last executing test programs:

2m38.123514358s ago: executing program 1 (id=234):
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x847b023adc5ee2e2)

2m38.123222702s ago: executing program 1 (id=235):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10)

2m38.047239011s ago: executing program 1 (id=236):
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00"], 0xfe33)

2m38.047117425s ago: executing program 1 (id=237):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x28b501e, 0x0)
mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x84000, 0x0)

2m37.943196697s ago: executing program 1 (id=239):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x1000000, &(0x7f00000001c0)='\x01')

2m37.669151296s ago: executing program 1 (id=247):
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x1, 0xffffffff908811b9, 0xab2, 0x8, 0x0, 0x101, 0x0, 0x0, 0x0, 0x800}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0x2, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r4=>0x0)
io_submit(r4, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r3, &(0x7f0000000180)='\x00', 0xfdfe}])
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}})
dup3(r0, r1, 0x6700000000000000)

2m37.571148933s ago: executing program 32 (id=247):
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x1, 0xffffffff908811b9, 0xab2, 0x8, 0x0, 0x101, 0x0, 0x0, 0x0, 0x800}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0x2, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r4=>0x0)
io_submit(r4, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r3, &(0x7f0000000180)='\x00', 0xfdfe}])
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}})
dup3(r0, r1, 0x6700000000000000)

1.828845854s ago: executing program 2 (id=2700):
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})
pread64(r0, &(0x7f0000000000)=""/112, 0x70, 0x2)

1.703552482s ago: executing program 2 (id=2709):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x22000402, &(0x7f0000000a40)={[{@dioread_lock}, {@noblock_validity}, {@noinit_itable}, {@discard}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@mb_optimize_scan}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x85, 0x4e6, &(0x7f00000001c0)="$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")

1.549041548s ago: executing program 2 (id=2712):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002110000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)

1.430053336s ago: executing program 2 (id=2718):
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, [{0x0, 0xa, "a78ce54806598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e518a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x20000172, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x1f, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)

1.34886823s ago: executing program 2 (id=2720):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil)
brk(0x400000ffc000)
brk(0x400000ffc020)

992.705939ms ago: executing program 0 (id=2731):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="1800020000400000000000000900000085000000b4000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)

910.547995ms ago: executing program 0 (id=2732):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000004e40)={0x0, 0x59, &(0x7f0000004e00)={&(0x7f0000004d80)={0x34, 0x6, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x4080)

910.342871ms ago: executing program 3 (id=2733):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46a, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x20, 0xc, 0x45, {0x45, 0x5, "3b651763da0333ddbb3c02cef5e0a7d40d0590cf8f72318d8b8e9187148f258ce5c51708e1050062e15c69cc465ec4c94d51a60f84a4bfa30c43ce1055c03a00000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

910.192879ms ago: executing program 0 (id=2734):
syz_read_part_table(0x1079, &(0x7f0000000000)="$eJzs0M1JRDEUBeDznDc/AQWXtjLgxiIEEQuwC2dacGsVdmEd9iFXXmaCFaib71sk4d5wc0j4V63Wu+xTL0k7VXbnzu1V7l+T7aitDsvpq+q9t6dMyWqM2d+c9uu0Y/J8rk5Vd5/JXFV1sSxJalo62+N4b5Os0yc9Xn4kedskc89w6PeHh6f0MPNPovbLfwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf+U7AAD//1snG5M=")
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

748.414169ms ago: executing program 0 (id=2735):
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0xa10082, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x2c1, &(0x7f0000000c00)="$eJzs3T9vI0UUAPC3jv8BhV1QISRWgoLqdLmWxgHlpANXIBdAASfuTkKxhZSTIvFH+FLR0lDyCZCQ6Gj5ADR8AyRaJDpSRFq0613bcRyTRXEC3O/X5GV23sybydhRCk8+fHFy8CCNR8df/BrdbhKNQQziJIl+NKLyJM4YfB0AwH/ZSZbFH9lMnbwkIrrbKwsA2KLav/9/2HpJAMCWvfPue2/tDYf7b6dpN+5Ovjoa5X/Z519nz/cexccxjodxO3pxGpHNzeK7WZZNm2muH69MpkejPHPywc/l+Hu/RxT5u9GLftF0Nv/ecH83nVnKn+Z1PFvOP8jz70Qvnl8z/73h/p01+TFqx6svL9V/K3rxy0fxSYzjQVFEd57/5W6avpF98+fn7+fl5fnJ9GjUKfotZDvX/KMBAAAAAAAAAAAAAAAAAAAAAOB/7FZ5d04nivt78qby/p2d0/ybVqSV/tn7eWb5STXQyv1A0yy+re7XuZ2maVZ2XOQ344VmNG9m1QAAAAAAAAAAAAAAAAAAAPDv8vjTzw7uj8cPD4vgzawM5i2XC1rlaNVtANXH+uuOUwWDeUvz8KXY3LmzmKtRhhtGjp2qTxKxsYx8Ef9sN2oHz1xU83ff1x2w+/d9Wou5ol9uxhWvqzpdB/eT9XvYiaqlWx2SH5f7tOOSc7UvepTVOn7ttY96tdfefq4Iphv65C+Si8d57bfZzpUt5QvqybxPu9jVtemtMlhKXzkbtc7z+feKJLnStx4AAAAAAAAAAAAAAAAAAGDF4kO/ax4eb0xtZJ2tlQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA12rx///nQfNcy2owLZNnLT+9vqFzOw4f3/ASAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAr8FQAA///R11nl")
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
shutdown(r0, 0x2000000)
syz_mount_image$fuse(&(0x7f0000000700), &(0x7f00000000c0)='./file0\x00', 0x30c407a, &(0x7f0000000780)=ANY=[], 0x1, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fanotify_init(0x8, 0x80000)
r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0)
r2 = fanotify_init(0xf00, 0x2)
fanotify_mark(r2, 0x105, 0x8971, r1, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

747.378788ms ago: executing program 0 (id=2736):
syz_mount_image$xfs(&(0x7f0000000540), &(0x7f0000009640)='./bus\x00', 0x200800, &(0x7f00000001c0)={[{@noalign}, {@uqnoenforce}, {@swalloc}, {@filestreams}, {@grpquota}, {@grpquota}, {@gquota}]}, 0x7, 0x9606, &(0x7f0000009680)="$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")
r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd8456a18f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab2c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df00", 0xa30}}, 0xfffffe1a)

360.412874ms ago: executing program 3 (id=2737):
io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffd, 0x8})

310.055068ms ago: executing program 3 (id=2738):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x192}}, 0x20}}, 0x0)

239.318135ms ago: executing program 2 (id=2739):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', <r1=>0x0})
r2 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@empty, 0x6, r1})

223.302906ms ago: executing program 3 (id=2740):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000040), 0x10)
sendmsg$netlink(r0, &(0x7f0000005d80)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x200}, 0x2, &(0x7f0000005cc0)=[{&(0x7f0000000180)=ANY=[], 0x28}, {&(0x7f0000004540)={0x10, 0x37, 0x1, 0x70bd26, 0x25dfdc02}, 0x10}], 0x2, 0x0, 0x0, 0x44011}, 0x40830)

80.430507ms ago: executing program 3 (id=2741):
mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil)
get_mempolicy(0x0, 0x0, 0x401, &(0x7f0000ffc000/0x2000)=nil, 0x2)

80.270884ms ago: executing program 0 (id=2742):
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x5)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000048000), 0x0)

0s ago: executing program 3 (id=2743):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r0, 0x1)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000940)=@assoc_value={<r2=>0x0}, &(0x7f00000008c0)=0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040)={r2}, &(0x7f0000000100)=0x8)

kernel console output (not intermixed with test programs):

