last executing test programs:

5m38.172411001s ago: executing program 2 (id=647):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
lseek(r1, 0x1, 0x0)
getdents(r1, 0x0, 0x58)

5m38.121904666s ago: executing program 2 (id=648):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@tclass={{0x14, 0x29, 0x43, 0xd66}}], 0x18}}], 0x1, 0x44080)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000140)=' ', 0x2e)

5m38.121624308s ago: executing program 2 (id=649):
r0 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f00000190c0)=[@in6={0xa, 0x4e20, 0x10001, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x1}]}, &(0x7f0000000000)=0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec)

5m38.022196682s ago: executing program 2 (id=650):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}}, 0x0)

5m38.021902504s ago: executing program 2 (id=651):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x1ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

5m37.126141105s ago: executing program 2 (id=658):
syz_emit_ethernet(0x9a, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000080", 0x64, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x4d, 0x0, @wg=@response={0x2, 0x0, 0x0, "eaf12af8010d489432cc01f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb", "201f3a70a41ef6c2fca06a9bd768d5f1", {"76c19815002000000000000000001000", "9514b06796dbf2ea9e520f1475c8f65b"}}}}}}}}, 0x0)

5m21.948982241s ago: executing program 32 (id=658):
syz_emit_ethernet(0x9a, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000080", 0x64, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x4d, 0x0, @wg=@response={0x2, 0x0, 0x0, "eaf12af8010d489432cc01f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb", "201f3a70a41ef6c2fca06a9bd768d5f1", {"76c19815002000000000000000001000", "9514b06796dbf2ea9e520f1475c8f65b"}}}}}}}}, 0x0)

4m42.68806918s ago: executing program 1 (id=1169):
ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x7, {0x400e804, 0x8001, 0x8, 0x8000006}})
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7})

4m42.653159165s ago: executing program 1 (id=1170):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ppoll(&(0x7f0000000440)=[{r0, 0x8004}], 0x1, &(0x7f0000000480)={0x0, 0x989680}, 0x0, 0x0)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

4m42.565178334s ago: executing program 1 (id=1171):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000200010004"], 0x51b402)

4m42.564640333s ago: executing program 1 (id=1172):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1000000, &(0x7f0000000240)={[{@iocharset={'iocharset', 0x3d, 'cp850'}}, {@sys_tz}, {@utf8}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@dmask={'dmask', 0x3d, 0x1}}, {@errors_remount}, {@zero_size_dir}, {@errors_remount}, {@keep_last_dots}]}, 0x3, 0x152c, &(0x7f0000000400)="$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")
mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

4m42.418418728s ago: executing program 1 (id=1173):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
close_range(r0, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x1, 0x0)
socket$inet6(0xa, 0x3, 0x5)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, r1, 0x4}, 0x38)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '})

4m42.056926353s ago: executing program 1 (id=1175):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000170a010800000000000000f8010000000900020073797a3000000000090001"], 0x2c}, 0x1, 0x0, 0x0, 0x20004005}, 0x0)

4m41.901055458s ago: executing program 33 (id=1175):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000170a010800000000000000f8010000000900020073797a3000000000090001"], 0x2c}, 0x1, 0x0, 0x0, 0x20004005}, 0x0)

3m23.868276287s ago: executing program 3 (id=1902):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000440), 0x1, 0x559d, &(0x7f0000005680)="$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")
r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
sendfile(r1, r2, 0x0, 0x20fffe82)
fallocate(r0, 0x3, 0x9, 0x10000)

3m22.850359953s ago: executing program 3 (id=1908):
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setfsuid(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c)
recvmmsg$unix(r1, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_usbip_server_init(0x3)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
pipe(0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

3m19.932820617s ago: executing program 3 (id=1921):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sysvipc/msg\x00', 0x0, 0x0)
msgget$private(0x0, 0x214)
read$FUSE(r0, &(0x7f0000002bc0)={0x2020}, 0x2020)

3m19.753536255s ago: executing program 3 (id=1923):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[], 0x1, 0x6276, &(0x7f0000003680)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000200)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)

3m19.272558666s ago: executing program 3 (id=1925):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r2, 0x0}, 0x20)

3m19.114093406s ago: executing program 3 (id=1926):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4)

3m18.911229201s ago: executing program 34 (id=1926):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4)

2m25.715001782s ago: executing program 5 (id=2518):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000340)={[{@usrquota}, {@nojournal_checksum}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$eJzs3c9vVFsdAPDvvf1JKbQoCzUqiCgawkw7QENY4UZjCImRuHIBtR2apjOdpjNFWlmU/8FEElf6J7gwcWHCyr073bnBhQkq0Udf8hbzcu9MS1+Zgb7QN0M6n09ycu+5p8z3nLm55wxf6JwABtb5iNiOiNGIuB8RU+3rSbvErVbJfu7Vy8cLOy8fLyTRbN79T5K3Z9di35/JnGy/5nhE/PRHEb9I3oxb39xama9UyuvterFRXSvWN7euLFfnl8pL5dVSaW52bubG1eulIxvrueofXvxw+fbP/vynbzz/6/b3f5V1a7Ldtn8cR6k19JG9OJnhiLj9RQTrg6H2eEYPXO9wy/kApRHxpYi4kD//UzGU300A4DhrNqeiObW/DgAcd2meA0vSQjsXMBlpWii0cnhnYyKt1OqNyw9qG6uLrVzZdIykD5Yr5Zl2rnA6RpKsPpufv66XDtSvRsSZiPj12Im8XlioVRb7+cEHAAbYyQPr///HWus/AHDMjfe7AwBAz1n/AWDwWP8BYPBY/wFg8Fj/AWDwWP8BYPBY/wFgoPzkzp2sNHfa33+9+HBzY6X28Mpiub5SqG4sFBZq62uFpVptKf/Onuq7Xq9Sq63NXouNR8VGud4o1je37lVrG6uNe/n3et8rj/RkVADA25w59+zvSURs3zyRl9i3l4O1Go63tN8dAPpmqN8dAPrGbl8wuPwdH3jXfq1d/4vQ06PvC9Abl74q/w+DSv4fBpf8Pwwu+X8YXM1mYs9/ABgwcvyAf/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAz28yL0laaO8FPhlpWihEnIqI6RhJHixXyjMRcToi/jY2MpbVZ/vdaQDgPaX/SuKj9jaAFycPto4mH4/lx4j45W/v/ubRfKOxPptd/+/e9cbT9vVSzzsPABzC7jq9u47vevXy8cJu6WV/XvygtbloFnenXVotwzGcH8cj+3Ay8b+kXW9JImLoCOJvP4mIr3Qaf5LnRqbbO58ejJ/FPtXT+Oln4qd5W+uYvRdfPoK+wKB5ls0/tzo9f2mcz4+dn//xfIZ6f7vz384b81+6N/8NdZn/zh82xrW//Hi0W9uTiK8Nd4qf7MVPusS/eMj4//j6Ny90a2v+LuJSdI6/P1axUV0r1je3rixX55fKS+XVUmludm7mxtXrpWKeoy7uZqrf9O+bl093i5+Nf6JL/PzO35nsOv7vHHL8v//k/s+/9Zb43/t25/t/Nj92fv+zNfG7h4w/P/HHrtt3Z/EXu4z/Xff/8iHjP//n1uIhfxQA6IH65tbKfKVSXnfiZO9k95Peh9Kf7ifNqVZPP5T+HJ+Tfs5KQC+8fuj73RMAAAAAAAAAAAAAAKCbXvw6Ub/HCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPH1aQAAAP//sHnUnw==")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

2m25.497204121s ago: executing program 5 (id=2525):
syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040e08810c08"], 0xb)

2m25.350813026s ago: executing program 5 (id=2529):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@ipv6_newroute={0x2c, 0x18, 0x711, 0x70bd2a, 0x25dfdbfc, {0xa, 0x20, 0x10, 0x0, 0xfc, 0x0, 0xff, 0x1, 0x3200}, [@RTA_OIF={0x8}, @RTA_PRIORITY={0x8, 0x1e, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048420}, 0x4040)

2m25.21920107s ago: executing program 5 (id=2532):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x3f46137792f68265)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r1, r1)
setpgid(0x0, r1)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xfffffff2}}, './file0\x00'})

2m25.099468626s ago: executing program 5 (id=2534):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}]}, 0x38}}, 0x0)

2m24.813461174s ago: executing program 5 (id=2537):
syz_mount_image$udf(&(0x7f0000000300), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$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")
mount$overlay(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000040)={[{@userxattr}, {@redirect_dir_off}], [], 0x2c})

2m24.751993248s ago: executing program 35 (id=2537):
syz_mount_image$udf(&(0x7f0000000300), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$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")
mount$overlay(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000040)={[{@userxattr}, {@redirect_dir_off}], [], 0x2c})

2m1.237671508s ago: executing program 6 (id=2781):
mkdir(&(0x7f00000000c0)='./bus\x00', 0x18e)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x8800, &(0x7f0000000340)={[{@userxattr}]})

2m1.178758933s ago: executing program 6 (id=2784):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x279, 0x80000)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x6, 0x10001, 0x3011, 0x1, 0x3, 0x4, 0x3, 0x7}})

2m1.097975894s ago: executing program 6 (id=2785):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x18, 0x2d, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

2m1.033423145s ago: executing program 6 (id=2786):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000140)={[{@nodecompose}, {@nobarrier}, {@nodecompose}, {@force}, {@nobarrier}, {@type={'type', 0x3d, "aff0aae8"}}, {@nls={'nls', 0x3d, 'iso8859-9'}}]}, 0x44, 0x6ff, &(0x7f0000000500)="$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")
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='tracefs\x00', 0x800, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x5006d, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1002c, &(0x7f0000000200)={[{@mode={'mode', 0x3d, 0xf18c}}]})

2m0.929730937s ago: executing program 6 (id=2787):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x24, &(0x7f00000000c0)={0x0, 0x13, 0x1, "fc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2m0.698825133s ago: executing program 6 (id=2790):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000004e80)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x0, 0x0)

2m0.568205988s ago: executing program 36 (id=2790):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000004e80)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x0, 0x0)

1m5.059556683s ago: executing program 7 (id=3417):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000080)={[{@data_writeback}, {@barrier_val={'barrier', 0x3d, 0xffe}}, {@grpjquota}, {@noauto_da_alloc}, {@grpquota}], [{@fsuuid={'fsuuid', 0x3d, {[0x5d, 0x37, 0x32, 0x39, 0x36, 0x39, 0x33, 0x33], 0x2d, [0x34, 0x61, 0x38, 0x3], 0x2d, [0x37, 0x37, 0x61, 0x64], 0x2d, [0x63, 0x38, 0x34, 0x61], 0x2d, [0x36, 0x32, 0x9a0e41a11f30ba7d, 0x61, 0x36, 0x33, 0x37, 0x2df4f8392a5ac602]}}}, {@measure}]}, 0x3, 0x4cf, &(0x7f00000005c0)="$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")
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mpol=interleave=renative:'])

1m4.853251945s ago: executing program 7 (id=3420):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=ANY=[@ANYBLOB="f8000000100007000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000fff9000000000000000000002f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001080000003c000000fc02000000000000000000000000000000000000000000000000808b0000000002000000000000000000000000000000000000000000000001000000000000000600000000000000ffff0000000000000300000000000000010020000000000007000000000000000e000000002300000001040000000000e60a000000000000ffffffff0a0002007000000000000000080016"], 0xf8}}, 0x0)

1m4.755539827s ago: executing program 7 (id=3422):
personality(0xeaffffffffffffff)

1m4.755403672s ago: executing program 7 (id=3423):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x40, r1, 0x1, 0x0, 0x2, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x24000010)

1m4.694880624s ago: executing program 7 (id=3425):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5f55, &(0x7f000000efc0)="$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")
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20000, 0x0, 0x0, 0x0, &(0x7f0000000100))
mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0))

1m4.352566548s ago: executing program 7 (id=3436):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000080000000000010000000900030073797a30000000000900010073797a300000000074000000060a010400000000000000000100000008000b40000000000900010073797a30000000004c0004801c0001800a00010071756575650000000c00028006000140040000002c0001800a00010071756f74610000001c0002800c00044000000000000000070c000140000000000013"], 0xe8}, 0x1, 0x0, 0x0, 0x24000090}, 0x0)

48.825695941s ago: executing program 37 (id=3436):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000080000000000010000000900030073797a30000000000900010073797a300000000074000000060a010400000000000000000100000008000b40000000000900010073797a30000000004c0004801c0001800a00010071756575650000000c00028006000140040000002c0001800a00010071756f74610000001c0002800c00044000000000000000070c000140000000000013"], 0xe8}, 0x1, 0x0, 0x0, 0x24000090}, 0x0)

1.672352147s ago: executing program 4 (id=4187):
socket(0x2c, 0x3, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x6, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
syz_emit_ethernet(0x2a, &(0x7f0000000300)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a48000000060a0b040000000000000000020000001c00048018000180080001006c6f67000c00028006000140000700000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a23affc47caed1b50088a68bf14188fbbac0a8ae34d0eb0048f"], 0x70}}, 0x0)
dup(0xffffffffffffffff)

745.636863ms ago: executing program 4 (id=4196):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x92, 0xea, 0x8, 0x545, 0x800c, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x79, 0xe6, 0x1}}]}}]}}, 0x0)

589.739653ms ago: executing program 0 (id=4201):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x210008, &(0x7f0000000040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0xff, 0xc2d, &(0x7f0000001cc0)="$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")
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[], 0x30}}, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00')

460.375117ms ago: executing program 8 (id=4203):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x923, 0x1, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x20000091)
close(r0)

459.940736ms ago: executing program 0 (id=4204):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

399.444522ms ago: executing program 8 (id=4205):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000240)={[{@uni_xlateno}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_mixed}, {@fat=@quiet}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {}, {@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}]}, 0x2, 0x217, &(0x7f00000004c0)="$eJzs3TFrE2EYB/CnttVSkGQQiiJ44uIUmop7ilQQA4qSQSeLTVGaWDAQ0KF180voV9DRVXAQV7+ACFIFF7t1ECL1YmNrYiM1OTG/35KH3Pu/e95LyEuGvLl1sr6ytNpY3tzciKmpsZgoRSm2xiIfh2I8Uo8CAPifbLVa8aWVyroXAGA4rP8AMHr6XP+vDrElAGDAfP8HgNFz/cbNy/Pl8sK1JJmKqD9uVpqV9DE9Pr8cd6MW1ZiNXHyNaO1I64uXyguzybaP+ajU19v59WZlfHe+GLnId88Xk9Tu/GRMt/PvpqMac5GLY93zc13zh+PsmZ+uX4hcvL0dq1GLpdjOdvJrxSS5cKW8J3/k+zgAAAAAAAAAAAAAAAAAAAAAABiEQrKj6/49hUKv42m+//2B9u7PMxEnJrKdOwAAAAAAAAAAAAAAAAAAAPwrGg8erizWatX7vyvuvXn2ar8xfRZj7ese9DwHL46e/vCk15jxP7s/f7d4eSrL29Jn8XrjzvFzjZnzmbUxGRG/PtPzrfU5FzGgfp5n+lr8mPW+g2eelhZfrL3/1O+Zh/5RBAAAAAAAAAAAAAAAAAAAI6/zo9+sOwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7HT+/39wRdZzBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAbwEAAP//uSidyw==")
fgetxattr(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="757365722efa"], 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)

399.119923ms ago: executing program 0 (id=4206):
mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

315.247927ms ago: executing program 0 (id=4207):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000001f0000540000000e0001"], 0x34}}, 0x0)

314.570913ms ago: executing program 8 (id=4208):
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x5761, 0x0)

241.712639ms ago: executing program 0 (id=4209):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="3eaa00"], 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000a64080c0f88ba933f7a0e7f8", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50)

