e72/0x7170
[ 1531.170403][T20873] netlink: 20 bytes leftover after parsing attributes in process `syz.5.19790'.
[ 1531.178248][T20873] netlink: 'syz.5.19790': attribute type 4 has an invalid length.
[ 1531.297928][T20883] blktrace: Concurrent blktraces are not allowed on loop10
[ 1531.626836][ T5823] Bluetooth: hci2: command tx timeout
[ 1531.893925][T20909] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[ 1533.879062][ T5823] Bluetooth: hci2: command tx timeout
[ 1534.600151][T20998] netlink: 300 bytes leftover after parsing attributes in process `syz.1.19848'.
[ 1535.918101][T21031] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1536.132965][ T5823] Bluetooth: hci2: command tx timeout
[ 1536.589475][T21059] overlayfs: workdir and upperdir must reside under the same mount
[ 1536.692886][T21067] loop7: detected capacity change from 0 to 512
[ 1536.703931][T21067] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1536.710326][T21067] EXT4-fs error (device loop7): ext4_iget_extra_inode:5075: inode #15: comm syz.7.19880: corrupted in-inode xattr: overlapping e_value 
[ 1536.716085][T21067] EXT4-fs (loop7): get orphan inode failed
[ 1536.720610][T21067] EXT4-fs (loop7): mount failed
[ 1536.888319][T21079] netlink: 24 bytes leftover after parsing attributes in process `syz.5.19885'.
[ 1537.369339][T21109] loop7: detected capacity change from 0 to 128
[ 1537.393193][T21109] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1537.456879][T20694] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1537.489943][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1538.659537][T21151] netlink: 212340 bytes leftover after parsing attributes in process `syz.7.19917'.
[ 1538.662581][T21151] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[ 1538.703217][T21157] Invalid ELF header magic: != ELF
[ 1541.541986][T21215] netlink: 24 bytes leftover after parsing attributes in process `syz.5.19947'.
[ 1541.938863][   T34] audit: type=1326 audit(1990.793:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21218 comm="syz.5.19948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ef38f749 code=0x7ffc0000
[ 1541.956333][   T34] audit: type=1326 audit(1990.802:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21218 comm="syz.5.19948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ef38f749 code=0x7ffc0000
[ 1541.988792][   T34] audit: type=1326 audit(1990.811:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21218 comm="syz.5.19948" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25ef38f749 code=0x7ffc0000
[ 1542.004700][   T34] audit: type=1326 audit(1990.811:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21218 comm="syz.5.19948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ef38f749 code=0x7ffc0000
[ 1542.012332][   T34] audit: type=1326 audit(1990.820:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21218 comm="syz.5.19948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ef38f749 code=0x7ffc0000
[ 1542.019909][   T34] audit: type=1326 audit(1990.820:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21218 comm="syz.5.19948" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25ef38f749 code=0x7ffc0000
[ 1542.029719][   T34] audit: type=1326 audit(1990.857:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21218 comm="syz.5.19948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ef38f749 code=0x7ffc0000
[ 1542.037653][   T34] audit: type=1326 audit(1990.866:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21218 comm="syz.5.19948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ef38f749 code=0x7ffc0000
[ 1542.045479][   T34] audit: type=1326 audit(1990.876:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21218 comm="syz.5.19948" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25ef38f749 code=0x7ffc0000
[ 1542.055901][   T34] audit: type=1326 audit(1990.876:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21218 comm="syz.5.19948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ef38f749 code=0x7ffc0000
[ 1542.089099][T21222] loop7: detected capacity change from 0 to 1024
[ 1542.125140][T20694] hfsplus: bad catalog entry type
[ 1542.136590][T20694] hfsplus: bad catalog entry type
[ 1542.162214][T24304] hfsplus: b-tree write err: -5, ino 4
[ 1542.229667][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1542.263316][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1542.348072][   T13] bridge_slave_1: left allmulticast mode
[ 1542.350016][   T13] bridge_slave_1: left promiscuous mode
[ 1542.354977][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1542.364973][   T13] bridge_slave_0: left allmulticast mode
[ 1542.368786][   T13] bridge_slave_0: left promiscuous mode
[ 1542.373369][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1542.791222][T12209] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1542.810012][T12209] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1542.817239][T12209] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1542.821391][T12209] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1542.824513][T12209] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1542.880815][T21242] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19961'.
[ 1543.104149][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1543.162090][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1543.362322][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1543.393833][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1543.452083][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1543.483722][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1543.526248][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1543.532434][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1543.538110][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1543.544245][   T13] bond0 (unregistering): Released all slaves
[ 1543.611621][T21237] ip6_vti0 speed is unknown, defaulting to 1000
[ 1543.739633][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1543.946611][T21237] wg1 speed is unknown, defaulting to 1000
[ 1544.136323][T21237] chnl_net:caif_netlink_parms(): no params data found
[ 1544.326424][   T13] hsr_slave_0: left promiscuous mode
[ 1544.331621][   T13] hsr_slave_1: left promiscuous mode
[ 1544.343983][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1544.346379][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1544.356463][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1544.358765][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1544.376386][T21289] openvswitch: netlink: IP tunnel dst address not specified
[ 1544.391164][   T13] veth1_macvtap: left promiscuous mode
[ 1544.392862][   T13] veth0_macvtap: left promiscuous mode
[ 1544.394703][   T13] veth1_vlan: left promiscuous mode
[ 1544.396394][   T13] veth0_vlan: left promiscuous mode
[ 1544.434564][T21291] openvswitch: netlink: Missing valid actions attribute.
[ 1544.444402][T21291] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1544.873277][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1545.127004][ T5823] Bluetooth: hci2: command tx timeout
[ 1545.389407][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1545.543542][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1545.859555][T21320] netlink: 64 bytes leftover after parsing attributes in process `syz.1.19994'.
[ 1546.104912][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1546.190696][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1547.344535][ T5823] Bluetooth: hci2: command tx timeout
[ 1547.372588][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1547.412385][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1547.445542][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1547.481070][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1547.514083][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1547.549490][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1547.584810][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1547.618121][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1547.655538][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1547.689024][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1547.854511][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1547.866166][T21237] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1547.868854][T21237] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1547.871800][T21237] bridge_slave_0: entered allmulticast mode
[ 1547.875014][T21237] bridge_slave_0: entered promiscuous mode
[ 1547.878885][T21237] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1547.881699][T21237] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1547.884267][T21237] bridge_slave_1: entered allmulticast mode
[ 1548.282006][T21237] bridge_slave_1: entered promiscuous mode
[ 1548.328540][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1548.394474][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1548.400452][T21237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1548.405299][T21237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1548.450260][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1548.461720][T21237] team0: Port device team_slave_0 added
[ 1548.505181][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1548.506703][T21237] team0: Port device team_slave_1 added
[ 1548.533357][   T34] kauditd_printk_skb: 8 callbacks suppressed
[ 1548.533372][   T34] audit: type=1326 audit(1996.931:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21371 comm="syz.1.20017" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db9f8f749 code=0x7ffc0000
[ 1548.543860][   T34] audit: type=1326 audit(1996.931:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21371 comm="syz.1.20017" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db9f8f749 code=0x7ffc0000
[ 1548.566250][   T34] audit: type=1326 audit(1996.940:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21371 comm="syz.1.20017" exe="/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f2db9f8f749 code=0x7ffc0000
[ 1548.582556][T21237] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1548.585135][T21237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1548.594698][   T34] audit: type=1326 audit(1996.940:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21371 comm="syz.1.20017" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db9f8f749 code=0x7ffc0000
[ 1548.602677][   T34] audit: type=1326 audit(1996.940:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21371 comm="syz.1.20017" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db9f8f749 code=0x7ffc0000
[ 1548.610234][   T34] audit: type=1326 audit(1996.940:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21371 comm="syz.1.20017" exe="/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f2db9f8f749 code=0x7ffc0000
[ 1548.677276][T21237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1548.683963][T21237] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1548.689531][T21237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1548.701565][   T34] audit: type=1326 audit(1996.940:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21371 comm="syz.1.20017" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db9f8f749 code=0x7ffc0000
[ 1548.712728][   T34] audit: type=1326 audit(1996.940:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21371 comm="syz.1.20017" exe="/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f2db9f8f749 code=0x7ffc0000
[ 1548.723425][   T34] audit: type=1326 audit(1996.940:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21371 comm="syz.1.20017" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db9f8f749 code=0x7ffc0000
[ 1548.731136][T21237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1548.974553][T21237] hsr_slave_0: entered promiscuous mode
[ 1548.977932][T21237] hsr_slave_1: entered promiscuous mode
[ 1548.981219][T21237] debugfs: 'hsr0' already exists in 'hsr'
[ 1548.983515][T21237] Cannot create hsr debugfs directory
[ 1549.062167][T21380] 9pnet_fd: Insufficient options for proto=fd
[ 1549.319732][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[ 1549.325632][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[ 1549.514248][T21237] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1549.526464][T21237] 8021q: adding VLAN 0 to HW filter on device team0
[ 1549.535035][T24304] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1549.536988][T24304] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1549.547601][T24304] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1549.550377][T24304] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1549.566203][ T5823] Bluetooth: hci2: command tx timeout
[ 1549.707255][T21237] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1549.863750][T21237] veth0_vlan: entered promiscuous mode
[ 1549.873866][T21237] veth1_vlan: entered promiscuous mode
[ 1549.894288][T21237] veth0_macvtap: entered promiscuous mode
[ 1549.898280][T21237] veth1_macvtap: entered promiscuous mode
[ 1549.911106][T21237] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1549.920435][T21237] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1550.043838][T12734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1550.049503][T12734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1550.066586][T19001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1550.069090][T19001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1550.457276][T21432] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[ 1551.005488][T21449] netlink: 264 bytes leftover after parsing attributes in process `syz.5.20044'.
