last executing test programs:

2m22.238649416s ago: executing program 0 (id=1413):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x20}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)

2m22.169824363s ago: executing program 0 (id=1415):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
vmsplice(r0, &(0x7f00000003c0)=[{&(0x7f0000000300)="e6dca1", 0x3}], 0x1, 0x6)

2m22.117715774s ago: executing program 0 (id=1417):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000140)='?', 0x1}], 0x1, 0x8)

2m22.027821534s ago: executing program 0 (id=1419):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, &(0x7f0000000140), 0x4003)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r2, 0x0)
setpgid(0x0, r2)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0)

2m21.678259554s ago: executing program 0 (id=1424):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000740)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x1, 0x4b1, &(0x7f0000001d00)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff)

2m20.973028308s ago: executing program 0 (id=1426):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2000019, 0x0, 0xfc, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x1200002, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000140)={[{@inode32}, {@nr_inodes={'nr_inodes', 0x3d, [0x34]}}]})

2m20.722274312s ago: executing program 32 (id=1426):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2000019, 0x0, 0xfc, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x1200002, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000140)={[{@inode32}, {@nr_inodes={'nr_inodes', 0x3d, [0x34]}}]})

2m8.887359557s ago: executing program 1 (id=1515):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000600)=<r4=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, {0xa, 0x4e24, 0x9, @mcast2, 0x9}}}, 0x3a)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x800)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}})
io_uring_enter(r2, 0x3516, 0xf400, 0x0, 0x0, 0x0)

2m8.017292929s ago: executing program 1 (id=1530):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = getpid()
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x20a8, 0x0, r4}}, 0x40)

2m7.057868449s ago: executing program 1 (id=1537):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000100)={[{@acl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@coherency_full}, {@inode64}]}, 0x1, 0x4421, &(0x7f0000004500)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x0, 0x5, 0x0, 0x2}}, 0x18}, 0x1, 0x0, 0x0, 0x4040}, 0x90)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$FS_IOC_RESVSP(r0, 0x80106f05, &(0x7f00000000c0)={0x0, 0x4, 0x32, 0x100000000})

2m6.538185513s ago: executing program 1 (id=1545):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00e611ed6229b237ad2a184a94283e2b34c24caf7280c18475708140abe763dfb52cdb0ba0cdc8c572346d0a832984b36248c4fa844eda0af4b1652605421a7821dcfde12aa77458d811a84538a156b05b0ec3eaf24a90ceb5b7463d9fd38b49d41fbfa868653605702abe43d9c2c30aed4da0b8cc18c6b369f086a965442c1217f19a67a534064b7236a6660000000000"], 0x1, 0x17b, &(0x7f0000000300)="$eJzs28tO4nAUx/FfoVyGuTHDXJLJLGY1mc1QwAR1h49CoBJiUSJuICbqe7hx58PJwp0rMZS2SmWFtEX5fjacHydND4s/nBAQgI3V0B8ZMpSdht/54lnJSHokADGZeI/3EwCbJ32X9AQAkjHek/qSbm5PW0pn/bXgp19M+w2/n8o92x/GF9Iv0+sbeb0L7xdX0l//eqOw8PpC0H+/sP9PRe/+H/RRn/RZRX3RV5W8fju4/scLtyEAADaDoXI4zz2R0n7XsStBzri5qoI5y1k314L+LG8FOefmcuvIaUf4KgAsI6Xy9dMcPv/p0Pk3vfMP4PUbDEcHTcexj2Mq/O8HYr3pagqdr8UYKykyWosxKBYUptZijITfmABEzjrp9a3BcPS/22t27I59WK/V67uVne2q5S7+1vz6D+ANefzQT3oSAAAAAAAAAAAAAACwrG/6nvQIAAAAAGIS2b+IDEmX4pfFAAAAAAAAAAAAAAAAAABE4CEAAP//gNgaag==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x109a42, 0x0)
getdents64(r0, 0x0, 0x0)

2m6.265217887s ago: executing program 1 (id=1548):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000400)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x3}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000000c0)=0x200, 0x4)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000f40)=0x2100, 0x4)

2m5.938563529s ago: executing program 1 (id=1553):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "a66b"}, @TCA_NETEM_CORR={0x10, 0x1, {0x9de1, 0x39, 0x100}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

2m5.683077299s ago: executing program 33 (id=1553):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "a66b"}, @TCA_NETEM_CORR={0x10, 0x1, {0x9de1, 0x39, 0x100}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

2m1.608193229s ago: executing program 3 (id=1591):
prlimit64(0x0, 0xe, 0x0, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0, 0x8080, 0x0)
r0 = fsopen(&(0x7f00000000c0)='cramfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

2m0.780275318s ago: executing program 3 (id=1596):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f00000000c0)=""/43, 0x60)

2m0.687789947s ago: executing program 3 (id=1597):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10002, 0x0)

1m59.499030608s ago: executing program 3 (id=1601):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0)

1m59.244089461s ago: executing program 3 (id=1608):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x181001, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'pcmda12\x00', [0x8, 0x7, 0x4, 0x3, 0x2f, 0x7, 0x2, 0xf, 0xffc, 0x1, 0x101, 0x1, 0x1003, 0x4, 0xffff, 0xffff, 0xffffffa8, 0x7ffffffb, 0x1ff, 0x3, 0x3ff, 0x10001, 0x8, 0xe2df, 0x2, 0x1, 0x5, 0x3, 0x7, 0x4, 0x7ff]})

1m58.693783416s ago: executing program 3 (id=1615):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

1m58.57019808s ago: executing program 34 (id=1615):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

1m48.10325016s ago: executing program 4 (id=1748):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002840)={0x34, 0x3e, 0x107, 0x70bd30, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x4, 0x1}, @nested={0x15, 0x9, 0x0, 0x1, [@typed={0x8, 0x33, 0x0, 0x0, @fd=r0}, @generic="8cb59afe8e", @typed={0x4, 0x10f}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000)

1m48.029665471s ago: executing program 4 (id=1749):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10)

1m47.980924896s ago: executing program 4 (id=1750):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0xe000003, 0xf, &(0x7f0000000580)=[0x0, 0x5, 0xf, 0xffff, 0x0, 0x1ed, 0x2, 0x3, 0xbf, 0x4, 0x70, 0x81, 0xfffffff7, 0x1, 0xa1b], 0x0, 0x4})

1m47.919060259s ago: executing program 4 (id=1751):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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")
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
truncate(&(0x7f0000000200)='./file1\x00', 0x9)

1m47.752184618s ago: executing program 4 (id=1753):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x1800840, &(0x7f0000000000)={[{@numtail}, {@fat=@debug}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@fat=@check_strict}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@shortname_winnt}, {@fat=@nfs}, {@shortname_win95}, {@uni_xlate}, {@utf8no}, {@uni_xlate}, {@fat=@nocase}]}, 0x1, 0x360, &(0x7f0000000900)="$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")
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)

1m47.224795765s ago: executing program 4 (id=1757):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r0}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000780)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1}}}}}}, 0x0)

1m47.224449341s ago: executing program 35 (id=1757):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r0}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000780)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1}}}}}}, 0x0)

2.756846678s ago: executing program 5 (id=3041):
unshare(0xa000200)
semget$private(0x0, 0x4000, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000340)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]})
semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0)

2.553297465s ago: executing program 5 (id=3045):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_open_dev$media(0x0, 0xca34, 0x208600)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_timeval(r1, 0x1, 0x48, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r2, 0x0, 0x0, 0x0)

1.283983009s ago: executing program 6 (id=3060):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x24, 0x40, 0x107, 0x0, 0x25dfdbfd, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x24}}, 0x8004)

1.228988171s ago: executing program 6 (id=3062):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
nanosleep(0x0, 0x0)

1.174837212s ago: executing program 6 (id=3063):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b7f2288a910400f0dd8b550000e948285fafc63b714dde3406e11535be3249f895d12f4309f8e9b78d9c35ffffffffff", 0x30)

1.094756994s ago: executing program 6 (id=3064):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x9, 0x0, 0xff7ff038}, {0x6, 0x9}]}, 0x10)
sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840)

913.975944ms ago: executing program 5 (id=3065):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
rename(&(0x7f0000000200)='./bus\x00', &(0x7f0000000000)='./file0\x00')

531.729678ms ago: executing program 5 (id=3067):
pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000002080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')

470.277716ms ago: executing program 5 (id=3069):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000140))

469.8005ms ago: executing program 2 (id=3070):
setregid(0x0, 0xee00)
r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
syz_open_procfs(r0, &(0x7f0000000100)='fdinfo/4\x00')

469.601254ms ago: executing program 5 (id=3071):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0x1d00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x10, 0x15, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x36, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x55, {0x55, 0x1, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

365.051451ms ago: executing program 2 (id=3072):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r1, 0x331, 0x70bd2d, 0xa6ff, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0)

364.710436ms ago: executing program 2 (id=3073):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000100)={[{@grpquota}, {@bsdgroups}]}, 0xff, 0x9882, &(0x7f000001c800)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000240)='./bus\x00', 0x20000, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x200000, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1)

149.662679ms ago: executing program 6 (id=3074):
socket$igmp6(0xa, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x801)
r2 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x20})
r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x34f}, &(0x7f00000002c0)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000240)=0xffffffff, 0x0, 0x4)
r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x501, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"f30517ba23f775a9e5e8d9d1ffb86189", 0x0, <r7=>0x0, {0x200, 0xdbaf}, {0x4, 0x1}, 0xc000000000000000, [0x5, 0xb344, 0xfffffffffffffffc, 0x7, 0x8, 0x7, 0xe, 0x8001, 0x0, 0xe, 0x101, 0x7, 0xffff, 0x5ac, 0x1, 0x3]})
ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000bc0)={{r6}, r7, 0x12, @inherit={0x58, &(0x7f0000000500)={0x1, 0x2, 0x63, 0x4, {0x2, 0x4, 0x6, 0x6, 0x1}, [0x8001, 0xe787]}}, @devid})
socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x3f, 0x0, 0x0, 0x0, &(0x7f000064c000/0x3000)=nil, 0x3000, 0x17})
io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000b80)={0x0})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})
ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f0000000140)={{&(0x7f0000000640)={'Accelerator\x00', {&(0x7f0000000580)=@adf_str={@bank={'Bank', '3', 'InterruptCoalescingTimerNs\x00'}, {"26e71ea6c1b89dcd33a627baf37fe84f95e8658c9e493a9dec1e32737e64398bd3058d9749651a9722658cecf2d7ab539a51e40c5671d07ff913322cf245651f"}}}}}, 0x7f})

63.812117ms ago: executing program 2 (id=3075):
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='sessionid\x00')
setreuid(0xee01, 0xee01)
utimensat(r0, 0x0, &(0x7f0000000880)={{0x77359400}}, 0x0)

511.514µs ago: executing program 2 (id=3076):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000006000000080000000b"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f0000000480), 0x0}, 0x20)

295.782µs ago: executing program 2 (id=3077):
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x0, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x8, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0)
sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0)

0s ago: executing program 6 (id=3078):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000019240)='./file0\x00', &(0x7f0000019300)={[&(0x7f0000000380)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x03\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\xdch\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc', &(0x7f0000000000)='.-+\x00']}, &(0x7f0000019100)={[&(0x7f0000000200)=' ']})

kernel console output (not intermixed with test programs):