named net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[   78.412091][ T5857] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[   78.422943][ T5857] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[   78.436480][ T5857] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[   78.448348][ T5857] usb 2-1: USB disconnect, device number 4
[   78.524988][ T6304] loop0: detected capacity change from 0 to 40427
[   78.547916][ T6304] F2FS-fs (loop0): invalid crc value
[   78.634492][ T6304] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   78.640863][ T6304] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   78.683879][ T5849] syz-executor: attempt to access beyond end of device
[   78.683879][ T5849] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   78.690734][ T5849] CPU: 0 UID: 0 PID: 5849 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   78.690753][ T5849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   78.690760][ T5849] Call Trace:
[   78.690766][ T5849]  <TASK>
[   78.690772][ T5849]  dump_stack_lvl+0x189/0x250
[   78.690796][ T5849]  ? __pfx_dump_stack_lvl+0x10/0x10
[   78.690811][ T5849]  ? __pfx_queue_work_on+0x10/0x10
[   78.690821][ T5849]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   78.690836][ T5849]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   78.690861][ T5849]  f2fs_handle_critical_error+0x37c/0x540
[   78.690885][ T5849]  f2fs_write_end_io+0x886/0xb60
[   78.690913][ T5849]  __submit_merged_bio+0x27a/0x6a0
[   78.690935][ T5849]  __submit_merged_write_cond+0x255/0x530
[   78.690958][ T5849]  f2fs_write_data_pages+0x261d/0x3000
[   78.691005][ T5849]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   78.691084][ T5849]  ? __lock_acquire+0xab9/0xd20
[   78.691108][ T5849]  ? do_raw_spin_lock+0x121/0x290
[   78.691132][ T5849]  ? do_raw_spin_unlock+0x4d/0x240
[   78.691147][ T5849]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   78.691174][ T5849]  do_writepages+0x32e/0x550
[   78.691201][ T5849]  ? do_raw_spin_unlock+0x4d/0x240
[   78.691246][ T5849]  filemap_fdatawrite+0x199/0x240
[   78.691264][ T5849]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   78.691321][ T5849]  ? do_raw_spin_unlock+0x4d/0x240
[   78.691339][ T5849]  f2fs_sync_dirty_inodes+0x31f/0x830
[   78.691365][ T5849]  f2fs_write_checkpoint+0x95a/0x1df0
[   78.691398][ T5849]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   78.691451][ T5849]  ? kill_f2fs_super+0x298/0x6c0
[   78.691468][ T5849]  kill_f2fs_super+0x2c3/0x6c0
[   78.691485][ T5849]  ? __pfx_kill_f2fs_super+0x10/0x10
[   78.691495][ T5849]  ? radix_tree_delete_item+0x2b6/0x400
[   78.691518][ T5849]  ? shrinker_free+0x2ce/0x3e0
[   78.691534][ T5849]  deactivate_locked_super+0xbc/0x130
[   78.691551][ T5849]  cleanup_mnt+0x425/0x4c0
[   78.691565][ T5849]  ? lockdep_hardirqs_on+0x9c/0x150
[   78.691585][ T5849]  task_work_run+0x1d4/0x260
[   78.691604][ T5849]  ? __pfx_task_work_run+0x10/0x10
[   78.691617][ T5849]  ? __x64_sys_umount+0x122/0x160
[   78.691637][ T5849]  ? exit_to_user_mode_loop+0x40/0x110
[   78.691657][ T5849]  exit_to_user_mode_loop+0xec/0x110
[   78.691674][ T5849]  do_syscall_64+0x2bd/0x3b0
[   78.691684][ T5849]  ? lockdep_hardirqs_on+0x9c/0x150
[   78.691700][ T5849]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.691711][ T5849]  ? exc_page_fault+0x9f/0xf0
[   78.691730][ T5849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.691740][ T5849] RIP: 0033:0x7f7fd618ff17
[   78.691752][ T5849] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   78.691762][ T5849] RSP: 002b:00007fff41355d28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   78.691775][ T5849] RAX: 0000000000000000 RBX: 00007f7fd6211c05 RCX: 00007f7fd618ff17
[   78.691783][ T5849] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff41355de0
[   78.691790][ T5849] RBP: 00007fff41355de0 R08: 0000000000000000 R09: 0000000000000000
[   78.691797][ T5849] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff41356e70
[   78.691805][ T5849] R13: 00007f7fd6211c05 R14: 00000000000132cb R15: 00007fff41356eb0
[   78.691828][ T5849]  </TASK>
[   78.691833][ T5849] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   78.825674][ T6323] loop2: detected capacity change from 0 to 4096
[   78.851975][ T6323] ntfs3(loop2): Failed to load $MFT (-22).
[   79.188177][ T6335] loop0: detected capacity change from 0 to 16
[   79.197411][ T6335] erofs (device loop0): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[   79.206817][ T6335] erofs (device loop0): mounted with root inode @ nid 36.
[   79.211899][ T6335] erofs (device loop0): read error -117 @ 0 of nid 36
[   79.227866][ T5912] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   79.324762][ T5857] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   79.405940][ T5912] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[   79.409420][ T5912] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[   79.413517][ T5912] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   79.417876][ T5912] usb 2-1: config 220 has no interface number 2
[   79.420468][ T5912] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   79.427585][ T5912] usb 2-1: config 220 interface 0 has no altsetting 0
[   79.430819][ T5912] usb 2-1: config 220 interface 76 has no altsetting 0
[   79.434198][ T5912] usb 2-1: config 220 interface 1 has no altsetting 0
[   79.439621][ T5912] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   79.443789][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.447176][ T5912] usb 2-1: Product: syz
[   79.448895][ T5912] usb 2-1: Manufacturer: syz
[   79.450881][ T5912] usb 2-1: SerialNumber: syz
[   79.492735][ T5857] usb 3-1: Using ep0 maxpacket: 16
[   79.497645][ T5857] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[   79.501814][ T5857] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 75, changing to 10
[   79.507919][ T5857] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 25344, setting to 1024
[   79.512716][ T5857] usb 3-1: config 0 interface 0 has no altsetting 0
[   79.518228][ T5857] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[   79.522026][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.525529][ T5857] usb 3-1: Product: syz
[   79.527425][ T5857] usb 3-1: Manufacturer: syz
[   79.530654][ T5857] usb 3-1: SerialNumber: syz
[   79.536654][ T5857] usb 3-1: config 0 descriptor??
[   79.671440][ T5912] usb 2-1: selecting invalid altsetting 0
[   79.679319][ T5912] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[   79.682199][ T5912] usb 2-1: No valid video chain found.
[   79.692351][ T5912] usb 2-1: selecting invalid altsetting 0
[   79.694890][ T5912] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[   79.702351][ T5912] usb 2-1: USB disconnect, device number 5
[   79.748974][ T5857] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input4
[   79.952352][ T5912] usb 3-1: USB disconnect, device number 4
[   80.281312][ T6346] Zero length message leads to an empty skb
[   80.323089][ T6348] loop1: detected capacity change from 0 to 256
[   80.786958][ T6358] loop2: detected capacity change from 0 to 256
[   80.851630][ T6360] loop1: detected capacity change from 0 to 512
[   80.856499][ T6360] EXT4-fs: Ignoring removed mblk_io_submit option
[   80.871914][ T6360] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   80.892952][ T6360] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   80.936636][ T6360] EXT4-fs (loop1): 1 truncate cleaned up
[   80.980750][ T6360] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.036880][ T6360] EXT4-fs error (device loop1): ext4_find_extent:903: inode #15: comm syz.1.183: inode has invalid extent depth: 25964
[   81.076938][ T6360] fs-verity (loop1, inode 15): Error -117 getting verity descriptor size
[   81.293075][ T5847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.389355][   T47] cfg80211: failed to load regulatory.db
[   81.980133][ T6381] loop0: detected capacity change from 0 to 1024
[   82.007382][ T6381] hfsplus: failed to load extents file
[   82.123785][ T5913] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   82.147725][ T6385] loop0: detected capacity change from 0 to 1764
[   82.188304][ T6385] iso9660: Corrupted directory entry in block 2 of inode 1920
[   82.296159][ T5913] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[   82.299940][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.309760][ T5913] usb 3-1: config 0 descriptor??
[   82.314619][ T5913] gspca_main: STV06xx-2.14.0 probing 046d:0870
[   82.506415][ T6392] loop0: detected capacity change from 0 to 512
[   82.556638][ T6392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.562144][ T6392] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   82.580169][ T6392] EXT4-fs error (device loop0): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.0.197: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[   82.589758][ T6392] EXT4-fs error (device loop0): ext4_get_first_dir_block:3540: inode #12: comm syz.0.197: directory missing '.'
[   82.615568][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.663117][    C0] TC_ACT_REPEAT abuse ?
[   82.825813][ T6400] loop0: detected capacity change from 0 to 2048
[   82.870372][ T6402] input: syz1 as /devices/virtual/input/input5
[   82.876038][ T6400] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   83.053557][ T6405] sp0: Synchronizing with TNC
[   83.144862][ T5913] gspca_stv06xx: I2C: Read error writing address: -71
[   83.152414][ T5913] usb 3-1: USB disconnect, device number 5
[   83.402721][ T6414] netlink: 'syz.0.206': attribute type 9 has an invalid length.
[   83.405955][ T6414] netlink: 147436 bytes leftover after parsing attributes in process `syz.0.206'.
[   85.314119][ T5858] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   85.490591][ T5858] usb 3-1: too many endpoints for config 4 interface 0 altsetting 0: 79, using maximum allowed: 30
[   85.510210][ T5858] usb 3-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x32, changing to 0x2
[   85.518515][ T5858] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 91
[   85.521997][ T5858] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 79
[   85.527631][ T5858] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[   85.530596][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.544028][ T6462] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   85.759066][ T5858] ath6kl: Failed to submit usb control message: -71
[   85.766261][ T5858] ath6kl: unable to send the bmi data to the device: -71
[   85.768964][ T5858] ath6kl: Unable to send get target info: -71
[   85.778465][ T5858] ath6kl: Failed to init ath6kl core: -71
[   85.781739][ T5858] ath6kl_usb 3-1:4.0: probe with driver ath6kl_usb failed with error -71
[   85.810521][ T5858] usb 3-1: USB disconnect, device number 6
[   85.845845][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.912912][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.997019][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.068428][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.137976][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   86.142076][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   86.148178][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   86.153076][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   86.158468][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   86.267994][   T12] bridge_slave_1: left allmulticast mode
[   86.270592][   T12] bridge_slave_1: left promiscuous mode
[   86.275203][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.299624][   T12] bridge_slave_0: left allmulticast mode
[   86.302243][   T12] bridge_slave_0: left promiscuous mode
[   86.306074][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.911777][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   86.918442][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   86.923857][   T12] bond0 (unregistering): Released all slaves
[   87.196096][ T6534] loop2: detected capacity change from 0 to 40427
[   87.212184][ T6534] F2FS-fs (loop2): Image doesn't support compression
[   87.219684][ T6534] F2FS-fs (loop2): invalid crc value
[   87.329182][ T6534] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   87.341052][ T6534] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   87.357484][ T6508] chnl_net:caif_netlink_parms(): no params data found
[   87.407053][ T5856] syz-executor: attempt to access beyond end of device
[   87.407053][ T5856] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   87.418202][ T5856] CPU: 1 UID: 0 PID: 5856 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   87.418219][ T5856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   87.418225][ T5856] Call Trace:
[   87.418230][ T5856]  <TASK>
[   87.418235][ T5856]  dump_stack_lvl+0x189/0x250
[   87.418255][ T5856]  ? __pfx_dump_stack_lvl+0x10/0x10
[   87.418269][ T5856]  ? __pfx_queue_work_on+0x10/0x10
[   87.418279][ T5856]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   87.418294][ T5856]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   87.418317][ T5856]  f2fs_handle_critical_error+0x37c/0x540
[   87.418339][ T5856]  f2fs_write_end_io+0x886/0xb60
[   87.418371][ T5856]  __submit_merged_bio+0x27a/0x6a0
[   87.418391][ T5856]  __submit_merged_write_cond+0x255/0x530
[   87.418411][ T5856]  f2fs_write_data_pages+0x261d/0x3000
[   87.418450][ T5856]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   87.418529][ T5856]  ? folios_put_refs+0x559/0x640
[   87.418555][ T5856]  ? __lock_acquire+0xab9/0xd20
[   87.418577][ T5856]  ? do_raw_spin_lock+0x121/0x290
[   87.418598][ T5856]  ? do_raw_spin_unlock+0x4d/0x240
[   87.418611][ T5856]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   87.418627][ T5856]  do_writepages+0x32e/0x550
[   87.418650][ T5856]  ? do_raw_spin_unlock+0x4d/0x240
[   87.418666][ T5856]  filemap_fdatawrite+0x199/0x240
[   87.418681][ T5856]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   87.418731][ T5856]  ? do_raw_spin_unlock+0x4d/0x240
[   87.418747][ T5856]  f2fs_sync_dirty_inodes+0x31f/0x830
[   87.418770][ T5856]  f2fs_write_checkpoint+0x95a/0x1df0
[   87.418800][ T5856]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   87.418848][ T5856]  ? kill_f2fs_super+0x298/0x6c0
[   87.418863][ T5856]  kill_f2fs_super+0x2c3/0x6c0
[   87.418879][ T5856]  ? __pfx_kill_f2fs_super+0x10/0x10
[   87.418888][ T5856]  ? radix_tree_delete_item+0x2b6/0x400
[   87.418908][ T5856]  ? shrinker_free+0x2ce/0x3e0
[   87.418922][ T5856]  deactivate_locked_super+0xbc/0x130
[   87.418937][ T5856]  cleanup_mnt+0x425/0x4c0
[   87.418950][ T5856]  ? lockdep_hardirqs_on+0x9c/0x150
[   87.418967][ T5856]  task_work_run+0x1d4/0x260
[   87.418984][ T5856]  ? __pfx_task_work_run+0x10/0x10
[   87.418995][ T5856]  ? __x64_sys_umount+0x122/0x160
[   87.419013][ T5856]  ? exit_to_user_mode_loop+0x40/0x110
[   87.419032][ T5856]  exit_to_user_mode_loop+0xec/0x110
[   87.419047][ T5856]  do_syscall_64+0x2bd/0x3b0
[   87.419055][ T5856]  ? lockdep_hardirqs_on+0x9c/0x150
[   87.419069][ T5856]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.419079][ T5856]  ? exc_page_fault+0x9f/0xf0
[   87.419094][ T5856]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.419104][ T5856] RIP: 0033:0x7fafb138ff17
[   87.419115][ T5856] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   87.419123][ T5856] RSP: 002b:00007ffcda424728 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   87.419136][ T5856] RAX: 0000000000000000 RBX: 00007fafb1411c05 RCX: 00007fafb138ff17
[   87.419169][ T5856] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcda4247e0
[   87.419175][ T5856] RBP: 00007ffcda4247e0 R08: 0000000000000000 R09: 0000000000000000
[   87.419181][ T5856] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcda425870
[   87.419188][ T5856] R13: 00007fafb1411c05 R14: 00000000000154d3 R15: 00007ffcda4258b0
[   87.419209][ T5856]  </TASK>
[   87.420183][ T5856] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   87.619722][   T12] hsr_slave_0: left promiscuous mode
[   87.636329][   T12] hsr_slave_1: left promiscuous mode
[   87.639290][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.642518][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.677949][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.680969][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.712409][   T12] veth1_macvtap: left promiscuous mode
[   87.715217][   T12] veth0_macvtap: left promiscuous mode
[   87.717626][   T12] veth1_vlan: left promiscuous mode
[   87.720817][   T12] veth0_vlan: left promiscuous mode
[   87.731852][ T6574] 9pnet_fd: Insufficient options for proto=fd
[   88.244176][ T6588] loop2: detected capacity change from 0 to 32768
[   88.264174][ T5238] Bluetooth: hci0: command tx timeout
[   88.639645][ T6588] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   88.685774][ T6588] XFS (loop2): Ending clean mount
[   88.699156][ T6588] XFS (loop2): Quotacheck needed: Please wait.
[   88.749905][ T6588] XFS (loop2): Quotacheck: Done.
[   88.808759][ T5856] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   88.899410][   T12] team0 (unregistering): Port device team_slave_1 removed
[   88.970495][   T12] team0 (unregistering): Port device team_slave_0 removed
[   89.086197][ T6602] loop2: detected capacity change from 0 to 4096
[   89.175374][ T6603] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   89.582490][ T6508] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.588692][ T6508] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.591770][ T6508] bridge_slave_0: entered allmulticast mode
[   89.597910][ T6508] bridge_slave_0: entered promiscuous mode
[   89.625075][ T6508] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.628471][ T6508] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.631891][ T6508] bridge_slave_1: entered allmulticast mode
[   89.641703][ T6508] bridge_slave_1: entered promiscuous mode
