last executing test programs:

8m1.232998345s ago: executing program 0 (id=203):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000780)="$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")
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x405, 0x400080, 0x4000000008, 0x401, 0xc, 0x403})

8m1.123781361s ago: executing program 0 (id=204):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', <r2=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, r1, 0x31d, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0)

8m0.952831267s ago: executing program 0 (id=205):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000040)="23000000010011", 0x7)

8m0.752128529s ago: executing program 0 (id=206):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

8m0.462864029s ago: executing program 0 (id=207):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x2, [@enum={0xb, 0x1, 0x0, 0x6, 0x4, [{0x5, 0xffffff01}]}, @var={0x7, 0x0, 0x0, 0xe, 0x3, 0x3}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x1}, {0xb, 0x4}, {0xc, 0x1}, {0x6, 0x2}]}, @enum64={0x4, 0x3, 0x0, 0x13, 0x0, 0x7, [{0xa, 0x80, 0x800}, {0x9, 0x5700, 0x5}, {0x1, 0x60ad6bc4, 0x6}]}]}}, 0x0, 0x9a, 0x0, 0x0, 0x5}, 0x28)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36)

7m59.884813715s ago: executing program 0 (id=208):
r0 = syz_open_dev$video4linux(&(0x7f0000000480), 0xd, 0x123002)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x8001, 0xfffffffc, 0x300f, 0x6, 0xc, 0x4, 0x2, 0x6}})

7m59.649288287s ago: executing program 32 (id=208):
r0 = syz_open_dev$video4linux(&(0x7f0000000480), 0xd, 0x123002)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x8001, 0xfffffffc, 0x300f, 0x6, 0xc, 0x4, 0x2, 0x6}})

7m27.500971743s ago: executing program 3 (id=477):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103001)
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000680)=0xffffffe6)

7m27.160949822s ago: executing program 3 (id=479):
ioctl$sock_proto_private(0xffffffffffffffff, 0x89ee, &(0x7f0000000180)="cf8265014fe23a9af6cf0cc57e6b1fba64628dcdffa4e7211a3243bc8c14f758ed8659e97b91f9fc3426facac6175587d1f900c4398a5655150ae9c8be4b946410350bf2ce0a4590ec4af6c2d70d91c4193afcf7dce4590cb535168da490fa52d36e3563de57986e0b854a917b94c7fd6b8de4717ef5ad7f97681bf2ac8284c76dd613ba8b5cb834")
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000200)=ANY=[], 0xf)

7m27.017959682s ago: executing program 3 (id=480):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001e008d2a28bd7000ffdbdf25", @ANYBLOB='\x00\x00\x00\x00\b'], 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x40000c0)

7m26.842667295s ago: executing program 3 (id=483):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./bus\x00', 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="646973636172643d3078303030303030303030303030303030342c75737271756f74612c696f636861727365743d61736369692c6572726f72733d72656d6f756e742d726f2c6e6f696e746567726974792c6e6f71756f74612c6e6f64697363617264006e6f71756f74612c6e6f696e746567726573697a652c646973636172643d3078303030303030303030303030303433612c696f6368617273657423ad8ccfb725cd9fcaeb67a029573d6d6163726f6d616e69616e2c6e6f696e7465677269646973636172642c646f6e745f61707072616973652c646566636f6e746578743d73797361646d5f752c7375626a5f747970653d7b5b2c736d61636b66736465663d6e6f696e746565726974792c66756e633d43524544535f434c45434b2c61756469", @ANYRES8, @ANYBLOB="2c6d65b47d7189617375"], 0x1, 0x61e2, &(0x7f000000d7c0)="$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")
rename(&(0x7f0000000000)='./file2\x00', &(0x7f00000005c0)='./file0/file0\x00')
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0)
link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='.\x00')

7m26.53044023s ago: executing program 3 (id=487):
pipe2$watch_queue(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x14)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x1)

7m26.163547062s ago: executing program 3 (id=491):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3)

7m26.008208774s ago: executing program 33 (id=491):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3)

7m12.557294434s ago: executing program 2 (id=606):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x445b, &(0x7f000000cd40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x0, 0x0, 0xffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22)
lseek(r1, 0x0, 0x3)

7m12.127666674s ago: executing program 2 (id=611):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x980903, 0xfffffffc})

7m11.797945356s ago: executing program 2 (id=614):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r0, 0x4000)
close(r0)

7m11.717585097s ago: executing program 2 (id=615):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303031373737373737373737372c6e6c733d63703934392c63726561746f723d7af940e22c63726561746f723d0aee18b02c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c63726561746f723d1362a84f2c001ff9431eef5603a24fd03ed91e53947f1c1b0db87d311ac2332606851a5634c431970f558844dd9de7c5411a6a043cd24b8dac907e9e8575657ddeae1a3b6113873ccbc19593f645cac58983c2694a9c166df86f5cc5fdb0a4f7285667940bab9d107a53ca4f3f986662f9c2050388a55392282348754d"], 0x1, 0x6f4, &(0x7f0000000680)="$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")
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000640)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x10, 0x6, 0x10001)

7m11.680478988s ago: executing program 2 (id=617):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840))
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
close(0x4)

7m11.455271765s ago: executing program 2 (id=620):
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x2}}}}, 0xf)

7m11.201077877s ago: executing program 34 (id=620):
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x2}}}}, 0xf)

6m51.994658427s ago: executing program 4 (id=748):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, 0x0)

6m50.187574825s ago: executing program 4 (id=764):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a31000000000500050002000000110003"], 0x4c}}, 0x2)

6m50.032263021s ago: executing program 4 (id=765):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0xdf2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x71, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x20, 0x18, 0x7, {0x7, 0xd, "a18265cc32"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="200114"], 0x0})
connect$unix(0xffffffffffffffff, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0xa8c01)

6m48.136968006s ago: executing program 4 (id=789):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x504, &(0x7f0000002580)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3853008, 0x0, 0x1, 0x0, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000140), 0x2, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

6m47.910177779s ago: executing program 4 (id=792):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001cc0)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfe, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8054}, 0x0)

6m46.925241106s ago: executing program 4 (id=798):
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x20200, 0x0, 0xfe, 0x0, &(0x7f00000007c0))
rename(0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x4, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x8)
recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
connect$vsock_stream(r0, 0x0, 0x0)

6m46.695016216s ago: executing program 35 (id=798):
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x20200, 0x0, 0xfe, 0x0, &(0x7f00000007c0))
rename(0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x4, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x8)
recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
connect$vsock_stream(r0, 0x0, 0x0)

6m33.248673098s ago: executing program 5 (id=881):
r0 = socket$netlink(0x10, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000380)={0x18, 0x14, 0x609, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x8040)

6m32.22341037s ago: executing program 5 (id=886):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0xc)
syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x400)

6m32.034707587s ago: executing program 5 (id=887):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES8=r2, @ANYRESDEC=r1], 0x0)

6m30.735008494s ago: executing program 5 (id=895):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x220)

6m30.684085541s ago: executing program 5 (id=896):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)

6m30.466289131s ago: executing program 5 (id=899):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0xfffffffffffffde9, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x800)

6m30.243973096s ago: executing program 36 (id=899):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0xfffffffffffffde9, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x800)

2m41.117049781s ago: executing program 1 (id=4029):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)

2m40.111432489s ago: executing program 1 (id=4038):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2)

2m37.858254522s ago: executing program 1 (id=4071):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x8c43, 0x50)
rename(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)='./file1\x00')

2m37.781933827s ago: executing program 1 (id=4073):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00')
read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020)

2m37.722873459s ago: executing program 1 (id=4074):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x80c00})

2m37.612388502s ago: executing program 1 (id=4075):
fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0)
sendmmsg$unix(r2, &(0x7f0000001a40), 0x0, 0x40)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
socket$netlink(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f0000000140)='A', 0x1, 0x50, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x59, 0x20, 0x8, 0x5, 0x9, 0x4, 0x1, 0x4, 0xfe, 0xc, 0x47, 0xb, 0x9, 0x8}, 0xe)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/profiling', 0xa0442, 0x10)
ppoll(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f0000000040)="05000000010000", 0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0xf, &(0x7f0000000340)=ANY=[@ANYRES8=r3, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m37.415049265s ago: executing program 37 (id=4075):
fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0)
sendmmsg$unix(r2, &(0x7f0000001a40), 0x0, 0x40)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
socket$netlink(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f0000000140)='A', 0x1, 0x50, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x59, 0x20, 0x8, 0x5, 0x9, 0x4, 0x1, 0x4, 0xfe, 0xc, 0x47, 0xb, 0x9, 0x8}, 0xe)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/profiling', 0xa0442, 0x10)
ppoll(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f0000000040)="05000000010000", 0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0xf, &(0x7f0000000340)=ANY=[@ANYRES8=r3, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m19.464365278s ago: executing program 8 (id=4272):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x8, 0x8167, 0xe})
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc})
r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x1000008, 0x1, 0x7})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})
close_range(r0, 0xffffffffffffffff, 0x0)

2m19.370487085s ago: executing program 8 (id=4276):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0xc, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)

2m18.351230396s ago: executing program 8 (id=4283):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x144, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @mark={0xc, 0x15, {0x35075c, 0x6}}]}, 0x144}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f30216000000001c00000000000002001b0008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0)