241.478948ms ago: executing program 8 (id=4210):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0)

180.135334ms ago: executing program 8 (id=4211):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x210008, &(0x7f0000000040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0xff, 0xc2d, &(0x7f0000001cc0)="$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")
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[], 0x30}}, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00')

179.934852ms ago: executing program 0 (id=4212):
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0xc0083, &(0x7f0000000080)=ANY=[@ANYBLOB="04ff9b91c7a4caee3b4b65686bdb17ec4b00fdb6dc5aafeb5e5524bdaea5507f09a854e3845f031b03f5a1c71367da82a54eb42036fb170ea8b58db21904fc0dc2b81e2f6980171d9c4394201fe64cf3bbf6d4760bbeede68183a4be5af5a70bbc3b3031479d7e1483442db28087d12a13d5c23848f31ae070c07900d872029de8123649"], 0xfe, 0x2c6, &(0x7f0000000280)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0xffffffffffffffff)
getpid()
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
socket$kcm(0xa, 0x922000000003, 0x11)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7})

179.659666ms ago: executing program 4 (id=4213):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4)
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"adbafb04f3adaa00010000008000", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)

90.519024ms ago: executing program 4 (id=4214):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004014}, 0x0)
r0 = syz_io_uring_setup(0x74d, &(0x7f0000000240)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f00000002c0)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x3a, 0x0, 0x0, 0x10005}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81000, 0x1})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)

89.753733ms ago: executing program 8 (id=4215):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x188, 0x0, 0x0, 0x0, 0x20, 0x403, 0x97c1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x2, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xc, 0xfe}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="400510000000100c65385e"], 0x0, 0x0, 0x0, 0x0}, 0x0)

461.357µs ago: executing program 4 (id=4216):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x4000, 0x0, 0xfc, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x9360, 0x0)

0s ago: executing program 4 (id=4217):
kexec_load(0x8000000000000001, 0x1, &(0x7f0000000300)=[{0x0, 0x0, 0x6, 0xffffffffffffffff}], 0x0)

kernel console output (not intermixed with test programs):