[   89.776998][ T6508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.803570][ T6508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.968900][ T6508] team0: Port device team_slave_0 added
[   89.996141][ T6508] team0: Port device team_slave_1 added
[   90.108164][ T6508] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.115312][ T6508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.144372][ T6508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.175243][ T6508] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.178009][ T6508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.191942][ T6508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.343805][ T5238] Bluetooth: hci0: command tx timeout
[   90.449056][ T6508] hsr_slave_0: entered promiscuous mode
[   90.464051][ T6508] hsr_slave_1: entered promiscuous mode
[   90.992944][ T6631] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   91.075688][ T6508] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   91.085479][ T6508] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   91.096180][ T6508] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   91.117493][ T6508] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   91.188459][ T6642] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[   91.273861][ T6508] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.305650][ T6508] 8021q: adding VLAN 0 to HW filter on device team0
[   91.314674][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.317810][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.329350][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.332580][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.614368][ T6508] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.680426][ T6508] veth0_vlan: entered promiscuous mode
[   91.692188][ T6508] veth1_vlan: entered promiscuous mode
[   91.721986][ T6664] loop2: detected capacity change from 0 to 256
[   91.743863][ T6664] exfat: Deprecated parameter 'namecase'
[   91.747533][ T6508] veth0_macvtap: entered promiscuous mode
[   91.761361][ T6508] veth1_macvtap: entered promiscuous mode
[   91.767905][ T6664] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[   91.780685][ T6508] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.798581][ T6508] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.837351][ T5879] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.842847][ T5879] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.874931][ T5879] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.878929][ T5879] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.047575][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.050765][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.091146][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.096090][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.301875][ T6685] loop3: detected capacity change from 0 to 4096
[   92.335166][ T6685] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[   92.350960][ T6685] ntfs3(loop3): ino=1a, mi_enum_attr
[   92.354556][ T6685] ntfs3(loop3): ino=1a, mi_enum_attr
[   92.356378][ T6685] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[   92.422839][ T5238] Bluetooth: hci0: command tx timeout
[   92.812366][ T6701] netlink: 'syz.3.310': attribute type 11 has an invalid length.
[   93.631037][ T6709] loop3: detected capacity change from 0 to 2048
[   93.638847][ T6709] EXT4-fs: Ignoring removed nobh option
[   93.662166][ T6709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.710794][ T6508] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.084988][ T6725] loop3: detected capacity change from 0 to 32768
[   94.090763][ T6725] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.320 (6725)
[   94.101074][ T6729] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[   94.319006][ T6725] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   94.325182][ T6725] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[   94.414363][  T794] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   94.512900][ T5238] Bluetooth: hci0: command tx timeout
[   94.588964][ T6725] BTRFS info (device loop3): enabling ssd optimizations
[   94.591914][ T6725] BTRFS info (device loop3): enabling free space tree
[   94.602902][  T794] usb 3-1: Using ep0 maxpacket: 32
[   94.609532][  T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.614832][  T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.618963][  T794] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   94.630859][  T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.808893][  T794] usb 3-1: config 0 descriptor??
[   95.516863][ T5857] IPVS: starting estimator thread 0...
[   95.675309][ T6508] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   95.713380][ T6754] IPVS: using max 46 ests per chain, 110400 per kthread
[   95.742978][  T794] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[   95.926458][ T6763] [U] V3Fپ"W/4:XTZWTLW=
[   95.930394][ T6763] [U] J"E:"
[   95.935946][    T9] usb 3-1: USB disconnect, device number 7
[   95.984737][ T6766] syz.3.329 uses obsolete (PF_INET,SOCK_PACKET)
[   96.648599][ T6778] loop2: detected capacity change from 0 to 512
[   96.651807][ T6778] EXT4-fs: Ignoring removed i_version option
[   96.670741][ T6778] EXT4-fs: inline encryption not supported
[   96.693891][ T6778] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.333: bg 0: block 131: padding at end of block bitmap is not set
[   96.700679][ T6778] EXT4-fs (loop2): Remounting filesystem read-only
[   96.703721][ T6778] EXT4-fs (loop2): 1 truncate cleaned up
[   96.708037][ T6778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.738860][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.751204][ T6811] netlink: 256 bytes leftover after parsing attributes in process `syz.3.344'.
[   97.783540][ T6811] unsupported nlmsg_type 40
[   97.877103][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'.
[   97.880822][ T6813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.345'.
[   97.886742][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'.
[   97.890595][ T6813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.345'.
[   98.323447][ T6825] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   98.411805][ T6827] netlink: 'syz.0.352': attribute type 21 has an invalid length.
[   98.420990][ T6827] netlink: 144 bytes leftover after parsing attributes in process `syz.0.352'.
[   98.712820][    T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   98.862812][    T9] usb 4-1: Using ep0 maxpacket: 16
[   98.874670][    T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[   98.884288][    T9] usb 4-1: config 0 has no interface number 0
[   98.891971][    T9] usb 4-1: config 0 interface 2 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C
[   98.901289][    T9] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7
[   98.905453][    T9] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[   98.910721][    T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88
[   98.915816][    T9] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[   98.918629][    T9] usb 4-1: Product: syz
[   98.920203][    T9] usb 4-1: SerialNumber: syz
[   98.931211][    T9] usb 4-1: config 0 descriptor??
[   99.161147][    T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[   99.172204][    T9] usb 4-1: invalid MIDI out EP 0
[   99.225617][    T9] snd-usb-audio 4-1:0.2: probe with driver snd-usb-audio failed with error -22
[   99.234990][    T9] usb 4-1: USB disconnect, device number 2
[   99.256231][ T5922] udevd[5922]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   99.813566][ T6861] loop3: detected capacity change from 0 to 4096
[   99.910105][ T6872] loop2: detected capacity change from 0 to 128
[   99.939479][ T6872] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   99.958883][ T6872] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  100.044765][ T5856] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  100.051597][ T6878] loop3: detected capacity change from 0 to 4096
[  100.059755][ T6878] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  100.113588][ T6878] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  100.315665][ T6890] loop3: detected capacity change from 0 to 128
[  100.319437][ T6890] EXT4-fs: Ignoring removed nobh option
[  100.347401][ T6890] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  100.352620][ T6890] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.422824][    T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  100.440514][ T6508] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  100.576727][    T9] usb 3-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c
[  100.580663][    T9] usb 3-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3
[  100.591504][    T9] usb 3-1: Product: syz
[  100.593937][    T9] usb 3-1: Manufacturer: syz
[  100.596113][    T9] usb 3-1: SerialNumber: syz
[  100.613828][    T9] usb 3-1: config 0 descriptor??
[  101.203207][    T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  101.211845][    T9] asix 3-1:0.0: probe with driver asix failed with error -32
[  101.221561][    T9] usb 3-1: USB disconnect, device number 8
[  102.133043][ T5858] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  102.155964][ T5857] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  102.299353][ T5858] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  102.305717][ T5858] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  102.314691][ T5858] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  102.318390][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  102.321675][ T5858] usb 4-1: SerialNumber: syz
[  102.330596][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  102.335419][ T5857] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[  102.339161][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.351291][ T5858] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  102.356679][ T5857] usb 3-1: config 0 descriptor??
[  102.359273][ T5858] usb-storage 4-1:1.0: USB Mass Storage device detected
[  102.359465][ T6935] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  102.378248][ T5858] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  102.388320][ T5858] scsi host6: usb-storage 4-1:1.0
[  102.799546][ T5857] ryos 0003:1E7D:3138.0004: unknown main item tag 0x0
[  102.809395][ T5857] ryos 0003:1E7D:3138.0004: unknown main item tag 0x1
[  102.818092][ T5857] ryos 0003:1E7D:3138.0004: unknown main item tag 0x0
[  102.826703][ T5857] ryos 0003:1E7D:3138.0004: hidraw0: USB HID v1.01 Device [HID 1e7d:3138] on usb-dummy_hcd.2-1/input0
[  102.996631][ T5857] usb 3-1: USB disconnect, device number 9
[  103.670909][    T9] usb 4-1: USB disconnect, device number 3
[  103.882773][   T10] usb 3-1: new low-speed USB device number 10 using dummy_hcd
[  104.045108][   T10] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  104.049921][   T10] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  104.056700][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[  104.059669][   T10] usb 3-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[  104.063872][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.073058][   T10] usb 3-1: config 0 descriptor??
[  104.075657][ T6964] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  104.771684][   T10] holtek_mouse 0003:04D9:A067.0005: unknown main item tag 0x0
[  104.777801][   T10] holtek_mouse 0003:04D9:A067.0005: unknown main item tag 0x0
[  104.780647][   T10] holtek_mouse 0003:04D9:A067.0005: unknown main item tag 0x0
[  104.783840][   T10] holtek_mouse 0003:04D9:A067.0005: unknown main item tag 0x0
[  104.786925][   T10] holtek_mouse 0003:04D9:A067.0005: unknown main item tag 0x0
[  104.789557][   T10] holtek_mouse 0003:04D9:A067.0005: unknown main item tag 0x0
[  104.792276][   T10] holtek_mouse 0003:04D9:A067.0005: unknown main item tag 0x0
[  104.799705][   T10] holtek_mouse 0003:04D9:A067.0005: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.2-1/input0
[  104.800226][ T6972] netlink: 76 bytes leftover after parsing attributes in process `syz.0.399'.
[  104.886907][ T5858] usb 3-1: USB disconnect, device number 10
[  105.365785][   T33] audit: type=1800 audit(1756996201.698:5): pid=6984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.404" name="/" dev="tmpfs" ino=1064 res=0 errno=0
[  105.567085][ T6989] loop3: detected capacity change from 0 to 32768
[  105.590437][  T116] read_mapping_page failed!
[  105.592491][  T116] read_mapping_page failed!
[  105.754658][ T5857] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  105.909904][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.915754][ T5857] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  105.920344][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.934477][ T5857] usb 3-1: config 0 descriptor??
[  106.354254][ T5857] lenovo 0003:17EF:6047.0006: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0
[  106.363437][   T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  106.512779][   T10] usb 4-1: Using ep0 maxpacket: 32
[  106.516578][   T10] usb 4-1: config 2 has an invalid interface number: 45 but max is 0
[  106.520042][   T10] usb 4-1: config 2 has no interface number 0
[  106.524412][   T10] usb 4-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  106.529042][   T10] usb 4-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  106.536643][   T10] usb 4-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92
[  106.540526][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.546043][   T10] usb 4-1: Product: syz
[  106.547871][   T10] usb 4-1: Manufacturer: syz
[  106.549761][   T10] usb 4-1: SerialNumber: syz
[  106.558461][ T5857] lenovo 0003:17EF:6047.0006: Failed to switch F7/9/11 mode: -71
[  106.564535][   T10] kobil_sct 4-1:2.45: KOBIL USB smart card terminal converter detected
[  106.569646][ T5857] lenovo 0003:17EF:6047.0006: Failed to switch middle button: -71
[  106.574491][   T10] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  106.574672][ T5857] lenovo 0003:17EF:6047.0006: Fn-lock setting failed: -71
[  106.581768][ T5857] lenovo 0003:17EF:6047.0006: Sensitivity setting failed: -71
[  106.591516][ T5857] usb 3-1: USB disconnect, device number 11
[  106.776040][   T10] usb 4-1: USB disconnect, device number 4
[  106.784425][   T10] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  106.788902][   T10] kobil_sct 4-1:2.45: device disconnected
[  107.624556][   T10] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  107.797851][   T10] usb 3-1: config 54 has an invalid interface number: 154 but max is 0
[  107.801510][   T10] usb 3-1: config 54 has no interface number 0
[  107.807277][   T10] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec
[  107.811239][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.814872][   T10] usb 3-1: Product: syz
[  107.816849][   T10] usb 3-1: Manufacturer: syz
[  107.818916][   T10] usb 3-1: SerialNumber: syz
[  108.049826][   T10] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  108.055514][ T5879] usb 3-1: Failed to submit usb control message: -71
[  108.065204][ T5879] usb 3-1: unable to send the bmi data to the device: -71
[  108.068299][ T5879] usb 3-1: unable to get target info from device
[  108.070511][ T5879] usb 3-1: could not get target info (-71)
[  108.072427][   T10] usb 3-1: USB disconnect, device number 12
[  108.073236][ T5879] usb 3-1: could not probe fw (-71)
[  108.471884][ T7090] loop3: detected capacity change from 0 to 128
[  108.494883][ T7090] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  108.501199][ T7090] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  108.514754][   T33] audit: type=1800 audit(1756996204.848:6): pid=7090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.452" name="file1" dev="loop3" ino=104 res=0 errno=0
[  108.601063][ T7096] loop2: detected capacity change from 0 to 512
[  108.632548][ T7096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.638639][ T7096] ext4 filesystem being mounted at /120/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  108.670319][ T7096] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 18: comm syz.2.455: lblock 23 mapped to illegal pblock 18 (length 1)
[  108.683008][ T7096] EXT4-fs (loop2): Remounting filesystem read-only
[  108.726776][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.016435][ T7132] netlink: 'syz.2.469': attribute type 9 has an invalid length.
[  109.018855][ T7130] loop3: detected capacity change from 0 to 1024
[  109.019415][ T7132] netlink: 200108 bytes leftover after parsing attributes in process `syz.2.469'.
[  109.025135][ T7130] hfsplus: inconsistency in B*Tree (-1,0,1,1,0)
[  109.027636][ T7130] hfsplus: failed to load root directory
[  109.047659][ T7132] openvswitch: netlink: Message has 5 unknown bytes.
[  109.197147][ T7142] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  109.200251][ T7142] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  109.325574][ T7151] loop2: detected capacity change from 0 to 4096
[  109.490017][ T7158] loop2: detected capacity change from 0 to 4096
[  109.497667][ T7158] ntfs3(loop2): It is recommened to use chkdsk.
[  109.501087][ T7158] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00
[  109.504829][ T7158] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00
[  109.507884][ T7158] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00
[  109.510977][ T7158] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00
[  109.514242][ T7158] ntfs3(loop2): try to read out of volume at offset 0x3fffffc1c00
[  109.519448][ T7158] ntfs3(loop2): try to read out of volume at offset 0x3fffffc2c00
[  109.522771][ T7158] ntfs3(loop2): try to read out of volume at offset 0x3fffffc4c00
[  109.525935][ T7158] ntfs3(loop2): try to read out of volume at offset 0x3fffffc8c00
[  109.528700][ T7158] ntfs3(loop2): try to read out of volume at offset 0x3fffffd0c00
[  109.533180][ T5913] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  109.693175][ T5913] usb 4-1: Using ep0 maxpacket: 8