2m18.270279527s ago: executing program 8 (id=4284):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xa}}, {@nomblk_io_submit}, {@auto_da_alloc}, {@minixdf}]}, 0xfe, 0x572, &(0x7f0000000240)="$eJzs3U1rVFcfAPD/nSS+JD4aQeRpFyXgohbrxCR9sdCFXZZWKrR7OyTXIJk4kpmISYXqom66KVIopdLSD9B9l9Iv0E8htIIUCe2imyl35o6OyUwS42hG5/eDq+fcc6/nnrn3fzxnzgwTwMCayP4oRLwSEd8kEYfayoYjL5xoHrf24NpstiVRr3/6VxJJvq91fJL/PZZn/h8Rv30VcaKwsd7qyupCqVxOl/L8ZG3x8mR1ZfXkxcXSfDqfXpqemTn99sz0e+++s/HkvTtr6xvn/vn+kzsfnv762Np3v9w7fCuJM3EgL2tvx1O43p6ZiIn8NRmJM+sOnOpBZf0k2e0LYEeG8jgfiawPOBRDedQDL78vI6IODKhE/MOAas4AMs25/abz4PrLN8u7/0FzAtRq+6P2J833RmJfY240upY8NjPKXonxHtSf1fHrn7dvZVv07n0IgC1dvxERp4aHH+v/DkZb/7dzp7ZxzPo69H/w/NzJxj9v7u0w/ik8HP9Eh/HPWIfY3Ymt479wr/OZO1wEWicb/70fncZ/Dxetxofy3P8aY76R5MLFcpr1bVk3eTxG9mb5zdZzTq/drXcrax//ZVtWf2ssmF/HveF1TZ0r1UpP0+Z2929EvLrF+DfpcP+z1+PcNus4mt5+rVvZ1u1/tuo/R7ze8f4/muskm69PTjaeh8nWU7HR3zeP/t6t/t1uf3b/Rzdv/3jSvl5bffI6ftr3b9qtbCLJF02f8Pnfk3zWSO/J910t1WpLUxF7ko837p9upn9sy7eOz9p//Fjn+N/s+d8fEZ9vs/03j9zsemg/3P+5J7r/XRL1pGvR3Y+++KFb/dvr/95qpI7ne7bT/3W+0tG89GmeZgAAAAAAAOhfhYg4EEmh+DBdKBSLzc93HInRQrlSrZ24UFm+NBeN78qOx0ihtdI91vZ5iKn887Ct/PS6/ExEHI6Ib4f2N/LF2Up5brcbDwAAAAAAAAAAAAAAAAAAAH1irMv3/zN/DO321QHPnJ/8hsG1Zfz34peegL7k/38YXOIfBpf4h8El/mFwiX8YXOIfBpf4h8El/gEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp09m231tQfXZrP83JWV5YXKlZNzaXWhuLg8W5ytLF0uzlcq8+W0OFtZ3OrfK1cql6emY/nqZC1NapPVldXzi5XlS7XzFxdL8+n5dOS5tAoAAAAAAAAAAAAAAAAAAABeLNWV1YVSuZwuvVyJQt68bZ91MD+hHy7+xUoM98dlSPQ4sYudEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACs818AAAD//0efKxA=")
syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

2m18.133579562s ago: executing program 8 (id=4287):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b", 0x2}, {&(0x7f0000002800)}, {&(0x7f0000000400)="c5002252c795ec6118", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000000240)="06e680be8b5ee435beedb3b8d51690a05aa2e3aa484b54c100a1e8c37f49448bf9da9953cc62044c7884b45fa051e99263eaf7cfb9bec6496131dc8a8eb4481ab2335032c27858791c5da8bd5f45ff43be3e461b9d901fddba910b518868", 0x5e}], 0x5}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f0000000540)="f2e6", 0x2}], 0x2}}, {{&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000300)="db6a17c67d10beecea12519c84fe5395a32ca73436ce6975b46e5aaff7be26a1dff05c02a3e57710a7289df43f1d96dc1910a0d0e141e1ffd99503fa87475cd9552b0de94dc481d078c634a329327a61d069e7afd887", 0x56}, {&(0x7f0000000440)="028d9a7c7dc3d9decf249e204d8fd31920b3ceaf81d132403d926018086f8183304c9ba0791798c013e7d20c659eaa2171981edb1c37928d2a466c7192bb0c5534672b04798af4bbb1486bdf1e9e49f862f7cb464c3cf7aaa2d18bd01ab0f21a0c65f36ca0696f91f6424b6b635e0ed21be4476746c0f666166dc302bacec49a795f97869cbf1c3a91e6ca5bbcf281433f54f005bbc0c9858beea8715b67fb97cbced0995c9220e5f14ddb7016abec23fb", 0xb1}, {&(0x7f0000003040)="c2422c8f5871fa831a193a42f518527816f1c875256172ea6aa732c9751726dd8ab0ba95ed47e49814e85d2f533142bcd9d251e305560c3b4f249410673fa006932a1ad4b678f44486c82fd9d34267e10cb2f1221dd3a8dd8f97b6616f3d8117ff98c3a57b5cab6a82d6054f460e52daebacfec0a1c40f4e448198cbd867953924ab73664fef653ea6b68fb8ffe6ca47b7a5dd7c870a420009f0f64e2a1c9859894f32f3d1ab08c2776043b660f755fecc592d2dfacac54a68b28f53ea85e762889717f9b202911f96dd0f786bbe173d231e8893ad0b312824962c935dd0317c4ef63774aff30c04961a4f56ab432dbb9124a48cea6b7aee1708ba3ad5923f9c46df81c7f9e0135d2627885e6a0396dbcb230e05936680d360f0a1629704223afd6caf84ab6200dc3d8368b27ed96be735160261f5cc2d50eeef5375f5d04101a8c4e5a37f895560d0f2513b449e0d0a7b47987584ae361ae566b88bdb7627def2b3da8f165cf03ebaa8a85732507f6217d92ec79f03a30844d701123993d2d4ab63733364cbf68aaf14eb7f7bb1eed8bceead0100cc6d29188486b3572033591ad0c6914a368c1332492e89ae422508db0c807f8f72251f5a37732a896c5df3a8edcbc54bd5e7fcddf6dcd5bf5c17a36edecc7f25b77b1b13528f58e34addb6871b807f5ef3586d1fce39fd1f2eebe16e69039d671b937573271091a216a68cca643f89d352b13be47d1e28fdd74d0d60e059e05f7f7cd37a61b96f28c5c0885d0e6263f69821409de67b900a0860893694377e5444be92fc2374b58deff016d4581230ec59585f06c540a72bc23237a9040d0349ecd310929010766ce9bad04da8d7f0e77f32513420a9aea42eee3ecfba29fff188465be5ed711d6f582d0913d16e1b0e849bb8f0a20755437b50aca6fd467889710645af432553bf1cb78202d7c36479f511f4f2475e59f5be02400b0bf2e364f2131babe9ab9dc72f5a24a09fb1fbdb3adca7f66086ba39dc4748a0a7ae6c895b232b7e75c1b43d54953c4ee2441c6e8bf622d2a20a8e3ead92945b6497078aa0f4615e161d631ab8887431a15cd54870de0bd6b6de7089f71472e6f7923953999c1aed73d109ade53ad6a478da0be3f09f13b08ad9242e4003e3a6e5a20f6e27c045d7c97ad9613c85ae806e09e771614855ac4c7a20f8bbab813a78e5fd9b66486f67c000163a6a5e79172acb07e35d4afa371bef7a7a02c485f35bae6a5667529241d68240b3c668ebab7f3fd461f16583de4e9feff7da406320153364e83bd48aa84417fc25857df9718ca0c602dfd1d637007f6af1cd2633c99a4d4713b010f75aabd23ad01d9df4f4e69b093f5531cec35341ddee469271fdce6651ff7e42217ff772c04d0cb0f3ab13da133780e6d3406af53d662b2c522afce345e8dcb50ea7585661ae7207ac6521f5e23d16b427aa8da0cca63fc06380b120eb476d90394249e168dde6ebbd60b1bcde0f3a967a10c9499065c588a9b471f700c35e0cb2653fe2bc6f0bf68aff27650002c695e01411c799074c1ef418840b710305d7bc7cbcde1c379f4875e67a01b94f4da22ced85e8fdee8777bf5a700b2b875f30c45cf08a183f3a8a229456bea40377a7f079bd668d4913509e80e2fd9319208362a653032ddfe7f114bc32461fbd409ada4fe8eb42bf58bc26fd7f8feab3d6ef64674876ec53ab9d73dba18b34c74502441704597668bf5c6dae1ee68c9286b017bb3571b0361c50a5426bea75d59a3633c3864db63b9eb957f0f28c64843dc5951766bdb4591dad2f2aed615d3af9d0a75505b24b20b0b212b857055ad551315f10552a67fb0063610332adfb2624158699c9031a44252f8c650e1e463a336615efd17e86e5fb01d78cf98d668bb981de5570ce216a01a052ee972fefa1f628f3f63174e15290c14f95745953e1e110ad725b2d68144c112e6c78b45552ec678fa0be8f96e3285e1c37357cee1b2673e04e3515b858421e310737652dcbc4bd7fb9f397c8c9cfc1d10c89ca6ff5617630ae2173fce88a692b8da12fe18605af029b50ff25ac1dd2d451c9867247fdd0267f56c2f0ee183190cf890be19b19d8441a99450c3dd0ab07ecedf2477df70a8e655b25688a777f70bb76cfd2b1aa24de77db82723cb8972ae391b98f445614fd9696d0af81805077c97735750e4bf02b52283f8369bda5a6f9536044af0620f5b2513319ae8e7161306a84ac796845947e0c895127f518daa0402255c72006a77fe50fe4b2124d2cd3703e764240c72837abd27c9371ad0574e4796c05561dd28097fe1b2012f44201b560a0c1711a53f754c30b4e000971e02957c390e8667759ea4ef45b6cd1128d2e353f4d27d9d82031f284c44fcd1e586c3768f460a4d290818d9e15e7c3d95518facd74cc1ef3ed8d3daa9b30ff50a68e5a7f2f28329c88834dedad23dd2c445df40ed277c12c170a6e022b793ac6e78e2e0f594309510181278e1f8e6f2be9ea810c680159b1e1698804507b8c3ca301958d124c8574c7631d41cbf9df95a9727b6c6533ba7b450d83245b1ef42c1855abfcbb108f072fab9fa742c52a54c4dfe0f2cb601edb2a23026a35fe33b4cd1adf5947b09b091acbc2c5f0e14c08cd2ca5a6938db51e0d3d9968026041771a34cd796f13e81d2de9f7f22d4684665c793e4ebe37b52e28abfefa1b8474f774afb086c5d6f7b31dfb6f08307e8c6f80fe7091f7f6fd5649d77134f05d435d0b1a95c0f8cf062e49ee525d8565a1bbb5875cd95f1c549b030563df2fd637584eaf6bdcae8579904e1af552f6ad5f6bc95ae4ad6b96b8d35a171931150b3f1461c14c103445580f622cc3c7444aaa42fd4cbbfad317c3c344984af05de15f7cb5b459776ede3208d25565708ebaa719ddd2e31c92c24e20c4c689ca5f9dcd315e30e5c269365a39d208fd713c8cafc3b6243747169355aaa174b7dc78edcc1742b7275ee9d5ee83374f8c8de1b56eef2b9ded91046c8f13e49d3dfe7e870b309986bce9fda88b4bb5deec1be853d80bee4faadcc4603e3a456d6c60afd3ed7dbabdbeee55de2d68805cc4ac888de6a461f95b2aef0b6a75c0a74c96fd48582cafa25437b1fe9e7d3b58bc24463d8916cd4a90d801c0f73dd91b6be6ce336a16a02ef4622f7defd533012083f22319380eaf4f2c4dc9d870e512264452001e3f95201e7496d10e11bda90c759de71ecd4396009a370e1e784055b18816126802ae35b5b05b78e95344d1375fd821bab594af81cd438cd11f950fff01a18e0a4ea838511244c55ed6a412b437ed3dc9128e533eb7392a637144400a29eb77539752e433908a20e5562cc903d76be819b601c3c48f5f4386d0edbf54dd096df112f0c02a00dd89e1567702df09f85e1db5a215f3221cb724d1583802483adc7ff1609a4c65ed54686ee6e514af25da27b25d9ab0894e73ba588c82c6faabbc42b3bf4153a3da8a148540826d3c774a5126595449e8c4671cacbad5c1be8488b5a34b9bc300ebe9dd2526d10d992c539ac790df7db299e5ab188131fc3c08661b8ee7be361403457df66b541a56c2de6f9f3e05b2156b942858e92fddfcd3e0452ae8d957f9693d3c676793b237edb8cd1e8a0a0f14cdaf14ed58a7b166360f7a0964008c3052bd1d203a8b61f6ae00fad4a88ce6bda9fc98b9eebe43c9432d512ad3db6373fd923ac69e07074f7495b950e30edf07a84de42aef76ba61b8ca64ce6a5b3b326e924b58255330e397b187cfe5d4ddbdc22caaa61d00cc3fa6c5907be688d75c5976f1f6d956aa3fd4eaa0361697e163f842fe0ae39ec28d9cf2f1696a84f9995e3df7f1a8190fa7af1aab6d50acd2570f699df9237e81ecc4837aebad153d46904fb3d18aa7f0aa125d93a4f3f57888612a2323929331bc6c1ad154854ecdd291c74d2c7446de84c9ee0a7c8743e925206ebb3d9db8ea179f1b0b1e42923c6313091164b1a553243a5df7137479b158b9607a1682d379816a58ce6e4d7e6c3e92bc8547ef792ba38a504888b9b42dd9f92b2d023260d0b4f6cd3f8ff4c6007c8fb70e5662fa33e0b161fb95c1d4759b811b0b7b1b4f8f1e61dd98688599be3a7f91a129fc26d59282737ff97eeb297ebe40b1e1682554d171a2ff2f0836e6228220034eb9d138ba7c70d71fcf24401187bde83537e38095b62781f21b49286c83de992ad3e6752d75b6a8f32d2e1459dce50ee4b1fcf61815a12c9b2e7badb0e1f1c015fc0388794ae1391c00a0385afeb5200c098cef2a87914ef43e3f5a65dcc9980a08a742579794cc2eef35d81c464c1fdaae3b4089400ba1cabedae7c3b034f3fbbf0af56262f04264738c7a00cb2fb5cc397264d7adef0042af38799c419786a1e78f6ca6d505205e4dca3106243ed50678ebb53409a5de3047efc8301e762199564db69292656d7d94a6dc6b11b710f78540f707c1f68be36e18cedfd9be83720ece867dd62ffb237395ae8be9937ffad1ad8d0ca2fc7de4f90a1b7b3bdb60eb6cca1b03d16c76a8bbeef4901f1bdaf20cfc9b7be8ce9babfa33983da3c283863d3f33f42b70786501fa51d0b9670988a18d482df7da84134e686183eb273e3438e1df8ec99c7011700b386fdd8b97de15c8422e3fda5d1fa5d7fd91d0efabf963b3ccc41527c8648c20a253a8dbd37ca8ca34df4988fd37b3e8cf375a3d3dc7f3bde3f0a4eb79f2779132f6", 0xd14}], 0x3, &(0x7f00000003c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x9}}, {{&(0x7f00000005c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000680)="cfe8a11f41791e5676ed67571c05417ae7", 0x11}, {&(0x7f0000000940)="01f6e883f4aa68617c2a4ee06224007ad07bc6771dd012152784849c119394e54f48d1071c1400e6b396767ffd19777e1f3f36849febade8952b507455d9fa443c7929ac600f5524ac257bb4873a0f7677c45370029ea99cfd6f30b4e05793de2937c7d4f4806988878dc66d9555e2889ba0a247c6f97ea09975373d95a6a3b600ed4e8c7a33184ec0e1eaf1016888b2b2", 0x91}], 0x2, &(0x7f0000000880)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}], 0x18}}], 0x4, 0x4000000)