[ 1551.010995][T21449] netlink: 56 bytes leftover after parsing attributes in process `syz.5.20044'.
[ 1551.164291][T21455] loop2: detected capacity change from 0 to 4096
[ 1551.818169][ T5823] Bluetooth: hci2: command tx timeout
[ 1551.822130][T21479] loop2: detected capacity change from 0 to 32768
[ 1551.851592][T21479] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[ 1551.964371][T21237] ocfs2: Unmounting device (7,2) on (node local)
[ 1552.912084][T21510] loop2: detected capacity change from 0 to 4096
[ 1552.922480][T21510] ntfs3(loop2): Primary boot: start of MFT 0x4 (0xff) is out of volume 0x1ff.
[ 1552.925862][T21510] ntfs3(loop2): try to read out of volume at offset 0x1ffe00
[ 1553.048704][T21519] loop2: detected capacity change from 0 to 1024
[ 1553.241151][T21526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20078'.
[ 1553.246675][T21526] netlink: 'syz.1.20078': attribute type 18 has an invalid length.
[ 1553.255419][T21526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20078'.
[ 1553.729429][T21531] loop2: detected capacity change from 0 to 65536
[ 1553.923850][T21531] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[ 1553.932928][T21531] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 1553.951226][T21531] XFS (loop2): Ending clean mount
[ 1553.989822][T21237] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 1554.136270][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1554.234662][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1554.267300][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1554.302648][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1554.755049][T21593] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1554.758293][T21593] overlayfs: missing 'lowerdir'
[ 1555.084818][T21620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20116'.
[ 1555.089734][T11122] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[ 1555.690402][T11122] usb 3-1: Using ep0 maxpacket: 8
[ 1555.697876][T11122] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[ 1555.701070][T11122] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1555.703583][T11122] usb 3-1: Product: syz
[ 1555.704806][T11122] usb 3-1: Manufacturer: syz
[ 1555.706151][T11122] usb 3-1: SerialNumber: syz
[ 1555.715673][T11122] usb 3-1: config 0 descriptor??
[ 1555.948162][T11122] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[ 1556.309210][T11122] usb write operation failed. (-71)
[ 1556.318154][T11122] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1556.321736][T11122] dvbdev: DVB: registering new adapter (Terratec H7)
[ 1556.323697][T11122] usb 3-1: media controller created
[ 1556.330124][T11122] usb read operation failed. (-71)
[ 1556.332202][T11122] usb write operation failed. (-71)
[ 1556.335967][T11122] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[ 1556.339799][T11122] usb 3-1: USB disconnect, device number 50
[ 1557.100683][T21650] loop2: detected capacity change from 0 to 32768
[ 1557.107775][T21650] (syz.2.20128,21650,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1557.113184][T21650] (syz.2.20128,21650,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1557.125922][T21650] JBD2: Ignoring recovery information on journal
[ 1557.181028][T21650] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[ 1557.201520][T31754] ocfs2: Finishing quota recovery on device (7,2) for slot 0
[ 1557.260952][T21237] ocfs2: Unmounting device (7,2) on (node local)
[ 1557.676881][T21667] netlink: 'syz.2.20133': attribute type 1 has an invalid length.
[ 1557.681512][T21667] netlink: 'syz.2.20133': attribute type 2 has an invalid length.
[ 1557.933052][T21691] xt_limit: Overflow, try lower: 167772/2147483648
[ 1559.308307][T21716] loop2: detected capacity change from 0 to 32768
[ 1559.363311][T21716] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1559.405234][T21716] XFS (loop2): Ending clean mount
[ 1559.758777][T21237] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1560.096529][T21748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20164'.
[ 1560.838261][T21806] loop2: detected capacity change from 0 to 4096
[ 1560.857140][T21806] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[ 1560.860113][T21806] ntfs3(loop2): ino=1a, mi_enum_attr
[ 1560.862326][T21806] ntfs3(loop2): ino=1a, mi_enum_attr
[ 1560.864902][T21806] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[ 1560.920086][T19001] ntfs3(loop2): ino=5, mi_enum_attr
[ 1561.054830][T21816] loop2: detected capacity change from 0 to 8192
[ 1561.176000][   T34] audit: type=1800 audit(2000000002.981:860): pid=21818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.20198" name="file1" dev="tmpfs" ino=24746 res=0 errno=0
[ 1561.248094][T21828] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20203'.
[ 1562.666930][T21867] overlayfs: failed to clone upperpath
[ 1562.846413][T11122] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[ 1563.065168][T11122] usb 3-1: Using ep0 maxpacket: 32
[ 1563.069236][T11122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1563.073632][T11122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1563.078340][T11122] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1563.082093][T11122] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1563.097545][T11122] usb 3-1: config 0 descriptor??
[ 1563.103627][T11122] hub 3-1:0.0: USB hub found
[ 1563.320066][T11122] hub 3-1:0.0: 1 port detected
[ 1564.124766][T11122] hub 3-1:0.0: activate --> -90
[ 1564.558164][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1564.785965][   T33] usb 3-1: USB disconnect, device number 51
[ 1565.373119][T21914] tipc: Started in network mode
[ 1565.375033][T21914] tipc: Node identity -, cluster identity 4711
[ 1565.546506][T21926] QAT: failed to copy from user cfg_data.
[ 1565.814432][T21935] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20250'.
[ 1566.488253][T21943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1567.280753][T21972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1567.405029][T11145] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[ 1567.711063][T11145] usb 3-1: Using ep0 maxpacket: 32
[ 1567.717825][T11145] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[ 1567.723444][T11145] usb 3-1: config 0 has no interface number 0
[ 1567.731203][T11145] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1567.737972][T11145] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1567.741196][T11145] usb 3-1: Product: syz
[ 1567.746086][T11145] usb 3-1: Manufacturer: syz
[ 1567.748261][T11145] usb 3-1: SerialNumber: syz
[ 1567.756845][T11145] usb 3-1: config 0 descriptor??
[ 1567.762235][T11145] smsc95xx v2.0.0
[ 1568.285689][T21992] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1568.289505][T21992] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1568.757104][T22005] /dev/nullb0: Can't lookup blockdev
[ 1568.863799][T11145] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71
[ 1568.867028][T11145] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA
[ 1568.870360][T11145] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[ 1568.873674][T11145] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[ 1568.877986][T11145] usb 3-1: USB disconnect, device number 52
[ 1569.753752][T22037] netlink: 64 bytes leftover after parsing attributes in process `syz.1.20296'.
[ 1569.785254][T22031] loop2: detected capacity change from 0 to 32768
[ 1569.789478][T22031] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.20293 (22031)
[ 1569.808077][T22031] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1569.812016][T22031] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[ 1569.875238][T22053] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1569.924144][T20977] BTRFS warning (device loop2): checksum verify failed on logical 5255168 mirror 1 wanted 0x9709ac91b13763edbc70e3f66e4724e8e7d010a1ba39ef9aedd96f07c31e93c8 found 0x2141576367ccbb48492ef21b09d55932294997dd9da0c02a37ed508dc0c96c0e level 1
[ 1569.945612][T22031] BTRFS warning (device loop2): failed to read fs tree: -5
[ 1570.148839][T22069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20303'.
[ 1570.229037][T22031] BTRFS error (device loop2): open_ctree failed: -5
[ 1570.349145][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1570.407206][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1570.446545][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1570.605558][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1570.733547][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1570.767697][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1570.799218][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1570.839641][T22078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1571.077978][T22095] netlink: 56 bytes leftover after parsing attributes in process `syz.2.20315'.
[ 1571.084622][T22095] netlink: 56 bytes leftover after parsing attributes in process `syz.2.20315'.
[ 1571.203940][   T34] audit: type=1326 audit(2000000012.239:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22106 comm="syz.5.20321" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25ef38f749 code=0x0
[ 1571.561188][T22116] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1572.289199][T22136] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20334'.