[  109.693992][   T56] block nbd0: Receive control failed (result -32)
[  109.699536][ T5913] usb 4-1: config 0 has an invalid interface number: 78 but max is 0
[  109.705174][ T5913] usb 4-1: config 0 has no interface number 0
[  109.710350][ T5913] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=f0.21
[  109.719024][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.728740][ T5913] usb 4-1: Product: syz
[  109.733468][ T5913] usb 4-1: Manufacturer: syz
[  109.736422][ T5913] usb 4-1: SerialNumber: syz
[  109.744606][ T5913] usb 4-1: config 0 descriptor??
[  109.797303][ T7167] 9pnet_fd: Insufficient options for proto=fd
[  109.819928][ T7168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.486'.
[  109.844261][ T7168] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.868233][ T7168] bond0: (slave rose0): Enslaving as an active interface with an up link
[  109.964219][ T5913] usbhid 4-1:0.78: couldn't find an input interrupt endpoint
[  109.974877][ T5913] usb 4-1: USB disconnect, device number 5
[  110.551342][ T7199] sctp: [Deprecated]: syz.3.494 (pid 7199) Use of int in maxseg socket option.
[  110.551342][ T7199] Use struct sctp_assoc_value instead
[  110.654573][ T7205] netlink: 6 bytes leftover after parsing attributes in process `syz.2.497'.
[  110.659316][ T7205] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  110.833004][ T5857] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  110.985312][ T5857] usb 4-1: Using ep0 maxpacket: 8
[  110.988747][ T5857] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 17
[  110.996552][ T5857] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07
[  111.000560][ T5857] usb 4-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60
[  111.004413][ T5857] usb 4-1: Product: syz
[  111.006509][ T5857] usb 4-1: Manufacturer: syz
[  111.008555][ T5857] usb 4-1: SerialNumber: syz
[  111.016670][ T5857] usb 4-1: config 0 descriptor??
[  111.052973][ T5858] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  111.225452][ T5857] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  111.229646][ T5858] usb 3-1: config 1 has an invalid interface number: 7 but max is 0
[  111.233191][ T5858] usb 3-1: config 1 has no interface number 0
[  111.236268][ T5858] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  111.240922][ T5858] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 65
[  111.245585][ T5858] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  111.254110][ T5858] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  111.257985][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.261393][ T5858] usb 3-1: Product: syz
[  111.263811][ T5858] usb 3-1: Manufacturer: syz
[  111.265917][ T5858] usb 3-1: SerialNumber: syz
[  111.275737][ T7211] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  111.485086][ T5858] usb 3-1: Error in usbnet_get_endpoints (-71)
[  111.500107][ T5858] usb 3-1: USB disconnect, device number 13
[  111.789535][ T7222] netlink: 5 bytes leftover after parsing attributes in process `syz.0.505'.
[  112.237492][ T7229] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  112.240543][ T7229] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  112.252161][ T7229] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  112.258260][ T7229] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  112.261279][ T7229] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  112.268450][ T7229] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  112.280752][ T7229] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  112.284028][ T7229] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  112.288673][ T7229] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  112.433218][ T5857] gspca_sunplus: reg_w_riv err -71
[  112.437911][ T5857] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  112.451119][ T5857] usb 4-1: USB disconnect, device number 6
[  112.597996][ T7257] loop2: detected capacity change from 0 to 64
[  112.616188][ T7257] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  112.705731][ T7263] netlink: 'syz.0.525': attribute type 33 has an invalid length.
[  112.709712][ T7263] netlink: 152 bytes leftover after parsing attributes in process `syz.0.525'.
[  112.721353][ T7263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.525'.
[  112.843165][ T7269] loop2: detected capacity change from 0 to 512
[  112.855902][ T7269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  112.885574][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.915903][ T7274] netlink: 24 bytes leftover after parsing attributes in process `syz.0.530'.
[  113.349378][ T7298] Driver unsupported XDP return value 0 on prog  (id 48) dev N/A, expect packet loss!
[  113.584562][ T7307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.544'.
[  114.050624][ T7322] netlink: 'syz.2.551': attribute type 27 has an invalid length.
[  114.112169][ T7322] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.115416][ T7322] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.182862][ T5238] Bluetooth: hci1: command 0x0c1a tx timeout
[  114.189972][ T7322] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.197032][ T7322] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.263477][ T5238] Bluetooth: hci2: command 0x0c1a tx timeout
[  114.338127][ T7323] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.341941][ T7323] 8021q: adding VLAN 0 to HW filter on device team0
[  114.347056][ T5238] Bluetooth: hci0: command 0x0405 tx timeout
[  114.355669][ T7323] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  114.368984][ T5879] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.375280][ T5879] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.379340][ T5879] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.385857][ T5879] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.445292][ T7330] netlink: 'syz.0.554': attribute type 27 has an invalid length.
[  114.513343][ T7334] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component
[  114.729508][ T7348] netlink: 'syz.0.562': attribute type 12 has an invalid length.
[  114.732088][ T7348] netlink: 'syz.0.562': attribute type 29 has an invalid length.
[  114.736159][ T7348] netlink: 148 bytes leftover after parsing attributes in process `syz.0.562'.
[  114.740497][ T7348] netlink: 'syz.0.562': attribute type 1 has an invalid length.
[  114.745765][ T7348] netlink: 'syz.0.562': attribute type 2 has an invalid length.
[  114.749100][ T7348] netlink: 39 bytes leftover after parsing attributes in process `syz.0.562'.
[  115.090960][ T7363] loop2: detected capacity change from 0 to 1024
[  115.129324][ T4428] hfsplus: b-tree write err: -5, ino 4
[  115.224798][ T7367] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  115.287781][ T7369] bond1: entered promiscuous mode
[  115.289879][ T7369] bond1: entered allmulticast mode
[  115.295337][ T7369] 8021q: adding VLAN 0 to HW filter on device bond1
[  115.348063][ T7372] netlink: 'syz.2.573': attribute type 1 has an invalid length.
[  115.351302][ T7372] netlink: 56 bytes leftover after parsing attributes in process `syz.2.573'.
[  115.429757][ T5238] Bluetooth: hci2: unexpected event for opcode 0x0419
[  115.468649][ T7378] loop2: detected capacity change from 0 to 164
[  115.487323][ T7378] ISOFS: unable to read i-node block
[  115.490100][ T7378] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  115.827070][ T7398] netlink: 'syz.0.586': attribute type 2 has an invalid length.
[  115.831642][ T7398] netlink: 'syz.0.586': attribute type 1 has an invalid length.
[  115.835182][ T5858] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  115.983089][ T5858] usb 3-1: Using ep0 maxpacket: 16
[  115.991326][ T5858] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.996114][ T5858] usb 3-1: config 0 interface 0 has no altsetting 0
[  115.998877][ T5858] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  116.002556][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.004330][ T7407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.590'.
[  116.009378][ T5858] usb 3-1: config 0 descriptor??
[  116.262915][ T5238] Bluetooth: hci1: command 0x0c1a tx timeout
[  116.406166][ T7411] netlink: 52 bytes leftover after parsing attributes in process `syz.0.592'.
[  116.422987][ T5238] Bluetooth: hci0: command 0x0405 tx timeout
[  116.431469][ T5858] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0
[  116.839419][ T5858] usb 3-1: USB disconnect, device number 14
[  117.035925][ T7434] loop3: detected capacity change from 0 to 32768
[  117.146305][ T7434] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=ask,norecovery,nojournal_transaction_names
[  117.146323][ T7434]   allowing incompatible features above 0.0: (unknown version)
[  117.146331][ T7434]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  117.164088][ T7434] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  117.167861][ T7434] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  117.171193][ T7434] bcachefs (loop3): superblock requires following recovery passes to be run:
[  117.171193][ T7434]   delete_dead_inodes,fix_reflink_p
[  117.177331][ T7434] bcachefs (loop3): Version upgrade required:
[  117.177331][ T7434] Version upgrade from 0.8: (unknown version) to 1.7: mi_btree_bitmap incomplete
[  117.177331][ T7434] Doing incompatible version upgrade from 0.8: (unknown version) to 1.28: inode_has_case_insensitive
[  117.177331][ T7434]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  117.220292][ T7434] bcachefs (loop3): invalid bkey in btree_node btree=alloc level=0: u64s 29 type deleted 1:256:65536 len 0 ver 0: 
[  117.220329][ T7434]   nonzero snapshot, deleting
[  117.234252][ T7434] bcachefs (loop3): btree node read error at btree freespace level 0/0
[  117.234280][ T7434]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0
[  117.234286][ T7434]   loop3 node offset 0/32 bset u64s 0: invalid bkey format: field 4 too large: 0 + 4294967296 > 4294967295
[  117.234291][ T7434]   u64s 3 fields 64:0, 64:0, 32:0, 0:0, 0:4294967296, 0:0
[  117.234294][ T7434]   loop3 btree validate error
[  117.234298][ T7434]   flagging btree freespace lost data
[  117.234301][ T7434]   running recovery pass check_topology (2), currently at recovery_pass_empty (0)
[  117.234305][ T7434]   ret btree_node_read_err_bad_node
[  117.262194][ T7434] bcachefs (loop3): error reading btree root btree=freespace level=0: btree_node_read_error, fixing
[  117.269846][ T7434] bcachefs (loop3): check_topology... done
[  117.273245][ T7434] bcachefs (loop3): accounting_read... done
[  117.287496][ T7434] bcachefs (loop3): alloc_read... done
[  117.290163][ T7434] bcachefs (loop3): snapshots_read... done
[  117.293349][ T7434] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean
[  117.297563][ T7434] bcachefs (loop3): done starting filesystem
[  117.355271][ T6508] bcachefs (loop3): shutting down
[  117.400853][ T6508] bcachefs (loop3): shutdown complete
[  117.889358][ T7456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.610'.
[  117.895126][ T7456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.610'.
[  118.041330][ T7460] loop2: detected capacity change from 0 to 1024
[  118.134614][ T7462] capability: warning: `syz.2.613' uses deprecated v2 capabilities in a way that may be insecure
[  118.352843][ T5238] Bluetooth: hci1: command 0x0c1a tx timeout
[  118.513695][ T5238] Bluetooth: hci0: command 0x0405 tx timeout
[  118.639627][ T7469] bond0: entered promiscuous mode
[  118.641760][ T7469] bond_slave_0: entered promiscuous mode
[  118.644440][ T7469] bond_slave_1: entered promiscuous mode
[  118.647318][ T7469] bond0: left allmulticast mode
[  118.649073][ T7469] bond_slave_0: left allmulticast mode
[  118.651379][ T7469] bond_slave_1: left allmulticast mode
[  118.790065][ T7474] loop3: detected capacity change from 0 to 8
[  118.804689][ T7474] SQUASHFS error: xz decompression failed, data probably corrupt
[  118.808242][ T7474] SQUASHFS error: Failed to read block 0x108: -5
[  118.811350][ T7474] SQUASHFS error: Unable to read metadata cache entry [106]
[  118.814960][ T7474] SQUASHFS error: Unable to read inode 0x11f
[  119.116847][ T7479] loop3: detected capacity change from 0 to 32768
[  119.121100][ T7479] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.619 (7479)
[  119.132094][ T7479] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  119.136487][ T7479] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  119.168155][ T7479] BTRFS info (device loop3): enabling ssd optimizations
[  119.171190][ T7479] BTRFS info (device loop3): enabling free space tree
[  119.220127][ T6508] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  119.429653][ T7503] loop2: detected capacity change from 0 to 512
[  119.437200][ T7503] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  119.464488][ T7503] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  119.472199][ T7503] EXT4-fs (loop2): 1 truncate cleaned up
[  119.476590][ T7503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.486454][ T7503] Bluetooth: MGMT ver 1.23
[  119.506070][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.672948][   T47] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  119.752263][ T7523] netlink: 256 bytes leftover after parsing attributes in process `syz.2.631'.
[  119.822995][   T47] usb 4-1: Using ep0 maxpacket: 32
[  119.827482][   T47] usb 4-1: config 4 has an invalid interface number: 10 but max is 0
[  119.837543][   T47] usb 4-1: config 4 has no interface number 0
[  119.840570][   T47] usb 4-1: config 4 interface 10 has no altsetting 0
[  119.856569][   T47] usb 4-1: New USB device found, idVendor=0979, idProduct=0280, bcdDevice=98.4c
[  119.860039][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.864004][   T47] usb 4-1: Product: syz
[  119.872995][   T47] usb 4-1: Manufacturer: syz
[  119.878540][   T47] usb 4-1: SerialNumber: syz
[  120.092166][   T47] gspca_main: jeilinj-2.14.0 probing 0979:0280
[  120.102162][   T47] usb 4-1: USB disconnect, device number 7
[  120.202720][   T10] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  120.354804][   T10] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  120.359165][   T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  120.363923][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  120.367915][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  120.371725][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  120.380766][   T10] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  120.384587][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.388460][   T10] usb 3-1: Product: syz
[  120.390281][   T10] usb 3-1: Manufacturer: syz
[  120.392332][   T10] usb 3-1: SerialNumber: syz
[  120.396710][   T10] usb 3-1: config 0 descriptor??
[  120.404575][   T10] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7
[  120.619588][   T10] usb 3-1: USB disconnect, device number 15
[  120.707317][ T7542] input: syz0 as /devices/virtual/input/input8
[  120.812251][ T7546] mmap: syz.3.642 (7546) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  121.250906][ T7559] loop2: detected capacity change from 0 to 4096
[  121.330912][   T53] ntfs3(loop2): ino=5, mi_enum_attr
[  121.332823][ T5913] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  121.492793][ T5913] usb 4-1: Using ep0 maxpacket: 8
[  121.505834][ T5913] usb 4-1: config 2 has an invalid interface number: 241 but max is 0
[  121.509192][ T5913] usb 4-1: config 2 has no interface number 0
[  121.511742][ T5913] usb 4-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  121.520358][ T5913] usb 4-1: config 2 interface 241 has no altsetting 0
[  121.539298][ T5913] usb 4-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3
[  121.544944][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.548157][ T5913] usb 4-1: Product: syz
[  121.550024][ T5913] usb 4-1: Manufacturer: syz
[  121.552045][ T5913] usb 4-1: SerialNumber: syz
[  121.566464][ T5913] ti_usb_3410_5052 4-1:2.241: TI USB 3410 1 port adapter converter detected
[  121.569419][ T5913] ti_usb_3410_5052 4-1:2.241: missing endpoints
[  121.768195][   T10] usb 4-1: USB disconnect, device number 8
[  122.607566][ T7619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.672'.
[  122.734392][ T7623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.674'.
[  122.756865][ T7623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.674'.
[  122.772090][ T7623] netlink: 'syz.0.674': attribute type 5 has an invalid length.
[  122.806537][ T7625] pim6reg: entered allmulticast mode
[  122.905660][ T7630] netlink: 168 bytes leftover after parsing attributes in process `syz.3.677'.
[  123.378158][ T7638] Invalid ELF header magic: != ELF
[  123.524998][   T33] audit: type=1326 audit(1756996219.858:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7641 comm="syz.0.683" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7fd618ebe9 code=0x0
[  123.942915][ T5852] Bluetooth: hci3: command 0x1003 tx timeout
[  123.945494][ T5238] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  124.209855][ T7650] overlayfs: failed to clone upperpath
[  124.580152][ T7660] warning: `syz.0.692' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  125.080010][ T7682] batadv_slave_1: entered promiscuous mode
[  125.083706][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'.
[  125.228017][ T7682] loop2: detected capacity change from 0 to 4096
[  125.231911][ T7682] ntfs3: Unknown parameter 'R41>]H[(~9 .QNŭ!gמ+'
[  125.654811][ T7688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.704'.
[  125.937922][ T7708] 9pnet: p9_errstr2errno: server reported unknown error @cF	S+
[  126.248661][ T7721] loop2: detected capacity change from 0 to 2048
[  126.259470][ T7721] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  127.182423][ T7733] netlink: 68 bytes leftover after parsing attributes in process `syz.0.724'.
[  127.182724][  T794] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  127.213874][ T7735] loop3: detected capacity change from 0 to 128
