last executing test programs:

1m12.375925075s ago: executing program 0 (id=356):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000002c0)='./file0\x00', 0x808000, &(0x7f0000000000)=ANY=[], 0x1, 0x2dd, &(0x7f0000000600)="$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")

1m12.307004959s ago: executing program 0 (id=358):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRES8=0x0], 0x1, 0x123c, &(0x7f0000000200)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0)
fcntl$setlease(r0, 0x400, 0x1)
close$binfmt(r0)
unlink(&(0x7f0000000180)='./file1\x00')

1m12.137837875s ago: executing program 0 (id=361):
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={0xffffffffffffffff, 0x300}, 0x8)

1m12.086645127s ago: executing program 0 (id=363):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@bh}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x200000, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000)

1m11.912985507s ago: executing program 0 (id=368):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x1, 0x0, 0x0, 0x1, 0x7fff}, 0x7ff})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result}], 0x1c)

1m11.535007308s ago: executing program 0 (id=369):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, 0x0)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, &(0x7f00000000c0))

1m11.118934222s ago: executing program 32 (id=369):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, 0x0)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, &(0x7f00000000c0))

1m6.829535484s ago: executing program 1 (id=401):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x20)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0)
ioctl(r0, 0x2, &(0x7f00000008c0)="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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000711181000000000016000000000008009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x22)
timerfd_settime(r2, 0x2, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000140))
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0)
read$hidraw(r2, &(0x7f0000000240)=""/189, 0xbd)
syz_usb_control_io(r3, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000003c0)={0x40, 0xe, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x3920e, r0, 0x3, 0x1, 0x3, 0x6})

1m5.416034456s ago: executing program 1 (id=414):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0)

1m5.200653111s ago: executing program 1 (id=418):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0xffffff3d, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1f}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c010}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000010301"], 0x20}}, 0x4008000)

1m5.118085884s ago: executing program 1 (id=421):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0)
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})

1m4.887578726s ago: executing program 1 (id=424):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x19e172f08959ac4a, 0x10001, 0x47}, 0x2c)

1m4.639883604s ago: executing program 1 (id=428):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e)
getsockopt(r2, 0x111, 0x1, 0x0, &(0x7f0000000080))

1m4.516203s ago: executing program 33 (id=428):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e)
getsockopt(r2, 0x111, 0x1, 0x0, &(0x7f0000000080))

1.368357003s ago: executing program 4 (id=1211):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'ipvlan0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}})

1.367757462s ago: executing program 4 (id=1213):
syz_open_dev$vbi(0x0, 0x1, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000008000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000014010000033800001d13f8ff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffe7}, 0x48)

719.128222ms ago: executing program 3 (id=1221):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000200)=[{0x7c}, {0x6}]})

655.977821ms ago: executing program 3 (id=1223):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3c}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40}, 0x94)

655.770124ms ago: executing program 2 (id=1224):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/consoles\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4080, 0xff0}], 0x1, 0x2b, 0x0)

581.020785ms ago: executing program 3 (id=1225):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x804000, &(0x7f0000000e40)=ANY=[@ANYBLOB='mode=00000000000000000000177,mode=00000000000000000000005,shortad,utf8,shortad,shortad,session=00000000000016777223,umask=00000000000000000000250,uid=ignore,shortad,dmode=00000000000000000170430,gid=ignore,adinicb,gid=forget,mode=00000000000000000002000,lastblock=00000000000000001024,shortad,euid>', @ANYBLOB=',fsmagic=0x0000000000000002,smackfsf^oor=smackfstrans-ute,fowner>', @ANYBLOB="d4199c3f003c5c8d6d222e24bfdda0389fe9ebc4333e5d9521a6cc631f653d174fb504401934b83a72449268d54cd62dbbb66d7ba1b35073e60bf699ea6cb1b5923e3a3d5e51423a7c1a13920aea8e6d3c7d53f4aa34acbe0b78df03569d0b620d54f96b33fd4895161524abc937b9d619a3add1c3b57ad5124502de88fe8f0e436f04aded9c4f7b60876d2ac9caa8502b7faa4fe85e7819540dabf8e44ccdd382e5292164879e30f5b039e5f2314adff12c154c627fabadc824eb6d2fc48d1bc75a9dd2589e2c3324cd33f0a8508f6d4a899b6e8b45fec164", @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b6673747261736d7574653d001c0b235ffdce27803854a81c498e5bc58fdfc2e25738bee597df2c00"/55], 0x2, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir")
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000a000180c2000000aaaaaaaaaa00000000000000000000000000ffffffffffff7aec1dc0544400000000000000000000000001"])

580.662453ms ago: executing program 2 (id=1226):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x640, 0x1, 0x2800, 0xd59f83, 0x19f2, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}})

470.919203ms ago: executing program 2 (id=1227):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x6f, 0x3d, 0x1, 0xfff7ffff, 0x0, {0x1}, [@typed={0x4, 0x11f}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @ipv4=@multicast2}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)

470.579488ms ago: executing program 2 (id=1228):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x8000, {0x0, 0x0, 0x0, 0x9, 0x800000000000, 0x0, 0x0, 0x10, 0x1d, "2401010000000000000d0ec0c1b4e9b1c4369d03740250ceaac500b1b3d741dd17c1c50d38ef2a565ef1e85c58d36500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d20000000100", "24431a1e58a68e174f0000000000ef8a07580000000000002000", [0x5]}})
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x20000000000003, 0x8000000000000002, 0x0, 0x0, 0x10010, 0xa, "c25f7e0d775e40aee623452107249fe0bdbfce2fe240da8dce81a69b0edc7a60ad33060000003e508b8040c7bc6e583cc41170a13349e2cfcc4b64bf41ee00", "a5526c3b6a46c15c42022ee6cc29fd6294ee5056c4e8602a8a28609c370633cd58cda9ddec304859946ea27fb0b97bb826884c3d749834ad1e6c00", "412d226bd7dc8ce5783126ae76e309616391f73ea9c19b4a27828e2d00195a1f", [0x2, 0x1ff]})

470.453303ms ago: executing program 3 (id=1229):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x68, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x4}]}, 0x68}}, 0x0)

407.774659ms ago: executing program 3 (id=1230):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local}, &(0x7f00000004c0)=0x20)

407.392224ms ago: executing program 3 (id=1231):
bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)

400.373859ms ago: executing program 4 (id=1232):
syz_emit_ethernet(0x4a, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "623eebe039a1f617fd02722e3486ebd9"}]}}}}}}}, 0x0)

288.650968ms ago: executing program 4 (id=1233):
syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
r0 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x4, 0x10100, 0x0, 0x2000000}, &(0x7f0000000140), &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_setup(0x1868, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000000700)=<r2=>0x0, &(0x7f0000000640))
syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0)

288.288504ms ago: executing program 2 (id=1234):
removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)=@known='security.apparmor\x00')

181.755868ms ago: executing program 2 (id=1235):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r2, 0x6, 0x6, 0x0, &(0x7f0000000100)=0xffffff83)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in6=@remote, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x3501, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff, 0xfffffff9}}, 0xe8)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
sendmmsg(r3, &(0x7f0000000180), 0x400000000000077, 0x7600)

181.59848ms ago: executing program 4 (id=1236):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x3c, 0x19, 0x15, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0x20, 0x9, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@loopback={0x8000500}}, @typed={0x8, 0x132, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x3c}], 0x1}, 0x0)

0s ago: executing program 4 (id=1237):
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x8000000}, 0xc)

kernel console output (not intermixed with test programs):