[ 1572.402199][   T34] audit: type=1326 audit(2000000013.347:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22145 comm="syz.1.20339" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2db9f8f749 code=0x0
[ 1573.720251][T22162] libceph: resolve '0..' (ret=-3): failed
[ 1574.037600][ T5886] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[ 1574.199896][ T5886] usb 3-1: Using ep0 maxpacket: 16
[ 1574.203473][ T5886] usb 3-1: config 4 has an invalid interface number: 51 but max is 0
[ 1574.206032][ T5886] usb 3-1: config 4 has no interface number 0
[ 1574.208280][ T5886] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16
[ 1574.211981][ T5886] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1574.214953][ T5886] usb 3-1: config 4 interface 51 has no altsetting 0
[ 1574.219428][ T5886] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76
[ 1574.223173][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1574.226228][ T5886] usb 3-1: Product: syz
[ 1574.227910][ T5886] usb 3-1: Manufacturer: syz
[ 1574.229788][ T5886] usb 3-1: SerialNumber: syz
[ 1574.235811][T22167] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1574.238836][T22167] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1574.465883][ T5886] cdc_eem 3-1:4.51: probe with driver cdc_eem failed with error -71
[ 1574.473105][ T5886] usb 3-1: USB disconnect, device number 53
[ 1574.847702][T22192] fuse: blksize only supported for fuseblk
[ 1575.323667][T22222] sctp: [Deprecated]: syz.2.20373 (pid 22222) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1575.323667][T22222] Use struct sctp_sack_info instead
[ 1576.412514][T22243] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.20380'.
[ 1576.470019][T22249] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1576.728774][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1577.149860][T22284] netlink: 12 bytes leftover after parsing attributes in process `syz.5.20400'.
[ 1577.323315][T22288] loop2: detected capacity change from 0 to 4096
[ 1578.434679][T22317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20413'.
[ 1578.439461][T22317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20413'.
[ 1579.098510][T22336] loop2: detected capacity change from 0 to 32768
[ 1579.107944][T22336] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1579.144677][T22336] XFS (loop2): Ending clean mount
[ 1579.151975][T22336] XFS (loop2): Quotacheck needed: Please wait.
[ 1579.221043][T22336] XFS (loop2): Quotacheck: Done.
[ 1579.239932][T21237] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1579.286395][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1579.397045][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1579.450658][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1579.830081][T22372] syz.5.20433 (22372): attempted to duplicate a private mapping with mremap.  This is not supported.
[ 1580.198865][T11122] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[ 1580.376542][T11122] usb 3-1: Using ep0 maxpacket: 8
[ 1580.382698][T11122] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1580.393028][T11122] usb 3-1: config 4 has an invalid interface number: 30 but max is 0
[ 1580.396117][T11122] usb 3-1: config 4 has no interface number 0
[ 1580.398711][T11122] usb 3-1: config 4 interface 30 has no altsetting 0
[ 1580.410183][T11122] usb 3-1: string descriptor 0 read error: -22
[ 1580.412732][T11122] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[ 1580.460080][T11122] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1580.467277][T11122] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[ 1580.469778][T11122] dw2102: su3000_power_ctrl: 1, initialized 0
[ 1580.475511][T11122] dvb-usb: bulk message failed: -22 (2/0)
[ 1580.479359][T11122] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1580.485062][T11122] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[ 1580.487269][T11122] usb 3-1: media controller created
[ 1580.488808][T11122] dvb-usb: bulk message failed: -22 (6/0)
[ 1580.501642][T11122] dw2102: i2c transfer failed.
[ 1580.503187][T11122] dvb-usb: bulk message failed: -22 (6/0)
[ 1580.506750][T11122] dw2102: i2c transfer failed.
[ 1580.508264][T11122] dvb-usb: bulk message failed: -22 (6/0)
[ 1580.510123][T11122] dw2102: i2c transfer failed.
[ 1580.512077][T11122] dvb-usb: bulk message failed: -22 (6/0)
[ 1580.514368][T11122] dw2102: i2c transfer failed.
[ 1580.518995][T11122] dvb-usb: bulk message failed: -22 (6/0)
[ 1580.521333][T11122] dw2102: i2c transfer failed.
[ 1580.523322][T11122] dvb-usb: bulk message failed: -22 (6/0)
[ 1580.525615][T11122] dw2102: i2c transfer failed.
[ 1580.528256][T11122] dvb-usb: MAC address: 02:02:02:02:02:02
[ 1580.538403][T11122] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1580.552341][T11122] dvb-usb: bulk message failed: -22 (3/0)
[ 1580.554279][T11122] dw2102: command 0x0e transfer failed.
[ 1580.555982][T11122] dvb-usb: bulk message failed: -22 (3/0)
[ 1580.557840][T11122] dw2102: command 0x0e transfer failed.
[ 1580.895247][T11122] dvb-usb: bulk message failed: -22 (3/0)
[ 1580.897617][T11122] dw2102: command 0x0e transfer failed.
[ 1580.899726][T11122] dvb-usb: bulk message failed: -22 (3/0)
[ 1580.901858][T11122] dw2102: command 0x0e transfer failed.
[ 1580.903905][T11122] dvb-usb: bulk message failed: -22 (1/0)
[ 1580.906125][T11122] dw2102: command 0x51 transfer failed.
[ 1580.908286][T11122] dvb-usb: bulk message failed: -22 (5/0)
[ 1580.910351][T11122] dw2102: i2c probe for address 0x68 failed.
[ 1580.912545][T11122] dvb-usb: bulk message failed: -22 (5/0)
[ 1580.914525][T11122] dw2102: i2c probe for address 0x69 failed.
[ 1580.916380][T11122] dvb-usb: bulk message failed: -22 (5/0)
[ 1580.918435][T11122] dw2102: i2c probe for address 0x6a failed.
[ 1580.920741][T11122] dw2102: probing for demodulator failed. Is the external power switched on?
[ 1580.923958][T11122] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[ 1580.981754][T11122] rc_core: IR keymap rc-tt-1500 not found
[ 1580.983982][T11122] Registered IR keymap rc-empty
[ 1580.986566][T11122] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[ 1580.990687][T11122] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input43
[ 1580.994910][T11122] dvb-usb: schedule remote query interval to 250 msecs.
[ 1580.997066][T11122] dw2102: su3000_power_ctrl: 0, initialized 1
[ 1580.998907][T11122] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[ 1581.002987][T11122] usb 3-1: USB disconnect, device number 54
[ 1581.022958][T11122] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[ 1581.279856][T22418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20453'.
[ 1581.282739][T22418] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[ 1581.382225][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1581.417842][T22427] netlink: 'syz.5.20457': attribute type 2 has an invalid length.
[ 1581.420744][T22427] netlink: 116 bytes leftover after parsing attributes in process `syz.5.20457'.
[ 1581.891839][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1582.320040][T22452] netlink: 'syz.2.20468': attribute type 10 has an invalid length.
[ 1583.148664][T11122] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[ 1583.178320][T22463] netlink: 'syz.1.20472': attribute type 3 has an invalid length.
[ 1583.344465][T11122] usb 3-1: Using ep0 maxpacket: 16
[ 1583.348724][T11122] usb 3-1: config 0 has no interfaces?
[ 1583.356023][T11122] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[ 1583.359943][T11122] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1583.363735][T11122] usb 3-1: Product: syz
[ 1583.368853][T11122] usb 3-1: Manufacturer: syz
[ 1583.370906][T11122] usb 3-1: SerialNumber: syz
[ 1583.375407][T11122] usb 3-1: config 0 descriptor??
[ 1584.262290][T22518] netlink: 24 bytes leftover after parsing attributes in process `syz.5.20496'.
[ 1584.312741][T22520] overlayfs: failed to clone upperpath
[ 1584.448760][T22526] overlayfs: failed to clone upperpath
[ 1584.467621][T22528] netlink: 830 bytes leftover after parsing attributes in process `syz.5.20501'.
[ 1584.508388][T22534] netlink: 28 bytes leftover after parsing attributes in process `syz.5.20503'.
[ 1584.566683][T22536] xt_hashlimit: size too large, truncated to 1048576
[ 1585.931867][T11122] usb 3-1: USB disconnect, device number 55
[ 1585.985949][T22563] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1586.024490][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1586.031124][T22565] loop2: detected capacity change from 0 to 8
[ 1586.340906][T22579] overlayfs: empty lowerdir
[ 1586.492078][T22586] loop2: detected capacity change from 0 to 128
[ 1586.524357][T22586] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[ 1586.533436][T22586] ext4 filesystem being mounted at /125/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1586.654254][T21237] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1586.851504][T22560] Set syz1 is full, maxelem 65536 reached
[ 1587.582154][T22629] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1587.769985][T22645] nftables ruleset with unbound chain
[ 1587.920996][   T34] audit: type=1326 audit(2000000027.673:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22619 comm="syz.5.20542" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ef38f749 code=0x7ffc0000
[ 1587.937632][   T34] audit: type=1326 audit(2000000027.673:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22619 comm="syz.5.20542" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ef38f749 code=0x7ffc0000
[ 1587.944353][   T34] audit: type=1326 audit(2000000027.673:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22619 comm="syz.5.20542" exe="/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f25ef38f749 code=0x7ffc0000
[ 1587.955194][   T34] audit: type=1326 audit(2000000027.673:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22619 comm="syz.5.20542" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ef38f749 code=0x7ffc0000
[ 1587.963461][   T34] audit: type=1326 audit(2000000027.673:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22619 comm="syz.5.20542" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ef38f749 code=0x7ffc0000
[ 1587.963624][T22653] netlink: 'syz.1.20557': attribute type 3 has an invalid length.