roduct=a4a1, bcdDevice= 0.40
[  307.971942][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.984023][T12124] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  308.197716][ T5956] cdc_ncm 1-1:1.0: bind() failure
[  308.213032][ T5956] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  308.215647][ T5956] cdc_ncm 1-1:1.1: bind() failure
[  308.236798][ T5956] usb 1-1: USB disconnect, device number 34
[  308.286407][T12153] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2339'.
[  308.334084][T12153] vlan2: entered allmulticast mode
[  308.335691][T12153] bridge0: entered allmulticast mode
[  308.337537][T12153] bridge1: port 1(vlan2) entered blocking state
[  308.340473][T12153] bridge1: port 1(vlan2) entered disabled state
[  308.344055][T12153] vlan2: entered promiscuous mode
[  308.345914][T12153] bridge0: entered promiscuous mode
[  308.486009][T12167] program syz.5.2346 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  308.514411][T12169] Can't find a SQUASHFS superblock on nullb0
[  308.594541][T12177] loop4: detected capacity change from 0 to 2048
[  308.616640][T12177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  308.638651][ T8999] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.789868][ T5956] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  308.941436][ T5956] usb 6-1: Using ep0 maxpacket: 8
[  308.945270][ T5956] usb 6-1: config 0 has an invalid interface number: 124 but max is 0
[  308.948122][ T5956] usb 6-1: config 0 has no interface number 0
[  308.952234][ T5956] usb 6-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=72.01
[  308.956399][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.961306][ T5956] usb 6-1: Product: syz
[  308.964978][ T5956] usb 6-1: Manufacturer: syz
[  308.967625][ T5956] usb 6-1: SerialNumber: syz
[  308.973614][ T5956] usb 6-1: config 0 descriptor??
[  309.087552][T12200] syz_tun: entered allmulticast mode
[  309.097367][T12200] dvmrp1: entered allmulticast mode
[  309.104654][T12199] syz_tun: left allmulticast mode
[  309.187452][ T5956] usb 6-1: USB disconnect, device number 7
[  309.539905][ T6037] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  309.696062][ T6037] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  309.699608][ T6037] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.714536][ T6037] usb 1-1: config 0 descriptor??
[  309.731233][ T6037] gspca_main: sunplus-2.14.0 probing 055f:c420
[  309.923859][ T6037] gspca_sunplus: reg_w_riv err -71
[  309.930223][ T6037] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  309.936083][ T6037] usb 1-1: USB disconnect, device number 35
[  310.304148][T12250] loop5: detected capacity change from 0 to 256
[  310.322202][T12250] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  310.335775][T12250] exFAT-fs (loop5): error, data size is invalid(10)
[  310.343091][T12250] exFAT-fs (loop5): Filesystem has been set read-only
[  310.346837][T12250] exFAT-fs (loop5): error, data size is invalid(10)
[  310.573027][T12258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2384'.
[  310.576827][T12258] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2384'.
[  311.023889][T12266] loop5: detected capacity change from 0 to 512
[  311.058792][T12266] EXT4-fs (loop5): 1 orphan inode deleted
[  311.062543][T12266] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  311.068382][T12266] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  311.075334][   T26] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  311.097230][   T26] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u9:0: Failed to release dquot type 1
[  311.108006][T11073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.141535][T12270] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  311.159410][T12270] syzkaller0: entered promiscuous mode
[  311.178345][T12270] syzkaller0: entered allmulticast mode
[  311.259047][T12276] loop5: detected capacity change from 0 to 256
[  311.260113][T12270] tipc: Resetting bearer <eth:syzkaller0>
[  311.266461][T12276] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xecfd5def, utbl_chksum : 0xe619d30d)
[  311.276935][   T33] audit: type=1800 audit(1755248283.385:46): pid=12276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2392" name="file1" dev="loop5" ino=1048729 res=0 errno=0
[  311.308102][T12269] tipc: Resetting bearer <eth:syzkaller0>
[  311.358627][T12269] tipc: Disabling bearer <eth:syzkaller0>
[  311.719901][ T6037] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  311.731839][T12303] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2405'.
[  311.871397][ T6037] usb 6-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e
[  311.874576][ T6037] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.881187][ T6037] usb 6-1: config 0 descriptor??
[  311.890819][ T6037] usb-storage 6-1:0.0: USB Mass Storage device detected
[  312.078201][T12325] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2414'.
[  312.083538][T12325] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2414'.
[  312.096667][ T6037] usb 6-1: USB disconnect, device number 8
[  312.303835][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2419'.
[  312.307276][T12335] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2419'.
[  312.484705][T12340] loop4: detected capacity change from 0 to 1024
[  312.759901][ T5956] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  312.779866][ T7507] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  312.910108][ T5956] usb 5-1: Using ep0 maxpacket: 32
[  312.914096][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  312.919236][ T5956] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9
[  312.924419][ T5956] usb 5-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3
[  312.926906][ T5956] usb 5-1: Manufacturer: syz
[  312.928630][ T5956] usb 5-1: SerialNumber: syz
[  312.931084][ T7507] usb 1-1: Using ep0 maxpacket: 32
[  312.936095][ T7507] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  312.939618][ T5956] usb 5-1: config 0 descriptor??
[  312.943560][ T7507] usb 1-1: config 0 has no interface number 0
[  312.951610][ T7507] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  312.954532][ T7507] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.957128][ T7507] usb 1-1: Product: syz
[  312.958500][ T7507] usb 1-1: Manufacturer: syz
[  312.963810][ T7507] usb 1-1: SerialNumber: syz
[  312.972114][ T7507] usb 1-1: config 0 descriptor??
[  312.977953][ T7507] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  313.184881][ T7507] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  313.193421][ T7507] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  313.396123][    C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 115
[  313.603526][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  313.612637][ T7507] usb 1-1: USB disconnect, device number 36
[  313.618945][ T7507] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  313.629694][ T7507] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  313.638678][ T7507] quatech2 1-1:0.51: device disconnected
[  313.920120][ T5238] Bluetooth: hci2: command 0x0406 tx timeout
[  314.494847][    T9] usb 5-1: USB disconnect, device number 28
[  314.579543][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803dff8400: rx timeout, send abort
[  314.586049][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803dffa400: rx timeout, send abort
[  314.588911][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803dff8400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  314.595965][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803dffa400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  314.787202][T12351] loop5: detected capacity change from 0 to 128
[  314.838811][T12351] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  314.844903][T12351] ext4 filesystem being mounted at /132/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  314.888624][T12351] fscrypt (loop5, inode 12): Unsupported encryption flags (0xea)
[  314.933946][T11073] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  315.152990][T12355] 8021q: adding VLAN 0 to HW filter on device bond1
[  315.377898][T12362] __vm_enough_memory: pid: 12362, comm: syz.4.2429, bytes: 21199900692480 not enough memory for the allocation
[  315.452866][T12360] loop5: detected capacity change from 0 to 8192
[  315.473292][T12368] netlink: 'syz.0.2432': attribute type 10 has an invalid length.
[  315.509110][T12368] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  315.921716][T12379] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  316.176073][T12370] loop4: detected capacity change from 0 to 32768
[  316.244410][   T33] audit: type=1800 audit(1755248288.355:47): pid=12384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2438" name="file2" dev="tmpfs" ino=4574 res=0 errno=0
[  316.716274][T12420] netlink: 'syz.0.2455': attribute type 11 has an invalid length.
[  316.785425][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2456'.
[  316.845285][T12424] vxlan0: entered promiscuous mode
[  316.869536][   T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  316.876706][   T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  316.885616][   T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  316.893593][   T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  316.974731][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  316.977526][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[  317.561519][    T9] hid-generic 0000:0004:0000.0018: unknown main item tag 0x0
[  317.565700][    T9] hid-generic 0000:0004:0000.0018: unknown main item tag 0x0
[  317.579423][    T9] hid-generic 0000:0004:0000.0018: unknown main item tag 0x0
[  317.599093][    T9] hid-generic 0000:0004:0000.0018: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  317.789229][T12430] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  318.402088][T12458] netlink: 'syz.5.2470': attribute type 3 has an invalid length.
[  318.631627][T12471] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2476'.
[  318.778921][T12477] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2479'.
[  318.783348][T12477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2479'.
[  318.786832][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2479'.
[  318.907305][T12483] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2482'.
[  318.917981][T12479] loop5: detected capacity change from 0 to 4096
[  319.084529][T12483] loop4: detected capacity change from 0 to 32768
[  319.105458][T12483] jfs_mkdir: dtInsert returned -EIO
[  319.107791][T12483] ERROR: (device loop4): jfs_mkdir: 
[  319.107791][T12483] 
[  319.113348][T12483] ERROR: (device loop4): remounting filesystem as read-only
[  319.351508][T12479] ntfs3(loop5): ino=1a, mi_enum_attr
[  319.353210][T12479] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  319.380411][   T33] audit: type=1804 audit(1755248291.485:48): pid=12486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2483" name="/newroot/898/file0" dev="tmpfs" ino=4667 res=1 errno=0
[  319.608177][   T33] audit: type=1326 audit(1755248291.715:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12487 comm="syz.5.2484" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e7538ebe9 code=0x0
[  320.155409][T12501] netlink: 'syz.0.2490': attribute type 1 has an invalid length.
[  320.157776][T12501] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2490'.
[  320.162464][T12501] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2490'.
[  322.094423][T12539] program syz.4.2503 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  322.279956][   T47] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  322.444098][   T47] usb 1-1: Using ep0 maxpacket: 32
[  322.453291][   T47] usb 1-1: config 0 has an invalid interface number: 37 but max is 1
[  322.456690][   T47] usb 1-1: config 0 has no interface number 1
[  322.468721][   T47] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3
[  322.476949][   T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.485734][   T47] usb 1-1: Product: syz
[  322.489211][   T47] usb 1-1: Manufacturer: syz
[  322.500629][   T47] usb 1-1: SerialNumber: syz
[  322.526560][   T47] usb 1-1: config 0 descriptor??
[  322.843317][    T9] usb 1-1: USB disconnect, device number 37
[  323.485416][T12589] loop5: detected capacity change from 0 to 128
[  323.610302][T12600] loop5: detected capacity change from 0 to 512
[  323.629412][T12600] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  323.642173][T12600] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  323.683945][T12600] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #12: comm syz.5.2518: corrupted xattr block 6: invalid header
[  323.693617][T12600] overlayfs: failed to get uuid (/file0, err=-117); falling back to uuid=null.
[  323.696839][T12600] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #12: comm syz.5.2518: corrupted xattr block 6: invalid header
[  323.708677][T12610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2521'.
[  323.709095][T12600] overlayfs: failed to get origin (-117)
[  323.719683][T12600] EXT4-fs error (device loop5): ext4_xattr_block_find:1869: inode #12: comm syz.5.2518: corrupted xattr block 6: invalid header
[  323.741803][T12600] overlayfs: failed to verify upper root origin
[  323.851191][T11073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.992101][T12621] bond1: entered promiscuous mode
[  323.994624][T12621] 8021q: adding VLAN 0 to HW filter on device bond1
[  324.158328][T12674] loop4: detected capacity change from 0 to 4096
[  324.169180][T12674] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  324.201921][T12674] ntfs3(loop4): ino=19, mi_enum_attr
[  324.207439][T12674] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  324.235367][T12674] ntfs3(loop4): failed to convert "c46c" to cp861
[  324.243497][T12674] ntfs3(loop4): ino=20, mi_enum_attr
[  324.538304][   T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.542560][   T47] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  324.625369][   T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.681484][   T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.699936][   T47] usb 5-1: Using ep0 maxpacket: 16
[  324.705536][   T47] usb 5-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55
[  324.708480][   T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.713224][   T47] usb 5-1: Product: syz
[  324.714955][   T47] usb 5-1: Manufacturer: syz
[  324.716901][   T47] usb 5-1: SerialNumber: syz
[  324.723607][   T47] usb 5-1: config 0 descriptor??
[  324.727939][   T47] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a
[  324.752405][   T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.866898][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  324.877583][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  324.883947][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  324.889669][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  324.902335][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  324.999098][   T13] bridge_slave_1: left allmulticast mode
[  325.001671][   T13] bridge_slave_1: left promiscuous mode
[  325.005782][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.017157][   T13] bridge_slave_0: left allmulticast mode
[  325.019480][   T13] bridge_slave_0: left promiscuous mode
[  325.024412][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.033840][   T13] vlan2: left promiscuous mode
[  325.035872][   T13] bridge0: left promiscuous mode
[  325.038208][   T13] bridge1: port 1(vlan2) entered disabled state
[  325.157379][   T47] gspca_sn9c20x: Write register 1001 failed -71
[  325.165496][   T47] gspca_sn9c20x: Device initialization failed
[  325.168331][   T47] gspca_sn9c20x 5-1:0.0: probe with driver gspca_sn9c20x failed with error -71
[  325.217565][   T47] usb 5-1: USB disconnect, device number 29
[  326.036620][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  326.046999][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  326.052622][   T13] bond0 (unregistering): Released all slaves
[  326.263192][   T13] bond1 (unregistering): Released all slaves
[  326.496438][   T13] IPVS: stopping master sync thread 12379 ...
[  326.585580][T12753] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  326.959914][ T5990] Bluetooth: hci0: command tx timeout
[  327.087095][   T13] hsr_slave_0: left promiscuous mode
[  327.092653][   T13] hsr_slave_1: left promiscuous mode
[  327.097451][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  327.102908][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  327.107885][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  327.110431][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  327.127702][   T13] veth1_macvtap: left promiscuous mode
[  327.129539][   T13] veth0_macvtap: left promiscuous mode
[  327.132238][   T13] veth1_vlan: left promiscuous mode
[  327.134038][   T13] veth0_vlan: left promiscuous mode
[  327.222069][T12793] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  328.022250][   T13] team0 (unregistering): Port device team_slave_1 removed
[  328.081666][   T13] team0 (unregistering): Port device team_slave_0 removed
[  328.657248][T12823] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  328.664208][T12823] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  328.667081][T12823] gretap1: entered promiscuous mode
[  328.668697][T12823] gretap1: entered allmulticast mode
[  328.734458][T12875] loop4: detected capacity change from 0 to 16
[  328.757960][T12875] erofs (device loop4): mounted with root inode @ nid 36.
[  328.805543][T12875] erofs (device loop4): unknown HEAD1 format 5 for nid 36, please upgrade kernel
[  328.809637][T12875] erofs (device loop4): unknown HEAD1 format 5 for nid 36, please upgrade kernel
[  328.819085][T12875] erofs (device loop4): read error -95 @ 8200 of nid 36
[  328.871890][T12703] chnl_net:caif_netlink_parms(): no params data found
[  329.052195][ T5990] Bluetooth: hci0: command tx timeout
[  329.206109][T12703] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.209153][T12703] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.212933][T12703] bridge_slave_0: entered allmulticast mode
[  329.215676][T12703] bridge_slave_0: entered promiscuous mode
[  329.254175][T12703] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.258214][T12703] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.261268][T12703] bridge_slave_1: entered allmulticast mode
[  329.271041][T12703] bridge_slave_1: entered promiscuous mode
[  329.309696][T12703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  329.319418][T12703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  329.364436][T12703] team0: Port device team_slave_0 added
[  329.367953][T12703] team0: Port device team_slave_1 added
[  329.418087][T12703] batman_adv: batadv0: Adding interface: batadv_slave_0
[  329.421409][T12703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  329.432086][T12703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  329.442552][T12703] batman_adv: batadv0: Adding interface: batadv_slave_1
[  329.446359][   T13] IPVS: stop unused estimator thread 0...
[  329.452394][T12703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  329.463931][T12703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  329.751143][    T9] usb 5-1: new full-speed USB device number 30 using dummy_hcd
[  329.819237][T12703] hsr_slave_0: entered promiscuous mode
[  329.823432][T12703] hsr_slave_1: entered promiscuous mode
[  329.825898][T12703] debugfs: 'hsr0' already exists in 'hsr'
[  329.827936][T12703] Cannot create hsr debugfs directory
[  329.903834][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  329.907983][    T9] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  329.919153][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.938056][    T9] usb 5-1: config 0 descriptor??
[  329.943807][T13001] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  330.133382][T12703] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  330.142271][T12703] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  330.157419][T12703] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  330.168002][T12703] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  330.321282][T12703] 8021q: adding VLAN 0 to HW filter on device bond0