link: 'syz.3.1560': attribute type 3 has an invalid length.
[  204.651343][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  204.667365][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  204.673060][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  204.679483][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  204.685210][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  204.831242][ T9880] "syz.3.1563" (9880) uses obsolete ecb(arc4) skcipher
[  205.726715][ T5889] bond0 (unregistering): Released all slaves
[  206.053469][ T9904] netlink: 212388 bytes leftover after parsing attributes in process `syz.2.1571'.
[  206.066190][ T9904] netlink: get zone limit has 8 unknown bytes
[  206.252310][ T9877] chnl_net:caif_netlink_parms(): no params data found
[  206.342294][ T5889] hsr_slave_0: left promiscuous mode
[  206.347771][ T5889] hsr_slave_1: left promiscuous mode
[  206.357425][ T5889] veth1_macvtap: left promiscuous mode
[  206.359450][ T5889] veth0_macvtap: left promiscuous mode
[  206.361825][ T5889] veth1_vlan: left promiscuous mode
[  206.365796][ T5889] veth0_vlan: left promiscuous mode
[  206.386935][   T33] audit: type=1326 audit(1757959667.753:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.2.1578" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4e798eba9 code=0x0
[  206.732662][ T5865] Bluetooth: hci1: command tx timeout
[  207.570251][ T9877] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.573547][ T9877] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.576735][ T9877] bridge_slave_0: entered allmulticast mode
[  207.581221][ T9877] bridge_slave_0: entered promiscuous mode
[  207.591744][ T9877] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.595417][ T9877] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.598919][ T9877] bridge_slave_1: entered allmulticast mode
[  207.603985][ T9877] bridge_slave_1: entered promiscuous mode
[  207.684669][ T9877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  207.698211][ T9877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  207.826533][ T9877] team0: Port device team_slave_0 added
[  207.831143][ T9877] team0: Port device team_slave_1 added
[  207.868337][ T9877] batman_adv: batadv0: Adding interface: batadv_slave_0
[  207.871051][ T9877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.883221][ T9877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  207.889279][ T9877] batman_adv: batadv0: Adding interface: batadv_slave_1
[  207.892087][ T9877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.903345][ T9877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  207.952076][ T9877] hsr_slave_0: entered promiscuous mode
[  207.955221][ T9877] hsr_slave_1: entered promiscuous mode
[  207.958591][ T9877] debugfs: 'hsr0' already exists in 'hsr'
[  207.960838][ T9877] Cannot create hsr debugfs directory
[  208.178599][ T9877] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  208.183456][ T9877] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  208.205057][ T9877] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  208.211731][ T9877] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  208.292083][ T9877] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.294702][ T9877] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.297803][ T9877] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.300820][ T9877] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.413395][ T9877] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.431203][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.436386][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.452138][ T9877] 8021q: adding VLAN 0 to HW filter on device team0
[  208.486598][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.489649][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.513279][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.516510][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.822865][ T5865] Bluetooth: hci1: command tx timeout
[  208.954171][ T9978] loop3: detected capacity change from 0 to 2048
[  208.958596][ T9978] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  208.968454][ T9978] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  209.028648][ T9877] 8021q: adding VLAN 0 to HW filter on device batadv0
[  209.345037][ T9877] veth0_vlan: entered promiscuous mode
[  209.353628][ T9877] veth1_vlan: entered promiscuous mode
[  209.387761][ T9877] veth0_macvtap: entered promiscuous mode
[  209.395930][ T9877] veth1_macvtap: entered promiscuous mode
[  209.425091][ T9877] batman_adv: batadv0: Interface activated: batadv_slave_0
[  209.437950][ T9877] batman_adv: batadv0: Interface activated: batadv_slave_1
[  209.453747][ T5888] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  209.473382][ T5888] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  209.476899][ T5888] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  209.480451][ T5888] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  210.062164][ T6148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.065405][ T6148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.098134][ T3550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.101367][ T3550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.166652][ T9997] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1554'.
[  210.238431][T10001] loop3: detected capacity change from 0 to 512
[  210.274826][T10001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  210.278983][T10001] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  210.377973][T10001] loop3: detected capacity change from 512 to 64
[  210.385304][T10013] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Out of memory
[  210.389835][T10013] EXT4-fs error (device loop3): ext4_ext_tree_init:883: inode #18: comm syz.3.1601: mark_inode_dirty error
[  210.395030][T10013] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Out of memory
[  210.400200][T10013] EXT4-fs error (device loop3): __ext4_new_inode:1342: inode #18: comm syz.3.1601: mark_inode_dirty error
[  210.406548][T10013] EXT4-fs error (device loop3) in __ext4_new_inode:1344: Out of memory
[  210.410172][T10013] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Out of memory
[  210.418817][T10013] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #18: comm syz.3.1601: mark_inode_dirty error
[  210.424702][T10013] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -12)
[  210.481266][ T9480] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Out of memory
[  210.489977][ T9480] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error
[  210.756147][T10031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1611'.
[  210.800622][ T9480] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.892280][ T5865] Bluetooth: hci1: command tx timeout
[  211.082310][ T5888] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.176492][ T5888] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.324140][ T5888] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.423079][ T5888] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.547037][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  211.554058][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  211.560576][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  211.566356][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  211.571124][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  211.622101][ T5888] bridge_slave_1: left allmulticast mode
[  211.624479][ T5888] bridge_slave_1: left promiscuous mode
[  211.634631][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.653933][ T5888] bridge_slave_0: left allmulticast mode
[  211.656344][ T5888] bridge_slave_0: left promiscuous mode
[  211.658806][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.787670][T10047] loop4: detected capacity change from 0 to 1024
[  211.867719][ T1091] hfsplus: b-tree write err: -5, ino 4
[  212.241051][ T5888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  212.249364][ T5888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  212.256660][ T5888] bond0 (unregistering): Released all slaves
[  212.409643][T10056] loop4: detected capacity change from 0 to 4096
[  212.428119][T10056] ntfs3(loop4): ino=3, Correct links count -> 2.
[  212.771525][T10044] chnl_net:caif_netlink_parms(): no params data found
[  212.820259][ T5888] hsr_slave_0: left promiscuous mode
[  212.825828][ T5888] hsr_slave_1: left promiscuous mode
[  212.828615][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  212.842549][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_0
[  212.846229][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  212.849213][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_1
[  212.889504][ T5888] veth1_macvtap: left promiscuous mode
[  212.898474][ T5888] veth0_macvtap: left promiscuous mode
[  212.900827][ T5888] veth1_vlan: left promiscuous mode
[  212.906725][ T5888] veth0_vlan: left promiscuous mode
[  213.031784][ T5236] Bluetooth: hci1: command tx timeout
[  213.611798][ T5236] Bluetooth: hci2: command tx timeout
[  214.111784][ T5888] team0 (unregistering): Port device team_slave_1 removed
[  214.167315][ T5888] team0 (unregistering): Port device team_slave_0 removed
[  214.172556][   T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  214.336026][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  214.340179][   T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  214.344884][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  214.349903][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  214.354018][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  214.357754][   T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  214.366700][   T24] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41
[  214.372013][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.375136][   T24] usb 5-1: Product: syz
[  214.377157][   T24] usb 5-1: Manufacturer: syz
[  214.379056][   T24] usb 5-1: SerialNumber: syz
[  214.384055][   T24] usb 5-1: config 0 descriptor??
[  214.601805][   T24] usb 5-1: ucan: probing device on interface #0
[  214.604431][   T24] usb 5-1: ucan: invalid endpoint configuration
[  214.606759][   T24] usb 5-1: ucan: probe failed; try to update the device firmware
[  214.625202][   T24] usb 5-1: USB disconnect, device number 2
[  214.930690][T10044] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.933987][T10044] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.938786][T10044] bridge_slave_0: entered allmulticast mode
[  214.945457][T10044] bridge_slave_0: entered promiscuous mode
[  214.957185][T10044] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.960303][T10044] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.963887][T10044] bridge_slave_1: entered allmulticast mode
[  214.968277][T10044] bridge_slave_1: entered promiscuous mode
[  215.022325][T10044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  215.029122][T10044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  215.080045][T10044] team0: Port device team_slave_0 added
[  215.084925][T10044] team0: Port device team_slave_1 added
[  215.116079][T10044] batman_adv: batadv0: Adding interface: batadv_slave_0
[  215.118824][T10044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.129380][T10044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  215.137289][T10044] batman_adv: batadv0: Adding interface: batadv_slave_1
[  215.140240][T10044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.155667][T10044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  215.195950][T10102] loop4: detected capacity change from 0 to 1024
[  215.230955][T10044] hsr_slave_0: entered promiscuous mode
[  215.235902][T10044] hsr_slave_1: entered promiscuous mode
[  215.239195][T10044] debugfs: 'hsr0' already exists in 'hsr'
[  215.242681][T10044] Cannot create hsr debugfs directory
[  215.558392][T10044] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  215.571946][T10044] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  215.585955][T10044] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  215.595636][T10044] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  215.659059][T10044] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.662124][T10044] bridge0: port 2(bridge_slave_1) entered forwarding state
[  215.666874][T10044] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.669788][T10044] bridge0: port 1(bridge_slave_0) entered forwarding state
[  215.691537][ T5236] Bluetooth: hci2: command tx timeout
[  215.697634][T10136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1658'.
[  215.770380][T10044] 8021q: adding VLAN 0 to HW filter on device bond0
[  215.788708][T10139] loop4: detected capacity change from 0 to 256
[  215.792456][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.796765][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.818864][T10139] FAT-fs (loop4): Directory bread(block 64) failed
[  215.823696][T10139] FAT-fs (loop4): Directory bread(block 65) failed
[  215.825996][T10139] FAT-fs (loop4): Directory bread(block 66) failed
[  215.829283][T10139] FAT-fs (loop4): Directory bread(block 67) failed
[  215.834498][T10044] 8021q: adding VLAN 0 to HW filter on device team0
[  215.838148][T10139] FAT-fs (loop4): Directory bread(block 68) failed
[  215.840982][T10139] FAT-fs (loop4): Directory bread(block 69) failed
[  215.846918][T10139] FAT-fs (loop4): Directory bread(block 70) failed
[  215.849143][T10139] FAT-fs (loop4): Directory bread(block 71) failed
[  215.856477][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.860907][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  215.861534][T10139] FAT-fs (loop4): Directory bread(block 72) failed
[  215.866334][T10139] FAT-fs (loop4): Directory bread(block 73) failed
[  215.886580][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.889409][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  216.134621][T10044] 8021q: adding VLAN 0 to HW filter on device batadv0
[  216.408113][T10044] veth0_vlan: entered promiscuous mode
[  216.418291][T10044] veth1_vlan: entered promiscuous mode
[  216.454872][T10044] veth0_macvtap: entered promiscuous mode
[  216.466157][T10044] veth1_macvtap: entered promiscuous mode
[  216.500469][T10044] batman_adv: batadv0: Interface activated: batadv_slave_0
[  216.525691][T10044] batman_adv: batadv0: Interface activated: batadv_slave_1
[  216.536778][ T5889] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  216.539779][ T5889] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  216.552478][ T5890] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  216.559080][ T5890] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  216.615761][T10176] vcan0: tx drop: invalid da for name 0xfffffffffffffffe
[  216.697935][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.710988][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.747133][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.751368][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.923944][T10184] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.771735][ T5236] Bluetooth: hci2: command tx timeout
[  218.057105][T10212] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  219.225972][T10244] netlink: 'syz.4.1703': attribute type 1 has an invalid length.
[  219.315945][T10250] nbd: device at index 4 is going down
[  219.411627][T10252] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  219.489748][T10258] openvswitch: netlink: IP tunnel dst address not specified
[  219.859635][ T5236] Bluetooth: hci2: command tx timeout
[  219.893989][T10273] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  220.511895][T10303] tmpfs: Bad value for 'mpol'
[  221.330455][T10319] loop5: detected capacity change from 0 to 256
[  221.351799][T10321] openvswitch: netlink: Flow actions attr not present in new flow.
[  221.439973][T10329] loop5: detected capacity change from 0 to 256
[  221.451105][T10329] FAT-fs (loop5): Directory bread(block 1285) failed
[  221.465461][T10329] FAT-fs (loop5): Directory bread(block 1285) failed
[  221.566482][T10337] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1745'.
[  221.642534][T10343] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  221.645899][T10343] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  221.831193][T10349] loop4: detected capacity change from 0 to 2048
[  221.839965][T10349] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  221.863106][   T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  221.932773][T10349] loop4: detected capacity change from 2048 to 0
[  221.982734][ T9877] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag ac
[  221.991935][ T9877] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag ac
[  222.013233][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  222.017273][   T24] usb 6-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00
[  222.026838][ T9877] UDF-fs: warning (device loop4): udf_evict_inode: Inode 1415 (mode 100004) has inode size 9 different from extent length 274877968384. Filesystem need not be standards compliant.
[  222.034088][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.039129][   T24] usb 6-1: config 0 descriptor??
[  222.496452][   T24] hid_parser_main: 73 callbacks suppressed
[  222.496467][   T24] hid_mf 0003:0079:1846.0005: unknown main item tag 0x4
[  222.503408][   T24] hid_mf 0003:0079:1846.0005: item fetching failed at offset 6/7
[  222.506638][   T24] hid_mf 0003:0079:1846.0005: HID parse failed.
[  222.509193][   T24] hid_mf 0003:0079:1846.0005: probe with driver hid_mf failed with error -22
[  222.538935][ T5890] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.862059][   T24] usb 6-1: USB disconnect, device number 2
[  222.941136][ T5890] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.000017][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  223.019604][ T5865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  223.020383][ T5890] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.035240][ T5865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  223.044295][ T5865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  223.047892][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  223.101498][ T5890] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.285907][ T5890] bridge_slave_1: left allmulticast mode