2m17.310352704s ago: executing program 8 (id=4295):
r0 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x101002)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0xa, @pix={0x0, 0x3, 0x32315659, 0x3, 0x7, 0x4, 0x9, 0xfeedcafe, 0x3, 0x0, 0x8002, 0x4}})

2m17.15818203s ago: executing program 38 (id=4295):
r0 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x101002)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0xa, @pix={0x0, 0x3, 0x32315659, 0x3, 0x7, 0x4, 0x9, 0xfeedcafe, 0x3, 0x0, 0x8002, 0x4}})

2.787626393s ago: executing program 9 (id=5952):
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='shortad,partition=00000000000000000005,noadinicb,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00\x00\x00=', @ANYBLOB=',nostrict,\x00', @ANYRESDEC=0x0, @ANYRES64=0x0], 0x1, 0x489, &(0x7f0000000580)="$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")
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000080)={@id={0x2, 0x0, @c}})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SELLOADLUT(r0, 0x541c, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(r1, 0xe, 0x0, 0x0)
getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f00000001c0))
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
move_mount(0xffffffffffffffff, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x40942, 0x0)
setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000a40)=ANY=[@ANYRESOCT=r2], 0x34)
write$cgroup_type(r5, 0x0, 0x0)

2.085864333s ago: executing program 9 (id=5957):
openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58)

1.937817987s ago: executing program 9 (id=5958):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0xfdef}, 0x1, 0x0, 0x0, 0x20000090}, 0x50048)

1.165983175s ago: executing program 6 (id=5960):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='ext4_error\x00', r0, 0x0, 0x1}, 0x18)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x2004d95, &(0x7f00000000c0)={[{@barrier}]}, 0x1, 0x523, &(0x7f0000000a80)="$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")

1.103088914s ago: executing program 6 (id=5961):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$dsp(r1, 0x0, 0x0)
r2 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x33f9, 0x10100}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x3516, 0x41e3, 0x0, 0x0, 0x0)
write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)

1.102459955s ago: executing program 6 (id=5962):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x89}, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10)
shutdown(0xffffffffffffffff, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@loopback, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00'], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)

793.128265ms ago: executing program 9 (id=5963):
r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000004c0)={0xb, @sdr={0x39494562, 0x5}})

675.148155ms ago: executing program 9 (id=5964):
r0 = socket(0xa, 0x801, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000a80)={'gre0\x00', &(0x7f0000000a40)={'gre0\x00', 0x0, 0x8, 0x80, 0xc2b, 0x9, {{0x6, 0x4, 0x2, 0x6, 0x18, 0x64, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@lsrr={0x83, 0x3, 0xd2}]}}}}})

622.364062ms ago: executing program 9 (id=5966):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84642, 0x0)
r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000440)={0x0, 0x7734, 0x8, 0xfffffffe, 0x34c}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x18, 0x0, 0x0, 0x4}]}, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0xfffffffffffffd6b)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0xc}, 0x0, 0x0)
write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6b4e9", 0xb)
openat$fuse(0xffffff9c, 0x0, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x4e21, @multicast2}}}, 0xffffffffffffff90)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, 0x0, 0x0)
getsockopt$inet_buf(r3, 0x0, 0x29, 0x0, 0x0)

408.466633ms ago: executing program 7 (id=5967):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="33eedd982748fcbb96b66be12ff2458eba27fcaf409aec984c9ca4d5178de9da51b67c43415a98", 0x27}, {&(0x7f0000000140)="e24718d515874dbe17581dcf2b76b71141ef76704133450905cae4f123148519843553f164ed478cfe4d6c9ce8b8ee11c69322676eee001f41", 0x39}, {&(0x7f0000000380)="8cff8450a8294970d6820eb72ad492dc08fe9abe1c33baa2e3bee59eee2c569ca6e33f9433dd0165b9738810881992edecd43ab186d56f116e85fea9bf858cc2dc26ca0b52c7314d3dc7136776e216145fd6adbd3a95aa8d9ba37acd1942db339a4d556a70b100ea4fbfdd7f61f510fccba3636c476a619d19da549392f216fc989cd5d40085e4cfd56399ce4aa33aedd67ae21aae03960fded593f1c4c2c1e98c76b26c28539477548fea180f204c56f7a2135779977b0db91828daa5080be7da1b1b9089252172d8da5f8a95060dac0215e68f8dc710", 0xd7}, {&(0x7f00000006c0)="52fdf623d88b43c66f03bd053dea81fdaf540174b3d04f5acfb71d5769d3f9d66c579a732ca9e2754ab85ada69e9cce5a4ec56ee4e9cf72e6df9ff6422325e1daddcc88e24c9a1885bcf62da4c4dd02fd6b79d5524238de59e56e2faa653b57b9ed9ecb688cc20bdbe", 0x69}, {&(0x7f0000000480)="36e23fece2db26c81f5ad0a779e87a6af45f6dfb69517d830642e84a89d8754e7274d981c3192d5f1dc8ad2d18a2f41ea4fc3f45c51685ee01bf5ce546a49d6b43570bb66f89a78a63f14fd058bb9a482d6c937c9ce0eab373534dc7a1ffcd74f6cadbc91a7850d29a97ba9ed2c60b70aa7545163df2004561d8437d30de5ccbc50a3accefe511e1a2fb3941eb63471f4c84ab93d9e8dc78e2a2830509147a053f4eebb677b702f7361304230412f67027b5373c7bcb029e9a16cfe438f884c62a992b45c4fea81e29d4d07c12b5eb8dec28bdaf8be6103a984d49af61b4fd6907db0d19422e12", 0xe7}, {&(0x7f0000000580)="52c41e9b212f9748e6095c684f41173938baacdbc434e55d503f599a70c62e0e975769bbd3b21ad3620168f4aafd724c3495c07479b761fc56b45862431629aa57388af7b632db4c66804869d688673883af26591f", 0x55}], 0x6}, 0x20000004)
recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000a80)=""/241, 0xf1}], 0x1, &(0x7f0000001d00)=""/4067, 0xfe3}, 0x0)
close(r0)

301.674934ms ago: executing program 7 (id=5968):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f0000000100)={'macsec0\x00', 0x1})