[  330.342869][T12703] 8021q: adding VLAN 0 to HW filter on device team0
[  330.354157][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.357045][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  330.371146][    T9] elan 0003:04F3:0755.0019: unknown main item tag 0x0
[  330.375753][    T9] elan 0003:04F3:0755.0019: item fetching failed at offset 3/5
[  330.378936][    T9] elan 0003:04F3:0755.0019: Hid Parse failed
[  330.381231][    T9] elan 0003:04F3:0755.0019: probe with driver elan failed with error -22
[  330.385568][  T592] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.388411][  T592] bridge0: port 2(bridge_slave_1) entered forwarding state
[  330.577174][    T9] usb 5-1: USB disconnect, device number 30
[  330.626205][T12703] 8021q: adding VLAN 0 to HW filter on device batadv0
[  330.837604][T12703] veth0_vlan: entered promiscuous mode
[  330.846597][T12703] veth1_vlan: entered promiscuous mode
[  330.871632][T12703] veth0_macvtap: entered promiscuous mode
[  330.879233][T12703] veth1_macvtap: entered promiscuous mode
[  330.889552][T12703] batman_adv: batadv0: Interface activated: batadv_slave_0
[  330.898601][T12703] batman_adv: batadv0: Interface activated: batadv_slave_1
[  330.914627][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  330.924964][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  330.927688][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  330.938284][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  330.999508][ T7849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  331.006979][ T7849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  331.034443][  T592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  331.037816][  T592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  331.122190][ T5990] Bluetooth: hci0: command tx timeout
[  332.306259][T13329] loop6: detected capacity change from 0 to 2048
[  332.357760][T13329] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  332.384157][T13334] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  332.384198][T13329] syz.6.2580: attempt to access beyond end of device
[  332.384198][T13329] loop6: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  332.553197][T13342] Bluetooth: MGMT ver 1.23
[  332.791911][ T5956] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  332.951056][ T5956] usb 1-1: Using ep0 maxpacket: 16
[  332.956691][ T5956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  332.961837][ T5956] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  332.965312][ T5956] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 132
[  332.971399][ T5956] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=14.47
[  332.974369][ T5956] usb 1-1: New USB device strings: Mfr=55, Product=172, SerialNumber=120
[  332.976990][ T5956] usb 1-1: Product: syz
[  332.978230][ T5956] usb 1-1: Manufacturer: syz
[  332.985485][ T5956] usb 1-1: SerialNumber: syz
[  332.990707][ T5956] usb 1-1: config 0 descriptor??
[  332.994634][T13344] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  333.015562][ T5956] mcba_usb 1-1:0.0 can0: failed tx_urb -90
[  333.017428][ T5956] mcba_usb 1-1:0.0 can0: Failed to send cmd (169)
[  333.019513][ T5956] mcba_usb 1-1:0.0 can0: failed tx_urb -90
[  333.021670][ T5956] mcba_usb 1-1:0.0 can0: Failed to send cmd (169)
[  333.023781][ T5956] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected
[  333.200102][ T5990] Bluetooth: hci0: command tx timeout
[  333.217929][ T5956] usb 1-1: USB disconnect, device number 38
[  333.234516][ T5956] mcba_usb 1-1:0.0 can0: device disconnected
[  333.859404][T13429] evm: overlay not supported
[  333.874381][T13429] overlayfs: failed to get inode (-116)
[  333.878450][T13429] overlayfs: failed to get inode (-116)
[  333.881939][T13429] overlayfs: failed to get inode (-116)
[  333.884197][T13429] overlayfs: failed to get inode (-116)
[  334.106098][T13448] loop4: detected capacity change from 0 to 1024
[  334.137398][T13448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  334.148657][T13448] ext4 filesystem being mounted at /469/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  334.198357][ T8999] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.245331][T13456] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  334.782916][T13469] syz.6.2612: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  334.794885][T13469] CPU: 1 UID: 0 PID: 13469 Comm: syz.6.2612 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  334.794900][T13469] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  334.794906][T13469] Call Trace:
[  334.794910][T13469]  <TASK>
[  334.794914][T13469]  dump_stack_lvl+0x189/0x250
[  334.794931][T13469]  ? __pfx_dump_stack_lvl+0x10/0x10
[  334.794941][T13469]  ? __pfx__printk+0x10/0x10
[  334.794954][T13469]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  334.794965][T13469]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  334.794975][T13469]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  334.794986][T13469]  warn_alloc+0x214/0x310
[  334.795000][T13469]  ? stack_depot_save_flags+0x40/0x860
[  334.795012][T13469]  ? __pfx_warn_alloc+0x10/0x10
[  334.795025][T13469]  ? kasan_save_track+0x4f/0x80
[  334.795035][T13469]  ? xskq_create+0x56/0x170
[  334.795044][T13469]  ? xsk_init_queue+0xb0/0x110
[  334.795052][T13469]  ? xsk_setsockopt+0x4dc/0x8d0
[  334.795060][T13469]  ? do_sock_setsockopt+0x17c/0x1b0
[  334.795073][T13469]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  334.795080][T13469]  ? do_syscall_64+0xfa/0x3b0
[  334.795090][T13469]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.795101][T13469]  __vmalloc_node_range_noprof+0x125/0x12f0
[  334.795127][T13469]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  334.795197][T13469]  ? __kasan_kmalloc+0x93/0xb0
[  334.795219][T13469]  vmalloc_user_noprof+0xad/0xf0
[  334.795239][T13469]  ? xskq_create+0xbf/0x170
[  334.795257][T13469]  xskq_create+0xbf/0x170
[  334.795276][T13469]  xsk_init_queue+0xb0/0x110
[  334.795294][T13469]  xsk_setsockopt+0x4dc/0x8d0
[  334.795314][T13469]  ? __pfx_xsk_setsockopt+0x10/0x10
[  334.795329][T13469]  ? __pfx_aa_sk_perm+0x10/0x10
[  334.795351][T13469]  ? aa_sock_opt_perm+0xff/0x1b0
[  334.795368][T13469]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  334.795383][T13469]  ? __pfx_xsk_setsockopt+0x10/0x10
[  334.795399][T13469]  do_sock_setsockopt+0x17c/0x1b0
[  334.795422][T13469]  __x64_sys_setsockopt+0x13f/0x1b0
[  334.795440][T13469]  do_syscall_64+0xfa/0x3b0
[  334.795458][T13469]  ? lockdep_hardirqs_on+0x9c/0x150
[  334.795477][T13469]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.795491][T13469]  ? exc_page_fault+0x9f/0xf0
[  334.795507][T13469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.795519][T13469] RIP: 0033:0x7fbf5e58ebe9
[  334.795532][T13469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  334.795544][T13469] RSP: 002b:00007fbf5f403038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  334.795559][T13469] RAX: ffffffffffffffda RBX: 00007fbf5e7b6090 RCX: 00007fbf5e58ebe9
[  334.795570][T13469] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  334.795579][T13469] RBP: 00007fbf5e611e19 R08: 0000000000000004 R09: 0000000000000000
[  334.795588][T13469] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  334.795597][T13469] R13: 00007fbf5e7b6128 R14: 00007fbf5e7b6090 R15: 00007ffe00978498
[  334.795623][T13469]  </TASK>
[  334.798749][T13469] Mem-Info:
[  335.071700][T13469] active_anon:12366 inactive_anon:0 isolated_anon:0
[  335.071700][T13469]  active_file:13493 inactive_file:38673 isolated_file:0
[  335.071700][T13469]  unevictable:1768 dirty:429 writeback:0
[  335.071700][T13469]  slab_reclaimable:10719 slab_unreclaimable:55752
[  335.071700][T13469]  mapped:19379 shmem:6594 pagetables:1607
[  335.071700][T13469]  sec_pagetables:0 bounce:0
[  335.071700][T13469]  kernel_misc_reclaimable:0
[  335.071700][T13469]  free:268265 free_pcp:19367 free_cma:0
[  335.113450][T13476] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2613'.
[  335.141716][T13469] Node 0 active_anon:37724kB inactive_anon:0kB active_file:51604kB inactive_file:6412kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45392kB dirty:1120kB writeback:0kB shmem:21108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7664kB pagetables:3280kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  335.206630][T13469] Node 1 active_anon:11808kB inactive_anon:0kB active_file:2368kB inactive_file:148280kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32124kB dirty:596kB writeback:0kB shmem:5268kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5568kB pagetables:3080kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  335.216719][T13469] Node 0 DMA free:15344kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  335.225865][T13469] lowmem_reserve[]: 0 811 811 811 811
[  335.228052][T13469] Node 0 DMA32 free:301456kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37724kB inactive_anon:0kB active_file:51604kB inactive_file:6412kB unevictable:3536kB writepending:1120kB present:1556484kB managed:830956kB mlocked:0kB bounce:0kB free_pcp:39668kB local_pcp:25656kB free_cma:0kB
[  335.241472][T13469] lowmem_reserve[]: 0 0 0 0 0
[  335.243038][T13469] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  335.252775][T13469] lowmem_reserve[]: 0 0 854 854 854
[  335.255041][T13469] Node 1 Normal free:297200kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11808kB inactive_anon:0kB active_file:2368kB inactive_file:148280kB unevictable:3536kB writepending:596kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:38524kB local_pcp:21156kB free_cma:0kB
[  335.265958][T13469] lowmem_reserve[]: 0 0 0 0 0
[  335.267662][T13469] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB
[  335.272817][T13469] Node 0 DMA32: 642*4kB (UME) 112*8kB (UE) 9*16kB (UME) 253*32kB (UME) 140*64kB (UM) 210*128kB (UME) 30*256kB (UME) 17*512kB (UM) 10*1024kB (UME) 11*2048kB (UME) 50*4096kB (UM) = 301496kB
[  335.287398][T13469] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  335.306798][T13469] Node 1 Normal: 364*4kB (UME) 96*8kB (ME) 702*16kB (UME) 294*32kB (UME) 363*64kB (UME) 170*128kB (UM) 43*256kB (UM) 19*512kB (UME) 11*1024kB (UE) 6*2048kB (UM) 45*4096kB (UM) = 296464kB
[  335.314728][T13469] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  335.317863][T13469] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  335.323033][T13469] 58718 total pagecache pages
[  335.324932][T13469] 0 pages in swap cache
[  335.338903][T13469] Free swap  = 124996kB
[  335.349863][T13469] Total swap = 124996kB
[  335.351183][T13469] 786301 pages RAM
[  335.352515][T13469] 0 pages HighMem/MovableOnly
[  335.353856][T13469] 241330 pages reserved
[  335.363698][T13469] 0 pages cma reserved
[  335.412789][T13484] loop4: detected capacity change from 0 to 32768
[  335.431629][T13484] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  335.447772][T13484] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  335.482146][ T8999] ocfs2: Unmounting device (7,4) on (node local)
[  335.659843][  T795] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  335.811388][  T795] usb 7-1: Using ep0 maxpacket: 32
[  335.815189][  T795] usb 7-1: unable to get BOS descriptor or descriptor too short
[  335.818347][  T795] usb 7-1: config 4 has an invalid interface number: 91 but max is 0
[  335.821163][  T795] usb 7-1: config 4 has no interface number 0
[  335.832270][  T795] usb 7-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=6c.05
[  335.835514][  T795] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.837914][  T795] usb 7-1: Product: syz
[  335.839448][  T795] usb 7-1: Manufacturer: syz
[  335.842264][  T795] usb 7-1: SerialNumber: syz
[  335.925171][T13547] loop4: detected capacity change from 0 to 512
[  335.957705][T13547] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  336.059594][  T795] empeg 7-1:4.91: empeg converter detected
[  336.062739][  T795] usb 7-1: active config #4 != 1 ??
[  336.071843][  T795] usb 7-1: USB disconnect, device number 2
[  336.219853][ T6037] usb 1-1: new full-speed USB device number 39 using dummy_hcd
[  336.292968][T13572] loop4: detected capacity change from 0 to 32768
[  336.352880][T13579] netlink: 79 bytes leftover after parsing attributes in process `syz.4.2640'.
[  336.372152][ T6037] usb 1-1: config 0 has an invalid interface number: 152 but max is 0
[  336.376813][ T6037] usb 1-1: config 0 has no interface number 0
[  336.379247][ T6037] usb 1-1: config 0 interface 152 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  336.395770][ T6037] usb 1-1: config 0 interface 152 has no altsetting 0
[  336.402959][ T6037] usb 1-1: New USB device found, idVendor=0e7e, idProduct=1001, bcdDevice=a3.17
[  336.406888][ T6037] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.412757][ T6037] usb 1-1: Product: syz
[  336.414273][ T6037] usb 1-1: Manufacturer: syz
[  336.415932][ T6037] usb 1-1: SerialNumber: syz
[  336.420706][ T6037] usb 1-1: config 0 descriptor??
[  336.422945][T13550] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  336.429508][T13581] loop4: detected capacity change from 0 to 2048
[  336.436269][T13581] EXT4-fs (loop4): unsupported inode size: 0
[  336.438578][T13581] EXT4-fs (loop4): blocksize: 2048
[  336.628285][T13550] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  336.653503][ T6037] cdc_subset 1-1:0.152 usb0: register 'cdc_subset' at usb-dummy_hcd.0-1, Yopy, 32:77:64:99:58:38
[  336.720267][  T795] usb 5-1: new full-speed USB device number 31 using dummy_hcd
[  336.840859][   T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  336.844574][    T9] usb 1-1: USB disconnect, device number 39
[  336.859249][    T9] cdc_subset 1-1:0.152 usb0: unregister 'cdc_subset' usb-dummy_hcd.0-1, Yopy
[  336.876195][  T795] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  336.885133][  T795] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  336.898791][  T795] usb 5-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00
[  336.903301][  T795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.910457][  T795] usb 5-1: config 0 descriptor??
[  336.919656][T13590] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  336.999865][   T10] usb 7-1: Using ep0 maxpacket: 8
[  337.005060][   T10] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  337.008394][   T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  337.014383][   T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  337.018287][   T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  337.023848][   T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  337.029067][   T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  337.033360][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.247976][   T10] usb 7-1: usb_control_msg returned -32
[  337.250431][   T10] usbtmc 7-1:16.0: can't read capabilities
[  337.351512][  T795] saitek 0003:06A3:0CCD.001A: item fetching failed at offset 0/2
[  337.355206][  T795] saitek 0003:06A3:0CCD.001A: parse failed
[  337.357472][  T795] saitek 0003:06A3:0CCD.001A: probe with driver saitek failed with error -22
[  337.556689][   T24] usb 5-1: USB disconnect, device number 31
[  337.813919][  T795] usb 7-1: USB disconnect, device number 3
[  338.144088][T13667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2646'.
[  338.494311][T13692] netlink: 356 bytes leftover after parsing attributes in process `syz.6.2654'.
[  338.565636][T13677] loop4: detected capacity change from 0 to 32768
[  340.404760][T13751] loop4: detected capacity change from 0 to 128
[  340.415132][T13751] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  340.425199][T13751] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  340.456292][T13751] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.2670: checksumming directory block 0
[  340.488513][ T8999] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  340.612611][T13774] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2678'.
[  340.789993][T13789] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2683'.
[  340.978192][T13808] IPv4: Oversized IP packet from 172.20.20.24
[  341.052880][T13813] netlink: 'syz.0.2692': attribute type 1 has an invalid length.
[  341.056401][T13813] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2692'.
[  341.062292][T13813] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2692'.
[  341.269514][T13838] netlink: 'syz.0.2700': attribute type 10 has an invalid length.
[  341.305486][T13838] veth0_vlan: left promiscuous mode
[  341.311638][T13838] veth0_vlan: entered promiscuous mode
[  341.333716][T13838] team0: Device veth0_vlan failed to register rx_handler
[  343.502748][T13914] loop6: detected capacity change from 0 to 32768
[  343.649573][T13914] JBD2: Ignoring recovery information on journal
[  343.718200][T13914] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode.
[  343.836677][T12703] ocfs2: Unmounting device (7,6) on (node local)
[  345.100368][   T10] usb 1-1: new full-speed USB device number 40 using dummy_hcd
[  345.255920][   T10] usb 1-1: config 0 has an invalid interface number: 128 but max is 0
[  345.258963][   T10] usb 1-1: config 0 has no interface number 0
[  345.271459][   T10] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  345.274231][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.290191][   T10] usb 1-1: Product: syz
[  345.291639][   T10] usb 1-1: Manufacturer: syz
[  345.293152][   T10] usb 1-1: SerialNumber: syz
[  345.303115][   T10] usb 1-1: config 0 descriptor??
[  345.758728][   T10] usb 1-1: Firmware: major: 119, minor: 43, hardware type: UNKNOWN (5)
[  345.960360][   T10] usb 1-1: failed to fetch extended address, random address set
[  345.963540][   T10] usb 1-1: atusb_probe: initialization failed, error = -524
[  345.967093][   T10] atusb 1-1:0.128: probe with driver atusb failed with error -524
[  346.018186][   T10] usb 1-1: USB disconnect, device number 40
[  346.325003][T14037] delete_channel: no stack
[  346.326430][T14037] delete_channel: no stack
[  346.398726][T14040] loop6: detected capacity change from 0 to 8192
[  346.443132][T14040] Dev loop6: unable to read partition block 838860800
[  346.446411][T14040]  loop6: RDSK (419430400) unable to read partition table
[  346.449384][T14040] loop6: partition table beyond EOD, truncated
[  346.451880][T14040] loop_reread_partitions: partition scan of loop6 () failed (rc=-5)
[  346.460676][ T5295] Dev loop6: unable to read partition block 838860800
[  346.463435][ T5295]  loop6: RDSK (419430400) unable to read partition table
[  346.465755][ T5295] loop6: partition table beyond EOD, truncated
[  346.523565][T14048] loop6: detected capacity change from 0 to 512
[  346.526951][T14048] EXT4-fs: Ignoring removed orlov option
[  346.543601][T14048] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  346.579019][T14048] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  346.588897][T14048] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.2748: corrupted in-inode xattr: e_value size too large
[  346.599500][T14048] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2748: couldn't read orphan inode 15 (err -117)
[  346.609164][T14048] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  346.671550][T12703] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.721868][T14064] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2752'.
[  346.877425][T14081] loop6: detected capacity change from 0 to 1024
[  346.955988][T14081] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  347.020887][T12703] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.046205][T14088] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2758'.
[  347.051139][T14088] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2758'.
[  347.054975][T14088] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2758'.
[  347.566535][T14124] loop6: detected capacity change from 0 to 32768
[  347.581280][T14124] JBD2: Ignoring recovery information on journal
[  347.617738][T14124] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  347.634090][T14124] (syz.6.2772,14124,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10
[  347.641826][T14124] (syz.6.2772,14124,1):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2