[  223.288133][ T5890] bridge_slave_1: left promiscuous mode
[  223.295290][ T5890] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.303334][ T5890] bridge_slave_0: left allmulticast mode
[  223.305552][ T5890] bridge_slave_0: left promiscuous mode
[  223.307898][ T5890] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.436747][T10375] overlayfs: failed to clone upperpath
[  223.968837][T10389] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1767'.
[  224.080244][T10391] ieee802154 phy0 wpan0: encryption failed: -90
[  224.148676][ T5890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  224.159870][ T5890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  224.166233][ T5890] bond0 (unregistering): Released all slaves
[  224.212781][T10362] chnl_net:caif_netlink_parms(): no params data found
[  224.454552][T10402] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1771'.
[  224.458683][T10402] NCSI netlink: No device for ifindex 1024
[  224.478231][T10362] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.482029][T10362] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.485262][T10362] bridge_slave_0: entered allmulticast mode
[  224.489553][T10362] bridge_slave_0: entered promiscuous mode
[  224.496991][T10362] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.499994][T10362] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.507791][T10362] bridge_slave_1: entered allmulticast mode
[  224.514641][T10362] bridge_slave_1: entered promiscuous mode
[  224.518448][T10404] netlink: 'syz.5.1773': attribute type 29 has an invalid length.
[  224.566607][ T5890] hsr_slave_0: left promiscuous mode
[  224.568901][ T5890] hsr_slave_1: left promiscuous mode
[  224.576616][ T5890] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  224.578870][ T5890] batman_adv: batadv0: Removing interface: batadv_slave_0
[  224.582136][ T5890] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  224.584443][ T5890] batman_adv: batadv0: Removing interface: batadv_slave_1
[  224.603672][ T5890] veth1_macvtap: left promiscuous mode
[  224.605960][ T5890] veth0_macvtap: left promiscuous mode
[  224.608336][ T5890] veth1_vlan: left promiscuous mode
[  224.610617][ T5890] veth0_vlan: left promiscuous mode
[  224.759345][T10406] loop5: detected capacity change from 0 to 32768
[  224.823645][T10406] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  224.866794][T10406] XFS (loop5): Ending clean mount
[  224.887427][T10406] XFS (loop5): syz.5.1774 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported
[  224.931944][T10044] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  225.131895][ T5236] Bluetooth: hci1: command tx timeout
[  225.339640][T10420] cgroup: none used incorrectly
[  225.356154][ T5890] team0 (unregistering): Port device team_slave_1 removed
[  225.408840][ T5890] team0 (unregistering): Port device team_slave_0 removed
[  225.869612][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1780'.
[  226.200399][T10362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  226.210241][T10362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  226.289987][T10362] team0: Port device team_slave_0 added
[  226.305188][T10362] team0: Port device team_slave_1 added
[  226.495994][T10443] loop5: detected capacity change from 0 to 32768
[  226.540508][T10362] batman_adv: batadv0: Adding interface: batadv_slave_0
[  226.544465][T10362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.555567][T10362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  226.561831][T10362] batman_adv: batadv0: Adding interface: batadv_slave_1
[  226.564433][T10362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.579315][T10362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  226.651643][T10443] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=compression=zstd,erasure_code,wide_macs,nojournal_transaction_names
[  226.651657][T10443]   allowing incompatible features above 0.0: (unknown version)
[  226.651662][T10443]   features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  226.664512][T10443] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  226.668010][T10443] bcachefs (loop5): recovering from clean shutdown, journal seq 14
[  226.672539][T10443] bcachefs (loop5): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[  226.672539][T10443]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  226.676601][T10362] hsr_slave_0: entered promiscuous mode
[  226.688004][T10362] hsr_slave_1: entered promiscuous mode
[  226.696180][T10362] debugfs: 'hsr0' already exists in 'hsr'
[  226.698583][T10362] Cannot create hsr debugfs directory
[  226.710184][T10443] bcachefs (loop5): accounting_read... done
[  226.718006][T10443] bcachefs (loop5): alloc_read... done
[  226.721473][T10443] bcachefs (loop5): snapshots_read... done
[  226.726071][T10443] bcachefs (loop5): check_allocations...
[  226.730606][T10443] bcachefs (loop5): btree ptr not marked in member info btree allocated bitmap
[  226.730661][T10443]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 18efb381d2ec84b2 written 48 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing
[  226.747961][T10443] bcachefs (loop5): btree ptr not marked in member info btree allocated bitmap
[  226.747973][T10443]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq eb946090a3e301b5 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[  226.757738][T10443] bcachefs (loop5): btree ptr not marked in member info btree allocated bitmap
[  226.757754][T10443]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1b163e2cac54a139 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[  226.767931][T10443] bcachefs (loop5): btree ptr not marked in member info btree allocated bitmap
[  226.767947][T10443]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c59150a5cc8748d6 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[  226.777631][T10443] bcachefs (loop5): btree ptr not marked in member info btree allocated bitmap
[  226.777642][T10443]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2e86b5535b69cce2 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[  226.786607][T10443] bcachefs (loop5): btree ptr not marked in member info btree allocated bitmap
[  226.786622][T10443]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq af1b2a109e85bae1 written 48 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[  226.800416][T10443]  done
[  226.803839][T10443] bcachefs (loop5): going read-write
[  226.821355][T10443] bcachefs (loop5): journal_replay... done
[  226.921039][T10443] bcachefs (loop5): check_extents_to_backpointers...
[  226.922527][T10443] bcachefs (loop5): scanning for missing backpointers in 6/128 buckets
[  226.932751][T10443]  done
[  226.936000][T10443] bcachefs (loop5): check_inodes... done
[  226.940982][T10443] bcachefs (loop5): resume_logged_ops... done
[  226.943686][T10443] bcachefs (loop5): delete_dead_inodes... done
[  226.948867][T10443] bcachefs (loop5): Fixed errors, running fsck a second time to verify fs is clean
[  226.952008][T10443] bcachefs (loop5): check_extents_to_backpointers... done
[  226.956497][T10443] bcachefs (loop5): check_inodes... done
[  226.959203][T10443] bcachefs (loop5): resume_logged_ops... done
[  226.961961][T10443] bcachefs (loop5): delete_dead_inodes... done
[  226.966490][T10443] bcachefs (loop5): done starting filesystem
[  226.977809][T10362] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  227.002452][T10362] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  227.016624][T10362] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  227.043609][T10443] syz.5.1787 (10443) used greatest stack depth: 15112 bytes left
[  227.053767][T10362] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  227.076191][T10044] bcachefs (loop5): shutting down
[  227.078173][T10044] bcachefs (loop5): going read-only
[  227.096487][T10044] bcachefs (loop5): finished waiting for writes to stop
[  227.105374][T10044] bcachefs (loop5): flushing journal and stopping allocators, journal seq 23
[  227.132540][T10044] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 24
[  227.138089][T10044] bcachefs (loop5): clean shutdown complete, journal seq 25
[  227.145310][T10044] bcachefs (loop5): marking filesystem clean
[  227.182929][T10044] bcachefs (loop5): shutdown complete
[  227.210099][T10362] 8021q: adding VLAN 0 to HW filter on device bond0
[  227.220725][ T5236] Bluetooth: hci1: command tx timeout
[  227.276890][T10362] 8021q: adding VLAN 0 to HW filter on device team0
[  227.288216][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.291243][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  227.302179][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.305086][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  227.474358][T10362] 8021q: adding VLAN 0 to HW filter on device batadv0
[  227.958954][T10362] veth0_vlan: entered promiscuous mode
[  227.966267][T10362] veth1_vlan: entered promiscuous mode
[  227.985746][T10362] veth0_macvtap: entered promiscuous mode
[  227.992051][T10362] veth1_macvtap: entered promiscuous mode
[  228.005995][T10362] batman_adv: batadv0: Interface activated: batadv_slave_0
[  228.015270][T10362] batman_adv: batadv0: Interface activated: batadv_slave_1
[  228.025299][ T5890] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  228.034858][ T5890] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  228.038289][ T5890] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  228.054973][ T5890] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  228.110220][   T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.112711][   T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.132488][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.135020][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.234820][T10491] loop6: detected capacity change from 0 to 4096
[  228.322429][T10493] 9pnet_fd: Insufficient options for proto=fd
[  228.333320][ T6148] ntfs3(loop6): ino=5, mi_enum_attr
[  228.378975][T10497] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1799'.
[  228.478380][T10508] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  228.523955][T10511] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1806'.
[  228.927407][T10530] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1815'.
[  229.194990][T10545] cgroup: Invalid name
[  229.299156][ T5236] Bluetooth: hci1: command tx timeout
[  229.495709][T10551] netlink: 'syz.5.1824': attribute type 21 has an invalid length.
[  229.498901][T10551] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1824'.
[  229.645104][T10562] netlink: 'syz.5.1826': attribute type 30 has an invalid length.
[  229.818036][T10567] loop5: detected capacity change from 0 to 4096
[  229.823032][T10567] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  229.908511][T10567] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  230.464999][T10591] loop6: detected capacity change from 0 to 32768
[  231.249665][ T5897] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  231.380658][ T5236] Bluetooth: hci1: command tx timeout
[  231.406938][ T5897] usb 7-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f
[  231.413784][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.417257][ T5897] usb 7-1: Product: syz
[  231.418941][ T5897] usb 7-1: Manufacturer: syz
[  231.431747][ T5897] usb 7-1: SerialNumber: syz
[  231.450492][ T5897] usb 7-1: config 0 descriptor??
[  231.455735][ T5897] gspca_main: touptek-2.14.0 probing 0547:6801
[  231.684003][ T5897] usb 7-1: USB disconnect, device number 2
[  234.512783][T10693] loop5: detected capacity change from 0 to 1024
[  234.528117][T10693] hfsplus: bad catalog entry type
[  234.595328][T10697] loop5: detected capacity change from 0 to 256
[  234.613474][T10697] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xc0e7db9a, utbl_chksum : 0xe619d30d)
[  234.618717][T10697] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  235.564347][T10734] netlink: 'syz.6.1903': attribute type 3 has an invalid length.
[  235.566934][T10734] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1903'.
[  235.590981][T10736] tipc: Started in network mode
[  235.593208][T10736] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  235.597272][T10736] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  235.635842][T10739] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  235.737011][T10749] loop5: detected capacity change from 0 to 256
[  235.828133][T10758] loop5: detected capacity change from 0 to 512
[  235.843299][T10758] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.847358][T10758] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  235.870902][T10763] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1916'.
[  235.874374][T10763] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1916'.
[  235.877814][T10763] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1916'.
[  235.883974][T10763] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1916'.
[  235.887534][T10763] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1916'.
[  236.071856][T10770] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  236.091055][T10770] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  236.518342][T10796] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1931'.
[  236.532482][T10796] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1931'.
[  236.568954][T10799] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1932'.
[  236.597910][T10044] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.710773][T10809] macvtap0: entered allmulticast mode
[  236.713112][T10809] veth0_macvtap: entered allmulticast mode
[  236.856403][T10805] loop6: detected capacity change from 0 to 32768
[  236.861295][T10805] bcachefs (/dev/loop6): error validating superblock: Invalid superblock section members_v1: too many devices for section size
[  236.861295][T10805] members_v1 (size 40):
[  236.861295][T10805] nr_devices mismatch: have 0 entries, should be 1
[  236.870707][T10805] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  237.057839][T10819] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1941'.
[  237.353604][T10831] loop5: detected capacity change from 0 to 4096
[  237.373593][T10824] loop6: detected capacity change from 0 to 32768
[  237.390635][T10831] ntfs3(loop5): ino=1a, mi_enum_attr
[  237.392803][T10831] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  237.423850][T10831] ntfs3(loop5): ino=22, "hugetlb.2MB.usage_in_bytes" mmap(write) compressed not supported
[  238.519467][T10855] loop5: detected capacity change from 0 to 128
[  238.523723][T10855] EXT4-fs (loop5): Test dummy encryption mode enabled
[  238.531069][T10855] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  238.535758][T10855] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  239.144916][T10864] netlink: 'syz.6.1959': attribute type 4 has an invalid length.
[  240.414270][T10044] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  240.515615][T10891] loop5: detected capacity change from 0 to 512
[  240.529286][T10891] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.1972: Parent and EA inode have the same ino 15
[  240.546268][T10891] EXT4-fs (loop5): 1 orphan inode deleted
[  240.550549][T10891] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.596948][T10044] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.894374][   T12] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1
[  243.100372][T10973] loop5: detected capacity change from 0 to 164
[  243.289023][T10979] loop5: detected capacity change from 0 to 128
[  244.395528][T10994] kworker/u10:9: attempt to access beyond end of device
[  244.395528][T10994] loop5: rw=1, sector=145, nr_sectors = 8 limit=128
[  244.409062][T10994] kworker/u10:9: attempt to access beyond end of device
[  244.409062][T10994] loop5: rw=1, sector=161, nr_sectors = 8 limit=128
[  244.414925][T10994] kworker/u10:9: attempt to access beyond end of device
[  244.414925][T10994] loop5: rw=1, sector=177, nr_sectors = 8 limit=128
[  244.423484][T10994] kworker/u10:9: attempt to access beyond end of device
[  244.423484][T10994] loop5: rw=1, sector=193, nr_sectors = 8 limit=128
[  244.432324][T10994] kworker/u10:9: attempt to access beyond end of device
[  244.432324][T10994] loop5: rw=1, sector=209, nr_sectors = 8 limit=128
[  244.437216][T10994] kworker/u10:9: attempt to access beyond end of device
[  244.437216][T10994] loop5: rw=1, sector=225, nr_sectors = 8 limit=128
[  244.441652][T10994] kworker/u10:9: attempt to access beyond end of device
[  244.441652][T10994] loop5: rw=1, sector=241, nr_sectors = 8 limit=128
[  244.445781][T10994] kworker/u10:9: attempt to access beyond end of device
[  244.445781][T10994] loop5: rw=1, sector=257, nr_sectors = 8 limit=128
[  244.450499][T10994] kworker/u10:9: attempt to access beyond end of device
[  244.450499][T10994] loop5: rw=1, sector=273, nr_sectors = 8 limit=128
[  244.454690][T10994] kworker/u10:9: attempt to access beyond end of device
[  244.454690][T10994] loop5: rw=1, sector=289, nr_sectors = 8 limit=128
[  244.552729][T10998] loop5: detected capacity change from 0 to 4096
[  244.556015][T10998] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  244.572013][T10998] ntfs3(loop5): ino=9, mi_enum_attr
[  244.574234][T10998] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  244.577350][T10998] ntfs3(loop5): ino=9, mi_enum_attr
[  244.580537][T10998] ntfs3(loop5): $Secure::$SII is corrupted.
[  244.583076][T10998] ntfs3(loop5): Failed to initialize $Secure (-22).
[  244.666782][T11000] loop6: detected capacity change from 0 to 256
[  244.679599][T11000] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  244.684185][T11000] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  244.694162][T11002] loop5: detected capacity change from 0 to 256
[  244.700718][T11000] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb94faefa, utbl_chksum : 0xe619d30d)
[  244.715063][T11000] exFAT-fs (loop6): valid_size(6597069767706) is greater than size(1050)
[  244.725409][T11002] FAT-fs (loop5): Directory bread(block 64) failed