[  127.352851][  T794] usb 3-1: Using ep0 maxpacket: 8
[  127.366484][  T794] usb 3-1: unable to get BOS descriptor or descriptor too short
[  127.371715][  T794] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd
[  127.381576][  T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.387189][  T794] usb 3-1: Product: syz
[  127.388902][  T794] usb 3-1: Manufacturer: syz
[  127.390973][  T794] usb 3-1: SerialNumber: syz
[  127.606252][  T794] kalmia 3-1:1.0: probe with driver kalmia failed with error -22
[  127.617374][  T794] usb 3-1: USB disconnect, device number 16
[  128.044454][   T33] audit: type=1326 audit(1756996224.378:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.3.735" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7ec3585ba7 code=0x7ffc0000
[  128.056895][   T33] audit: type=1326 audit(1756996224.378:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.3.735" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7ec352adb9 code=0x7ffc0000
[  128.058517][ T5298] udevd[5298]: worker [5957] terminated by signal 33 (Unknown signal 33)
[  128.066135][   T33] audit: type=1326 audit(1756996224.378:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.3.735" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec358ebe9 code=0x7ffc0000
[  128.078968][   T33] audit: type=1326 audit(1756996224.378:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.3.735" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7ec3585ba7 code=0x7ffc0000
[  128.084282][ T5298] udevd[5298]: worker [5957] failed while handling '/devices/virtual/block/loop3'
[  128.091598][   T33] audit: type=1326 audit(1756996224.378:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.3.735" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7ec352adb9 code=0x7ffc0000
[  128.091630][   T33] audit: type=1326 audit(1756996224.378:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.3.735" exe="/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f7ec358ebe9 code=0x7ffc0000
[  128.129928][   T33] audit: type=1326 audit(1756996224.378:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.3.735" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7ec3585ba7 code=0x7ffc0000
[  128.144161][   T33] audit: type=1326 audit(1756996224.388:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.3.735" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7ec352adb9 code=0x7ffc0000
[  128.157878][   T33] audit: type=1326 audit(1756996224.388:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.3.735" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec358ebe9 code=0x7ffc0000
[  128.956373][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.754'.
[  128.960309][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.754'.
[  128.965280][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.754'.
[  129.935453][ T7841] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  129.981685][ T7841] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  130.902173][ T7868] netlink: 104 bytes leftover after parsing attributes in process `syz.2.784'.
[  131.403727][ T5858] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  131.572975][ T5858] usb 3-1: Using ep0 maxpacket: 16
[  131.580213][ T5858] usb 3-1: config 75 has an invalid interface number: 136 but max is 0
[  131.584962][ T5858] usb 3-1: config 75 has no interface number 0
[  131.596841][ T5858] usb 3-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=bc.ca
[  131.600707][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.606785][ T5858] usb 3-1: Product: syz
[  131.608618][ T5858] usb 3-1: Manufacturer: syz
[  131.610641][ T5858] usb 3-1: SerialNumber: syz
[  131.835049][ T5858] ftdi_sio 3-1:75.136: FTDI USB Serial Device converter detected
[  131.840206][ T5858] ftdi_sio ttyUSB0: unknown device type: 0xbcca
[  131.861090][ T5858] usb 3-1: USB disconnect, device number 17
[  131.865120][ T5858] ftdi_sio 3-1:75.136: device disconnected
[  132.586407][ T1363] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  132.597971][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.602520][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  133.327193][ T7976] netlink: 16 bytes leftover after parsing attributes in process `syz.2.829'.
[  133.399527][ T5238] Bluetooth: hci2: unknown advertising packet type: 0xf1
[  133.452358][ T7980] loop2: detected capacity change from 0 to 64
[  133.619112][ T7983] overlayfs: failed to verify upper root origin
[  134.810037][ T8012] loop2: detected capacity change from 0 to 4096
[  134.846721][ T8012] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  134.876211][ T6845] udevd[6845]: incorrect nilfs2 checksum on /dev/loop2
[  134.896798][ T8012] NILFS (loop2): mounting unchecked fs
[  134.906266][ T6845] udevd[6845]: incorrect nilfs2 checksum on /dev/loop2
[  134.918937][ T8012] NILFS (loop2): recovery complete
[  134.937345][ T8013] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  135.170569][ T8015] netlink: 'syz.2.844': attribute type 1 has an invalid length.
[  135.589285][ T8039] netlink: 'syz.0.856': attribute type 3 has an invalid length.
[  135.712167][ T8033] loop2: detected capacity change from 0 to 32768
[  135.717399][ T8033] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.853 (8033)
[  135.729857][ T8033] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  135.734130][ T8033] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  135.800882][ T8033] BTRFS info (device loop2): enabling ssd optimizations
[  135.806108][ T8033] BTRFS info (device loop2): enabling free space tree
[  135.854391][ T5856] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  136.000939][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.863'.
[  136.008680][ T8069] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  136.012593][ T8069] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[  136.322906][ T5913] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  136.503127][ T5913] usb 3-1: Using ep0 maxpacket: 8
[  136.519704][ T5913] usb 3-1: unable to get BOS descriptor or descriptor too short
[  136.528358][ T5913] usb 3-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 255
[  136.532520][ T5913] usb 3-1: config 8 interface 0 has no altsetting 0
[  136.554386][ T5913] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[  136.558220][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.561583][ T5913] usb 3-1: Product: syz
[  136.573128][ T5913] usb 3-1: Manufacturer: syz
[  136.575079][ T5913] usb 3-1: SerialNumber: syz
[  136.585530][ T8073] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  136.819528][ T5913] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  136.822415][ T5913] usb 3-1: selecting invalid altsetting 0
[  136.863064][ T5913] usb 3-1: USB disconnect, device number 18
[  136.925804][ T5922] udevd[5922]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  137.349472][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.872'.
[  137.772839][ T5858] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  137.924506][ T5858] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  137.929416][ T5858] usb 3-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  137.937199][ T5858] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  137.941157][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  137.947478][ T5858] usb 3-1: SerialNumber: syz
[  138.179213][ T5858] usb 3-1: USB disconnect, device number 19
[  138.331116][   T33] kauditd_printk_skb: 2 callbacks suppressed
[  138.331130][   T33] audit: type=1326 audit(1756996234.658:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8114 comm="syz.3.885" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec358ebe9 code=0x7ffc0000
[  138.348362][   T33] audit: type=1326 audit(1756996234.658:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8114 comm="syz.3.885" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec358ebe9 code=0x7ffc0000
[  138.358098][   T33] audit: type=1326 audit(1756996234.678:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8114 comm="syz.3.885" exe="/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f7ec358ebe9 code=0x7ffc0000
[  138.373157][   T33] audit: type=1326 audit(1756996234.678:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8114 comm="syz.3.885" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec358ebe9 code=0x7ffc0000
[  138.384156][   T33] audit: type=1326 audit(1756996234.678:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8114 comm="syz.3.885" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec358ebe9 code=0x7ffc0000
[  138.396610][   T33] audit: type=1326 audit(1756996234.678:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8114 comm="syz.3.885" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ec358ebe9 code=0x7ffc0000
[  138.406945][   T33] audit: type=1326 audit(1756996234.678:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8114 comm="syz.3.885" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec358ebe9 code=0x7ffc0000
[  138.418290][   T33] audit: type=1326 audit(1756996234.678:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8114 comm="syz.3.885" exe="/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f7ec358ebe9 code=0x7ffc0000
[  138.429973][   T33] audit: type=1326 audit(1756996234.678:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8114 comm="syz.3.885" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec358ebe9 code=0x7ffc0000
[  138.440229][   T33] audit: type=1326 audit(1756996234.678:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8114 comm="syz.3.885" exe="/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f7ec358ebe9 code=0x7ffc0000
[  138.699000][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.896'.
[  138.889146][ T8153] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.957823][ T8158] loop2: detected capacity change from 0 to 1024
[  141.365898][ T5857] IPVS: starting estimator thread 0...
[  141.382530][ T8207] loop2: detected capacity change from 0 to 32768
[  141.397046][ T8207] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.925 (8207)
[  141.415896][ T8207] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  141.419701][ T8207] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  141.467943][ T8217] IPVS: using max 49 ests per chain, 117600 per kthread
[  141.502390][ T8207] BTRFS info (device loop2): enabling ssd optimizations
[  141.522800][ T8207] BTRFS info (device loop2): enabling free space tree
[  141.620748][ T5856] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  142.055639][ T8258] trusted_key: syz.2.940 sent an empty control message without MSG_MORE.
[  142.089124][ T8262] trusted_key: encrypted_key: master key parameter 'C' is invalid
[  142.694503][  T794] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  142.854335][  T794] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  142.858370][  T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.874601][  T794] usb 3-1: config 0 descriptor??
[  142.884207][  T794] cp210x 3-1:0.0: cp210x converter detected
[  143.287203][  T794] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  143.294534][ T8289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  143.298473][ T8289] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  143.317446][  T794] usb 3-1: cp210x converter now attached to ttyUSB0
[  143.512058][ T5858] usb 3-1: USB disconnect, device number 20
[  143.522510][ T5858] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  143.537616][ T5858] cp210x 3-1:0.0: device disconnected
[  143.708459][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.981'.
[  143.757722][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  143.757734][   T33] audit: type=1326 audit(1756996240.088:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8346 comm="syz.3.983" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ec358ebe9 code=0x0
[  144.099865][ T8376] netlink: 209588 bytes leftover after parsing attributes in process `syz.3.998'.
[  144.330766][ T8393] capability: warning: `syz.0.1005' uses 32-bit capabilities (legacy support in use)
[  144.763519][ T8422] IPv6: NLM_F_CREATE should be specified when creating new route
[  146.262933][  T794] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  146.429828][  T794] usb 3-1: unable to get BOS descriptor set
[  146.432263][  T794] usb 3-1: not running at top speed; connect to a high speed hub
[  146.453032][  T794] usb 3-1: config 1 interface 0 has no altsetting 0
[  146.458845][  T794] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  146.461667][  T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.472957][  T794] usb 3-1: Product: syz
[  146.475342][  T794] usb 3-1: Manufacturer: syz
[  146.477776][  T794] usb 3-1: SerialNumber: syz
[  146.720131][  T794] usb 3-1: USB disconnect, device number 21
[  146.898579][ T8488] U9: renamed from lo (while UP)
[  147.057318][ T8502] tipc: Started in network mode
[  147.059238][ T8502] tipc: Node identity aaaaaaaaaa34, cluster identity 4711
[  147.061667][ T8502] tipc: Enabled bearer <eth:macvlan0>, priority 10
[  148.175062][  T794] tipc: Node number set to 10398378
[  149.898264][ T8601] netlink: 495 bytes leftover after parsing attributes in process `syz.3.1103'.
[  149.948418][ T8605] fuse: Bad value for 'fd'
[  150.647461][ T8636] tmpfs: Bad value for 'mpol'
[  150.993100][   T33] audit: type=1326 audit(1756996465.325:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8653 comm="syz.3.1128" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7ec358ebe9 code=0x0
[  152.111416][ T8676] PKCS8: Unsupported PKCS#8 version
[  152.567919][ T8682] loop2: detected capacity change from 0 to 256
[  152.571701][ T8682] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  152.956101][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880398b7400: rx timeout, send abort
[  152.961393][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880398b4800: rx timeout, send abort
[  152.967436][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880398b7400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  152.974688][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880398b4800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  153.207010][ T8709] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1152'.
[  153.210152][ T8709] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1152'.
[  153.215028][ T8709] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1152'.
[  153.259103][ T8712] netlink: 'syz.3.1153': attribute type 29 has an invalid length.
[  153.826070][ T8737] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  153.919560][ T8739] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.1166'.
[  154.627798][ T8767] overlayfs: failed to clone upperpath
[  154.819878][ T8775] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1182'.
[  155.198402][ T5238] Bluetooth: hci0: unexpected event for opcode 0x040d
[  155.819197][ T8813] loop2: detected capacity change from 0 to 128
[  155.835720][ T8813] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  155.840894][ T8813] ext4 filesystem being mounted at /315/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  155.878263][ T5856] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  155.973491][ T8819] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long
[  156.212795][ T8837] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (15)
[  156.524350][   T33] audit: type=1326 audit(1756996470.804:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.2.1218" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafb138ebe9 code=0x0
[  157.509664][ T8879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1231'.
[  157.589924][ T8883] tipc: Started in network mode
[  157.592946][ T8883] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[  157.596484][ T8883] tipc: Enabled bearer <eth:vlan0>, priority 10
[  157.779916][ T8893] loop2: detected capacity change from 0 to 8
[  158.061414][ T8909] netlink: 'syz.2.1246': attribute type 10 has an invalid length.
[  158.066523][ T8909] team0: Device hsr_slave_0 failed to register rx_handler
[  158.724928][ T5913] tipc: Node number set to 10005162
[  158.882386][ T8948] loop2: detected capacity change from 0 to 1024
[  158.897454][   T33] audit: type=1800 audit(1756996473.234:33): pid=8948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1263" name="file1" dev="loop2" ino=20 res=0 errno=0
[  158.936900][ T1092] hfsplus: b-tree write err: -5, ino 4
[  159.605345][ T8994] netlink: 'syz.0.1284': attribute type 30 has an invalid length.
[  159.837989][ T9011] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1290'.
[  159.843177][ T9008] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1290'.
[  159.848972][ T9011] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1290'.
[  159.875305][ T9013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  159.975440][ T9022] raw_sendmsg: syz.0.1298 forgot to set AF_INET. Fix it!
[  160.723276][  T794] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  160.877368][  T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  160.880967][  T794] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  160.884585][  T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  160.891645][  T794] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[  160.894875][  T794] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[  160.898197][  T794] usb 3-1: Manufacturer: syz
[  160.901710][  T794] usb 3-1: config 0 descriptor??
[  160.912990][  T794] smsusb:smsusb_probe: board id=9, interface number 0
[  160.917449][  T794] smsusb:smsusb_probe: Device initialized with return code -19
[  161.126953][ T5858] usb 3-1: USB disconnect, device number 22
[  161.147459][ T9055] overlayfs: failed to resolve './file0': -2
[  161.262251][ T5238] Bluetooth: hci1: unexpected subevent 0x0e length: 30 > 15
[  161.266466][ T5238] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:20 sid 0x00