[  347.647520][T14124] (syz.6.2772,14124,1):ocfs2_mknod:301 ERROR: status = -2
[  347.649834][T14124] (syz.6.2772,14124,1):ocfs2_mknod:505 ERROR: status = -2
[  347.652418][T14124] (syz.6.2772,14124,1):ocfs2_create:678 ERROR: status = -2
[  347.674884][T12703] ocfs2: Unmounting device (7,6) on (node local)
[  347.959267][T14151] loop6: detected capacity change from 0 to 256
[  347.983176][T14151] FAT-fs (loop6): Directory bread(block 64) failed
[  347.985877][T14151] FAT-fs (loop6): Directory bread(block 65) failed
[  347.988711][T14151] FAT-fs (loop6): Directory bread(block 66) failed
[  347.991721][T14151] FAT-fs (loop6): Directory bread(block 67) failed
[  347.994823][T14151] FAT-fs (loop6): Directory bread(block 68) failed
[  347.997597][T14151] FAT-fs (loop6): Directory bread(block 69) failed
[  348.000700][T14151] FAT-fs (loop6): Directory bread(block 70) failed
[  348.003587][T14151] FAT-fs (loop6): Directory bread(block 71) failed
[  348.006507][T14151] FAT-fs (loop6): Directory bread(block 72) failed
[  348.009336][T14151] FAT-fs (loop6): Directory bread(block 73) failed
[  348.230256][T14170] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  348.317296][T14173] loop6: detected capacity change from 0 to 1024
[  348.382874][T12703] hfsplus: bad catalog entry type
[  348.418827][ T1092] hfsplus: b-tree write err: -5, ino 4
[  348.685426][T12983] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.777095][T12983] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.860453][T12983] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.930151][T12983] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.954506][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  348.961996][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  348.965514][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  348.969624][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  348.973632][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  349.268140][T12983] bridge_slave_1: left allmulticast mode
[  349.275635][T12983] bridge_slave_1: left promiscuous mode
[  349.278009][T12983] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.298163][T12983] bridge_slave_0: left allmulticast mode
[  349.300708][T12983] bridge_slave_0: left promiscuous mode
[  349.303101][T12983] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.641883][   T33] audit: type=1326 audit(1755248321.755:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14312 comm="syz.4.2794" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f17ccf8ebe9 code=0x0
[  349.719701][T12983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  349.727595][T12983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  349.732790][T12983] bond0 (unregistering): Released all slaves
[  349.809135][T14189] chnl_net:caif_netlink_parms(): no params data found
[  349.973550][T14341] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2795'.
[  350.186654][T12983] hsr_slave_0: left promiscuous mode
[  350.189175][T12983] hsr_slave_1: left promiscuous mode
[  350.197410][T12983] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  350.200610][T12983] batman_adv: batadv0: Removing interface: batadv_slave_0
[  350.211899][T12983] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  350.214751][T12983] batman_adv: batadv0: Removing interface: batadv_slave_1
[  350.258935][T12983] veth1_macvtap: left promiscuous mode
[  350.264945][T12983] veth0_macvtap: left promiscuous mode
[  350.267314][T12983] veth1_vlan: left promiscuous mode
[  350.269704][T12983] veth0_vlan: left promiscuous mode
[  350.586966][T14411] cgroup: none used incorrectly
[  351.051823][ T5990] Bluetooth: hci0: command tx timeout
[  351.054404][T12983] team0 (unregistering): Port device team_slave_1 removed
[  351.227670][T12983] team0 (unregistering): Port device team_slave_0 removed
[  351.784789][T14189] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.787933][T14189] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.796985][T14189] bridge_slave_0: entered allmulticast mode
[  351.801347][T14189] bridge_slave_0: entered promiscuous mode
[  351.879047][T14189] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.882024][T14189] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.884270][T14189] bridge_slave_1: entered allmulticast mode
[  351.886992][T14189] bridge_slave_1: entered promiscuous mode
[  351.975680][T14189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  352.008202][T14189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  352.051823][T14189] team0: Port device team_slave_0 added
[  352.064155][T14189] team0: Port device team_slave_1 added
[  352.137824][T14189] batman_adv: batadv0: Adding interface: batadv_slave_0
[  352.143373][T14189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  352.162449][T14189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  352.185091][T14189] batman_adv: batadv0: Adding interface: batadv_slave_1
[  352.187762][T14189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  352.208920][T14189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  352.328403][T14189] hsr_slave_0: entered promiscuous mode
[  352.339716][T14189] hsr_slave_1: entered promiscuous mode
[  352.346962][T14189] debugfs: 'hsr0' already exists in 'hsr'
[  352.348921][T14189] Cannot create hsr debugfs directory
[  352.502784][T14626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2826'.
[  352.633676][T14189] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  352.638337][T14189] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  352.643500][T14189] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  352.648805][T14189] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  352.742512][T14189] 8021q: adding VLAN 0 to HW filter on device bond0
[  352.775067][T14189] 8021q: adding VLAN 0 to HW filter on device team0
[  352.808251][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.810537][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  352.824059][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.826258][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  352.868459][T14675] netlink: 'syz.0.2829': attribute type 40 has an invalid length.
[  352.873145][T14675] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2829'.
[  352.874122][T14189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  353.021326][ T5990] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  353.035064][T14684] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2830'.
[  353.070304][T14684] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  353.120211][ T5990] Bluetooth: hci0: command tx timeout
[  353.155370][T14189] 8021q: adding VLAN 0 to HW filter on device batadv0
[  353.955887][T14189] veth0_vlan: entered promiscuous mode
[  353.994901][T14189] veth1_vlan: entered promiscuous mode
[  354.115750][T14189] veth0_macvtap: entered promiscuous mode
[  354.133585][T14189] veth1_macvtap: entered promiscuous mode
[  354.189513][T14189] batman_adv: batadv0: Interface activated: batadv_slave_0
[  354.216188][T14189] batman_adv: batadv0: Interface activated: batadv_slave_1
[  354.272429][T12983] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  354.281595][T12983] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  354.285131][T12983] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  354.288161][T12983] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  354.399237][  T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  354.407814][  T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  354.435972][  T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  354.439203][  T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.205252][ T5990] Bluetooth: hci0: command tx timeout
[  355.436867][T14768] loop7: detected capacity change from 0 to 512
[  355.449282][T14768] EXT4-fs: Ignoring removed nobh option
[  355.590450][T14768] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.2846: iget: bad i_size value: 38620345925642
[  355.611262][T14768] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.2846: couldn't read orphan inode 15 (err -117)
[  355.625025][T14768] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  355.747227][T14189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.348405][T14820] bridge0: port 1(veth0_to_bridge) entered blocking state
[  356.360856][T14820] bridge0: port 1(veth0_to_bridge) entered disabled state
[  356.363442][T14820] veth0_to_bridge: entered allmulticast mode
[  356.366115][T14820] veth0_to_bridge: entered promiscuous mode
[  357.060074][    T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  357.413152][ T5990] Bluetooth: hci0: command tx timeout
[  357.533197][    T9] usb 1-1: Using ep0 maxpacket: 16
[  357.538017][    T9] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  357.544023][    T9] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  357.548483][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[  357.552651][    T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00
[  357.556289][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.566015][    T9] usb 1-1: config 0 descriptor??
[  357.998343][    T9] mcp2200 0003:04D8:00DF.001B: collection stack underflow
[  358.003394][    T9] mcp2200 0003:04D8:00DF.001B: item 0 4 0 12 parsing failed
[  358.006978][    T9] mcp2200 0003:04D8:00DF.001B: can't parse reports
[  358.009544][    T9] mcp2200 0003:04D8:00DF.001B: probe with driver mcp2200 failed with error -22
[  358.193663][    T9] usb 1-1: USB disconnect, device number 41
[  358.252296][T14923] loop7: detected capacity change from 0 to 1024
[  358.258761][T14923] EXT4-fs: Ignoring removed oldalloc option
[  358.277727][T14923] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  358.334350][T14189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.477126][T14942] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2891'.
[  358.490353][T14942] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[  358.496735][T14942] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  359.368903][T14968] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  359.454798][T14946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  360.367512][T14984] overlayfs: failed to resolve 'W': -2
[  360.969448][T15005] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  361.392665][T15010] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2914'.
[  361.939702][T15019] Bluetooth: MGMT ver 1.23
[  361.943775][T15019] Bluetooth: hci0: invalid length 0, exp 2 for type 30
[  362.063339][T15031] netlink: 'syz.4.2919': attribute type 1 has an invalid length.
[  362.082087][T15023] veth3: entered promiscuous mode
[  362.088633][T15043] loop7: detected capacity change from 0 to 2048
[  362.116871][T15043] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  363.484335][T15106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2940'.
[  363.768590][T15131] netlink: 'syz.7.2952': attribute type 21 has an invalid length.
[  363.793106][T15131] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2952'.
[  364.268203][T15159] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  365.090509][T15181] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22)
[  365.563233][T15203] bridge_slave_1: entered promiscuous mode
[  365.609042][T15206] loop7: detected capacity change from 0 to 512
[  365.612994][T15206] EXT4-fs: Ignoring removed mblk_io_submit option
[  365.616034][T15206] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  365.623978][T15206] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  365.630546][T15206] EXT4-fs (loop7): orphan cleanup on readonly fs
[  365.740152][T15206] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.2972: Invalid block bitmap block 0 in block_group 0
[  365.763379][T15206] EXT4-fs (loop7): Remounting filesystem read-only
[  365.766423][T15206] Quota error (device loop7): write_blk: dquota write failed
[  365.768844][T15206] Quota error (device loop7): write_blk: dquota write failed
[  365.784927][T15206] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota
[  365.795136][T15206] EXT4-fs (loop7): 1 orphan inode deleted
[  365.798371][T15206] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  365.876569][T14189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  366.092969][ T6021] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  366.108140][T15237] netlink: 'syz.4.2978': attribute type 3 has an invalid length.
[  366.251975][ T6021] usb 1-1: Using ep0 maxpacket: 16
[  366.258625][ T6021] usb 1-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25
[  366.269921][ T6021] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.273237][ T6021] usb 1-1: Product: syz
[  366.275043][ T6021] usb 1-1: Manufacturer: syz
[  366.290803][ T6021] usb 1-1: SerialNumber: syz
[  366.299973][ T6021] usb 1-1: config 0 descriptor??
[  366.310023][ T6021] usb 1-1: Found UVC 0.00 device syz (046d:0721)
[  366.312864][ T6021] usb 1-1: No valid video chain found.
[  366.345446][T15257] 8021q: VLANs not supported on lo
[  366.517024][ T6051] usb 1-1: USB disconnect, device number 42
[  367.675847][T15319] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  367.702524][T15321] ieee802154 phy0 wpan0: encryption failed: -22
[  368.210013][   T47] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  368.361717][   T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  368.365199][   T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  368.368225][   T47] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  368.376012][   T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.382698][   T47] usb 1-1: config 0 descriptor??
[  368.824781][   T47] sony 0003:054C:024B.001C: unexpected long global item
[  368.828377][   T47] sony 0003:054C:024B.001C: parse failed
[  368.834168][   T47] sony 0003:054C:024B.001C: probe with driver sony failed with error -22
[  369.027560][T14710] usb 1-1: USB disconnect, device number 43
[  369.156890][T15398] overlayfs: statfs failed on './file0'
[  369.489917][ T6051] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  369.624677][T15415] overlayfs: missing 'lowerdir'
[  369.639955][ T6051] usb 8-1: Using ep0 maxpacket: 8
[  369.644677][ T6051] usb 8-1: config 252 has an invalid interface number: 104 but max is 0
[  369.647942][ T6051] usb 8-1: config 252 has no interface number 0
[  369.651833][ T6051] usb 8-1: config 252 interface 104 has no altsetting 0
[  369.657884][ T6051] usb 8-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice= b.c7
[  369.665367][ T6051] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.669507][ T6051] usb 8-1: Product: syz
[  369.671732][ T6051] usb 8-1: Manufacturer: syz
[  369.673750][ T6051] usb 8-1: SerialNumber: syz
[  369.685961][ T6051] gspca_main: spca501-2.14.0 probing 0497:c001
[  369.856494][T15425] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3025'.
[  369.908187][ T6051] gspca_spca501: reg write: error -71
[  369.920548][ T6051] spca501 8-1:252.104: Reg write failed for 0x02,0x07,0x05
[  369.924506][ T6051] spca501 8-1:252.104: probe with driver spca501 failed with error -22
[  369.932504][ T6051] usb 8-1: USB disconnect, device number 2
[  371.315025][T15492] loop7: detected capacity change from 0 to 32768
[  371.364837][T15492] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  371.400305][T15492] XFS (loop7): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  371.410566][T15492] XFS (loop7): Starting recovery (logdev: internal)
[  371.422676][T15492] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x8 
[  371.427037][T15492] XFS (loop7): Unmount and run xfs_repair
[  371.429939][T15492] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[  371.432890][T15492] 00000000: 41 42 54 42 00 00 00 02 ff ff ff ff ff ff ff ff  ABTB............
[  371.436358][T15492] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  371.440421][T15492] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  371.443789][T15492] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02  ......1....N....
[  371.447251][T15492] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  371.450912][T15492] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  371.454434][T15492] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  371.457936][T15492] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  371.462469][T15492] XFS (loop7): Filesystem has been shut down due to log error (0x2).
[  371.465477][T15492] XFS (loop7): Please unmount the filesystem and rectify the problem(s).
[  371.469426][T15492] XFS (loop7): log mount/recovery failed: error -74
[  371.487297][T15492] XFS (loop7): log mount failed
[  374.150584][T15546] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  374.429904][ T6051] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  374.592006][ T6051] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  374.596305][ T6051] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  374.602879][ T6051] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  374.608347][ T6051] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  374.612571][ T6051] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.621792][ T6051] usb 8-1: config 0 descriptor??
[  374.760246][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.764508][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.778013][T15574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  375.033809][T15585] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.3079'.
[  375.042666][ T6051] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  375.045722][ T6051] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  375.054832][ T6051] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  375.057934][ T6051] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  375.062764][ T6051] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  375.066413][ T6051] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  375.093661][ T6051] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  375.508713][T15604] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3085'.
[  377.085514][T15664] loop7: detected capacity change from 0 to 256
[  377.092337][T15664] exfat: Deprecated parameter 'namecase'
[  377.131428][T15664] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  377.165254][   T47] usb 8-1: USB disconnect, device number 3
[  378.431364][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  378.434087][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[  378.518022][T15779] comedi comedi2: fl512: I/O port conflict (0x1009e1,16)
[  379.570209][T14710] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  379.729989][T14710] usb 1-1: Using ep0 maxpacket: 16
[  379.760813][T14710] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79
[  379.772857][T14710] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  379.776131][T14710] usb 1-1: Manufacturer: syz
[  379.794041][T14710] usb 1-1: config 0 descriptor??
[  380.026866][T14710] usb 1-1: Cannot retrieve CPort count: -71
[  380.031112][T14710] usb 1-1: Cannot retrieve CPort count: -71
[  380.040336][T14710] es2_ap_driver 1-1:0.0: probe with driver es2_ap_driver failed with error -71
[  380.059565][T14710] usb 1-1: USB disconnect, device number 44
[  380.297113][T15825] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3147'.
[  380.302709][T15825] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3147'.
[  380.359885][T15831] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  380.541990][T15845] loop7: detected capacity change from 0 to 256
[  380.546946][T15845] exfat: Deprecated parameter 'utf8'
[  380.565518][T15845] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d)
[  380.615313][T15852] loop7: detected capacity change from 0 to 128
[  380.618406][T15852] ext2: Unknown parameter 'context'
[  380.642430][T15852] loop7: detected capacity change from 0 to 128
[  380.671125][T15852] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  380.676009][T15852] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  381.370159][T14189] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  381.429574][T15881] netlink: 'syz.4.3166': attribute type 21 has an invalid length.
[  381.444265][T15881] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3166'.
[  381.447887][T15881] netlink: 'syz.4.3166': attribute type 4 has an invalid length.
