last executing test programs:

7m56.489339133s ago: executing program 2 (id=1017):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e0000002500"})

7m56.408130567s ago: executing program 2 (id=1019):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x328, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x314, 0x1, [@m_ife={0x78, 0xb, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x8, 0x1ff, 0x5}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x1b, 0x6, "ea24464decc1b2772ce0e9d802b5374a8d6638c9f5d62d"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x13c, 0x15, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x2, 0x2, 0x1000, 0x8}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x80000001, 0x8, 0x1, 0xa}, 0x33}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x10080, 0xffffffffffffffff, 0x48fa, 0x2}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x3e5, 0x4, 0x3, 0x1}, 0x3e}}]}, {0x9d, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e260d3f73821a372961e6acf9f73f3ab3a6d19010c501877fc1473ff3fe388a502702c7e7d4eb99cd479f52bef8df8dc2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0xac, 0xa, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0xa}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x6, 0x0, 0xfffff001, 0x7ff}}]}, {0x5d, 0x6, "f6092f7a4b565910eaea00152e8cfa91b81b9be0bedaf0807e801d1985c795b7e4202c9f465124f2e529b4fb562ba1dd87bc7fceb7ee266c3be4bc520f37effbf3ae300a0b39f90b365d461992573d9652da0b804fcaa960aa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbmod={0xb0, 0xd, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7fff, 0x6, 0x2, 0xa96, 0x9}, 0x5}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x6, 0xffffffffffffffff, 0x4, 0x7}, 0xb}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

7m56.349395012s ago: executing program 2 (id=1022):
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, &(0x7f0000000680)=""/4096, 0x0, 0x0, 0x2}, 0x38)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/242, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/60, 0xeeee0000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

7m56.258826926s ago: executing program 2 (id=1027):
socket(0x200000000000011, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000002a40)={[{}, {@uid}, {@creator={'creator', 0x3d, "e152ecf5"}}, {@nodecompose}, {@umask={'umask', 0x3d, 0x10001}}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x3, 0x6b2, &(0x7f0000000280)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000a00)={0x2020}, 0x2020)

7m56.106057793s ago: executing program 2 (id=1029):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r1=>0x0})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000a80), 0x20300, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x2, r1})

7m55.434375634s ago: executing program 2 (id=1031):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e2473", 0x32}], 0x1}, 0x40)

7m55.281623836s ago: executing program 32 (id=1031):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e2473", 0x32}], 0x1}, 0x40)

5m23.090309302s ago: executing program 3 (id=2780):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x1000000, &(0x7f0000000040)={[{@usrjquota}, {}]}, 0x0, 0x248, &(0x7f0000000940)="$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")
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0)

5m22.971305194s ago: executing program 3 (id=2783):
r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x795, 0x0)
ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0})

5m22.862724369s ago: executing program 3 (id=2785):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000100)={[{@utf8}, {@umask={'umask', 0x3d, 0x5}}, {@namecase}, {}, {@fmask={'fmask', 0x3d, 0xab}}, {@time_offset}, {@fmask={'fmask', 0x3d, 0x6}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@allow_utime={'allow_utime', 0x3d, 0xce38}}]}, 0x1, 0x1528, &(0x7f00000037c0)="$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")
mount$nfs(&(0x7f0000000040)='\x8b\xb8\x98\x97\xb9\xdc\x80?!\xbc\x9a\xdf\xbc\x01\xec\xd8!Y\xc3?\xa5\x1d\x1d}8\xf0T?dw\xe2i\xe8q: \xed\xd5!\x8d+\xda\x84\xea\x8d\x15\xdd\t\v\x11\x97\xc9\x06\xba\x8f\x91e(\r\x1a\xbfZX\x16', &(0x7f0000000500)='./file0\x00', 0x0, 0xa55000, 0x0)

5m22.764037211s ago: executing program 3 (id=2786):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000300)={[{@volume={'volume', 0x3d, 0x3e}}, {@gid}, {@dmode={'dmode', 0x3d, 0x4}}, {@rootdir={'rootdir', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@unhide}, {@noadinicb}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@longad}]}, 0x1, 0xc32, &(0x7f0000000e00)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x1a06496, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})

5m22.298761184s ago: executing program 3 (id=2789):
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00')
pread64(r0, &(0x7f0000000080)=""/17, 0x11, 0xf0b)

5m22.146144206s ago: executing program 3 (id=2790):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10, &(0x7f00000005c0)={[{@debug}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x671}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@noblock_validity}, {@dax}, {@bh}, {@nodiscard}]}, 0x4, 0x4d7, &(0x7f0000000a40)="$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")

5m21.916830796s ago: executing program 33 (id=2790):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10, &(0x7f00000005c0)={[{@debug}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x671}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@noblock_validity}, {@dax}, {@bh}, {@nodiscard}]}, 0x4, 0x4d7, &(0x7f0000000a40)="$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")

4m53.830655503s ago: executing program 4 (id=3053):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x20}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85}, 0x20040040)

4m53.763122296s ago: executing program 4 (id=3054):
r0 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffff}, 0x80, 0x0}, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0)

4m53.762900516s ago: executing program 4 (id=3055):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x14, 0x9, 0x0, 0xffffffffffffffff, 0x10}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x50)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20)

4m53.711612034s ago: executing program 4 (id=3056):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000740)='./file0\x00', 0x800, &(0x7f0000000080)={[{@rodir}, {@numtail}, {@shortname_winnt}, {@uni_xlate}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@shortname_mixed}, {@shortname_win95}, {@uni_xlateno}, {@uni_xlate}]}, 0x5, 0x271, &(0x7f0000000780)="$eJzs3T1rW1cYB/BHtlzJhiINBdNS6C1dOgnbpbtMcaFU0NKioZ1iYpkEyzHYYEgG25vJd0i+QjJmDWQIWfMFQiA4gSxxJg8BBeX6RXIkxUpyo7z8fosfzn3+nHPky7148NG571dXltY2lvf396JYzEW+GtU4yEU5xmI8UjsBAHxODlqteNZKnS2Ry3pJAEDGhn//AwCfukHv/9zO8djfH35lAEBW3unv/7FMlgQAZOzf//7/c75WW/gnSYoRq7ub9c16+jO9Pr8cF6MZjZiJUryIaB1L69//qC3MJG2Py1Fc3R5L89ub9fHu/GyUotw7P5ukot7OHeUnYuow/2AqGjEXpfimd36uZ/6r+PmnjvkrUYr752MtmrEU7WyaL0TE1myS/PZX7VS+8KoPAAAAAAAAAAAAAAAAAAAAAACyUEmOlbvPv0nP76lU+l1P853nA00OOh+otX3qfJ18fJcf7d4BAAAAAAAAAAAAAAAAAADgY7Fx+crKYrPZWB9UXLp3485eIQ28sXlwkTucd7jU7sCeybPt4lTx9Y+PrvW6VIjCsJ/P2xUTEdE5khxOefuHDCd9X8XdvQvf/rIx/Wu/nsh3jlxtb7Wrp8+NlM/qA39aiujbUxz6huwsbh4V1eev9RzdSo31yVH/4qavVxdvbT18ctbUgIdGazyLRxEAAAAAAAAAAAAAAAAAAHzxTv7pd9QrAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDROfn+/2GLQnSNFPs274x6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DIAAP//soOVJg==")
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

4m53.660612912s ago: executing program 4 (id=3057):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000940)={0x60, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1}})

4m53.470302067s ago: executing program 4 (id=3058):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0xbe6}}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@acl}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x31)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
truncate(&(0x7f00000001c0)='./file1\x00', 0x200)
r1 = open(&(0x7f0000000100)='./file1\x00', 0x909042, 0xb9)
write$P9_RFLUSH(r1, 0x0, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0)
r2 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r2, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000500)='./bus\x00', 0x1000410, &(0x7f0000000b00)={[{@grpid}, {@bsdgroups}, {@dax_inode}, {@nobarrier}], [{@measure}, {@uid_lt={'uid<', 0xee00}}, {@euid_lt}, {@dont_hash}, {@euid_eq}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@dont_appraise}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
syz_pidfd_open(0x0, 0x0)
fallocate(r1, 0x10, 0x0, 0x7000000)

4m53.339104659s ago: executing program 34 (id=3058):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0xbe6}}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@acl}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x31)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
truncate(&(0x7f00000001c0)='./file1\x00', 0x200)
r1 = open(&(0x7f0000000100)='./file1\x00', 0x909042, 0xb9)
write$P9_RFLUSH(r1, 0x0, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0)
r2 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r2, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000500)='./bus\x00', 0x1000410, &(0x7f0000000b00)={[{@grpid}, {@bsdgroups}, {@dax_inode}, {@nobarrier}], [{@measure}, {@uid_lt={'uid<', 0xee00}}, {@euid_lt}, {@dont_hash}, {@euid_eq}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@dont_appraise}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
syz_pidfd_open(0x0, 0x0)
fallocate(r1, 0x10, 0x0, 0x7000000)

2m34.433182401s ago: executing program 1 (id=4764):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000feffffff850000007100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2m34.432968506s ago: executing program 1 (id=4765):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000003100), r0)
sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000003340)={0x0, 0x0, &(0x7f0000003300)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="c37d29bd7000fbdbdf270500000008000100db"], 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x8000)

2m34.32449944s ago: executing program 1 (id=4766):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f00000014c0)=""/4098, &(0x7f0000000240)=0x1002)

2m34.32422559s ago: executing program 1 (id=4767):
syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0x1004000, &(0x7f0000000500)=ANY=[@ANYBLOB="6c617374626c6f636b3d30303030303030303030303030303030303030302c756e64656c6574652c756e64656c6574652c6c6f6e6761642c756e686964652c7569643d666f726765742c00020000000000002c696f636861727365743d757466382c7569643d666f726765742c696f636861727365743d64656661756c742c6e6f6164696e6963622c6e6f7374726963742c77657373696f6e3d30303030303030303030303030303030303030302c706172746974696f6e0100000030303030303030303030303030303030362c00"], 0x1, 0xc34, &(0x7f0000001bc0)="$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")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1)
creat(&(0x7f0000000300)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x4, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a010000000000000030aa2ae2c084a0ea1000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80)
getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000)

2m34.20566133s ago: executing program 1 (id=4770):
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x88, @private=0xa010102, 0x4e24, 0x1, 'rr\x00', 0x10, 0x0, 0x1b}, {@local, 0x4e22, 0x0, 0x3, 0x9, 0xf}}, 0x44)

2m33.855475631s ago: executing program 1 (id=4774):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0xa6, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

2m33.68654103s ago: executing program 35 (id=4774):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0xa6, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

4.035271484s ago: executing program 5 (id=6653):
syz_usb_connect(0x2, 0x24, &(0x7f0000002540)={{0x12, 0x1, 0x300, 0x88, 0xf7, 0x4e, 0x40, 0x458, 0x7005, 0xb97d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x3b, 0x0, 0x5, [{{0x9, 0x4, 0xfa, 0x7, 0x0, 0xa4, 0xd3, 0x4e, 0xfc}}]}}]}}, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0})

3.790564517s ago: executing program 6 (id=6659):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup, 0xffffffffffffffff, 0x10, 0x2004}, 0x20)

3.724290565s ago: executing program 6 (id=6660):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f00000000c0)={[{@resgid}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x497, &(0x7f0000001540)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x187842, 0x0)

3.587380298s ago: executing program 6 (id=6661):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000580), 0x11)

3.523023459s ago: executing program 6 (id=6662):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pivot_root(0x0, 0x0)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x10000)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000000c0)={0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, "0400"})
sendmsg$inet(0xffffffffffffffff, 0x0, 0x410)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080), 0x0)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="b70000003325e34e5ea10a3772c71b1c6397c291d891"], 0x8)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r1, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x890c, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))

3.40548551s ago: executing program 5 (id=6663):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e295f120460d780092820102030109021b00010200000009042d000145efe40009050103"], 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
open(0x0, 0x84242, 0x1df2a23c5997fa7f)
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000008900)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==")
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000)
write$dsp(r0, &(0x7f0000000080), 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc)

3.265260949s ago: executing program 6 (id=6664):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0xe}}}}]}, 0x38}}, 0x0)

3.264920712s ago: executing program 6 (id=6665):
syz_usb_connect(0x2, 0x9a2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmmsg$alg(r5, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
sendmsg$xdp(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000009c0)="22613fdba0da05ae867cac56aab11ac819a18aa6c99d7fdee052ea631826c069d9fb7bfb1240a1b5f513daa7ab849014b47dea4039bc6b7006dc77e7d301078cd285f43e95002dab5758ce7e643c117ec7f7f7de04bd2940d7ee88f32c19d3fc098c6338fc038ff837a00b9dd4174284a1408ba88cb80fdb68c80e92dea7e1ab", 0x80}], 0x1, 0x0, 0x0, 0x20000010}, 0x840)
recvmmsg(r5, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/135, 0x87}], 0x1}, 0x10000}], 0x1, 0x28101, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1401, 0x4, 0x70bd2d, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x8005}, 0x400c4)
ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x50, 0x1801, 0x0, 0x0}, {0x5, 0x4000, 0x0, 0x0}, {0x795, 0xd201, 0x0, 0x0}], 0x3})

899.884027ms ago: executing program 0 (id=6675):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

899.491333ms ago: executing program 0 (id=6676):
syz_mount_image$jfs(&(0x7f0000000380), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2208088, &(0x7f0000002440)=ANY=[@ANYBLOB="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", @ANYRES8=0x0, @ANYRES8, @ANYRESOCT=0x0, @ANYRES16], 0x1, 0x5e97, &(0x7f0000005e00)="$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")
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40)
unlink(&(0x7f0000000180)='./file1\x00')
creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12)
symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1)
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10)
creat(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x36)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

670.450073ms ago: executing program 0 (id=6677):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000790028000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80)

594.076136ms ago: executing program 0 (id=6678):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x28, 0xb, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0xc060)

593.83999ms ago: executing program 0 (id=6679):
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2, 0x0, 0xfffffffd}}, 0x2e)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\bg\x00\x00\x00\x00\x00'])
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)

518.835796ms ago: executing program 0 (id=6680):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@int=0x1, 0x4)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4004001)