301.219812ms ago: executing program 7 (id=5969):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38)
write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x2, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x1, 0x0, @time={0xffffffff}, {0x4, 0x3}, {0x0, 0x4}, @time=@tick=0x5}, {0xff, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0x0, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x0, 0x4}, @raw32={[0x0, 0xffffffff, 0x5dd]}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x3}, {0xa}, @quote={{0x1, 0xfe}}}, {0x0, 0x0, 0x0, 0x5, @time, {0x2}, {0x0, 0x49}, @addr={0x1, 0x7f}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @quote={{0x2, 0x2}, 0x9}}], 0xc4)
read$snapshot(r1, 0x0, 0xffffffbf)
read$char_usb(r1, 0x0, 0x0)

225.861248ms ago: executing program 7 (id=5970):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x54c, 0x4, 0x3, 0x3, 0xc, 0x6, 0x7}, 0x1c)
recvfrom(r0, &(0x7f0000000040)=""/18, 0x12, 0x6667b9fa4a4fda0, 0x0, 0x0)
close(0x3)

171.251262ms ago: executing program 7 (id=5971):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x300, {0x7, 0x0, 0x0, r2, 0x1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4c840)

132.435775ms ago: executing program 6 (id=5972):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, <r3=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000300)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000380)='\a', &(0x7f0000000400)=@tcp6=r0, 0x1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x2a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50)

66.861788ms ago: executing program 7 (id=5973):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={<r1=>0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10)
shutdown(r0, 0x2)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000011c0)=@sack_info={r1, 0x0, 0x10000}, &(0x7f0000001200)=0xc)

504.806µs ago: executing program 6 (id=5974):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40)

0s ago: executing program 6 (id=5975):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d000000018010000756cff7c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