[  381.452779][T15881] netlink: 'syz.4.3166': attribute type 3 has an invalid length.
[  381.456713][T15881] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3166'.
[  382.193487][T15898] loop7: detected capacity change from 0 to 32768
[  382.747374][T15927] loop7: detected capacity change from 0 to 4096
[  382.756071][T15927] ntfs3: Unknown parameter 'Y'
[  382.770200][ T6051] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  383.270156][ T6051] usb 1-1: Using ep0 maxpacket: 16
[  383.274432][ T6051] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  383.279332][ T6051] usb 1-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00
[  383.283528][ T6051] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  383.292777][ T6051] usb 1-1: config 0 descriptor??
[  383.396988][   T33] audit: type=1326 audit(1755248355.505:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15938 comm="syz.4.3182" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ccf8ebe9 code=0x7ffc0000
[  383.407202][   T33] audit: type=1326 audit(1755248355.505:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15938 comm="syz.4.3182" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ccf8ebe9 code=0x7ffc0000
[  383.416978][   T33] audit: type=1326 audit(1755248355.505:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15938 comm="syz.4.3182" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f17ccf8d550 code=0x7ffc0000
[  383.428418][   T33] audit: type=1326 audit(1755248355.505:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15938 comm="syz.4.3182" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f17ccf8d550 code=0x7ffc0000
[  383.438069][   T33] audit: type=1326 audit(1755248355.505:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15938 comm="syz.4.3182" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ccf8ebe9 code=0x7ffc0000
[  383.453553][   T33] audit: type=1326 audit(1755248355.505:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15938 comm="syz.4.3182" exe="/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f17ccf8ebe9 code=0x7ffc0000
[  383.464037][   T33] audit: type=1326 audit(1755248355.505:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15938 comm="syz.4.3182" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ccf8ebe9 code=0x7ffc0000
[  383.473117][   T33] audit: type=1326 audit(1755248355.505:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15938 comm="syz.4.3182" exe="/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f17ccf8ebe9 code=0x7ffc0000
[  383.488749][   T33] audit: type=1326 audit(1755248355.505:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15938 comm="syz.4.3182" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ccf8ebe9 code=0x7ffc0000
[  383.792913][T15957] loop7: detected capacity change from 0 to 2048
[  383.799141][T15957] udf: Unknown parameter '~nb'
[  383.930079][T14710] usb 1-1: USB disconnect, device number 45
[  384.858230][T15990] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3193'.
[  384.953892][T15999] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0
[  386.663484][T16065] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  387.618785][   T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  387.773060][   T10] usb 8-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 102, changing to 10
[  387.777204][   T10] usb 8-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 24624, setting to 1024
[  387.783993][   T10] usb 8-1: config 0 interface 0 has no altsetting 0
[  387.794977][   T10] usb 8-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[  387.800172][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.803307][   T10] usb 8-1: Product: syz
[  387.804914][   T10] usb 8-1: Manufacturer: syz
[  387.806395][   T10] usb 8-1: SerialNumber: syz
[  387.820350][   T10] usb 8-1: config 0 descriptor??
[  387.826864][   T10] keyspan 8-1:0.0: Keyspan 2 port adapter converter detected
[  387.831011][   T10] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 7
[  387.836776][   T10] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 81
[  387.842477][   T10] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 1
[  387.847337][   T10] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 2
[  387.851927][   T10] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 85
[  387.860193][   T10] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 5
[  387.864391][   T10] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  387.868147][   T10] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 83
[  387.873446][   T10] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 3
[  387.875873][   T10] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 4
[  387.878439][   T10] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 86
[  387.881755][   T10] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 6
[  387.885987][   T10] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  387.937468][T16114] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3236'.
[  388.030232][   T47] usb 8-1: USB disconnect, device number 4
[  388.039504][   T47] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  388.054641][   T47] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  388.091591][   T47] keyspan 8-1:0.0: device disconnected
[  388.581684][T16133] loop7: detected capacity change from 0 to 256
[  388.592679][T16133] exfat: Deprecated parameter 'namecase'
[  388.595391][T16133] exfat: Deprecated parameter 'utf8'
[  388.608822][T16133] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[  389.099916][T16160] 9pnet_fd: Insufficient options for proto=fd
[  389.282795][T15693] Bluetooth: hci3: command 0x1003 tx timeout
[  389.286292][ T5990] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  389.519990][ T6051] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[  389.673942][ T6051] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 65535, setting to 64
[  389.681967][ T6051] usb 8-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66
[  389.685338][ T6051] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.688386][ T6051] usb 8-1: Product: syz
[  389.690260][ T6051] usb 8-1: Manufacturer: syz
[  389.692055][ T6051] usb 8-1: SerialNumber: syz
[  389.696259][ T6051] usb 8-1: config 0 descriptor??
[  389.699277][T16155] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  389.706980][ T6051] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -71
[  389.913107][ T6051] usb 8-1: USB disconnect, device number 5
[  390.314831][T16199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3255'.
[  391.011075][T16208] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[  391.419052][T16241] loop7: detected capacity change from 0 to 256
[  391.443513][T16241] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  391.457419][T16241] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  392.286334][T16292] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3280'.
[  393.111618][T16314] netlink: 'syz.4.3288': attribute type 9 has an invalid length.
[  393.745629][T16347] loop7: detected capacity change from 0 to 4096
[  393.800755][T16347] ntfs3(loop7): failed to convert "0080" to cp860
[  393.822503][T16347] ntfs3(loop7): failed to convert name for inode 1e.
[  393.832382][T16347] ntfs3(loop7): ino=1f, mi_enum_attr
[  393.834529][T16347] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  394.214840][T16368] overlayfs: failed to resolve './file1': -2
[  394.378365][T16380] netlink: 'syz.0.3311': attribute type 2 has an invalid length.
[  394.841105][T16383] loop7: detected capacity change from 0 to 32768
[  394.852966][T16383] 
[  394.852966][T16383]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  394.852966][T16383] 
[  395.068397][T16383] JFS: metapage_get_blocks failed
[  395.101845][T16383] ERROR: (device loop7): release_metapage: metapage_write_one() failed
[  395.101845][T16383] 
[  395.174035][T16383] ERROR: (device loop7): diWrite: ixpxd invalid
[  395.174035][T16383] 
[  395.206251][T16383] ERROR: (device loop7): txCommit: 
[  395.206251][T16383] 
[  395.263051][T16413] ERROR: (device loop7): diWrite: ixpxd invalid
[  395.263051][T16413] 
[  395.266926][T16413] ERROR: (device loop7): txCommit: 
[  395.266926][T16413] 
[  395.325007][T14189] 
[  395.325007][T14189]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  395.325007][T14189] 
[  395.342361][T14189] 
[  395.342361][T14189]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  395.342361][T14189] 
[  396.449370][T16454] loop7: detected capacity change from 0 to 128
[  396.479826][T16454] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  396.484898][T16454] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  396.492679][T16454] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:375: inode #2: comm syz.7.3332: No space for directory leaf checksum. Please run e2fsck -D.
[  396.498714][T16454] EXT4-fs error (device loop7): __ext4_find_entry:1626: inode #2: comm syz.7.3332: checksumming directory block 0
[  397.898246][T14189] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  398.015266][T16482] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3341'.
[  398.404072][T16504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3349'.
[  398.407537][T16504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3349'.
[  398.992400][T16527] loop7: detected capacity change from 0 to 40427
[  399.020243][T16527] F2FS-fs (loop7): build fault injection rate: 1
[  399.022800][T16527] F2FS-fs (loop7): build fault injection type: 0x3bfe8c
[  399.026952][T16527] F2FS-fs (loop7): inject slab alloc in f2fs_alloc_inode of alloc_inode+0x6a/0x1b0
[  399.053102][T16527] F2FS-fs (loop7): Failed to read F2FS meta data inode
[  400.917363][T16561] sp0: Synchronizing with TNC
[  401.306914][T16581] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3376'.
[  401.405465][T16590] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  401.410317][T12983] bond0: (slave bond_slave_0): interface is now down
[  401.413729][T12983] bond0: (slave bond_slave_1): interface is now down
[  401.416362][T12983] bond0: (slave dummy0): interface is now down
[  401.428874][T16586] nvme_fabrics: missing parameter 'transport=%s'
[  401.433941][T12983] bond0: (slave bond_slave_0): interface is now down
[  401.436600][T12983] bond0: (slave bond_slave_1): interface is now down
[  401.439124][T12983] bond0: (slave dummy0): interface is now down
[  401.439919][T16586] nvme_fabrics: missing parameter 'nqn=%s'
[  401.460665][T12983] bond0: now running without any active interface!
[  401.529651][T16596] loop7: detected capacity change from 0 to 512
[  401.959402][T16619] loop7: detected capacity change from 0 to 2048
[  401.993100][T16622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3387'.
[  402.012880][T16619] Alternate GPT is invalid, using primary GPT.
[  402.014879][T16619]  loop7: p1 p2 p3
[  402.188836][T16638] loop7: detected capacity change from 0 to 1024
[  402.318771][   T26] hfsplus: b-tree write err: -5, ino 8
[  402.402648][T16651] IPVS: length: 73 != 24
[  403.159926][   T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  403.310021][   T10] usb 8-1: Using ep0 maxpacket: 16
[  403.316863][   T10] usb 8-1: unable to get BOS descriptor or descriptor too short
[  403.326427][   T10] usb 8-1: config 9 has an invalid interface number: 111 but max is 0
[  403.335843][   T10] usb 8-1: config 9 has no interface number 0
[  403.338315][   T10] usb 8-1: config 9 interface 111 has no altsetting 0
[  403.351532][   T10] usb 8-1: New USB device found, idVendor=05ac, idProduct=2536, bcdDevice=e0.5e
[  403.364302][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.367455][   T10] usb 8-1: Product: syz
[  403.369067][   T10] usb 8-1: Manufacturer: syz
[  403.380976][   T10] usb 8-1: SerialNumber: syz
[  403.384666][T16691] ip6tnl2: entered promiscuous mode
[  403.487784][T16698] input: syz1 as /devices/virtual/input/input26
[  403.639237][   T10] usb 8-1: USB disconnect, device number 6
[  404.460772][T16726] loop7: detected capacity change from 0 to 512
[  404.464118][T16726] ext4: Unknown parameter 'fsuuid'
[  404.471901][T16726] tmpfs: Bad value for 'mpol'
[  404.826716][T16751] loop7: detected capacity change from 0 to 32768
[  404.918196][T16751] ERROR: (device loop7): duplicateIXtree: 
[  404.918196][T16751] 
[  404.933448][T16751] ERROR: (device loop7): remounting filesystem as read-only
[  404.954085][T16751] ERROR: (device loop7): dtSearch: stack overrun!
[  404.954085][T16751] 
[  404.957289][T16751] ERROR: (device loop7): remounting filesystem as read-only
[  404.961613][T16751] btstack dump:
[  404.962985][T16751] bn = 0, index = 0
[  404.964265][T16751] bn = 2d, index = 0
[  404.965591][T16751] bn = 0, index = 0
[  404.966851][T16751] bn = 2d, index = 0
[  404.968130][T16751] bn = 0, index = 0
[  404.970725][T16751] bn = 2d, index = 0
[  404.972059][T16751] bn = 0, index = 0
[  404.973312][T16751] bn = 0, index = 0
[  404.974588][T16751] jfs_lookup: dtSearch returned -5
[  405.485731][T16792] overlayfs: failed to clone lowerpath
[  406.246619][T16809] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  406.539994][ T6051] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  406.726053][ T6051] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  406.737241][ T6051] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  406.758653][ T6051] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  406.787386][ T6051] usb 1-1: config 220 has no interface number 2
[  406.801455][ T6051] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  406.815729][ T6051] usb 1-1: config 220 interface 0 has no altsetting 0
[  406.818955][ T6051] usb 1-1: config 220 interface 76 has no altsetting 0
[  406.833451][ T6051] usb 1-1: config 220 interface 1 has no altsetting 0
[  406.952208][ T6051] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  406.956341][ T6051] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.959390][ T6051] usb 1-1: Product: syz
[  406.962326][ T6051] usb 1-1: Manufacturer: syz
[  406.964239][ T6051] usb 1-1: SerialNumber: syz
[  407.188208][ T6051] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  407.190758][ T6051] usb 1-1: No valid video chain found.
[  407.192487][ T6051] usb 1-1: selecting invalid altsetting 0
[  407.208464][ T6051] usb 1-1: selecting invalid altsetting 0
[  407.210703][ T6051] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[  407.215223][ T6051] usb 1-1: USB disconnect, device number 46
[  407.994933][T16877] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3476'.
[  408.081507][T16881] netlink: 'syz.0.3478': attribute type 2 has an invalid length.
[  408.084593][T16881] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3478'.
[  409.019558][T16889] ipvlan2: entered promiscuous mode
[  409.021978][T16889] ipvlan2: entered allmulticast mode
[  409.024616][T16889] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  410.040481][T16910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3489'.
[  410.043623][T16910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3489'.
[  410.046790][T16910] netlink: 'syz.0.3489': attribute type 12 has an invalid length.
[  410.049238][T16910] netlink: 'syz.0.3489': attribute type 11 has an invalid length.
[  410.295814][T16921] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3492'.
[  410.299289][T16921] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3492'.
[  410.303878][T16921] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3492'.
[  410.306670][T16921] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3492'.
[  412.427411][T16964] 9pnet_virtio: no channels available for device syz
[  413.623195][T16986] vlan2: entered allmulticast mode
[  413.625218][T16986] veth1: entered allmulticast mode
[  414.004369][T17015] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  415.123960][T17030] sctp: [Deprecated]: syz.4.3535 (pid 17030) Use of int in max_burst socket option deprecated.
[  415.123960][T17030] Use struct sctp_assoc_value instead
[  416.388237][T17070] netlink: 'syz.4.3554': attribute type 8 has an invalid length.
[  417.706537][T17107] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3569'.
[  418.289179][T17134] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  418.292060][T17134] IPv6: NLM_F_CREATE should be set when creating new route
[  418.294951][T17134] IPv6: NLM_F_CREATE should be set when creating new route
[  418.297825][T17134] IPv6: NLM_F_CREATE should be set when creating new route
[  419.491017][T17164] netlink: 'syz.4.3595': attribute type 5 has an invalid length.
[  419.494092][T17164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3595'.
[  420.669446][T15693] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  420.678650][T15693] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  420.683389][T15693] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  420.688415][T15693] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  420.696604][T15693] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  420.913833][T17293] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  420.935136][T17193] chnl_net:caif_netlink_parms(): no params data found
[  421.067173][T17193] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.073635][T17193] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.076693][T17193] bridge_slave_0: entered allmulticast mode
[  421.081109][T17193] bridge_slave_0: entered promiscuous mode
[  421.085705][T17193] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.088730][T17193] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.094969][T17193] bridge_slave_1: entered allmulticast mode
[  421.099171][T17193] bridge_slave_1: entered promiscuous mode
[  421.155755][T17193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  421.160810][T17389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3612'.
[  421.208342][T17193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  421.266102][T17193] team0: Port device team_slave_0 added
[  421.271295][T17193] team0: Port device team_slave_1 added
[  421.327935][T17193] batman_adv: batadv0: Adding interface: batadv_slave_0
[  421.332199][T17193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  421.345103][T17193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  421.351189][T17193] batman_adv: batadv0: Adding interface: batadv_slave_1
[  421.354019][T17193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  421.365325][T17193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  421.456865][T17193] hsr_slave_0: entered promiscuous mode
[  421.468809][T17193] hsr_slave_1: entered promiscuous mode
[  421.472704][T17193] debugfs: 'hsr0' already exists in 'hsr'
[  421.474938][T17193] Cannot create hsr debugfs directory
[  421.852259][T17544] openvswitch: netlink: IPv6 tunnel dst address is zero
[  421.886871][T17193] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  421.898092][T17193] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  421.935419][T17555] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3619'.
[  421.937846][T17554] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3620'.
[  421.939024][T17555] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3619'.
[  421.942611][T17554] netlink: 'syz.4.3620': attribute type 7 has an invalid length.
[  421.946474][T17555] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3619'.
[  421.952751][T17554] netlink: 'syz.4.3620': attribute type 8 has an invalid length.
[  421.952767][T17554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3620'.
[  421.969879][T17193] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  421.988389][T17554] gretap0: entered promiscuous mode
[  421.998856][T17554] batadv_slave_1: entered promiscuous mode
[  422.002295][T17554] erspan0: entered promiscuous mode
[  422.007494][T17193] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  422.168821][T17193] 8021q: adding VLAN 0 to HW filter on device bond0
[  422.194555][T17193] 8021q: adding VLAN 0 to HW filter on device team0
[  422.203214][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  422.206116][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  422.222628][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  422.225539][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  422.365468][T17583] vlan0: entered promiscuous mode