100.533196ms ago: executing program 5 (id=6681):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r1, 0x1, 0x6, @remote}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x4, @multicast}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @remote}, 0x10)

100.28849ms ago: executing program 5 (id=6682):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000206050000000000000000000000000a05000400000000000900020073797a30000000000c00078008000600000000d2050005000000000005000100060000000d000300686173683a6d6163"], 0x54}}, 0x0)

331.138µs ago: executing program 5 (id=6683):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10)
bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r0, 0x0, 0x0)

0s ago: executing program 5 (id=6684):
r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x759, &(0x7f0000001100)={[{@noinit_itable}, {@jqfmt_vfsv1}, {@discard}, {@errors_remount}, {@abort, 0x0}, {@noload}, {@usrquota}, {@mb_optimize_scan}, {@resuid}, {@acl}, {@bsdgroups}, {@jqfmt_vfsold}], [], 0x2c}, 0x0, 0x4f6, &(0x7f0000000c00)="$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")
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, 0x0)

kernel console output (not intermixed with test programs):

 250 has no interface number 0
[  462.990513][ T5980] usb 6-1: config 250 interface 4 altsetting 43 endpoint 0x6 has invalid wMaxPacketSize 0
[  463.000036][ T5980] usb 6-1: config 250 interface 4 has no altsetting 0
[  463.119548][ T5980] usb 6-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=1b.8a
[  463.139955][ T5980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.171067][ T5980] usb 6-1: Product: syz
[  463.183397][ T5980] usb 6-1: Manufacturer: syz
[  463.193700][ T5980] usb 6-1: SerialNumber: syz
[  463.506946][ T5980] powermate 6-1:250.4: probe with driver powermate failed with error -5
[  463.512338][ T5980] usb 6-1: USB disconnect, device number 13
[  463.863690][T17020] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4281'.
[  463.959639][T17022] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  463.966762][T17022] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  463.972010][T17022] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  463.985923][T17022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4282'.
[  464.585962][T17037] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253
[  464.588471][T17037] PKCS7: Only support pkcs7_signedData type
[  464.853254][T17047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4291'.
[  465.132661][ T3144] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[  465.297562][ T3144] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  465.301289][ T3144] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  465.304662][ T3144] usb 6-1: Product: syz
[  465.306472][ T3144] usb 6-1: Manufacturer: syz
[  465.308335][ T3144] usb 6-1: SerialNumber: syz
[  465.312378][ T3144] usb 6-1: config 0 descriptor??
[  465.536565][ T3144] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  466.146158][T17061] ptrace attach of "/syz-executor exec"[5936] was attempted by ""[17061]
[  466.338791][T17073] netlink: 'syz.0.4304': attribute type 10 has an invalid length.
[  466.342806][T17073] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4304'.
[  466.346750][T17073] bond0: option arp_all_targets: invalid value (196616)
[  466.399520][ T3144] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  466.411578][ T3144] usb 6-1: USB disconnect, device number 14
[  466.964234][T17114] loop5: detected capacity change from 0 to 764
[  466.973786][T17114] Symlink component flag not implemented
[  466.977202][T17114] Symlink component flag not implemented (116)
[  467.118919][T17119] loop5: detected capacity change from 0 to 4096
[  467.123089][T17119] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  467.500345][T17137] loop5: detected capacity change from 0 to 32768
[  467.507082][T17137] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4334 (17137)
[  467.514457][T17137] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  467.518888][T17137] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  467.522337][T17137] BTRFS info (device loop5): using free-space-tree
[  467.574883][T13823] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  467.596963][ T5998] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  467.806071][ T5998] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  467.809626][ T5998] usb 2-1: config 0 has no interface number 0
[  467.830904][ T5998] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  467.834937][ T5998] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  467.841060][ T5998] usb 2-1: Product: syz
[  467.843167][ T5998] usb 2-1: Manufacturer: syz
[  467.845175][ T5998] usb 2-1: SerialNumber: syz
[  467.856645][T17156] loop5: detected capacity change from 0 to 2048
[  467.856680][ T5998] usb 2-1: config 0 descriptor??
[  467.863204][T17156] EXT4-fs: Ignoring removed bh option
[  467.876836][T17156] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  467.898535][   T33] audit: type=1800 audit(1755254553.232:293): pid=17156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4336" name="file1" dev="loop5" ino=15 res=0 errno=0
[  467.928006][T13823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  468.024771][T17168] loop5: detected capacity change from 0 to 1024
[  468.089930][ T5998] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  468.096701][ T5998] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  468.101475][ T5998] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  468.121002][ T5998] usb 2-1: media controller created
[  468.143720][ T5998] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  468.296126][   T33] audit: type=1326 audit(1755254553.597:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17183 comm="syz.0.4348" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2490b8ebe9 code=0x0
[  468.310461][ T5998] i2c i2c-2: ec100: i2c rd failed=-71 reg=33
[  468.334002][ T5998] usb 2-1: USB disconnect, device number 54
[  468.427240][ T5980] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  468.587716][ T5980] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  468.591854][ T5980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  468.599967][ T5980] usb 6-1: config 0 descriptor??
[  468.973884][T17191] 9pnet: Found fid 0 not clunked
[  469.036683][ T5980] hackrf 6-1:0.0: usb_control_msg() failed -71 request 0f
[  469.039605][ T5980] hackrf 6-1:0.0: Could not detect board
[  469.041655][ T5980] hackrf 6-1:0.0: probe with driver hackrf failed with error -71
[  469.046272][ T5980] usb 6-1: USB disconnect, device number 15
[  469.894283][T17211] netlink: 'syz.5.4359': attribute type 7 has an invalid length.
[  469.897100][T17211] netlink: 'syz.5.4359': attribute type 8 has an invalid length.
[  470.369077][T17234] loop1: detected capacity change from 0 to 65
[  470.377489][T17234] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway
[  470.695572][T17265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4384'.
[  470.919971][ T5980] usb 1-1: new low-speed USB device number 56 using dummy_hcd
[  471.093531][T17279] fuse: Bad value for 'fd'
[  471.145002][ T5980] usb 1-1: config 64 has an invalid interface number: 19 but max is 0
[  471.150350][ T5980] usb 1-1: config 64 has no interface number 0
[  471.157089][ T5980] usb 1-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0
[  471.164546][ T5980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.224405][ T5980] usb 1-1: probing VID:PID(2201:012C)   
[  471.249437][ T5980] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs
[  471.255630][ T5980] vub300 1-1:64.19: probe with driver vub300 failed with error -22
[  471.423079][ T3144] usb 1-1: USB disconnect, device number 56
[  472.066329][T17318] openvswitch: netlink: Multiple metadata blocks provided
[  472.101241][T17322] netlink: 'syz.0.4411': attribute type 3 has an invalid length.
[  472.107275][T17322] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4411'.
[  473.511551][T17356] PKCS8: Unsupported PKCS#8 version
[  473.706293][   T54] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  474.216950][T17374] loop1: detected capacity change from 0 to 512
[  474.254678][T17374] EXT4-fs (loop1): 1 orphan inode deleted
[  474.258571][T17374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  474.267372][T17374] ext4 filesystem being mounted at /1403/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  474.274943][T16184] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  474.295419][T16184] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u9:41: Failed to release dquot type 1
[  474.310973][ T5940] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  474.521291][ T5998] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  474.693507][ T5998] usb 1-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a
[  474.697376][ T5998] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.703812][ T5998] usb 1-1: config 0 descriptor??
[  474.708367][ T5998] gspca_main: xirlink-cit-2.14.0 probing 0545:800d
[  474.713666][ T5998] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input31
[  474.929781][ T5998] usb 1-1: USB disconnect, device number 57
[  475.777679][T17447] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4468'.
[  475.786909][T17430] loop1: detected capacity change from 0 to 32768
[  475.792699][T17430] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4460 (17430)
[  475.832821][T17450] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4470'.
[  475.858928][T17430] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  475.863168][T17430] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  475.867275][T17430] BTRFS info (device loop1): using free-space-tree
[  475.924437][T17430] BTRFS info (device loop1): rebuilding free space tree
[  475.993060][T17471] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4472'.
[  475.995145][ T5940] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  476.204988][T17481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  476.522436][T17503] loop1: detected capacity change from 0 to 256
[  476.591835][T17512] loop1: detected capacity change from 0 to 512
[  476.601670][T17512] EXT4-fs: Ignoring removed nobh option
[  476.609401][T17512] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.4488: iget: bad i_size value: 38620345925642
[  476.613752][T17512] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.4488: couldn't read orphan inode 15 (err -117)
[  476.619899][T17512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  476.656437][ T5940] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  476.749358][T17526] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  476.756612][T17522] loop1: detected capacity change from 0 to 4096
[  476.767465][T17522] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  476.770480][T17522] ntfs3(loop1): Failed to load $Extend (-22).
[  476.772609][T17522] ntfs3(loop1): Failed to initialize $Extend.
[  479.547215][T17614] loop1: detected capacity change from 0 to 128
[  479.551836][T17614] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  479.558567][T17614] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  479.632310][T17616] program syz.1.4533 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  479.855707][T17627] netlink: 'syz.5.4538': attribute type 1 has an invalid length.
[  479.859242][T17627] nbd: couldn't find device at index 20
[  480.644402][ T5993] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  480.834293][ T5993] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  480.838481][ T5993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.842040][ T5993] usb 2-1: Product: syz
[  480.844069][ T5993] usb 2-1: Manufacturer: syz
[  480.846183][ T5993] usb 2-1: SerialNumber: syz
[  480.851480][ T5993] usb 2-1: config 0 descriptor??
[  481.184544][ T5993] usb 2-1: USB disconnect, device number 55
[  481.356594][T17647] bridge: RTM_NEWNEIGH with invalid ether address
[  482.121906][T17673] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4558'.
[  482.125890][T17673] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4558'.
[  482.249898][ T5993] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  482.410260][ T5993] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  482.415657][ T5993] usb 2-1: config 0 has no interfaces?
[  482.418033][ T5993] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  482.422353][ T5993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  482.427236][ T5993] usb 2-1: config 0 descriptor??
[  482.651929][ T5993] usb 2-1: USB disconnect, device number 56
[  482.702635][T17702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4572'.
[  483.926356][   T24] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  484.019511][T17764] loop1: detected capacity change from 0 to 40427
[  484.024091][T17764] F2FS-fs (loop1): Image doesn't support compression
[  484.029869][T17764] F2FS-fs (loop1): invalid crc value
[  484.065021][T17764] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  484.069317][T17764] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  484.097527][   T24] usb 1-1: Using ep0 maxpacket: 8
[  484.104471][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  484.109733][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  484.118856][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  484.130823][   T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  484.135001][   T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  484.150905][   T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  484.154814][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.166291][   T24] usb 1-1: config 0 descriptor??
[  484.394243][   T24] usb 1-1: USB disconnect, device number 58
[  484.439735][T17779] loop1: detected capacity change from 0 to 1024
[  484.592973][T17791] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4614'.
[  484.810483][T17791] loop1: detected capacity change from 0 to 32768
[  484.829953][T17791] jfs_mkdir: dtInsert returned -EIO
[  484.832627][T17791] ERROR: (device loop1): jfs_mkdir: 
[  484.832627][T17791] 
[  484.839298][T17791] ERROR: (device loop1): remounting filesystem as read-only
[  484.993834][T17797] overlayfs: failed to resolve './file0': -2
[  485.349954][T17814] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4625'.
[  485.354234][T17814] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  485.424725][ T3144] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  485.542539][T17824] pimreg: entered allmulticast mode
[  485.547124][T17824] pimreg: left allmulticast mode
[  485.594643][ T3144] usb 1-1: Using ep0 maxpacket: 16
[  485.600951][ T3144] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  485.605899][ T3144] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  485.610647][ T3144] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  485.614818][ T3144] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  485.621255][ T3144] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  485.631259][ T3144] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  485.635179][ T3144] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  485.638659][ T3144] usb 1-1: Manufacturer: syz
[  485.645539][ T3144] usb 1-1: config 0 descriptor??
[  485.774637][   T24] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  485.876346][T17806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  485.880417][T17806] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  485.936973][   T24] usb 2-1: Using ep0 maxpacket: 16
[  485.946660][   T24] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  485.946904][ T3144] rc_core: IR keymap rc-hauppauge not found
[  485.950641][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  485.952789][ T3144] Registered IR keymap rc-empty
[  485.957251][   T24] usb 2-1: config 0 has no interface number 0
[  485.962192][ T3144] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  485.972984][   T24] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  485.976797][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.979323][ T3144] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  485.986163][   T24] usb 2-1: Product: syz
[  485.988527][   T24] usb 2-1: Manufacturer: syz
[  485.992038][   T24] usb 2-1: SerialNumber: syz
[  485.995893][   T24] usb 2-1: config 0 descriptor??
[  486.001392][ T3144] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  486.007955][ T3144] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input32
[  486.022105][ T3144] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  486.043493][ T3144] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  486.064828][ T3144] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  486.086180][ T3144] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  486.103273][T17839] batadv0: entered promiscuous mode