21'.
[  362.558881][T14042] netlink: 'syz.6.3240': attribute type 2 has an invalid length.
[  362.578391][T14043] loop1: detected capacity change from 0 to 4096
[  362.638247][T14043] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  362.719553][T14030] fs-verity (loop1, inode 16): Unsupported log_blocksize: 13
[  362.850266][ T5959] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.886662][T14065] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3249'.
[  363.006447][T14075] loop1: detected capacity change from 0 to 256
[  363.470878][T14083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3256'.
[  363.530642][T14086] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3258'.
[  363.557654][T14088] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3259'.
[  363.602028][T14092] netlink: 'syz.7.3261': attribute type 12 has an invalid length.
[  363.618013][T14092] netlink: 9472 bytes leftover after parsing attributes in process `syz.7.3261'.
[  363.664407][   T26] 0: reclassify loop, rule prio 0, protocol 800
[  364.037134][T14112] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3271'.
[  364.257651][T14124] tc_dump_action: action bad kind
[  365.233131][T14144] loop1: detected capacity change from 0 to 256
[  365.235909][T14144] exfat: Deprecated parameter 'utf8'
[  365.238124][T14144] exfat: Deprecated parameter 'utf8'
[  365.246129][T14144] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  365.583906][   T26] 0: reclassify loop, rule prio 0, protocol 800
[  366.424575][T14175] GUP no longer grows the stack in syz.1.3298 (14175): 200000004000-200000005000 (200000002000)
[  366.433067][T14175] CPU: 0 UID: 0 PID: 14175 Comm: syz.1.3298 Not tainted syzkaller #0 PREEMPT(full) 
[  366.433096][T14175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  366.433106][T14175] Call Trace:
[  366.433114][T14175]  <TASK>
[  366.433126][T14175]  dump_stack_lvl+0x189/0x250
[  366.433199][T14175]  ? __pfx_dump_stack_lvl+0x10/0x10
[  366.433218][T14175]  ? __pfx__printk+0x10/0x10
[  366.433238][T14175]  ? find_vma+0xe7/0x160
[  366.433265][T14175]  __get_user_pages+0x24d0/0x2ce0
[  366.433295][T14175]  ? mtree_load+0x100/0x700
[  366.433324][T14175]  get_user_pages_remote+0x2f1/0xad0
[  366.433343][T14175]  ? __pfx_mtree_load+0x10/0x10
[  366.433364][T14175]  ? __pfx_get_user_pages_remote+0x10/0x10
[  366.433379][T14175]  ? __access_remote_vm+0x367/0x7d0
[  366.433400][T14175]  __access_remote_vm+0x211/0x7d0
[  366.433424][T14175]  ? __pfx___access_remote_vm+0x10/0x10
[  366.433442][T14175]  ? alloc_pages_noprof+0xbe/0x190
[  366.433463][T14175]  proc_pid_cmdline_read+0x430/0x810
[  366.433482][T14175]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  366.433499][T14175]  ? rw_verify_area+0x2a6/0x4d0
[  366.433521][T14175]  vfs_readv+0x5aa/0x850
[  366.433538][T14175]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  366.433553][T14175]  ? __pfx_vfs_readv+0x10/0x10
[  366.433634][T14175]  ? __fget_files+0x2a/0x420
[  366.433663][T14175]  ? __fget_files+0x3a0/0x420
[  366.433676][T14175]  ? __fget_files+0x2a/0x420
[  366.433696][T14175]  __x64_sys_preadv+0x197/0x2a0
[  366.433719][T14175]  ? __pfx___x64_sys_preadv+0x10/0x10
[  366.433737][T14175]  ? rcu_is_watching+0x15/0xb0
[  366.433757][T14175]  ? do_syscall_64+0xbe/0x3b0
[  366.433782][T14175]  do_syscall_64+0xfa/0x3b0
[  366.433804][T14175]  ? lockdep_hardirqs_on+0x9c/0x150
[  366.433823][T14175]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.433838][T14175]  ? exc_page_fault+0x9f/0xf0
[  366.433859][T14175]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.433874][T14175] RIP: 0033:0x7fec44d8ebe9
[  366.433890][T14175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  366.433904][T14175] RSP: 002b:00007fec45b24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  366.433922][T14175] RAX: ffffffffffffffda RBX: 00007fec44fc5fa0 RCX: 00007fec44d8ebe9
[  366.433933][T14175] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003
[  366.433944][T14175] RBP: 00007fec44e11e19 R08: 00000000fffffff9 R09: 0000000000000000
[  366.433954][T14175] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000
[  366.433963][T14175] R13: 00007fec44fc6038 R14: 00007fec44fc5fa0 R15: 00007ffdf3718b38
[  366.433988][T14175]  </TASK>
[  367.618475][T14213] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  367.622324][T14213] team0: Device ipvlan2 is already an upper device of the team interface
[  367.964578][T14236] 8021q: adding VLAN 0 to HW filter on device bond1
[  367.966698][T14240] loop1: detected capacity change from 0 to 512
[  367.977556][T14240] EXT4-fs: Ignoring removed mblk_io_submit option
[  367.992390][T14240] EXT4-fs (loop1): inodes count not valid: 7 vs 32
[  368.040103][T14244] netlink: 'syz.7.3329': attribute type 2 has an invalid length.
[  368.042756][T14244] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.3329'.
[  368.218865][    C0] 0: reclassify loop, rule prio 0, protocol 800
[  368.221600][    C0] 0: reclassify loop, rule prio 0, protocol 800
[  368.268011][T14260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3337'.
[  368.941017][T14283] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3347'.
[  368.945860][T14283] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3347'.
[  368.964140][T14285] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3348'.
[  369.153905][T14303] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3357'.
[  369.421060][T13497] 0: reclassify loop, rule prio 0, protocol 800
[  369.442897][T14312] loop1: detected capacity change from 0 to 512
[  369.996729][T14320] loop1: detected capacity change from 0 to 128
[  370.001039][T14320] EXT4-fs (loop1): Test dummy encryption mode enabled
[  370.011773][T14320] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  370.016399][T14320] ext4 filesystem being mounted at /988/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  370.025178][T14320] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.3364: checksumming directory block 0
[  370.103769][ T5959] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  370.446294][T14336] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  370.449498][T14336] overlayfs: failed to set xattr on upper
[  370.451959][T14336] overlayfs: ...falling back to redirect_dir=nofollow.
[  370.455055][T14336] overlayfs: ...falling back to index=off.
[  370.458097][T14336] overlayfs: ...falling back to uuid=null.
[  370.596176][T14340] overlayfs: failed to clone upperpath
[  370.932235][   T33] audit: type=1326 audit(1756635034.969:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14358 comm="syz.7.3381" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd7bcf8ebe9 code=0x0
[  371.274912][T14371] loop1: detected capacity change from 0 to 128
[  371.340493][   T36] 0: reclassify loop, rule prio 0, protocol 800
[  372.499079][T14391] loop1: detected capacity change from 0 to 65536
[  372.592744][T14391] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  372.617191][T14391] XFS (loop1): Ending clean mount
[  372.644089][T14391] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  372.648114][T14391] XFS (loop1): Unmount and run xfs_repair
[  372.650907][T14391] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  372.654130][T14391] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  372.657209][T14391] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  372.660776][T14391] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  372.663581][T14391] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  372.666899][T14391] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  372.670577][T14391] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  372.674280][T14391] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  372.677870][T14391] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  372.682233][T14391] XFS (loop1): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  372.710524][T14391] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  372.715755][T14391] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  372.756272][ T5959] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  373.370434][T14429] loop1: detected capacity change from 0 to 512
[  373.430807][T14429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  373.447626][T14433] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  373.451037][T14429] ext4 filesystem being mounted at /1002/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  373.493630][T14429] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #12: comm syz.1.3408: corrupted xattr block 6: invalid header
[  373.505342][T14429] overlayfs: failed to get uuid (/file0, err=-117); falling back to uuid=null.
[  373.508300][T14429] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #12: comm syz.1.3408: corrupted xattr block 6: invalid header
[  373.534159][T14429] overlayfs: failed to get origin (-117)
[  373.539041][T14429] EXT4-fs error (device loop1): ext4_xattr_block_find:1869: inode #12: comm syz.1.3408: corrupted xattr block 6: invalid header
[  373.548083][T14429] overlayfs: failed to verify upper root origin
[  373.581566][T14438] overlayfs: failed to clone upperpath
[  373.589428][ T5959] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.477361][T14443] loop1: detected capacity change from 0 to 131072
[  374.482299][T14443] F2FS-fs (loop1): Test dummy encryption mode enabled
[  374.487404][T14443] F2FS-fs (loop1): invalid crc value
[  374.539030][    C0] 0: reclassify loop, rule prio 0, protocol 800
[  374.541588][    C0] 0: reclassify loop, rule prio 0, protocol 800
[  374.548481][T14464] netlink: 'syz.7.3422': attribute type 10 has an invalid length.
[  374.566826][T14443] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  374.575439][T14443] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  374.697382][T14443] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  375.186791][   T36] 0: reclassify loop, rule prio 0, protocol 800
[  375.853927][T14486] netlink: 'syz.1.3429': attribute type 1 has an invalid length.
[  375.916386][T14486] 8021q: adding VLAN 0 to HW filter on device bond3
[  375.933126][T14492] vlan0: entered allmulticast mode
[  375.935756][T14492] veth1: entered allmulticast mode
[  375.945116][T14492] bond3: (slave vlan0): making interface the new active one
[  375.949855][T14492] bond3: (slave vlan0): Enslaving as an active interface with an up link
[  376.475376][ T9419] 0: reclassify loop, rule prio 0, protocol 800
[  376.578973][T14515] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3440'.
[  377.491929][T14544] loop1: detected capacity change from 0 to 32768
[  377.521738][T14544] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  377.576326][T14544] XFS (loop1): Ending clean mount
[  377.631841][ T5959] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  378.338397][   T33] audit: type=1804 audit(1756635042.369:104): pid=14586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3466" name="/newroot/1018/file1" dev="fuse" ino=1 res=1 errno=0
[  378.352022][   T33] audit: type=1800 audit(1756635042.379:105): pid=14586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3466" name="/" dev="fuse" ino=1 res=0 errno=0
[  378.360509][   T33] audit: type=1800 audit(1756635042.379:106): pid=14583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3466" name="/" dev="fuse" ino=1 res=0 errno=0
[  378.383463][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  378.387594][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  378.862408][   T33] audit: type=1326 audit(1756635042.899:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14594 comm="syz.7.3471" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7bcf8ebe9 code=0x0
[  378.953762][T14599] netlink: 'syz.7.3473': attribute type 3 has an invalid length.
[  378.958475][T14599] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.3473'.
[  379.629723][T14617] loop1: detected capacity change from 0 to 4096
[  379.656318][T14617] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[  380.406292][T14643] loop1: detected capacity change from 0 to 16
[  380.410125][T14643] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  380.614716][T14655] loop1: detected capacity change from 0 to 512
[  380.618316][T14655] EXT4-fs: Ignoring removed nobh option
[  380.637506][T14655] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.3498: iget: bad i_size value: 38620345925642
[  380.652758][T14655] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3498: couldn't read orphan inode 15 (err -117)
[  380.668455][T14655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  380.712868][T14655] 0: reclassify loop, rule prio 0, protocol 800
[  380.830303][T14659] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  380.939685][   T27] 0: reclassify loop, rule prio 0, protocol 800
[  380.977908][T14681] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3509'.
[  381.030188][ T6695] usb 2-1: new full-speed USB device number 27 using dummy_hcd
[  381.138908][T14687] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3512'.
[  381.180628][ T6695] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  381.190626][ T6695] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  381.193568][ T6695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.198798][ T6695] usb 2-1: Product: syz
[  381.200160][ T6695] usb 2-1: Manufacturer: syz
[  381.201596][ T6695] usb 2-1: SerialNumber: syz
[  381.219662][ T6695] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  381.624227][ T6695] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  382.034271][T14707] netlink: 124 bytes leftover after parsing attributes in process `syz.6.3522'.
[  382.220720][ T3537] 0: reclassify loop, rule prio 0, protocol 800
[  382.389811][T14718] netlink: 340 bytes leftover after parsing attributes in process `syz.6.3525'.
[  382.393983][T14718] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3525'.
[  383.498976][    C0] 0: reclassify loop, rule prio 0, protocol 800
[  383.603201][   T10] usb 2-1: USB disconnect, device number 27
[  383.625608][ T5959] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.707006][T14745] loop1: detected capacity change from 0 to 1024
[  383.820288][T14745] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  384.049816][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3540'.
[  384.537119][T14745] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.3538: Allocating blocks 385-513 which overlap fs metadata