ite (off=5120, len=1024) cancelled because transaction is not started
[   69.067890][ T6312] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.071053][   T26] Quota error (device loop0): write_blk: dquota write failed
[   69.103934][   T26] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list
[   69.108430][   T26] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[   69.113010][   T26] Quota error (device loop0): v2_write_file_info: Can't write info structure
[   69.118747][ T5858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.119034][   T26] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   69.509209][ T6327] loop0: detected capacity change from 0 to 32768
[   69.549558][ T6327] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[   69.587187][ T5858] ocfs2: Unmounting device (7,0) on (node local)
[   70.513250][ T6340] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   70.515786][ T6340] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   70.518495][ T6340] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   70.531700][ T6340] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[   70.726347][ T6342] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in;
[   70.726347][ T6342]    program syz.0.152 not setting count and/or reply_len properly
[   70.968344][ T6348] loop2: detected capacity change from 0 to 1024
[   71.000259][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.003297][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.018351][   T24] usb 3-1: USB disconnect, device number 3
[   71.020603][ T6348] hfsplus: failed to load root directory
[   71.269856][ T6362] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.327670][ T6354] loop2: detected capacity change from 0 to 32768
[   71.333856][ T6354] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.157 (6354)
[   71.348968][ T6364] netlink: 'syz.1.163': attribute type 4 has an invalid length.
[   71.355587][ T6354] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   71.360062][ T6354] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[   71.365755][ T6354] BTRFS info (device loop2): using free-space-tree
[   71.565160][ T6383] hub 1-0:1.0: USB hub found
[   71.576321][ T6383] hub 1-0:1.0: 1 port detected
[   71.685810][ T5856] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   71.740098][ T6360] loop0: detected capacity change from 0 to 32768
[   71.788200][ T6360] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   71.821493][ T6360] XFS (loop0): Ending clean mount
[   71.840505][ T6360] XFS (loop0): Quotacheck needed: Please wait.
[   71.879532][ T6360] XFS (loop0): Quotacheck: Done.
[   72.017223][ T5858] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   72.307049][ T6394] loop2: detected capacity change from 0 to 256
[   73.099289][ T6410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.173'.
[   73.170810][   T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   73.340886][   T24] usb 1-1: Using ep0 maxpacket: 8
[   73.346391][   T24] usb 1-1: config 2 has an invalid interface number: 226 but max is 0
[   73.349822][   T24] usb 1-1: config 2 has no interface number 0
[   73.354512][   T24] usb 1-1: config 2 interface 226 has no altsetting 0
[   73.360343][   T24] usb 1-1: New USB device found, idVendor=05c8, idProduct=0403, bcdDevice=d4.d4
[   73.364141][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.367332][   T24] usb 1-1: Product: syz
[   73.370936][ T6424] netlink: 44 bytes leftover after parsing attributes in process `syz.1.180'.
[   73.374488][ T6424] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   73.381022][   T24] usb 1-1: Manufacturer: syz
[   73.382889][   T24] usb 1-1: SerialNumber: syz
[   73.424850][ T6428] Driver unsupported XDP return value 0 on prog  (id 23) dev N/A, expect packet loss!
[   73.494742][ T6430] loop1: detected capacity change from 0 to 4096
[   73.595928][ T6436] loop2: detected capacity change from 0 to 4096
[   73.618679][   T24] usb 1-1: Found UVC 0.00 device syz (05c8:0403)
[   73.619913][ T6436] ntfs3(loop2): ino=1a, mi_enum_attr
[   73.630226][ T6436] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   73.639334][   T24] usb 1-1: No valid video chain found.
[   73.674501][   T24] usb 1-1: USB disconnect, device number 2
[   73.869866][ T6447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.191'.
[   73.899677][ T6440] loop2: detected capacity change from 0 to 32768
[   74.277036][ T6470] loop1: detected capacity change from 0 to 4096
[   74.480791][   T10] usb 1-1: new low-speed USB device number 3 using dummy_hcd
[   74.633240][   T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8
[   74.637705][   T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt
[   74.643297][   T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt
[   74.650394][   T10] usb 1-1: string descriptor 0 read error: -22
[   74.653425][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   74.657235][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.667083][ T6473] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   74.746611][ T6490] loop1: detected capacity change from 0 to 32768
[   74.750371][ T6490] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.210 (6490)
[   74.760373][ T6490] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   74.764499][ T6490] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   74.768073][ T6490] BTRFS info (device loop1): using free-space-tree
[   74.844379][ T5851] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   74.897773][   T10] cdc_ncm 1-1:1.0: bind() failure
[   74.930333][   T10] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[   74.935884][   T10] cdc_ncm 1-1:1.1: bind() failure
[   74.947027][   T10] usb 1-1: USB disconnect, device number 3
[   75.073105][ T6513] loop1: detected capacity change from 0 to 1024
[   75.124541][   T83] hfsplus: b-tree write err: -5, ino 4
[   75.134443][ T6515] loop2: detected capacity change from 0 to 256
[   75.345277][ T6527] loop2: detected capacity change from 0 to 2048
[   75.377317][ T6528] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   75.388205][   T33] audit: type=1800 audit(1755254868.872:9): pid=6527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.220" name="file1" dev="loop2" ino=15 res=0 errno=0
[   75.556255][ T6536] netlink: 28 bytes leftover after parsing attributes in process `syz.1.225'.
[   75.559799][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.225'.
[   75.622682][ T6536] Zero length message leads to an empty skb
[   75.808639][ T6543] loop1: detected capacity change from 0 to 2048
[   75.826733][ T6543] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[   75.875848][ T6543] UDF-fs: warning (device loop1): udf_fill_super: No fileset found
[   76.326818][   T24] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   76.366201][   T24] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   76.909958][ T6561] loop1: detected capacity change from 0 to 1024
[   76.913438][ T6561] EXT4-fs: Ignoring removed nobh option
[   76.916516][ T6561] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   76.923850][ T6561] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.235: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[   76.932969][ T6561] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.235: couldn't read orphan inode 11 (err -117)
[   76.939390][ T6561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.961725][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.966051][ T6566] overlayfs: conflicting options: nfs_export=on,index=off
[   76.981891][   T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   77.061758][ T6572] netlink: 'syz.1.240': attribute type 7 has an invalid length.
[   77.145412][   T10] usb 3-1: Using ep0 maxpacket: 32
[   77.147167][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.241'.
[   77.148780][   T10] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[   77.153864][   T10] usb 3-1: config 0 has no interface number 0
[   77.167108][   T10] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   77.170293][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.179968][   T10] usb 3-1: Product: syz
[   77.184551][   T10] usb 3-1: Manufacturer: syz
[   77.186207][   T10] usb 3-1: SerialNumber: syz
[   77.192998][   T10] usb 3-1: config 0 descriptor??
[   77.197000][   T10] smsc95xx v2.0.0
[   77.441030][ T2201] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   78.041645][   T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[   78.246845][   T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[   78.251613][   T10] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[   78.260407][   T10] usb 3-1: USB disconnect, device number 4
[   78.630997][ T2201] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   78.800838][ T2201] usb 1-1: Using ep0 maxpacket: 8
[   78.805698][ T2201] usb 1-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config
[   78.809742][ T2201] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[   78.815866][ T2201] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.826965][ T2201] hub 1-1:32.0: bad descriptor, ignoring hub
[   78.835188][ T2201] hub 1-1:32.0: probe with driver hub failed with error -5
[   78.897882][ T6591] loop2: detected capacity change from 0 to 1024
[   78.926143][ T6591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.931586][ T6591] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   78.962403][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.304201][ T2201] usb 1-1: reset high-speed USB device number 5 using dummy_hcd
[   79.391764][   T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   79.399259][ T6609] loop1: detected capacity change from 0 to 4096
[   79.406495][ T6609] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[   79.561174][   T10] usb 3-1: Using ep0 maxpacket: 8
[   79.567019][   T10] usb 3-1: config 162 has an invalid interface number: 97 but max is 0
[   79.567389][ T6615] loop1: detected capacity change from 0 to 1024
[   79.570610][   T10] usb 3-1: config 162 has no interface number 0
[   79.570648][   T10] usb 3-1: config 162 interface 97 has no altsetting 0
[   79.581435][   T10] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b
[   79.585443][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.588820][   T10] usb 3-1: Product: syz
[   79.590644][   T10] usb 3-1: Manufacturer: syz
[   79.595286][   T10] usb 3-1: SerialNumber: syz
[   79.634797][   T83] hfsplus: b-tree write err: -5, ino 4
[   79.809830][   T10] metro_usb 3-1:162.97: interrupt-out endpoint missing
[   79.823178][   T10] usb 3-1: USB disconnect, device number 5
[   79.907574][ T6627] loop1: detected capacity change from 0 to 256
[   79.924190][ T6627] FAT-fs (loop1): Directory bread(block 64) failed
[   79.927299][ T6627] FAT-fs (loop1): Directory bread(block 65) failed
[   79.930097][ T6627] FAT-fs (loop1): Directory bread(block 66) failed
[   79.936703][ T6627] FAT-fs (loop1): Directory bread(block 67) failed
[   79.939670][ T6627] FAT-fs (loop1): Directory bread(block 68) failed
[   79.942964][ T6627] FAT-fs (loop1): Directory bread(block 69) failed
[   79.945726][ T6627] FAT-fs (loop1): Directory bread(block 70) failed
[   79.948193][ T6627] FAT-fs (loop1): Directory bread(block 71) failed
[   79.954138][ T6627] FAT-fs (loop1): Directory bread(block 72) failed
[   79.957027][ T6627] FAT-fs (loop1): Directory bread(block 73) failed
[   79.976739][ T6627] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[   80.360915][ T2279] usb 1-1: USB disconnect, device number 5
[   80.403134][ T6649] macsec1: entered promiscuous mode
[   80.939766][ T6655] netlink: 136 bytes leftover after parsing attributes in process `syz.2.275'.
[   81.189183][ T6662] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[   81.191681][ T6662] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   81.196136][ T6662] vhci_hcd vhci_hcd.0: Device attached
[   81.203164][ T6662] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   81.215327][ T6662] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   81.222957][ T6662] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   81.229023][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.281'.
[   81.241984][  T792] cfg80211: failed to load regulatory.db
[   81.248938][ T6662] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   81.282082][ T6662] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   81.294439][ T6671] loop2: detected capacity change from 0 to 512
[   81.299181][ T6662] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(20)
[   81.301463][ T6662] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   81.316507][ T6662] vhci_hcd vhci_hcd.0: Device attached
[   81.319453][ T6662] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   81.324695][ T6662] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   81.335184][ T6673] vhci_hcd: connection closed
[   81.336774][   T13] vhci_hcd: stop threads
[   81.340364][   T13] vhci_hcd: release socket
[   81.343249][   T13] vhci_hcd: disconnect device
[   81.347741][ T6663] vhci_hcd: connection closed
[   81.348073][   T13] vhci_hcd: stop threads
[   81.351977][   T13] vhci_hcd: release socket
[   81.353798][   T13] vhci_hcd: disconnect device
[   81.357963][ T6671] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.367428][ T6671] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   81.373872][   T24] vhci_hcd: vhci_device speed not set
[   81.547595][ T6686] loop0: detected capacity change from 0 to 4096
[   81.555656][ T6686] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   81.565168][ T6686] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.576941][ T6686] EXT4-fs (loop0): shut down requested (2)
[   81.588620][ T5858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.960209][ T6662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   82.464802][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.519478][ T6702] loop2: detected capacity change from 0 to 1024
[   82.536987][ T6702] hfsplus: request for non-existent node 24 in B*Tree
[   82.540341][ T6702] hfsplus: request for non-existent node 24 in B*Tree
[   82.618589][ T6707] loop2: detected capacity change from 0 to 1024
[   84.581259][ T2279] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   84.751199][ T2279] usb 2-1: Using ep0 maxpacket: 16
[   84.763785][ T2279] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[   84.768479][ T2279] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   84.776333][ T2279] usb 2-1: config 0 has no interface number 0
[   84.785887][ T2279] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   84.794367][ T2279] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[   84.801925][ T2279] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[   84.814880][ T2279] usb 2-1: Product: syz
[   84.818907][ T2279] usb 2-1: SerialNumber: syz
[   84.830894][ T2279] usb 2-1: config 0 descriptor??
[   84.844536][ T2279] usbhid 2-1:0.8: couldn't find an input interrupt endpoint
[   84.866685][ T6736] libceph: resolve '4' (ret=-3): failed
[   85.067917][ T2279] usb 2-1: USB disconnect, device number 6
[   85.944623][ T6744] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   86.045896][ T6754] loop1: detected capacity change from 0 to 8
[   86.101794][ T6756] tmpfs: Bad value for 'mpol'
[   86.270879][ T5893] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   86.440822][ T5893] usb 3-1: Using ep0 maxpacket: 8
[   86.454990][ T6774] tmpfs: Bad value for 'size'
[   86.459984][ T5893] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[   86.463320][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.466341][ T5893] usb 3-1: Product: syz
[   86.467776][ T5893] usb 3-1: Manufacturer: syz
[   86.469334][ T5893] usb 3-1: SerialNumber: syz
[   86.490483][ T5893] usb 3-1: config 0 descriptor??
[   86.505221][ T5893] usb 3-1: selecting invalid altsetting 3
[   86.509350][ T5893] comedi comedi5: could not set alternate setting 3 in high speed
[   86.514527][ T5893] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device.
[   86.525847][ T5893] usbdux 3-1:0.0: probe with driver usbdux failed with error -22
[   86.699224][ T5893] usb 3-1: USB disconnect, device number 6
[   86.741002][   T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   86.900778][   T10] usb 2-1: Using ep0 maxpacket: 16
[   86.904701][   T10] usb 2-1: config 3 has an invalid interface number: 155 but max is 0
[   86.908004][   T10] usb 2-1: config 3 has an invalid interface association descriptor of length 3, skipping
[   86.912193][   T10] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[   86.916701][   T10] usb 2-1: config 3 has no interface number 0
[   86.919414][   T10] usb 2-1: config 3 interface 155 has no altsetting 0
[   86.924929][   T10] usb 2-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=e5.4c
[   86.930772][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.934219][   T10] usb 2-1: Product: syz
[   86.935875][   T10] usb 2-1: Manufacturer: syz
[   86.937718][   T10] usb 2-1: SerialNumber: syz
[   87.160817][   T10] usb 2-1: Found UVC 0.00 device syz (05a9:264a)
[   87.164064][   T10] usb 2-1: No valid video chain found.
[   87.172404][   T10] usb 2-1: USB disconnect, device number 7
[   87.566475][ T6796] loop2: detected capacity change from 0 to 2048
[   87.570594][ T6796] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   87.574544][ T6796] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[   87.578999][ T6796] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   87.606261][ T6797] netlink: 60 bytes leftover after parsing attributes in process `syz.0.331'.
[   87.609355][ T6795] netlink: 60 bytes leftover after parsing attributes in process `syz.0.331'.
[   88.430854][ T5893] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   88.592933][ T5893] usb 1-1: too many configurations: 151, using maximum allowed: 8