[  486.105917][T17839] macsec1: entered allmulticast mode
[  486.108383][T17839] batadv0: entered allmulticast mode
[  486.111841][ T3144] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  486.114204][T17839] batadv0: left allmulticast mode
[  486.117333][T17839] batadv0: left promiscuous mode
[  486.129208][ T3144] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  486.150429][ T3144] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  486.171629][ T3144] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  486.193116][ T3144] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  486.219027][ T3144] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  486.242986][ T3144] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  486.248034][ T5980] usb 2-1: USB disconnect, device number 57
[  486.254089][ T3144] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  486.372203][   T24] usb 1-1: USB disconnect, device number 59
[  487.779497][T17876] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4650'.
[  488.634225][T17905] netlink: 'syz.0.4663': attribute type 1 has an invalid length.
[  488.637600][T17905] netlink: 'syz.0.4663': attribute type 2 has an invalid length.
[  488.867923][T17919] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  488.873388][T17918] loop1: detected capacity change from 0 to 2048
[  488.910814][T17918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  488.916057][T17918] ext4 filesystem being mounted at /1458/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  488.973399][ T5940] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  489.009966][T17930] loop1: detected capacity change from 0 to 1024
[  489.146498][   T27] hfsplus: b-tree write err: -5, ino 4
[  489.657974][ T3144] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  489.821650][ T3144] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  489.825575][ T3144] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  489.830444][ T3144] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  489.834248][ T3144] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  489.839589][ T3144] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  489.846035][ T3144] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  489.851078][ T3144] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  489.854512][ T3144] usb 1-1: Product: syz
[  489.856467][ T3144] usb 1-1: Manufacturer: syz
[  489.863385][ T3144] cdc_wdm 1-1:1.0: skipping garbage
[  489.865803][ T3144] cdc_wdm 1-1:1.0: skipping garbage
[  489.869463][ T3144] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  489.872446][ T3144] cdc_wdm 1-1:1.0: Unknown control protocol
[  491.885269][T17999] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  491.973924][T18006] loop1: detected capacity change from 0 to 128
[  492.024605][T18008] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4708'.
[  492.028636][T18008] netlink: 'syz.5.4708': attribute type 1 has an invalid length.
[  492.036733][T18008] netlink: 'syz.5.4708': attribute type 2 has an invalid length.
[  492.044137][T18008] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4708'.
[  492.745604][ T3144] usb 1-1: USB disconnect, device number 60
[  493.411846][T18047] syz.1.4724: attempt to access beyond end of device
[  493.411846][T18047] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0
[  493.417019][T18047] vxfs: unable to read disk superblock at 1
[  493.427572][T18047] syz.1.4724: attempt to access beyond end of device
[  493.427572][T18047] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0
[  493.435615][T18047] vxfs: unable to read disk superblock at 8
[  493.438075][T18047] vxfs: can't find superblock.
[  493.945864][T18076] overlayfs: failed to resolve './file0': -2
[  494.114045][T18085] loop1: detected capacity change from 0 to 4096
[  494.135168][T18085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  494.208762][ T5940] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  494.631614][   T33] audit: type=1326 audit(1755254578.207:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18118 comm="syz.1.4755" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8924b8ebe9 code=0x7ffc0000
[  494.649080][   T33] audit: type=1326 audit(1755254578.207:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18118 comm="syz.1.4755" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8924b8ebe9 code=0x7ffc0000
[  494.696223][   T33] audit: type=1326 audit(1755254578.217:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18118 comm="syz.1.4755" exe="/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f8924b8ebe9 code=0x7ffc0000
[  494.731744][   T33] audit: type=1326 audit(1755254578.217:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18118 comm="syz.1.4755" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8924b8ebe9 code=0x7ffc0000
[  494.770385][   T33] audit: type=1326 audit(1755254578.217:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18118 comm="syz.1.4755" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8924b8ebe9 code=0x7ffc0000
[  494.794564][   T33] audit: type=1326 audit(1755254578.217:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18118 comm="syz.1.4755" exe="/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f8924b8ebe9 code=0x7ffc0000
[  494.817994][   T33] audit: type=1326 audit(1755254578.282:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18118 comm="syz.1.4755" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8924b8ebe9 code=0x7ffc0000
[  494.838839][   T33] audit: type=1326 audit(1755254578.282:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18118 comm="syz.1.4755" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8924b8ebe9 code=0x7ffc0000
[  495.002757][   T33] audit: type=1326 audit(1755254578.591:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18131 comm="syz.5.4761" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3421b8ebe9 code=0x7ffc0000
[  495.048793][   T33] audit: type=1326 audit(1755254578.600:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18131 comm="syz.5.4761" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3421b8ebe9 code=0x7ffc0000
[  495.338662][T18144] loop1: detected capacity change from 0 to 2048
[  495.342440][T18144] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  495.348165][T18144] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  495.446032][ T5940] UDF-fs: error (device loop1): udf_read_inode: (ino 1440) failed !bh
[  495.451326][ T5940] UDF-fs: error (device loop1): udf_read_inode: (ino 1440) failed !bh
[  495.842282][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.957032][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.090502][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.218105][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.328568][ T5935] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  496.334362][ T5935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  496.343672][ T5935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  496.350418][ T5935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  496.353977][ T5935] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  496.401753][   T13] bridge_slave_1: left allmulticast mode
[  496.413104][   T13] bridge_slave_1: left promiscuous mode
[  496.415717][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  496.422406][   T13] bridge_slave_0: left promiscuous mode
[  496.427389][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  496.707379][   T13] dvmrp0 (unregistering): left allmulticast mode
[  497.024067][   T13] bond1 (unregistering): Released all slaves
[  497.040067][   T10] wg1 speed is unknown, defaulting to 1000
[  497.053345][T18166] wg1 speed is unknown, defaulting to 1000
[  497.056631][   T10] syz0: Port: 1 Link DOWN
[  497.123774][   T13] tipc: Disabling bearer <udp:syz2>
[  497.130797][   T13] tipc: Left network mode
[  497.157739][   T13] IPVS: stopping backup sync thread 16256 ...
[  497.379546][T18166] chnl_net:caif_netlink_parms(): no params data found
[  497.486321][   T13] hsr_slave_0: left promiscuous mode
[  497.489154][   T13] hsr_slave_1: left promiscuous mode
[  497.491703][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  497.497711][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  497.512603][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  497.542609][   T13] @: left allmulticast mode
[  497.544526][   T13] veth0_vlan: left allmulticast mode
[  497.547115][   T13] @: left promiscuous mode
[  497.549307][   T13] veth1_macvtap: left promiscuous mode
[  497.551540][   T13] veth0_macvtap: left promiscuous mode
[  497.553697][   T13] veth1_vlan: left promiscuous mode
[  497.555688][   T13] veth0_vlan: left promiscuous mode
[  498.596931][   T54] Bluetooth: hci2: command tx timeout
[  498.980519][   T13] team0 (unregistering): Port device team_slave_1 removed
[  499.027707][   T13] team0 (unregistering): Port device team_slave_0 removed
[  499.529103][T18166] bridge0: port 1(bridge_slave_0) entered blocking state
[  499.532061][T18166] bridge0: port 1(bridge_slave_0) entered disabled state
[  499.551149][T18166] bridge_slave_0: entered allmulticast mode
[  499.559856][T18166] bridge_slave_0: entered promiscuous mode
[  499.572227][T18166] bridge0: port 2(bridge_slave_1) entered blocking state
[  499.575083][T18166] bridge0: port 2(bridge_slave_1) entered disabled state
[  499.584128][T18166] bridge_slave_1: entered allmulticast mode
[  499.589736][T18166] bridge_slave_1: entered promiscuous mode
[  499.693785][T18166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  499.710297][T18166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  499.808509][T18166] team0: Port device team_slave_0 added
[  499.815798][T18166] team0: Port device team_slave_1 added
[  499.889638][T18166] batman_adv: batadv0: Adding interface: batadv_slave_0
[  499.893222][T18166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  499.905086][T18166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  499.933538][T18166] batman_adv: batadv0: Adding interface: batadv_slave_1
[  499.936614][T18166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  499.949150][T18166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  499.999049][T18166] hsr_slave_0: entered promiscuous mode
[  500.001824][T18166] hsr_slave_1: entered promiscuous mode
[  500.004712][T18166] debugfs: 'hsr0' already exists in 'hsr'
[  500.008952][T18166] Cannot create hsr debugfs directory
[  500.152952][T18166] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  500.158362][T18166] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  500.163813][T18166] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  500.170910][T18166] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  500.176649][   T24] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  500.201155][T18166] bridge0: port 2(bridge_slave_1) entered blocking state
[  500.204407][T18166] bridge0: port 2(bridge_slave_1) entered forwarding state
[  500.208714][T18166] bridge0: port 1(bridge_slave_0) entered blocking state
[  500.211794][T18166] bridge0: port 1(bridge_slave_0) entered forwarding state
[  500.270117][T18166] 8021q: adding VLAN 0 to HW filter on device bond0
[  500.284383][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[  500.288192][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[  500.309183][T18166] 8021q: adding VLAN 0 to HW filter on device team0
[  500.328785][T16158] bridge0: port 1(bridge_slave_0) entered blocking state
[  500.332167][T16158] bridge0: port 1(bridge_slave_0) entered forwarding state
[  500.340941][   T24] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50
[  500.343325][T16158] bridge0: port 2(bridge_slave_1) entered blocking state
[  500.344930][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.348141][T16158] bridge0: port 2(bridge_slave_1) entered forwarding state
[  500.351850][   T24] usb 1-1: Product: syz
[  500.356649][   T24] usb 1-1: Manufacturer: syz
[  500.359054][   T24] usb 1-1: SerialNumber: syz
[  500.364614][   T24] usb 1-1: config 0 descriptor??
[  500.375591][   T24] usb 1-1: Waiting for MOTU Microbook II to boot up...
[  500.378504][   T24] usb 1-1: failed setting the sample rate for Motu MicroBook II: -22
[  500.382157][   T24] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22
[  500.534765][T18166] 8021q: adding VLAN 0 to HW filter on device batadv0
[  500.600336][   T24] usb 1-1: USB disconnect, device number 61
[  500.740995][T18262] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4813'.
[  500.748263][T18262] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4813'.
[  500.749668][T18166] veth0_vlan: entered promiscuous mode
[  500.760991][T18166] veth1_vlan: entered promiscuous mode
[  500.790521][T18166] veth0_macvtap: entered promiscuous mode
[  500.799897][T18166] veth1_macvtap: entered promiscuous mode
[  500.816189][T18166] batman_adv: batadv0: Interface activated: batadv_slave_0
[  500.828336][   T54] Bluetooth: hci2: command tx timeout
[  500.836159][T18166] batman_adv: batadv0: Interface activated: batadv_slave_1
[  500.849262][ T5960] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  500.857141][ T5960] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  500.868076][ T5960] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  500.873950][ T5960] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  500.965376][ T6696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  500.969947][ T6696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  501.001933][T16184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  501.005394][T16184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  502.243171][T18294] loop6: detected capacity change from 0 to 8
[  502.248640][T18294] SQUASHFS error: Unable to read inode 0x127
[  502.609437][T18310] loop6: detected capacity change from 0 to 2048
[  502.618685][T18310] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  502.622525][T18310] NILFS (loop6): mounting unchecked fs
[  502.643045][T18310] NILFS (loop6): recovery complete
[  502.650055][T18311] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  503.052311][   T54] Bluetooth: hci2: command tx timeout
[  504.487488][   T51] libceph: connect (1)[c::]:6789 error -101
[  504.492067][   T51] libceph: mon0 (1)[c::]:6789 connect error
[  504.502113][   T51] libceph: connect (1)[c::]:6789 error -101
[  504.507325][   T51] libceph: mon0 (1)[c::]:6789 connect error
[  504.798426][   T51] libceph: connect (1)[c::]:6789 error -101
[  504.801216][   T51] libceph: mon0 (1)[c::]:6789 connect error
[  505.265293][   T54] Bluetooth: hci2: command tx timeout
[  505.350981][   T24] libceph: connect (1)[c::]:6789 error -101
[  505.354155][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  505.361462][T18324] ceph: No mds server is up or the cluster is laggy
[  505.485270][T18333] netlink: 'syz.5.4839': attribute type 27 has an invalid length.
[  506.435626][T18351] sctp: [Deprecated]: syz.6.4846 (pid 18351) Use of struct sctp_assoc_value in delayed_ack socket option.
[  506.435626][T18351] Use struct sctp_sack_info instead
[  507.018519][   T51] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  507.199912][   T51] usb 1-1: Using ep0 maxpacket: 16
[  507.205070][   T51] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  507.208796][   T51] usb 1-1: config 0 descriptor has 1 excess byte, ignoring
[  507.212385][   T51] usb 1-1: config 0 has no interface number 0
[  507.217799][   T51] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  507.221970][   T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  507.225567][   T51] usb 1-1: Product: syz
[  507.227723][   T51] usb 1-1: Manufacturer: syz
[  507.230264][   T51] usb 1-1: SerialNumber: syz
[  507.238711][   T51] usb 1-1: config 0 descriptor??
[  507.473035][   T51] usb 1-1: Found UVC 0.00 device syz (046d:08f3)
[  507.476272][   T51] usb 1-1: No valid video chain found.
[  507.588589][   T51] usb 1-1: USB disconnect, device number 62
[  508.362544][T18376] loop6: detected capacity change from 0 to 2560
[  508.379447][T18376] buffer_io_error: 1294 callbacks suppressed
[  508.379456][T18376] Buffer I/O error on dev loop6, logical block 0, async page read
[  508.415292][T18376] Buffer I/O error on dev loop6, logical block 0, async page read
[  508.441042][T18376] Buffer I/O error on dev loop6, logical block 0, async page read
[  508.445170][T18376] Buffer I/O error on dev loop6, logical block 0, async page read
[  508.448862][T18376] Buffer I/O error on dev loop6, logical block 0, async page read