[  161.642266][ T9059] IPv6: Can't replace route, no match found
[  162.453830][ T9089] loop2: detected capacity change from 0 to 32768
[  162.463328][ T9095] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  162.540660][ T9089] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  162.540679][ T9089]   allowing incompatible features above 0.0: (unknown version)
[  162.540686][ T9089]   features: lz4
[  162.559680][ T9089] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  162.565593][ T9089] bcachefs (loop2): initializing new filesystem
[  162.571908][ T9089] bcachefs (loop2): going read-write
[  162.589652][ T9089] bcachefs (loop2): marking superblocks
[  162.629371][ T9089] bcachefs (loop2): initializing freespace
[  162.639365][ T9089] bcachefs (loop2): done initializing freespace
[  162.656908][ T9089] bcachefs (loop2): reading snapshots table
[  162.659466][ T9089] bcachefs (loop2): reading snapshots done
[  162.718395][ T9089] bcachefs (loop2): done starting filesystem
[  162.824112][ T9089] syz.2.1328 (9089) used greatest stack depth: 15864 bytes left
[  162.858484][ T5856] bcachefs (loop2): shutting down
[  162.860637][ T5856] bcachefs (loop2): going read-only
[  162.875114][ T5856] bcachefs (loop2): finished waiting for writes to stop
[  162.885933][ T5856] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[  162.938335][ T5856] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  162.948625][ T5856] bcachefs (loop2): clean shutdown complete, journal seq 4
[  162.951318][ T5856] bcachefs (loop2): marking filesystem clean
[  162.990180][ T5856] bcachefs (loop2): shutdown complete
[  163.459391][ T9141] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1346'.
[  163.463096][ T9141] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1346'.
[  164.361053][ T9191] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1369'.
[  164.412299][ T9189] loop2: detected capacity change from 0 to 8192
[  164.433306][ T9189] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  165.214602][ T9211] loop2: detected capacity change from 0 to 32768
[  165.232179][ T9211] (syz.2.1378,9211,1):ocfs2_check_set_options:1252 ERROR: User quotas were requested, but this filesystem does not have the feature enabled.
[  165.247137][ T9211] (syz.2.1378,9211,1):ocfs2_fill_super:1177 ERROR: status = -22
[  165.722565][ T9233] loop2: detected capacity change from 0 to 32768
[  165.728454][ T9233] (syz.2.1383,9233,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #66: rec_len is too small for name_len - offset=132, inode=71, rec_len=16, name_len=13
[  165.734503][ T9233] (syz.2.1383,9233,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  165.744707][ T9233] (syz.2.1383,9233,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 4, possibly corrupt fs?
[  165.744731][ T9233] (syz.2.1383,9233,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  165.765881][ T9233] (syz.2.1383,9233,1):ocfs2_initialize_super:2198 ERROR: status = -22
[  165.775357][ T9233] (syz.2.1383,9233,1):ocfs2_fill_super:1177 ERROR: status = -22
[  166.501629][ T9301] IPv6: sit1: Disabled Multicast RS
[  166.504789][ T9301] sit1: entered allmulticast mode
[  166.669686][ T9314] 9pnet_fd: Insufficient options for proto=fd
[  166.692941][ T9316] loop2: detected capacity change from 0 to 256
[  166.768829][ T9320] netlink: 'syz.0.1403': attribute type 1 has an invalid length.
[  166.771790][ T9320] nbd: couldn't find a device at index 20
[  166.808653][ T9324] dlm: plock device version mismatch: kernel (1.2.0), user (1.4.8)
[  166.846670][   T33] audit: type=1326 audit(1756996481.173:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9325 comm="syz.2.1408" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb138ebe9 code=0x7ffc0000
[  166.869303][   T33] audit: type=1326 audit(1756996481.173:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9325 comm="syz.2.1408" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb138ebe9 code=0x7ffc0000
[  166.887920][   T33] audit: type=1326 audit(1756996481.173:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9325 comm="syz.2.1408" exe="/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fafb138ebe9 code=0x7ffc0000
[  166.896731][   T33] audit: type=1326 audit(1756996481.173:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9325 comm="syz.2.1408" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb138ebe9 code=0x7ffc0000
[  166.909845][   T33] audit: type=1326 audit(1756996481.173:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9325 comm="syz.2.1408" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb138ebe9 code=0x7ffc0000
[  167.520804][ T9335] loop2: detected capacity change from 0 to 32768
[  167.543918][ T9335] read_mapping_page failed!
[  167.547014][ T9335] ERROR: (device loop2): txCommit: 
[  167.547014][ T9335] 
[  167.724264][ T9356] TCP: TCP_TX_DELAY enabled
[  168.247019][ T9381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1429'.
[  168.338422][ T9372] loop2: detected capacity change from 0 to 32768
[  168.354883][   T33] audit: type=1800 audit(1756996482.683:39): pid=9372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1425" name="file1" dev="loop2" ino=4 res=0 errno=0
[  168.538200][ T9372] ERROR: (device loop2): dbAdjCtl: the maximum free buddy is not the old root
[  168.538200][ T9372] 
[  168.544170][ T9372] ERROR: (device loop2): remounting filesystem as read-only
[  168.779173][ T9384] loop2: detected capacity change from 0 to 1024
[  168.801588][ T9384] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  168.806856][ T9384] ext4 filesystem being mounted at /380/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.824319][ T9384] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.1430: lblock 3 mapped to illegal pblock 3 (length 3)
[  168.834972][ T9384] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  168.840952][ T9384] EXT4-fs (loop2): This should not happen!! Data will be lost
[  168.840952][ T9384] 
[  168.874343][ T1091] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 8: comm kworker/u10:6: lblock 8 mapped to illegal pblock 8 (length 8)
[  168.884114][ T1091] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  168.891995][ T1091] EXT4-fs (loop2): This should not happen!! Data will be lost
[  168.891995][ T1091] 
[  168.902326][ T1091] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  168.918106][ T1091] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65 with max blocks 3 with error 28
[  168.923305][ T1091] EXT4-fs (loop2): This should not happen!! Data will be lost
[  168.923305][ T1091] 
[  168.928960][ T1091] EXT4-fs (loop2): Total free blocks count 0
[  168.931572][ T1091] EXT4-fs (loop2): Free/Dirty block details
[  168.934144][ T1091] EXT4-fs (loop2): free_blocks=4293918720
[  170.627782][ T9431] siw: device registration error -23
[  171.038256][ T9457] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  172.003362][ T9503] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1485'.
[  172.348530][ T5913] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[  172.393842][ T9531] netlink: 'syz.3.1496': attribute type 3 has an invalid length.
[  172.512471][ T5913] usb 3-1: config 128 has an invalid interface number: 249 but max is 0
[  172.521686][ T5913] usb 3-1: config 128 has no interface number 0
[  172.524233][ T5913] usb 3-1: config 128 interface 249 has no altsetting 0
[  172.538619][ T5913] usb 3-1: New USB device found, idVendor=06e1, idProduct=a190, bcdDevice= a.c0
[  172.545880][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.551484][ T5913] usb 3-1: Product: syz
[  172.553387][ T5913] usb 3-1: Manufacturer: syz
[  172.555384][ T5913] usb 3-1: SerialNumber: syz
[  172.762679][ T5238] Bluetooth: hci1: unexpected event for opcode 0x1004
[  172.777186][ T5913] gspca_main: spca506-2.14.0 probing 06e1:a190
[  172.848748][ T5913] usb 3-1: USB disconnect, device number 23
[  173.314246][ T9563] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1509'.
[  173.320584][ T9559] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1509'.
[  174.464952][ T9609] openvswitch: netlink: IP tunnel dst address not specified
[  174.502848][ T9611] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1534'.
[  174.509311][ T9611] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1534'.
[  174.803419][ T9621] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1539'.
[  174.914850][ T9605] loop2: detected capacity change from 0 to 131072
[  174.918410][ T9605] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0)
[  174.921192][ T9605] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  174.942712][ T9605] F2FS-fs (loop2): invalid crc value
[  174.984743][ T9605] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  174.992711][ T9605] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  174.995447][ T9605] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  175.535731][ T9664] mmap: syz.0.1559 (9664): VmData 37474304 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data.
[  176.817915][ T9699] loop2: detected capacity change from 0 to 764
[  176.825687][ T9699] rock: directory entry would overflow storage
[  176.830759][ T9699] rock: sig=0x4654, size=5, remaining=4
[  176.857306][ T5238] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  176.864553][ T5238] Bluetooth: hci1: Injecting HCI hardware error event
[  176.868788][ T5238] Bluetooth: hci1: hardware error 0x00
[  177.892868][ T9743] netlink: 'syz.0.1593': attribute type 10 has an invalid length.
[  177.904405][ T9743] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  178.837220][ T5857] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  178.908312][ T5238] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  178.996989][ T5857] usb 3-1: Using ep0 maxpacket: 8
[  179.006280][ T5857] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  179.010757][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.016922][ T5857] usb 3-1: Product: syz
[  179.018745][ T5857] usb 3-1: Manufacturer: syz
[  179.020606][ T5857] usb 3-1: SerialNumber: syz
[  179.025920][ T5857] usb 3-1: config 0 descriptor??
[  179.504128][ T9763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.510245][ T9763] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.520515][ T5857] usb read operation failed. (-71)
[  179.529429][ T5857] usb write operation failed. (-71)
[  179.536244][ T5857] usb write operation failed. (-71)
[  179.540175][ T5857] usb write operation failed. (-71)
[  179.542494][ T5857] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in cold state
[  179.552787][ T5857] usb 3-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2
[  179.557773][ T5857] usb 3-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw
[  182.013954][ T9874] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  182.023769][ T9874] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.028632][ T9874] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.074019][ T9872] loop2: detected capacity change from 0 to 32768
[  182.116955][ T9872] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  182.155791][ T9872] XFS (loop2): Ending clean mount
[  182.163466][ T9872] XFS (loop2): Quotacheck needed: Please wait.
[  182.196578][ T9872] XFS (loop2): Quotacheck: Done.
[  182.246084][ T5856] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  182.267481][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout
[  182.561147][ T9911] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1662'.
[  182.624428][ T9915] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1664'.
[  182.637435][ T9915] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1664'.
[  182.643835][ T9915] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1664'.
[  182.656084][ T9915] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  182.844457][ T9931] netlink: 'syz.2.1672': attribute type 4 has an invalid length.
[  182.850447][ T9931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1672'.
[  183.105764][ T9948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1679'.
[  183.121597][ T9948] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  183.125465][ T9948] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  183.304349][ T9964] loop2: detected capacity change from 0 to 512
[  183.312916][ T9964] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  183.334052][ T9964] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002]
[  183.338897][ T9964] System zones: 1-12
[  183.340776][ T9964] EXT4-fs (loop2): orphan cleanup on readonly fs
[  183.344017][ T9964] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1688: invalid indirect mapped block 12 (level 1)
[  183.350482][ T9964] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1688: invalid indirect mapped block 2 (level 2)
[  183.356804][ T9964] EXT4-fs (loop2): 1 truncate cleaned up
[  183.360667][ T9964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  183.371819][ T9964] EXT4-fs warning (device loop2): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed
[  183.395484][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  184.077071][ T9991] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1699'.
[  184.343208][T10007] loop2: detected capacity change from 0 to 4096
[  184.347958][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout
[  184.404667][T10007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.490225][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.600943][T10058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1730'.
[  187.636954][T10119] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1758'.
[  187.653761][T10119] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1758'.
[  187.657496][T10119] netlink: 'syz.2.1758': attribute type 5 has an invalid length.
[  187.682506][T10119] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1758'.
[  187.921764][T10133] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1766'.
[  190.158845][T10222] netlink: 'syz.3.1806': attribute type 10 has an invalid length.
[  190.163586][T10222] hsr0: entered promiscuous mode
[  190.173696][T10222] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  190.179057][T10222] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  190.184116][T10222] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  191.290886][T10249] loop2: detected capacity change from 0 to 32768
[  191.299792][T10249] jfs_mount: dbMount failed w/rc = -22
[  191.303932][T10249] Mount JFS Failure: -22
[  191.305410][T10249] jfs_mount failed w/return code = -22
[  191.368923][T10253] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  191.466338][T10255] loop2: detected capacity change from 0 to 4096
[  191.471742][T10255] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  191.495337][T10255] ntfs3(loop2): ino=19, mi_enum_attr
[  191.498999][T10255] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  191.680765][T10266] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1827'.
[  191.735214][T10261] loop2: detected capacity change from 0 to 32768
[  191.772958][T10261] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  191.829808][T10261] XFS (loop2): Ending clean mount
[  191.836393][T10261] XFS (loop2): Quotacheck needed: Please wait.
[  191.873067][T10261] XFS (loop2): Quotacheck: Done.
[  191.910659][   T33] audit: type=1326 audit(1756996506.240:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10285 comm="syz.0.1833" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fd618ebe9 code=0x7ffc0000
[  191.928608][   T33] audit: type=1326 audit(1756996506.250:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10285 comm="syz.0.1833" exe="/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f7fd618ebe9 code=0x7ffc0000
[  191.937930][   T33] audit: type=1326 audit(1756996506.250:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10285 comm="syz.0.1833" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fd618ebe9 code=0x7ffc0000
[  191.946463][   T33] audit: type=1326 audit(1756996506.250:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10285 comm="syz.0.1833" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fd618ebe9 code=0x7ffc0000
[  191.962944][ T5856] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  193.692282][T10347] loop2: detected capacity change from 0 to 4096
[  193.720288][T10347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.743402][T10347] EXT4-fs error (device loop2): ext4_get_first_dir_block:3549: inode #12: block 80: comm syz.2.1862: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[  193.763348][T10347] EXT4-fs error (device loop2): ext4_get_first_dir_block:3552: inode #12: comm syz.2.1862: directory missing '..'
[  193.788012][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.969883][T10358] loop2: detected capacity change from 0 to 32768
[  194.012502][T10358] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,recovery_pass_last=initialize_subvolumes,nojournal_transaction_names,read_only,reconstruct_alloc
[  194.012523][T10358]   allowing incompatible features above 0.0: (unknown version)
[  194.012531][T10358]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  194.036720][ T1363] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  194.037080][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.046321][T10358] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  194.049847][T10358] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[  194.053357][T10358] bcachefs (loop2): Version upgrade required:
[  194.053357][T10358] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  194.053357][T10358] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  194.053357][T10358]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  194.083621][T10358] bcachefs (loop2): dropping and reconstructing all alloc info
[  194.095908][T10358] bcachefs (loop2): accounting_read... done
[  194.099574][T10358] bcachefs (loop2): alloc_read... done
[  194.102504][T10358] bcachefs (loop2): done starting filesystem
[  194.140983][ T5856] bcachefs (loop2): shutting down