[   88.616757][ T5893] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[   88.620122][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[   88.623338][ T5893] usb 1-1: Product: syz
[   88.624830][ T5893] usb 1-1: Manufacturer: syz
[   88.626844][ T5893] usb 1-1: SerialNumber: syz
[   88.635756][ T5893] usb 1-1: config 0 descriptor??
[   88.858113][ T5893] ims_pcu 1-1:0.0: Zero length descriptor
[   88.861223][ T5893] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22
[   88.874373][ T5893] usb 1-1: USB disconnect, device number 6
[   88.957016][ T6816] orangefs_mount: mount request failed with -4
[   89.019857][ T6826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.347'.
[   89.060588][ T6828] loop2: detected capacity change from 0 to 4096
[   89.074935][ T6828] ntfs3(loop2): Primary boot: invalid bytes per sector 1792.
[   89.092989][ T6828] ntfs3(loop2): try to read out of volume at offset 0x1ffe00
[   89.367869][ T6838] loop1: detected capacity change from 0 to 512
[   89.372298][ T6838] EXT4-fs: Ignoring removed mblk_io_submit option
[   89.375104][ T6838] EXT4-fs: inline encryption not supported
[   89.377811][ T6838] EXT4-fs: Ignoring removed mblk_io_submit option
[   89.380573][ T6838] EXT4-fs: Ignoring removed nomblk_io_submit option
[   89.387587][ T6838] EXT4-fs (loop1): Test dummy encryption mode enabled
[   89.391019][ T6838] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   89.403077][ T6838] EXT4-fs (loop1): 1 truncate cleaned up
[   89.406730][ T6838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.407192][ T6843] loop0: detected capacity change from 0 to 128
[   89.415134][ T2279] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   89.494383][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.351'.
[   89.584226][ T2279] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   89.587855][ T2279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.611879][ T2279] usb 3-1: config 0 descriptor??
[   89.632205][ T2279] cp210x 3-1:0.0: cp210x converter detected
[   90.071630][ T2279] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[   90.100021][ T2279] usb 3-1: cp210x converter now attached to ttyUSB0
[   90.283958][ T2279] usb 3-1: USB disconnect, device number 7
[   90.306121][ T2279] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   90.349179][ T2279] cp210x 3-1:0.0: device disconnected
[   90.853780][ T6852] loop0: detected capacity change from 0 to 256
[   90.949515][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.999460][ T6854] loop0: detected capacity change from 0 to 8192
[   91.007000][ T6854] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   91.014641][ T6858] loop1: detected capacity change from 0 to 256
[   91.179395][ T6866] loop0: detected capacity change from 0 to 512
[   91.203281][ T6866] EXT4-fs: Ignoring removed bh option
[   91.218581][ T6866] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   91.228746][ T6866] EXT4-fs (loop0): 1 truncate cleaned up
[   91.247878][ T6866] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.293545][ T6866] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz.0.363: invalid fast symlink length 39
[   91.300222][ T6866] EXT4-fs (loop0): Remounting filesystem read-only
[   91.460883][ T2279] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   91.639349][ T5858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.687542][ T2279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   91.699633][ T5708] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.705990][ T2279] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[   91.710072][ T2279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.719643][ T2279] usb 3-1: config 0 descriptor??
[   91.853787][ T5708] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.944919][ T5708] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.040212][ T5708] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.171482][ T2279] lenovo 0003:17EF:6047.0004: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0
[   92.339564][ T2279] lenovo 0003:17EF:6047.0004: Failed to switch F7/9/11 mode: -71
[   92.360415][ T2279] lenovo 0003:17EF:6047.0004: Failed to switch middle button: -71
[   92.376382][ T5708] bridge_slave_1: left allmulticast mode
[   92.378700][ T5708] bridge_slave_1: left promiscuous mode
[   92.389363][ T2279] lenovo 0003:17EF:6047.0004: Fn-lock setting failed: -71
[   92.397516][ T5708] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.403269][ T2279] lenovo 0003:17EF:6047.0004: Sensitivity setting failed: -71
[   92.425880][ T2279] usb 3-1: USB disconnect, device number 8
[   92.431906][ T5708] bridge_slave_0: left allmulticast mode
[   92.434941][ T5708] bridge_slave_0: left promiscuous mode
[   92.437410][ T5708] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.728007][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   92.735892][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   92.743712][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   92.751394][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   92.756495][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   93.104551][ T5708] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   93.113188][ T5708] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   93.122821][ T5708] bond0 (unregistering): Released all slaves
[   93.213615][ T6890] netlink: 16 bytes leftover after parsing attributes in process `syz.2.371'.
[   94.103661][ T6910] openvswitch: netlink: IP tunnel dst address not specified
[   94.122922][ T6885] chnl_net:caif_netlink_parms(): no params data found
[   94.330824][ T5708] hsr_slave_0: left promiscuous mode
[   94.343166][ T5708] hsr_slave_1: left promiscuous mode
[   94.345374][ T5708] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.354302][ T5708] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.370584][ T5708] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.379653][ T5708] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.392921][ T5708] veth1_macvtap: left promiscuous mode
[   94.395140][ T5708] veth0_macvtap: left promiscuous mode
[   94.397724][ T5708] veth1_vlan: left promiscuous mode
[   94.399745][ T5708] veth0_vlan: left promiscuous mode
[   94.518434][ T6932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.381'.
[   94.833516][   T54] Bluetooth: hci2: command tx timeout
[   94.883672][ T5708] team0 (unregistering): Port device team_slave_1 removed
[   94.907209][ T5708] team0 (unregistering): Port device team_slave_0 removed
[   95.232474][ T6885] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.236484][ T6885] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.251646][ T6885] bridge_slave_0: entered allmulticast mode
[   95.254532][ T6885] bridge_slave_0: entered promiscuous mode
[   95.260491][ T6885] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.264306][ T6885] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.266765][ T6885] bridge_slave_1: entered allmulticast mode
[   95.269885][ T6885] bridge_slave_1: entered promiscuous mode
[   95.333524][ T6885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.364643][ T6937] netlink: 596 bytes leftover after parsing attributes in process `syz.2.382'.
[   95.367883][ T6885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.411831][ T2279] IPVS: starting estimator thread 0...
[   95.423795][ T6937] program syz.2.382 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   95.454074][ T6885] team0: Port device team_slave_0 added
[   95.457306][ T6885] team0: Port device team_slave_1 added
[   95.513678][ T6941] IPVS: using max 81 ests per chain, 194400 per kthread
[   95.545069][ T6885] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.547732][ T6885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.595114][ T6885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.608527][ T6885] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.616306][ T6885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.650753][ T6885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.846319][ T6885] hsr_slave_0: entered promiscuous mode
[   95.866951][ T6885] hsr_slave_1: entered promiscuous mode
[   95.880840][ T6885] debugfs: 'hsr0' already exists in 'hsr'
[   95.883392][ T6885] Cannot create hsr debugfs directory
[   96.309925][ T6986] capability: warning: `syz.1.399' uses 32-bit capabilities (legacy support in use)
[   96.331874][ T6986] netlink: 84 bytes leftover after parsing attributes in process `syz.1.399'.
[   96.338322][ T6885] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   96.353158][ T6885] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   96.409821][ T6989] loop1: detected capacity change from 0 to 512
[   96.428391][ T6885] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   96.432992][ T6885] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   96.445844][ T6989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.450086][ T6989] ext4 filesystem being mounted at /161/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.490652][   T33] audit: type=1800 audit(1755254889.972:10): pid=6989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.401" name="file1" dev="loop1" ino=15 res=0 errno=0
[   96.500661][   T33] audit: type=1800 audit(1755254889.972:11): pid=6989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.401" name="file2" dev="loop1" ino=16 res=0 errno=0
[   96.527891][ T6985] loop2: detected capacity change from 0 to 32768
[   96.559006][ T6985] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.400 (6985)
[   96.583017][ T6985] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   96.589775][ T6985] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[   96.593872][ T6885] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.604583][ T6985] BTRFS info (device loop2): disk space caching is enabled
[   96.608027][ T6985] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   96.619045][ T6885] 8021q: adding VLAN 0 to HW filter on device team0
[   96.635186][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.638401][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.666013][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.669094][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.679707][ T6985] BTRFS info (device loop2): rebuilding free space tree
[   96.713508][ T6985] BTRFS info (device loop2): disabling free space tree
[   96.721222][   T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   96.726229][ T6985] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   96.743078][ T6985] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   96.783036][   T33] audit: type=1800 audit(1755254890.272:12): pid=6985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.400" name="file1" dev="loop2" ino=260 res=0 errno=0
[   96.843022][ T5856] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   96.877728][   T10] usb 2-1: config 0 has an invalid interface number: 48 but max is 2
[   96.890435][   T10] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[   96.900217][ T6885] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.903585][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3
[   96.915129][   T54] Bluetooth: hci2: command tx timeout
[   96.918831][   T10] usb 2-1: config 0 has no interface number 0
[   96.928857][   T10] usb 2-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30
[   96.941188][   T10] usb 2-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[   96.946025][   T10] usb 2-1: config 0 interface 48 has no altsetting 0
[   96.948401][   T10] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[   96.959378][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.975550][   T10] usb 2-1: config 0 descriptor??
[   96.986267][ T6885] veth0_vlan: entered promiscuous mode
[   97.015374][ T6885] veth1_vlan: entered promiscuous mode
[   97.066294][ T6885] veth0_macvtap: entered promiscuous mode
[   97.074180][ T6885] veth1_macvtap: entered promiscuous mode
[   97.087436][ T6885] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.099444][ T6885] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.109437][ T5869] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.123394][ T5869] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.128161][ T5869] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.142677][ T5869] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.164928][   T33] audit: type=1326 audit(1755254890.652:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.2.402" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9f258ebe9 code=0x0
[   97.253165][   T10] usb 2-1: string descriptor 0 read error: -71
[   97.269862][   T10] usb 2-1: USB disconnect, device number 8
[   97.287076][ T3541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.307207][ T3541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.337615][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.348745][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.453816][ T7045] openvswitch: netlink: Message has 1 unknown bytes.
[   97.460819][ T7045] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.496104][ T7048] loop2: detected capacity change from 0 to 128
[   97.509426][ T7048] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   97.517878][ T7048] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   97.563462][ T5856] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   97.687911][ T7060] loop3: detected capacity change from 0 to 1024
[   97.719973][ T7060] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84cc128, mo2=0102]
[   97.745770][ T7060] System zones: 1-12
[   97.764458][ T7060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.833767][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.897162][ T6885] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.040567][   T33] audit: type=1326 audit(1755254891.522:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.3.415" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f451c38ebe9 code=0x0
[   98.058024][ T7089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.418'.
[   98.183509][ T7095] loop1: detected capacity change from 0 to 1024
[   98.197993][ T7097] loop3: detected capacity change from 0 to 1024
[   98.216894][ T7095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.293293][ T7097] syz.3.420: attempt to access beyond end of device
[   98.293293][ T7097] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024
[   98.303129][ T7097] syz.3.420: attempt to access beyond end of device
[   98.303129][ T7097] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024
[   98.310267][ T7097] Buffer I/O error on dev loop3, logical block 2889, async page read
[   98.315336][   T33] audit: type=1800 audit(1755254891.802:15): pid=7097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.420" name="file1" dev="loop3" ino=20 res=0 errno=0
[   98.317291][ T7097] syz.3.420: attempt to access beyond end of device
[   98.317291][ T7097] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024
[   98.347372][ T7096] syz.3.420: attempt to access beyond end of device
[   98.347372][ T7096] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024
[   98.427613][ T5851] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[   98.453889][ T5851] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[   98.505409][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.510468][ T7110] loop3: detected capacity change from 0 to 164
[   98.559609][ T7110] rock: directory entry would overflow storage
[   98.563006][ T7110] rock: sig=0x66, size=4, remaining=3
[   98.574292][ T7110] rock: directory entry would overflow storage
[   98.576981][ T7110] rock: sig=0x66, size=4, remaining=3
[   98.777321][ T7117] netlink: 40 bytes leftover after parsing attributes in process `syz.3.430'.
[   98.851460][ T7122] netlink: 'syz.3.433': attribute type 21 has an invalid length.
[   98.854357][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'.
[   99.001818][   T54] Bluetooth: hci2: command tx timeout
[   99.013389][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   99.017760][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   99.027739][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   99.035053][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   99.039155][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   99.092889][ T5708] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.198656][ T5708] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.431117][ T5708] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.558781][ T7135] chnl_net:caif_netlink_parms(): no params data found
[   99.664806][ T7165] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   99.687358][ T5708] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.884649][ T7135] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.887748][ T7135] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.892239][ T7135] bridge_slave_0: entered allmulticast mode
[   99.915831][ T7135] bridge_slave_0: entered promiscuous mode
[   99.991875][ T7135] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.000268][ T7135] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.013071][ T7135] bridge_slave_1: entered allmulticast mode
[  100.030286][ T7135] bridge_slave_1: entered promiscuous mode
[  100.372086][ T7135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.389916][ T7135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.404644][ T5708] bridge_slave_1: left allmulticast mode
[  100.407476][ T5708] bridge_slave_1: left promiscuous mode
[  100.409740][ T5708] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.417051][ T5708] bridge_slave_0: left allmulticast mode
[  100.419312][ T5708] bridge_slave_0: left promiscuous mode