[  508.452517][T18376] Buffer I/O error on dev loop6, logical block 0, async page read
[  508.462657][T18376] Buffer I/O error on dev loop6, logical block 0, async page read
[  508.466175][T18376] Buffer I/O error on dev loop6, logical block 0, async page read
[  508.469574][T18376] ldm_validate_partition_table(): Disk read failed.
[  508.482981][T18376] Buffer I/O error on dev loop6, logical block 0, async page read
[  508.486427][T18376] Buffer I/O error on dev loop6, logical block 0, async page read
[  508.490965][T18376] Dev loop6: unable to read RDB block 0
[  508.496631][T18376]  loop6: unable to read partition table
[  508.499231][T18376] loop_reread_partitions: partition scan of loop6 (3) failed (rc=-5)
[  508.694114][T18372] loop6: detected capacity change from 0 to 32768
[  508.697267][T18372] XFS: ikeep mount option is deprecated.
[  508.727191][T18372] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  508.797552][T18372] XFS (loop6): Ending clean mount
[  508.812100][T18372] XFS (loop6): Quotacheck needed: Please wait.
[  508.877506][T18372] XFS (loop6): Quotacheck: Done.
[  508.887591][   T54] Bluetooth: hci0: unexpected event for opcode 0x0803
[  508.930417][T18166] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  509.523153][T18415] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4870'.
[  509.641933][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  510.077318][T18437] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4878'.
[  510.170560][T18441] loop6: detected capacity change from 0 to 512
[  510.179964][T18441] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found
[  510.183894][T18441] UDF-fs: Scanning with blocksize 512 failed
[  510.189949][T18441] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found
[  510.196060][T18441] UDF-fs: Scanning with blocksize 1024 failed
[  510.200690][T18441] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found
[  510.204660][T18441] UDF-fs: Scanning with blocksize 2048 failed
[  510.208941][T18441] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  510.224621][T18441] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  510.596162][T18466] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  510.602693][T18465] IPVS: stopping backup sync thread 18466 ...
[  510.696836][T18474] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4895'.
[  510.839786][T18482] overlayfs: failed to clone upperpath
[  510.941890][ T3144] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  511.105720][ T3144] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  511.111523][ T3144] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  511.117671][ T3144] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  511.126803][ T3144] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  511.130831][ T3144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.137950][ T3144] usb 1-1: config 0 descriptor??
[  511.588387][ T3144] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  511.799746][   T51] usb 1-1: USB disconnect, device number 63
[  513.224155][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  513.236834][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  513.242740][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  513.247567][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  513.252973][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  513.793071][T18528] loop6: detected capacity change from 0 to 256
[  513.797556][T18528] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  513.802140][T18528] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  513.817533][T18528] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  513.885757][T18532] vivid-002: disconnect
[  513.887850][T18531] vivid-002: reconnect
[  513.930393][T18522] chnl_net:caif_netlink_parms(): no params data found
[  514.353464][T18522] bridge0: port 1(bridge_slave_0) entered blocking state
[  514.363321][T18522] bridge0: port 1(bridge_slave_0) entered disabled state
[  514.366466][T18522] bridge_slave_0: entered allmulticast mode
[  514.379982][T18522] bridge_slave_0: entered promiscuous mode
[  514.398614][T18522] bridge0: port 2(bridge_slave_1) entered blocking state
[  514.401718][T18522] bridge0: port 2(bridge_slave_1) entered disabled state
[  514.404810][T18522] bridge_slave_1: entered allmulticast mode
[  514.424257][T18522] bridge_slave_1: entered promiscuous mode
[  515.484872][ T5939] Bluetooth: hci1: command tx timeout
[  515.663372][T18558] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4927'.
[  515.721140][T18522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  515.726162][T18522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  515.757877][T18522] team0: Port device team_slave_0 added
[  515.764900][T18522] team0: Port device team_slave_1 added
[  515.794373][T18522] batman_adv: batadv0: Adding interface: batadv_slave_0
[  515.798373][T18522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  515.811429][T18522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  515.822344][T18522] batman_adv: batadv0: Adding interface: batadv_slave_1
[  515.825260][T18522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  515.836320][T18522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  516.048442][T18522] hsr_slave_0: entered promiscuous mode
[  516.058999][T18522] hsr_slave_1: entered promiscuous mode
[  516.069206][T18522] debugfs: 'hsr0' already exists in 'hsr'
[  516.071774][T18522] Cannot create hsr debugfs directory
[  516.199941][T18577] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4935'.
[  516.286103][T18577] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4935'.
[  516.304719][ T5903] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  516.308361][ T5903] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  516.331810][ T5903] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  516.352272][ T5903] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  516.625143][T18522] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.802423][T18522] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.889427][T18522] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.961693][T18522] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.276256][T18522] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  517.315892][T18522] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  517.331956][T18522] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  517.354442][T18587] loop6: detected capacity change from 0 to 1024
[  517.357138][T18522] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  517.367996][T18587] hfsplus: request for non-existent node 16777216 in B*Tree
[  517.374397][T18587] hfsplus: request for non-existent node 16777216 in B*Tree
[  517.378993][T18587] hfsplus: request for non-existent node 16777216 in B*Tree
[  517.381907][T18587] hfsplus: request for non-existent node 16777216 in B*Tree
[  517.385003][T18587] hfsplus: request for non-existent node 16777216 in B*Tree
[  517.388656][T18587] hfsplus: request for non-existent node 16777216 in B*Tree
[  517.395803][T18587] hfsplus: request for non-existent node 16777216 in B*Tree
[  517.399492][T18587] hfsplus: request for non-existent node 16777216 in B*Tree
[  517.402687][T18587] hfsplus: request for non-existent node 16777216 in B*Tree
[  517.405269][T18587] hfsplus: request for non-existent node 16777216 in B*Tree
[  517.407769][T18587] hfsplus: request for non-existent node 16777216 in B*Tree
[  517.410791][T18587] hfsplus: request for non-existent node 16777216 in B*Tree
[  517.413247][T18587] hfsplus: request for non-existent node 16777216 in B*Tree
[  517.418567][T18587] hfsplus: request for non-existent node 16777216 in B*Tree
[  517.430436][T18587] hfsplus: request for non-existent node 16777216 in B*Tree
[  517.433646][T18587] hfsplus: request for non-existent node 16777216 in B*Tree
[  517.446068][   T33] kauditd_printk_skb: 9 callbacks suppressed
[  517.446078][   T33] audit: type=1800 audit(1755254599.581:314): pid=18587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4939" name="file1" dev="loop6" ino=20 res=0 errno=0
[  517.488768][T18522] 8021q: adding VLAN 0 to HW filter on device bond0
[  517.557884][T18599] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.562560][T18599] bridge0: port 1(bridge_slave_0) entered disabled state
[  517.666439][ T5939] Bluetooth: hci1: command tx timeout
[  517.668617][T18599] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  517.680344][T18599] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  517.897160][ T5939] Bluetooth: hci0: Malformed HCI Event
[  517.932071][T18606] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.937182][T18606] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.043929][T18606] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  518.056648][T18606] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  518.194484][T16873] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  518.197831][T16873] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  518.201198][T16873] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  518.204022][T16873] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  518.207259][T16873] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  518.210763][T16873] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  518.220284][T18522] 8021q: adding VLAN 0 to HW filter on device team0
[  518.224926][T16873] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  518.228127][T16873] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  518.246636][T16873] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  518.256988][T16184] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.262136][T16184] bridge0: port 1(bridge_slave_0) entered forwarding state
[  518.268693][T16184] bridge0: port 2(bridge_slave_1) entered blocking state
[  518.271425][T16184] bridge0: port 2(bridge_slave_1) entered forwarding state
[  518.274914][T16873] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  518.279054][T16873] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  518.282862][T16873] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  518.411820][T18522] 8021q: adding VLAN 0 to HW filter on device batadv0
[  518.454986][T18640] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4957'.
[  518.458657][T18522] veth0_vlan: entered promiscuous mode
[  518.466479][T18522] veth1_vlan: entered promiscuous mode
[  518.494186][T18522] veth0_macvtap: entered promiscuous mode
[  518.501538][T18522] veth1_macvtap: entered promiscuous mode
[  518.515363][T18522] batman_adv: batadv0: Interface activated: batadv_slave_0
[  518.528462][T18522] batman_adv: batadv0: Interface activated: batadv_slave_1
[  518.538016][T16873] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  518.541709][T16873] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  518.558941][T16873] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  518.562637][T16873] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  518.623517][T18648] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4961'.
[  518.660463][ T6722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  518.663783][ T6722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  518.680361][T16204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  518.683668][T16204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  518.736067][T18652] syzkaller1: entered promiscuous mode
[  518.737955][T18652] syzkaller1: entered allmulticast mode
[  519.055792][ T5998] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  519.221973][ T5998] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11
[  519.227119][ T5998] usb 1-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00
[  519.230701][ T5998] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.235484][ T5998] usb 1-1: config 0 descriptor??
[  519.673077][ T5998] logitech 0003:046D:CA03.0021: ignoring exceeding usage max
[  519.676723][ T5998] logitech 0003:046D:CA03.0021: unbalanced delimiter at end of report description
[  519.680127][ T5998] logitech 0003:046D:CA03.0021: parse failed
[  519.682164][ T5998] logitech 0003:046D:CA03.0021: probe with driver logitech failed with error -22
[  519.887241][   T10] usb 1-1: USB disconnect, device number 64
[  519.900681][ T5939] Bluetooth: hci1: command tx timeout
[  520.787611][   T51] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  520.948686][   T51] usb 1-1: Using ep0 maxpacket: 32
[  520.951935][   T51] usb 1-1: config 0 has an invalid interface number: 54 but max is 0
[  520.954734][   T51] usb 1-1: config 0 has no interface number 0
[  520.957124][   T51] usb 1-1: config 0 interface 54 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  520.962433][   T51] usb 1-1: config 0 interface 54 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[  520.965993][   T51] usb 1-1: config 0 interface 54 has no altsetting 0
[  520.970515][   T51] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42
[  520.973719][   T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.976595][   T51] usb 1-1: Product: syz
[  520.978294][   T51] usb 1-1: Manufacturer: syz
[  520.982867][   T51] usb 1-1: SerialNumber: syz
[  520.987841][   T51] usb 1-1: config 0 descriptor??
[  520.991489][T18680] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  520.994807][T18680] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  521.217040][   T51] ums_eneub6250 1-1:0.54: USB Mass Storage device detected
[  521.226467][   T51] scsi host6: usb-storage 1-1:0.54
[  521.280274][   T51] ums_eneub6250 1-1:0.54: probe with driver ums_eneub6250 failed with error 3
[  521.291065][   T51] usb 1-1: USB disconnect, device number 65
[  522.046223][T18700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4983'.
[  522.124248][ T5939] Bluetooth: hci1: command tx timeout
[  522.127209][T18704] gretap0: entered promiscuous mode
[  522.498614][   T51] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  522.661146][   T51] usb 1-1: config index 0 descriptor too short (expected 39, got 27)
[  522.664308][   T51] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  522.668047][   T51] usb 1-1: config 0 interface 0 has no altsetting 0
[  522.673059][   T51] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  522.676598][   T51] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  522.680226][   T51] usb 1-1: Product: syz
[  522.681907][   T51] usb 1-1: Manufacturer: syz
[  522.683770][   T51] usb 1-1: SerialNumber: syz
[  522.687271][   T51] usb 1-1: config 0 descriptor??
[  522.692047][   T51] hub 1-1:0.0: bad descriptor, ignoring hub
[  522.694373][   T51] hub 1-1:0.0: probe with driver hub failed with error -5
[  522.700053][   T51] usb 1-1: selecting invalid altsetting 0
[  523.142185][   T51] usb 1-1: USB disconnect, device number 66
[  524.046149][T18744] loop6: detected capacity change from 0 to 512
[  524.050561][T18744] EXT4-fs: Ignoring removed oldalloc option
[  524.052933][T18744] EXT4-fs: inline encryption not supported
[  524.054958][T18744] EXT4-fs: Ignoring removed mblk_io_submit option
[  524.057692][T18744] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  524.090063][T18744] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5002: bg 0: block 64: padding at end of block bitmap is not set
[  524.096719][T18744] Quota error (device loop6): write_blk: dquota write failed
[  524.099342][T18744] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  524.103224][T18744] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.5002: Failed to acquire dquot type 0
[  524.107597][T18744] EXT4-fs (loop6): 1 truncate cleaned up
[  524.111370][T18744] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  524.135982][T18744] Quota error (device loop6): do_check_range: Getting block 144 out of range 0-5
[  524.178057][   T51] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  524.182892][T18166] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  524.370476][   T51] usb 1-1: Using ep0 maxpacket: 8
[  524.376917][   T51] usb 1-1: config 0 interface 0 has no altsetting 0
[  524.385966][   T51] usb 1-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00
[  524.389723][   T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.401402][   T51] usb 1-1: config 0 descriptor??
[  524.452047][T18761] loop6: detected capacity change from 0 to 32768
[  524.459828][T18761] (syz.6.5009,18761,0):ocfs2_verify_volume:2290 ERROR: found superblock with incorrect block size bits: found 265, should be 9, 10, 11, or 12
[  524.464590][T18761] (syz.6.5009,18761,0):ocfs2_verify_volume:2331 ERROR: status = -22
[  524.468615][T18761] (syz.6.5009,18761,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  524.471630][T18761] (syz.6.5009,18761,0):ocfs2_fill_super:1177 ERROR: status = -22