[  194.153428][ T5856] bcachefs (loop2): shutdown complete
[  194.988519][T10379] netlink: 'syz.2.1877': attribute type 1 has an invalid length.
[  197.897258][T10465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1916'.
[  198.026652][T10473] sctp: [Deprecated]: syz.3.1920 (pid 10473) Use of struct sctp_assoc_value in delayed_ack socket option.
[  198.026652][T10473] Use struct sctp_sack_info instead
[  198.422939][T10509] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.451747][T10511] kernel read not supported for file /eth0 (pid: 10511 comm: syz.2.1933)
[  198.455206][   T33] audit: type=1800 audit(1756996512.779:44): pid=10511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1933" name="eth0" dev="mqueue" ino=19804 res=0 errno=0
[  198.465357][T10515] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1935'.
[  198.620791][T10528] netlink: 'syz.2.1941': attribute type 5 has an invalid length.
[  199.153587][T10558] netlink: 'syz.2.1956': attribute type 16 has an invalid length.
[  199.157298][T10558] netlink: 'syz.2.1956': attribute type 17 has an invalid length.
[  199.169946][T10558] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  200.413889][T10590] loop2: detected capacity change from 0 to 32768
[  200.416642][T10590] XFS: attr2 mount option is deprecated.
[  200.438505][T10590] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  200.450811][T10590] XFS (loop2): Ending clean mount
[  200.456537][T10590] XFS (loop2): Quotacheck needed: Please wait.
[  200.479247][T10590] XFS (loop2): Quotacheck: Done.
[  200.482211][T10590] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  200.787892][T10615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1975'.
[  201.129252][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1989'.
[  201.619321][T10661] loop2: detected capacity change from 0 to 8192
[  201.631277][T10661] syz.2.1995: attempt to access beyond end of device
[  201.631277][T10661] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  201.640375][T10661] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1)
[  201.643714][T10661] FAT-fs (loop2): Filesystem has been set read-only
[  201.660391][T10661] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1)
[  201.664228][T10661] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1)
[  201.733666][T10663] netlink: 'syz.2.1996': attribute type 1 has an invalid length.
[  201.757215][T10663] 8021q: adding VLAN 0 to HW filter on device bond2
[  201.771925][T10663] bond2: (slave erspan1): making interface the new active one
[  201.774930][T10663] bond2: (slave erspan1): Enslaving as an active interface with an up link
[  201.854079][T10672] devpts: Bad value for 'max'
[  201.948096][T10674] loop2: detected capacity change from 0 to 8192
[  202.372912][T10684] netlink: 'syz.0.2006': attribute type 11 has an invalid length.
[  203.373522][T10748] netlink: 'syz.3.2038': attribute type 7 has an invalid length.
[  203.376838][T10748] netlink: 'syz.3.2038': attribute type 5 has an invalid length.
[  203.385164][T10748] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2038'.
[  205.076247][T10815] tmpfs: Cannot change global quota limit on remount
[  206.384171][T10854] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2084'.
[  206.692849][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2091'.
[  206.838241][T10877] veth0_to_bridge: entered promiscuous mode
[  206.846977][T10876] veth0_to_bridge: left promiscuous mode
[  206.996189][T10889] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2100'.
[  206.999928][T10889] netlink: 'syz.2.2100': attribute type 7 has an invalid length.
[  207.006229][T10889] netlink: 'syz.2.2100': attribute type 8 has an invalid length.
[  207.008933][T10889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2100'.
[  207.093741][T10899] loop2: detected capacity change from 0 to 128
[  207.108214][T10899] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  207.120016][T10899] ext4 filesystem being mounted at /500/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  207.157606][ T5856] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  208.858701][T10980] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2143'.
[  208.894669][ T5852] Bluetooth: hci2: unexpected cc 0x042d length: 63 > 7
[  208.899057][ T5852] Bluetooth: hci2: unexpected event for opcode 0x042d
[  209.227366][   T33] audit: type=1326 audit(1756996523.548:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11013 comm="syz.3.2160" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec358ebe9 code=0x7ffc0000
[  209.237252][   T33] audit: type=1326 audit(1756996523.558:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11013 comm="syz.3.2160" exe="/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f7ec358ebe9 code=0x7ffc0000
[  209.249862][   T33] audit: type=1326 audit(1756996523.558:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11013 comm="syz.3.2160" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec358ebe9 code=0x7ffc0000
[  209.259641][   T33] audit: type=1326 audit(1756996523.558:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11013 comm="syz.3.2160" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec358ebe9 code=0x7ffc0000
[  211.526258][T11056] loop2: detected capacity change from 0 to 1024
[  211.530185][T11056] EXT4-fs: inline encryption not supported
[  211.536419][T11056] EXT4-fs: Ignoring removed bh option
[  211.558791][T11056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.626359][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.894724][T11067] loop2: detected capacity change from 0 to 32768
[  211.917857][T11067] JBD2: Ignoring recovery information on journal
[  211.987230][T11067] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  212.032868][ T5856] ocfs2: Unmounting device (7,2) on (node local)
[  212.520625][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2194'.
[  212.911342][ T5852] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  212.915575][ T5852] Bluetooth: hci2: Injecting HCI hardware error event
[  212.919921][ T5852] Bluetooth: hci2: hardware error 0x00
[  213.789533][T11145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2217'.
[  213.793593][T11145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2217'.
[  213.994151][T11151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2220'.
[  214.008868][T11151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2220'.
[  214.009133][ T5879] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  214.016840][ T5879] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  214.024031][ T5879] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  214.027770][ T5879] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  214.219130][T11165] netlink: 964 bytes leftover after parsing attributes in process `syz.3.2227'.
[  214.267757][ T5238] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  214.994412][ T5852] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  215.077324][T11209] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  215.159391][ T5852] Bluetooth: hci0: unexpected event for opcode 0x200c
[  215.162653][T11212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  215.253239][T11215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2251'.
[  215.302491][T11217] loop2: detected capacity change from 0 to 512
[  215.325187][T11217] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  215.337954][T11217] EXT4-fs (loop2): Remounting filesystem read-only
[  215.342936][T11217] EXT4-fs (loop2): 1 truncate cleaned up
[  215.346753][T11217] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.373858][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.455956][   T33] audit: type=1326 audit(1756996529.777:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.0.2257" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7fd618ebe9 code=0x0
[  215.565963][T11235] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2260'.
[  215.584208][T11237] loop2: detected capacity change from 0 to 24
[  215.593854][T11237] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  215.601541][T11237] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  215.812267][T11245] loop2: detected capacity change from 0 to 512
[  215.825972][T11245] ext2: Unknown parameter 'nouser_xattr'
[  216.111570][T11247] lo speed is unknown, defaulting to 1000
[  216.114575][T11247] lo speed is unknown, defaulting to 1000
[  216.122077][T11247] lo speed is unknown, defaulting to 1000
[  216.174838][T11247] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  216.274638][T11247] lo speed is unknown, defaulting to 1000
[  216.287897][T11247] lo speed is unknown, defaulting to 1000
[  216.297605][T11247] lo speed is unknown, defaulting to 1000
[  216.528172][T11252] openvswitch: netlink: Message has 1 unknown bytes.
[  216.533494][T11252] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.210066][   T33] audit: type=1804 audit(1756996531.527:50): pid=11267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2272" name="file0" dev="tmpfs" ino=4848 res=1 errno=0
[  217.284539][T11261] loop2: detected capacity change from 0 to 32768
[  217.290271][T11261] btrfs: Bad value for 'thread_pool'
[  218.182728][   T33] audit: type=1326 audit(1756996532.507:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11301 comm="syz.0.2285" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fd618ebe9 code=0x7ffc0000
[  218.192736][   T33] audit: type=1326 audit(1756996532.507:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11301 comm="syz.0.2285" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fd618ebe9 code=0x7ffc0000
[  218.202220][   T33] audit: type=1326 audit(1756996532.517:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11301 comm="syz.0.2285" exe="/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f7fd618ebe9 code=0x7ffc0000
[  218.233325][   T33] audit: type=1326 audit(1756996532.527:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11301 comm="syz.0.2285" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fd618ebe9 code=0x7ffc0000
[  218.266632][   T33] audit: type=1326 audit(1756996532.527:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11301 comm="syz.0.2285" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fd618ebe9 code=0x7ffc0000
[  218.287297][   T33] audit: type=1326 audit(1756996532.527:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11301 comm="syz.0.2285" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7fd618ebe9 code=0x7ffc0000
[  218.330113][   T33] audit: type=1326 audit(1756996532.527:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11301 comm="syz.0.2285" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fd618ebe9 code=0x7ffc0000
[  218.347076][   T33] audit: type=1326 audit(1756996532.527:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11301 comm="syz.0.2285" exe="/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f7fd618ebe9 code=0x7ffc0000
[  218.365611][T11306] loop2: detected capacity change from 0 to 164
[  218.393765][T11306] iso9660: Corrupted directory entry in block 2 of inode 1792
[  218.447497][T11310] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2289'.
[  219.454637][T11335] debugfs: Bad value for 'uid'
[  219.456364][T11335] debugfs: Bad value for 'uid'
[  219.611074][T11344] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  220.399063][T11374] loop2: detected capacity change from 0 to 32768
[  220.434366][T11374] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  220.461101][T11374] XFS (loop2): Ending clean mount
[  220.497541][T11374] XFS (loop2): User initiated shutdown received.
[  220.500546][T11374] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476).  Shutting down filesystem.
[  220.507668][T11374] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  220.542212][ T5856] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  220.666097][T11402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2327'.
[  220.692646][T11402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2327'.
[  220.885903][T11407] loop2: detected capacity change from 0 to 32768
[  220.924662][T11407] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  220.980371][T11407] XFS (loop2): Ending clean mount
[  221.017311][ T5856] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  221.545182][T11449] loop2: detected capacity change from 0 to 32768
[  221.554684][T11449] bcachefs: bch2_fs_parse_param() Error parsing option background_compression: option_value
[  221.792686][T11471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2355'.
[  222.523210][T11483] atomic_op ffff888039c24998 conn xmit_atomic 0000000000000000
[  223.697693][T11528] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  223.701801][T11528] overlayfs: failed to clone lowerpath
[  224.611184][T11566] netlink: 'syz.0.2398': attribute type 3 has an invalid length.
[  224.614937][T11566] netlink: 'syz.0.2398': attribute type 27 has an invalid length.
[  224.700974][T11570] netlink: 'syz.2.2400': attribute type 9 has an invalid length.
[  224.705241][T11570] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2400'.
[  226.420462][T11633] program syz.2.2429 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  226.433880][T11633] ata1.00: non-matching transfer count (0/2)
[  226.584248][T11649] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2437'.
[  226.777130][T11665] tmpfs: Bad value for 'nr_inodes'
[  226.813072][T11667] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  227.265149][T11680] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2451'.
[  227.321122][T11684] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2453'.
[  228.026678][T11696] 9pnet_fd: Insufficient options for proto=fd
[  228.829976][T11714] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  229.452628][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2477'.
[  229.779328][T11748] loop2: detected capacity change from 0 to 32768
[  229.791520][T11748] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2482 (11748)
[  229.830607][T11748] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  229.835007][T11748] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  229.884753][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  229.884765][   T33] audit: type=1326 audit(1756996544.205:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.3.2492" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec358ebe9 code=0x7ffc0000
[  229.923235][   T33] audit: type=1326 audit(1756996544.205:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.3.2492" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec358ebe9 code=0x7ffc0000
[  229.951077][T11748] BTRFS info (device loop2): enabling ssd optimizations
[  229.956305][T11748] BTRFS info (device loop2): enabling free space tree
[  229.963270][   T33] audit: type=1326 audit(1756996544.235:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.3.2492" exe="/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f7ec358ebe9 code=0x7ffc0000
[  229.986023][   T33] audit: type=1326 audit(1756996544.235:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.3.2492" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec358ebe9 code=0x7ffc0000
[  230.042319][ T5856] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  231.012757][T11827] Invalid ELF header magic: != ELF
[  232.029744][T11869] netlink: 'syz.3.2532': attribute type 10 has an invalid length.
[  232.040427][T11869] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  232.046416][T11871] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2533'.
[  232.071253][T11869] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  232.170604][T11879] : renamed from bridge_slave_0 (while UP)
[  232.753584][T11906] loop2: detected capacity change from 0 to 32768
[  232.757591][T11906] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2550 (11906)
[  232.784837][T11906] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  232.790392][T11906] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  232.924366][T11906] BTRFS info (device loop2): enabling ssd optimizations
[  232.927246][T11906] BTRFS info (device loop2): enabling free space tree
[  232.998367][T11928] openvswitch: netlink: Message has 4 unknown bytes.
[  233.007390][ T5856] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  233.441998][T11949] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  233.641389][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2568'.
[  236.258048][T12023] cgroup: name respecified
[  236.476292][T12033] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2601'.
[  236.488241][T12033] fuse: Unknown parameter '0x000000000000000300000000000000000000'
[  237.040866][T12044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2606'.
[  237.049434][T12044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2606'.
[  237.115649][T12048] netlink: 'syz.0.2608': attribute type 49 has an invalid length.
[  237.186750][T12052] netlink: 'syz.0.2610': attribute type 6 has an invalid length.
[  237.722577][T12081] netlink: 'syz.0.2624': attribute type 21 has an invalid length.
[  237.727878][T12081] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2624'.
[  237.731650][T12081] netlink: 'syz.0.2624': attribute type 5 has an invalid length.
[  237.734882][T12081] netlink: 'syz.0.2624': attribute type 6 has an invalid length.
[  237.737980][T12081] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2624'.
[  238.401570][T12097] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  238.404981][T12097] batman_adv: batadv0: Removing interface: batadv_slave_0
[  238.409256][T12097] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  238.412426][T12097] batman_adv: batadv0: Removing interface: batadv_slave_1
[  238.829716][T12105] tipc: Resetting bearer <eth:vlan0>
[  238.833945][T12105] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  239.414228][ T5298] udevd[5298]: worker [9510] /devices/platform/dummy_hcd.2/usb3/3-1 is taking a long time