[  100.422865][ T5708] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.824020][ T5708] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  100.830263][ T5708] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.838565][ T5708] bond0 (unregistering): Released all slaves
[  100.874077][ T7135] team0: Port device team_slave_0 added
[  100.896960][ T7135] team0: Port device team_slave_1 added
[  101.035396][ T7135] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.040151][ T7135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.057615][ T7135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.070899][ T5237] Bluetooth: hci0: command tx timeout
[  101.071326][   T54] Bluetooth: hci2: command tx timeout
[  101.085724][ T7135] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.088722][ T7135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.104880][ T7135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.170925][  T792] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  101.198646][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.453'.
[  101.274581][ T7135] hsr_slave_0: entered promiscuous mode
[  101.277517][ T7135] hsr_slave_1: entered promiscuous mode
[  101.280044][ T7135] debugfs: 'hsr0' already exists in 'hsr'
[  101.283012][ T7135] Cannot create hsr debugfs directory
[  101.312760][ T5708] hsr_slave_0: left promiscuous mode
[  101.315634][ T5708] hsr_slave_1: left promiscuous mode
[  101.319800][ T5708] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.323096][ T5708] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.323299][  T792] usb 3-1: Using ep0 maxpacket: 8
[  101.330129][ T5708] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.341977][  T792] usb 3-1: config 0 has an invalid interface number: 150 but max is 0
[  101.344694][ T5708] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.345382][  T792] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  101.360567][  T792] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  101.365588][ T5708] veth1_macvtap: left promiscuous mode
[  101.365632][ T5708] veth0_macvtap: left promiscuous mode
[  101.365701][ T5708] veth1_vlan: left promiscuous mode
[  101.365747][ T5708] veth0_vlan: left promiscuous mode
[  101.388842][  T792] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  101.398767][  T792] usb 3-1: config 0 has no interface number 0
[  101.405137][  T792] usb 3-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  101.410645][  T792] usb 3-1: config 0 interface 150 has no altsetting 0
[  101.420890][  T792] usb 3-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75
[  101.424829][  T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.436057][  T792] usb 3-1: config 0 descriptor??
[  101.472750][ T7209] loop3: detected capacity change from 0 to 2048
[  101.488343][ T7209] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  101.505096][ T7209] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[  101.618865][ T7211] loop6: detected capacity change from 0 to 524287999
[  101.622965][ T7039] Buffer I/O error on dev loop6, logical block 0, async page read
[  101.626607][ T7039] Buffer I/O error on dev loop6, logical block 0, async page read
[  101.629981][ T7039] Buffer I/O error on dev loop6, logical block 0, async page read
[  101.635360][ T7039] Buffer I/O error on dev loop6, logical block 0, async page read
[  101.639101][ T7039] Buffer I/O error on dev loop6, logical block 0, async page read
[  101.642351][ T7039] Buffer I/O error on dev loop6, logical block 0, async page read
[  101.645390][ T7039] Buffer I/O error on dev loop6, logical block 0, async page read
[  101.648332][ T7039] Buffer I/O error on dev loop6, logical block 0, async page read
[  101.651875][ T7039] ldm_validate_partition_table(): Disk read failed.
[  101.654343][ T7039] Buffer I/O error on dev loop6, logical block 0, async page read
[  101.657730][ T7039] Dev loop6: unable to read RDB block 0
[  101.662586][ T7039]  loop6: unable to read partition table
[  101.679963][ T7211] ldm_validate_partition_table(): Disk read failed.
[  101.686018][ T7211] Dev loop6: unable to read RDB block 0
[  101.689436][ T7211]  loop6: unable to read partition table
[  101.696120][ T7211] loop_reread_partitions: partition scan of loop6 (3xC) failed (rc=-5)
[  101.867761][  T792] usb 3-1: USB disconnect, device number 9
[  101.942995][ T5708] team0 (unregistering): Port device team_slave_1 removed
[  101.965316][ T5708] team0 (unregistering): Port device team_slave_0 removed
[  102.575591][ T7135] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  102.589660][ T7135] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  102.607550][ T7135] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  102.617295][ T5708] IPVS: stop unused estimator thread 0...
[  102.623446][ T7135] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  102.737407][ T7135] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.757083][ T7135] 8021q: adding VLAN 0 to HW filter on device team0
[  102.773904][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.776777][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.782828][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.785471][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.945316][ T7135] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.147974][ T7135] veth0_vlan: entered promiscuous mode
[  103.152357][   T54] Bluetooth: hci0: command tx timeout
[  103.163883][ T7135] veth1_vlan: entered promiscuous mode
[  103.189078][ T7135] veth0_macvtap: entered promiscuous mode
[  103.201421][ T7135] veth1_macvtap: entered promiscuous mode
[  103.238593][ T7135] batman_adv: batadv0: Interface activated: batadv_slave_0
[  103.250067][ T7135] batman_adv: batadv0: Interface activated: batadv_slave_1
[  103.269377][ T5869] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.278569][ T5869] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.322403][ T5869] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.326268][ T5869] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.388615][ T7287] loop3: detected capacity change from 0 to 256
[  103.441846][ T7287] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  103.444879][ T3557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.449852][ T3557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.460927][ T7287] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  103.480365][ T7287] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  103.486847][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.490019][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.565537][ T7296] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  103.638909][ T7303] loop3: detected capacity change from 0 to 16
[  103.687864][ T7303] erofs (device loop3): mounted with root inode @ nid 36.
[  103.733862][ T7307] binder: 7306:7307 ioctl c0306201 200000000240 returned -14
[  103.760288][ T7309] loop2: detected capacity change from 0 to 4096
[  103.823911][ T7315] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  103.982607][ T7326] syz.4.486 uses obsolete (PF_INET,SOCK_PACKET)
[  103.986240][ T7326] syzkaller1: entered promiscuous mode
[  103.988685][ T7326] syzkaller1: entered allmulticast mode
[  104.210801][ T2279] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  104.365504][ T2279] usb 3-1: Using ep0 maxpacket: 32
[  104.371206][ T2279] usb 3-1: config 2 has an invalid interface number: 194 but max is 0
[  104.378560][ T2279] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  104.387908][ T2279] usb 3-1: config 2 has no interface number 0
[  104.391405][ T2279] usb 3-1: config 2 interface 194 altsetting 0 bulk endpoint 0xA has invalid maxpacket 7
[  104.395781][ T2279] usb 3-1: config 2 interface 194 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  104.404037][ T2279] usb 3-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6
[  104.408237][ T2279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.419444][ T7327] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  104.537861][ T7356] loop3: detected capacity change from 0 to 32768
[  104.582971][ T7356] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  104.600245][ T7356] XFS (loop3): Ending clean mount
[  104.608249][ T7356] XFS (loop3): Quotacheck needed: Please wait.
[  104.632825][ T7356] XFS (loop3): Quotacheck: Done.
[  104.633964][ T2279] usb 3-1: string descriptor 0 read error: -71
[  104.651942][ T2279] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  104.657932][ T6885] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  104.760295][ T2279] usb 3-1: USB disconnect, device number 10
[  105.007103][ T7388] loop4: detected capacity change from 0 to 16
[  105.022709][ T7388] erofs (device loop4): EXPERIMENTAL 48-bit layout support in use. Use at your own risk!
[  105.043707][ T7388] erofs (device loop4): mounted with root inode @ nid 36.
[  105.060044][ T7390] pim6reg: entered allmulticast mode
[  105.065630][ T7390] pim6reg: left allmulticast mode
[  105.146295][ T7394] loop3: detected capacity change from 0 to 1024
[  105.149015][ T7394] EXT4-fs: Invalid commit interval -2147483647, must be smaller than 21474836
[  105.244421][   T54] Bluetooth: hci0: command tx timeout
[  106.166064][ T7415] __vm_enough_memory: pid: 7415, comm: syz.4.506, bytes: 21200525209600 not enough memory for the allocation
[  106.293775][ T7422] loop4: detected capacity change from 0 to 65
[  106.298236][ T7422] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway
[  106.454018][ T7417] loop2: detected capacity change from 0 to 32768
[  106.468754][ T7417] read_mapping_page failed!
[  106.470531][ T7417] ialloc: diAlloc returned -5!
[  106.596973][ T7428] tls_set_device_offload: netdev not found
[  106.715610][ T7438] delete_channel: no stack
[  106.822842][ T7444] loop3: detected capacity change from 0 to 764
[  106.835365][ T7444] rock: directory entry would overflow storage
[  106.837639][ T7444] rock: sig=0x4654, size=5, remaining=4
[  106.939753][ T7435] loop4: detected capacity change from 0 to 32768
[  106.965644][   T33] audit: type=1800 audit(1755254900.452:16): pid=7435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.515" name="file1" dev="loop4" ino=4 res=0 errno=0
[  107.311155][   T54] Bluetooth: hci0: command tx timeout
[  107.715264][ T7463] input: syz0 as /devices/virtual/input/input7
[  107.756110][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.528'.
[  107.828612][ T7471] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  107.861798][ T7473] CUSE: DEVNAME unspecified
[  107.892955][  T792] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  107.916237][ T7477] netlink: 80 bytes leftover after parsing attributes in process `syz.4.534'.
[  107.931599][   T24] usb 4-1: new low-speed USB device number 2 using dummy_hcd
[  108.060849][  T792] usb 3-1: Using ep0 maxpacket: 16
[  108.065468][  T792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  108.073994][  T792] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  108.077872][  T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.090831][  T792] usb 3-1: Product: syz
[  108.092975][  T792] usb 3-1: Manufacturer: syz
[  108.096699][  T792] usb 3-1: SerialNumber: syz
[  108.102043][  T792] usb 3-1: config 0 descriptor??
[  108.104807][   T24] usb 4-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  108.108683][   T24] usb 4-1: config 246 descriptor has 1 excess byte, ignoring
[  108.120179][   T24] usb 4-1: config 246 has 1 interface, different from the descriptor's value: 42
[  108.124640][   T24] usb 4-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  108.131430][  T792] hub 3-1:0.0: bad descriptor, ignoring hub
[  108.134105][  T792] hub 3-1:0.0: probe with driver hub failed with error -5
[  108.137894][   T24] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8
[  108.150265][  T792] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8
[  108.154465][   T24] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  108.159301][   T24] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  108.178234][   T24] usb 4-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  108.186126][   T24] usb 4-1: config 246 descriptor has 1 excess byte, ignoring
[  108.189347][   T24] usb 4-1: config 246 has 1 interface, different from the descriptor's value: 42
[  108.203715][   T24] usb 4-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  108.218933][   T24] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8
[  108.230500][   T24] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  108.239269][   T24] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  108.259621][ T7489] loop4: detected capacity change from 0 to 32768
[  108.260481][   T24] usb 4-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  108.279854][   T24] usb 4-1: config 246 descriptor has 1 excess byte, ignoring
[  108.285377][   T24] usb 4-1: config 246 has 1 interface, different from the descriptor's value: 42
[  108.291709][ T7489] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  108.297766][   T24] usb 4-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  108.303282][   T24] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8
[  108.307865][   T24] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  108.314156][   T24] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  108.322404][   T24] usb 4-1: string descriptor 0 read error: -22
[  108.325100][   T24] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  108.325821][ T7489] XFS (loop4): Ending clean mount
[  108.328968][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.344454][ T7489] XFS (loop4): Quotacheck needed: Please wait.
[  108.374502][   T24] adutux 4-1:246.0: ADU100  now attached to /dev/usb/adutux0
[  108.397554][ T7489] XFS (loop4): Quotacheck: Done.
[  108.425709][ T7135] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  108.573653][   T24] usb 4-1: USB disconnect, device number 2
[  108.623476][ T5314] usb 3-1: USB disconnect, device number 11
[  108.761576][ T7511] loop4: detected capacity change from 0 to 32768
[  108.799901][ T7459] adutux: No device or device unplugged -19
[  108.840818][ T7511] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  108.840834][ T7511]   allowing incompatible features above 0.0: (unknown version)
[  108.840841][ T7511]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  108.857661][ T7511] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  108.861098][ T7511] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  108.864333][ T7511] bcachefs (loop4): Version upgrade required:
[  108.864333][ T7511] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  108.864333][ T7511] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  108.864333][ T7511]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  108.897160][ T7511] bcachefs (loop4): dropping and reconstructing all alloc info
[  108.914876][ T7511] bcachefs (loop4): accounting_read... done
[  108.918778][ T7511] bcachefs (loop4): alloc_read... done
[  108.921663][ T7511] bcachefs (loop4): snapshots_read... done
[  108.925413][ T7511] bcachefs (loop4): check_allocations... done
[  108.943450][ T7511] bcachefs (loop4): going read-write
[  108.952907][ T7511] bcachefs (loop4): done starting filesystem
[  109.026343][ T7135] bcachefs (loop4): shutting down
[  109.028876][ T7135] bcachefs (loop4): going read-only
[  109.036773][ T7135] bcachefs (loop4): finished waiting for writes to stop
[  109.046214][ T7135] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10
[  109.050300][ T7135] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10
[  109.065762][ T7135] bcachefs (loop4): unclean shutdown complete, journal seq 11
[  109.077343][ T7135] bcachefs (loop4): done going read-only, filesystem not clean
[  109.110599][ T7135] bcachefs (loop4): shutdown complete
[  109.633657][ T7533] loop2: detected capacity change from 0 to 32768
[  109.730620][ T7533] non-latin1 character 0x3ff found in JFS file name
[  109.736440][ T7533] mount with iocharset=utf8 to access
[  111.124238][ T7575] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.450885][   T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  111.669359][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.690126][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  111.716451][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  111.776812][   T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  111.786634][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.802851][   T24] usb 3-1: config 0 descriptor??
[  111.916284][ T7607] loop4: detected capacity change from 0 to 32768
[  111.939620][ T7607] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  111.960394][ T7607] XFS (loop4): Ending clean mount
[  111.969643][ T7607] XFS (loop4): Quotacheck needed: Please wait.
[  111.995719][ T7607] XFS (loop4): Quotacheck: Done.
[  112.001873][   T33] audit: type=1800 audit(1755254905.492:17): pid=7607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.554" name="file2" dev="loop4" ino=9287 res=0 errno=0
[  112.028177][ T7135] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  112.268260][   T24] plantronics 0003:047F:FFFF.0005: ignoring exceeding usage max
[  112.291382][   T24] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  112.431603][ T7632] binder_alloc: 7628: binder_alloc_buf, no vma
[  112.528322][   T24] usb 3-1: USB disconnect, device number 12
[  113.143920][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'.
[  114.431186][   T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  114.643543][   T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  114.699354][   T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  114.708038][   T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  114.714592][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  114.717669][   T24] usb 4-1: SerialNumber: syz
[  114.934547][   T24] usb 4-1: 0:2 : does not exist