[  422.372548][ T6030] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  422.438746][T17193] 8021q: adding VLAN 0 to HW filter on device batadv0
[  422.531274][ T6030] usb 1-1: Using ep0 maxpacket: 16
[  422.534697][ T6030] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  422.543750][ T6030] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  422.549546][ T6030] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.564414][ T6030] usb 1-1: Product: syz
[  422.568544][ T6030] usb 1-1: Manufacturer: syz
[  422.573876][ T6030] usb 1-1: SerialNumber: syz
[  422.580734][ T6030] usb 1-1: config 0 descriptor??
[  422.594140][ T6030] hub 1-1:0.0: bad descriptor, ignoring hub
[  422.599373][ T6030] hub 1-1:0.0: probe with driver hub failed with error -5
[  422.605557][ T6030] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input27
[  422.744150][T17193] veth0_vlan: entered promiscuous mode
[  422.750322][T17193] veth1_vlan: entered promiscuous mode
[  422.774166][T17193] veth0_macvtap: entered promiscuous mode
[  422.780426][T17193] veth1_macvtap: entered promiscuous mode
[  422.802468][ T5990] Bluetooth: hci3: command tx timeout
[  422.815908][T17193] batman_adv: batadv0: Interface activated: batadv_slave_0
[  422.824919][T17615] CIFS: iocharset name too long
[  422.827666][T17193] batman_adv: batadv0: Interface activated: batadv_slave_1
[  422.838752][   T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  422.849002][   T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  422.893685][   T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  422.896968][   T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  422.982431][ T7841] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  422.991658][ T7841] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  423.023834][   T24] usb 1-1: USB disconnect, device number 47
[  423.029166][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  423.032593][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  424.347123][T17666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3639'.
[  424.379503][T17669] netlink: 'syz.0.3640': attribute type 1 has an invalid length.
[  424.382039][T17669] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3640'.
[  424.468287][T17676] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3643'.
[  424.881992][ T5990] Bluetooth: hci3: command tx timeout
[  424.986366][T17701] netlink: 'syz.4.3654': attribute type 1 has an invalid length.
[  425.429487][T17725] sctp: [Deprecated]: syz.8.3664 (pid 17725) Use of int in maxseg socket option.
[  425.429487][T17725] Use struct sctp_assoc_value instead
[  425.465545][T17730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3666'.
[  425.583293][T17739] loop8: detected capacity change from 0 to 1764
[  425.617130][T17739] iso9660: Corrupted directory entry in block 2 of inode 1920
[  426.423480][   T33] audit: type=1326 audit(1755248398.525:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17741 comm="syz.4.3670" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ccf8ebe9 code=0x7fc00000
[  426.433006][   T33] audit: type=1326 audit(1755248398.525:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17741 comm="syz.4.3670" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17ccf8ebe9 code=0x7fc00000
[  426.448666][   T33] audit: type=1326 audit(1755248398.525:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17741 comm="syz.4.3670" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ccf8ebe9 code=0x7fc00000
[  426.469854][T17775] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3680'.
[  426.471989][   T33] audit: type=1326 audit(1755248398.525:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17741 comm="syz.4.3670" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ccf8ebe9 code=0x7fc00000
[  426.482896][   T33] audit: type=1326 audit(1755248398.525:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17741 comm="syz.4.3670" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ccf8ebe9 code=0x7fc00000
[  426.497218][   T33] audit: type=1326 audit(1755248398.525:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17741 comm="syz.4.3670" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ccf8ebe9 code=0x7fc00000
[  426.510165][   T33] audit: type=1326 audit(1755248398.525:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17741 comm="syz.4.3670" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ccf8ebe9 code=0x7fc00000
[  426.960254][ T5990] Bluetooth: hci3: command tx timeout
[  428.354213][T17817] loop8: detected capacity change from 0 to 32768
[  428.364571][T17817] XFS (loop8): DAX unsupported by block device. Turning off DAX.
[  428.367643][T17817] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  428.393782][T17817] XFS (loop8): Ending clean mount
[  428.399414][T17817] XFS (loop8): Quotacheck needed: Please wait.
[  428.452094][T17817] XFS (loop8): Quotacheck: Done.
[  428.488723][T17193] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  428.545389][    T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  428.709866][    T9] usb 1-1: Using ep0 maxpacket: 8
[  428.713771][    T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  428.717210][    T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  428.727743][    T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  428.737734][    T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  428.741971][    T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  428.747065][    T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  428.754786][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.990316][    T9] usb 1-1: usb_control_msg returned -32
[  428.997305][    T9] usbtmc 1-1:16.0: can't read capabilities
[  429.046291][ T5990] Bluetooth: hci3: command tx timeout
[  429.786159][T17899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  429.793790][T17899] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  429.809019][T17897] usbtmc 1-1:16.0: usb_control_msg returned -32
[  430.757068][   T10] usb 1-1: USB disconnect, device number 48
[  431.758992][T17952] netlink: 'syz.8.3732': attribute type 1 has an invalid length.
[  431.945042][T17968] loop8: detected capacity change from 0 to 512
[  431.985320][T17971] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3738'.
[  432.016011][T17976] netlink: 'syz.4.3739': attribute type 66 has an invalid length.
[  432.041126][T17968] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  432.243249][T17193] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  432.299706][T17990] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3745'.
[  432.303454][T17990] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3745'.
[  432.779881][   T24] usb 9-1: new full-speed USB device number 2 using dummy_hcd
[  432.934076][   T24] usb 9-1: config 7 has an invalid interface number: 34 but max is 0
[  432.937459][   T24] usb 9-1: config 7 has no interface number 0
[  432.946542][   T24] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db51, bcdDevice=5e.35
[  432.950394][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.953894][   T24] usb 9-1: Product: syz
[  432.955729][   T24] usb 9-1: Manufacturer: syz
[  432.957683][   T24] usb 9-1: SerialNumber: syz
[  433.185165][   T24] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual USB' in warm state.
[  433.190663][   T24] dvb-usb: bulk message failed: -22 (2/0)
[  433.205507][   T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  433.215021][   T24] dvb-usb: DViCO FusionHDTV DVB-T Dual USB error while loading driver (-19)
[  433.220064][   T24] dvb_usb_cxusb 9-1:7.34: probe with driver dvb_usb_cxusb failed with error -22
[  433.231028][   T24] usb 9-1: USB disconnect, device number 2
[  433.286163][T18041] netlink: 'syz.4.3758': attribute type 10 has an invalid length.
[  433.291663][T18041] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  434.120305][T14710] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  434.270033][T14710] usb 1-1: Using ep0 maxpacket: 8
[  434.282207][T14710] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  434.285813][T14710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.288958][T14710] usb 1-1: Product: syz
[  434.296867][T14710] usb 1-1: Manufacturer: syz
[  434.299074][T14710] usb 1-1: SerialNumber: syz
[  434.309022][T14710] usb 1-1: config 0 descriptor??
[  434.315526][T14710] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244)
[  434.892535][T18104] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3779'.
[  434.930439][T14710] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[  434.940200][T14710] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  434.952294][T14710] usb 1-1: USB disconnect, device number 49
[  435.475858][T18140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3786'.
[  435.985704][T18161] overlayfs: missing 'lowerdir'
[  436.082762][T14710] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  436.250487][T14710] usb 1-1: Using ep0 maxpacket: 32
[  436.259872][T14710] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 67, changing to 10
[  436.267033][T14710] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16938, setting to 1024
[  436.286872][T14710] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  436.292653][T14710] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  436.301771][T14710] usb 1-1: Product: syz
[  436.303456][T14710] usb 1-1: Manufacturer: syz
[  436.333339][T14710] hub 1-1:4.0: USB hub found
[  436.529163][T14710] hub 1-1:4.0: config failed, hub has too many ports! (err -19)
[  436.850145][   T24] usb 1-1: USB disconnect, device number 50
[  437.219041][   T47] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  437.379855][   T47] usb 9-1: Using ep0 maxpacket: 16
[  437.392422][   T47] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  437.396002][   T47] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.399071][   T47] usb 9-1: Product: syz
[  437.401114][   T47] usb 9-1: Manufacturer: syz
[  437.402727][   T47] usb 9-1: SerialNumber: syz
[  437.412227][   T47] r8152-cfgselector 9-1: Unknown version 0x0000
[  437.418906][   T47] r8152-cfgselector 9-1: config 0 descriptor??
[  437.531218][T18211] netlink: 'syz.0.3809': attribute type 2 has an invalid length.
[  437.534184][T18211] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3809'.
[  437.800573][T14710] libceph: connect (1)[c::]:6789 error -101
[  437.804617][T14710] libceph: mon0 (1)[c::]:6789 connect error
[  437.831847][T14710] libceph: connect (1)[c::]:6789 error -101
[  437.836873][   T47] r8152-cfgselector 9-1: USB disconnect, device number 3
[  437.848435][T14710] libceph: mon0 (1)[c::]:6789 connect error
[  438.135917][T14710] libceph: connect (1)[c::]:6789 error -101
[  438.139239][T14710] libceph: mon0 (1)[c::]:6789 connect error
[  438.595343][T18221] ceph: No mds server is up or the cluster is laggy
[  438.638320][T18234] loop8: detected capacity change from 0 to 1024
[  438.652225][T18234] EXT4-fs: inline encryption not supported
[  438.654684][T18234] EXT4-fs: Ignoring removed i_version option
[  438.667596][   T10] libceph: connect (1)[c::]:6789 error -101
[  438.690694][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  438.749100][T18234] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  439.004380][T17193] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.845625][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  439.848968][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[  440.937176][T18306] netlink: 'syz.8.3836': attribute type 6 has an invalid length.
[  441.543823][   T13] tipc: Subscription rejected, illegal request
[  441.990736][T14710] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  442.074681][T18364] loop8: detected capacity change from 0 to 32768
[  442.105571][T18364] 
[  442.105571][T18364]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  442.105571][T18364] 
[  442.158982][ T7841] ERROR: (device loop8): diWrite: ixpxd invalid
[  442.158982][ T7841] 
[  442.162228][T14710] usb 1-1: Using ep0 maxpacket: 32
[  442.168336][T14710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  442.183851][T14710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  442.188673][ T7841] ERROR: (device loop8): txCommit: 
[  442.188673][ T7841] 
[  442.193521][ T7841] jfs_write_inode: jfs_commit_inode failed!
[  442.195977][T14710] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  442.195996][T17193] 
[  442.195996][T17193]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  442.195996][T17193] 
[  442.199497][T14710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.214708][T14710] usb 1-1: config 0 descriptor??
[  442.235972][T17193] 
[  442.235972][T17193]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  442.235972][T17193] 
[  442.237660][T14710] hub 1-1:0.0: USB hub found
[  442.433334][T14710] hub 1-1:0.0: 1 port detected
[  442.554240][T18389] tipc: Enabled bearer <eth:batadv0>, priority 10
[  442.753500][T18387] loop8: detected capacity change from 0 to 32768
[  442.757955][T18387] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3849 (18387)
[  442.773508][T18387] BTRFS info (device loop8): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  442.777463][T18387] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm
[  442.780852][T18387] BTRFS info (device loop8): using free-space-tree
[  442.942601][T17193] BTRFS info (device loop8): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  443.082543][T14710] hub 1-1:0.0: activate --> -90
[  443.317674][T18419] kernel profiling enabled (shift: 63)
[  443.323871][T18419] profiling shift: 63 too large
[  443.462968][T18429] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3861'.
[  443.466632][T18429] netlink: 108 bytes leftover after parsing attributes in process `syz.8.3861'.
[  443.473596][T18429] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3861'.
[  443.477244][T18429] netlink: 108 bytes leftover after parsing attributes in process `syz.8.3861'.
[  443.482639][T18429] netlink: 84 bytes leftover after parsing attributes in process `syz.8.3861'.
[  443.499218][   T10] usb 1-1: USB disconnect, device number 51
[  443.557155][T18435] overlayfs: failed to clone upperpath
[  443.680329][   T47] tipc: Node number set to 771766885
[  444.846084][T18468] loop8: detected capacity change from 0 to 8
[  444.853868][T18468] MTD: Attempt to mount non-MTD device "/dev/loop8"
[  444.862666][T18468] cramfs: Error -3 while decompressing!
[  444.865815][T18468] cramfs: ffffffff99beb5b8(16)->ffff88810faf1000(4096)
[  444.873573][T18468] cramfs: Error -3 while decompressing!
[  444.875841][T18468] cramfs: ffffffff99beb5b8(16)->ffff88810faf1000(4096)
[  444.898111][   T33] audit: type=1800 audit(1755248416.985:67): pid=18468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3873" name="file0" dev="loop8" ino=244 res=0 errno=0
[  445.287258][T18493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3882'.
[  445.657861][T18510] Unsupported ieee802154 address type: 0
[  445.683347][T18497] loop8: detected capacity change from 0 to 32768
[  445.709234][T18497] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  445.753738][T18521] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3891'.
[  445.772504][T18497] XFS (loop8): Ending clean mount
[  445.824077][T18526] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  445.826833][T18526] IPv6: NLM_F_CREATE should be set when creating new route
[  445.958921][T17193] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  446.290973][T18545] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  447.810128][   T24] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  447.970510][   T24] usb 9-1: Using ep0 maxpacket: 16
[  447.980962][   T24] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  447.984662][   T24] usb 9-1: config 0 interface 0 has no altsetting 0
[  447.999893][   T24] usb 9-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00
[  448.003637][   T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.012965][   T24] usb 9-1: config 0 descriptor??
[  448.431318][   T24] holtek_mouse 0003:04D9:A04A.001F: unbalanced collection at end of report description
[  448.437089][   T24] holtek_mouse 0003:04D9:A04A.001F: hid parse failed: -22
[  448.440775][   T24] holtek_mouse 0003:04D9:A04A.001F: probe with driver holtek_mouse failed with error -22
[  448.635361][   T10] usb 9-1: USB disconnect, device number 4
[  449.133897][T18663] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0
[  449.252035][T18674] loop8: detected capacity change from 0 to 512
[  449.284511][T18674] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  449.293323][T18674] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  449.308402][T18674] EXT4-fs warning (device loop8): verify_group_input:156: Last group not full
[  449.348606][T17193] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  449.777649][T18714] netlink: 'syz.0.3959': attribute type 2 has an invalid length.
[  449.786962][   T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  449.951453][   T10] usb 9-1: Using ep0 maxpacket: 16
[  449.956754][   T10] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  449.960205][   T10] usb 9-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0x6E, changing to 0xE
[  449.965453][   T10] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0xE has an invalid bInterval 170, changing to 11
[  449.975304][   T10] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0xE has invalid maxpacket 34661, setting to 1024
[  449.983907][   T10] usb 9-1: config 0 interface 0 has no altsetting 0
[  449.989247][   T10] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  449.993131][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.003705][   T10] usb 9-1: Product: syz
[  450.005372][   T10] usb 9-1: Manufacturer: syz
[  450.007468][   T10] usb 9-1: SerialNumber: syz
[  450.037399][   T10] usb 9-1: config 0 descriptor??
[  450.050158][T18703] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  450.196434][T18737] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3966'.
[  450.261421][T18703] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  450.270010][    T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  450.420166][    T9] usb 1-1: Using ep0 maxpacket: 32
[  450.424147][    T9] usb 1-1: config 0 has an invalid interface number: 111 but max is 0
[  450.427183][    T9] usb 1-1: config 0 has no interface number 0
[  450.433913][    T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83
[  450.437463][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.444803][    T9] usb 1-1: Product: syz
[  450.446771][    T9] usb 1-1: Manufacturer: syz
[  450.448660][    T9] usb 1-1: SerialNumber: syz
[  450.460442][    T9] usb 1-1: config 0 descriptor??
[  450.471633][   T47] usb 9-1: USB disconnect, device number 5
[  450.671743][    T9] snd-usb-6fire 1-1:0.111: unable to receive device firmware state.
[  450.678686][    T9] snd-usb-6fire 1-1:0.111: probe with driver snd-usb-6fire failed with error -71
[  450.686603][    T9] usb 1-1: USB disconnect, device number 52
[  451.062344][T18775] loop8: detected capacity change from 0 to 256
[  451.087145][T18775] FAT-fs (loop8): Directory bread(block 64) failed
[  451.090560][T18775] FAT-fs (loop8): Directory bread(block 65) failed
[  451.095614][T18775] FAT-fs (loop8): Directory bread(block 66) failed
[  451.098207][T18775] FAT-fs (loop8): Directory bread(block 67) failed
[  451.105849][T18775] FAT-fs (loop8): Directory bread(block 68) failed
[  451.108539][T18775] FAT-fs (loop8): Directory bread(block 69) failed
[  451.114766][T18775] FAT-fs (loop8): Directory bread(block 70) failed
[  451.117881][T18775] FAT-fs (loop8): Directory bread(block 71) failed
[  451.123918][T18775] FAT-fs (loop8): Directory bread(block 72) failed
[  451.129241][T18775] FAT-fs (loop8): Directory bread(block 73) failed
[  451.386593][T18786] loop8: detected capacity change from 0 to 1024
[  451.429489][T18786] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  451.483502][T18786] EXT4-fs error (device loop8): ext4_get_first_dir_block:3556: inode #11: comm syz.8.3979: directory missing '..'
[  451.506444][T18786] EXT4-fs (loop8): Remounting filesystem read-only