[  244.734140][T11002] FAT-fs (loop5): Directory bread(block 65) failed
[  244.736489][T11002] FAT-fs (loop5): Directory bread(block 66) failed
[  244.751021][T11002] FAT-fs (loop5): Directory bread(block 67) failed
[  244.754263][T11002] FAT-fs (loop5): Directory bread(block 68) failed
[  244.757637][T11002] FAT-fs (loop5): Directory bread(block 69) failed
[  244.762937][T11002] FAT-fs (loop5): Directory bread(block 70) failed
[  244.765178][T11002] FAT-fs (loop5): Directory bread(block 71) failed
[  244.767400][T11002] FAT-fs (loop5): Directory bread(block 72) failed
[  244.770187][T11002] FAT-fs (loop5): Directory bread(block 73) failed
[  244.808932][T11002] FAT-fs (loop5): Filesystem has been set read-only
[  244.878959][T11013] loop6: detected capacity change from 0 to 4096
[  244.886807][T11013] ntfs3(loop6): ino=3, Correct links count -> 2.
[  245.469500][ T5314] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  245.637845][ T5314] usb 6-1: Using ep0 maxpacket: 8
[  245.642142][ T5314] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  245.647225][ T5314] usb 6-1: config 0 has no interface number 0
[  245.650380][ T5314] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  245.655619][ T5314] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 17056, setting to 1024
[  245.661447][ T5314] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  245.666508][ T5314] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  245.672150][ T5314] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  245.677854][ T5314] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  245.681856][ T5314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.689430][ T5314] usb 6-1: config 0 descriptor??
[  245.706880][ T5314] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  245.885260][T11035] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  245.911945][ T5314] usb 6-1: USB disconnect, device number 3
[  245.918798][ T5314] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  246.236041][T11041] loop6: detected capacity change from 0 to 32768
[  246.242533][T11041] bcachefs (/dev/loop6): error validating superblock: Invalid superblock section ext: field too small (64 < 88)
[  246.242533][T11041] ext (size 64):
[  246.242533][T11041] Recovery passes required:      recovery_pass_empty,scan_for_btree_nodes,accounting_read,stripes_read,set_may_go_rw,journal_replay,check_btree_backpointers,check_backpointers_to_extents,bucket_gens_init,reconstruct_snapshots,check_snapshot_trees,check_snapshots,check_subvols,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_unreachable_inodes,check_nlinks,resume_logged_ops,fix_reflink_p
[  246.242533][T11041] Errors to silently fix:        jset_unknown_csum,bkey_at_pos_max,alloc_key_empty_but_have_data,lru_entry_bad,btree_ptr_val_too_big,btree_ptr_v2_val_too_big,extent_ptrs_invalid_entry,extent_ptrs_no_ptrs,extent_ptrs_redundant_crc,extent_ptrs_unwritten,extent_ptrs_written_and_unwritten,ptr_to_invalid_device,ptr_to_duplicate_device,ptr_after_last_bucket,ptr_before_first_bucket,ptr_to_missing_alloc_key,ptr_to_missing_replicas_entry,ptr_too_stale,stale_dirty_ptr,ptr_crc_uncompress
[  246.242699][T11041] bcachefs: bch2_fs_get_tree() error: invalid_sb_ext
[  246.513546][T11064] ipvlan2: entered promiscuous mode
[  246.521060][T11064] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  246.954079][T11092] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.957132][T11092] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.054704][T11092] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  247.061552][T11092] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  247.134619][T11092] veth0_macvtap: left allmulticast mode
[  247.137145][T11092] macvtap0: left allmulticast mode
[  247.186740][ T5888] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  247.211907][ T5888] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  247.215349][ T5888] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  247.218408][ T5890] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  247.262413][T11104] lo speed is unknown, defaulting to 1000
[  247.264963][T11104] lo speed is unknown, defaulting to 1000
[  247.280762][T11104] lo speed is unknown, defaulting to 1000
[  247.304555][T11104] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  247.333116][T11104] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  247.397809][T11104] lo speed is unknown, defaulting to 1000
[  247.403777][T11104] lo speed is unknown, defaulting to 1000
[  247.421658][T11104] lo speed is unknown, defaulting to 1000
[  247.479640][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2069'.
[  247.482789][T11110] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2069'.
[  248.033270][T11130] loop6: detected capacity change from 0 to 512
[  248.048590][T11130] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  248.067297][T11130] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.073179][T11130] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  248.092245][T11130] EXT4-fs error (device loop6): ext4_xattr_block_find:1869: inode #15: comm syz.6.2079: corrupted xattr block 19: overlapping e_value 
[  248.100019][T11130] EXT4-fs (loop6): Remounting filesystem read-only
[  248.139779][T10362] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.149301][T11139] loop5: detected capacity change from 0 to 512
[  248.185412][T11139] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.197916][T11139] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  248.206279][   T33] audit: type=1326 audit(1757959709.568:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11144 comm="syz.6.2084" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb839d8eba9 code=0x7ffc0000
[  248.237679][   T33] audit: type=1326 audit(1757959709.568:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11144 comm="syz.6.2084" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb839d8eba9 code=0x7ffc0000
[  248.250013][   T33] audit: type=1326 audit(1757959709.588:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11144 comm="syz.6.2084" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb839d8eba9 code=0x7ffc0000
[  248.258483][   T33] audit: type=1326 audit(1757959709.588:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11144 comm="syz.6.2084" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb839d8eba9 code=0x7ffc0000
[  248.280012][   T33] audit: type=1326 audit(1757959709.588:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11144 comm="syz.6.2084" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb839d8eba9 code=0x7ffc0000
[  248.289265][   T33] audit: type=1326 audit(1757959709.588:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11144 comm="syz.6.2084" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb839d8eba9 code=0x7ffc0000
[  248.298862][   T33] audit: type=1326 audit(1757959709.588:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11144 comm="syz.6.2084" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb839d8eba9 code=0x7ffc0000
[  248.308085][   T33] audit: type=1326 audit(1757959709.588:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11144 comm="syz.6.2084" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb839d8eba9 code=0x7ffc0000
[  248.310910][T11149] loop6: detected capacity change from 0 to 256
[  248.318189][   T33] audit: type=1326 audit(1757959709.588:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11144 comm="syz.6.2084" exe="/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fb839d8eba9 code=0x7ffc0000
[  248.326319][   T33] audit: type=1326 audit(1757959709.588:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11144 comm="syz.6.2084" exe="/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000
[  248.331720][T10044] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.484549][T11155] loop6: detected capacity change from 0 to 4096
[  249.434781][T11163] loop5: detected capacity change from 0 to 1024
[  249.590089][T11169] loop6: detected capacity change from 0 to 1024
[  249.600441][T11169] hfsplus: bad catalog entry type
[  249.653099][T11173] loop5: detected capacity change from 0 to 4096
[  249.664999][T11173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  249.755739][T10044] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.696725][T11211] loop5: detected capacity change from 0 to 128
[  250.841362][T11217] loop6: detected capacity change from 0 to 256
[  250.850398][T11217] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  251.747745][T11232] loop6: detected capacity change from 0 to 32768
[  251.761021][T11232] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  251.782000][T11232] XFS (loop6): Ending clean mount
[  251.796392][T11232] XFS (loop6): Quotacheck needed: Please wait.
[  251.879233][T11232] XFS (loop6): Quotacheck: Done.
[  251.988987][T10362] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  252.303883][T11265] tmpfs: Bad value for 'mpol'
[  252.360210][T11268] loop5: detected capacity change from 0 to 8
[  252.446608][T11268] SQUASHFS error: xz decompression failed, data probably corrupt
[  252.450394][T11268] SQUASHFS error: Failed to read block 0x108: -5
[  252.453169][T11268] SQUASHFS error: Unable to read metadata cache entry [106]
[  252.456602][T11268] SQUASHFS error: Unable to read inode 0x11f
[  252.638302][T11274] loop6: detected capacity change from 0 to 2048
[  252.665368][T11277] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  253.527094][T11286] loop5: detected capacity change from 0 to 131072
[  253.598177][T11286] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0)
[  253.601586][T11286] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  253.613898][T11286] F2FS-fs (loop5): invalid crc value
[  253.812194][T11286] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  254.104715][T11286] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  254.107589][T11286] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  254.131347][T11286] F2FS-fs (loop5): Stopped filesystem due to reason: 0
[  255.580012][   T33] kauditd_printk_skb: 4 callbacks suppressed
[  255.580026][   T33] audit: type=1804 audit(1757959716.948:72): pid=11312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2149" name="/newroot/98/bus" dev="tmpfs" ino=526 res=1 errno=0
[  255.611458][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.614115][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  256.259984][T11330] netlink: 'syz.5.2158': attribute type 2 has an invalid length.
[  256.556571][ T5314] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  256.706600][ T5314] usb 6-1: Using ep0 maxpacket: 16
[  256.710830][ T5314] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  256.714409][ T5314] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  256.718347][ T5314] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  256.722404][ T5314] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  256.726627][ T5314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.739016][ T5314] usb 6-1: config 0 descriptor??
[  257.177478][ T5314] input: HID 0955:7214 Haptics as /devices/virtual/input/input7
[  257.242647][ T5314] shield 0003:0955:7214.0006: Registered Thunderstrike controller
[  257.246233][ T5314] shield 0003:0955:7214.0006: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0
[  257.373932][ T5314] usb 6-1: USB disconnect, device number 4
[  257.376004][ T5897] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  257.385424][ T5897] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  257.391689][ T5897] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  257.395428][ T5897] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  259.085492][T11381] loop6: detected capacity change from 0 to 1024
[  259.099524][T11380] loop5: detected capacity change from 0 to 4096
[  259.100582][T11381] hfsplus: catalog searching failed
[  259.104694][T11380] ntfs3(loop5): ino=3, Correct links count -> 2.
[  259.139889][T11380] ntfs3(loop5): ino=1a, mi_enum_attr
[  259.141860][T11380] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  259.189954][T11380] ntfs3(loop5): failed to convert "0000" to iso8859-9
[  259.194778][T11380] ntfs3(loop5): failed to convert name for inode 1e.
[  259.200003][T11380] ntfs3(loop5): ino=1f, mi_enum_attr
[  259.293727][T11390] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2184'.
[  259.436280][ T5912] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  259.600276][ T5912] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  259.603686][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.618585][ T5912] usb 7-1: config 0 descriptor??
[  259.623285][ T5912] gspca_main: cpia1-2.14.0 probing 0813:0001
[  259.638596][T11399] loop5: detected capacity change from 0 to 32768
[  259.649866][T11399] JBD2: Ignoring recovery information on journal
[  259.695372][T11399] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  259.764893][T10044] ocfs2: Unmounting device (7,5) on (node local)
[  259.830315][ T5912] gspca_cpia1: usb_control_msg 05, error -71
[  259.836326][ T5912] gspca_cpia1: usb_control_msg 01, error -71
[  259.838428][ T5912] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0)
[  259.856333][ T5912] usb 7-1: USB disconnect, device number 3
[  260.131804][T11433] loop5: detected capacity change from 0 to 1024
[  260.147617][T11434] sctp: [Deprecated]: syz.2.2203 (pid 11434) Use of struct sctp_assoc_value in delayed_ack socket option.
[  260.147617][T11434] Use struct sctp_sack_info instead
[  260.167904][T11433] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  260.194567][T11433] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  260.245294][T10044] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.616213][ T5897] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  260.770292][ T5897] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  260.774956][ T5897] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  260.781618][ T5897] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  260.786622][ T5897] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  260.790328][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.797338][T11443] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  260.991579][ T5236] Bluetooth: Unknown LE signaling command 0xfc
[  260.994421][ T5236] Bluetooth: Wrong link type (-22)
[  261.221773][ T5897] aiptek 6-1:17.0: Aiptek using 400 ms programming speed
[  261.239231][ T5897] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input8
[  261.329275][ T5897] usb 6-1: USB disconnect, device number 5
[  261.331691][    C1] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  261.680673][T11468] loop6: detected capacity change from 0 to 1024
[  261.987662][T11468] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  262.043831][T11468] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  262.105663][T10362] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.283611][T11489] loop5: detected capacity change from 0 to 1024
[  262.311164][T11489] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  262.325250][T11489] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  262.440261][T11489] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.2226: Freeing blocks not in datazone - block = 0, count = 16
[  262.466106][T11489] EXT4-fs (loop5): Remounting filesystem read-only
[  262.520153][T10044] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  262.600415][T11514] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2237'.
[  262.934780][T11521] loop5: detected capacity change from 0 to 40427
[  262.938861][T11521] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  262.941957][T11521] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  262.947388][T11521] F2FS-fs (loop5): invalid crc value
[  263.001478][T11521] F2FS-fs (loop5): access invalid blkaddr:0
[  263.004045][T11521] CPU: 0 UID: 0 PID: 11521 Comm: syz.5.2240 Not tainted syzkaller #0 PREEMPT(full) 
[  263.004065][T11521] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  263.004075][T11521] Call Trace:
[  263.004082][T11521]  <TASK>
[  263.004089][T11521]  dump_stack_lvl+0x189/0x250
[  263.004116][T11521]  ? __pfx_dump_stack_lvl+0x10/0x10
[  263.004146][T11521]  __f2fs_is_valid_blkaddr+0xe52/0x14f0
[  263.004178][T11521]  sanity_check_extent_cache+0x1a3/0x620
[  263.004207][T11521]  f2fs_iget+0x3a7f/0x5550
[  263.004250][T11521]  f2fs_fill_super+0x494a/0x6ff0
[  263.004302][T11521]  get_tree_bdev_flags+0x40e/0x4d0
[  263.004325][T11521]  ? __pfx_f2fs_fill_super+0x10/0x10
[  263.004341][T11521]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  263.004367][T11521]  vfs_get_tree+0x92/0x2b0
[  263.004387][T11521]  do_new_mount+0x2a2/0x9e0
[  263.004410][T11521]  ? ns_capable+0x8a/0xf0
[  263.004426][T11521]  ? __pfx_do_new_mount+0x10/0x10
[  263.004447][T11521]  ? path_mount+0x61c/0xfe0
[  263.004466][T11521]  ? user_path_at+0x44/0x60
[  263.004488][T11521]  __se_sys_mount+0x317/0x410
[  263.004510][T11521]  ? __pfx___se_sys_mount+0x10/0x10
[  263.004534][T11521]  ? do_syscall_64+0xbe/0x3b0
[  263.004548][T11521]  ? __x64_sys_mount+0x20/0xc0
[  263.004569][T11521]  do_syscall_64+0xfa/0x3b0
[  263.004582][T11521]  ? lockdep_hardirqs_on+0x9c/0x150
[  263.004608][T11521]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.004621][T11521]  ? exc_page_fault+0x9f/0xf0
[  263.004634][T11521]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.004647][T11521] RIP: 0033:0x7ff35e59034a
[  263.004662][T11521] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  263.004676][T11521] RSP: 002b:00007ff35c7f5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  263.004690][T11521] RAX: ffffffffffffffda RBX: 00007ff35c7f5ef0 RCX: 00007ff35e59034a
[  263.004701][T11521] RDX: 0000200000000280 RSI: 0000200000000040 RDI: 00007ff35c7f5eb0
[  263.004711][T11521] RBP: 0000200000000280 R08: 00007ff35c7f5ef0 R09: 0000000000000000
[  263.004722][T11521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000040
[  263.004730][T11521] R13: 00007ff35c7f5eb0 R14: 000000000000559f R15: 0000200000000340
[  263.004753][T11521]  </TASK>
[  263.106263][T11521] F2FS-fs (loop5): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 1280] is incorrect, run fsck to fix