[ 1588.251317][T11122] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[ 1588.404725][T22665] netlink: 20 bytes leftover after parsing attributes in process `syz.5.20563'.
[ 1588.407638][T22665] netlink: 24 bytes leftover after parsing attributes in process `syz.5.20563'.
[ 1588.413745][T11122] usb 3-1: Using ep0 maxpacket: 16
[ 1588.415159][T22665] netlink: 20 bytes leftover after parsing attributes in process `syz.5.20563'.
[ 1588.417064][T11122] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1588.418739][T22665] netlink: 24 bytes leftover after parsing attributes in process `syz.5.20563'.
[ 1588.421399][T11122] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1588.421416][T11122] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1588.439597][T11122] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1588.442516][T11122] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1588.445008][T11122] usb 3-1: Product: syz
[ 1588.447659][T11122] usb 3-1: Manufacturer: syz
[ 1588.449186][T11122] usb 3-1: SerialNumber: syz
[ 1588.719885][T22683] /dev/nullb0: Can't lookup blockdev
[ 1588.896497][T11122] usb 3-1: 0:2 : does not exist
[ 1590.383076][T11122] usb 3-1: 1:0: failed to get current value for ch 0 (-22)
[ 1590.458288][T11122] usb 3-1: USB disconnect, device number 56
[ 1590.950611][T22776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1590.991217][   T34] audit: type=1326 audit(2000000030.497:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22773 comm="syz.1.20614" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db9f8f749 code=0x7ffc0000
[ 1591.042557][T22780] netlink: 72 bytes leftover after parsing attributes in process `syz.2.20616'.
[ 1591.070794][   T34] audit: type=1326 audit(2000000030.497:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22773 comm="syz.1.20614" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db9f8f749 code=0x7ffc0000
[ 1591.115823][   T34] audit: type=1326 audit(2000000030.497:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22773 comm="syz.1.20614" exe="/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f2db9f8f749 code=0x7ffc0000
[ 1591.148157][   T34] audit: type=1326 audit(2000000030.497:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22773 comm="syz.1.20614" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db9f8f749 code=0x7ffc0000
[ 1591.183445][   T34] audit: type=1326 audit(2000000030.497:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22773 comm="syz.1.20614" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db9f8f749 code=0x7ffc0000
[ 1591.904388][T22789] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[ 1592.086301][T11145] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[ 1593.083862][T11145] usb 3-1: Using ep0 maxpacket: 32
[ 1593.093325][T11145] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[ 1593.101383][T11145] usb 3-1: config 0 has no interface number 0
[ 1593.107824][T11145] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1593.110938][T11145] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1593.113555][T11145] usb 3-1: Product: syz
[ 1593.114869][T11145] usb 3-1: Manufacturer: syz
[ 1593.116699][T11145] usb 3-1: SerialNumber: syz
[ 1593.120074][T11145] usb 3-1: config 0 descriptor??
[ 1593.127443][T11145] smsc95xx v2.0.0
[ 1593.220757][T22809] overlayfs: failed to clone upperpath
[ 1593.263004][T22811] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20630'.
[ 1593.571779][T11145] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1593.581757][T11145] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1594.465224][T11145] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1594.468723][T11145] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[ 1594.473203][T11145] usb 3-1: USB disconnect, device number 57
[ 1594.929016][T22851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20648'.
[ 1595.024279][T22857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20651'.
[ 1595.114060][T22861] loop2: detected capacity change from 0 to 16
[ 1595.140787][T22861] erofs (device loop2): mounted with root inode @ nid 36.
[ 1595.624280][T22876] loop2: detected capacity change from 0 to 40427
[ 1595.629727][T22876] F2FS-fs (loop2): build fault injection rate: 19
[ 1595.632395][T22876] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[ 1595.638099][T22876] F2FS-fs (loop2): invalid crc value
[ 1595.648703][T22876] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[ 1595.711593][T22876] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[ 1595.728136][T22876] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1595.742924][T22876] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1595.755852][T22876] F2FS-fs (loop2): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x249/0x1cf0
[ 1595.761774][T22876] F2FS-fs (loop2): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098]
[ 1596.279617][T22892] Cannot find add_set index 0 as target
[ 1596.884589][T22913] overlayfs: failed to clone upperpath
[ 1597.074763][   T34] kauditd_printk_skb: 26 callbacks suppressed
[ 1597.074776][   T34] audit: type=1326 audit(2000000036.100:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22920 comm="syz.5.20679" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ef38f749 code=0x7ffc0000
[ 1597.087582][   T34] audit: type=1326 audit(2000000036.100:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22920 comm="syz.5.20679" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ef38f749 code=0x7ffc0000
[ 1597.103345][   T34] audit: type=1326 audit(2000000036.100:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22920 comm="syz.5.20679" exe="/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f25ef38f749 code=0x7ffc0000
[ 1597.106587][ T5886] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[ 1597.111771][   T34] audit: type=1326 audit(2000000036.100:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22920 comm="syz.5.20679" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ef38f749 code=0x7ffc0000
[ 1597.122937][   T34] audit: type=1326 audit(2000000036.100:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22920 comm="syz.5.20679" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ef38f749 code=0x7ffc0000
[ 1597.131868][   T34] audit: type=1326 audit(2000000036.100:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22920 comm="syz.5.20679" exe="/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f25ef38f749 code=0x7ffc0000
[ 1597.140731][   T34] audit: type=1326 audit(2000000036.100:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22920 comm="syz.5.20679" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ef38f749 code=0x7ffc0000
[ 1597.149416][   T34] audit: type=1326 audit(2000000036.100:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22920 comm="syz.5.20679" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ef38f749 code=0x7ffc0000
[ 1597.315472][ T5886] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1597.329929][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1597.333019][ T5886] usb 3-1: Product: syz
[ 1597.334588][ T5886] usb 3-1: Manufacturer: syz
[ 1597.336355][ T5886] usb 3-1: SerialNumber: syz
[ 1597.342591][ T5886] usb 3-1: config 0 descriptor??
[ 1597.628776][   T24] usb 3-1: USB disconnect, device number 58
[ 1597.953185][T22959] dvmrp0: entered allmulticast mode
[ 1598.253164][T22970] netlink: 40 bytes leftover after parsing attributes in process `syz.2.20701'.
[ 1598.287032][T22972] netlink: 'syz.2.20702': attribute type 28 has an invalid length.
[ 1598.290586][T22972] netlink: 'syz.2.20702': attribute type 4 has an invalid length.
[ 1598.295253][T22972] netlink: 136 bytes leftover after parsing attributes in process `syz.2.20702'.
[ 1598.598007][T22980] loop2: detected capacity change from 0 to 32768
[ 1599.207997][T22982] loop2: detected capacity change from 0 to 131072
[ 1599.218763][T22982] F2FS-fs (loop2): invalid crc value
[ 1599.269616][T22982] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1599.273832][T22982] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[ 1599.555983][T22999] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20714'.
[ 1600.237676][T23028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20723'.
[ 1600.394279][T23030] loop2: detected capacity change from 0 to 32768
[ 1600.401675][T23030] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1600.415727][T23030] XFS (loop2): Ending clean mount
[ 1600.453755][T21237] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1600.626855][   T34] audit: type=1326 audit(2000000039.396:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23059 comm="syz.5.20736" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25ef38f749 code=0x0
[ 1601.696437][T23094] SET target dimension over the limit!
[ 1601.700292][T23094] set match dimension is over the limit!
[ 1602.292821][T23124] loop2: detected capacity change from 0 to 256
[ 1602.299837][T23124] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x544194fd, utbl_chksum : 0xe619d30d)
[ 1602.501797][T23130] autofs: Unknown parameter 'no9 PG!8E	'
[ 1602.866172][   T33] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[ 1603.029770][   T33] usb 3-1: Using ep0 maxpacket: 32
[ 1603.033946][   T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1603.038248][   T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1603.044471][   T33] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1603.047925][   T33] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1603.063690][   T33] usb 3-1: config 0 descriptor??
[ 1603.520732][   T33] savu 0003:1E7D:2D5A.002A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[ 1603.798619][   T33] usb 3-1: USB disconnect, device number 59
[ 1604.752635][   T34] audit: type=1326 audit(2000000043.199:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23197 comm="syz.5.20796" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ef38f749 code=0x7ffc0000
[ 1604.759900][   T34] audit: type=1326 audit(2000000043.208:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23197 comm="syz.5.20796" exe="/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f25ef38f749 code=0x7ffc0000
[ 1604.767701][   T34] audit: type=1326 audit(2000000043.208:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23197 comm="syz.5.20796" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ef38f749 code=0x7ffc0000
[ 1605.516849][T23225] loop2: detected capacity change from 0 to 512
[ 1605.522207][T23225] EXT4-fs (loop2): blocks per group (34) and clusters per group (32768) inconsistent
[ 1605.529203][T23225] netlink: 32 bytes leftover after parsing attributes in process `syz.2.20809'.