[  451.541559][T17193] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  451.713631][   T24] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  451.950001][   T24] usb 1-1: Using ep0 maxpacket: 32
[  451.979489][   T24] usb 1-1: config 0 has an invalid interface number: 75 but max is 0
[  451.983534][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  451.998510][   T24] usb 1-1: config 0 has no interface number 0
[  452.133488][   T24] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=7b.41
[  452.150161][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.161619][   T24] usb 1-1: Product: syz
[  452.163351][   T24] usb 1-1: Manufacturer: syz
[  452.169004][   T24] usb 1-1: SerialNumber: syz
[  452.183526][   T24] usb 1-1: config 0 descriptor??
[  452.193475][   T24] gspca_main: STV06xx-2.14.0 probing 046d:08f0
[  452.196358][   T24] gspca_stv06xx: st6422 sensor detected
[  452.681042][   T24] STV06xx 1-1:0.75: probe with driver STV06xx failed with error -71
[  452.703489][   T24] usb 1-1: USB disconnect, device number 53
[  452.913752][T18847] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  453.692623][T18865] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4003'.
[  453.709915][T18865] netdevsim netdevsim8 netdevsim0: entered promiscuous mode
[  453.717578][T18865] macvtap1: entered allmulticast mode
[  453.719654][T18865] netdevsim netdevsim8 netdevsim0: entered allmulticast mode
[  453.732452][T18865] netdevsim netdevsim8 netdevsim0: left allmulticast mode
[  453.735434][T18865] netdevsim netdevsim8 netdevsim0: left promiscuous mode
[  453.932387][    T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  454.089849][    T9] usb 1-1: Using ep0 maxpacket: 16
[  454.093859][    T9] usb 1-1: config 0 has an invalid interface number: 3 but max is 0
[  454.097262][    T9] usb 1-1: config 0 has no interface number 0
[  454.099638][    T9] usb 1-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  454.113632][    T9] usb 1-1: config 0 interface 3 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 32
[  454.142800][    T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=68.b5
[  454.146450][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  454.150006][    T9] usb 1-1: Product: syz
[  454.151761][    T9] usb 1-1: Manufacturer: syz
[  454.153677][    T9] usb 1-1: SerialNumber: syz
[  454.163881][    T9] usb 1-1: config 0 descriptor??
[  454.168490][T18867] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  454.185821][    T9] ir_toy 1-1:0.3: required endpoints not found
[  454.403815][    T9] usb 1-1: USB disconnect, device number 54
[  454.535164][T18927] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4020'.
[  455.643995][T18946] netlink: 'syz.4.4025': attribute type 41 has an invalid length.
[  455.747318][T18954] 9pnet: p9_errstr2errno: server reported unknown error 
[  455.897782][T18967] vcan0: entered allmulticast mode
[  455.940593][T18967] vcan0: left allmulticast mode
[  456.576119][T18988] nfs4: Unexpected value for 'acl'
[  456.768052][T19002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4049'.
[  456.907822][T19011] loop8: detected capacity change from 0 to 4096
[  456.924860][T19013] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  458.400328][T14189] jfs_flush_journal: synclist not empty
[  458.403459][T14189] metapage: ffff88802722d1f0: 00001000 00000000 00003938 00000000
[  458.406496][T14189] metapage: ffff88802722d200: 2722d108 ffff8880 22fbf228 ffff8881
[  458.409519][T14189] metapage: ffff88802722d210: 00000004 00000000 00000000 00000000
[  458.429031][T14189] metapage: ffff88802722d220: 25191000 ffff8880 0000002d 00000000
[  458.434878][T14189] metapage: ffff88802722d230: 00000000 dead4ead ffffffff 00000000
[  458.441299][T14189] metapage: ffff88802722d240: ffffffff ffffffff 99c03760 ffffffff
[  458.444419][T14189] metapage: ffff88802722d250: 9350a368 ffffffff 00000000 00000000
[  458.447455][T14189] metapage: ffff88802722d260: 8bc40380 ffffffff 00000300 00000000
[  458.460407][T14189] metapage: ffff88802722d270: 2722d270 ffff8880 2722d270 ffff8880
[  458.463919][T14189] metapage: ffff88802722d280: 00946440 ffffea00 29cb2000 ffff8881
[  458.475281][T14189] metapage: ffff88802722d290: 00001000 00003e24 00000000 00000000
[  458.488671][T14189] metapage: ffff88802722d2a0: 22fbf000 ffff8881
[  458.491676][T14189] page: ffffea0000946440: 00fff2000000403c ffffea0000870c08
[  458.494545][T14189] page: ffffea0000946450: ffffea000087e588 0000000000000000
[  458.497404][T14189] page: ffffea0000946460: 000000000000002d ffff88802722d1f0
[  458.523420][T14189] page: ffffea0000946470: 00000001ffffffff ffff8881090c3400
[  458.536297][T14189] metapage: ffff88802722d0f8: 00001000 00000000 00003cb0 00000000
[  458.539388][T14189] metapage: ffff88802722d108: 2722d010 ffff8880 2722d200 ffff8880
[  458.545633][T19061] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4069'.
[  458.551861][T14189] metapage: ffff88802722d118: 00000004 00000000 00000000 00000000
[  458.554943][T14189] metapage: ffff88802722d128: 22b72000 ffff8880 00000030 00000000
[  458.557968][T14189] metapage: ffff88802722d138: 00000000 dead4ead ffffffff 00000000
[  458.561561][T14189] metapage: ffff88802722d148: ffffffff ffffffff 99c03760 ffffffff
[  458.564668][T14189] metapage: ffff88802722d158: 9350a368 ffffffff 00000000 00000000
[  458.567701][T14189] metapage: ffff88802722d168: 8bc40380 ffffffff 00000300 00000000
[  458.576581][T14189] metapage: ffff88802722d178: 2722d178 ffff8880 2722d178 ffff8880
[  458.579663][T14189] metapage: ffff88802722d188: 008adc80 ffffea00 29cb2000 ffff8881
[  458.585105][T14189] metapage: ffff88802722d198: 00001000 00003e24 00000000 00000000
[  458.589018][T14189] metapage: ffff88802722d1a8: 22fbf000 ffff8881
[  458.591899][T14189] page: ffffea00008adc80: 00fff2800000403c ffffea0000ae4c08
[  458.594701][T14189] page: ffffea00008adc90: ffffea00009dfbc8 0000000000000000
[  458.597517][T14189] page: ffffea00008adca0: 0000000000000030 ffff88802722d0f8
[  458.600721][T14189] page: ffffea00008adcb0: 00000001ffffffff ffff8881090c3400
[  458.603564][T14189] metapage: ffff88802722d000: 00001000 00000000 00003d58 00000000
[  458.606557][T14189] metapage: ffff88802722d010: 22fbf228 ffff8881 2722d108 ffff8880
[  458.609539][T14189] metapage: ffff88802722d020: 00000004 00000000 00000000 00000000
[  458.614991][T14189] metapage: ffff88802722d030: 0b0ea000 ffff8881 0000001c 00000000
[  458.618452][T14189] metapage: ffff88802722d040: 00000000 dead4ead ffffffff 00000000
[  458.621222][T14189] metapage: ffff88802722d050: ffffffff ffffffff 99c03760 ffffffff
[  458.623786][T14189] metapage: ffff88802722d060: 9350a368 ffffffff 00000000 00000000
[  458.626195][T14189] metapage: ffff88802722d070: 8bc40380 ffffffff 00000300 00000000
[  458.628749][T14189] metapage: ffff88802722d080: 2722d080 ffff8880 2722d080 ffff8880
[  458.635299][T14189] metapage: ffff88802722d090: 042c3a80 ffffea00 29cb2000 ffff8881
[  458.637811][T14189] metapage: ffff88802722d0a0: 00001000 00003e24 00000000 00000000
[  458.641032][T14189] metapage: ffff88802722d0b0: 22fbf000 ffff8881
[  458.643075][T14189] page: ffffea00042c3a80: 057ff2800000403c ffffea0004476ac8
[  458.645328][T14189] page: ffffea00042c3a90: ffffea00042e7588 0000000000000000
[  458.647588][T14189] page: ffffea00042c3aa0: 000000000000001c ffff88802722d000
[  458.650649][T14189] page: ffffea00042c3ab0: 00000001ffffffff ffff8881090c3400
[  458.759959][   T47] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[  458.909902][    T9] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  458.912315][   T47] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  458.916214][   T47] usb 9-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  458.918987][   T47] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.930233][   T47] usb 9-1: config 0 descriptor??
[  459.060004][    T9] usb 1-1: Using ep0 maxpacket: 16
[  459.066161][    T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  459.070792][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  459.077498][    T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  459.083842][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.086990][    T9] usb 1-1: Product: syz
[  459.088589][    T9] usb 1-1: Manufacturer: syz
[  459.090546][    T9] usb 1-1: SerialNumber: syz
[  459.095565][    T9] usb 1-1: config 0 descriptor??
[  459.103441][    T9] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  459.106981][    T9] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  459.365757][   T47] nintendo 0003:057E:200E.0020: unbalanced delimiter at end of report description
[  459.371077][   T47] nintendo 0003:057E:200E.0020: HID parse failed
[  459.388627][   T47] nintendo 0003:057E:200E.0020: probe - fail = -22
[  459.392080][   T47] nintendo 0003:057E:200E.0020: probe with driver nintendo failed with error -22
[  459.555330][   T47] usb 9-1: USB disconnect, device number 6
[  459.710144][    T9] em28xx 1-1:0.0: chip ID is em2710
[  459.913521][    T9] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  459.917504][    T9] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[  459.927185][    T9] em28xx 1-1:0.0: No AC97 audio processor
[  459.961333][    T9] usb 1-1: USB disconnect, device number 55
[  459.972884][    T9] em28xx 1-1:0.0: Disconnecting em28xx
[  460.011257][    T9] em28xx 1-1:0.0: Freeing device
[  460.588757][T19130] netlink: 'syz.8.4086': attribute type 10 has an invalid length.
[  460.593558][T19130] bridge0: port 2(bridge_slave_1) entered disabled state
[  460.596033][T19130] bridge0: port 1(bridge_slave_0) entered disabled state
[  460.605397][T19130] bridge0: port 2(bridge_slave_1) entered blocking state
[  460.608244][T19130] bridge0: port 2(bridge_slave_1) entered forwarding state
[  460.611350][T19130] bridge0: port 1(bridge_slave_0) entered blocking state
[  460.613743][T19130] bridge0: port 1(bridge_slave_0) entered forwarding state
[  460.620673][T19130] team0: Port device bridge0 added
[  460.723756][T19138] ieee802154 phy0 wpan0: encryption failed: -22
[  460.885040][T19127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  463.393327][T19205] netlink: 4388 bytes leftover after parsing attributes in process `syz.8.4118'.
[  463.474715][T19211] veth3: entered allmulticast mode
[  463.764755][T19239] openvswitch: netlink: Message has 4 unknown bytes.
[  463.767439][T19239] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  463.829350][   T33] audit: type=1326 audit(1755248435.935:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19240 comm="syz.8.4128" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53bb38ebe9 code=0x0
[  463.877065][T19243] loop8: detected capacity change from 0 to 8
[  463.896033][T19243] SQUASHFS error: xz decompression failed, data probably corrupt
[  463.899115][T19243] SQUASHFS error: Failed to read block 0x108: -5
[  463.905821][T19243] SQUASHFS error: Unable to read metadata cache entry [106]
[  463.908717][T19243] SQUASHFS error: Unable to read inode 0x11f
[  464.317970][T19264] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  464.320972][T19264] IPv6: NLM_F_CREATE should be set when creating new route
[  464.685962][T19275] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614)
[  464.755382][T19279] loop8: detected capacity change from 0 to 128
[  464.776706][T19279] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[  464.821008][T19279] hpfs: hpfs_map_sector(): read error
[  465.973003][T19332] loop8: detected capacity change from 0 to 32768
[  466.014637][T19332] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  466.044085][T17193] ocfs2: Unmounting device (7,8) on (node local)
[  466.449914][   T10] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  466.610145][   T10] usb 9-1: Using ep0 maxpacket: 8
[  466.617239][   T10] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  466.621336][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.624620][   T10] usb 9-1: Product: syz
[  466.626289][   T10] usb 9-1: Manufacturer: syz
[  466.628265][   T10] usb 9-1: SerialNumber: syz
[  466.633344][   T10] usb 9-1: config 0 descriptor??
[  466.840737][   T10] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  467.135733][T19370] netdevsim netdevsim0 : renamed from netdevsim0 (while UP)
[  467.448833][   T10] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  467.463872][   T10] usb 9-1: USB disconnect, device number 7
[  468.934251][T19460] loop8: detected capacity change from 0 to 256
[  469.193715][T19481] loop8: detected capacity change from 0 to 2048
[  469.202824][T19481] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  469.529924][   T24] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  469.620348][ T7847] ------------[ cut here ]------------
[  469.622618][ T7847] WARNING: CPU: 1 PID: 7847 at io_uring/io_uring.c:2981 io_ring_exit_work+0x4ed/0x930
[  469.626041][ T7847] Modules linked in:
[  469.628191][ T7847] CPU: 1 UID: 0 PID: 7847 Comm: kworker/u10:10 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  469.634200][ T7847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  469.638051][ T7847] Workqueue: iou_exit io_ring_exit_work
[  469.640658][ T7847] RIP: 0010:io_ring_exit_work+0x4ed/0x930
[  469.642983][ T7847] Code: c6 05 f8 e1 61 0e 01 48 c7 c7 20 5e e2 8b be 24 00 00 00 48 c7 c2 c0 5d e2 8b e8 1e 1d 72 00 e9 7b fe ff ff e8 a4 42 94 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 e9 5f ff ff ff 89 d9 80 e1
[  469.650742][ T7847] RSP: 0018:ffffc90006b178e0 EFLAGS: 00010293
[  469.653195][ T7847] RAX: ffffffff812b68ec RBX: 00000001000041a2 RCX: ffff888106383980
[  469.656344][ T7847] RDX: 0000000000000000 RSI: fffffffffffffffc RDI: 0000000000000000
[  469.659499][ T7847] RBP: ffffc90006b17a70 R08: ffffc90006b17867 R09: 1ffff92000d62f0c
[  469.662778][ T7847] R10: dffffc0000000000 R11: fffff52000d62f0d R12: 000000010000419e
[  469.665201][ T7847] R13: ffff8881157d4310 R14: ffff8881157d4480 R15: dffffc0000000000
[  469.667880][ T7847] FS:  0000000000000000(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  469.671826][ T7847] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  469.674441][ T7847] CR2: 00007f17cdce56c0 CR3: 000000012501c000 CR4: 00000000000006f0
[  469.677627][ T7847] Call Trace:
[  469.678897][ T7847]  <TASK>
[  469.680371][ T7847]  ? __pfx_io_ring_exit_work+0x10/0x10
[  469.682086][ T7847]  ? _raw_spin_unlock_irq+0x23/0x50
[  469.683752][ T7847]  ? process_scheduled_works+0x9ef/0x17b0
[  469.686021][ T7847]  ? process_scheduled_works+0x9ef/0x17b0
[  469.688311][ T7847]  process_scheduled_works+0xae1/0x17b0
[  469.690665][ T7847]  ? __pfx_process_scheduled_works+0x10/0x10
[  469.693044][ T7847]  worker_thread+0x8a0/0xda0
[  469.694914][ T7847]  kthread+0x711/0x8a0
[  469.696555][ T7847]  ? __pfx_worker_thread+0x10/0x10
[  469.698595][ T7847]  ? __pfx_kthread+0x10/0x10
[  469.700539][ T7847]  ? _raw_spin_unlock_irq+0x23/0x50
[  469.702618][ T7847]  ? lockdep_hardirqs_on+0x9c/0x150
[  469.704693][ T7847]  ? __pfx_kthread+0x10/0x10
[  469.706551][ T7847]  ret_from_fork+0x3fc/0x770
[  469.708142][ T7847]  ? __pfx_ret_from_fork+0x10/0x10
[  469.709911][ T7847]  ? __switch_to_asm+0x39/0x70
[  469.711759][ T7847]  ? __switch_to_asm+0x33/0x70
[  469.713583][ T7847]  ? __pfx_kthread+0x10/0x10
[  469.715105][ T7847]  ret_from_fork_asm+0x1a/0x30
[  469.716590][ T7847]  </TASK>
[  469.717700][ T7847] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  469.720726][ T7847] CPU: 1 UID: 0 PID: 7847 Comm: kworker/u10:10 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  469.725682][ T7847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  469.728724][ T7847] Workqueue: iou_exit io_ring_exit_work
[  469.730725][ T7847] Call Trace:
[  469.732073][ T7847]  <TASK>
[  469.733274][ T7847]  dump_stack_lvl+0x99/0x250
[  469.735146][ T7847]  ? __asan_memcpy+0x40/0x70
[  469.737039][ T7847]  ? __pfx_dump_stack_lvl+0x10/0x10
[  469.739124][ T7847]  ? __pfx__printk+0x10/0x10
[  469.740997][ T7847]  vpanic+0x281/0x750
[  469.742652][ T7847]  ? __pfx__printk+0x10/0x10
[  469.744516][ T7847]  ? __pfx_vpanic+0x10/0x10
[  469.746330][ T7847]  ? is_bpf_text_address+0x26/0x2b0
[  469.748443][ T7847]  panic+0xb9/0xc0
[  469.749936][ T7847]  ? __pfx_panic+0x10/0x10
[  469.751479][ T7847]  __warn+0x31b/0x4b0
[  469.752966][ T7847]  ? io_ring_exit_work+0x4ed/0x930
[  469.754807][ T7847]  ? io_ring_exit_work+0x4ed/0x930
[  469.756316][ T7847]  report_bug+0x2be/0x4f0
[  469.757625][ T7847]  ? io_ring_exit_work+0x4ed/0x930
[  469.759133][ T7847]  ? io_ring_exit_work+0x4ed/0x930
[  469.760873][ T7847]  ? io_ring_exit_work+0x4ef/0x930
[  469.762533][ T7847]  handle_bug+0x84/0x160
[  469.763861][ T7847]  exc_invalid_op+0x1a/0x50
[  469.765432][ T7847]  asm_exc_invalid_op+0x1a/0x20
[  469.767368][ T7847] RIP: 0010:io_ring_exit_work+0x4ed/0x930
[  469.769620][ T7847] Code: c6 05 f8 e1 61 0e 01 48 c7 c7 20 5e e2 8b be 24 00 00 00 48 c7 c2 c0 5d e2 8b e8 1e 1d 72 00 e9 7b fe ff ff e8 a4 42 94 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 e9 5f ff ff ff 89 d9 80 e1
[  469.776960][ T7847] RSP: 0018:ffffc90006b178e0 EFLAGS: 00010293
[  469.779191][ T7847] RAX: ffffffff812b68ec RBX: 00000001000041a2 RCX: ffff888106383980
[  469.782203][ T7847] RDX: 0000000000000000 RSI: fffffffffffffffc RDI: 0000000000000000
[  469.785323][ T7847] RBP: ffffc90006b17a70 R08: ffffc90006b17867 R09: 1ffff92000d62f0c
[  469.788338][ T7847] R10: dffffc0000000000 R11: fffff52000d62f0d R12: 000000010000419e
[  469.791523][ T7847] R13: ffff8881157d4310 R14: ffff8881157d4480 R15: dffffc0000000000
[  469.794622][ T7847]  ? io_ring_exit_work+0x4ec/0x930
[  469.796610][ T7847]  ? __pfx_io_ring_exit_work+0x10/0x10
[  469.798439][ T7847]  ? _raw_spin_unlock_irq+0x23/0x50
[  469.800372][ T7847]  ? process_scheduled_works+0x9ef/0x17b0
[  469.802262][ T7847]  ? process_scheduled_works+0x9ef/0x17b0
[  469.804068][ T7847]  process_scheduled_works+0xae1/0x17b0
[  469.806145][ T7847]  ? __pfx_process_scheduled_works+0x10/0x10
[  469.808412][ T7847]  worker_thread+0x8a0/0xda0
[  469.810189][ T7847]  kthread+0x711/0x8a0
[  469.811470][ T7847]  ? __pfx_worker_thread+0x10/0x10
[  469.813270][ T7847]  ? __pfx_kthread+0x10/0x10
[  469.815098][ T7847]  ? _raw_spin_unlock_irq+0x23/0x50
[  469.817069][ T7847]  ? lockdep_hardirqs_on+0x9c/0x150
[  469.818983][ T7847]  ? __pfx_kthread+0x10/0x10
[  469.820746][ T7847]  ret_from_fork+0x3fc/0x770
[  469.822516][ T7847]  ? __pfx_ret_from_fork+0x10/0x10
[  469.824484][ T7847]  ? __switch_to_asm+0x39/0x70
[  469.826309][ T7847]  ? __switch_to_asm+0x33/0x70
[  469.828135][ T7847]  ? __pfx_kthread+0x10/0x10
[  469.829909][ T7847]  ret_from_fork_asm+0x1a/0x30
[  469.831748][ T7847]  </TASK>
[  469.833614][ T7847] Kernel Offset: disabled
[  469.835299][ T7847] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:00:41  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=ffff88811f6e5640 RCX=ffffffff934a57b0 RDX=0000000000000008
RSI=ffff88811f6e6130 RDI=ffff88811f6e5640 RBP=0000000000000000 RSP=ffffc9002cae7ad8
R8 =0000000000000000 R9 =ffffffff820b7af0 R10=dffffc0000000000 R11=fffff5200595cecd
R12=ffffffffffffff05 R13=0000000000000004 R14=ffff88811f6e6130 R15=0000000000000000
RIP=ffffffff819d6568 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f5bc2b1f6c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f17cdd86fc8 CR3=000000012501c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f5bc1f87498 00007f5bc1f87470 XMM03=00007f5bc1f874a8 00007f5bc1f874a0
XMM04=00007f5bc2aed100 00007f5bc1f87460 XMM05=00007f5bc1f87478 00007f5bc1f874c0
XMM06=00007f5bc1f874b8 00007f5bc1f874b0 XMM07=00007f5bc1f874a8 00007f5bc1f874a0
XMM08=0000009e76ee6a6f d45dd171ea6b8fea XMM09=0000000000000000 00007f5bc1e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90006b17090
R8 =ffff88801fb78237 R9 =1ffff11003f6f046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af9902 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f17cdce56c0 CR3=000000012501c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8164d476 ffffffff8133a660
XMM02=ffffffff8167991b ffffffff8133a660 XMM03=ffffffff8167991b ffffffff8167991b
XMM04=00007f5bc2aed100 00007f5bc1f87460 XMM05=00007f5bc1f87478 00007f5bc1f874c0
XMM06=00007f5bc1f874b8 00007f5bc1f874b0 XMM07=00007f5bc1f874a8 00007f5bc1f874a0
XMM08=0000009e76ee6a6f d45dd171ea6b8fea XMM09=0000000000000000 00007f5bc1e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