[  524.606070][   T33] audit: type=1800 audit(1755254606.279:315): pid=18775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5016" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  524.843233][T18783] loop6: detected capacity change from 0 to 32768
[  524.846710][   T51] hid-u2fzero 0003:20A0:4287.0022: hidraw0: USB HID v0.03 Device [HID 20a0:4287] on usb-dummy_hcd.0-1/input0
[  524.855853][   T51] hid-u2fzero 0003:20A0:4287.0022: NitroKey U2F LED initialised
[  524.858428][   T51] hid-u2fzero 0003:20A0:4287.0022: NitroKey U2F RNG initialised
[  525.087172][ T3144] usb 1-1: USB disconnect, device number 67
[  526.225705][T18824] binder: 18823:18824 ioctl c0306201 200000000640 returned -22
[  526.279960][T18822] loop6: detected capacity change from 0 to 4096
[  526.283937][T18822] ntfs3(loop6): Primary boot: unsupported bytes per index 8192.
[  526.287249][T18822] ntfs3(loop6): try to read out of volume at offset 0x1ffe00
[  526.715440][T18866] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  526.735733][   T51] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  526.934869][   T51] usb 1-1: Using ep0 maxpacket: 16
[  526.945759][   T51] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79
[  526.954812][   T51] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  526.961382][   T51] usb 1-1: Manufacturer: syz
[  526.977760][T18871] loop6: detected capacity change from 0 to 32768
[  526.978232][   T51] usb 1-1: config 0 descriptor??
[  526.984124][T18871] bcachefs (/dev/loop6): error validating superblock: Invalid superblock section disk_groups: label 0 empty
[  526.984124][T18871] disk_groups (size 640):
[  526.984124][T18871] [parent 0 name ] [deleted] [parent 0 name /] [parent 0 name ] [deleted] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ]
[  527.001944][T18871] bcachefs: bch2_fs_get_tree() error: invalid_sb_disk_groups
[  527.206413][   T51] usb 1-1: Limiting number of CPorts to U8_MAX
[  527.214041][   T51] usb 1-1: Not enough endpoints found in device, aborting!
[  527.427020][   T51] usb 1-1: USB disconnect, device number 68
[  530.199185][T18951] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5099'.
[  530.211047][T18953] netlink: 'syz.5.5100': attribute type 3 has an invalid length.
[  530.217544][T18953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5100'.
[  530.374319][T18965] delete_channel: no stack
[  530.895308][T18999] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5123'.
[  531.229256][T19012] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5129'.
[  531.789835][   T10] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  531.948977][   T10] usb 1-1: Using ep0 maxpacket: 32
[  531.953286][   T10] usb 1-1: config 0 has an invalid interface number: 218 but max is 0
[  531.956004][   T10] usb 1-1: config 0 has no interface number 0
[  531.960535][   T10] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=74.07
[  531.964137][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.967236][   T10] usb 1-1: Product: syz
[  531.968685][   T10] usb 1-1: Manufacturer: syz
[  531.971048][   T10] usb 1-1: SerialNumber: syz
[  531.974667][   T10] usb 1-1: config 0 descriptor??
[  532.201004][   T51] usb 1-1: USB disconnect, device number 69
[  532.903855][T19060] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5151'.
[  532.907715][T19060] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5151'.
[  533.901923][T19092] geneve2: entered promiscuous mode
[  534.399063][T19122] tipc: Started in network mode
[  534.401295][T19122] tipc: Node identity ac1414aa, cluster identity 4711
[  534.405426][T19122] tipc: Enabled bearer <udp:s>, priority 10
[  534.450643][   T10] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  534.612054][   T10] usb 1-1: Using ep0 maxpacket: 16
[  534.619286][   T10] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  534.624431][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.627828][   T10] usb 1-1: Product: syz
[  534.629714][   T10] usb 1-1: Manufacturer: syz
[  534.632203][   T10] usb 1-1: SerialNumber: syz
[  534.636606][   T10] usb 1-1: config 0 descriptor??
[  534.641003][   T10] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  535.293374][   T10] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71
[  535.303547][   T10] usb 1-1: USB disconnect, device number 70
[  535.595116][ T5980] tipc: Node number set to 2886997162
[  537.098894][T19163] can0: slcan on ttyS3.
[  537.155931][T19163] can0 (unregistered): slcan off ttyS3.
[  537.163194][T19164] can0: slcan on ttyS3.
[  537.220281][T19162] can0 (unregistered): slcan off ttyS3.
[  537.451406][T19176] netlink: 'syz.0.5206': attribute type 11 has an invalid length.
[  538.652735][ T5980] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  538.812434][ T5980] usb 1-1: Using ep0 maxpacket: 8
[  538.820589][ T5980] usb 1-1: unable to get BOS descriptor or descriptor too short
[  538.830497][ T5980] usb 1-1: config 8 has an invalid interface number: 255 but max is 0
[  538.837309][ T5980] usb 1-1: config 8 has no interface number 0
[  538.840550][ T5980] usb 1-1: config 8 interface 255 has no altsetting 0
[  538.850124][ T5980] usb 1-1: string descriptor 0 read error: -22
[  538.853300][ T5980] usb 1-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf
[  538.861844][ T5980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.915237][T19220] netlink: 'syz.5.5221': attribute type 1 has an invalid length.
[  538.919752][T19220] netlink: 'syz.5.5221': attribute type 2 has an invalid length.
[  539.099592][ T5980] catc 1-1:8.255: Can't set altsetting 1.
[  539.104123][ T5980] catc 1-1:8.255: probe with driver catc failed with error -5
[  539.114447][ T5980] usb 1-1: USB disconnect, device number 71
[  539.981706][T19245] ALSA: mixer_oss: invalid OSS volume ''
[  540.088411][ T5939] Bluetooth: hci0: unexpected event for opcode 0x0c05
[  541.675618][T19273] loop6: detected capacity change from 0 to 32768
[  541.684177][T19273] XFS (loop6): logbuf size must be greater than or equal to log stripe size
[  541.748469][ T5980] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  541.857526][T19284] ieee802154 phy0 wpan0: encryption failed: -22
[  541.912643][ T5980] usb 1-1: Using ep0 maxpacket: 8
[  541.917247][ T5980] usb 1-1: config 0 has an invalid interface number: 151 but max is 0
[  541.926064][ T5980] usb 1-1: config 0 has no interface number 0
[  541.931851][ T5980] usb 1-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xDE, changing to 0x8E
[  541.947189][ T5980] usb 1-1: config 0 interface 151 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  541.955971][ T5980] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice=fa.6f
[  541.959912][ T5980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.963358][ T5980] usb 1-1: Product: syz
[  541.973016][ T5980] usb 1-1: Manufacturer: syz
[  541.975848][ T5980] usb 1-1: SerialNumber: syz
[  542.017707][ T5980] usb 1-1: config 0 descriptor??
[  542.028893][ T5980] sisusb 1-1:0.151: Invalid USB2VGA device
[  542.037068][ T5980] sisusb 1-1:0.151: probe with driver sisusb failed with error -22
[  542.152097][T19293] loop6: detected capacity change from 0 to 4096
[  542.166929][T19293] NILFS (loop6): invalid segment: Checksum error in segment payload
[  542.172348][T19293] NILFS (loop6): trying rollback from an earlier position
[  542.188008][T19293] NILFS (loop6): recovery complete
[  542.193109][T19294] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  542.248086][ T5980] usb 1-1: USB disconnect, device number 72
[  543.158949][T19315] IPv6: sit1: Disabled Multicast RS
[  544.080938][T19360] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  544.329103][   T24] usb 1-1: new full-speed USB device number 73 using dummy_hcd
[  544.426378][T19380] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5290'.
[  544.660589][   T24] usb 1-1: config 0 has an invalid interface number: 52 but max is 0
[  544.663951][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  544.667897][   T24] usb 1-1: config 0 has no interface number 0
[  544.670065][   T24] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 6018, setting to 64
[  544.674619][   T24] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  544.684988][   T24] usb 1-1: config 0 interface 52 has no altsetting 0
[  544.697353][   T24] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  544.719247][T19392] loop6: detected capacity change from 0 to 256
[  544.727793][T19392] FAT-fs (loop6): Directory bread(block 1285) failed
[  544.743446][T19392] FAT-fs (loop6): Directory bread(block 1285) failed
[  544.748797][T19392] FAT-fs (loop6): FAT read failed (blocknr 1281)
[  544.764939][   T24] usb 1-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35
[  544.775985][   T24] usb 1-1: Product: syz
[  544.792201][   T24] usb 1-1: Manufacturer: syz
[  544.803673][   T24] usb 1-1: SerialNumber: syz
[  544.885697][   T24] usb 1-1: config 0 descriptor??
[  545.132513][   T24] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input35
[  545.377001][   T24] usb 1-1: USB disconnect, device number 73
[  545.379545][    C1] synaptics_usb 1-1:0.52: synusb_irq - usb_submit_urb failed with result: -19
[  545.483774][T19396] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20000
[  546.095893][T19415] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5302'.
[  546.109756][T19415] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5302'.
[  546.116253][T19415] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5302'.
[  546.268812][T19431] netlink: 168 bytes leftover after parsing attributes in process `syz.5.5312'.
[  548.741816][T19473] ipvlan2: entered promiscuous mode
[  548.745631][T19473] ipvlan2: entered allmulticast mode
[  548.749885][T19473] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  548.845357][ T5939] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  548.848088][T19480] loop6: detected capacity change from 0 to 4096
[  548.862478][T19480] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512).
[  548.897362][T19480] ntfs3(loop6): ino=0, attr_set_size
[  548.900625][T19480] ntfs3(loop6): ino=0, attr_set_size
[  549.601703][T19519] loop6: detected capacity change from 0 to 512
[  549.607887][T19519] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.5350: casefold flag without casefold feature
[  549.614492][T19519] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.5350: couldn't read orphan inode 15 (err -117)
[  549.621548][T19519] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  549.665191][T18166] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  549.711942][T19527] tipc: Started in network mode
[  549.714150][T19527] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711
[  549.719952][T19527] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  549.730778][T19528] delete_channel: no stack
[  549.764896][T19531] loop6: detected capacity change from 0 to 64
[  549.775209][T19531] MINIX-fs: mounting file system with errors, running fsck is recommended
[  550.421039][T19555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5366'.
[  550.916649][T19564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5370'.
[  550.936927][   T24] tipc: Node number set to 9480874
[  551.068819][T19577] binder: 19575:19577 unknown command 0
[  551.071517][T19577] binder: 19575:19577 ioctl c0306201 2000000003c0 returned -22
[  551.113071][T19582] IPv6: Can't replace route, no match found
[  551.666336][T19592] Can't find a SQUASHFS superblock on nullb0
[  552.187715][T19601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5388'.
[  552.257801][T19605] netlink: 'syz.5.5390': attribute type 16 has an invalid length.
[  552.261314][T19605] netlink: 'syz.5.5390': attribute type 17 has an invalid length.
[  552.284665][T19605] 8021q: adding VLAN 0 to HW filter on device bond0
[  552.290650][T19605] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  552.860019][ T3144] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  553.020131][ T3144] usb 1-1: Using ep0 maxpacket: 8
[  553.026239][ T3144] usb 1-1: unable to get BOS descriptor or descriptor too short
[  553.032721][ T3144] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E
[  553.037589][ T3144] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  553.043799][ T3144] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  553.047929][ T3144] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  553.054695][ T3144] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1
[  553.058739][ T3144] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  553.064037][ T3144] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[  553.069442][ T3144] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64
[  553.077793][ T3144] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  553.081742][ T3144] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  553.086635][ T3144] usb 1-1: Product: syz
[  553.088616][ T3144] usb 1-1: Manufacturer: syz
[  553.090723][ T3144] usb 1-1: SerialNumber: syz
[  553.101131][ T3144] usb 1-1: config 0 descriptor??
[  553.104378][T19627] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  553.111756][ T3144] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  553.339399][ T3144] usb 1-1: USB disconnect, device number 74
[  554.067268][ T5939] Bluetooth: Wrong link type (-71)
[  554.601497][T19658] loop6: detected capacity change from 0 to 40427
[  554.606519][T19658] F2FS-fs (loop6): build fault injection rate: 771
[  554.610359][T19658] F2FS-fs (loop6): invalid crc value
[  554.657893][T19658] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  554.670457][T19658] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  554.713897][   T33] audit: type=1800 audit(1755254634.434:316): pid=19658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5413" name="bus" dev="loop6" ino=10 res=0 errno=0
[  554.777217][T18166] syz-executor: attempt to access beyond end of device
[  554.777217][T18166] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  554.787457][T19679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5422'.
[  554.807295][T18166] CPU: 1 UID: 0 PID: 18166 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  554.807316][T18166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  554.807324][T18166] Call Trace:
[  554.807330][T18166]  <TASK>
[  554.807336][T18166]  dump_stack_lvl+0x189/0x250
[  554.807361][T18166]  ? __pfx_dump_stack_lvl+0x10/0x10
[  554.807375][T18166]  ? __pfx_queue_work_on+0x10/0x10
[  554.807389][T18166]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  554.807406][T18166]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  554.807430][T18166]  f2fs_handle_critical_error+0x37c/0x540
[  554.807454][T18166]  f2fs_write_end_io+0x886/0xb60
[  554.807479][T18166]  __submit_merged_bio+0x27a/0x6a0
[  554.807500][T18166]  __submit_merged_write_cond+0x255/0x530
[  554.807522][T18166]  f2fs_write_data_pages+0x261d/0x3000
[  554.807562][T18166]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  554.807612][T18166]  ? __mod_zone_page_state+0xd7/0x140
[  554.807644][T18166]  ? folios_put_refs+0x560/0x640
[  554.807667][T18166]  ? __lock_acquire+0xab9/0xd20
[  554.807690][T18166]  ? do_raw_spin_lock+0x121/0x290
[  554.807712][T18166]  ? do_raw_spin_unlock+0x4d/0x240
[  554.807726][T18166]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  554.807744][T18166]  do_writepages+0x32e/0x550
[  554.807767][T18166]  ? do_raw_spin_unlock+0x4d/0x240
[  554.807785][T18166]  filemap_fdatawrite+0x199/0x240
[  554.807800][T18166]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  554.807846][T18166]  ? do_raw_spin_unlock+0x4d/0x240
[  554.807866][T18166]  f2fs_sync_dirty_inodes+0x31f/0x830
[  554.807889][T18166]  f2fs_write_checkpoint+0x95a/0x1df0
[  554.807917][T18166]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  554.807959][T18166]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  554.807972][T18166]  ? kfree+0x18e/0x440
[  554.807987][T18166]  ? kill_f2fs_super+0x298/0x6c0
[  554.808004][T18166]  kill_f2fs_super+0x2c3/0x6c0
[  554.808045][T18166]  ? __pfx_kill_f2fs_super+0x10/0x10
[  554.808057][T18166]  ? radix_tree_delete_item+0x2b6/0x400
[  554.808079][T18166]  ? shrinker_free+0x2ce/0x3e0
[  554.808094][T18166]  deactivate_locked_super+0xbc/0x130
[  554.808111][T18166]  cleanup_mnt+0x425/0x4c0
[  554.808126][T18166]  ? lockdep_hardirqs_on+0x9c/0x150
[  554.808145][T18166]  task_work_run+0x1d4/0x260
[  554.808165][T18166]  ? __pfx_task_work_run+0x10/0x10
[  554.808177][T18166]  ? __x64_sys_umount+0x122/0x160
[  554.808197][T18166]  ? exit_to_user_mode_loop+0x40/0x110
[  554.808218][T18166]  exit_to_user_mode_loop+0xec/0x110
[  554.808234][T18166]  do_syscall_64+0x2bd/0x3b0
[  554.808250][T18166]  ? lockdep_hardirqs_on+0x9c/0x150