[  384.546826][T14745] EXT4-fs (loop1): pa ffff8881034cce80: logic 16, phys. 129, len 24
[  384.551248][T14745] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  384.607527][ T5959] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  384.813242][T14778] 0: reclassify loop, rule prio 0, protocol 800
[  385.794135][T14795] 0: reclassify loop, rule prio 0, protocol 800
[  385.992224][T14803] overlayfs: failed to clone lowerpath
[  386.136218][T14797] loop1: detected capacity change from 0 to 32768
[  386.175908][T14797] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  386.242975][T14797] XFS (loop1): Ending clean mount
[  386.264493][T14797] XFS (loop1): Quotacheck needed: Please wait.
[  386.366269][T14797] XFS (loop1): Quotacheck: Done.
[  386.457653][T14797] XFS (loop1): User initiated shutdown received.
[  386.461142][T14797] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:466).  Shutting down filesystem.
[  386.466728][T14797] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  386.526380][ T5959] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  386.699052][    C0] 0: reclassify loop, rule prio 0, protocol 800
[  386.701775][ T1091] 0: reclassify loop, rule prio 0, protocol 800
[  386.704427][    C0] 0: reclassify loop, rule prio 0, protocol 800
[  387.759540][ T1840] 0: reclassify loop, rule prio 0, protocol 800
[  387.874389][ T1840] 0: reclassify loop, rule prio 0, protocol 800
[  387.939326][ T1840] 0: reclassify loop, rule prio 0, protocol 800
[  387.980835][   T27] 0: reclassify loop, rule prio 0, protocol 800
[  388.029074][ T1840] 0: reclassify loop, rule prio 0, protocol 800
[  388.045154][T14845] loop1: detected capacity change from 0 to 32768
[  388.062319][T14845] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  388.062319][T14845] clean (size 2912):
[  388.062319][T14845] flags:          1b70000
[  388.062319][T14845] journal_seq:    65535
[  388.062319][T14845] usage: type=inodes v=8
[  388.062319][T14845] usage: type=key_version v=0
[  388.062319][T14845] usage: type=reserved v=0
[  388.062319][T14845] usage: type=reserved v=0
[  388.062319][T14845] usage: type=reserved v=0
[  388.062319][T14845] usage: type=reserved v=0
[  388.062319][T14845] data_usage: btree: 1/1 [0]=2816
[  388.062319][T14845] data_usage: journal: 1/1 [0]=0
[  388.062319][T14845] data_usage: user: 1/1 [0]=16
[  388.062319][T14845] dev_usage: dev=0  
[  388.062319][T14845]   free: buckets=83 sectors=0 fragmented=0
[  388.062319][T14845]   sb: buckets=25 sectors=6152 fragmented=248
[  388.062319][T14845]   journal: buckets=8 sectors=2048 fragmented=0
[  388.062319][T14845]   btree: buckets=11 sectors=2816 fragmented=0
[  388.062319][T14845]   user: buckets=1 sectors=16 fragmented=240
[  388.062319][T14845]   cached: buckets=0 sectors=0 fragmented=13565952
[  388.062319][T14845]   parity: buckets=0 sectors=0 fragmented=0
[  388.062319][T14845]   stripe: buckets=0 sectors=0 fragmented=0
[  388.062319][T14845]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  388.062319][T14845]   need_discard: buckets=0 sectors=0 fragmented=0
[  388.062319][T14845] clock: read=0
[  388.062319][T14845] clock: write=1280
[  388.062319][T14845] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len
[  388.062448][T14845] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  388.113761][ T1840] 0: reclassify loop, rule prio 0, protocol 800
[  388.163140][ T1840] 0: reclassify loop, rule prio 0, protocol 800
[  388.279295][ T1840] 0: reclassify loop, rule prio 0, protocol 800
[  388.309141][ T1840] 0: reclassify loop, rule prio 0, protocol 800
[  388.352563][ T1840] 0: reclassify loop, rule prio 0, protocol 800
[  388.694807][T14856] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3584'.
[  391.018917][T14937] loop1: detected capacity change from 0 to 2048
[  391.055547][T14937] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  392.982267][T14986] loop1: detected capacity change from 0 to 32768
[  393.032379][T14986] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  393.057187][T14986] XFS (loop1): Ending clean mount
[  393.078607][T14986] XFS (loop1): Quotacheck needed: Please wait.
[  393.144765][T14986] XFS (loop1): Quotacheck: Done.
[  393.213657][ T5959] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  393.588396][T14961] kexec: Could not allocate control_code_buffer
[  393.618165][T15004] loop1: detected capacity change from 0 to 256
[  393.630133][T15004] vfat: Bad value for 'umask'
[  393.743921][   T36] net_ratelimit: 7 callbacks suppressed
[  393.743938][   T36] 0: reclassify loop, rule prio 0, protocol 800
[  394.204981][T15040] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3664'.
[  394.381560][T15054] loop1: detected capacity change from 0 to 2048
[  394.396839][T15054] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  394.664136][ T5239] Bluetooth: hci0: unexpected event for opcode 0x0c1c
[  395.286714][T15082] loop1: detected capacity change from 0 to 32768
[  395.292833][T15082] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3684 (15082)
[  395.304512][T15082] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  395.308371][T15082] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  395.311314][T15082] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  395.365472][T15082] BTRFS info (device loop1): rebuilding free space tree
[  395.383794][T15082] BTRFS info (device loop1): disabling free space tree
[  395.386224][T15082] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  395.392565][T15082] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  395.413865][T15082] BTRFS info (device loop1): setting nodatasum
[  395.416308][T15082] BTRFS info (device loop1): setting nodatacow
[  395.419795][T15082] BTRFS info (device loop1): enabling ssd optimizations
[  395.422170][T15082] BTRFS info (device loop1): turning off barriers
[  395.424652][T15082] BTRFS info (device loop1): turning on flush-on-commit
[  395.427078][T15082] BTRFS info (device loop1): enabling disk space caching
[  395.430065][T15082] BTRFS info (device loop1): force clearing of disk cache
[  395.432629][T15082] BTRFS info (device loop1): doing ref verification
[  395.434925][T15082] BTRFS info (device loop1): max_inline set to 4096
[  395.700538][ T5959] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  396.360371][T15115] loop1: detected capacity change from 0 to 32768
[  396.442149][T15115] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  396.484664][T15115] XFS (loop1): Ending clean mount
[  396.493044][T15115] XFS (loop1): Quotacheck needed: Please wait.
[  396.549841][T15115] XFS (loop1): Quotacheck: Done.
[  396.602697][ T5959] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  397.500898][   T40] 0: reclassify loop, rule prio 0, protocol 800
[  398.196960][T15200] dlm: no locking on control device
[  398.874233][ T6695] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  399.525083][   T27] 0: reclassify loop, rule prio 0, protocol 800
[  399.609555][ T6695] usb 2-1: Using ep0 maxpacket: 16
[  399.624700][ T6695] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  399.636143][ T6695] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  399.644718][ T6695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.661243][ T6695] usb 2-1: config 0 descriptor??
[  399.696292][T15228] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3740'.
[  399.944012][T15236] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3744'.
[  400.085013][ T6695] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  400.141825][T15244] openvswitch: netlink: Multiple metadata blocks provided
[  400.235966][T15246] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3749'.
[  400.511011][  T793] usb 2-1: USB disconnect, device number 28
[  401.278900][   T33] audit: type=1800 audit(1756635065.299:108): pid=15272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3761" name="nullb0" dev="tmpfs" ino=4338 res=0 errno=0
[  401.355317][T15275] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3763'.
[  401.370100][T15275] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0
[  401.416264][T15278] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3764'.
[  401.560890][T15266] loop1: detected capacity change from 0 to 40427
[  401.565107][T15266] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(262146) root(3)
[  401.568236][T15266] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  401.588488][T15266] F2FS-fs (loop1): SIT is corrupted data# 5 7 vs 11
[  401.603489][T15266] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117)
[  401.877005][T15305] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3776'.
[  402.215073][T15303] loop1: detected capacity change from 0 to 40427
[  402.267858][T15303] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  402.276656][T15303] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  402.303057][T15303] F2FS-fs (loop1): invalid crc value
[  402.307191][T15303] F2FS-fs (loop1): Current segment's next free block offset is inconsistent with bitmap, logtype:3, segno:0, type:0, next_blkoff:3, blkofs:6
[  402.315545][T15303] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117)
[  402.539824][ T4312] 0: reclassify loop, rule prio 0, protocol 800
[  402.577784][T15338] loop1: detected capacity change from 0 to 2048
[  403.565296][T15359] 0: reclassify loop, rule prio 0, protocol 800
[  403.785354][T15368] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3805'.
[  403.957061][T15359] loop1: detected capacity change from 0 to 40427
[  403.961257][T15359] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  403.964313][T15359] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  403.998529][T15359] F2FS-fs (loop1): invalid crc value
[  404.036228][T15359] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  404.047562][T15359] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  404.050928][T15359] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  404.071888][T15359] bio_check_eod: 35 callbacks suppressed
[  404.071901][T15359] syz.1.3801: attempt to access beyond end of device
[  404.071901][T15359] loop1: rw=2051, sector=36912, nr_sectors = 8144 limit=40427
[  404.081579][T15359] syz.1.3801: attempt to access beyond end of device
[  404.081579][T15359] loop1: rw=2051, sector=45096, nr_sectors = 20440 limit=40427
[  404.098551][T15359] F2FS-fs (loop1): Issue discard(4614, 4614, 1018) failed, ret: -5
[  404.101820][T15359] F2FS-fs (loop1): Issue discard(5637, 5637, 2555) failed, ret: -5
[  404.525060][T15379] loop1: detected capacity change from 0 to 32768
[  404.537491][T15379] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3809 (15379)
[  404.555501][T15379] BTRFS info (device loop1 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  404.568131][T15379] BTRFS info (device loop1 state S): using crc32c (crc32c-lib) checksum algorithm
[  404.604176][   T26] BTRFS warning (device loop1 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored
[  404.622921][   T36] 0: reclassify loop, rule prio 0, protocol 800
[  404.627784][ T1091] BTRFS warning (device loop1 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored
[  404.651664][ T1091] BTRFS warning (device loop1 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32c165c1 level 0, ignored
[  404.660077][ T1091] BTRFS warning (device loop1 state S): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0x0bc7de37 level 0, ignored
[  404.671340][T15379] BTRFS error (device loop1 state S): chunk 5242880 has missing dev extent, have 0 expect 1
[  404.675809][T15379] BTRFS error (device loop1 state S): failed to verify dev extents against chunks: -117
[  404.758170][T15379] BTRFS error (device loop1 state S): open_ctree failed: -117
[  405.326641][T15416] loop1: detected capacity change from 0 to 65
[  405.334651][T15416] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway
[  405.363595][T15416] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1
[  405.761930][T15444] loop1: detected capacity change from 0 to 16
[  405.784493][T15444] erofs (device loop1): algorithm 1 isn't enabled on this kernel
[  406.032005][T15453] loop1: detected capacity change from 0 to 128
[  406.183133][T15457] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3839'.
[  406.197482][T15457] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3839'.
[  406.854007][T15486] loop1: detected capacity change from 0 to 4096
[  407.229263][T15490] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  407.281526][T15486] NILFS error (device loop1): nilfs_dotdot: directory #12 missing '.'
[  407.298135][T15486] Remounting filesystem read-only
[  407.326976][ T5959] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  407.659966][ T3537] 0: reclassify loop, rule prio 0, protocol 800
[  408.212781][   T33] audit: type=1326 audit(1756635072.249:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15509 comm="syz.6.3861" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe8d8d8ebe9 code=0x0
[  408.312374][T15511] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma?
[  408.385058][T15517] loop1: detected capacity change from 0 to 256
[  408.408983][T15517] FAT-fs (loop1): Directory bread(block 64) failed
[  408.412196][T15517] FAT-fs (loop1): Directory bread(block 65) failed
[  408.415422][T15517] FAT-fs (loop1): Directory bread(block 66) failed
[  408.417955][T15517] FAT-fs (loop1): Directory bread(block 67) failed
[  408.422414][T15517] FAT-fs (loop1): Directory bread(block 68) failed
[  408.425206][T15517] FAT-fs (loop1): Directory bread(block 69) failed
[  408.427971][T15517] FAT-fs (loop1): Directory bread(block 70) failed
[  408.434107][T15517] FAT-fs (loop1): Directory bread(block 71) failed
[  408.437369][T15517] FAT-fs (loop1): Directory bread(block 72) failed
[  408.440142][T15517] FAT-fs (loop1): Directory bread(block 73) failed
[  408.567490][T15523] netlink: 'syz.1.3867': attribute type 6 has an invalid length.
[  409.751085][ T4312] 0: reclassify loop, rule prio 0, protocol 800
[  409.918621][T15580] bridge1: entered promiscuous mode
[  410.103202][T15594] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3899'.
[  410.106517][T15594] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3899'.
[  410.363965][T15602] loop1: detected capacity change from 0 to 512
[  410.390619][T15602] EXT4-fs: inline encryption not supported