[  114.950834][   T24] usb 4-1: USB disconnect, device number 3
[  114.975556][ T7039] udevd[7039]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  115.140144][ T7670] loop2: detected capacity change from 0 to 512
[  115.153919][ T7670] EXT4-fs: Ignoring removed nobh option
[  115.181631][ T7670] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.572: iget: bad i_size value: 38620345925642
[  115.197670][ T7670] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.572: couldn't read orphan inode 15 (err -117)
[  115.204570][ T7670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.232003][ T7670] EXT4-fs (loop2): shut down requested (1)
[  115.247519][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.516506][   T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  115.522792][  T792] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  115.682111][  T792] usb 5-1: Using ep0 maxpacket: 16
[  115.690976][   T24] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  115.697865][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.706489][  T792] usb 5-1: config 0 has no interfaces?
[  115.708694][  T792] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[  115.714315][   T24] usb 3-1: config 0 descriptor??
[  115.716161][  T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.722707][  T792] usb 5-1: config 0 descriptor??
[  115.744533][ T7693] loop3: detected capacity change from 0 to 512
[  115.760889][ T7693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.768189][ T7693] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  115.929478][ T2279] usb 5-1: USB disconnect, device number 2
[  116.038841][ T6885] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.332971][ T2279] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  116.498561][ T2279] usb 4-1: Using ep0 maxpacket: 16
[  116.513078][ T2279] usb 4-1: config index 0 descriptor too short (expected 16456, got 72)
[  116.521131][ T2279] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  116.524558][ T2279] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  116.530529][ T2279] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  116.533889][ T2279] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  116.539542][ T2279] usb 4-1: config 0 has no interface number 0
[  116.542372][ T2279] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  116.546135][ T2279] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  116.549839][ T2279] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  116.568080][ T2279] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  116.573589][ T2279] usb 4-1: config 0 interface 125 has no altsetting 0
[  116.578073][ T2279] usb 4-1: config 0 interface 125 has no altsetting 2
[  116.590043][ T2279] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  116.595238][ T2279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.598193][ T2279] usb 4-1: Product: syz
[  116.608118][ T2279] usb 4-1: Manufacturer: syz
[  116.609746][ T2279] usb 4-1: SerialNumber: syz
[  116.621375][ T2279] usb 4-1: config 0 descriptor??
[  116.628695][ T2279] usb 4-1: selecting invalid altsetting 2
[  116.736635][ T7712] loop4: detected capacity change from 0 to 32768
[  116.775458][ T7712] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  116.803777][ T7712] XFS (loop4): Ending clean mount
[  116.809267][ T7712] XFS (loop4): Quotacheck needed: Please wait.
[  116.837508][ T7712] XFS (loop4): Quotacheck: Done.
[  116.849404][    C0] usb 4-1: async_complete: urb error -71
[  116.851435][    C0] usb 4-1: async_complete: urb error -71
[  116.853305][    C0] usb 4-1: async_complete: urb error -71
[  116.855201][    C0] usb 4-1: async_complete: urb error -71
[  116.863188][ T2279] get_1284_register: usb error -71
[  116.865686][ T2279] uss720 4-1:0.125: probe with driver uss720 failed with error -71
[  116.885131][ T2279] usb 4-1: USB disconnect, device number 4
[  116.896408][ T7135] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  117.301032][ T2279] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  117.461792][ T2279] usb 5-1: Using ep0 maxpacket: 16
[  117.468264][ T2279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.480483][ T2279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  117.485639][ T2279] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  117.489655][ T2279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.498446][ T2279] usb 5-1: config 0 descriptor??
[  117.564671][   T24] usb 3-1: Cannot set autoneg
[  117.566757][   T24] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  117.590587][   T24] usb 3-1: USB disconnect, device number 13
[  117.592676][ T7759] loop3: detected capacity change from 0 to 64
[  117.668190][ T7761] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.586'.
[  118.269611][ T2279] ntrig 0003:1B96:0008.0006: item fetching failed at offset 3/7
[  118.274856][ T2279] ntrig 0003:1B96:0008.0006: parse failed
[  118.276756][ T2279] ntrig 0003:1B96:0008.0006: probe with driver ntrig failed with error -22
[  118.281480][ T2279] usb 5-1: USB disconnect, device number 3
[  118.642306][ T7774] loop2: detected capacity change from 0 to 32768
[  118.656743][ T7774] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  118.970228][   T33] audit: type=1326 audit(1755254912.452:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.4.596" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e71f8ebe9 code=0x0
[  119.112489][ T5856] ocfs2: Unmounting device (7,2) on (node local)
[  119.447769][ T7807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.602'.
[  120.788702][   T33] audit: type=1326 audit(1755254914.272:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.2.616" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f258ebe9 code=0x7ffc0000
[  120.807811][   T33] audit: type=1326 audit(1755254914.282:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.2.616" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f258ebe9 code=0x7ffc0000
[  120.819401][   T33] audit: type=1326 audit(1755254914.292:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.2.616" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9f258ebe9 code=0x7ffc0000
[  120.834624][   T33] audit: type=1326 audit(1755254914.292:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.2.616" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f258ebe9 code=0x7ffc0000
[  120.863040][   T33] audit: type=1326 audit(1755254914.292:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.2.616" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f258ebe9 code=0x7ffc0000
[  120.909577][   T33] audit: type=1326 audit(1755254914.292:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.2.616" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9f258ebe9 code=0x7ffc0000
[  120.950069][   T33] audit: type=1326 audit(1755254914.292:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.2.616" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f258ebe9 code=0x7ffc0000
[  120.956484][ T7840] loop2: detected capacity change from 0 to 256
[  120.993388][   T33] audit: type=1326 audit(1755254914.292:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.2.616" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f258ebe9 code=0x7ffc0000
[  121.008324][ T7840] FAT-fs (loop2): Directory bread(block 64) failed
[  121.019966][   T33] audit: type=1326 audit(1755254914.302:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.2.616" exe="/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc9f258ebe9 code=0x7ffc0000
[  121.020561][ T7840] FAT-fs (loop2): Directory bread(block 65) failed
[  121.060193][ T7840] FAT-fs (loop2): Directory bread(block 66) failed
[  121.083380][ T7840] FAT-fs (loop2): Directory bread(block 67) failed
[  121.088966][ T7840] FAT-fs (loop2): Directory bread(block 68) failed
[  121.104276][ T7840] FAT-fs (loop2): Directory bread(block 69) failed
[  121.108057][ T7840] FAT-fs (loop2): Directory bread(block 70) failed
[  121.125849][ T7840] FAT-fs (loop2): Directory bread(block 71) failed
[  121.129277][ T7840] FAT-fs (loop2): Directory bread(block 72) failed
[  121.133045][ T7840] FAT-fs (loop2): Directory bread(block 73) failed
[  121.175454][ T7844] loop3: detected capacity change from 0 to 128
[  121.215666][ T7844] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  121.231907][ T7844] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  121.390305][ T6885] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  121.778990][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.623'.
[  122.056044][ T7867] loop4: detected capacity change from 0 to 256
[  122.096151][ T7867] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d)
[  122.117196][ T7867] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  122.142437][  T792] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  122.301528][  T792] usb 3-1: Using ep0 maxpacket: 32
[  122.308288][  T792] usb 3-1: config 0 has an invalid interface number: 196 but max is 0
[  122.312229][  T792] usb 3-1: config 0 has no interface number 0
[  122.323289][  T792] usb 3-1: config 0 interface 196 has no altsetting 0
[  122.338652][   T54] Bluetooth: Unexpected continuation frame (len 10)
[  122.345321][  T792] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  122.351270][  T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.359369][  T792] usb 3-1: Product: syz
[  122.363777][  T792] usb 3-1: Manufacturer: syz
[  122.368078][  T792] usb 3-1: SerialNumber: syz
[  122.378691][  T792] usb 3-1: config 0 descriptor??
[  122.424141][ T7873] loop4: detected capacity change from 0 to 1024
[  122.604824][  T792] ipheth 3-1:0.196: Unable to find endpoints
[  122.609503][ T7878] loop3: detected capacity change from 0 to 2048
[  122.628344][  T792] usb 3-1: USB disconnect, device number 14
[  122.665505][ T7878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.683282][ T7878] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.818082][ T6885] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.974904][ T7902] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  122.986302][ T7902] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  123.209450][ T7910] process 'syz.2.647' launched './file2' with NULL argv: empty string added
[  123.530900][ T2279] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  123.692551][ T2279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.698344][ T7924] loop3: detected capacity change from 0 to 2048
[  123.702144][ T2279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.712554][ T2279] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  123.726401][ T7924] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  123.733709][ T7039] udevd[7039]: incorrect nilfs2 checksum on /dev/loop3
[  123.739062][ T2279] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  123.748364][ T7924] NILFS (loop3): mounting unchecked fs
[  123.756464][ T7924] NILFS (loop3): recovery required for readonly filesystem
[  123.763989][ T2279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.771454][ T7924] NILFS (loop3): write access will be enabled during recovery
[  123.776290][ T7039] udevd[7039]: incorrect nilfs2 checksum on /dev/loop3
[  123.797322][ T2279] usb 5-1: config 0 descriptor??
[  123.805555][ T7924] NILFS (loop3): norecovery option specified, skipping roll-forward recovery
[  123.862304][ T7924] NILFS (loop3): couldn't remount because the filesystem is in an incomplete recovery state
[  124.269048][ T2279] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xe
[  124.295878][ T2279] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  124.329117][ T2279] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  124.524848][   T10] usb 5-1: USB disconnect, device number 4
[  124.605546][ T7936] input: syz1 as /devices/virtual/input/input10
[  125.392789][ T7956] loop4: detected capacity change from 0 to 32768
[  125.441942][ T7956] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  125.453169][ T7971] program syz.3.673 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  125.478938][ T7956] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  125.489906][ T7956] XFS (loop4): Starting recovery (logdev: internal)
[  125.506241][ T7956] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x8 
[  125.511110][ T7956] XFS (loop4): Unmount and run xfs_repair
[  125.513560][ T7956] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  125.516833][ T7956] 00000000: 41 42 54 42 00 00 00 02 ff ff ff ff ff ff ff ff  ABTB............
[  125.520651][ T7956] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  125.524831][ T7956] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  125.528621][ T7956] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02  ......1....N....
[  125.532196][ T7956] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  125.535341][ T7956] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  125.538482][ T7956] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  125.541767][ T7956] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  125.547628][ T7956] XFS (loop4): Filesystem has been shut down due to log error (0x2).
[  125.551338][ T7956] XFS (loop4): Please unmount the filesystem and rectify the problem(s).
[  125.555924][ T7956] XFS (loop4): log mount/recovery failed: error -74
[  125.568199][ T7956] XFS (loop4): log mount failed
[  125.639261][ T7980] bridge0: port 3(erspan0) entered blocking state
[  125.648783][ T7980] bridge0: port 3(erspan0) entered disabled state
[  125.653334][ T7980] erspan0: entered allmulticast mode
[  125.669383][ T7980] erspan0: entered promiscuous mode
[  125.687975][ T7980] erspan0: left allmulticast mode
[  125.690283][ T7980] erspan0: left promiscuous mode
[  125.709838][ T7980] bridge0: port 3(erspan0) entered disabled state
[  125.849128][ T7981] loop3: detected capacity change from 0 to 32768
[  125.878489][ T7981] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  126.095295][ T7991] loop4: detected capacity change from 0 to 1024
[  126.106330][ T7991] EXT4-fs: Ignoring removed nobh option
[  126.114401][ T7986] loop2: detected capacity change from 0 to 16384
[  126.149674][ T7992] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  126.187232][ T7991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.232124][ T7135] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.658196][ T8004] veth0: entered promiscuous mode
[  126.667888][ T8003] veth0: left promiscuous mode
[  127.094831][ T6885] ocfs2: Unmounting device (7,3) on (node local)
[  127.461694][ T8008] loop3: detected capacity change from 0 to 64
[  127.713631][ T8020] loop4: detected capacity change from 0 to 512
[  127.720211][ T8020] EXT4-fs: Ignoring removed i_version option
[  127.732234][ T8020] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  127.763912][ T8020] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  127.784642][ T8020] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  127.802331][ T8020] EXT4-fs (loop4): 1 truncate cleaned up
[  127.808907][ T8020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.868802][ T7135] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.286560][ T8061] loop2: detected capacity change from 0 to 2048
[  128.331739][ T8064] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  128.340945][   T10] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  128.354063][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  128.354076][   T33] audit: type=1326 audit(1755254921.842:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.2.708" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f258ebe9 code=0x7ffc0000
[  128.368522][   T33] audit: type=1326 audit(1755254921.842:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.2.708" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f258ebe9 code=0x7ffc0000
[  128.377167][   T33] audit: type=1326 audit(1755254921.842:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.2.708" exe="/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fc9f258ebe9 code=0x7ffc0000
[  128.389746][ T8066] program syz.3.711 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  128.397655][   T33] audit: type=1326 audit(1755254921.842:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.2.708" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f258ebe9 code=0x7ffc0000
[  128.411013][   T33] audit: type=1326 audit(1755254921.842:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.2.708" exe="/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fc9f258ebe9 code=0x7ffc0000
[  128.424083][   T33] audit: type=1326 audit(1755254921.842:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.2.708" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f258ebe9 code=0x7ffc0000
[  128.438336][   T33] audit: type=1326 audit(1755254921.842:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.2.708" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc9f258ebe9 code=0x7ffc0000
[  128.453354][   T33] audit: type=1326 audit(1755254921.842:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.2.708" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f258ebe9 code=0x7ffc0000
[  128.482746][   T33] audit: type=1326 audit(1755254921.842:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.2.708" exe="/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fc9f258ebe9 code=0x7ffc0000
[  128.494308][   T10] usb 5-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66
[  128.498209][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.511422][   T33] audit: type=1326 audit(1755254921.842:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.2.708" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f258ebe9 code=0x7ffc0000
[  128.524684][   T10] usb 5-1: config 0 descriptor??
[  128.541740][   T10] usb 5-1: invalid MIDI EP
[  128.543420][   T10] usb 5-1: snd-bcd2000: error during probing
[  128.546214][   T10] snd-bcd2000 5-1:0.0: probe with driver snd-bcd2000 failed with error -22