[  554.808266][T18166]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.808278][T18166]  ? exc_page_fault+0x9f/0xf0
[  554.808294][T18166]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.808305][T18166] RIP: 0033:0x7f976038ff17
[  554.808318][T18166] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  554.808329][T18166] RSP: 002b:00007ffed009cc38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  554.808343][T18166] RAX: 0000000000000000 RBX: 00007f9760411c05 RCX: 00007f976038ff17
[  554.808352][T18166] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed009ccf0
[  554.808360][T18166] RBP: 00007ffed009ccf0 R08: 0000000000000000 R09: 0000000000000000
[  554.808368][T18166] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffed009dd80
[  554.808375][T18166] R13: 00007f9760411c05 R14: 0000000000084a08 R15: 00007ffed009ddc0
[  554.808395][T18166]  </TASK>
[  554.808401][T18166] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  554.839619][T19677] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.893663][T19682] netlink: 'syz.0.5421': attribute type 16 has an invalid length.
[  554.913069][T19677] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.958323][T19682] netlink: 'syz.0.5421': attribute type 17 has an invalid length.
[  554.991223][T19682] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  555.976491][T19704] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5432'.
[  555.980577][T19704] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5432'.
[  556.339581][T19716] loop6: detected capacity change from 0 to 32768
[  556.365445][   T33] audit: type=1800 audit(1755254635.978:317): pid=19716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5437" name="file1" dev="loop6" ino=4 res=0 errno=0
[  558.069899][T19802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5479'.
[  558.657868][T19850] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5486'.
[  558.743510][T19863] openvswitch: netlink: IP tunnel dst address not specified
[  560.390473][ T5939] Bluetooth: hci0: unexpected event for opcode 0x1009
[  560.525489][T19947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5519'.
[  560.665495][T19957] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5523'.
[  561.076579][T19963] loop6: detected capacity change from 0 to 32768
[  561.088497][T19963] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  561.132975][T19963] XFS (loop6): Ending clean mount
[  561.139256][T19963] XFS (loop6): Quotacheck needed: Please wait.
[  561.197564][T19963] XFS (loop6): Quotacheck: Done.
[  561.253865][T18166] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  561.313662][T19986] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  561.567704][T20002] loop6: detected capacity change from 0 to 4096
[  561.571362][T20002] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  561.574205][T20002] ntfs3(loop6): Failed to load $LogFile (-22).
[  561.711408][   T24] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  561.871798][   T24] usb 1-1: Using ep0 maxpacket: 16
[  561.891780][   T24] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[  561.897891][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.901217][   T24] usb 1-1: Product: syz
[  561.903001][   T24] usb 1-1: Manufacturer: syz
[  561.905107][   T24] usb 1-1: SerialNumber: syz
[  561.911148][   T24] usb 1-1: config 0 descriptor??
[  561.918280][   T24] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[  562.153839][   T24] gp8psk: usb in 128 operation failed.
[  562.160797][   T24] gp8psk: usb in 137 operation failed.
[  562.163458][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  562.167848][   T24] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver)
[  562.174050][   T24] usb 1-1: media controller created
[  562.228082][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  562.295482][   T24] gp8psk_fe: Frontend revision 1 attached
[  562.299896][   T24] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  562.305238][   T24] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  562.540471][   T24] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected.
[  562.544058][   T24] gp8psk: found Genpix USB device pID = 201 (hex)
[  562.850969][ T5980] usb 1-1: USB disconnect, device number 75
[  563.069679][ T5980] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected.
[  563.076814][T20017] o2cb: This node has not been configured.
[  563.079258][T20017] o2cb: Cluster check failed. Fix errors before retrying.
[  563.085451][T20017] (syz.5.5547,20017,1):user_dlm_register:674 ERROR: status = -22
[  563.088322][T20017] (syz.5.5547,20017,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus"
[  563.467918][T20035] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  563.516328][T20039] netlink: 'syz.5.5557': attribute type 2 has an invalid length.
[  563.549195][T20041] batman_adv: batadv0: Adding interface: dummy0
[  563.556695][T20041] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  563.567760][T20031] loop6: detected capacity change from 0 to 32768
[  563.576724][T20041] batman_adv: batadv0: Interface activated: dummy0
[  563.589145][T20031] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  563.596874][T20041] batadv0: mtu less than device minimum
[  563.599597][T20041] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  563.604078][T20041] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  563.608948][T20041] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  563.613100][T20041] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  563.617263][T20041] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  563.621253][T20041] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  563.626041][T20041] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  563.667154][T20031] (syz.6.5553,20031,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0
[  563.719408][T18166] ocfs2: Unmounting device (7,6) on (node local)
[  564.031519][ T5980] usb 1-1: new full-speed USB device number 76 using dummy_hcd
[  564.194404][ T5980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  564.198618][ T5980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  564.204285][ T5980] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  564.207816][ T5980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.212570][ T5980] usb 1-1: config 0 descriptor??
[  564.650768][ T5980] savu 0003:1E7D:2D5A.0023: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0
[  564.922134][ T5980] usb 1-1: USB disconnect, device number 76
[  565.552323][T20091] netlink: 'syz.5.5580': attribute type 10 has an invalid length.
[  565.558365][T20091] batman_adv: batadv0: Interface deactivated: dummy0
[  565.566566][T20091] batman_adv: batadv0: Removing interface: dummy0
[  565.596540][T20091] team0: Port device dummy0 added
[  565.617466][T20091] netlink: 'syz.5.5580': attribute type 10 has an invalid length.
[  565.652014][T20091] team0: Port device dummy0 removed
[  565.682690][T20091] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  566.901192][T20121] net_ratelimit: 12 callbacks suppressed
[  566.901213][T20121] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526
[  567.019028][T20133] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5600'.
[  567.520174][T20154] loop6: detected capacity change from 0 to 512
[  567.524144][T20154] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  567.575028][T20154] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  567.580751][T20154] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  567.622901][T20154] EXT4-fs (loop6): resizing filesystem from 256 to 1 blocks
[  567.626112][T20154] EXT4-fs warning (device loop6): ext4_resize_fs:2042: can't shrink FS - resize aborted
[  567.650583][T18166] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  567.850326][T20170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5614'.
[  567.853478][T20170] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5614'.
[  567.857604][T20172] loop6: detected capacity change from 0 to 256
[  567.861432][T20172] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  567.865324][T20172] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  567.875741][T20172] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  568.981517][T20186] netlink: 'syz.5.5621': attribute type 4 has an invalid length.
[  568.990826][T20186] netlink: 14345 bytes leftover after parsing attributes in process `syz.5.5621'.
[  569.390260][T20200] netlink: 'syz.6.5627': attribute type 9 has an invalid length.
[  569.393515][T20200] netlink: 'syz.6.5627': attribute type 7 has an invalid length.
[  569.396550][T20200] netlink: 'syz.6.5627': attribute type 8 has an invalid length.
[  570.023410][T20210] Invalid option length (1048180) for dns_resolver key
[  570.352415][T20236] input: syz0 as /devices/virtual/input/input36
[  570.429346][T20241] sch_fq: defrate 4294967295 ignored.
[  570.579316][T20248] loop6: detected capacity change from 0 to 1024
[  570.602029][T20248] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  570.607336][T20248] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  570.719463][T20252] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  571.279700][ T5980] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  571.441691][ T5980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  571.448509][ T5980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  571.458465][ T5980] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  571.478786][ T5980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  571.490486][ T5980] usb 1-1: config 0 descriptor??
[  571.558368][T18166] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  571.609395][T20275] loop6: detected capacity change from 0 to 8
[  571.619205][T20275] SQUASHFS error: xz decompression failed, data probably corrupt
[  571.624918][T20275] SQUASHFS error: Failed to read block 0x108: -5
[  571.627087][T20275] SQUASHFS error: Unable to read metadata cache entry [106]
[  571.629940][T20275] SQUASHFS error: Unable to read inode 0x0
[  571.934851][ T5980] hid-led 0003:0FC5:B080.0024: unknown main item tag 0x0
[  572.589720][ T5980] hid-led 0003:0FC5:B080.0024: probe with driver hid-led failed with error -71
[  572.596890][ T5980] usb 1-1: USB disconnect, device number 77
[  573.351605][T20327] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5684'.
[  573.813503][T20341] IPv6: addrconf: prefix option has invalid lifetime
[  575.313518][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  575.389982][T20374] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5703'.
[  575.562232][T20394] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5713'.
[  575.570774][T20394] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5713'.
[  575.578032][T20394] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5713'.
[  575.581090][T20394] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5713'.
[  575.936766][T20423] Invalid ioctl command number [0 >= 10]
[  576.634380][T20444] netlink: 10 bytes leftover after parsing attributes in process `syz.5.5733'.
[  576.788106][T20460] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5741'.
[  576.811264][T20460] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  576.814844][ T5903] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  576.815455][T20460] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5741'.
[  576.820263][ T5903] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  576.826921][ T5903] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  576.833201][T20460] 8021q: adding VLAN 0 to HW filter on device bond3
[  576.836555][ T5903] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  578.839583][T20505] netlink: 'syz.0.5760': attribute type 2 has an invalid length.
[  579.334098][T20513] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.5764'.
[  580.607234][T20522] loop6: detected capacity change from 0 to 32768
[  580.610179][T20522] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.5768 (20522)
[  580.625965][T20522] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  580.629814][T20522] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  580.632744][T20522] BTRFS info (device loop6): disk space caching is enabled
[  580.638048][T20522] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  580.680365][T20522] BTRFS info (device loop6): rebuilding free space tree
[  580.694740][T20522] BTRFS info (device loop6): disabling free space tree
[  580.698355][T20522] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  580.703146][T20522] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  580.813429][T18166] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  581.036496][T20574] macsec0: entered promiscuous mode
[  581.041243][T20574] macsec0: entered allmulticast mode
[  581.043595][T20574] veth1_macvtap: entered allmulticast mode
[  581.064204][T20577] netlink: 'syz.5.5787': attribute type 10 has an invalid length.
[  581.078390][T20577] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  581.083986][T20576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  581.220946][T20581] loop6: detected capacity change from 0 to 32768
[  581.228262][T20581] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  581.232426][   T24] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[  581.257376][T20581] XFS (loop6): Ending clean mount
[  581.260408][T20581] XFS (loop6): Quotacheck needed: Please wait.
[  581.289801][T20581] XFS (loop6): Quotacheck: Done.
[  581.305097][   T33] audit: type=1800 audit(1755254659.307:318): pid=20581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5789" name="file1" dev="loop6" ino=9286 res=0 errno=0
[  581.403605][   T24] usb 1-1: Using ep0 maxpacket: 16
[  581.410915][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  581.419156][   T24] usb 1-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59
[  581.423165][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  581.428936][   T24] usb 1-1: Product: syz
[  581.430891][   T24] usb 1-1: Manufacturer: syz
[  581.433194][   T24] usb 1-1: SerialNumber: syz
[  581.439949][   T24] usb 1-1: config 0 descriptor??
[  581.456125][   T24] peak_usb 1-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22
[  581.459499][   T24] peak_usb 1-1:0.0: unable to read PCAN-USB serial number (err -22)
[  581.491450][T18166] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  581.543384][   T24] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -22
[  581.682916][   T24] usb 1-1: USB disconnect, device number 78
[  585.618924][T20695] netlink: 'syz.5.5835': attribute type 1 has an invalid length.
[  585.673608][T20692] 8021q: adding VLAN 0 to HW filter on device bond5
[  585.681674][T20692] bond4: (slave bond5): making interface the new active one
[  585.685805][T20692] bond4: (slave bond5): Enslaving as an active interface with an up link
[  585.707170][T20692] bond4: (slave gretap1): Enslaving as a backup interface with an up link
[  585.774446][T20701] bond0: (slave dummy0): Releasing backup interface
[  585.986649][T20713] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5841'.
[  587.388901][T20757] netlink: 'syz.5.5861': attribute type 10 has an invalid length.
[  587.398072][T20757] veth0_vlan: left promiscuous mode
[  587.400596][T20757] veth0_vlan: entered promiscuous mode
[  587.413221][T20757] team0: Device veth0_vlan failed to register rx_handler
[  587.504995][T20761] netlink: 'syz.5.5863': attribute type 1 has an invalid length.
[  587.544938][T20763] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5864'.
[  588.851957][T20806] loop6: detected capacity change from 0 to 8
[  588.878532][T20806] syz.6.5883: attempt to access beyond end of device
[  588.878532][T20806] loop6: rw=2048, sector=36028797018963960, nr_sectors = 16 limit=8
[  588.887128][T20806] SQUASHFS error: Failed to read block 0xfffffffffffffffa: -5
[  588.890353][T20806] unable to read xattr id index table
[  590.202163][ T5980] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[  590.365291][ T5980] usb 1-1: Using ep0 maxpacket: 16
[  590.370580][ T5980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  590.376933][ T5980] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  590.380531][ T5980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  590.383263][T20830] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  590.388893][T20830] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  590.389374][ T5980] usb 1-1: config 0 descriptor??
[  590.391590][T20830] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  590.407469][T20830] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  590.415052][T20830] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  590.418122][T20830] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  590.423289][T20830] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  590.917093][ T5980] kye 0003:0458:5016.0025: control desc unexpectedly large