[  239.803216][T12128] loop2: detected capacity change from 0 to 32768
[  239.818429][T12128] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  239.842236][T12128] XFS (loop2): Ending clean mount
[  239.872695][ T5856] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  239.940806][T12145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2650'.
[  240.118501][ T5857] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  240.136977][ T5857] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -110
[  240.148244][ T5857] usb 3-1: USB disconnect, device number 24
[  240.634955][ T5857] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  240.796237][ T5857] usb 3-1: Using ep0 maxpacket: 8
[  240.802801][ T5857] usb 3-1: unable to get BOS descriptor or descriptor too short
[  240.808542][ T5857] usb 3-1: config 4 has an invalid interface number: 177 but max is 0
[  240.811390][ T5857] usb 3-1: config 4 has no interface number 0
[  240.813851][ T5857] usb 3-1: config 4 interface 177 has no altsetting 0
[  240.819487][ T5857] usb 3-1: New USB device found, idVendor=13d3, idProduct=3349, bcdDevice=26.35
[  240.823428][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.834550][ T5857] usb 3-1: Product: syz
[  240.836288][ T5857] usb 3-1: Manufacturer: syz
[  240.838146][ T5857] usb 3-1: SerialNumber: syz
[  240.857176][T12197] 9pnet_fd: Insufficient options for proto=fd
[  240.951785][T12207] 9pnet_fd: Insufficient options for proto=fd
[  241.016298][T12213] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2683'.
[  241.059668][ T5857] usb 3-1: ath9k_htc: Device endpoint numbers are not the expected ones
[  241.065597][ T5857] usb 3-1: USB disconnect, device number 25
[  241.722310][T12251] pim6reg1: entered promiscuous mode
[  241.724604][T12251] pim6reg1: entered allmulticast mode
[  241.779420][T12259] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  241.789825][T12259] CIFS mount error: No usable UNC path provided in device string!
[  241.789825][T12259] 
[  241.793467][T12259] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  241.848341][T12265] loop2: detected capacity change from 0 to 512
[  241.860977][T12265] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  241.870836][T12265] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it
[  241.879551][T12265] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2709: Corrupt directory, running e2fsck is recommended
[  241.888202][T12265] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  241.891565][T12265] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.2709: corrupted in-inode xattr: invalid ea_ino
[  241.898668][T12265] EXT4-fs (loop2): Remounting filesystem read-only
[  241.902613][T12265] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  241.930016][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.023406][T12277] netlink: 'syz.2.2712': attribute type 3 has an invalid length.
[  242.033187][T12277] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2712'.
[  243.235702][T12327] batadv_slave_0: entered promiscuous mode
[  243.587735][T12337] ==================================================================
[  243.591094][T12337] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450
[  243.594398][T12337] Read of size 1 at addr ffff888113eed0b0 by task syz.3.2744/12337
[  243.598018][T12337] 
[  243.599015][T12337] CPU: 1 UID: 0 PID: 12337 Comm: syz.3.2744 Not tainted syzkaller #0 PREEMPT(full) 
[  243.599029][T12337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  243.599036][T12337] Call Trace:
[  243.599042][T12337]  <TASK>
[  243.599054][T12337]  dump_stack_lvl+0x189/0x250
[  243.599071][T12337]  ? __kasan_check_byte+0x12/0x40
[  243.599089][T12337]  ? __pfx_dump_stack_lvl+0x10/0x10
[  243.599101][T12337]  ? lock_release+0x4b/0x3e0
[  243.599115][T12337]  ? __virt_addr_valid+0x4a5/0x5c0
[  243.599129][T12337]  print_report+0xca/0x240
[  243.599139][T12337]  ? __xfrm_state_insert+0x8af/0x1450
[  243.599150][T12337]  kasan_report+0x118/0x150
[  243.599164][T12337]  ? __xfrm_state_insert+0x8af/0x1450
[  243.599177][T12337]  __xfrm_state_insert+0x8af/0x1450
[  243.599191][T12337]  ? xfrm_state_insert+0x44/0x60
[  243.599202][T12337]  xfrm_state_insert+0x54/0x60
[  243.599213][T12337]  ipcomp6_init_state+0x655/0x900
[  243.599223][T12337]  __xfrm_init_state+0xa76/0x13f0
[  243.599234][T12337]  ? __xfrm_init_state+0x7ef/0x13f0
[  243.599249][T12337]  xfrm_init_state+0x18/0xa0
[  243.599259][T12337]  pfkey_add+0x1d38/0x2e00
[  243.599274][T12337]  ? __pfx_pfkey_add+0x10/0x10
[  243.599283][T12337]  ? kmem_cache_free+0x18f/0x400
[  243.599300][T12337]  pfkey_sendmsg+0xbfe/0x1090
[  243.599314][T12337]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  243.599329][T12337]  ? aa_sock_msg_perm+0xf1/0x1d0
[  243.599338][T12337]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  243.599346][T12337]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  243.599356][T12337]  __sock_sendmsg+0x21c/0x270
[  243.599370][T12337]  ____sys_sendmsg+0x52d/0x830
[  243.599383][T12337]  ? __pfx_____sys_sendmsg+0x10/0x10
[  243.599397][T12337]  ? import_iovec+0x74/0xa0
[  243.599411][T12337]  ___sys_sendmsg+0x21f/0x2a0
[  243.599423][T12337]  ? __pfx____sys_sendmsg+0x10/0x10
[  243.599443][T12337]  ? __fget_files+0x2a/0x420
[  243.599451][T12337]  ? __fget_files+0x3a0/0x420
[  243.599458][T12337]  __sys_sendmmsg+0x227/0x430
[  243.599469][T12337]  ? __pfx___sys_sendmmsg+0x10/0x10
[  243.599479][T12337]  ? do_futex+0x333/0x420
[  243.599494][T12337]  ? fdget+0x184/0x1e0
[  243.599507][T12337]  ? rcu_is_watching+0x15/0xb0
[  243.599519][T12337]  __x64_sys_sendmmsg+0xa0/0xc0
[  243.599531][T12337]  do_syscall_64+0xfa/0x3b0
[  243.599541][T12337]  ? lockdep_hardirqs_on+0x9c/0x150
[  243.599584][T12337]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.599617][T12337]  ? exc_page_fault+0x9f/0xf0
[  243.599631][T12337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.599642][T12337] RIP: 0033:0x7f7ec358ebe9
[  243.599652][T12337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  243.599663][T12337] RSP: 002b:00007f7ec44e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  243.599676][T12337] RAX: ffffffffffffffda RBX: 00007f7ec37c5fa0 RCX: 00007f7ec358ebe9
[  243.599684][T12337] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000003
[  243.599689][T12337] RBP: 00007f7ec3611e19 R08: 0000000000000000 R09: 0000000000000000
[  243.599694][T12337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  243.599701][T12337] R13: 00007f7ec37c6038 R14: 00007f7ec37c5fa0 R15: 00007ffe78543948
[  243.599713][T12337]  </TASK>
[  243.599717][T12337] 
[  243.711028][T12337] Allocated by task 9854:
[  243.712387][T12337]  kasan_save_track+0x3e/0x80
[  243.713922][T12337]  __kasan_slab_alloc+0x6c/0x80
[  243.715474][T12337]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  243.717458][T12337]  xfrm_state_alloc+0x24/0x2f0
[  243.718993][T12337]  __find_acq_core+0x8a7/0x1c00
[  243.720750][T12337]  xfrm_find_acq+0x78/0xa0
[  243.722270][T12337]  xfrm_alloc_userspi+0x6b3/0xc90
[  243.723870][T12337]  xfrm_user_rcv_msg+0x7a3/0xab0
[  243.725423][T12337]  netlink_rcv_skb+0x208/0x470
[  243.726946][T12337]  xfrm_netlink_rcv+0x79/0x90
[  243.728422][T12337]  netlink_unicast+0x82f/0x9e0
[  243.730036][T12337]  netlink_sendmsg+0x805/0xb30
[  243.731660][T12337]  __sock_sendmsg+0x21c/0x270
[  243.733437][T12337]  ____sys_sendmsg+0x505/0x830
[  243.735036][T12337]  ___sys_sendmsg+0x21f/0x2a0
[  243.736544][T12337]  __x64_sys_sendmsg+0x19b/0x260
[  243.738164][T12337]  do_syscall_64+0xfa/0x3b0
[  243.739765][T12337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.741554][T12337] 
[  243.742711][T12337] Freed by task 47:
[  243.743946][T12337]  kasan_save_track+0x3e/0x80
[  243.745457][T12337]  kasan_save_free_info+0x46/0x50
[  243.747061][T12337]  __kasan_slab_free+0x5b/0x80
[  243.748665][T12337]  kmem_cache_free+0x18f/0x400
[  243.750249][T12337]  xfrm_state_gc_task+0x52d/0x6b0
[  243.751766][T12337]  process_scheduled_works+0xae1/0x17b0
[  243.753592][T12337]  worker_thread+0x8a0/0xda0
[  243.755086][T12337]  kthread+0x711/0x8a0
[  243.756333][T12337]  ret_from_fork+0x3fc/0x770
[  243.757750][T12337]  ret_from_fork_asm+0x1a/0x30
[  243.759302][T12337] 
[  243.760054][T12337] The buggy address belongs to the object at ffff888113eecd80
[  243.760054][T12337]  which belongs to the cache xfrm_state of size 928
[  243.764849][T12337] The buggy address is located 816 bytes inside of
[  243.764849][T12337]  freed 928-byte region [ffff888113eecd80, ffff888113eed120)
[  243.769377][T12337] 
[  243.770340][T12337] The buggy address belongs to the physical page:
[  243.772958][T12337] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888113eee880 pfn:0x113eec
[  243.776817][T12337] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  243.780135][T12337] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  243.782941][T12337] page_type: f5(slab)
[  243.784312][T12337] raw: 057ff00000000040 ffff88801b36b640 dead000000000122 0000000000000000
[  243.787037][T12337] raw: ffff888113eee880 00000000800e0005 00000000f5000000 0000000000000000
[  243.789966][T12337] head: 057ff00000000040 ffff88801b36b640 dead000000000122 0000000000000000
[  243.793043][T12337] head: ffff888113eee880 00000000800e0005 00000000f5000000 0000000000000000
[  243.796311][T12337] head: 057ff00000000002 ffffea00044fbb01 00000000ffffffff 00000000ffffffff
[  243.799029][T12337] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  243.801900][T12337] page dumped because: kasan: bad access detected
[  243.804159][T12337] page_owner tracks the page as allocated
[  243.805950][T12337] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7509, tgid 7508 (syz.2.624), ts 119539351844, free_ts 119490748357
[  243.811848][T12337]  post_alloc_hook+0x240/0x2a0
[  243.813405][T12337]  get_page_from_freelist+0x21e4/0x22c0
[  243.815157][T12337]  __alloc_frozen_pages_noprof+0x181/0x370
[  243.817005][T12337]  alloc_pages_mpol+0x232/0x4a0
[  243.818598][T12337]  allocate_slab+0x8a/0x370
[  243.820097][T12337]  ___slab_alloc+0xbeb/0x1410
[  243.821700][T12337]  kmem_cache_alloc_noprof+0x283/0x3c0
[  243.823505][T12337]  xfrm_state_alloc+0x24/0x2f0
[  243.825310][T12337]  xfrm_add_acquire+0xf7/0xb20
[  243.827100][T12337]  xfrm_user_rcv_msg+0x7a3/0xab0
[  243.828876][T12337]  netlink_rcv_skb+0x208/0x470
[  243.830523][T12337]  xfrm_netlink_rcv+0x79/0x90
[  243.832295][T12337]  netlink_unicast+0x82f/0x9e0
[  243.834041][T12337]  netlink_sendmsg+0x805/0xb30
[  243.835582][T12337]  __sock_sendmsg+0x21c/0x270
[  243.837188][T12337]  ____sys_sendmsg+0x505/0x830
[  243.838751][T12337] page last free pid 5831 tgid 5831 stack trace:
[  243.841080][T12337]  __free_frozen_pages+0xbc4/0xd30
[  243.842749][T12337]  __put_partials+0x156/0x1a0
[  243.844349][T12337]  put_cpu_partial+0x17c/0x250
[  243.845989][T12337]  __slab_free+0x2d5/0x3c0
[  243.847569][T12337]  qlist_free_all+0x97/0x140
[  243.849272][T12337]  kasan_quarantine_reduce+0x148/0x160
[  243.851093][T12337]  __kasan_slab_alloc+0x22/0x80
[  243.852679][T12337]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  243.854678][T12337]  __alloc_skb+0x112/0x2d0
[  243.856346][T12337]  tcp_stream_alloc_skb+0x3d/0x340
[  243.858008][T12337]  tcp_sendmsg_locked+0xf38/0x5620
[  243.859642][T12337]  tcp_sendmsg+0x2f/0x50
[  243.861042][T12337]  __sock_sendmsg+0x19c/0x270
[  243.862563][T12337]  sock_write_iter+0x258/0x330
[  243.864190][T12337]  vfs_write+0x5c9/0xb30
[  243.865672][T12337]  ksys_write+0x145/0x250
[  243.867203][T12337] 
[  243.868099][T12337] Memory state around the buggy address:
[  243.870183][T12337]  ffff888113eecf80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  243.872954][T12337]  ffff888113eed000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  243.875582][T12337] >ffff888113eed080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  243.878216][T12337]                                      ^
[  243.880051][T12337]  ffff888113eed100: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  243.882858][T12337]  ffff888113eed180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  243.885898][T12337] ==================================================================
[  243.889032][T12337] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  243.891412][T12337] CPU: 1 UID: 0 PID: 12337 Comm: syz.3.2744 Not tainted syzkaller #0 PREEMPT(full) 
[  243.894672][T12337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  243.898222][T12337] Call Trace:
[  243.899369][T12337]  <TASK>
[  243.900440][T12337]  dump_stack_lvl+0x99/0x250
[  243.902092][T12337]  ? __asan_memcpy+0x40/0x70
[  243.903500][T12337]  ? __pfx_dump_stack_lvl+0x10/0x10
[  243.905119][T12337]  ? __pfx__printk+0x10/0x10
[  243.906570][T12337]  vpanic+0x281/0x750
[  243.907829][T12337]  ? __pfx_vpanic+0x10/0x10
[  243.909533][T12337]  ? irqentry_exit+0x74/0x90
[  243.911084][T12337]  panic+0xb9/0xc0
[  243.912415][T12337]  ? __pfx_panic+0x10/0x10
[  243.913903][T12337]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  243.916086][T12337]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  243.918358][T12337]  ? __xfrm_state_insert+0x8af/0x1450
[  243.920339][T12337]  check_panic_on_warn+0x89/0xb0
[  243.922037][T12337]  ? __xfrm_state_insert+0x8af/0x1450
[  243.923735][T12337]  end_report+0x78/0x160
[  243.925176][T12337]  kasan_report+0x129/0x150
[  243.926864][T12337]  ? __xfrm_state_insert+0x8af/0x1450
[  243.928626][T12337]  __xfrm_state_insert+0x8af/0x1450
[  243.930462][T12337]  ? xfrm_state_insert+0x44/0x60
[  243.932236][T12337]  xfrm_state_insert+0x54/0x60
[  243.933848][T12337]  ipcomp6_init_state+0x655/0x900
[  243.935514][T12337]  __xfrm_init_state+0xa76/0x13f0
[  243.937174][T12337]  ? __xfrm_init_state+0x7ef/0x13f0
[  243.939172][T12337]  xfrm_init_state+0x18/0xa0
[  243.940940][T12337]  pfkey_add+0x1d38/0x2e00
[  243.942426][T12337]  ? __pfx_pfkey_add+0x10/0x10
[  243.944090][T12337]  ? kmem_cache_free+0x18f/0x400
[  243.945984][T12337]  pfkey_sendmsg+0xbfe/0x1090
[  243.947675][T12337]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  243.949612][T12337]  ? aa_sock_msg_perm+0xf1/0x1d0
[  243.951290][T12337]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  243.953246][T12337]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  243.955035][T12337]  __sock_sendmsg+0x21c/0x270
[  243.956650][T12337]  ____sys_sendmsg+0x52d/0x830
[  243.958329][T12337]  ? __pfx_____sys_sendmsg+0x10/0x10
[  243.960142][T12337]  ? import_iovec+0x74/0xa0
[  243.961842][T12337]  ___sys_sendmsg+0x21f/0x2a0
[  243.963405][T12337]  ? __pfx____sys_sendmsg+0x10/0x10
[  243.965294][T12337]  ? __fget_files+0x2a/0x420
[  243.966871][T12337]  ? __fget_files+0x3a0/0x420
[  243.968555][T12337]  __sys_sendmmsg+0x227/0x430
[  243.970213][T12337]  ? __pfx___sys_sendmmsg+0x10/0x10
[  243.971959][T12337]  ? do_futex+0x333/0x420
[  243.973436][T12337]  ? fdget+0x184/0x1e0
[  243.974929][T12337]  ? rcu_is_watching+0x15/0xb0
[  243.976503][T12337]  __x64_sys_sendmmsg+0xa0/0xc0
[  243.978165][T12337]  do_syscall_64+0xfa/0x3b0
[  243.979808][T12337]  ? lockdep_hardirqs_on+0x9c/0x150
[  243.981867][T12337]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.983877][T12337]  ? exc_page_fault+0x9f/0xf0
[  243.985499][T12337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.987607][T12337] RIP: 0033:0x7f7ec358ebe9
[  243.989196][T12337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  243.996201][T12337] RSP: 002b:00007f7ec44e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  243.998906][T12337] RAX: ffffffffffffffda RBX: 00007f7ec37c5fa0 RCX: 00007f7ec358ebe9
[  244.001408][T12337] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000003
[  244.004118][T12337] RBP: 00007f7ec3611e19 R08: 0000000000000000 R09: 0000000000000000
[  244.006878][T12337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  244.009553][T12337] R13: 00007f7ec37c6038 R14: 00007f7ec37c5fa0 R15: 00007ffe78543948
[  244.012163][T12337]  </TASK>
[  244.013948][T12337] Kernel Offset: disabled
[  244.015310][T12337] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:32:20  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000007 RBX=0000000000000002 RCX=ffffffff93494888 RDX=0000000000000008
RSI=ffff888109a6c4c0 RDI=ffff888109a6b980 RBP=0000000000000000 RSP=ffffc900024ef690
R8 =0000000000000000 R9 =ffffffff823a7f10 R10=dffffc0000000000 R11=ffffed10054a0a4c
R12=0000000000000004 R13=0000000000000001 R14=ffff888109a6c4c0 R15=c4143a2d52117e38
RIP=ffffffff819d680d RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa3ee8c0c80 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fafb20f56c0 CR3=0000000115968000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f XMM01=622f617461642f76 6564752f6e75722f
XMM02=0000000000000000 00ff00000000ff00 XMM03=ff00000000000000 0000000000000000
XMM04=0000000000000000 000000ff00000000 XMM05=0000323a37622f61 652d6c616632785c
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000000000000000
XMM08=ffff000000000000 0000000000000000 XMM09=6632785c6c656261 6c2d79626632785c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000034 RBX=0000000000000034 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000012e6 RDI=00000000000012e7 RBP=00000000000003f8 RSP=ffffc90002d9ecb0
R8 =ffff88801fb68237 R9 =1ffff11003f6d046 R10=dffffc0000000000 R11=ffffffff854f3b00
R12=dffffc0000000000 R13=ffffffff99afd911 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f3b7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f7ec44e66c0 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000180 CR3=000000010e89c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff823c7a5c ffffffff823c79d4
XMM02=ffffffff89580c39 ffffffff89580af1 XMM03=ffffffff823c8524 ffffffff823c83bd
XMM04=0a00000000000500 0500000000020040 XMM05=0000000000000100 027c6e7c7fdcf103
XMM06=00000100fffe1f00 0000000000000000 XMM07=ff00000000000600 0a00000020000600
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f7ec3612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