[ 1605.768100][T23249] netlink: 'syz.5.20821': attribute type 1 has an invalid length.
[ 1606.353535][   T34] audit: type=1326 audit(2000000044.685:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23269 comm="syz.5.20831" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ef38f749 code=0x7ffc0000
[ 1606.368659][   T34] audit: type=1326 audit(2000000044.694:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23269 comm="syz.5.20831" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ef38f749 code=0x7ffc0000
[ 1606.376035][   T34] audit: type=1326 audit(2000000044.703:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23269 comm="syz.5.20831" exe="/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f25ef38f749 code=0x7ffc0000
[ 1606.383442][   T34] audit: type=1326 audit(2000000044.703:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23269 comm="syz.5.20831" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ef38f749 code=0x7ffc0000
[ 1606.392597][   T34] audit: type=1326 audit(2000000044.703:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23269 comm="syz.5.20831" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ef38f749 code=0x7ffc0000
[ 1606.401410][   T34] audit: type=1326 audit(2000000044.703:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23269 comm="syz.5.20831" exe="/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f25ef38f749 code=0x7ffc0000
[ 1606.763699][T23283] netlink: 'syz.1.20837': attribute type 4 has an invalid length.
[ 1607.075544][T23260] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1607.909296][T23312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20850'.
[ 1608.071750][T23321] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20854'.
[ 1608.198318][T23331] loop2: detected capacity change from 0 to 1024
[ 1608.218990][T23331] hfsplus: bad catalog entry type
[ 1608.866024][T23380] netlink: 'syz.2.20882': attribute type 11 has an invalid length.
[ 1609.008798][T23391] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1609.378393][T23401] netlink: 'syz.1.20892': attribute type 26 has an invalid length.
[ 1610.320007][ T5823] Bluetooth: hci2: command tx timeout
[ 1611.197854][T23448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20912'.
[ 1611.612041][T23460] CIFS mount error: No usable UNC path provided in device string!
[ 1611.612041][T23460] 
[ 1611.620691][T23460] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1611.766422][T23456] loop2: detected capacity change from 0 to 40427
[ 1611.770407][T23456] F2FS-fs (loop2): invalid crc value
[ 1611.807564][T23456] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1611.812280][T23456] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[ 1611.835425][T21237] syz-executor: attempt to access beyond end of device
[ 1611.835425][T21237] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1611.841615][T21237] CPU: 1 UID: 0 PID: 21237 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[ 1611.841637][T21237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1611.841646][T21237] Call Trace:
[ 1611.841653][T21237]  <TASK>
[ 1611.841660][T21237]  dump_stack_lvl+0x189/0x250
[ 1611.841705][T21237]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1611.841721][T21237]  ? __pfx_queue_work_on+0x10/0x10
[ 1611.841736][T21237]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1611.841754][T21237]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1611.841784][T21237]  f2fs_handle_critical_error+0x37c/0x540
[ 1611.841811][T21237]  f2fs_write_end_io+0x886/0xb60
[ 1611.841843][T21237]  __submit_merged_bio+0x27a/0x6a0
[ 1611.841870][T21237]  __submit_merged_write_cond+0x255/0x530
[ 1611.841896][T21237]  f2fs_write_data_pages+0x261d/0x3000
[ 1611.841944][T21237]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1611.842000][T21237]  ? rcu_is_watching+0x15/0xb0
[ 1611.842016][T21237]  ? trace_sched_exit_tp+0x36/0x110
[ 1611.842035][T21237]  ? __schedule+0x17ae/0x4cc0
[ 1611.842056][T21237]  ? folios_put_refs+0x584/0x670
[ 1611.842112][T21237]  ? __lock_acquire+0xab9/0xd20
[ 1611.842134][T21237]  ? do_raw_spin_lock+0x121/0x290
[ 1611.842163][T21237]  ? do_raw_spin_unlock+0x4d/0x240
[ 1611.842180][T21237]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1611.842195][T21237]  do_writepages+0x32e/0x550
[ 1611.842223][T21237]  ? do_raw_spin_unlock+0x4d/0x240
[ 1611.842245][T21237]  filemap_fdatawrite+0x199/0x240
[ 1611.842263][T21237]  ? __pfx_filemap_fdatawrite+0x10/0x10
[ 1611.842331][T21237]  ? do_raw_spin_unlock+0x4d/0x240
[ 1611.842352][T21237]  f2fs_sync_dirty_inodes+0x31f/0x830
[ 1611.842382][T21237]  f2fs_write_checkpoint+0x93e/0x2440
[ 1611.842397][T21237]  ? __lock_acquire+0xab9/0xd20
[ 1611.842437][T21237]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[ 1611.842505][T21237]  kill_f2fs_super+0x2cc/0x6d0
[ 1611.842527][T21237]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1611.842559][T21237]  ? shrinker_free+0x2ce/0x3e0
[ 1611.842577][T21237]  deactivate_locked_super+0xbc/0x130
[ 1611.842596][T21237]  cleanup_mnt+0x425/0x4c0
[ 1611.842613][T21237]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1611.842635][T21237]  task_work_run+0x1d4/0x260
[ 1611.842657][T21237]  ? __pfx_task_work_run+0x10/0x10
[ 1611.842672][T21237]  ? __x64_sys_umount+0x122/0x160
[ 1611.842695][T21237]  ? exit_to_user_mode_loop+0x40/0x130
[ 1611.842712][T21237]  exit_to_user_mode_loop+0xe9/0x130
[ 1611.842726][T21237]  do_syscall_64+0x2bd/0xfa0
[ 1611.842744][T21237]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1611.842761][T21237]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1611.842774][T21237]  ? exc_page_fault+0xab/0x100
[ 1611.842795][T21237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1611.842808][T21237] RIP: 0033:0x7f7c09790a77
[ 1611.842822][T21237] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 1611.842833][T21237] RSP: 002b:00007ffebbbf2998 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1611.842849][T21237] RAX: 0000000000000000 RBX: 00007f7c09813d7d RCX: 00007f7c09790a77
[ 1611.842858][T21237] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffebbbf2a50
[ 1611.842866][T21237] RBP: 00007ffebbbf2a50 R08: 0000000000000000 R09: 0000000000000000
[ 1611.842874][T21237] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffebbbf3ae0
[ 1611.842882][T21237] R13: 00007f7c09813d7d R14: 00000000001788da R15: 00007ffebbbf3b20
[ 1611.842910][T21237]  </TASK>
[ 1611.843948][T21237] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[ 1612.500075][T23487] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[ 1612.503261][T23487] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1612.573803][T11145] usb 3-1: new full-speed USB device number 60 using dummy_hcd
[ 1612.737581][T11145] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1612.740815][T11145] usb 3-1: not running at top speed; connect to a high speed hub
[ 1612.744600][T11145] usb 3-1: config 0 has an invalid interface number: 88 but max is 0
[ 1612.748445][T11145] usb 3-1: config 0 has no interface number 0
[ 1612.751441][T11145] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10
[ 1612.755763][T11145] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1612.760027][T11145] usb 3-1: config 0 interface 88 has no altsetting 0
[ 1612.765739][T11145] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[ 1612.770201][T11145] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[ 1612.773432][T11145] usb 3-1: Product: syz
[ 1612.775260][T11145] usb 3-1: Manufacturer: syz
[ 1612.777164][T11145] usb 3-1: SerialNumber: syz
[ 1612.784554][T11145] usb 3-1: config 0 descriptor??
[ 1613.018495][T11145] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input44
[ 1613.033932][T11145] usb 3-1: USB disconnect, device number 60
[ 1613.106939][T23506] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20936'.
[ 1613.225542][T23514] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20940'.
[ 1613.351628][T23520] netlink: 36 bytes leftover after parsing attributes in process `syz.1.20943'.
[ 1613.737511][T23534] loop2: detected capacity change from 0 to 164
[ 1614.234613][T23562] netlink: 7 bytes leftover after parsing attributes in process `syz.1.20962'.
[ 1614.237642][T23562] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20962'.
[ 1614.240359][T23562] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20962'.
[ 1614.298128][T23566] overlayfs: failed to clone upperpath
[ 1614.801083][T23585] netlink: 104 bytes leftover after parsing attributes in process `syz.5.20973'.
[ 1614.993793][T23601] netlink: ct family unspecified
[ 1614.995450][T23601] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1615.054621][T23607] netlink: 'syz.5.20984': attribute type 2 has an invalid length.