[  128.552588][ T8072] loop9: detected capacity change from 0 to 8
[  128.568124][ T8072] Dev loop9: unable to read RDB block 8
[  128.570567][ T8072]  loop9: unable to read partition table
[  128.581052][ T8072] loop9: partition table beyond EOD, truncated
[  128.584079][ T8072] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5)
[  128.733952][   T10] usb 5-1: USB disconnect, device number 5
[  128.769877][ T8085] loop2: detected capacity change from 0 to 128
[  128.791521][ T8085] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[  128.842279][ T8085] hpfs: hpfs_map_sector(): read error
[  128.914589][ T8087] loop2: detected capacity change from 0 to 512
[  128.946657][ T8087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.958651][ T8079] loop3: detected capacity change from 0 to 32768
[  128.962039][ T8087] ext4 filesystem being mounted at /236/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  128.971555][ T8079] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  128.991207][ T8079] XFS (loop3): Ending clean mount
[  129.010021][ T8087] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.038690][ T6885] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  129.315778][ T8103] loop3: detected capacity change from 0 to 32768
[  129.456494][ T8113] usb usb8: usbfs: process 8113 (syz.3.727) did not claim interface 1 before use
[  130.397821][ T8170] netlink: 'syz.2.752': attribute type 1 has an invalid length.
[  130.430901][  T792] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  130.465795][ T8174] overlayfs: failed to clone upperpath
[  130.618355][ T8180] loop4: detected capacity change from 0 to 2048
[  130.626601][  T792] usb 4-1: config 0 has an invalid interface number: 47 but max is 0
[  130.629934][  T792] usb 4-1: config 0 has no interface number 0
[  130.642022][  T792] usb 4-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04
[  130.647029][  T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.650494][  T792] usb 4-1: Product: syz
[  130.653698][ T8180] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  130.658807][  T792] usb 4-1: Manufacturer: syz
[  130.663359][  T792] usb 4-1: SerialNumber: syz
[  130.669411][  T792] usb 4-1: config 0 descriptor??
[  130.795336][ T8189] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.761'.
[  130.888787][  T792] go7007 4-1:0.47: probe with driver go7007 failed with error -12
[  130.906171][  T792] usb 4-1: USB disconnect, device number 5
[  130.986969][ T8187] loop4: detected capacity change from 0 to 32768
[  131.012981][ T8187] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  131.054535][ T8187] XFS (loop4): Ending clean mount
[  131.063092][ T8187] XFS (loop4): Quotacheck needed: Please wait.
[  131.079648][ T8187] XFS (loop4): Quotacheck: Done.
[  131.172621][ T7135] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  131.276412][ T8213] overlayfs: failed to clone upperpath
[  131.860810][  T792] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  131.910893][   T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  132.040857][  T792] usb 4-1: Using ep0 maxpacket: 32
[  132.048081][  T792] usb 4-1: config 0 has an invalid interface number: 133 but max is 0
[  132.052272][  T792] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  132.055958][  T792] usb 4-1: config 0 has no interface number 0
[  132.058531][  T792] usb 4-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  132.063233][  T792] usb 4-1: config 0 interface 133 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  132.067248][   T10] usb 5-1: config 0 has no interfaces?
[  132.072248][  T792] usb 4-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  132.074176][   T10] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  132.079767][  T792] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e
[  132.084908][  T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.087746][  T792] usb 4-1: Product: syz
[  132.089225][  T792] usb 4-1: Manufacturer: syz
[  132.090896][  T792] usb 4-1: SerialNumber: syz
[  132.093123][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.096906][   T10] usb 5-1: Product: syz
[  132.097757][  T792] usb 4-1: config 0 descriptor??
[  132.098765][   T10] usb 5-1: Manufacturer: syz
[  132.102959][ T8217] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  132.107466][   T10] usb 5-1: SerialNumber: syz
[  132.113626][   T10] usb 5-1: config 0 descriptor??
[  132.326469][  T792] usb 4-1: probing VID:PID(0424:012C)   
[  132.328973][ T2279] usb 5-1: USB disconnect, device number 6
[  132.339001][  T792] usb 4-1: vub300 testing BULK OUT EndPoint(0) 0B
[  132.347337][  T792] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs
[  132.352252][  T792] vub300 4-1:0.133: probe with driver vub300 failed with error -22
[  132.359456][  T792] usb 4-1: USB disconnect, device number 6
[  132.436569][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.440245][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.488926][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.784'.
[  132.952336][ T8256] loop4: detected capacity change from 0 to 1024
[  132.999496][ T8256] hfsplus: request for non-existent node 62977 in B*Tree
[  133.006445][ T8256] hfsplus: request for non-existent node 62977 in B*Tree
[  133.046297][ T3541] hfsplus: b-tree write err: -5, ino 3
[  133.135557][ T8263] loop4: detected capacity change from 0 to 4096
[  133.140813][ T8263] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  133.149418][ T8263] ntfs3(loop4): ino=3, mi_enum_attr
[  133.215344][ T8263] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  133.218535][ T8263] ntfs3(loop4): ino=1f, "file2" failed to open parent directory r=5 to update
[  133.256859][   T26] ntfs3(loop4): ino=1f, failed to open parent directory r=5 to update
[  133.275293][ T8260] loop3: detected capacity change from 0 to 32768
[  133.291907][ T8260] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  133.344138][ T8260] XFS (loop3): Ending clean mount
[  133.363912][ T6885] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  134.110860][ T5314] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  134.283163][ T5314] usb 4-1: Using ep0 maxpacket: 32
[  134.292925][ T5314] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  134.296299][ T5314] usb 4-1: config 0 has no interface number 0
[  134.314021][ T5314] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  134.317247][ T5314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.320271][ T5314] usb 4-1: Product: syz
[  134.324544][ T5314] usb 4-1: Manufacturer: syz
[  134.327575][ T5314] usb 4-1: SerialNumber: syz
[  134.336058][ T5314] usb 4-1: config 0 descriptor??
[  134.342563][ T5314] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  134.562036][   T54] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260
[  134.568921][ T5314] usb 4-1: qt2_attach - failed to power on unit: -71
[  134.579939][ T5314] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71
[  134.589711][ T5314] usb 4-1: USB disconnect, device number 7
[  134.637122][ T8314] loop4: detected capacity change from 0 to 16
[  134.653642][ T8314] erofs (device loop4): mounted with root inode @ nid 36.
[  134.967626][ T8320] loop4: detected capacity change from 0 to 32768
[  135.039902][ T8320] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  135.039931][ T8320]   allowing incompatible features above 0.0: (unknown version)
[  135.039939][ T8320]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  135.056498][ T8320] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  135.060001][ T8320] bcachefs (loop4): initializing new filesystem
[  135.069447][ T8320] bcachefs (loop4): going read-write
[  135.086448][ T8320] bcachefs (loop4): marking superblocks
[  135.137479][ T8320] bcachefs (loop4): initializing freespace
[  135.150626][ T8320] bcachefs (loop4): done initializing freespace
[  135.159999][ T8320] bcachefs (loop4): reading snapshots table
[  135.165084][ T8320] bcachefs (loop4): reading snapshots done
[  135.205874][ T8320] bcachefs (loop4): done starting filesystem
[  135.256254][ T8320] syz.4.815 (8320) used greatest stack depth: 16056 bytes left
[  135.271757][ T7135] bcachefs (loop4): shutting down
[  135.278690][ T7135] bcachefs (loop4): going read-only
[  135.282402][ T8338] loop3: detected capacity change from 0 to 64
[  135.282985][ T7135] bcachefs (loop4): finished waiting for writes to stop
[  135.303497][ T7135] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3
[  135.309371][ T8338] MINIX-fs: deleted inode referenced: 6
[  135.313149][ T8338] MINIX-fs: deleted inode referenced: 6
[  135.315931][ T8338] MINIX-fs: deleted inode referenced: 6
[  135.318631][ T8338] MINIX-fs: deleted inode referenced: 6
[  135.366312][ T7135] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3
[  135.376850][ T7135] bcachefs (loop4): clean shutdown complete, journal seq 4
[  135.384727][ T7135] bcachefs (loop4): marking filesystem clean
[  135.387256][ T8342] loop3: detected capacity change from 0 to 512
[  135.397685][ T8342] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  135.412858][ T8342] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002]
[  135.420115][ T8342] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.821: corrupted in-inode xattr: e_value size too large
[  135.428741][ T7135] bcachefs (loop4): shutdown complete
[  135.433936][ T8342] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.821: couldn't read orphan inode 15 (err -117)
[  135.451897][ T8342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.491895][ T6885] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.716543][ T8353] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.825'.
[  135.731915][ T8353] netlink: zone id is out of range
[  135.734386][ T8353] netlink: zone id is out of range
[  135.737535][ T8353] netlink: get zone limit has 8 unknown bytes
[  137.220882][ T5893] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  137.383683][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  137.401016][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  137.405762][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  137.423982][ T5893] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  137.427925][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.441225][ T5893] usb 4-1: Product: syz
[  137.443105][ T5893] usb 4-1: Manufacturer: syz
[  137.445082][ T5893] usb 4-1: SerialNumber: syz
[  137.449949][ T5893] usb 4-1: config 0 descriptor??
[  137.464739][ T8365] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  137.470349][ T8365] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  137.476502][ T5893] usb 4-1: ucan: probing device on interface #0
[  137.877924][ T8375] binfmt_misc: register: failed to install interpreter file ./file0
[  138.102451][ T5893] ucan 4-1:0.0: probe with driver ucan failed with error -22
[  138.317805][ T5893] usb 4-1: USB disconnect, device number 8
[  139.296962][ T8406] loop3: detected capacity change from 0 to 2048
[  139.357369][ T8408] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  139.504763][ T8417] netlink: 228 bytes leftover after parsing attributes in process `syz.2.855'.
[  139.525895][ T8421] loop4: detected capacity change from 0 to 256
[  139.554233][ T8421] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  139.558411][ T8421] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  139.980912][ T5893] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  140.200247][ T5893] usb 4-1: unable to read config index 0 descriptor/start: -71
[  140.219273][ T5893] usb 4-1: can't read configurations, error -71
[  141.069185][ T8448] loop4: detected capacity change from 0 to 8192
[  141.194478][ T8442] loop3: detected capacity change from 0 to 32768
[  141.216032][ T8442] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.866 (8442)
[  141.452233][ T8442] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  141.456123][ T8442] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  141.459336][ T8442] BTRFS info (device loop3): using free-space-tree
[  141.582442][ T8480] netlink: 'syz.4.876': attribute type 3 has an invalid length.
[  141.687232][ T6885] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  141.909015][ T8496] loop3: detected capacity change from 0 to 1024
[  141.929680][ T8496] EXT4-fs: Ignoring removed nobh option
[  141.932256][ T8496] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  141.980240][ T8496] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.881: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  141.989171][ T8488] loop4: detected capacity change from 0 to 32768
[  142.006854][ T8488] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section members_v2: device 0: not enough buckets (got 0, max 64)
[  142.006854][ T8488] members_v2 (size 152):
[  142.006854][ T8488] nr_devices mismatch: have 17 entries, should be 1Device:0
[  142.006854][ T8488]   Label:                       (none)
[  142.006854][ T8488]   UUID:                        7af6772b-00de-4159-0000-000000000000
[  142.006854][ T8488]   Size:                        0
[  142.006854][ T8488]   read errors:                 0
[  142.006854][ T8488]   write errors:                0
[  142.006854][ T8488]   checksum errors:             0
[  142.006854][ T8488]   seqread iops:                0
[  142.006854][ T8488]   seqwrite iops:               0
[  142.006854][ T8488]   randread iops:               0
[  142.006854][ T8488]   randwrite iops:              0
[  142.006854][ T8488]   Bucket size:                 0
[  142.006854][ T8488]   First bucket:                0
[  142.006854][ T8488]   Buckets:                     0
[  142.006854][ T8488]   Last mount:                  (never)
[  142.006854][ T8488]   Last superblock write:       0
[  142.006854][ T8488]   State:                       rw
[  142.006854][ T8488]   Data allowed:                (none)
[  142.006854][ T8488]   Has data:                    btree,user
[  142.006854][ T8488]   Btree allocated bitmap blocksize:1
[  142.006854][ T8488]   Btree allocated bitmap:      0000000000000000000000000000000000000000000000000000000000000000
[  142.006854][ T8488]   Durability:   
[  142.007009][ T8488] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  142.009312][ T8496] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.881: couldn't read orphan inode 11 (err -117)
[  142.097745][ T8496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.122760][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.885'.
[  142.132462][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.885'.
[  142.178721][ T8496] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.881: Invalid block bitmap block 0 in block_group 0
[  142.191947][ T8496] __quota_error: 5 callbacks suppressed
[  142.191959][ T8496] Quota error (device loop3): write_blk: dquota write failed
[  142.197077][ T8496] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  142.202126][ T8496] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.881: Failed to acquire dquot type 0
[  142.221620][ T8496] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  142.259441][ T6885] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.450567][ T8505] loop4: detected capacity change from 0 to 32768
[  143.266138][ T8539] trusted_key: syz.2.902 sent an empty control message without MSG_MORE.
[  144.046204][ T8563] netlink: 'syz.4.913': attribute type 1 has an invalid length.
[  144.049625][ T8563] netlink: 'syz.4.913': attribute type 1 has an invalid length.
[  144.103247][ T8565] loop4: detected capacity change from 0 to 512
[  144.161222][ T8565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  144.171057][ T8565] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  144.207231][ T7135] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  144.290831][ T2279] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  144.453741][ T2279] usb 4-1: Using ep0 maxpacket: 8
[  144.463950][ T2279] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 201, changing to 11
[  144.468699][ T2279] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  144.501077][ T2279] usb 4-1: config 1 interface 0 has no altsetting 0
[  144.515735][ T2279] usb 4-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice= 0.40
[  144.519554][ T2279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.529146][ T2279] usb 4-1: Product: syz
[  144.531807][ T2279] usb 4-1: Manufacturer: syz
[  144.533744][ T2279] usb 4-1: SerialNumber: syz
[  144.570581][ T8590] tipc: Started in network mode
[  144.591107][ T8590] tipc: Node identity 4, cluster identity 4711
[  144.594184][ T8590] tipc: Node number set to 4
[  144.690614][ T8598] loop4: detected capacity change from 0 to 128
[  144.778179][ T2279] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input11
[  144.829611][ T2279] usb 4-1: USB disconnect, device number 11
[  145.581570][ T8647] loop3: detected capacity change from 0 to 512
[  145.623791][ T8647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  145.695414][ T6885] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.068109][ T8654] loop3: detected capacity change from 0 to 8
[  146.080890][ T8654] squashfs image failed sanity check
[  146.339941][ T8660] loop3: detected capacity change from 0 to 32768
[  146.352945][ T8660] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.956 (8660)
[  146.454172][ T8660] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  146.458853][ T8660] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  146.474597][ T8660] BTRFS info (device loop3): using free-space-tree
[  146.529634][ T8677] delete_channel: no stack
[  146.628267][ T6885] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  147.098179][ T8711] loop4: detected capacity change from 0 to 512