[  263.112313][T11521] F2FS-fs (loop5): Failed to read root inode
[  263.325046][T11545] netlink: 'syz.6.2250': attribute type 4 has an invalid length.
[  263.328979][T11545] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2250'.
[  263.543893][T11564] loop6: detected capacity change from 0 to 1024
[  263.548735][T11565] loop5: detected capacity change from 0 to 2048
[  263.553558][T11565] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  263.591911][T11568] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  263.596448][T11565] bio_check_eod: 102 callbacks suppressed
[  263.596478][T11565] syz.5.2259: attempt to access beyond end of device
[  263.596478][T11565] loop5: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  263.617080][T11565] syz.5.2259: attempt to access beyond end of device
[  263.617080][T11565] loop5: rw=0, sector=9437254, nr_sectors = 2 limit=2048
[  263.624404][T11565] NILFS (loop5): I/O error reading meta-data file (ino=6, block-offset=0)
[  263.844707][T11576] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20001
[  263.880793][ T5912] IPVS: starting estimator thread 0...
[  263.977479][T11577] IPVS: using max 41 ests per chain, 98400 per kthread
[  264.116845][T11575] loop5: detected capacity change from 0 to 512
[  264.141448][T11575] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.146281][T11575] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  264.184883][T10044] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.507780][   T27] hfsplus: b-tree write err: -5, ino 4
[  264.592328][T11598] tmpfs: Bad value for 'mpol'
[  264.658617][T11602] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  264.661129][T11602] batman_adv: batadv0: Removing interface: batadv_slave_0
[  264.670497][T11602] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  264.673536][T11602] batman_adv: batadv0: Removing interface: batadv_slave_1
[  264.696247][T11602] batman_adv: batadv0: Interface deactivated: macsec0
[  264.705611][T11602] batman_adv: batadv0: Removing interface: macsec0
[  265.096829][T11614] loop6: detected capacity change from 0 to 512
[  265.265949][T11614] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.271592][T11614] ext4 filesystem being mounted at /123/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  265.685752][T10362] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.122787][T11660] loop5: detected capacity change from 0 to 1024
[  266.222102][ T6148] hfsplus: b-tree write err: -5, ino 4
[  266.262815][T11665] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2298'.
[  266.359970][T11669] loop5: detected capacity change from 0 to 512
[  267.038796][T11703] loop6: detected capacity change from 0 to 512
[  267.075678][T11703] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.2315: corrupted in-inode xattr: invalid ea_ino
[  267.093679][T11703] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2315: couldn't read orphan inode 15 (err -117)
[  267.101627][T11703] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  267.169441][   T33] audit: type=1326 audit(1757959728.540:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.2.2317" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4e798eba9 code=0x0
[  267.327258][T10362] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.417634][T11721] tipc: Started in network mode
[  267.419667][T11721] tipc: Node identity 6ea43251cb33, cluster identity 4711
[  267.422131][T11721] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  267.428230][T11721] syzkaller0: entered promiscuous mode
[  267.430731][T11721] syzkaller0: entered allmulticast mode
[  267.460107][T11721] tipc: Resetting bearer <eth:syzkaller0>
[  267.470709][T11719] tipc: Resetting bearer <eth:syzkaller0>
[  267.502044][T11719] tipc: Disabling bearer <eth:syzkaller0>
[  269.269309][T11791] netlink: 'syz.5.2354': attribute type 29 has an invalid length.
[  269.272239][T11791] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2354'.
[  269.370582][T11798] loop5: detected capacity change from 0 to 4096
[  269.390175][T11798] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  269.406925][T11798] ntfs3(loop5): ino=1a, mi_enum_attr
[  269.410277][T11798] ntfs3(loop5): ino=1a, mi_enum_attr
[  269.425948][T11798] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[  269.712045][T11822] UBIFS error (pid: 11822): cannot open "c:::", error -22
[  270.866463][T11836] loop5: detected capacity change from 0 to 32768
[  270.900776][T11836] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  270.931662][T11836] XFS (loop5): Ending clean mount
[  271.001999][T10044] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  271.367725][T11854] lo: entered promiscuous mode
[  271.383379][T11854] netlink: 'syz.2.2378': attribute type 1 has an invalid length.
[  271.396426][T11854] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  272.851770][T11871] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2384'.
[  272.857483][T11871] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2384'.
[  273.155376][ T5314] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  273.408355][ T5314] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  273.417234][ T5314] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  273.428114][ T5314] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  273.436168][ T5314] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.446966][ T5314] usb 7-1: config 0 descriptor??
[  273.453634][ T5314] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  273.663930][ T5314] usb 7-1: USB disconnect, device number 4
[  274.739336][T11905] loop6: detected capacity change from 0 to 256
[  274.757449][T11905] FAT-fs (loop6): Directory bread(block 64) failed
[  274.760227][T11905] FAT-fs (loop6): Directory bread(block 65) failed
[  274.763141][T11905] FAT-fs (loop6): Directory bread(block 66) failed
[  274.771309][T11905] FAT-fs (loop6): Directory bread(block 67) failed
[  274.777556][T11905] FAT-fs (loop6): Directory bread(block 68) failed
[  274.780195][T11905] FAT-fs (loop6): Directory bread(block 69) failed
[  274.782890][T11905] FAT-fs (loop6): Directory bread(block 70) failed
[  274.800882][T11905] FAT-fs (loop6): Directory bread(block 71) failed
[  274.808012][T11905] FAT-fs (loop6): Directory bread(block 72) failed
[  274.810679][T11905] FAT-fs (loop6): Directory bread(block 73) failed
[  274.972219][T11916] loop5: detected capacity change from 0 to 256
[  274.976838][T11916] exfat: Deprecated parameter 'utf8'
[  274.990321][T11916] exfat: Deprecated parameter 'namecase'
[  274.992887][T11916] exfat: Bad value for 'namecase'
[  275.256692][T11933] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.353578][T11933] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.426542][T11933] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.431581][T11934] loop5: detected capacity change from 0 to 40427
[  275.436376][T11934] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  275.439425][T11934] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  275.443997][T11934] F2FS-fs (loop5): invalid crc value
[  275.502518][T11933] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.517634][T11934] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  275.526396][T11934] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  275.529378][T11934] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  275.628688][ T5890] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  275.647808][ T5890] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  275.670182][ T5890] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  275.689019][ T5890] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  275.815900][T11944] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.820098][T11944] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.920651][T11944] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  275.928282][T11944] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  276.245709][T11958] block device autoloading is deprecated and will be removed.
[  276.352593][ T5912] lo speed is unknown, defaulting to 1000
[  276.359104][ T5912] syz2: Port: 1 Link DOWN
[  276.379053][ T5890] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  276.383630][ T5890] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  276.389453][ T5890] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  276.392755][ T5890] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  276.430411][ T5912] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  276.447871][ T5912] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  276.572720][T11969] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  278.018605][T11982] loop5: detected capacity change from 0 to 262144
[  278.087135][T11982] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2427 (11982)
[  278.109887][T11982] BTRFS info (device loop5): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  278.113406][T11982] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[  278.119799][T11991] loop6: detected capacity change from 0 to 128
[  278.260543][   T79] BTRFS warning (device loop5): checksum verify failed on logical 22036480 mirror 1 wanted 0x23e101be1e001a29 found 0x09049c5cc74d15fb level 0
[  278.283109][T11982] BTRFS info (device loop5): enabling ssd optimizations
[  278.286083][T11982] BTRFS info (device loop5): enabling free space tree
[  278.337849][T10044] BTRFS info (device loop5): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  278.532288][T12018] binder: 12006:12018 unknown command 0
[  278.534699][T12018] binder: 12006:12018 ioctl c0306201 2000000003c0 returned -22
[  278.925913][T12028] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2441'.
[  279.121439][T12036] lo speed is unknown, defaulting to 1000
[  279.344853][T12046] loop6: detected capacity change from 0 to 4096
[  279.355361][T12046] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  279.395377][T12046] ntfs3(loop6): ino=19, mi_enum_attr
[  279.403380][T12046] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  279.444234][   T33] audit: type=1800 audit(1757959740.821:74): pid=12046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2449" name="file1" dev="loop6" ino=33 res=0 errno=0
[  279.563067][T12057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2453'.
[  279.631932][T12062] loop5: detected capacity change from 0 to 512
[  279.637539][T12062] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  279.641091][T12062] EXT4-fs (loop5): orphan cleanup on readonly fs
[  279.648040][T12062] Quota error (device loop5): dq_insert_tree: Quota tree root isn't allocated!
[  279.651779][T12062] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota
[  279.659409][T12062] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.2455: Failed to acquire dquot type 1
[  279.666505][T12062] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2455: bg 0: block 40: padding at end of block bitmap is not set
[  279.673021][T12062] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  279.680784][T12062] EXT4-fs (loop5): 1 truncate cleaned up
[  279.696816][T12062] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  279.728472][T10044] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.800561][   T33] audit: type=1800 audit(1757959741.171:75): pid=12070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2458" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  279.902780][T12072] loop5: detected capacity change from 0 to 4096
[  280.164474][T12078] loop5: detected capacity change from 0 to 16
[  280.178659][T12078] erofs (device loop5): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  280.186707][T12078] erofs (device loop5): mounted with root inode @ nid 36.
[  280.488807][T12088] : renamed from bridge_slave_0 (while UP)
[  280.575923][ T5897] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  280.735811][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  280.740165][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  280.753826][ T5897] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  280.757668][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.762916][ T5897] usb 6-1: config 0 descriptor??
[  280.818886][T12109] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2477'.
[  280.822723][T12109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2477'.
[  280.923775][T12116] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2481'.
[  281.227740][ T5897] isku 0003:1E7D:319C.0008: unknown main item tag 0x0
[  281.247182][ T5897] isku 0003:1E7D:319C.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0
[  281.433729][ T5897] isku 0003:1E7D:319C.0008: couldn't init struct isku_device
[  281.436618][ T5897] isku 0003:1E7D:319C.0008: couldn't install keyboard
[  281.441840][ T5897] isku 0003:1E7D:319C.0008: probe with driver isku failed with error -71
[  281.448937][ T5897] usb 6-1: USB disconnect, device number 6
[  281.731872][T12126] loop6: detected capacity change from 0 to 131072
[  281.735809][T12126] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0)
[  281.738452][T12126] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  281.742207][T12126] F2FS-fs (loop6): invalid crc value
[  281.778148][T12126] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  281.782744][T12126] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  281.785476][T12126] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  282.248323][ T5897] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  282.393629][ T5897] usb 6-1: Using ep0 maxpacket: 32
[  282.398031][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  282.402384][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  282.409240][ T5897] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  282.413795][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.418896][ T5897] usb 6-1: config 0 descriptor??
[  282.583539][ T5912] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  282.737260][ T5912] usb 7-1: config index 0 descriptor too short (expected 63186, got 210)
[  282.740571][ T5912] usb 7-1: config 0 has an invalid interface number: 106 but max is 0
[  282.744144][ T5912] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  282.747141][ T5912] usb 7-1: config 0 has no interface number 0
[  282.749137][ T5912] usb 7-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  282.752605][ T5912] usb 7-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  282.756281][ T5912] usb 7-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  282.760865][ T5912] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  282.766057][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.772460][ T5912] usb 7-1: config 0 descriptor??
[  282.787134][ T5912] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  282.848500][ T5897] savu 0003:1E7D:2D5A.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0
[  282.984582][   T12] usb 7-1: Failed to submit usb control message: -71
[  282.985221][ T5912] usb 7-1: USB disconnect, device number 5
[  282.988035][   T12] usb 7-1: unable to send the bmi data to the device: -71
[  282.993857][   T12] usb 7-1: unable to get target info from device
[  282.996687][   T12] usb 7-1: could not get target info (-71)
[  282.999034][   T12] usb 7-1: could not probe fw (-71)
[  283.119362][ T5897] usb 6-1: USB disconnect, device number 7
[  283.382378][T12167] overlayfs: failed to clone lowerpath
[  284.986538][T12204] loop6: detected capacity change from 0 to 32768
[  285.017042][T12204] ERROR: (device loop6): diAllocAG: error reading iag
[  285.017042][T12204] 
[  285.027000][T12204] ialloc: diAlloc returned -5!
[  285.047892][T12212] overlayfs: failed to clone upperpath
[  286.001774][T12227] loop6: detected capacity change from 0 to 32768
[  286.024637][T12227] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  286.070611][T12227] XFS (loop6): Ending clean mount
[  286.114818][T10362] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  287.227656][T12268] loop6: detected capacity change from 0 to 32768
[  287.338308][T12268] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[  287.338333][T12268]   allowing incompatible features above 0.0: (unknown version)
[  287.338342][T12268]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  287.390568][T12268] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0
[  287.393646][T12268] bcachefs (loop6): initializing new filesystem
[  287.401594][T12268] bcachefs (loop6): going read-write
[  287.406251][T12268] bcachefs (loop6): marking superblocks
[  287.422727][T12268] bcachefs (loop6): initializing freespace
[  287.427983][T12268] bcachefs (loop6): done initializing freespace
[  287.435753][T12268] bcachefs (loop6): reading snapshots table
[  287.437783][T12268] bcachefs (loop6): reading snapshots done
[  287.466069][T12268] bcachefs (loop6): done starting filesystem
[  287.551708][T10362] bcachefs (loop6): shutting down
[  287.555383][T10362] bcachefs (loop6): going read-only
[  287.557017][T10362] bcachefs (loop6): finished waiting for writes to stop
[  287.561191][T10362] bcachefs (loop6): flushing journal and stopping allocators, journal seq 2
[  287.598105][T10362] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 3
[  287.601725][T10362] bcachefs (loop6): clean shutdown complete, journal seq 4
[  287.605134][T10362] bcachefs (loop6): marking filesystem clean
[  287.618286][T10362] bcachefs (loop6): shutdown complete
[  288.950760][T12299] loop5: detected capacity change from 0 to 32768
[  289.015767][T12299] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  289.015807][T12299]   allowing incompatible features above 0.0: (unknown version)
[  289.015813][T12299]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  289.028763][T12299] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  289.031341][T12299] bcachefs (loop5): recovering from clean shutdown, journal seq 10
[  289.034596][T12299] bcachefs (loop5): Version upgrade required:
[  289.034596][T12299] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  289.034596][T12299] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  289.034596][T12299]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  289.058863][    C0] vkms_vblank_simulate: vblank timer overrun