[  590.923600][ T5980] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0025/input/input38
[  591.010253][ T5980] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0025/input/input39
[  591.140351][ T5980] kye 0003:0458:5016.0025: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0
[  591.150405][ T5980] usb 1-1: USB disconnect, device number 79
[  591.694567][T20857] mkiss: ax0: crc mode is auto.
[  591.994430][T20866] loop6: detected capacity change from 0 to 4096
[  591.999513][T20866] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  592.017597][T20866] ntfs3(loop6): ino=3, ntfs_set_state failed, -22.
[  592.038774][T16184] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22.
[  592.044502][T18166] ntfs3(loop6): ino=3, ntfs_set_state failed, -22.
[  592.047646][T18166] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  592.053138][T18166] ntfs3(loop6): ino=3, ntfs_set_state failed, -22.
[  592.057123][T16184] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22.
[  592.648258][ T5939] Bluetooth: hci1: command 0x0405 tx timeout
[  592.650804][ T5939] Bluetooth: hci2: command 0x0c1a tx timeout
[  593.776794][T20901] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5924'.
[  594.809567][ T5939] Bluetooth: hci2: command 0x0c1a tx timeout
[  594.809792][   T54] Bluetooth: hci1: command 0x0405 tx timeout
[  595.063298][T20961] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5951'.
[  595.067468][T20961] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5951'.
[  595.225275][T20965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  595.368223][T20967] sctp: [Deprecated]: syz.5.5954 (pid 20967) Use of struct sctp_assoc_value in delayed_ack socket option.
[  595.368223][T20967] Use struct sctp_sack_info instead
[  595.993343][T20983] <
[  596.191990][T20987] loop6: detected capacity change from 0 to 512
[  596.229339][T20987] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  596.347323][T20987] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128
[  596.430745][T20990] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5964'.
[  596.537822][T20998] loop6: detected capacity change from 0 to 1024
[  596.543481][T20998] EXT4-fs: Ignoring removed nobh option
[  596.546155][T20998] EXT4-fs: Ignoring removed bh option
[  596.550044][T21000] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  596.565596][T20998] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  596.618748][T18166] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  596.655496][T21008] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5972'.
[  597.033659][   T54] Bluetooth: hci1: command 0x0405 tx timeout
[  597.033721][ T5939] Bluetooth: hci2: command 0x0c1a tx timeout
[  597.405780][T21012] loop6: detected capacity change from 0 to 32768
[  597.417525][T21012] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.5973 (21012)
[  597.430815][T21012] BTRFS info (device loop6): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  597.434651][T21012] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  597.438450][T21012] BTRFS info (device loop6): using free-space-tree
[  597.651080][T18166] BTRFS info (device loop6): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  598.212854][T21057] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5988'.
[  598.216056][T21057] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[  598.222211][T21057] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  598.335238][T21066] netlink: 'syz.6.5993': attribute type 3 has an invalid length.
[  599.852852][T21101] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6007'.
[  599.859760][T21101] tipc: Started in network mode
[  599.864213][T21101] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711
[  599.880838][T21101] tipc: Enabled bearer <udp:syz0>, priority 0
[  600.154265][T21108] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6010'.
[  600.361199][   T33] audit: type=1326 audit(1755254677.135:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21122 comm="syz.6.6017" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f976038ebe9 code=0x0
[  600.671099][T21131] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  600.675112][T21131] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  601.074819][ T5980] tipc: Node number set to 4269801514
[  601.431392][T21146] program syz.6.6025 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  601.487164][T21148] loop6: detected capacity change from 0 to 164
[  601.490909][T21148] ISOFS: unable to read i-node block
[  601.493642][T21148] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  601.504927][T21148] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6026'.
[  601.511661][T21148] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6026'.
[  602.283437][ T5980] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[  602.442807][ T5980] usb 1-1: Using ep0 maxpacket: 16
[  602.446760][ T5980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  602.451166][ T5980] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  602.458521][ T5980] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  602.462268][ T5980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  602.467292][ T5980] usb 1-1: Product: syz
[  602.469187][ T5980] usb 1-1: Manufacturer: syz
[  602.471228][ T5980] usb 1-1: SerialNumber: syz
[  602.475677][ T5980] usb 1-1: config 0 descriptor??
[  602.701438][ T5980] usb 1-1: USB disconnect, device number 80
[  603.991641][T21195] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6046'.
[  604.071144][T21201] netlink: 'syz.5.6049': attribute type 29 has an invalid length.
[  604.093557][T21203] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6050'.
[  604.096809][T21203] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6050'.
[  604.101058][T21203] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6050'.
[  604.404436][T21223] tc_dump_action: action bad kind
[  604.554787][T21230] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6063'.
[  604.559026][T21229] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6063'.
[  605.318375][   T51] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[  605.489398][   T51] usb 1-1: Using ep0 maxpacket: 8
[  605.494191][   T51] usb 1-1: unable to get BOS descriptor or descriptor too short
[  605.498729][   T51] usb 1-1: config 8 has an invalid interface number: 154 but max is 0
[  605.510660][   T51] usb 1-1: config 8 has no interface number 0
[  605.513349][   T51] usb 1-1: config 8 interface 154 has no altsetting 0
[  605.518735][   T51] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=4f.f6
[  605.523758][   T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  605.527340][   T51] usb 1-1: Product: syz
[  605.529129][   T51] usb 1-1: Manufacturer: syz
[  605.531062][   T51] usb 1-1: SerialNumber: syz
[  605.549586][T21252] loop6: detected capacity change from 0 to 512
[  605.834840][   T51] mdc800 1-1:8.154: probe fails -> wrong Interface
[  605.839430][   T51] usb 1-1: USB disconnect, device number 81
[  606.343560][T21269] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253
[  606.347594][T21269] PKCS7: Only support pkcs7_signedData type
[  606.732162][T21272] __nla_validate_parse: 1 callbacks suppressed
[  606.732171][T21272] netlink: 208 bytes leftover after parsing attributes in process `syz.6.6080'.
[  606.799938][T21276] 9pnet_fd: Insufficient options for proto=fd
[  606.819179][T21278] loop6: detected capacity change from 0 to 128
[  606.827025][T21278] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  606.834448][T21278] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  607.024876][   T33] audit: type=1326 audit(1755254683.365:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21295 comm="syz.6.6092" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f976038ebe9 code=0x0
[  607.112906][T21302] loop6: detected capacity change from 0 to 512
[  607.142940][T21302] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.6094: bad orphan inode 11862016
[  607.149688][T21302] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  607.155196][T21302] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  607.195210][T18166] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  608.816455][T21354] overlayfs: failed to clone upperpath
[  610.002516][T21386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6133'.
[  610.034943][T21386] 8021q: adding VLAN 0 to HW filter on device bond1
[  610.057848][T21386] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  610.208890][T21389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6134'.
[  610.508240][T21405] sctp: [Deprecated]: syz.6.6142 (pid 21405) Use of int in maxseg socket option.
[  610.508240][T21405] Use struct sctp_assoc_value instead
[  610.665254][T21413] input: syz1 as /devices/virtual/input/input40
[  610.826830][T21419] netlink: 284 bytes leftover after parsing attributes in process `syz.5.6149'.
[  611.058075][T21430] netlink: 144 bytes leftover after parsing attributes in process `syz.5.6154'.
[  611.131160][T21434] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6156'.
[  611.143885][T21434] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  611.698869][T21481] batadv1: entered promiscuous mode
[  611.702003][T21481] 8021q: adding VLAN 0 to HW filter on device batadv1
[  614.525044][T21571] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6215'.
[  614.868906][T21583] loop6: detected capacity change from 0 to 32768
[  614.967479][T21583] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  614.967497][T21583]   allowing incompatible features above 0.0: (unknown version)
[  614.967505][T21583]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  614.983690][T21583] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0
[  614.987088][T21583] bcachefs (loop6): initializing new filesystem
[  614.997229][T21583] bcachefs (loop6): going read-write
[  615.004794][T21583] bcachefs (loop6): marking superblocks
[  615.012539][T21583] bcachefs (loop6): initializing freespace
[  615.018303][T21583] bcachefs (loop6): done initializing freespace
[  615.022617][T21583] bcachefs (loop6): reading snapshots table
[  615.025162][T21583] bcachefs (loop6): reading snapshots done
[  615.063070][T21583] bcachefs (loop6): done starting filesystem
[  615.097685][T21610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6229'.
[  615.134981][ T5939] Bluetooth: hci0: Malformed LE Event: 0x0d
[  615.145040][T18166] bcachefs (loop6): shutting down
[  615.147367][T18166] bcachefs (loop6): going read-only
[  615.151023][T18166] bcachefs (loop6): finished waiting for writes to stop
[  615.157857][T18166] bcachefs (loop6): flushing journal and stopping allocators, journal seq 2
[  615.198715][T18166] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 3
[  615.204203][T18166] bcachefs (loop6): clean shutdown complete, journal seq 4
[  615.208446][T18166] bcachefs (loop6): marking filesystem clean
[  615.225640][T18166] bcachefs (loop6): shutdown complete
[  615.303746][   T51] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[  615.463848][   T51] usb 1-1: Using ep0 maxpacket: 32
[  615.470156][   T51] usb 1-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=11.bf
[  615.474208][   T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  615.477864][   T51] usb 1-1: Product: syz
[  615.480082][   T51] usb 1-1: Manufacturer: syz
[  615.482170][   T51] usb 1-1: SerialNumber: syz
[  615.486633][   T51] usb 1-1: config 0 descriptor??
[  615.491648][   T51] usb 1-1: MBOX3: Invalid descriptor size=18.
[  615.708597][   T51] usb 1-1: USB disconnect, device number 82
[  617.488174][T21642] netlink: 'syz.6.6231': attribute type 6 has an invalid length.
[  617.775629][T21659] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  617.808300][T21661] ptrace attach of "/syz-executor exec"[18166] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              
[  618.570119][T21668] loop6: detected capacity change from 0 to 32768
[  618.668138][T21668] find_entry called with index >= next_index
[  618.670631][T21668] find_entry called with index >= next_index
[  618.677717][T21668] find_entry called with index >= next_index
[  618.693522][T21668] ERROR: (device loop6): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 1
[  618.693522][T21668] 
[  618.701974][T21668] ERROR: (device loop6): remounting filesystem as read-only
[  618.707981][T21668] ERROR: (device loop6): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 3
[  618.707981][T21668] 
[  618.713374][T21668] ERROR: (device loop6): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 4
[  618.713374][T21668] 
[  619.666537][T21690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6263'.
[  619.670320][T21690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6263'.
[  619.735261][T21699] loop6: detected capacity change from 0 to 256
[  619.738384][T21699] exfat: Deprecated parameter 'utf8'
[  619.744402][T21699] exfat: Deprecated parameter 'utf8'
[  619.746647][T21699] exfat: Deprecated parameter 'utf8'
[  619.774666][T21699] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x743489c8, utbl_chksum : 0xe619d30d)
[  619.779925][   T33] audit: type=1326 audit(1755254695.292:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21702 comm="syz.5.6270" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3421b8ebe9 code=0x7ff00000
[  619.792634][   T33] audit: type=1326 audit(1755254695.292:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21702 comm="syz.5.6270" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3421b8ebe9 code=0x7ff00000
[  619.812638][   T33] audit: type=1326 audit(1755254695.292:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21702 comm="syz.5.6270" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3421b8ebe9 code=0x7ff00000
[  619.829015][   T33] audit: type=1326 audit(1755254695.292:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21702 comm="syz.5.6270" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3421b8ebe9 code=0x7ff00000
[  619.849116][   T33] audit: type=1326 audit(1755254695.292:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21702 comm="syz.5.6270" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3421b8ebe9 code=0x7ff00000
[  619.857053][   T33] audit: type=1326 audit(1755254695.292:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21702 comm="syz.5.6270" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3421b8ebe9 code=0x7ff00000
[  619.867821][   T33] audit: type=1326 audit(1755254695.292:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21702 comm="syz.5.6270" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3421b8ebe9 code=0x7ff00000
[  619.877068][   T33] audit: type=1326 audit(1755254695.292:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21702 comm="syz.5.6270" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3421b8ebe9 code=0x7ff00000
[  619.888154][   T33] audit: type=1326 audit(1755254695.292:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21702 comm="syz.5.6270" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3421b8ebe9 code=0x7ff00000
[  619.896343][   T33] audit: type=1326 audit(1755254695.292:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21702 comm="syz.5.6270" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3421b8ebe9 code=0x7ff00000
[  619.989109][T21720] loop6: detected capacity change from 0 to 8
[  620.026815][T21720] SQUASHFS error: zlib decompression failed, data probably corrupt
[  620.040916][T21720] SQUASHFS error: Failed to read block 0x9b: -5
[  620.043193][T21720] SQUASHFS error: Unable to read metadata cache entry [99]
[  620.045514][T21720] SQUASHFS error: Unable to read inode 0x127
[  620.094189][T21732] overlayfs: missing 'lowerdir'
[  620.097412][T21733] delete_channel: no stack
[  620.141674][T21739] loop6: detected capacity change from 0 to 1024
[  620.166902][T16177] hfsplus: b-tree write err: -5, ino 4
[  620.204164][T21744] loop6: detected capacity change from 0 to 256
[  620.220774][T21744] FAT-fs (loop6): Directory bread(block 64) failed
[  620.227619][T21744] FAT-fs (loop6): Directory bread(block 65) failed
[  620.231188][T21744] FAT-fs (loop6): Directory bread(block 66) failed
[  620.235531][T21744] FAT-fs (loop6): Directory bread(block 67) failed
[  620.239303][T21744] FAT-fs (loop6): Directory bread(block 68) failed
[  620.242093][T21744] FAT-fs (loop6): Directory bread(block 69) failed
[  620.246331][T21744] FAT-fs (loop6): Directory bread(block 70) failed
[  620.249064][T21744] FAT-fs (loop6): Directory bread(block 71) failed
[  620.251769][T21744] FAT-fs (loop6): Directory bread(block 72) failed