[  147.105795][ T8711] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  147.134516][ T8711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.145809][ T8711] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  147.275983][ T7135] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.323554][ T8722] netlink: 28 bytes leftover after parsing attributes in process `syz.4.975'.
[  147.523250][ T8738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.984'.
[  147.901052][ T2279] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  148.024207][ T8764] loop3: detected capacity change from 0 to 128
[  148.037532][ T8764] ufs: You didn't specify the type of your ufs filesystem
[  148.037532][ T8764] 
[  148.037532][ T8764] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  148.037532][ T8764] 
[  148.037532][ T8764] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  148.057358][ T8764] ufs: ufstype=old is supported read-only
[  148.065668][ T8764] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2
[  148.083391][ T2279] usb 5-1: Using ep0 maxpacket: 32
[  148.104125][ T2279] usb 5-1: New USB device found, idVendor=04f1, idProduct=1001, bcdDevice=19.63
[  148.108144][ T2279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.125365][ T2279] usb 5-1: Product: syz
[  148.127247][ T2279] usb 5-1: Manufacturer: syz
[  148.129274][ T2279] usb 5-1: SerialNumber: syz
[  148.151027][ T2279] usb 5-1: config 0 descriptor??
[  148.169545][ T2279] gspca_main: sunplus-2.14.0 probing 04f1:1001
[  148.198038][ T8772] loop3: detected capacity change from 0 to 1024
[  148.496079][ T8795] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1011'.
[  148.503749][ T8794] delete_channel: no stack
[  148.724592][ T8815] overlayfs: failed to clone upperpath
[  148.758303][ T2279] gspca_sunplus: reg_w_riv err -71
[  148.770854][ T2279] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[  148.780992][   T24] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  148.783618][ T2279] usb 5-1: USB disconnect, device number 7
[  148.795787][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1023'.
[  148.932659][   T24] usb 4-1: not running at top speed; connect to a high speed hub
[  148.937374][   T24] usb 4-1: config 10 has an invalid interface number: 102 but max is 0
[  148.941010][   T24] usb 4-1: config 10 has no interface number 0
[  148.943600][   T24] usb 4-1: config 10 interface 102 has no altsetting 0
[  148.948747][   T24] usb 4-1: New USB device found, idVendor=9022, idProduct=d421, bcdDevice=c1.e2
[  148.952829][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.956368][   T24] usb 4-1: Product: syz
[  148.958370][   T24] usb 4-1: Manufacturer: syz
[  148.960485][   T24] usb 4-1: SerialNumber: syz
[  149.180775][   T24] dvb-usb: found a 'TeVii S421 PCI' in warm state.
[  149.184476][   T24] dw2102: su3000_power_ctrl: 1, initialized 0
[  149.187694][   T24] dvb-usb: bulk message failed: -22 (2/0)
[  149.199389][   T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  149.209605][   T24] dvb-usb: TeVii S421 PCI error while loading driver (-19)
[  149.216283][   T24] usb 4-1: USB disconnect, device number 12
[  149.412084][ T8830] loop4: detected capacity change from 0 to 256
[  149.435638][ T8830] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf059ff26, utbl_chksum : 0xe619d30d)
[  149.629897][ T8837] loop4: detected capacity change from 0 to 512
[  149.669686][ T8837] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  149.691556][ T8837] ext4 filesystem being mounted at /193/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  149.885648][ T7135] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  149.968774][ T8855] netlink: 'syz.3.1038': attribute type 11 has an invalid length.
[  149.979074][ T8853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1036'.
[  150.140957][ T8865] loop4: detected capacity change from 0 to 512
[  150.154577][ T8865] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1043: casefold flag without casefold feature
[  150.163164][ T8865] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1043: couldn't read orphan inode 15 (err -117)
[  150.168901][ T8865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.176200][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1044'.
[  150.199868][ T7135] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.341946][   T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  151.498652][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1077'.
[  151.504591][   T24] usb 5-1: Using ep0 maxpacket: 8
[  151.508234][   T24] usb 5-1: config index 0 descriptor too short (expected 6427, got 27)
[  151.511843][   T24] usb 5-1: config 0 has an invalid interface number: 21 but max is 0
[  151.515225][   T24] usb 5-1: config 0 has no interface number 0
[  151.517971][   T24] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  151.528327][   T24] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  151.533088][   T24] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  151.539246][   T24] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  151.548649][   T24] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  151.553128][   T24] usb 5-1: Product: syz
[  151.560811][   T24] usb 5-1: config 0 descriptor??
[  151.563883][ T8927] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  151.716042][ T8956] loop3: detected capacity change from 0 to 2048
[  151.731282][ T8956] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 1)
[  151.735116][ T8956] FAT-fs (loop3): Filesystem has been set read-only
[  151.897306][ T8964] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1086'.
[  152.170783][   T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  152.178931][   T24] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input12
[  152.320793][   T10] usb 4-1: Using ep0 maxpacket: 8
[  152.325436][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  152.329644][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  152.335275][   T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  152.339765][   T10] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  152.352793][   T54] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  152.356111][   T54] Bluetooth: hci1: Injecting HCI hardware error event
[  152.360249][ T5237] Bluetooth: hci1: hardware error 0x00
[  152.367549][   T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  152.375967][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.379673][   T10] usb 4-1: Product: syz
[  152.381638][   T10] usb 4-1: Manufacturer: syz
[  152.395894][   T10] usb 4-1: SerialNumber: syz
[  152.406245][ T7034] usb 5-1: USB disconnect, device number 8
[  152.406247][    C1] keyspan_remote 5-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[  152.416761][   T10] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  152.420357][   T10] usbtest 4-1:1.0: Linux user mode ISO test driver
[  152.428061][   T10] usbtest 4-1:1.0: high-speed {control bulk-out iso-in} tests (+alt)
[  152.624318][ T7034] usb 4-1: USB disconnect, device number 13
[  153.562267][ T5314] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  153.647947][ T9007] loop4: detected capacity change from 0 to 8192
[  153.652620][ T9007] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  153.734460][ T5314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.738837][ T5314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.753174][ T5314] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  153.758533][ T5314] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  153.781415][ T5314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.797235][ T5314] usb 4-1: config 0 descriptor??
[  153.906759][ T9017] loop4: detected capacity change from 0 to 4096
[  153.929131][ T9018] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  154.215802][ T5314] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  154.256611][ T9022] loop4: detected capacity change from 0 to 32768
[  154.263750][ T9022] (syz.4.1113,9022,0):ocfs2_verify_volume:2322 ERROR: Superblock slots found greater than file system maximum: found 65535, max 255
[  154.269428][ T9022] (syz.4.1113,9022,0):ocfs2_verify_volume:2331 ERROR: status = -22
[  154.272698][ T9022] (syz.4.1113,9022,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  154.276096][ T9022] (syz.4.1113,9022,0):ocfs2_fill_super:1177 ERROR: status = -22
[  154.434489][ T5237] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  154.507053][ T9035] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1120'.
[  154.507484][ T9036] loop4: detected capacity change from 0 to 256
[  154.513282][ T9035] 0: renamed from hsr_slave_1 (while UP)
[  154.518481][ T9036] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  154.525466][ T9036] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d)
[  154.535537][ T9035] 0: entered allmulticast mode
[  154.538325][ T9035] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  154.870589][ T9044] loop4: detected capacity change from 0 to 32768
[  154.901233][ T9044] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  154.927223][ T9044] XFS (loop4): Ending clean mount
[  154.935825][ T9044] XFS (loop4): Quotacheck needed: Please wait.
[  154.977053][ T9044] XFS (loop4): Quotacheck: Done.
[  154.986274][ T9044] XFS (loop4): User initiated shutdown received.
[  154.989298][ T9044] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476).  Shutting down filesystem.
[  154.996784][ T9044] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  155.021580][ T7135] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  155.276511][ T9068] loop4: detected capacity change from 0 to 2048
[  155.307299][ T9068] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.318709][ T9068] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.1132: pblk 256 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4)
[  155.346501][ T9068] EXT4-fs (loop4): Remounting filesystem read-only
[  155.373820][ T7135] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.426182][ T9079] netlink: 'syz.4.1135': attribute type 4 has an invalid length.
[  155.549387][ T9088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1140'.
[  155.554936][ T9088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1140'.
[  156.447794][   T10] usb 4-1: reset high-speed USB device number 14 using dummy_hcd
[  156.464138][   T10] usb 4-1: device reset changed ep0 maxpacket size!
[  156.480656][ T7034] usb 4-1: USB disconnect, device number 14
[  156.650817][ T7034] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  156.734746][ T9131] loop4: detected capacity change from 0 to 32768
[  156.743853][ T9131] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1160 (9131)
[  156.767510][ T9131] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  156.772505][ T9131] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  156.776503][ T9131] BTRFS info (device loop4): using free-space-tree
[  156.813231][ T7034] usb 4-1: Using ep0 maxpacket: 32
[  156.818245][ T7034] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  156.826019][ T7034] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  156.836168][ T7034] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  156.839967][ T7034] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2763, setting to 1024
[  156.867458][ T7034] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  156.877610][ T7034] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  156.890762][ T7034] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  156.894881][ T7034] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  156.927764][ T7034] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[  156.943664][ T7034] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.963748][ T7135] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  156.964381][ T7034] usb 4-1: config 0 descriptor??
[  156.971607][ T9105] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  156.988788][ T7034] usblp0: Disabling reads from problematic bidirectional printer
[  157.212716][ T7034] usblp 4-1:0.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x0004
[  157.232364][ T7034] usb 4-1: USB disconnect, device number 15
[  157.261520][ T7034] usblp0: removed
[  157.610955][ T5893] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  157.760966][ T5893] usb 5-1: Using ep0 maxpacket: 8
[  157.796400][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.804675][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  157.811038][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  157.822471][ T9183] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1176'.
[  157.825760][ T5893] usb 5-1: New USB device found, idVendor=045e, idProduct=008e, bcdDevice= 0.00
[  157.825782][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.828364][ T5893] usb 5-1: config 0 descriptor??
[  158.092276][ T7034] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  158.240832][ T7034] usb 4-1: Using ep0 maxpacket: 16
[  158.246045][ T7034] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.249763][ T5893] hid-generic 0003:045E:008E.0009: unbalanced collection at end of report description
[  158.252247][ T7034] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.258172][ T7034] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  158.261981][ T5893] hid-generic 0003:045E:008E.0009: probe with driver hid-generic failed with error -22
[  158.263488][ T7034] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  158.270495][ T7034] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.291939][ T7034] usb 4-1: config 0 descriptor??
[  158.470434][   T10] usb 5-1: USB disconnect, device number 9
[  158.707654][ T7034] shield 0003:0955:7214.000A: unknown main item tag 0x0
[  158.710573][ T7034] shield 0003:0955:7214.000A: unknown main item tag 0x0
[  158.713464][ T7034] shield 0003:0955:7214.000A: unknown main item tag 0x0
[  158.715902][ T7034] shield 0003:0955:7214.000A: unknown main item tag 0x0
[  158.718215][ T7034] shield 0003:0955:7214.000A: unknown main item tag 0x0
[  158.933353][ T9185] random: crng reseeded on system resumption
[  159.041059][ T7034] input: HID 0955:7214 Haptics as /devices/virtual/input/input13
[  159.067558][ T7034] shield 0003:0955:7214.000A: Registered Thunderstrike controller
[  159.073588][ T7034] shield 0003:0955:7214.000A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0
[  159.135233][   T10] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  159.144317][   T10] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  159.151457][ T7034] usb 4-1: USB disconnect, device number 16
[  159.157877][   T10] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  159.167765][ T9202] loop4: detected capacity change from 0 to 128
[  159.170870][   T10] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  159.433654][ T9210] mmap: syz.4.1187 (9210) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  159.880878][ T9223] loop4: detected capacity change from 0 to 16
[  159.901541][ T9223] erofs (device loop4): mounted with root inode @ nid 36.
[  160.313146][ T9231] loop3: detected capacity change from 0 to 40427
[  160.323419][ T9231] F2FS-fs (loop3): Image doesn't support compression
[  160.326040][ T9231] F2FS-fs (loop3): build fault injection rate: 690
[  160.339733][ T9231] F2FS-fs (loop3): invalid crc value
[  160.379949][ T9231] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  160.387314][ T9231] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  160.428473][ T6885] syz-executor: attempt to access beyond end of device
[  160.428473][ T6885] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  160.444363][ T6885] CPU: 0 UID: 0 PID: 6885 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  160.444378][ T6885] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  160.444383][ T6885] Call Trace:
[  160.444387][ T6885]  <TASK>
[  160.444391][ T6885]  dump_stack_lvl+0x189/0x250
[  160.444407][ T6885]  ? __pfx_dump_stack_lvl+0x10/0x10
[  160.444416][ T6885]  ? __pfx_queue_work_on+0x10/0x10
[  160.444424][ T6885]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  160.444435][ T6885]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  160.444448][ T6885]  f2fs_handle_critical_error+0x37c/0x540
[  160.444461][ T6885]  f2fs_write_end_io+0x886/0xb60
[  160.444476][ T6885]  __submit_merged_bio+0x27a/0x6a0
[  160.444488][ T6885]  __submit_merged_write_cond+0x255/0x530
[  160.444500][ T6885]  f2fs_write_data_pages+0x261d/0x3000
[  160.444522][ T6885]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  160.444559][ T6885]  ? __lock_acquire+0xab9/0xd20
[  160.444572][ T6885]  ? do_raw_spin_lock+0x121/0x290
[  160.444585][ T6885]  ? do_raw_spin_unlock+0x4d/0x240
[  160.444593][ T6885]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  160.444619][ T6885]  do_writepages+0x32e/0x550
[  160.444635][ T6885]  ? do_raw_spin_unlock+0x4d/0x240
[  160.444645][ T6885]  filemap_fdatawrite+0x199/0x240
[  160.444655][ T6885]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  160.444682][ T6885]  ? do_raw_spin_unlock+0x4d/0x240
[  160.444692][ T6885]  f2fs_sync_dirty_inodes+0x31f/0x830
[  160.444705][ T6885]  f2fs_write_checkpoint+0x95a/0x1df0
[  160.444722][ T6885]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  160.444747][ T6885]  ? kill_f2fs_super+0x298/0x6c0
[  160.444756][ T6885]  kill_f2fs_super+0x2c3/0x6c0
[  160.444765][ T6885]  ? __pfx_kill_f2fs_super+0x10/0x10
[  160.444771][ T6885]  ? radix_tree_delete_item+0x2b6/0x400
[  160.444791][ T6885]  ? shrinker_free+0x2ce/0x3e0
[  160.444800][ T6885]  deactivate_locked_super+0xbc/0x130
[  160.444811][ T6885]  cleanup_mnt+0x425/0x4c0
[  160.444819][ T6885]  ? lockdep_hardirqs_on+0x9c/0x150
[  160.444830][ T6885]  task_work_run+0x1d4/0x260
[  160.444841][ T6885]  ? __pfx_task_work_run+0x10/0x10
[  160.444849][ T6885]  ? __x64_sys_umount+0x122/0x160
[  160.444860][ T6885]  ? exit_to_user_mode_loop+0x40/0x110