[  289.064402][T12299] bcachefs (loop5): dropping and reconstructing all alloc info
[  289.077482][T12299] bcachefs (loop5): accounting_read... done
[  289.082174][T12299] bcachefs (loop5): alloc_read... done
[  289.085322][T12299] bcachefs (loop5): snapshots_read... done
[  289.087653][T12299] bcachefs (loop5): check_allocations... done
[  289.106333][T12299] bcachefs (loop5): going read-write
[  289.113153][T12299] bcachefs (loop5): done starting filesystem
[  289.166909][T10044] bcachefs (loop5): shutting down
[  289.168717][T10044] bcachefs (loop5): going read-only
[  289.180814][T10044] bcachefs (loop5): finished waiting for writes to stop
[  289.203312][T10044] bcachefs (loop5): flushing journal and stopping allocators, journal seq 10
[  289.206160][T10044] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 10
[  289.227234][T10044] bcachefs (loop5): unclean shutdown complete, journal seq 11
[  289.245077][T10044] bcachefs (loop5): done going read-only, filesystem not clean
[  289.264141][T10044] bcachefs (loop5): shutdown complete
[  289.668520][T12342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2566'.
[  289.671895][T12342] bridge_slave_1: left allmulticast mode
[  289.673595][ T5314] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  289.674326][T12342] bridge_slave_1: left promiscuous mode
[  289.679530][T12342] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.687276][T12342] bridge0: port 1() entered disabled state
[  289.721404][T12342] vlan2 (unregistering): left promiscuous mode
[  289.725266][T12342] bridge0 (unregistering): left promiscuous mode
[  289.727682][T12342] bridge1: port 1(vlan2) entered disabled state
[  289.822663][ T5314] usb 7-1: Using ep0 maxpacket: 8
[  289.834072][ T5314] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  289.837591][ T5314] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0
[  289.841209][ T5314] usb 7-1: config 0 interface 0 has no altsetting 0
[  289.845403][ T5314] usb 7-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00
[  289.855133][ T5314] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.866585][ T5314] usb 7-1: config 0 descriptor??
[  290.277103][ T5314] smartjoyplus 0003:0B43:0003.000A: ignoring exceeding usage max
[  290.281838][ T5314] smartjoyplus 0003:0B43:0003.000A: item fetching failed at offset 10/11
[  290.287393][ T5314] smartjoyplus 0003:0B43:0003.000A: parse failed
[  290.290094][ T5314] smartjoyplus 0003:0B43:0003.000A: probe with driver smartjoyplus failed with error -22
[  290.503637][ T5904] usb 7-1: USB disconnect, device number 6
[  290.616949][T12362] loop5: detected capacity change from 0 to 128
[  290.626781][T12362] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2
[  291.166641][T12374] sctp: [Deprecated]: syz.2.2580 (pid 12374) Use of struct sctp_assoc_value in delayed_ack socket option.
[  291.166641][T12374] Use struct sctp_sack_info instead
[  291.176300][T12372] loop6: detected capacity change from 0 to 4096
[  291.179295][T12372] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  291.196027][T12372] ntfs3(loop6): Failed to load $Extend (-22).
[  291.198237][T12372] ntfs3(loop6): Failed to initialize $Extend.
[  291.737086][T12389] loop5: detected capacity change from 0 to 32768
[  291.740252][T12389] XFS: noikeep mount option is deprecated.
[  291.749645][T12389] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  291.764359][T12389] XFS (loop5): Ending clean mount
[  291.771967][T12389] XFS (loop5): Quotacheck needed: Please wait.
[  291.809621][T12389] XFS (loop5): Quotacheck: Done.
[  291.933441][T10044] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  292.137986][T12402] loop6: detected capacity change from 0 to 512
[  292.139991][T12403] loop5: detected capacity change from 0 to 512
[  292.147239][T12403] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  292.147422][T12402] EXT4-fs: Ignoring removed oldalloc option
[  292.166159][T12402] EXT4-fs (loop6): 1 truncate cleaned up
[  292.169980][T12402] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  292.313867][T10362] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.367296][T12416] loop5: detected capacity change from 0 to 8
[  292.377558][T12416] SQUASHFS error: lzo decompression failed, data probably corrupt
[  292.380729][T12416] SQUASHFS error: Failed to read block 0x144: -5
[  292.384780][T12416] SQUASHFS error: Unable to read metadata cache entry [142]
[  292.387978][T12416] SQUASHFS error: Unable to read inode 0x11f
[  292.675509][T12430] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2601'.
[  292.768907][T12436] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2604'.
[  292.936101][T12438] loop6: detected capacity change from 0 to 32768
[  292.942445][T12438] XFS (loop6): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  292.959275][T12438] XFS (loop6): Ending clean mount
[  293.069692][T10362] XFS (loop6): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  294.441932][T12488] loop5: detected capacity change from 0 to 256
[  294.782085][ T5904] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  294.932847][ T5904] usb 6-1: Using ep0 maxpacket: 32
[  294.937317][ T5904] usb 6-1: config 8 has an invalid interface number: 203 but max is 0
[  294.941731][ T5904] usb 6-1: config 8 has no interface number 0
[  294.948524][ T5904] usb 6-1: config 8 interface 203 has no altsetting 0
[  294.962629][ T5904] usb 6-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a
[  294.966765][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.970033][ T5904] usb 6-1: Product: syz
[  294.971862][ T5904] usb 6-1: Manufacturer: syz
[  294.979501][ T5904] usb 6-1: SerialNumber: syz
[  295.051154][T12507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2632'.
[  295.057487][T12507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2632'.
[  295.088714][T12509] overlayfs: conflicting options: metacopy=on,redirect_dir=follow
[  295.197448][ T5904] port100 6-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint
[  295.211197][ T5904] usb 6-1: USB disconnect, device number 8
[  295.524621][ T5912] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  295.685107][ T5912] usb 7-1: Using ep0 maxpacket: 16
[  295.689282][ T5912] usb 7-1: config 8 has an invalid interface number: 57 but max is 0
[  295.694717][ T5912] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  295.699133][ T5912] usb 7-1: config 8 has no interface number 0
[  295.701638][ T5912] usb 7-1: config 8 interface 57 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  295.722049][ T5912] usb 7-1: config 8 interface 57 has no altsetting 0
[  295.727541][ T5912] usb 7-1: New USB device found, idVendor=39c6, idProduct=8f68, bcdDevice=dd.44
[  295.731285][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.735733][ T5912] usb 7-1: Product: syz
[  295.737876][ T5912] usb 7-1: Manufacturer: syz
[  295.739876][ T5912] usb 7-1: SerialNumber: syz
[  295.806239][T12551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2653'.
[  295.841944][ T5865] Bluetooth: hci1: command tx timeout
[  296.054698][ T5912] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  296.057935][ T5912] usb 7-1: MIDIStreaming interface descriptor not found
[  296.459686][ T5912] usb 7-1: USB disconnect, device number 7
[  297.073169][T12570] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  297.260368][T12574] 9pnet_fd: Insufficient options for proto=fd
[  297.590500][T12567] loop5: detected capacity change from 0 to 131072
[  297.626466][T12578] overlayfs: failed to clone upperpath
[  297.632237][T12567] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0)
[  297.635447][T12567] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  297.722234][T12567] F2FS-fs (loop5): invalid crc value
[  297.997233][T12567] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  298.002334][T12567] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  298.005279][T12567] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  298.734108][   T33] audit: type=1326 audit(1757959760.114:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12611 comm="syz.6.2676" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb839d8eba9 code=0x7ffc0000
[  298.750190][   T33] audit: type=1326 audit(1757959760.114:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12611 comm="syz.6.2676" exe="/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fb839d8eba9 code=0x7ffc0000
[  298.760113][   T33] audit: type=1326 audit(1757959760.114:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12611 comm="syz.6.2676" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb839d8eba9 code=0x7ffc0000
[  298.768919][   T33] audit: type=1326 audit(1757959760.114:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12611 comm="syz.6.2676" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb839d8eba9 code=0x7ffc0000
[  299.112372][T12643] loop6: detected capacity change from 0 to 256
[  299.120594][T12643] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  299.148811][T12643] exFAT-fs (loop6): error, invalid access to FAT free cluster (entry 0x00000008)
[  299.591535][ T5912] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  299.773139][ T5912] usb 7-1: Using ep0 maxpacket: 32
[  299.910357][ T5912] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[  299.913899][ T5912] usb 7-1: config 0 has no interface number 0
[  299.918726][ T5912] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  299.922824][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.925807][ T5912] usb 7-1: Product: syz
[  299.927360][ T5912] usb 7-1: Manufacturer: syz
[  299.929040][ T5912] usb 7-1: SerialNumber: syz
[  299.934509][ T5912] usb 7-1: config 0 descriptor??
[  299.938275][ T5912] smsc95xx v2.0.0
[  299.939621][ T5912] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  299.944050][ T5912] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -22
[  300.181177][ T5897] usb 7-1: USB disconnect, device number 8
[  300.624967][T12689] netlink: zone id is out of range
[  300.629909][T12689] netlink: zone id is out of range
[  300.638491][T12689] netlink: zone id is out of range
[  300.640565][T12689] netlink: zone id is out of range
[  300.642879][T12689] netlink: zone id is out of range
[  300.644579][T12689] netlink: zone id is out of range
[  300.646264][T12689] netlink: zone id is out of range
[  300.648252][T12689] netlink: zone id is out of range
[  300.650011][T12689] netlink: zone id is out of range
[  301.861282][ T5897] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  302.031417][ T5897] usb 7-1: Using ep0 maxpacket: 32
[  302.096883][ T5897] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  302.120253][ T5897] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  302.142718][ T5897] usb 7-1: config 0 interface 0 has no altsetting 0
[  302.225793][ T5897] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  302.231368][ T5897] usb 7-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3
[  302.235850][ T5897] usb 7-1: Product: syz
[  302.237791][ T5897] usb 7-1: Manufacturer: syz
[  302.239797][ T5897] usb 7-1: SerialNumber: syz
[  302.245057][ T5897] usb 7-1: config 0 descriptor??
[  302.306069][T12716] netlink: 'syz.5.2723': attribute type 1 has an invalid length.
[  302.591140][ T5912] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  302.660203][ T5897] gs_usb 7-1:0.0: Couldn't get device config: (err=-71)
[  302.664851][ T5897] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -71
[  302.676942][ T5897] usb 7-1: USB disconnect, device number 9
[  302.754130][ T5912] usb 6-1: config 0 has an invalid interface number: 175 but max is 0
[  302.757505][ T5912] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  302.760746][ T5912] usb 6-1: config 0 has no interface number 0
[  302.764589][ T5912] usb 6-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C
[  302.770209][ T5912] usb 6-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10
[  302.776176][ T5912] usb 6-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  302.780697][ T5912] usb 6-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16
[  302.790144][ T5912] usb 6-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b
[  302.795618][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.799062][ T5912] usb 6-1: Product: syz
[  302.800810][ T5912] usb 6-1: Manufacturer: syz
[  302.803334][ T5912] usb 6-1: SerialNumber: syz
[  302.806546][ T5912] usb 6-1: config 0 descriptor??
[  302.810584][ T5912] symbolserial 6-1:0.175: symbol converter detected
[  302.818308][ T5912] usb 6-1: symbol converter now attached to ttyUSB0
[  303.017400][ T5912] usb 6-1: USB disconnect, device number 9
[  303.022659][ T5912] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0
[  303.025509][ T5912] symbolserial 6-1:0.175: device disconnected
[  303.280105][T12743] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  303.669138][T12749] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  303.852660][ T5912] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  304.004329][ T5912] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  304.008732][ T5912] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  304.013320][ T5912] usb 6-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22
[  304.017436][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.026623][ T5912] usb 6-1: config 0 descriptor??
[  304.237733][ T5897] usb 6-1: USB disconnect, device number 10
[  304.713100][T12776] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  304.721025][T12776] Error validating options; rc = [-22]
[  305.258591][T12787] loop5: detected capacity change from 0 to 2048
[  305.273403][T12787] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  305.285737][T12789] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  305.293004][T12787] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  305.305613][T12787] Remounting filesystem read-only
[  305.356016][T12787] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  305.365333][T12787] NILFS (loop5): error -5 reading inode: ino=12
[  305.483115][T12796] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2759'.
[  305.553858][T12799] netlink: 'syz.6.2760': attribute type 1 has an invalid length.
[  305.557505][T12799] net_ratelimit: 9 callbacks suppressed
[  305.557536][T12799] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  305.657933][T12806] loop6: detected capacity change from 0 to 512
[  305.718050][T12806] EXT4-fs (loop6): 1 orphan inode deleted
[  305.727723][T12806] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  305.735661][   T52] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  305.745764][   T52] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u9:2: Failed to release dquot type 1
[  305.766115][   T52] EXT4-fs (loop6): Remounting filesystem read-only
[  305.769027][T12806] ext4 filesystem being mounted at /syzcgroup/cpu/syz6/cgroup.procs supports timestamps until 2038-01-19 (0x7fffffff)
[  305.776599][T12806] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.821984][ T5897] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  305.907479][T12819] futex_wake_op: syz.2.2768 tries to shift op by 32; fix this program
[  306.002018][ T5897] usb 6-1: Using ep0 maxpacket: 16
[  306.007148][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  306.014485][ T5897] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  306.019779][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.024827][ T5897] usb 6-1: Product: syz
[  306.026481][ T5897] usb 6-1: Manufacturer: syz
[  306.033695][ T5897] usb 6-1: SerialNumber: syz
[  306.038139][ T5897] usb 6-1: config 0 descriptor??
[  306.158511][T12837] netlink: 'syz.6.2776': attribute type 2 has an invalid length.
[  306.164781][T12837] netlink: 'syz.6.2776': attribute type 1 has an invalid length.
[  306.251610][ T5897] usb 6-1: USB disconnect, device number 11
[  306.880653][ T5897] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  307.030664][ T5897] usb 7-1: Using ep0 maxpacket: 16
[  307.044861][ T5897] usb 7-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01
[  307.048665][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.052359][ T5897] usb 7-1: Product: syz
[  307.054028][ T5897] usb 7-1: Manufacturer: syz
[  307.056009][ T5897] usb 7-1: SerialNumber: syz
[  307.060043][ T5897] usb 7-1: config 0 descriptor??
[  307.084989][ T5897] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected.
[  307.324697][ T5897] pwc: Warning: more than 1 configuration available.
[  307.336381][ T5897] pwc: Failed to set LED on/off time (-71)
[  307.344734][ T5897] pwc: send_video_command error -71
[  307.350932][ T5897] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  307.364766][ T5897] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71
[  307.384630][ T5897] usb 7-1: USB disconnect, device number 10
[  308.830943][T12881] JFS: discard option not supported on device
[  308.836287][T12881] Mount JFS Failure: -22
[  308.837744][T12881] jfs_mount failed w/return code = -22
[  309.064068][T12896] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2801'.
[  309.149837][T12900] loop5: detected capacity change from 0 to 512
[  309.174433][T12900] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  309.178521][T12900] ext4 filesystem being mounted at /320/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  309.250584][T12900] Quota error (device loop5): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  309.257823][T12900] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  309.266931][T12900] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.2804: Failed to acquire dquot type 0
[  309.400067][T10044] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  309.815394][T12918] loop6: detected capacity change from 0 to 32768
[  309.824823][T12930] IPVS: length: 187 != 24
[  309.834904][T12918] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  309.859233][T12918] XFS (loop6): Ending clean mount
[  309.883237][T10362] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  310.077357][   T33] audit: type=1400 audit(1757959771.455:80): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="#" pid=12943 comm="syz.6.2819"