[ 1615.172521][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1615.341564][T23605] loop2: detected capacity change from 0 to 32768
[ 1615.344939][T23605] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.20983 (23605)
[ 1615.358835][T23605] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1615.361929][T23605] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[ 1615.442034][T23605] BTRFS info (device loop2): enabling ssd optimizations
[ 1615.447563][T23605] BTRFS info (device loop2): turning on async discard
[ 1615.449926][T23605] BTRFS info (device loop2): enabling free space tree
[ 1615.488865][T21237] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1615.840303][T19001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1615.842575][T19001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1615.879732][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[ 1615.882279][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[ 1615.985819][T23663] nbd: illegal input index -1495182229
[ 1616.070404][T23668] loop2: detected capacity change from 0 to 4096
[ 1617.046941][ T5886] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[ 1617.209309][ T5886] usb 3-1: Using ep0 maxpacket: 8
[ 1617.213012][ T5886] usb 3-1: config 162 has an invalid interface number: 97 but max is 0
[ 1617.216363][ T5886] usb 3-1: config 162 has no interface number 0
[ 1617.218350][ T5886] usb 3-1: config 162 interface 97 has no altsetting 0
[ 1617.222751][ T5886] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b
[ 1617.226235][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1617.229224][ T5886] usb 3-1: Product: syz
[ 1617.230600][ T5886] usb 3-1: Manufacturer: syz
[ 1617.232578][ T5886] usb 3-1: SerialNumber: syz
[ 1617.457447][ T5886] metro_usb 3-1:162.97: interrupt-out endpoint missing
[ 1617.462099][ T5886] usb 3-1: USB disconnect, device number 61
[ 1617.854593][T23750] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21042'.
[ 1618.043826][T23758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21046'.
[ 1618.418150][T23780] MPI: mpi too large (113288 bits)
[ 1619.713297][T23809] loop2: detected capacity change from 0 to 512
[ 1619.715753][T23809] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1619.717900][T23809] EXT4-fs: inline encryption not supported
[ 1619.719742][T23809] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1619.722414][T23809] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1619.725506][T23809] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1619.730603][T23809] EXT4-fs (loop2): 1 truncate cleaned up
[ 1619.733986][T23809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1620.687349][T21237] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1621.851820][T23862] tipc: Enabling of bearer <eth:netdevsim0> rejected, failed to enable media
[ 1621.855226][T23862] tipc: Cannot configure node identity twice
[ 1621.859581][T23862] tipc: Cannot configure node identity twice
[ 1621.931185][T23869] netlink: 36 bytes leftover after parsing attributes in process `syz.1.21093'.
[ 1621.935368][T23869] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21093'.
[ 1621.938711][T23869] netlink: 36 bytes leftover after parsing attributes in process `syz.1.21093'.
[ 1621.942075][T23869] netlink: 36 bytes leftover after parsing attributes in process `syz.1.21093'.
[ 1621.979409][T23874] netlink: 280 bytes leftover after parsing attributes in process `syz.1.21095'.
[ 1622.103944][T23886] netlink: 'syz.5.21099': attribute type 21 has an invalid length.
[ 1622.108054][T23886] netlink: 128 bytes leftover after parsing attributes in process `syz.5.21099'.
[ 1622.111240][T23886] netlink: 'syz.5.21099': attribute type 5 has an invalid length.
[ 1622.113978][T23886] netlink: 3 bytes leftover after parsing attributes in process `syz.5.21099'.
[ 1623.367979][T23944] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.21126'.
[ 1623.487937][T23948] Cannot find del_set index 3 as target
[ 1624.526399][T24007] 9pnet_fd: Insufficient options for proto=fd
[ 1625.018301][ T5886] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[ 1625.198699][ T5886] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1625.206322][ T5886] usb 3-1: New USB device found, idVendor=1235, idProduct=4661, bcdDevice=ae.13
[ 1625.209729][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1625.212663][ T5886] usb 3-1: Product: syz
[ 1625.214119][ T5886] usb 3-1: Manufacturer: syz
[ 1625.216706][ T5886] usb 3-1: SerialNumber: syz
[ 1625.449298][ T5886] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1625.470402][ T5886] snd-usb-audio 3-1:8.0: probe with driver snd-usb-audio failed with error -2
[ 1625.475439][ T5886] usb 3-1: USB disconnect, device number 62
[ 1625.564709][   T34] audit: type=1326 audit(2000000062.417:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24018 comm="syz.1.21161" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2db9f8f749 code=0x0
[ 1626.014205][T24043] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 1626.399882][T24058] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1626.402396][T24058] overlayfs: failed to set xattr on upper
[ 1626.404259][T24058] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1626.406235][T24058] overlayfs: ...falling back to index=off.
[ 1626.408152][T24058] overlayfs: ...falling back to uuid=null.
[ 1626.446267][T24059] overlayfs: failed to resolve './file1/file0': -2
[ 1626.824129][T24073] loop2: detected capacity change from 0 to 512
[ 1626.843590][T24073] EXT4-fs (loop2): too many log groups per flexible block group
[ 1626.846609][T24073] EXT4-fs (loop2): failed to initialize mballoc (-12)
[ 1626.849325][T24073] EXT4-fs (loop2): mount failed
[ 1627.083872][T24079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1627.110807][T24077] loop2: detected capacity change from 0 to 32768
[ 1627.114491][T24077] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.21186 (24077)
[ 1627.120626][T24077] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[ 1627.125966][T24077] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[ 1627.149472][T24077] BTRFS info (device loop2): enabling ssd optimizations
[ 1627.152028][T24077] BTRFS info (device loop2): turning on async discard
[ 1627.154791][T24077] BTRFS info (device loop2): enabling free space tree
[ 1627.205791][T21237] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[ 1627.416749][T24104] loop2: detected capacity change from 0 to 16
[ 1627.419345][T24104] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 1627.736410][T24119] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.21199'.
[ 1627.937770][   T24] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[ 1628.260114][   T24] usb 3-1: Using ep0 maxpacket: 32
[ 1628.263717][   T24] usb 3-1: config 0 has an invalid interface number: 119 but max is 0
[ 1628.267341][   T24] usb 3-1: config 0 has no interface number 0
[ 1628.272466][   T24] usb 3-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=d9.19
[ 1628.275169][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1628.277794][   T24] usb 3-1: Product: syz
[ 1628.279187][   T24] usb 3-1: Manufacturer: syz
[ 1628.280593][   T24] usb 3-1: SerialNumber: syz
[ 1628.284380][   T24] usb 3-1: config 0 descriptor??
[ 1628.288249][   T24] gspca_main: sn9c2028-2.14.0 probing 0458:7003
[ 1628.509823][   T24] gspca_sn9c2028: read1 error -71
[ 1628.511876][   T24] gspca_sn9c2028: read1 error -71
[ 1628.513654][   T24] gspca_sn9c2028: read1 error -71
[ 1628.515282][   T24] sn9c2028 3-1:0.119: probe with driver sn9c2028 failed with error -71
[ 1628.518946][   T24] usb 3-1: USB disconnect, device number 63
[ 1628.809756][T24149] tipc: Failed to remove unknown binding: 66,1,1/1:947333967/947333969
[ 1628.813410][T24149] tipc: Failed to remove unknown binding: 66,1,1/1:947333967/947333969
[ 1629.366212][   T24] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[ 1629.539007][   T24] usb 3-1: Using ep0 maxpacket: 32
[ 1629.545485][   T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice=da.88
[ 1629.548366][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1629.551481][   T24] usb 3-1: Product: syz
[ 1629.552828][   T24] usb 3-1: Manufacturer: syz
[ 1629.554275][   T24] usb 3-1: SerialNumber: syz
[ 1629.557226][   T24] usb 3-1: config 0 descriptor??
[ 1629.565441][   T24] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input45
[ 1629.789731][   T24] usb 3-1: USB disconnect, device number 64
[ 1631.490318][T24240] loop2: detected capacity change from 0 to 32768
[ 1632.776098][T24294] loop2: detected capacity change from 0 to 32768
[ 1632.783427][T24294] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1632.793969][T24294] XFS (loop2): Ending clean mount
[ 1632.817604][T21237] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1633.105282][T24316] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21274'.
[ 1633.138918][T24316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21274'.
[ 1633.483485][T24341] netlink: 36 bytes leftover after parsing attributes in process `syz.2.21285'.
[ 1633.866257][T24348] loop2: detected capacity change from 0 to 4096
[ 1633.981770][T24354] netlink: 332 bytes leftover after parsing attributes in process `syz.2.21291'.
[ 1633.984566][T24354] netlink: 'syz.2.21291': attribute type 3 has an invalid length.
[ 1633.987136][T24354] netlink: 'syz.2.21291': attribute type 1 has an invalid length.
[ 1634.651941][T24368] netlink: 48 bytes leftover after parsing attributes in process `syz.5.21296'.
[ 1634.817765][T24383] overlayfs: failed to clone upperpath
[ 1635.126207][T24395] loop2: detected capacity change from 0 to 4096
[ 1635.136599][T24398] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1635.642459][T24438] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21327'.
[ 1635.646151][T24435] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21327'.
[ 1635.732345][T24445] xt_hashlimit: max too large, truncated to 1048576
[ 1635.777780][T24450] loop2: detected capacity change from 0 to 1024
[ 1635.780743][T24450] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1635.795143][T24450] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1635.829922][T21237] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1636.535611][T24485] loop2: detected capacity change from 0 to 1024
[ 1636.905794][ T5886] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[ 1637.067328][ T5886] usb 3-1: Using ep0 maxpacket: 16
[ 1637.072588][ T5886] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1637.076042][ T5886] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1637.080078][ T5886] usb 3-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1637.084988][ T5886] usb 3-1: config 1 interface 0 has no altsetting 0
[ 1637.089904][ T5886] usb 3-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40
[ 1637.092855][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1637.095793][ T5886] usb 3-1: Product: syz
[ 1637.097242][ T5886] usb 3-1: Manufacturer: syz
[ 1637.098698][ T5886] usb 3-1: SerialNumber: syz
[ 1637.105340][ T5886] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input46
[ 1637.324593][ T5886] usb 3-1: USB disconnect, device number 65
[ 1638.173563][T24529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21371'.