[  620.256690][T21744] FAT-fs (loop6): Directory bread(block 73) failed
[  621.048828][T21783] macsec2: entered promiscuous mode
[  621.051036][T21783] macsec2: entered allmulticast mode
[  621.343895][   T10] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  621.475434][T21805] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  621.514818][   T10] usb 1-1: Using ep0 maxpacket: 8
[  621.519699][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0
[  621.524135][   T10] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[  621.531840][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  621.538210][   T10] usb 1-1: config 0 descriptor??
[  621.542348][   T10] hso 1-1:0.0: Can't find BULK IN endpoint
[  621.761040][   T51] usb 1-1: USB disconnect, device number 83
[  623.939665][T21854] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6339'.
[  623.950376][T21854] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6339'.
[  624.317058][T21878] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6352'.
[  625.216806][T21902] loop6: detected capacity change from 0 to 32768
[  626.528737][   T10] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[  626.692865][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  626.700742][   T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  626.704535][   T10] usb 1-1: config 1 has no interface number 1
[  626.709573][   T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  626.714341][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  626.718500][   T10] usb 1-1: Product: syz
[  626.720349][   T10] usb 1-1: Manufacturer: syz
[  626.725447][   T10] usb 1-1: SerialNumber: syz
[  626.957551][   T10] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  626.966293][   T10] usb 1-1: 2:1 : sample bitwidth 139 in over sample bytes 13
[  626.969780][   T10] usb 1-1: 2:1 : unsupported sample bitwidth 139 in 13 bytes
[  626.984781][   T10] usb 1-1: USB disconnect, device number 84
[  627.086043][T21972] 9pnet_fd: Insufficient options for proto=fd
[  627.506758][T21982] Invalid ELF header magic: != ELF
[  628.343511][T21995] futex_wake_op: syz.5.6403 tries to shift op by 144; fix this program
[  628.847195][   T33] kauditd_printk_skb: 56 callbacks suppressed
[  628.847210][   T33] audit: type=1326 audit(1755254703.776:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22014 comm="syz.0.6413" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf0378ebe9 code=0x0
[  629.775017][T22036] trusted_key: encrypted_key: master key parameter 'C' is invalid
[  629.954211][T22047] program syz.0.6427 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  632.817866][   T33] audit: type=1326 audit(1755254707.489:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22156 comm="syz.5.6475" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3421b8ebe9 code=0x7ffc0000
[  632.918100][   T33] audit: type=1326 audit(1755254707.489:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22156 comm="syz.5.6475" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3421b8ebe9 code=0x7ffc0000
[  633.001367][   T33] audit: type=1326 audit(1755254707.489:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22156 comm="syz.5.6475" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3421b8d69f code=0x7ffc0000
[  633.046063][   T33] audit: type=1326 audit(1755254707.489:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22156 comm="syz.5.6475" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3421b8ebe9 code=0x7ffc0000
[  633.084363][   T33] audit: type=1326 audit(1755254707.489:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22156 comm="syz.5.6475" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3421b8ebe9 code=0x7ffc0000
[  633.101663][   T33] audit: type=1326 audit(1755254707.760:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22162 comm="syz.5.6476" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3421b8ebe9 code=0x7ffc0000
[  633.110769][   T33] audit: type=1326 audit(1755254707.760:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22162 comm="syz.5.6476" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3421b8ebe9 code=0x7ffc0000
[  633.119972][   T33] audit: type=1326 audit(1755254707.770:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22162 comm="syz.5.6476" exe="/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f3421b8ebe9 code=0x7ffc0000
[  633.132271][   T33] audit: type=1326 audit(1755254707.770:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22162 comm="syz.5.6476" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3421b8ebe9 code=0x7ffc0000
[  633.654439][T22173] loop6: detected capacity change from 0 to 1
[  633.657860][T22173]  loop6: [POWERTEC] p1 p2 p3 p4 p5
[  633.660876][T22173] loop6: p1 start 2602905181 is beyond EOD, truncated
[  633.663795][T22173] loop6: p2 start 1745589262 is beyond EOD, truncated
[  633.666745][T22173] loop6: p3 start 325178268 is beyond EOD, truncated
[  633.670483][T22173] loop6: p4 start 2326339850 is beyond EOD, truncated
[  633.673713][T22173] loop6: p5 start 2562259694 is beyond EOD, truncated
[  634.329946][T22209] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.6498'.
[  634.816074][T22237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6510'.
[  634.819998][T22237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6510'.
[  634.823706][T22237] netlink: 'syz.0.6510': attribute type 13 has an invalid length.
[  634.827795][T22237] netlink: 'syz.0.6510': attribute type 12 has an invalid length.
[  634.883117][T22239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6511'.
[  634.887119][T22239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6511'.
[  634.891345][T22239] netlink: 'syz.0.6511': attribute type 13 has an invalid length.
[  634.894901][T22239] netlink: 'syz.0.6511': attribute type 11 has an invalid length.
[  635.838967][T22275] netlink: 'syz.6.6528': attribute type 2 has an invalid length.
[  636.352391][T22297] netlink: 'syz.6.6537': attribute type 3 has an invalid length.
[  636.711630][T22303] loop6: detected capacity change from 0 to 40427
[  636.716130][T22303] F2FS-fs (loop6): build fault injection rate: 771
[  636.721707][T22303] F2FS-fs (loop6): invalid crc value
[  636.771890][T22303] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  636.776927][T22303] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  636.807448][T22303] syz.6.6540: attempt to access beyond end of device
[  636.807448][T22303] loop6: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  636.852735][T18166] syz-executor: attempt to access beyond end of device
[  636.852735][T18166] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  636.861848][T18166] CPU: 1 UID: 0 PID: 18166 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  636.861867][T18166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  636.861874][T18166] Call Trace:
[  636.861879][T18166]  <TASK>
[  636.861885][T18166]  dump_stack_lvl+0x189/0x250
[  636.861908][T18166]  ? __pfx_dump_stack_lvl+0x10/0x10
[  636.861923][T18166]  ? __pfx_queue_work_on+0x10/0x10
[  636.861936][T18166]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  636.861953][T18166]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  636.861978][T18166]  f2fs_handle_critical_error+0x37c/0x540
[  636.862003][T18166]  f2fs_write_end_io+0x886/0xb60
[  636.862031][T18166]  __submit_merged_bio+0x27a/0x6a0
[  636.862054][T18166]  __submit_merged_write_cond+0x255/0x530
[  636.862077][T18166]  f2fs_write_data_pages+0x261d/0x3000
[  636.862095][T18166]  ? finish_task_switch+0x266/0x950
[  636.862138][T18166]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  636.862195][T18166]  ? __mod_zone_page_state+0xd7/0x140
[  636.862220][T18166]  ? folios_put_refs+0x560/0x640
[  636.862244][T18166]  ? __pfx_folios_put_refs+0x10/0x10
[  636.862261][T18166]  ? rcu_is_watching+0x15/0xb0
[  636.862281][T18166]  ? __lock_acquire+0xab9/0xd20
[  636.862315][T18166]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  636.862334][T18166]  do_writepages+0x32e/0x550
[  636.862360][T18166]  ? do_raw_spin_unlock+0x4d/0x240
[  636.862380][T18166]  filemap_fdatawrite+0x199/0x240
[  636.862397][T18166]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  636.862452][T18166]  ? do_raw_spin_unlock+0x4d/0x240
[  636.862473][T18166]  f2fs_sync_dirty_inodes+0x31f/0x830
[  636.862497][T18166]  f2fs_write_checkpoint+0x95a/0x1df0
[  636.862529][T18166]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  636.862579][T18166]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  636.862590][T18166]  ? kfree+0x18e/0x440
[  636.862606][T18166]  ? kill_f2fs_super+0x298/0x6c0
[  636.862624][T18166]  kill_f2fs_super+0x2c3/0x6c0
[  636.862642][T18166]  ? __pfx_kill_f2fs_super+0x10/0x10
[  636.862652][T18166]  ? radix_tree_delete_item+0x2b6/0x400
[  636.862676][T18166]  ? shrinker_free+0x2ce/0x3e0
[  636.862691][T18166]  deactivate_locked_super+0xbc/0x130
[  636.862730][T18166]  cleanup_mnt+0x425/0x4c0
[  636.862744][T18166]  ? lockdep_hardirqs_on+0x9c/0x150
[  636.862762][T18166]  task_work_run+0x1d4/0x260
[  636.862808][T18166]  ? __pfx_task_work_run+0x10/0x10
[  636.862823][T18166]  ? __x64_sys_umount+0x122/0x160
[  636.862842][T18166]  ? exit_to_user_mode_loop+0x40/0x110
[  636.862863][T18166]  exit_to_user_mode_loop+0xec/0x110
[  636.862881][T18166]  do_syscall_64+0x2bd/0x3b0
[  636.862897][T18166]  ? lockdep_hardirqs_on+0x9c/0x150
[  636.862912][T18166]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.862925][T18166]  ? exc_page_fault+0x9f/0xf0
[  636.862942][T18166]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.862953][T18166] RIP: 0033:0x7f976038ff17
[  636.862966][T18166] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  636.862976][T18166] RSP: 002b:00007ffed009cc38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  636.862990][T18166] RAX: 0000000000000000 RBX: 00007f9760411c05 RCX: 00007f976038ff17
[  636.862998][T18166] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed009ccf0
[  636.863005][T18166] RBP: 00007ffed009ccf0 R08: 0000000000000000 R09: 0000000000000000
[  636.863012][T18166] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffed009dd80
[  636.863020][T18166] R13: 00007f9760411c05 R14: 00000000000975f2 R15: 00007ffed009ddc0
[  636.863044][T18166]  </TASK>
[  636.863950][T18166] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  637.541807][T22328] bridge_slave_0: left allmulticast mode
[  637.544392][T22328] bridge_slave_0: left promiscuous mode
[  637.547429][T22328] bridge0: port 1(bridge_slave_0) entered disabled state
[  637.559204][T22328] bridge_slave_1: left allmulticast mode
[  637.561861][T22328] bridge_slave_1: left promiscuous mode
[  637.564385][T22328] bridge0: port 2(bridge_slave_1) entered disabled state
[  637.577437][T22328] bond0: (slave bond_slave_0): Releasing backup interface
[  637.588687][T22328] bond0: (slave bond_slave_1): Releasing backup interface
[  637.614215][T22328] team0: Port device team_slave_0 removed
[  637.627834][T22328] team0: Port device team_slave_1 removed
[  637.631055][T22328] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  637.634338][T22328] batman_adv: batadv0: Removing interface: batadv_slave_0
[  637.648813][T22328] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  637.652315][T22328] batman_adv: batadv0: Removing interface: batadv_slave_1
[  637.670926][T22328] bond1: (slave bridge1): Releasing backup interface
[  638.820563][T22341] 9pnet_virtio: no channels available for device syz
[  639.869853][T22366] loop6: detected capacity change from 0 to 32768
[  639.873946][T22366] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6567 (22366)
[  639.880098][T22366] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  639.884450][T22366] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  639.902918][T22366] BTRFS info (device loop6): rebuilding free space tree
[  639.915682][T22366] BTRFS info (device loop6): disabling free space tree
[  639.918292][T22366] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  639.921480][T22366] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  639.940148][   T33] kauditd_printk_skb: 4 callbacks suppressed
[  639.940163][   T33] audit: type=1800 audit(1755254714.159:401): pid=22366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6567" name="file1" dev="loop6" ino=260 res=0 errno=0
[  639.994534][T18166] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  640.998976][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  641.298567][T22433] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6590'.
[  641.302540][T22433] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  641.350614][T22436] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6593'.
[  645.006047][T22549] loop6: detected capacity change from 0 to 40427
[  645.011309][T22549] F2FS-fs (loop6): Image doesn't support compression
[  645.013831][T22549] F2FS-fs (loop6): build fault injection rate: 690
[  645.018038][T22549] F2FS-fs (loop6): invalid crc value
[  645.063184][T22549] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  645.070805][T22549] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  645.921423][T22594] loop6: detected capacity change from 0 to 512
[  645.928990][T22594] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  645.974561][T22594] EXT4-fs warning (device loop6): dx_probe:837: inode #2: comm syz.6.6660: Unimplemented hash flags: 0x0001
[  645.995517][T22594] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.6660: Corrupt directory, running e2fsck is recommended
[  646.027115][T18166] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  649.111145][T22644] sctp: [Deprecated]: syz.0.6680 (pid 22644) Use of int in max_burst socket option deprecated.
[  649.111145][T22644] Use struct sctp_assoc_value instead
[  649.521543][T22646] batadv_slave_0: entered promiscuous mode
[  649.529543][T22645] batadv_slave_0: left promiscuous mode
[  649.698015][   T13] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2
[  649.704481][   T13] ref_tracker: netdev@ffff88811a7fa610 has 1/1 users at
[  649.704481][   T13]      batadv_hard_if_event+0xf0f/0x1730
[  649.704481][   T13]      notifier_call_chain+0x1b6/0x3e0
[  649.704481][   T13]      register_netdevice+0x1608/0x1ae0
[  649.704481][   T13]      veth_newlink+0x5cc/0xa50
[  649.704481][   T13]      rtnl_newlink_create+0x310/0xb00
[  649.704481][   T13]      rtnl_newlink+0x16d6/0x1c70
[  649.704481][   T13]      rtnetlink_rcv_msg+0x7cf/0xb70
[  649.704481][   T13]      netlink_rcv_skb+0x208/0x470
[  649.704481][   T13]      netlink_unicast+0x82f/0x9e0
[  649.704481][   T13]      netlink_sendmsg+0x805/0xb30
[  649.704481][   T13]      __sock_sendmsg+0x21c/0x270
[  649.704481][   T13]      __sys_sendto+0x3bd/0x520
[  649.704481][   T13]      __x64_sys_sendto+0xde/0x100
[  649.704481][   T13]      do_syscall_64+0xfa/0x3b0
[  649.704481][   T13]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  649.704481][   T13] 
[  649.778000][T22654] loop6: detected capacity change from 0 to 4096
[  649.787817][T22654] EXT4-fs (loop6): Test dummy encryption mode enabled
[  649.794259][T22654] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  649.797959][T22654] System zones: 0-5
[  649.803389][T22654] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  649.822372][T22654] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  649.834830][T22654] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  649.858286][T18166] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.

VM DIAGNOSIS:
10:37:07  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffd40001d57c1 RBX=ffffea0000eabe08 RCX=dffffc0000000000 RDX=0000000000000000
RSI=0000000000012a44 RDI=000000000003aaf8 RBP=ffffc90007b4f890 RSP=ffffc90007b4f5e0
R8 =ffffea0000a15cb3 R9 =1ffffd4000142b96 R10=dffffc0000000000 R11=fffff94000142b97
R12=00007f3421800000 R13=00007f34217f0000 R14=0000000000000000 R15=ffff88810afe8ac0
RIP=ffffffff82094289 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557da03500 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555558693808 CR3=000000004175c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f9760412e53
XMM06=0000000000000000 00007f9760412e4d XMM07=0000000000000000 00007f9760412e61
XMM08=0000000000000000 00007f9760412ee7 XMM09=0000000000000000 00007f9760412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000005d RBX=000000000000005d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000106eb0
R8 =ffff88801fcf0237 R9 =1ffff11003f9e046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af98ce R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f97603a98f0 CR3=000000003341c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f3421c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