[  410.397852][T15602] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  410.413187][T15602] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  410.422555][T15602] EXT4-fs (loop1): 1 truncate cleaned up
[  410.426444][T15602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  410.476046][ T5959] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.635951][T15611] QAT: failed to copy from user cfg_data.
[  410.747974][T15618] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3910'.
[  411.019019][    C0] 0: reclassify loop, rule prio 0, protocol 800
[  411.021807][    C0] 0: reclassify loop, rule prio 0, protocol 800
[  411.147788][T15620] loop1: detected capacity change from 0 to 40427
[  411.155463][T15620] f2fs: Unexpected value for 'grpquota'
[  411.410832][T15647] 9pnet_fd: Insufficient options for proto=fd
[  411.424999][T15649] bridge2: the hash_elasticity option has been deprecated and is always 16
[  412.949711][ T3537] 0: reclassify loop, rule prio 0, protocol 800
[  413.462460][ T6695] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  413.620442][ T6695] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  413.623874][ T6695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.630668][ T6695] usb 2-1: config 0 descriptor??
[  413.847141][ T6695] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  414.048997][ T6695] [drm:udl_init] *ERROR* Selecting channel failed
[  414.086598][ T6695] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 3
[  414.090254][ T6695] [drm] Initialized udl on minor 3
[  414.098461][ T6695] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  414.110373][ T6695] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  414.121850][ T6695] usb 2-1: USB disconnect, device number 29
[  414.126113][ T1840] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  414.130799][ T1840] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  414.173410][T15717] netlink: 'syz.6.3952': attribute type 8 has an invalid length.
[  414.185710][T15717] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  415.231379][T15785] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  415.390636][T15799] 0: reclassify loop, rule prio 0, protocol 800
[  415.499514][   T27] 0: reclassify loop, rule prio 0, protocol 800
[  415.623624][T15810] loop1: detected capacity change from 0 to 4096
[  415.634913][T15810] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  415.692323][T15810] ntfs3(loop1): Failed to load $Extend (-22).
[  415.694759][T15810] ntfs3(loop1): Failed to initialize $Extend.
[  415.888048][T15824] loop1: detected capacity change from 0 to 8
[  415.914285][T15824] unable to read inode lookup table
[  415.923743][T15826] tracefs: Invalid gid '00000000000037777777777'
[  418.701900][T13497] 0: reclassify loop, rule prio 0, protocol 800
[  419.682854][T15938] tmpfs: Bad value for 'mpol'
[  420.415938][   T33] audit: type=1326 audit(1756635084.449:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15976 comm="syz.6.4066" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d8d8ebe9 code=0x7ffc0000
[  420.432976][   T33] audit: type=1326 audit(1756635084.449:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15976 comm="syz.6.4066" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d8d8ebe9 code=0x7ffc0000
[  420.452191][   T33] audit: type=1326 audit(1756635084.469:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15976 comm="syz.6.4066" exe="/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fe8d8d8ebe9 code=0x7ffc0000
[  420.468476][   T33] audit: type=1326 audit(1756635084.469:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15976 comm="syz.6.4066" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d8d8ebe9 code=0x7ffc0000
[  420.491036][   T33] audit: type=1326 audit(1756635084.469:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15976 comm="syz.6.4066" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d8d8ebe9 code=0x7ffc0000
[  420.539616][   T36] 0: reclassify loop, rule prio 0, protocol 800
[  421.100950][   T55] Bluetooth: hci3: command 0x1003 tx timeout
[  421.139005][ T5239] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  421.831925][T15999] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4078'.
[  422.034589][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  422.034734][T16011] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4083'.
[  422.052207][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  422.057678][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  422.066869][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  422.076710][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  422.145246][T16008] lo speed is unknown, defaulting to 1000
[  422.425283][T16008] chnl_net:caif_netlink_parms(): no params data found
[  422.651770][T16036] netlink: 'syz.7.4091': attribute type 6 has an invalid length.
[  422.792098][T16040] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4093'.
[  422.795633][T16040] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4093'.
[  422.799914][T16040] netlink: 'syz.7.4093': attribute type 18 has an invalid length.
[  422.837302][T16008] bridge0: port 1(bridge_slave_0) entered blocking state
[  422.856208][T16008] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.869548][T16008] bridge_slave_0: entered allmulticast mode
[  422.883123][T16008] bridge_slave_0: entered promiscuous mode
[  422.912280][T16008] bridge0: port 2(bridge_slave_1) entered blocking state
[  422.918382][T16008] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.924361][T16008] bridge_slave_1: entered allmulticast mode
[  422.928388][T16008] bridge_slave_1: entered promiscuous mode
[  422.984973][T16044] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  422.993441][T16008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  423.004924][T16008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  423.089813][T16008] team0: Port device team_slave_0 added
[  423.095828][T16008] team0: Port device team_slave_1 added
[  423.146711][T16008] batman_adv: batadv0: Adding interface: batadv_slave_0
[  423.158983][T16008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  423.166681][   T55] Bluetooth: hci0: Unable to find connection with handle 0x0000
[  423.175493][T16008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  423.191097][T16008] batman_adv: batadv0: Adding interface: batadv_slave_1
[  423.194031][T16008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  423.207139][T16008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  423.268168][T16059] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4101'.
[  423.272862][T16008] hsr_slave_0: entered promiscuous mode
[  423.276276][T16008] hsr_slave_1: entered promiscuous mode
[  423.282288][T16008] debugfs: 'hsr0' already exists in 'hsr'
[  423.284728][T16008] Cannot create hsr debugfs directory
[  423.494054][T16067] 9pnet_fd: Insufficient options for proto=fd
[  423.612718][T16008] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  423.622508][T16008] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  423.631733][T16008] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  423.640010][T16008] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  423.751445][   T36] 0: reclassify loop, rule prio 0, protocol 800
[  423.762892][T16008] 8021q: adding VLAN 0 to HW filter on device bond0
[  423.791222][T16008] 8021q: adding VLAN 0 to HW filter on device team0
[  423.800552][T13497] bridge0: port 1(bridge_slave_0) entered blocking state
[  423.803563][T13497] bridge0: port 1(bridge_slave_0) entered forwarding state
[  423.814829][T13497] bridge0: port 2(bridge_slave_1) entered blocking state
[  423.817850][T13497] bridge0: port 2(bridge_slave_1) entered forwarding state
[  424.044583][T16008] 8021q: adding VLAN 0 to HW filter on device batadv0
[  424.140519][   T55] Bluetooth: hci2: command tx timeout
[  424.426891][T16008] veth0_vlan: entered promiscuous mode
[  424.457240][T16008] veth1_vlan: entered promiscuous mode
[  424.526932][T16008] veth0_macvtap: entered promiscuous mode
[  424.538043][T16008] veth1_macvtap: entered promiscuous mode
[  424.561883][T16008] batman_adv: batadv0: Interface activated: batadv_slave_0
[  424.567480][T16008] batman_adv: batadv0: Interface activated: batadv_slave_1
[  424.604447][   T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  424.607422][   T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  424.636374][   T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  424.645414][   T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  424.927883][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.933235][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  424.982724][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.985949][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  425.328001][T16103] loop8: detected capacity change from 0 to 32768
[  425.333692][T16103] bcachefs: bch2_fs_parse_param() Error parsing option degraded: option_value
[  425.768827][ T4312] 0: reclassify loop, rule prio 0, protocol 800
[  426.218974][   T55] Bluetooth: hci2: command tx timeout
[  427.252525][T16150] gretap0: entered promiscuous mode
[  427.461553][T16162] overlayfs: failed to clone upperpath
[  427.504472][T16164] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4140'.
[  427.508360][T16164] tc_dump_action: action bad kind
[  427.662446][T16172] loop8: detected capacity change from 0 to 256
[  427.666661][T16172] exfat: Unknown parameter 'x09Z6IOky"IrIH$I$%$I&$$!$b'-$9$		I7t:}gk5Yk'
[  428.299189][   T55] Bluetooth: hci2: command tx timeout
[  428.560493][T16202] loop8: detected capacity change from 0 to 512
[  428.622098][T16202] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  428.627605][T16202] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  428.687574][T16008] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  428.940514][ T9419] 0: reclassify loop, rule prio 0, protocol 800
[  428.970859][T16222] dvmrp0: entered allmulticast mode
[  428.976323][T16221] dvmrp0: left allmulticast mode
[  429.619309][ T6001] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  429.655430][T16241] sctp: [Deprecated]: syz.7.4173 (pid 16241) Use of struct sctp_assoc_value in delayed_ack socket option.
[  429.655430][T16241] Use struct sctp_sack_info instead
[  429.784258][ T6001] usb 9-1: config 0 has an invalid interface number: 41 but max is 0
[  429.798065][ T6001] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  429.802796][ T6001] usb 9-1: config 0 has no interface number 0
[  429.811597][ T6001] usb 9-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  429.815275][ T6001] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.829629][ T6001] usb 9-1: Product: syz
[  429.831432][ T6001] usb 9-1: Manufacturer: syz
[  429.833436][ T6001] usb 9-1: SerialNumber: syz
[  429.840039][ T6001] usb 9-1: config 0 descriptor??
[  429.851225][ T6001] ims_pcu 9-1:0.41: Missing CDC union descriptor
[  429.853867][ T6001] ims_pcu 9-1:0.41: probe with driver ims_pcu failed with error -22
[  430.379222][   T55] Bluetooth: hci2: command tx timeout
[  431.463639][T16265] netlink: 'syz.6.4182': attribute type 3 has an invalid length.
[  431.466278][T16265] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.4182'.
[  431.989097][ T6695] usb 9-1: USB disconnect, device number 2
[  432.095828][T16277] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  432.569273][ T6695] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  432.742870][ T6695] usb 9-1: config 0 has an invalid interface number: 120 but max is 0
[  432.746537][ T6695] usb 9-1: config 0 has no interface number 0
[  432.749397][ T6695] usb 9-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  432.754567][ T6695] usb 9-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 52, changing to 9
[  432.763136][ T6695] usb 9-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 8241, setting to 1024
[  432.767947][ T6695] usb 9-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  432.772154][ T6695] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.778019][ T6695] usb 9-1: config 0 descriptor??
[  432.794830][ T6695] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.120/input/input13
[  432.852271][    C1] usbtouchscreen 9-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1
[  433.018445][ T6001] usb 9-1: USB disconnect, device number 3
[  433.854710][T16330] netlink: 'syz.7.4212': attribute type 29 has an invalid length.
[  433.862864][T16330] netlink: 'syz.7.4212': attribute type 29 has an invalid length.
[  433.866974][T16330] netlink: 500 bytes leftover after parsing attributes in process `syz.7.4212'.
[  434.720008][   T36] 0: reclassify loop, rule prio 0, protocol 800
[  435.024207][T16349] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4219'.
[  435.329268][  T793] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  435.480038][  T793] usb 9-1: Using ep0 maxpacket: 32
[  435.486563][  T793] usb 9-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  435.491196][  T793] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  435.496781][  T793] usb 9-1: config 0 descriptor??
[  435.513816][  T793] gspca_main: sunplus-2.14.0 probing 041e:400b
[  435.943368][T16383] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4235'.
[  436.325134][  T793] gspca_sunplus: reg_w_riv err -71
[  436.327476][  T793] sunplus 9-1:0.0: probe with driver sunplus failed with error -71
[  436.349419][  T793] usb 9-1: USB disconnect, device number 4
[  437.176616][T16405] loop8: detected capacity change from 0 to 40427
[  437.180799][T16405] F2FS-fs: heap/no_heap options were deprecated
[  437.189741][T16405] F2FS-fs (loop8): invalid crc value
[  437.286876][T16405] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  437.296970][T16405] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  437.380508][T16419] netlink: 508 bytes leftover after parsing attributes in process `syz.6.4250'.
[  437.429336][T16008] syz-executor: attempt to access beyond end of device
[  437.429336][T16008] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  437.468130][T16008] CPU: 0 UID: 0 PID: 16008 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  437.468149][T16008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  437.468155][T16008] Call Trace:
[  437.468160][T16008]  <TASK>
[  437.468165][T16008]  dump_stack_lvl+0x189/0x250
[  437.468184][T16008]  ? __pfx_dump_stack_lvl+0x10/0x10
[  437.468194][T16008]  ? __pfx_queue_work_on+0x10/0x10