[ 1638.378817][T24542] loop2: detected capacity change from 0 to 4096
[ 1638.525541][T24549] xt_socket: unknown flags 0xe4
[ 1638.898068][ T5886] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[ 1639.031020][T24562] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21384'.
[ 1639.082445][ T5886] usb 3-1: Using ep0 maxpacket: 8
[ 1639.089702][ T5886] usb 3-1: config 0 has an invalid interface number: 252 but max is 0
[ 1639.104167][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1639.107844][ T5886] usb 3-1: config 0 has no interface number 0
[ 1639.115898][ T5886] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=f0.28
[ 1639.119077][ T5886] usb 3-1: New USB device strings: Mfr=244, Product=1, SerialNumber=3
[ 1639.121946][ T5886] usb 3-1: Product: syz
[ 1639.123492][ T5886] usb 3-1: Manufacturer: syz
[ 1639.125339][ T5886] usb 3-1: SerialNumber: syz
[ 1639.131440][ T5886] usb 3-1: config 0 descriptor??
[ 1639.358772][ T5886] usb 3-1: USB disconnect, device number 66
[ 1640.204122][T24587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1640.215686][T32217] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1640.239014][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1640.243470][T32217] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1640.260379][T24587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1640.285602][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1640.331324][T24581] loop2: detected capacity change from 0 to 32768
[ 1640.340377][T24581] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1640.386048][T24581] XFS (loop2): Ending clean mount
[ 1640.406067][T24600] netlink: 40 bytes leftover after parsing attributes in process `syz.5.21395'.
[ 1640.418536][T21237] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1640.637991][T24608] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21399'.
[ 1640.641025][T24608] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21399'.
[ 1640.676359][T16160] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1641.173557][T16160] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1641.677922][T24625] loop2: detected capacity change from 0 to 128
[ 1641.691330][T24625] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1641.716610][T24625] hpfs: filesystem error: improperly stopped
[ 1641.718989][T24625] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1641.721873][T24625] hpfs: You really don't want any checks? You are crazy...
[ 1641.737706][T24625] hpfs: hpfs_map_sector(): read error
[ 1641.739836][T24625] hpfs: code page support is disabled
[ 1641.767858][T24625] hpfs: hpfs_map_4sectors(): unaligned read
[ 1641.770135][T24625] hpfs: hpfs_map_4sectors(): unaligned read
[ 1641.771876][T24625] hpfs: filesystem error: unable to find root dir
[ 1641.791098][T24625] hpfs: hpfs_map_4sectors(): unaligned read
[ 1641.801153][T24625] hpfs: hpfs_map_sector(): read error
[ 1641.949217][T24635] : renamed from bond_slave_0 (while UP)
[ 1642.565775][T24660] 9pnet_fd: Insufficient options for proto=fd
[ 1643.077175][T24689] loop2: detected capacity change from 0 to 16
[ 1643.080334][T24689] erofs (device loop2): mounted with root inode @ nid 36.
[ 1643.586814][T24708] loop2: detected capacity change from 0 to 16
[ 1643.903411][T24708] erofs (device loop2): mounted with root inode @ nid 36.
[ 1643.928992][T24707] erofs (device loop2): readahead error at folio 87 @ nid 36
[ 1643.931998][T24707] erofs (device loop2): readahead error at folio 86 @ nid 36
[ 1643.935083][T24707] erofs (device loop2): bogus lookback distance 363 @ lcn 82 of nid 36
[ 1643.937641][T24707] erofs (device loop2): readahead error at folio 83 @ nid 36
[ 1643.940028][T24707] erofs (device loop2): bogus lookback distance 363 @ lcn 82 of nid 36
[ 1643.942411][T24707] erofs (device loop2): readahead error at folio 82 @ nid 36
[ 1643.944610][T24707] erofs (device loop2): readahead error at folio 79 @ nid 36
[ 1643.946912][T24707] erofs (device loop2): readahead error at folio 78 @ nid 36
[ 1643.949283][T24707] erofs (device loop2): bogus lookback distance 1485 @ lcn 75 of nid 36
[ 1643.951692][T24707] erofs (device loop2): readahead error at folio 76 @ nid 36
[ 1643.953850][T24707] erofs (device loop2): bogus lookback distance 1485 @ lcn 75 of nid 36
[ 1643.956436][T24707] erofs (device loop2): readahead error at folio 75 @ nid 36
[ 1643.958711][T24707] erofs (device loop2): readahead error at folio 74 @ nid 36
[ 1643.960989][T24707] erofs (device loop2): readahead error at folio 72 @ nid 36
[ 1643.963540][T24707] erofs (device loop2): readahead error at folio 71 @ nid 36
[ 1643.965862][T24707] erofs (device loop2): readahead error at folio 70 @ nid 36
[ 1643.968922][T24707] erofs (device loop2): readahead error at folio 63 @ nid 36
[ 1643.974410][T24707] erofs (device loop2): readahead error at folio 61 @ nid 36
[ 1643.977358][T24707] erofs (device loop2): bogus lookback distance 1024 @ lcn 58 of nid 36
[ 1643.980552][T24707] erofs (device loop2): readahead error at folio 59 @ nid 36
[ 1643.983364][T24707] erofs (device loop2): bogus lookback distance 1024 @ lcn 58 of nid 36
[ 1643.986282][T24707] erofs (device loop2): readahead error at folio 58 @ nid 36
[ 1643.988571][T24707] erofs (device loop2): readahead error at folio 56 @ nid 36
[ 1643.990879][T24707] erofs (device loop2): readahead error at folio 54 @ nid 36
[ 1643.993105][T24707] erofs (device loop2): readahead error at folio 50 @ nid 36
[ 1643.995262][T24707] erofs (device loop2): bogus lookback distance 1586 @ lcn 46 of nid 36
[ 1643.997741][T24707] erofs (device loop2): readahead error at folio 47 @ nid 36
[ 1644.000066][T24707] erofs (device loop2): bogus lookback distance 1586 @ lcn 46 of nid 36
[ 1644.002530][T24707] erofs (device loop2): readahead error at folio 46 @ nid 36
[ 1644.004838][T24707] erofs (device loop2): readahead error at folio 45 @ nid 36
[ 1644.007136][T24707] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36
[ 1644.009691][T24707] erofs (device loop2): readahead error at folio 43 @ nid 36
[ 1644.011956][T24707] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36
[ 1644.014359][T24707] erofs (device loop2): readahead error at folio 42 @ nid 36
[ 1644.016500][T24707] erofs (device loop2): bogus lookback distance 774 @ lcn 40 of nid 36
[ 1644.018887][T24707] erofs (device loop2): readahead error at folio 41 @ nid 36
[ 1644.021019][T24707] erofs (device loop2): bogus lookback distance 774 @ lcn 40 of nid 36
[ 1644.023562][T24707] erofs (device loop2): readahead error at folio 40 @ nid 36
[ 1644.025799][T24707] erofs (device loop2): readahead error at folio 39 @ nid 36
[ 1644.028519][T24707] erofs (device loop2): readahead error at folio 38 @ nid 36
[ 1644.032078][T24707] erofs (device loop2): readahead error at folio 36 @ nid 36
[ 1644.034559][T24707] erofs (device loop2): bogus lookback distance 1468 @ lcn 31 of nid 36
[ 1644.037120][T24707] erofs (device loop2): readahead error at folio 31 @ nid 36
[ 1644.039384][T24707] erofs (device loop2): readahead error at folio 25 @ nid 36
[ 1644.041551][T24707] erofs (device loop2): readahead error at folio 24 @ nid 36
[ 1644.044285][T24707] erofs (device loop2): readahead error at folio 19 @ nid 36
[ 1644.046691][T24707] syz.2.21438: attempt to access beyond end of device
[ 1644.046691][T24707] loop2: rw=524288, sector=784, nr_sectors = 64 limit=16
[ 1644.051530][T24707] syz.2.21438: attempt to access beyond end of device
[ 1644.051530][T24707] loop2: rw=524288, sector=13478624080, nr_sectors = 24 limit=16
[ 1644.057458][T24707] syz.2.21438: attempt to access beyond end of device
[ 1644.057458][T24707] loop2: rw=524288, sector=13478624032, nr_sectors = 48 limit=16
[ 1644.063877][T24707] syz.2.21438: attempt to access beyond end of device
[ 1644.063877][T24707] loop2: rw=524288, sector=32, nr_sectors = 64 limit=16
[ 1644.068549][T24707] syz.2.21438: attempt to access beyond end of device
[ 1644.068549][T24707] loop2: rw=524288, sector=8, nr_sectors = 24 limit=16
[ 1644.072797][T24707] syz.2.21438: attempt to access beyond end of device
[ 1644.072797][T24707] loop2: rw=524288, sector=14425508768, nr_sectors = 8 limit=16
[ 1644.081770][T24708] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36
[ 1644.084725][T24708] erofs (device loop2): failed to decompress -44 in[46, 4050] out[1851]
[ 1644.087180][T24708] erofs (device loop2): read error -117 @ 43 of nid 36
[ 1644.900047][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1645.188178][T24755] netlink: 16 bytes leftover after parsing attributes in process `syz.5.21462'.