[  160.444872][ T6885]  exit_to_user_mode_loop+0xec/0x110
[  160.444881][ T6885]  do_syscall_64+0x2bd/0x3b0
[  160.444890][ T6885]  ? lockdep_hardirqs_on+0x9c/0x150
[  160.444898][ T6885]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.444905][ T6885]  ? exc_page_fault+0x9f/0xf0
[  160.444914][ T6885]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.444920][ T6885] RIP: 0033:0x7f451c38ff17
[  160.444928][ T6885] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  160.444935][ T6885] RSP: 002b:00007ffdcede1138 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  160.444944][ T6885] RAX: 0000000000000000 RBX: 00007f451c411c05 RCX: 00007f451c38ff17
[  160.444949][ T6885] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdcede11f0
[  160.444953][ T6885] RBP: 00007ffdcede11f0 R08: 0000000000000000 R09: 0000000000000000
[  160.444957][ T6885] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdcede2280
[  160.444961][ T6885] R13: 00007f451c411c05 R14: 000000000002721f R15: 00007ffdcede22c0
[  160.444973][ T6885]  </TASK>
[  160.445358][ T6885] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  161.093587][ T9264] atomic_op ffff888119340198 conn xmit_atomic 0000000000000000
[  162.507425][   T33] audit: type=1326 audit(1755254955.992:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9297 comm="syz.3.1221" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f451c38ebe9 code=0x0
[  162.654407][ T9306] loop3: detected capacity change from 0 to 2048
[  162.658481][ T9306] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=3932051, location=3932051
[  162.675040][ T9306] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  162.713041][ T9310] openvswitch: netlink: IPv4 tun info is not correct
[  163.415350][ T9333] ==================================================================
[  163.418776][ T9333] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  163.422120][ T9333] Read of size 1 at addr ffff8881140687b0 by task syz.2.1235/9333
[  163.426251][ T9333] 
[  163.427064][ T9333] CPU: 1 UID: 0 PID: 9333 Comm: syz.2.1235 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  163.427076][ T9333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  163.427081][ T9333] Call Trace:
[  163.427086][ T9333]  <TASK>
[  163.427091][ T9333]  dump_stack_lvl+0x189/0x250
[  163.427105][ T9333]  ? __kasan_check_byte+0x12/0x40
[  163.427118][ T9333]  ? __pfx_dump_stack_lvl+0x10/0x10
[  163.427127][ T9333]  ? lock_release+0x4b/0x3e0
[  163.427140][ T9333]  ? __virt_addr_valid+0x4a5/0x5c0
[  163.427152][ T9333]  print_report+0xca/0x240
[  163.427161][ T9333]  ? xfrm_state_find+0x2cf2/0x5400
[  163.427171][ T9333]  kasan_report+0x118/0x150
[  163.427181][ T9333]  ? xfrm_state_find+0x2cf2/0x5400
[  163.427192][ T9333]  xfrm_state_find+0x2cf2/0x5400
[  163.427202][ T9333]  ? __lock_acquire+0xab9/0xd20
[  163.427217][ T9333]  ? xfrm_state_find+0x1da/0x5400
[  163.427259][ T9333]  ? __pfx_xfrm_state_find+0x10/0x10
[  163.427273][ T9333]  ? __lock_acquire+0xab9/0xd20
[  163.427284][ T9333]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  163.427297][ T9333]  ? stack_depot_save_flags+0x40/0x860
[  163.427309][ T9333]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  163.427317][ T9333]  ? __lock_acquire+0xab9/0xd20
[  163.427329][ T9333]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  163.427337][ T9333]  ? rt_set_nexthop+0x693/0xa80
[  163.427347][ T9333]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  163.427355][ T9333]  ? xfrm_expand_policies+0x41f/0x6a0
[  163.427363][ T9333]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  163.427372][ T9333]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  163.427381][ T9333]  xfrm_lookup_route+0x3c/0x1c0
[  163.427388][ T9333]  udp_sendmsg+0x142e/0x2170
[  163.427399][ T9333]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  163.427407][ T9333]  ? __pfx_udp_sendmsg+0x10/0x10
[  163.427416][ T9333]  ? trace_irq_disable+0x37/0x110
[  163.427426][ T9333]  ? preempt_schedule_irq+0xde/0x150
[  163.427436][ T9333]  ? irqentry_exit+0x74/0x90
[  163.427447][ T9333]  ? sock_rps_record_flow+0x19/0x410
[  163.427461][ T9333]  ? inet_sendmsg+0x29c/0x370
[  163.427469][ T9333]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  163.427476][ T9333]  __sock_sendmsg+0x19c/0x270
[  163.427486][ T9333]  ____sys_sendmsg+0x52d/0x830
[  163.427495][ T9333]  ? __pfx_____sys_sendmsg+0x10/0x10
[  163.427505][ T9333]  ? import_iovec+0x74/0xa0
[  163.427516][ T9333]  ___sys_sendmsg+0x21f/0x2a0
[  163.427523][ T9333]  ? __pfx____sys_sendmsg+0x10/0x10
[  163.427537][ T9333]  ? __fget_files+0x2a/0x420
[  163.427544][ T9333]  ? __fget_files+0x3a0/0x420
[  163.427552][ T9333]  __sys_sendmmsg+0x227/0x430
[  163.427560][ T9333]  ? __pfx___sys_sendmmsg+0x10/0x10
[  163.427567][ T9333]  ? do_futex+0x395/0x420
[  163.427577][ T9333]  ? __sys_bind+0x33b/0x3e0
[  163.427588][ T9333]  ? rcu_is_watching+0x15/0xb0
[  163.427596][ T9333]  __x64_sys_sendmmsg+0xa0/0xc0
[  163.427603][ T9333]  do_syscall_64+0xfa/0x3b0
[  163.427613][ T9333]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.427620][ T9333]  ? asm_sysvec_call_function_single+0x1a/0x20
[  163.427628][ T9333]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.427635][ T9333] RIP: 0033:0x7fc9f258ebe9
[  163.427642][ T9333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  163.427649][ T9333] RSP: 002b:00007fc9f07d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  163.427657][ T9333] RAX: ffffffffffffffda RBX: 00007fc9f27b6180 RCX: 00007fc9f258ebe9
[  163.427662][ T9333] RDX: 0400000000000077 RSI: 0000200000000180 RDI: 0000000000000006
[  163.427667][ T9333] RBP: 00007fc9f2611e19 R08: 0000000000000000 R09: 0000000000000000
[  163.427671][ T9333] R10: 0000000000007600 R11: 0000000000000246 R12: 0000000000000000
[  163.427676][ T9333] R13: 00007fc9f27b6218 R14: 00007fc9f27b6180 R15: 00007ffead42fba8
[  163.427683][ T9333]  </TASK>
[  163.427686][ T9333] 
[  163.569313][ T9333] Allocated by task 8246:
[  163.570846][ T9333]  kasan_save_track+0x3e/0x80
[  163.572478][ T9333]  __kasan_slab_alloc+0x6c/0x80
[  163.574264][ T9333]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  163.576130][ T9333]  xfrm_state_alloc+0x24/0x2f0
[  163.577906][ T9333]  __find_acq_core+0x8a7/0x1c00
[  163.579526][ T9333]  xfrm_find_acq+0x78/0xa0
[  163.581074][ T9333]  xfrm_alloc_userspi+0x6b3/0xc90
[  163.582928][ T9333]  xfrm_user_rcv_msg+0x7a3/0xab0
[  163.584619][ T9333]  netlink_rcv_skb+0x208/0x470
[  163.586200][ T9333]  xfrm_netlink_rcv+0x79/0x90
[  163.587793][ T9333]  netlink_unicast+0x82f/0x9e0
[  163.589631][ T9333]  netlink_sendmsg+0x805/0xb30
[  163.591458][ T9333]  __sock_sendmsg+0x21c/0x270
[  163.593331][ T9333]  ____sys_sendmsg+0x505/0x830
[  163.594969][ T9333]  ___sys_sendmsg+0x21f/0x2a0
[  163.596593][ T9333]  __x64_sys_sendmsg+0x19b/0x260
[  163.598241][ T9333]  do_syscall_64+0xfa/0x3b0
[  163.599978][ T9333]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.602262][ T9333] 
[  163.603197][ T9333] Freed by task 5893:
[  163.604585][ T9333]  kasan_save_track+0x3e/0x80
[  163.606547][ T9333]  kasan_save_free_info+0x46/0x50
[  163.608698][ T9333]  __kasan_slab_free+0x5b/0x80
[  163.610596][ T9333]  kmem_cache_free+0x18f/0x400
[  163.612308][ T9333]  xfrm_state_gc_task+0x52d/0x6b0
[  163.614067][ T9333]  process_scheduled_works+0xae1/0x17b0
[  163.615945][ T9333]  worker_thread+0x8a0/0xda0
[  163.617546][ T9333]  kthread+0x711/0x8a0
[  163.619213][ T9333]  ret_from_fork+0x3fc/0x770
[  163.620800][ T9333]  ret_from_fork_asm+0x1a/0x30
[  163.622434][ T9333] 
[  163.623265][ T9333] The buggy address belongs to the object at ffff888114068480
[  163.623265][ T9333]  which belongs to the cache xfrm_state of size 928
[  163.628055][ T9333] The buggy address is located 816 bytes inside of
[  163.628055][ T9333]  freed 928-byte region [ffff888114068480, ffff888114068820)
[  163.633527][ T9333] 
[  163.634370][ T9333] The buggy address belongs to the physical page:
[  163.636816][ T9333] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888114068000 pfn:0x114068
[  163.640243][ T9333] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  163.643077][ T9333] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  163.645629][ T9333] page_type: f5(slab)
[  163.647057][ T9333] raw: 057ff00000000040 ffff8881054823c0 dead000000000122 0000000000000000
[  163.649985][ T9333] raw: ffff888114068000 00000000800e000d 00000000f5000000 0000000000000000
[  163.652740][ T9333] head: 057ff00000000040 ffff8881054823c0 dead000000000122 0000000000000000
[  163.655536][ T9333] head: ffff888114068000 00000000800e000d 00000000f5000000 0000000000000000
[  163.658398][ T9333] head: 057ff00000000002 ffffea0004501a01 00000000ffffffff 00000000ffffffff
[  163.661168][ T9333] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  163.663981][ T9333] page dumped because: kasan: bad access detected
[  163.666382][ T9333] page_owner tracks the page as allocated
[  163.668421][ T9333] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6568, tgid 6567 (syz.1.238), ts 77010371575, free_ts 58033733096
[  163.674849][ T9333]  post_alloc_hook+0x240/0x2a0
[  163.676505][ T9333]  get_page_from_freelist+0x21e4/0x22c0
[  163.678442][ T9333]  __alloc_frozen_pages_noprof+0x181/0x370
[  163.680438][ T9333]  alloc_pages_mpol+0x232/0x4a0
[  163.682122][ T9333]  allocate_slab+0x8a/0x370
[  163.683734][ T9333]  ___slab_alloc+0xbeb/0x1410
[  163.685336][ T9333]  kmem_cache_alloc_noprof+0x283/0x3c0
[  163.687090][ T9333]  xfrm_state_alloc+0x24/0x2f0
[  163.688984][ T9333]  xfrm_add_sa+0x17d1/0x4070
[  163.690607][ T9333]  xfrm_user_rcv_msg+0x7a3/0xab0
[  163.692353][ T9333]  netlink_rcv_skb+0x208/0x470
[  163.693986][ T9333]  xfrm_netlink_rcv+0x79/0x90
[  163.695626][ T9333]  netlink_unicast+0x82f/0x9e0
[  163.697344][ T9333]  netlink_sendmsg+0x805/0xb30
[  163.699354][ T9333]  __sock_sendmsg+0x21c/0x270
[  163.701353][ T9333]  ____sys_sendmsg+0x505/0x830
[  163.703392][ T9333] page last free pid 5858 tgid 5858 stack trace:
[  163.706002][ T9333]  __free_frozen_pages+0xbc4/0xd30
[  163.707722][ T9333]  __put_partials+0x156/0x1a0
[  163.709500][ T9333]  put_cpu_partial+0x17c/0x250
[  163.711279][ T9333]  __slab_free+0x2d5/0x3c0
[  163.712960][ T9333]  qlist_free_all+0x97/0x140
[  163.714693][ T9333]  kasan_quarantine_reduce+0x148/0x160
[  163.716983][ T9333]  __kasan_slab_alloc+0x22/0x80
[  163.718999][ T9333]  __kmalloc_cache_noprof+0x1be/0x3d0
[  163.721005][ T9333]  ref_tracker_alloc+0x133/0x460
[  163.722695][ T9333]  fib_create_info+0x22f1/0x3210
[  163.724607][ T9333]  fib_table_insert+0xc6/0x1b50
[  163.726472][ T9333]  fib_magic+0x2c4/0x390
[  163.727925][ T9333]  fib_add_ifaddr+0x144/0x5f0
[  163.729414][ T9333]  fib_netdev_event+0x382/0x490
[  163.731109][ T9333]  notifier_call_chain+0x1b6/0x3e0
[  163.732903][ T9333]  __dev_notify_flags+0x18d/0x2e0
[  163.735125][ T9333] 
[  163.736211][ T9333] Memory state around the buggy address:
[  163.738584][ T9333]  ffff888114068680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  163.741890][ T9333]  ffff888114068700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  163.745318][ T9333] >ffff888114068780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  163.748564][ T9333]                                      ^
[  163.751013][ T9333]  ffff888114068800: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  163.754357][ T9333]  ffff888114068880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  163.757784][ T9333] ==================================================================
[  163.861706][ T9333] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  163.864749][ T9333] CPU: 0 UID: 0 PID: 9333 Comm: syz.2.1235 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  163.869798][ T9333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  163.873390][ T9333] Call Trace:
[  163.874679][ T9333]  <TASK>
[  163.875939][ T9333]  dump_stack_lvl+0x99/0x250
[  163.877759][ T9333]  ? __asan_memcpy+0x40/0x70
[  163.879356][ T9333]  ? __pfx_dump_stack_lvl+0x10/0x10
[  163.881230][ T9333]  ? __pfx__printk+0x10/0x10
[  163.882730][ T9333]  vpanic+0x281/0x750
[  163.884070][ T9333]  ? preempt_schedule+0xae/0xc0
[  163.885726][ T9333]  ? __pfx_vpanic+0x10/0x10
[  163.887309][ T9333]  ? preempt_schedule_common+0x83/0xd0
[  163.889360][ T9333]  ? preempt_schedule+0xae/0xc0
[  163.891054][ T9333]  ? __pfx_preempt_schedule+0x10/0x10
[  163.892891][ T9333]  panic+0xb9/0xc0
[  163.894180][ T9333]  ? __pfx_panic+0x10/0x10
[  163.895730][ T9333]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  163.897736][ T9333]  ? xfrm_state_find+0x2cf2/0x5400
[  163.899467][ T9333]  check_panic_on_warn+0x89/0xb0
[  163.901091][ T9333]  ? xfrm_state_find+0x2cf2/0x5400
[  163.902909][ T9333]  end_report+0x78/0x160
[  163.904356][ T9333]  kasan_report+0x129/0x150
[  163.905905][ T9333]  ? xfrm_state_find+0x2cf2/0x5400
[  163.907606][ T9333]  xfrm_state_find+0x2cf2/0x5400
[  163.909354][ T9333]  ? __lock_acquire+0xab9/0xd20
[  163.911358][ T9333]  ? xfrm_state_find+0x1da/0x5400
[  163.913261][ T9333]  ? __pfx_xfrm_state_find+0x10/0x10
[  163.915054][ T9333]  ? __lock_acquire+0xab9/0xd20
[  163.916756][ T9333]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  163.918866][ T9333]  ? stack_depot_save_flags+0x40/0x860
[  163.920639][ T9333]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  163.922789][ T9333]  ? __lock_acquire+0xab9/0xd20
[  163.924384][ T9333]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  163.926197][ T9333]  ? rt_set_nexthop+0x693/0xa80
[  163.927883][ T9333]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  163.929790][ T9333]  ? xfrm_expand_policies+0x41f/0x6a0
[  163.931563][ T9333]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  163.933360][ T9333]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  163.935458][ T9333]  xfrm_lookup_route+0x3c/0x1c0
[  163.937155][ T9333]  udp_sendmsg+0x142e/0x2170
[  163.938713][ T9333]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  163.940760][ T9333]  ? __pfx_udp_sendmsg+0x10/0x10
[  163.942430][ T9333]  ? trace_irq_disable+0x37/0x110
[  163.944057][ T9333]  ? preempt_schedule_irq+0xde/0x150
[  163.946206][ T9333]  ? irqentry_exit+0x74/0x90
[  163.948149][ T9333]  ? sock_rps_record_flow+0x19/0x410
[  163.949929][ T9333]  ? inet_sendmsg+0x29c/0x370
[  163.951776][ T9333]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  163.953915][ T9333]  __sock_sendmsg+0x19c/0x270
[  163.955742][ T9333]  ____sys_sendmsg+0x52d/0x830
[  163.957407][ T9333]  ? __pfx_____sys_sendmsg+0x10/0x10
[  163.959277][ T9333]  ? import_iovec+0x74/0xa0
[  163.960969][ T9333]  ___sys_sendmsg+0x21f/0x2a0
[  163.962559][ T9333]  ? __pfx____sys_sendmsg+0x10/0x10
[  163.964358][ T9333]  ? __fget_files+0x2a/0x420
[  163.966363][ T9333]  ? __fget_files+0x3a0/0x420
[  163.968206][ T9333]  __sys_sendmmsg+0x227/0x430
[  163.970005][ T9333]  ? __pfx___sys_sendmmsg+0x10/0x10
[  163.971829][ T9333]  ? do_futex+0x395/0x420
[  163.973348][ T9333]  ? __sys_bind+0x33b/0x3e0
[  163.975086][ T9333]  ? rcu_is_watching+0x15/0xb0
[  163.977024][ T9333]  __x64_sys_sendmmsg+0xa0/0xc0
[  163.978889][ T9333]  do_syscall_64+0xfa/0x3b0
[  163.980477][ T9333]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.982599][ T9333]  ? asm_sysvec_call_function_single+0x1a/0x20
[  163.984871][ T9333]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.987296][ T9333] RIP: 0033:0x7fc9f258ebe9
[  163.988824][ T9333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  163.995380][ T9333] RSP: 002b:00007fc9f07d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  163.998238][ T9333] RAX: ffffffffffffffda RBX: 00007fc9f27b6180 RCX: 00007fc9f258ebe9
[  164.001208][ T9333] RDX: 0400000000000077 RSI: 0000200000000180 RDI: 0000000000000006
[  164.004072][ T9333] RBP: 00007fc9f2611e19 R08: 0000000000000000 R09: 0000000000000000
[  164.006932][ T9333] R10: 0000000000007600 R11: 0000000000000246 R12: 0000000000000000
[  164.009689][ T9333] R13: 00007fc9f27b6218 R14: 00007fc9f27b6180 R15: 00007ffead42fba8
[  164.012509][ T9333]  </TASK>
[  164.014574][ T9333] Kernel Offset: disabled
[  164.016420][ T9333] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:49:17  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b44d4b RBX=1ffff11026cc7f61 RCX=0000000000080000 RDX=ffffc900086aa000
RSI=000000000007ffff RDI=0000000000080000 RBP=ffffc9000469f140 RSP=ffffc9000469efc0
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=ffff88813663fb08 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81b44d33 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc9f07f66c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000073030 CR3=0000000023dba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f451c587498 00007f451c587470 XMM03=00007f451c5874a8 00007f451c5874a0
XMM04=00007f451d0ed100 00007f451c587460 XMM05=00007f451c587478 00007f451c5874c0
XMM06=00007f451c5874b8 00007f451c5874b0 XMM07=00007f451c5874a8 00007f451c5874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f451c412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000006b RBX=000000000000006b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001318 RDI=0000000000001319 RBP=00000000000003f8 RSP=ffffc9000474e7b0
R8 =ffff88801fd98237 R9 =1ffff11003fb3046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af9906 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc9f07d56c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c27fffb CR3=0000000023dba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fc9f2787498 00007fc9f2787470 XMM03=00007fc9f27874a8 00007fc9f27874a0
XMM04=00007fc9f32ed100 00007fc9f2787460 XMM05=00007fc9f2787478 00007fc9f27874c0
XMM06=00007fc9f27874b8 00007fc9f27874b0 XMM07=00007fc9f27874a8 00007fc9f27874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fc9f2612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