[  310.248874][ T5897] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  310.394851][T12946] loop6: detected capacity change from 0 to 32768
[  310.412777][ T5897] usb 6-1: Using ep0 maxpacket: 16
[  310.418767][ T5897] usb 6-1: unable to get BOS descriptor or descriptor too short
[  310.424161][ T5897] usb 6-1: config 13 has an invalid interface number: 50 but max is 0
[  310.428326][ T5897] usb 6-1: config 13 has no interface number 0
[  310.433174][ T5897] usb 6-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16
[  310.441215][ T5897] usb 6-1: config 13 interface 50 has no altsetting 0
[  310.452625][ T5897] usb 6-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  310.456460][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.457663][T12946] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  310.459640][ T5897] usb 6-1: Product: syz
[  310.467913][T12946]   allowing incompatible features above 0.0: (unknown version)
[  310.473797][T12946]   features: 
[  310.475272][T12946] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0
[  310.476738][ T5897] usb 6-1: Manufacturer: syz
[  310.482121][ T5897] usb 6-1: SerialNumber: syz
[  310.487631][T12940] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  310.497741][T12946] bcachefs (loop6): initializing new filesystem
[  310.509206][T12946] bcachefs (loop6): going read-write
[  310.514979][T12946] bcachefs (loop6): marking superblocks
[  310.537366][T12946] bcachefs (loop6): initializing freespace
[  310.544111][T12946] bcachefs (loop6): done initializing freespace
[  310.552923][T12946] bcachefs (loop6): reading snapshots table
[  310.560250][T12946] bcachefs (loop6): reading snapshots done
[  310.597870][T12946] bcachefs (loop6): done starting filesystem
[  310.667400][T10362] bcachefs (loop6): shutting down
[  310.669224][T10362] bcachefs (loop6): going read-only
[  310.673784][T10362] bcachefs (loop6): finished waiting for writes to stop
[  310.677279][T10362] bcachefs (loop6): flushing journal and stopping allocators, journal seq 2
[  310.711608][ T5897] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  310.714396][ T5897] usb 6-1: MIDIStreaming interface descriptor not found
[  310.724693][T10362] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 3
[  310.729280][T10362] bcachefs (loop6): clean shutdown complete, journal seq 4
[  310.734244][T10362] bcachefs (loop6): marking filesystem clean
[  310.746368][ T5897] usb 6-1: USB disconnect, device number 12
[  310.762202][T10362] bcachefs (loop6): shutdown complete
[  311.904570][T12997] loop6: detected capacity change from 0 to 40427
[  311.908446][T12997] F2FS-fs (loop6): build fault injection rate: 26
[  311.911497][T12997] F2FS-fs (loop6): build fault injection type: 0x2
[  311.915498][T12997] F2FS-fs (loop6): invalid crc value
[  311.919560][T12997] F2FS-fs (loop6): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x4462/0x6ff0
[  311.924262][T12997] F2FS-fs (loop6): Failed to initialize F2FS node manager (-12)
[  311.975784][T13013] loop5: detected capacity change from 0 to 512
[  311.981789][T13013] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  311.989715][T13013] EXT4-fs (loop5): 1 truncate cleaned up
[  311.993808][T13013] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  312.008454][T13013] syz.5.2846 (pid 13013) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  312.048821][T10044] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.920366][T13025] loop5: detected capacity change from 0 to 32768
[  312.930725][T13025] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2850 (13025)
[  312.949321][T13025] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  312.953855][T13025] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[  313.113681][T13025] BTRFS info (device loop5): enabling ssd optimizations
[  313.115848][T13025] BTRFS info (device loop5): enabling free space tree
[  313.185117][T13047] vxcan1: entered allmulticast mode
[  313.201104][T13025] BTRFS info (device loop5): balance: start -f -sprofiles=data|system|metadata,usage=8,usage=8..0,drange=7..559102,stripes=4294967295..4
[  313.215363][T13025] BTRFS info (device loop5): balance: ended with status: 0
[  313.304456][T10044] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  314.047217][T13074] loop5: detected capacity change from 0 to 512
[  314.080639][T13074] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  314.088069][T13074] EXT4-fs (loop5): orphan cleanup on readonly fs
[  314.094443][T13074] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  314.099091][T13074] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  314.116848][T13074] EXT4-fs (loop5): Cannot turn on quotas: error -117
[  314.148577][T13074] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2866: bg 0: block 40: padding at end of block bitmap is not set
[  314.168390][T13074] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  314.175365][T13074] EXT4-fs (loop5): 1 truncate cleaned up
[  314.179168][T13074] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  314.229529][T10044] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.366913][T13100] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  314.959913][ T5912] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  315.110668][ T5912] usb 6-1: Using ep0 maxpacket: 32
[  315.115130][ T5912] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  315.124443][ T5912] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  315.128217][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  315.131948][ T5912] usb 6-1: Product: syz
[  315.133701][ T5912] usb 6-1: Manufacturer: syz
[  315.135566][ T5912] usb 6-1: SerialNumber: syz
[  315.140106][ T5912] usb 6-1: config 0 descriptor??
[  315.142933][T13119] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  315.355163][ T5897] usb 6-1: USB disconnect, device number 13
[  315.736480][T13148] Invalid ELF header magic: != ELF
[  315.851343][T13154] loop6: detected capacity change from 0 to 1764
[  316.031402][T13156] loop6: detected capacity change from 0 to 32768
[  316.034046][T13156] XFS: noikeep mount option is deprecated.
[  316.039857][T13156] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  316.052224][T13156] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  316.063520][T13156] XFS (loop6): Starting recovery (logdev: internal)
[  316.091121][T13156] XFS (loop6): Ending recovery (logdev: internal)
[  316.173783][T10362] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  316.275372][T13171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2908'.
[  316.283301][T13171] erspan0: entered promiscuous mode
[  316.285361][T13171] macvtap1: entered promiscuous mode
[  316.287056][T13171] macvtap1: entered allmulticast mode
[  316.289038][T13171] erspan0: entered allmulticast mode
[  316.325059][T13171] erspan0: left allmulticast mode
[  316.326825][T13171] erspan0: left promiscuous mode
[  317.046925][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  317.049617][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  317.393804][T13220] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2931'.
[  317.504877][T13228] lo: entered allmulticast mode
[  317.516922][T13228] dvmrp8: entered allmulticast mode
[  317.533170][T13227] lo: left allmulticast mode
[  317.689385][ T5904] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  317.843701][ T5904] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  317.847207][ T5904] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  317.859321][ T5912] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  317.868491][ T5904] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  317.872934][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.875781][ T5904] usb 6-1: Product: syz
[  317.877367][ T5904] usb 6-1: Manufacturer: syz
[  317.879149][ T5904] usb 6-1: SerialNumber: syz
[  318.011933][ T5912] usb 7-1: config 0 has an invalid interface number: 170 but max is 0
[  318.015337][ T5912] usb 7-1: config 0 has no interface number 0
[  318.018193][ T5912] usb 7-1: config 0 interface 170 altsetting 0 endpoint 0x3 has an invalid bInterval 31, changing to 7
[  318.033593][ T5912] usb 7-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=17.c6
[  318.037786][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.054683][ T5912] usb 7-1: config 0 descriptor??
[  318.071167][ T5912] HFC-S_USB 7-1:0.170: probe with driver HFC-S_USB failed with error -5
[  318.094349][T13225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  318.098592][T13225] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  318.113984][ T5904] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[  318.130841][ T5904] usb 6-1: USB disconnect, device number 14
[  318.273987][ T5912] usb 7-1: USB disconnect, device number 11
[  318.597432][ T5904] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  318.750317][ T5904] usb 6-1: Using ep0 maxpacket: 8
[  318.755316][ T5904] usb 6-1: config index 0 descriptor too short (expected 301, got 72)
[  318.761176][ T5904] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  318.765669][ T5904] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  318.770453][ T5904] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  318.774677][ T5904] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  318.778926][ T5904] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  318.785623][ T5904] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  318.790272][ T5904] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  318.794168][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.885986][T13246] kAFS: No cell specified
[  319.007419][ T5904] usb 6-1: usb_control_msg returned -71
[  319.011710][ T5904] usbtmc 6-1:16.0: can't read capabilities
[  319.013885][ T5904] usbtmc 6-1:16.0: Failed to submit iin_urb
[  319.026699][ T5904] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -90
[  319.042025][ T5904] usb 6-1: USB disconnect, device number 15
[  319.586904][T13261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2947'.
[  319.906815][T13277] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2957'.
[  319.916338][T13277] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2957'.
[  319.919928][T13277] netlink: 21 bytes leftover after parsing attributes in process `syz.2.2957'.
[  320.325789][T13270] loop5: detected capacity change from 0 to 32768
[  320.331000][T13270] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2953 (13270)
[  320.343652][T13270] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  320.348144][T13270] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  320.396211][T13270] BTRFS info (device loop5): enabling ssd optimizations
[  320.400408][T13270] BTRFS info (device loop5): enabling free space tree
[  320.403657][T13270] BTRFS info (device loop5): use zstd compression, level 3
[  320.459250][ T5897] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  320.516730][ T5865] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  320.517638][T10044] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  320.629213][ T5897] usb 7-1: Using ep0 maxpacket: 8
[  320.644807][ T5897] usb 7-1: config 162 has an invalid interface number: 45 but max is 1
[  320.663097][ T5897] usb 7-1: config 162 has an invalid descriptor of length 8, skipping remainder of the config
[  320.671837][ T5897] usb 7-1: config 162 has 1 interface, different from the descriptor's value: 2
[  320.678514][ T5897] usb 7-1: config 162 has no interface number 0
[  320.700483][ T5897] usb 7-1: config 162 interface 45 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  320.707124][ T5897] usb 7-1: config 162 interface 45 has no altsetting 0
[  320.713366][ T5897] usb 7-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=32.4e
[  320.716875][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.721305][ T5897] usb 7-1: Product: syz
[  320.723065][ T5897] usb 7-1: Manufacturer: syz
[  320.728593][ T5897] usb 7-1: SerialNumber: syz
[  321.255886][T13316] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2967'.
[  321.561920][ T5904] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  321.712942][ T5904] usb 6-1: config 3 has an invalid interface number: 56 but max is 0
[  321.716169][ T5904] usb 6-1: config 3 has no interface number 0
[  321.733118][ T5904] usb 6-1: config 3 interface 56 has no altsetting 0
[  321.751273][ T5904] usb 6-1: New USB device found, idVendor=03f0, idProduct=2101, bcdDevice=80.cc
[  321.767972][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.771777][ T5904] usb 6-1: Product: syz
[  321.773540][ T5904] usb 6-1: Manufacturer: syz
[  321.775482][ T5904] usb 6-1: SerialNumber: syz
[  321.901408][ T5897] pl2303 7-1:162.45: required endpoints missing
[  321.905323][ T5897] usb 7-1: USB disconnect, device number 12
[  322.018329][ T5904] safe_serial 6-1:3.56: safe_serial converter detected
[  322.022155][ T5904] safe_serial 6-1:3.56: probe with driver safe_serial failed with error -22
[  322.028037][ T5904] usb 6-1: USB disconnect, device number 16
[  322.504123][T13338] loop6: detected capacity change from 0 to 4096
[  322.507728][T13338] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  322.560446][ T5865] Bluetooth: hci0: command 0x0406 tx timeout
[  322.568232][T13338] ntfs3(loop6): ino=1a, mi_enum_attr
[  322.578849][T13338] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  322.582594][T13338] ntfs3(loop6): ino=1a, mi_enum_attr
[  322.587972][T13338] ntfs3(loop6): Failed to initialize $Extend/$Reparse.
[  323.663305][T13365] loop5: detected capacity change from 0 to 1024
[  323.899762][T13373] syzkaller0: entered promiscuous mode
[  323.902110][T13373] syzkaller0: entered allmulticast mode
[  324.106949][T13389] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3000'.
[  324.153729][T13395] loop5: detected capacity change from 0 to 8
[  324.291917][T13405] loop5: detected capacity change from 0 to 1024
[  324.521239][T13413] random: crng reseeded on system resumption
[  324.672142][T13418] overlay: Unknown parameter '/'
[  324.851805][T13419] sp0: Synchronizing with TNC
[  325.204345][T13406] [U] 
[  325.622179][T13439] loop5: detected capacity change from 0 to 16
[  325.666019][T13441] loop5: detected capacity change from 0 to 512
[  325.673774][T13441] EXT4-fs (loop5): orphan cleanup on readonly fs
[  325.676080][T13441] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.3023: iget: bad extended attribute block 1
[  325.681629][T13441] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3023: couldn't read orphan inode 15 (err -117)
[  325.688075][T13441] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  325.719778][T10044] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.802826][T13446] netlink: 'syz.5.3025': attribute type 1 has an invalid length.
[  325.835191][ T5897] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  326.003064][ T5897] usb 7-1: Using ep0 maxpacket: 16
[  326.011828][ T5897] usb 7-1: config 0 has an invalid interface number: 126 but max is 0
[  326.015235][ T5897] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  326.021541][ T5897] usb 7-1: config 0 has no interface number 0
[  326.024129][ T5897] usb 7-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  326.031683][ T5897] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024
[  326.036165][ T5897] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  326.042655][ T5897] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  326.046622][ T5897] usb 7-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  326.052539][ T5897] usb 7-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[  326.056480][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.064279][ T5897] usb 7-1: config 0 descriptor??
[  326.069645][T13434] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  326.076527][ T5897] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  326.294034][T13458] loop5: detected capacity change from 0 to 32768
[  326.309974][ T5904] usb 7-1: USB disconnect, device number 13
[  326.336862][T13458] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  326.365792][T13458] XFS (loop5): Ending clean mount
[  326.380739][   T33] audit: type=1800 audit(1757959787.767:81): pid=13458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3031" name="file1" dev="loop5" ino=4422 res=0 errno=0
[  326.392394][T13468] 9p: Unknown Cache mode or invalid value /file0
[  326.978503][T10044] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  327.142507][   T33] audit: type=1326 audit(1757959788.527:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.5.3041" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35e58eba9 code=0x7ffc0000
[  327.170476][   T33] audit: type=1326 audit(1757959788.527:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.5.3041" exe="/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7ff35e58eba9 code=0x7ffc0000
[  327.183828][   T33] audit: type=1326 audit(1757959788.527:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.5.3041" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35e58eba9 code=0x7ffc0000
[  327.279307][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  327.408279][ T5314] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  327.479476][ T5904] usb 7-1: new full-speed USB device number 14 using dummy_hcd
[  327.568246][ T5314] usb 6-1: Using ep0 maxpacket: 16
[  327.572525][ T5314] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  327.575805][ T5314] usb 6-1: config 0 has no interface number 0
[  327.580715][ T5314] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  327.584375][ T5314] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.587974][ T5314] usb 6-1: Product: syz
[  327.590768][ T5314] usb 6-1: Manufacturer: syz
[  327.592713][ T5314] usb 6-1: SerialNumber: syz
[  327.597305][ T5314] usb 6-1: config 0 descriptor??
[  327.602627][ T5314] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  327.630578][ T5904] usb 7-1: config 8 has an invalid interface number: 223 but max is 0
[  327.634824][ T5904] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  327.639405][ T5904] usb 7-1: config 8 has no interface number 0