[ 1645.567967][T24783] netlink: 736 bytes leftover after parsing attributes in process `syz.1.21475'.
[ 1645.583406][T24295] ------------[ cut here ]------------
[ 1645.586890][T24295] WARNING: CPU: 1 PID: 24295 at io_uring/io_uring.c:3036 io_ring_exit_work+0x4ed/0x930
[ 1645.590230][T24295] Modules linked in:
[ 1645.592565][T24295] CPU: 1 UID: 0 PID: 24295 Comm: kworker/u10:10 Not tainted syzkaller #0 PREEMPT(full) 
[ 1645.596232][T24295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1645.599123][T24295] Workqueue: iou_exit io_ring_exit_work
[ 1645.600721][T24295] RIP: 0010:io_ring_exit_work+0x4ed/0x930
[ 1645.602210][T24295] Code: c6 05 fd 17 3c 0e 01 48 c7 c7 a0 0a be 8b be 25 00 00 00 48 c7 c2 40 0a be 8b e8 9e bd 72 00 e9 7b fe ff ff e8 a4 47 95 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 e9 5f ff ff ff 89 d9 80 e1
[ 1645.607668][T24295] RSP: 0018:ffffc90007d1f8c0 EFLAGS: 00010293
[ 1645.609745][T24295] RAX: ffffffff812ad1bc RBX: 000000010001f0b7 RCX: ffff8881999dba00
[ 1645.611935][T24295] RDX: 0000000000000000 RSI: fffffffffffffffb RDI: 0000000000000000
[ 1645.614869][T24295] RBP: ffffc90007d1fa50 R08: ffffc90007d1f847 R09: 1ffff92000fa3f08
[ 1645.617592][T24295] R10: dffffc0000000000 R11: fffff52000fa3f09 R12: 000000010001f0b2
[ 1645.619902][T24295] R13: ffff88810a6e0310 R14: ffff88810a6e0480 R15: dffffc0000000000
[ 1645.622189][T24295] FS:  0000000000000000(0000) GS:ffff8882a9f36000(0000) knlGS:0000000000000000
[ 1645.624642][T24295] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1645.627001][T24295] CR2: 0000001b30920ff8 CR3: 00000001aba14000 CR4: 00000000000006f0
[ 1645.629488][T24295] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1645.631633][T24295] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 1645.633742][T24295] Call Trace:
[ 1645.634693][T24295]  <TASK>
[ 1645.635585][T24295]  ? __pfx_io_ring_exit_work+0x10/0x10
[ 1645.637205][T24295]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1645.638635][T24295]  ? process_scheduled_works+0x9ef/0x17b0
[ 1645.640529][T24295]  ? process_scheduled_works+0x9ef/0x17b0
[ 1645.642070][T24295]  process_scheduled_works+0xae1/0x17b0
[ 1645.643796][T24295]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1645.645471][T24295]  worker_thread+0x8a0/0xda0
[ 1645.646857][T24295]  kthread+0x711/0x8a0
[ 1645.648615][T24295]  ? __pfx_worker_thread+0x10/0x10
[ 1645.650398][T24295]  ? __pfx_kthread+0x10/0x10
[ 1645.652121][T24295]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1645.654104][T24295]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1645.656011][T24295]  ? __pfx_kthread+0x10/0x10
[ 1645.657733][T24295]  ret_from_fork+0x4bc/0x870
[ 1645.659526][T24295]  ? __pfx_ret_from_fork+0x10/0x10
[ 1645.661326][T24295]  ? __switch_to_asm+0x39/0x70
[ 1645.663094][T24295]  ? __switch_to_asm+0x33/0x70
[ 1645.664836][T24295]  ? __pfx_kthread+0x10/0x10
[ 1645.666775][T24295]  ret_from_fork_asm+0x1a/0x30
[ 1645.668509][T24295]  </TASK>
[ 1645.670025][T24295] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1645.672662][T24295] CPU: 1 UID: 0 PID: 24295 Comm: kworker/u10:10 Not tainted syzkaller #0 PREEMPT(full) 
[ 1645.676128][T24295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1645.679708][T24295] Workqueue: iou_exit io_ring_exit_work
[ 1645.681680][T24295] Call Trace:
[ 1645.682789][T24295]  <TASK>
[ 1645.683795][T24295]  dump_stack_lvl+0x99/0x250
[ 1645.685186][T24295]  ? __asan_memcpy+0x40/0x70
[ 1645.686692][T24295]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1645.688231][T24295]  ? __pfx__printk+0x10/0x10
[ 1645.689622][T24295]  vpanic+0x237/0x6d0
[ 1645.690817][T24295]  ? __pfx_vpanic+0x10/0x10
[ 1645.692141][T24295]  panic+0xb9/0xc0
[ 1645.693248][T24295]  ? __pfx_panic+0x10/0x10
[ 1645.694590][T24295]  __warn+0x31b/0x4b0
[ 1645.695744][T24295]  ? io_ring_exit_work+0x4ed/0x930
[ 1645.697231][T24295]  ? io_ring_exit_work+0x4ed/0x930
[ 1645.698742][T24295]  report_bug+0x2be/0x4f0
[ 1645.700007][T24295]  ? io_ring_exit_work+0x4ed/0x930
[ 1645.701513][T24295]  ? io_ring_exit_work+0x4ed/0x930
[ 1645.702982][T24295]  ? io_ring_exit_work+0x4ef/0x930
[ 1645.704466][T24295]  handle_bug+0x84/0x160
[ 1645.705712][T24295]  exc_invalid_op+0x1a/0x50
[ 1645.707036][T24295]  asm_exc_invalid_op+0x1a/0x20
[ 1645.708433][T24295] RIP: 0010:io_ring_exit_work+0x4ed/0x930
[ 1645.710092][T24295] Code: c6 05 fd 17 3c 0e 01 48 c7 c7 a0 0a be 8b be 25 00 00 00 48 c7 c2 40 0a be 8b e8 9e bd 72 00 e9 7b fe ff ff e8 a4 47 95 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 e9 5f ff ff ff 89 d9 80 e1
[ 1645.715626][T24295] RSP: 0018:ffffc90007d1f8c0 EFLAGS: 00010293
[ 1645.717388][T24295] RAX: ffffffff812ad1bc RBX: 000000010001f0b7 RCX: ffff8881999dba00
[ 1645.719660][T24295] RDX: 0000000000000000 RSI: fffffffffffffffb RDI: 0000000000000000
[ 1645.721933][T24295] RBP: ffffc90007d1fa50 R08: ffffc90007d1f847 R09: 1ffff92000fa3f08
[ 1645.724116][T24295] R10: dffffc0000000000 R11: fffff52000fa3f09 R12: 000000010001f0b2
[ 1645.726288][T24295] R13: ffff88810a6e0310 R14: ffff88810a6e0480 R15: dffffc0000000000
[ 1645.728561][T24295]  ? io_ring_exit_work+0x4ec/0x930
[ 1645.730032][T24295]  ? __pfx_io_ring_exit_work+0x10/0x10
[ 1645.731604][T24295]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1645.733081][T24295]  ? process_scheduled_works+0x9ef/0x17b0
[ 1645.734829][T24295]  ? process_scheduled_works+0x9ef/0x17b0
[ 1645.736412][T24295]  process_scheduled_works+0xae1/0x17b0
[ 1645.738011][T24295]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1645.739740][T24295]  worker_thread+0x8a0/0xda0
[ 1645.741083][T24295]  kthread+0x711/0x8a0
[ 1645.742309][T24295]  ? __pfx_worker_thread+0x10/0x10
[ 1645.743796][T24295]  ? __pfx_kthread+0x10/0x10
[ 1645.745161][T24295]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1645.746709][T24295]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1645.748200][T24295]  ? __pfx_kthread+0x10/0x10
[ 1645.749551][T24295]  ret_from_fork+0x4bc/0x870
[ 1645.750969][T24295]  ? __pfx_ret_from_fork+0x10/0x10
[ 1645.752466][T24295]  ? __switch_to_asm+0x39/0x70
[ 1645.753873][T24295]  ? __switch_to_asm+0x33/0x70
[ 1645.755255][T24295]  ? __pfx_kthread+0x10/0x10
[ 1645.756624][T24295]  ret_from_fork_asm+0x1a/0x30
[ 1645.758015][T24295]  </TASK>
[ 1645.759462][T24295] Kernel Offset: disabled
[ 1645.760742][T24295] Rebooting in 86400 seconds..