[  327.642547][ T5904] usb 7-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  327.651875][ T5904] usb 7-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  327.655693][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.659871][ T5904] usb 7-1: Product: syz
[  327.661541][ T5904] usb 7-1: Manufacturer: syz
[  327.663543][ T5904] usb 7-1: SerialNumber: syz
[  327.883636][ T5904] usb 7-1: USB disconnect, device number 14
[  328.212635][ T5314] gspca_spca1528: reg_w err -71
[  328.238873][ T5314] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71
[  328.244343][ T5314] usb 6-1: USB disconnect, device number 17
[  328.442008][T13527] netlink: 'syz.6.3060': attribute type 1 has an invalid length.
[  328.490400][   T33] audit: type=1326 audit(1757959789.877:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13530 comm="syz.6.3062" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb839d8eba9 code=0x7ffc0000
[  328.505939][   T33] audit: type=1326 audit(1757959789.877:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13530 comm="syz.6.3062" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb839d8eba9 code=0x7ffc0000
[  328.514500][   T33] audit: type=1326 audit(1757959789.877:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13530 comm="syz.6.3062" exe="/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fb839d8eba9 code=0x7ffc0000
[  328.529994][   T33] audit: type=1326 audit(1757959789.877:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13530 comm="syz.6.3062" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb839d8eba9 code=0x7ffc0000
[  328.543364][   T33] audit: type=1326 audit(1757959789.877:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13530 comm="syz.6.3062" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb839d8eba9 code=0x7ffc0000
[  328.814747][T13538] loop5: detected capacity change from 0 to 2048
[  328.821621][T13538] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  329.711959][ T5314] usb 6-1: new full-speed USB device number 18 using dummy_hcd
[  329.791738][T13566] ==================================================================
[  329.795208][T13566] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  329.798593][T13566] Read of size 4 at addr ffff8880243d7244 by task syz.2.3077/13566
[  329.803307][T13566] 
[  329.804294][T13566] CPU: 0 UID: 0 PID: 13566 Comm: syz.2.3077 Not tainted syzkaller #0 PREEMPT(full) 
[  329.804315][T13566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  329.804336][T13566] Call Trace:
[  329.804344][T13566]  <TASK>
[  329.804352][T13566]  dump_stack_lvl+0x189/0x250
[  329.804384][T13566]  ? __kasan_check_byte+0x12/0x40
[  329.804431][T13566]  ? __pfx_dump_stack_lvl+0x10/0x10
[  329.804450][T13566]  ? lock_release+0x4b/0x3e0
[  329.804473][T13566]  ? __virt_addr_valid+0x4a5/0x5c0
[  329.804493][T13566]  print_report+0xca/0x240
[  329.804507][T13566]  ? xfrm_alloc_spi+0x570/0xf30
[  329.804535][T13566]  kasan_report+0x118/0x150
[  329.804555][T13566]  ? xfrm_alloc_spi+0x570/0xf30
[  329.804576][T13566]  xfrm_alloc_spi+0x570/0xf30
[  329.804595][T13566]  ? xfrm_alloc_spi+0x2a0/0xf30
[  329.804618][T13566]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  329.804634][T13566]  ? xfrm_find_acq+0x87/0xa0
[  329.804653][T13566]  xfrm_alloc_userspi+0x70b/0xc90
[  329.804676][T13566]  ? apparmor_capable+0x137/0x1b0
[  329.804694][T13566]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  329.804713][T13566]  ? __nla_parse+0x40/0x60
[  329.804730][T13566]  xfrm_user_rcv_msg+0x7a3/0xab0
[  329.804751][T13566]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  329.804780][T13566]  ? __pfx___mutex_trylock_common+0x10/0x10
[  329.804798][T13566]  ? rcu_is_watching+0x15/0xb0
[  329.804812][T13566]  ? trace_contention_end+0x39/0x120
[  329.804828][T13566]  ? __mutex_lock+0x335/0x1350
[  329.804846][T13566]  netlink_rcv_skb+0x208/0x470
[  329.804860][T13566]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  329.804881][T13566]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  329.804900][T13566]  ? netlink_deliver_tap+0x2e/0x1b0
[  329.804916][T13566]  ? netlink_deliver_tap+0x2e/0x1b0
[  329.804931][T13566]  xfrm_netlink_rcv+0x79/0x90
[  329.804947][T13566]  netlink_unicast+0x82f/0x9e0
[  329.804969][T13566]  ? __pfx_netlink_unicast+0x10/0x10
[  329.804991][T13566]  ? netlink_sendmsg+0x642/0xb30
[  329.805005][T13566]  ? skb_put+0x11b/0x210
[  329.805021][T13566]  netlink_sendmsg+0x805/0xb30
[  329.805038][T13566]  ? __pfx_netlink_sendmsg+0x10/0x10
[  329.805052][T13566]  ? aa_sock_msg_perm+0xf1/0x1d0
[  329.805068][T13566]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  329.805084][T13566]  ? __pfx_netlink_sendmsg+0x10/0x10
[  329.805099][T13566]  __sock_sendmsg+0x21c/0x270
[  329.805120][T13566]  ____sys_sendmsg+0x505/0x830
[  329.805136][T13566]  ? __pfx_____sys_sendmsg+0x10/0x10
[  329.805164][T13566]  ? import_iovec+0x74/0xa0
[  329.805184][T13566]  ___sys_sendmsg+0x21f/0x2a0
[  329.805203][T13566]  ? __pfx____sys_sendmsg+0x10/0x10
[  329.805229][T13566]  ? __fget_files+0x2a/0x420
[  329.805240][T13566]  ? __fget_files+0x3a0/0x420
[  329.805255][T13566]  __x64_sys_sendmsg+0x19b/0x260
[  329.805274][T13566]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  329.805295][T13566]  ? rcu_is_watching+0x15/0xb0
[  329.805310][T13566]  ? do_syscall_64+0xbe/0x3b0
[  329.805325][T13566]  do_syscall_64+0xfa/0x3b0
[  329.805337][T13566]  ? lockdep_hardirqs_on+0x9c/0x150
[  329.805351][T13566]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.805367][T13566]  ? exc_page_fault+0x9f/0xf0
[  329.805381][T13566]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.805397][T13566] RIP: 0033:0x7fb4e798eba9
[  329.805438][T13566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  329.805451][T13566] RSP: 002b:00007fb4e8846038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  329.805468][T13566] RAX: ffffffffffffffda RBX: 00007fb4e7bd5fa0 RCX: 00007fb4e798eba9
[  329.805480][T13566] RDX: 000000000400c8c0 RSI: 0000200000000200 RDI: 0000000000000006
[  329.805491][T13566] RBP: 00007fb4e7a11e19 R08: 0000000000000000 R09: 0000000000000000
[  329.805500][T13566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  329.805510][T13566] R13: 00007fb4e7bd6038 R14: 00007fb4e7bd5fa0 R15: 00007ffd57a05fa8
[  329.805525][T13566]  </TASK>
[  329.805530][T13566] 
[  329.959223][T13566] Allocated by task 12076:
[  329.961150][T13566]  kasan_save_track+0x3e/0x80
[  329.963137][T13566]  __kasan_slab_alloc+0x6c/0x80
[  329.965168][T13566]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  329.967418][T13566]  xfrm_state_alloc+0x24/0x2f0
[  329.969423][T13566]  __find_acq_core+0x8a7/0x1c00
[  329.971417][T13566]  xfrm_find_acq+0x78/0xa0
[  329.973169][T13566]  xfrm_alloc_userspi+0x6b3/0xc90
[  329.975112][T13566]  xfrm_user_rcv_msg+0x7a3/0xab0
[  329.977177][T13566]  netlink_rcv_skb+0x208/0x470
[  329.979215][T13566]  xfrm_netlink_rcv+0x79/0x90
[  329.981247][T13566]  netlink_unicast+0x82f/0x9e0
[  329.983234][T13566]  netlink_sendmsg+0x805/0xb30
[  329.985186][T13566]  __sock_sendmsg+0x21c/0x270
[  329.987183][T13566]  ____sys_sendmsg+0x505/0x830
[  329.989171][T13566]  ___sys_sendmsg+0x21f/0x2a0
[  329.989952][ T5314] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  329.990916][T13566]  __x64_sys_sendmsg+0x19b/0x260
[  329.990938][T13566]  do_syscall_64+0xfa/0x3b0
[  329.990954][T13566]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.990969][T13566] 
[  329.990974][T13566] Freed by task 5314:
[  329.990982][T13566]  kasan_save_track+0x3e/0x80
[  329.994824][ T5314] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  329.996605][T13566]  kasan_save_free_info+0x46/0x50
[  329.996624][T13566]  __kasan_slab_free+0x5b/0x80
[  329.996641][T13566]  kmem_cache_free+0x18f/0x400
[  329.996660][T13566]  xfrm_state_gc_task+0x52d/0x6b0
[  329.996681][T13566]  process_scheduled_works+0xae1/0x17b0
[  329.998559][ T5314] usb 6-1: config 0 interface 0 has no altsetting 0
[  330.000769][T13566]  worker_thread+0x8a0/0xda0
[  330.001792][ T5314] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00
[  330.003311][T13566]  kthread+0x711/0x8a0
[  330.005140][ T5314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.010156][T13566]  ret_from_fork+0x439/0x7d0
[  330.010177][T13566]  ret_from_fork_asm+0x1a/0x30
[  330.010191][T13566] 
[  330.010195][T13566] The buggy address belongs to the object at ffff8880243d7180
[  330.010195][T13566]  which belongs to the cache xfrm_state of size 928
[  330.010204][T13566] The buggy address is located 196 bytes inside of
[  330.010204][T13566]  freed 928-byte region [ffff8880243d7180, ffff8880243d7520)
[  330.010212][T13566] 
[  330.010216][T13566] The buggy address belongs to the physical page:
[  330.010222][T13566] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880243d7180 pfn:0x243d4
[  330.010232][T13566] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  330.010239][T13566] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  330.010248][T13566] page_type: f5(slab)
[  330.010256][T13566] raw: 00fff00000000040 ffff88801c7a8b40 0000000000000000 0000000000000001
[  330.014609][ T5314] usb 6-1: config 0 descriptor??
[  330.015725][T13566] raw: ffff8880243d7180 00000000800e0003 00000000f5000000 0000000000000000
[  330.015735][T13566] head: 00fff00000000040 ffff88801c7a8b40 0000000000000000 0000000000000001
[  330.015743][T13566] head: ffff8880243d7180 00000000800e0003 00000000f5000000 0000000000000000
[  330.015750][T13566] head: 00fff00000000002 ffffea000090f501 00000000ffffffff 00000000ffffffff
[  330.015757][T13566] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  330.015761][T13566] page dumped because: kasan: bad access detected
[  330.015768][T13566] page_owner tracks the page as allocated
[  330.015773][T13566] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6075, tgid 6067 (syz.0.54), ts 75050841597, free_ts 75017993528
[  330.093978][T13566]  post_alloc_hook+0x240/0x2a0
[  330.095510][T13566]  get_page_from_freelist+0x21e4/0x22c0
[  330.097380][T13566]  __alloc_frozen_pages_noprof+0x181/0x370
[  330.099200][T13566]  alloc_pages_mpol+0x232/0x4a0
[  330.100948][T13566]  allocate_slab+0x8a/0x370
[  330.102505][T13566]  ___slab_alloc+0xbeb/0x1420
[  330.103963][T13566]  kmem_cache_alloc_noprof+0x283/0x3c0
[  330.105786][T13566]  xfrm_state_alloc+0x24/0x2f0
[  330.107653][T13566]  xfrm_state_find+0x37d4/0x5400
[  330.109337][T13566]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  330.111456][T13566]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  330.113589][T13566]  xfrm_lookup_route+0x3c/0x1c0
[  330.115659][T13566]  udp_sendmsg+0x142e/0x2170
[  330.117110][T13566]  __sock_sendmsg+0x19c/0x270
[  330.118619][T13566]  ____sys_sendmsg+0x52d/0x830
[  330.120334][T13566]  ___sys_sendmsg+0x21f/0x2a0
[  330.121902][T13566] page last free pid 6075 tgid 6067 stack trace:
[  330.123764][T13566]  __free_frozen_pages+0xbc4/0xd30
[  330.125357][T13566]  stack_depot_save_flags+0x436/0x860
[  330.127719][T13566]  kasan_save_track+0x4f/0x80
[  330.129401][T13566]  __kasan_slab_alloc+0x6c/0x80
[  330.131112][T13566]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  330.132677][T13566]  dst_alloc+0x105/0x170
[  330.134148][T13566]  ipv4_blackhole_route+0x32/0x680
[  330.136100][T13566]  xfrm_lookup_route+0xd7/0x1c0
[  330.137887][ T5897] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  330.140747][T13566]  __ip4_datagram_connect+0x9a5/0x1270
[  330.140774][T13566]  udp_connect+0x33/0x1f0
[  330.140788][T13566]  __sys_connect+0x316/0x440
[  330.140797][T13566]  __x64_sys_connect+0x7a/0x90
[  330.140804][T13566]  do_syscall_64+0xfa/0x3b0
[  330.140813][T13566]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.140827][T13566] 
[  330.152661][T13566] Memory state around the buggy address:
[  330.154911][T13566]  ffff8880243d7100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  330.158118][T13566]  ffff8880243d7180: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  330.160697][T13566] >ffff8880243d7200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  330.163230][T13566]                                            ^
[  330.165497][T13566]  ffff8880243d7280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  330.167888][T13566]  ffff8880243d7300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  330.170238][T13566] ==================================================================
[  330.173315][T13566] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  330.176368][T13566] CPU: 0 UID: 0 PID: 13566 Comm: syz.2.3077 Not tainted syzkaller #0 PREEMPT(full) 
[  330.180285][T13566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  330.184411][T13566] Call Trace:
[  330.185857][T13566]  <TASK>
[  330.187112][T13566]  dump_stack_lvl+0x99/0x250
[  330.189132][T13566]  ? __asan_memcpy+0x40/0x70
[  330.191115][T13566]  ? __pfx_dump_stack_lvl+0x10/0x10
[  330.193333][T13566]  ? __pfx__printk+0x10/0x10
[  330.195267][T13566]  vpanic+0x281/0x750
[  330.196899][T13566]  ? __pfx_vpanic+0x10/0x10
[  330.198785][T13566]  ? irqentry_exit+0x74/0x90
[  330.200614][T13566]  panic+0xb9/0xc0
[  330.201977][T13566]  ? __pfx_panic+0x10/0x10
[  330.203494][T13566]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  330.205482][T13566]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  330.207810][T13566]  ? xfrm_alloc_spi+0x570/0xf30
[  330.209766][T13566]  check_panic_on_warn+0x89/0xb0
[  330.211720][T13566]  ? xfrm_alloc_spi+0x570/0xf30
[  330.213327][T13566]  end_report+0x78/0x160
[  330.214695][T13566]  kasan_report+0x129/0x150
[  330.216267][T13566]  ? xfrm_alloc_spi+0x570/0xf30
[  330.218243][T13566]  xfrm_alloc_spi+0x570/0xf30
[  330.220115][T13566]  ? xfrm_alloc_spi+0x2a0/0xf30
[  330.222041][T13566]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  330.224070][T13566]  ? xfrm_find_acq+0x87/0xa0
[  330.225688][T13566]  xfrm_alloc_userspi+0x70b/0xc90
[  330.227913][T13566]  ? apparmor_capable+0x137/0x1b0
[  330.230107][T13566]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  330.232402][T13566]  ? __nla_parse+0x40/0x60
[  330.234140][T13566]  xfrm_user_rcv_msg+0x7a3/0xab0
[  330.236269][T13566]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  330.238568][T13566]  ? __pfx___mutex_trylock_common+0x10/0x10
[  330.240740][T13566]  ? rcu_is_watching+0x15/0xb0
[  330.242347][T13566]  ? trace_contention_end+0x39/0x120
[  330.244156][T13566]  ? __mutex_lock+0x335/0x1350
[  330.245618][T13566]  netlink_rcv_skb+0x208/0x470
[  330.247399][T13566]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  330.248973][T13566]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  330.250516][T13566]  ? netlink_deliver_tap+0x2e/0x1b0
[  330.252286][T13566]  ? netlink_deliver_tap+0x2e/0x1b0
[  330.254500][T13566]  xfrm_netlink_rcv+0x79/0x90
[  330.256508][T13566]  netlink_unicast+0x82f/0x9e0
[  330.258401][T13566]  ? __pfx_netlink_unicast+0x10/0x10
[  330.260481][T13566]  ? netlink_sendmsg+0x642/0xb30
[  330.262409][T13566]  ? skb_put+0x11b/0x210
[  330.263927][T13566]  netlink_sendmsg+0x805/0xb30
[  330.265725][T13566]  ? __pfx_netlink_sendmsg+0x10/0x10
[  330.267890][T13566]  ? aa_sock_msg_perm+0xf1/0x1d0
[  330.269987][T13566]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  330.272218][T13566]  ? __pfx_netlink_sendmsg+0x10/0x10
[  330.274478][T13566]  __sock_sendmsg+0x21c/0x270
[  330.276350][T13566]  ____sys_sendmsg+0x505/0x830
[  330.278193][T13566]  ? __pfx_____sys_sendmsg+0x10/0x10
[  330.280465][T13566]  ? import_iovec+0x74/0xa0
[  330.281935][T13566]  ___sys_sendmsg+0x21f/0x2a0
[  330.283856][T13566]  ? __pfx____sys_sendmsg+0x10/0x10
[  330.285870][T13566]  ? __fget_files+0x2a/0x420
[  330.287538][T13566]  ? __fget_files+0x3a0/0x420
[  330.289266][T13566]  __x64_sys_sendmsg+0x19b/0x260
[  330.290761][T13566]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  330.292804][T13566]  ? rcu_is_watching+0x15/0xb0
[  330.294621][T13566]  ? do_syscall_64+0xbe/0x3b0
[  330.296124][T13566]  do_syscall_64+0xfa/0x3b0
[  330.297549][T13566]  ? lockdep_hardirqs_on+0x9c/0x150
[  330.299719][T13566]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.302320][T13566]  ? exc_page_fault+0x9f/0xf0
[  330.304392][T13566]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.306911][T13566] RIP: 0033:0x7fb4e798eba9
[  330.308666][T13566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  330.315517][T13566] RSP: 002b:00007fb4e8846038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  330.318274][T13566] RAX: ffffffffffffffda RBX: 00007fb4e7bd5fa0 RCX: 00007fb4e798eba9
[  330.320969][T13566] RDX: 000000000400c8c0 RSI: 0000200000000200 RDI: 0000000000000006
[  330.323972][T13566] RBP: 00007fb4e7a11e19 R08: 0000000000000000 R09: 0000000000000000
[  330.327290][T13566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  330.330467][T13566] R13: 00007fb4e7bd6038 R14: 00007fb4e7bd5fa0 R15: 00007ffd57a05fa8
[  330.333723][T13566]  </TASK>
[  330.335575][T13566] Kernel Offset: disabled
[  330.337340][T13566] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:01:19  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000012c2 RDI=00000000000012c3 RBP=00000000000003f8 RSP=ffffc90002b0e9f0
R8 =ffff88801b360237 R9 =1ffff1100366c046 R10=dffffc0000000000 R11=ffffffff854fae30
R12=dffffc0000000000 R13=ffffffff99b00902 R14=ffffffff99df5440 R15=0000000000000000
RIP=ffffffff854faeac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb4e88466c0 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb839c5f180 CR3=0000000037bd6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fb4e7ba7498 00007fb4e7ba7470 XMM03=00007fb4e7ba74a8 00007fb4e7ba74a0
XMM04=00007fb4e870d100 00007fb4e7ba7460 XMM05=00007fb4e7ba7478 00007fb4e7ba74c0
XMM06=00007fb4e7ba74b8 00007fb4e7ba74b0 XMM07=00007fb4e7ba74a8 00007fb4e7ba74a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fb4e7a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=e77db20308a5f900 RBX=ffffffff819693f8 RCX=e77db20308a5f900 RDX=0000000000000001
RSI=ffffffff8d9ba2fa RDI=ffffffff8be33f80 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa3a630 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b7a53f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000562376e25000 CR3=0000000111d9c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