[  437.468204][T16008]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  437.468217][T16008]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  437.468232][T16008]  f2fs_handle_critical_error+0x37c/0x540
[  437.468272][T16008]  f2fs_write_end_io+0x886/0xb60
[  437.468288][T16008]  __submit_merged_bio+0x27a/0x6a0
[  437.468303][T16008]  __submit_merged_write_cond+0x255/0x530
[  437.468317][T16008]  f2fs_write_data_pages+0x261d/0x3000
[  437.468346][T16008]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  437.468365][T16008]  ? kernel_text_address+0xa5/0xe0
[  437.468390][T16008]  ? stack_depot_save_flags+0x40/0x860
[  437.468412][T16008]  ? __lock_acquire+0xab9/0xd20
[  437.468429][T16008]  ? do_raw_spin_lock+0x121/0x290
[  437.468444][T16008]  ? do_raw_spin_unlock+0x4d/0x240
[  437.468453][T16008]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  437.468466][T16008]  do_writepages+0x32e/0x550
[  437.468486][T16008]  ? do_raw_spin_unlock+0x4d/0x240
[  437.468497][T16008]  filemap_fdatawrite+0x199/0x240
[  437.468510][T16008]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  437.468541][T16008]  ? do_raw_spin_unlock+0x4d/0x240
[  437.468552][T16008]  f2fs_sync_dirty_inodes+0x31f/0x830
[  437.468568][T16008]  f2fs_write_checkpoint+0x95a/0x1df0
[  437.468586][T16008]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  437.468613][T16008]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  437.468621][T16008]  ? kfree+0x18e/0x440
[  437.468632][T16008]  ? kill_f2fs_super+0x298/0x6c0
[  437.468658][T16008]  kill_f2fs_super+0x2c3/0x6c0
[  437.468669][T16008]  ? __pfx_kill_f2fs_super+0x10/0x10
[  437.468676][T16008]  ? radix_tree_delete_item+0x2b6/0x400
[  437.468692][T16008]  ? shrinker_free+0x2ce/0x3e0
[  437.468703][T16008]  deactivate_locked_super+0xbc/0x130
[  437.468715][T16008]  cleanup_mnt+0x425/0x4c0
[  437.468730][T16008]  ? lockdep_hardirqs_on+0x9c/0x150
[  437.468744][T16008]  task_work_run+0x1d4/0x260
[  437.468755][T16008]  ? __pfx_task_work_run+0x10/0x10
[  437.468765][T16008]  ? __x64_sys_umount+0x122/0x160
[  437.468778][T16008]  ? exit_to_user_mode_loop+0x40/0x110
[  437.468794][T16008]  exit_to_user_mode_loop+0xec/0x110
[  437.468805][T16008]  do_syscall_64+0x2bd/0x3b0
[  437.468817][T16008]  ? lockdep_hardirqs_on+0x9c/0x150
[  437.468827][T16008]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.468836][T16008]  ? exc_page_fault+0x9f/0xf0
[  437.468848][T16008]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.468855][T16008] RIP: 0033:0x7fa0dcd8ff17
[  437.468865][T16008] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  437.468872][T16008] RSP: 002b:00007ffc8cbfba58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  437.468883][T16008] RAX: 0000000000000000 RBX: 00007fa0dce11c05 RCX: 00007fa0dcd8ff17
[  437.468888][T16008] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc8cbfbb10
[  437.468892][T16008] RBP: 00007ffc8cbfbb10 R08: 0000000000000000 R09: 0000000000000000
[  437.468897][T16008] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc8cbfcba0
[  437.468901][T16008] R13: 00007fa0dce11c05 R14: 000000000006ac0e R15: 00007ffc8cbfcbe0
[  437.468930][T16008]  </TASK>
[  437.654105][T16426] netlink: 'syz.7.4254': attribute type 29 has an invalid length.
[  437.662329][T16426] netlink: 'syz.7.4254': attribute type 29 has an invalid length.
[  437.668736][T16008] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  438.063102][T16439] loop8: detected capacity change from 0 to 16
[  438.109097][T16439] erofs (device loop8): mounted with root inode @ nid 36.
[  438.474802][T16449] loop8: detected capacity change from 0 to 32768
[  438.527532][T16449] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  438.550974][T16449] XFS (loop8): Ending clean mount
[  438.594648][T16008] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  439.201801][T16472] ptrace attach of "/syz-executor exec"[8488] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               
[  439.897665][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  439.898250][   T26] 0: reclassify loop, rule prio 0, protocol 800
[  439.928702][    C0] vkms_vblank_simulate: vblank timer overrun
[  439.935645][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  440.818157][T16505] loop8: detected capacity change from 0 to 1024
[  440.832585][T16505] EXT4-fs: Ignoring removed nomblk_io_submit option
[  440.875294][T16505] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  440.986027][T16008] EXT4-fs error (device loop8): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[  441.002189][T16008] EXT4-fs error (device loop8): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[  441.695464][T16008] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.814766][   T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.052341][   T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.191166][   T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.264886][T16545] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4302'.
[  442.295738][   T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.457999][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  442.469561][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  442.477542][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  442.486899][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  442.491249][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  442.554333][T16549] lo speed is unknown, defaulting to 1000
[  442.682028][   T13] bridge_slave_1: left allmulticast mode
[  442.686949][   T13] bridge_slave_1: left promiscuous mode
[  442.693101][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  442.706661][   T13] bridge_slave_0: left allmulticast mode
[  442.709628][   T13] bridge_slave_0: left promiscuous mode
[  442.711961][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.036887][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  444.046273][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  444.052142][   T13] bond0 (unregistering): Released all slaves
[  444.392187][T16549] chnl_net:caif_netlink_parms(): no params data found
[  444.478483][   T13] hsr_slave_0: left promiscuous mode
[  444.484013][   T13] hsr_slave_1: left promiscuous mode
[  444.486244][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  444.490467][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  444.500609][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  444.503206][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  444.528327][   T13] veth1_macvtap: left promiscuous mode
[  444.530999][   T13] veth0_macvtap: left promiscuous mode
[  444.533044][   T13] veth1_vlan: left promiscuous mode
[  444.534936][   T13] veth0_vlan: left promiscuous mode
[  444.540546][   T55] Bluetooth: hci2: command tx timeout
[  444.701661][    C0] vkms_vblank_simulate: vblank timer overrun
[  444.962837][ T6018] 0: reclassify loop, rule prio 0, protocol 800
[  444.967906][  T983] 0: reclassify loop, rule prio 0, protocol 800
[  445.513701][   T13] team0 (unregistering): Port device team_slave_1 removed
[  445.582482][ T4312] 0: reclassify loop, rule prio 0, protocol 800
[  445.607185][   T13] team0 (unregistering): Port device team_slave_0 removed
[  446.621051][   T55] Bluetooth: hci2: command tx timeout
[  446.767123][T16589] tipc: Started in network mode
[  446.774411][T16589] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711
[  446.777600][T16589] tipc: Enabled bearer <eth:bridge0>, priority 10
[  446.925111][T16549] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.942091][T16549] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.945311][T16549] bridge_slave_0: entered allmulticast mode
[  446.953161][T16549] bridge_slave_0: entered promiscuous mode
[  446.965010][T16549] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.970886][T16549] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.981096][T16549] bridge_slave_1: entered allmulticast mode
[  446.985194][T16549] bridge_slave_1: entered promiscuous mode
[  447.088556][T16549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  447.109950][T16549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  447.205145][T16549] team0: Port device team_slave_0 added
[  447.210881][T16549] team0: Port device team_slave_1 added
[  447.293129][T16549] batman_adv: batadv0: Adding interface: batadv_slave_0
[  447.296953][T16549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  447.308175][T16549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  447.318190][T16549] batman_adv: batadv0: Adding interface: batadv_slave_1
[  447.321249][T16549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  447.333917][T16549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  447.417644][T16549] hsr_slave_0: entered promiscuous mode
[  447.425260][T16549] hsr_slave_1: entered promiscuous mode
[  447.428249][T16549] debugfs: 'hsr0' already exists in 'hsr'
[  447.430906][T16549] Cannot create hsr debugfs directory
[  447.910566][T16624] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.4320'.
[  448.082471][ T8704] tipc: Node number set to 10922666
[  448.126984][T16549] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  448.143152][T16549] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  448.163256][T16549] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  448.175279][T16549] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  448.334862][T16549] 8021q: adding VLAN 0 to HW filter on device bond0
[  448.355365][T16549] 8021q: adding VLAN 0 to HW filter on device team0
[  448.364171][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.367073][ T3537] bridge0: port 1(bridge_slave_0) entered forwarding state
[  448.377646][ T3537] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.380719][ T3537] bridge0: port 2(bridge_slave_1) entered forwarding state
[  448.623215][T16549] 8021q: adding VLAN 0 to HW filter on device batadv0
[  448.743358][T16648] netlink: 'syz.6.4323': attribute type 10 has an invalid length.
[  448.764644][   T55] Bluetooth: hci2: command tx timeout
[  448.794287][T16648] team0: Port device dummy0 added
[  448.799235][T16650] netlink: 'syz.6.4323': attribute type 10 has an invalid length.
[  448.848478][T16650] team0: Port device dummy0 removed
[  448.858882][T16650] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  448.906789][T16549] veth0_vlan: entered promiscuous mode
[  448.920411][T16549] veth1_vlan: entered promiscuous mode
[  448.973687][T16549] veth0_macvtap: entered promiscuous mode
[  448.985720][T16549] veth1_macvtap: entered promiscuous mode
[  449.012278][T16549] batman_adv: batadv0: Interface activated: batadv_slave_0
[  449.028278][T16549] batman_adv: batadv0: Interface activated: batadv_slave_1
[  449.040594][ T5962] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  449.054564][ T5962] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  449.078626][ T5962] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  449.087182][ T5962] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  449.215629][  T983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  449.218718][  T983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  449.255601][  T983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  449.259978][  T983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  449.377846][T16658] netlink: 'syz.9.4297': attribute type 2 has an invalid length.
[  449.390386][T16658] : entered promiscuous mode
[  449.986674][T16678] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4331'.
[  449.990928][T16678] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4331'.
[  450.277960][   T27] 0: reclassify loop, rule prio 0, protocol 800
[  451.005950][   T55] Bluetooth: hci2: command tx timeout
[  451.582157][   T26] 0: reclassify loop, rule prio 0, protocol 800
[  452.168733][   T55] Bluetooth: hci1: unexpected event for opcode 0x1804
[  453.609822][T16745] loop9: detected capacity change from 0 to 32768
[  453.640654][T16745] *** Log Format Error ! ***
[  453.645058][T16745] lmLogInit: exit(-22)
[  453.646897][T16745] lmLogOpen: exit(-22)
[  453.648405][T16745] jfs_mount_rw failed, return code = -22
[  455.097244][T16785] loop9: detected capacity change from 0 to 512
[  455.119128][T16785] EXT4-fs error (device loop9): ext4_iget_extra_inode:5104: inode #15: comm syz.9.4376: corrupted in-inode xattr: overlapping e_value 
[  455.131406][T16785] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.4376: couldn't read orphan inode 15 (err -117)
[  455.137764][T16785] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  455.173070][T16549] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  455.269649][T16789] netlink: 176 bytes leftover after parsing attributes in process `syz.9.4377'.
[  456.367144][T13497] 0: reclassify loop, rule prio 0, protocol 800
[  456.483316][   T55] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  456.487742][   T55] Bluetooth: hci1: Injecting HCI hardware error event
[  456.497980][ T5239] Bluetooth: hci1: hardware error 0x00
[  457.051068][   T28] 0: reclassify loop, rule prio 0, protocol 800
[  457.820164][T16016] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  458.022356][T16016] usb 10-1: Using ep0 maxpacket: 8
[  458.029633][T16016] usb 10-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0
[  458.034110][T16016] usb 10-1: config 0 interface 0 has no altsetting 0
[  458.036942][T16016] usb 10-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  458.040671][T16016] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.050952][T16016] usb 10-1: config 0 descriptor??
[  458.053859][T16857] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4408'.
[  458.495128][T16016] isku 0003:1E7D:319C.000D: hidraw0: USB HID v5.59 Device [HID 1e7d:319c] on usb-dummy_hcd.9-1/input0
[  458.708776][ T6001] usb 10-1: USB disconnect, device number 2
[  458.765773][ T5239] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  458.856652][T16907] netlink: 'syz.6.4428': attribute type 2 has an invalid length.
[  461.154603][    C0] 0: reclassify loop, rule prio 0, protocol 800
[  461.157711][    C0] 0: reclassify loop, rule prio 0, protocol 800
[  461.981354][T16990] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4455'.
[  461.985057][T16990] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4455'.
[  462.588512][ T4459] 0: reclassify loop, rule prio 0, protocol 800
[  463.108168][ T8704] lo speed is unknown, defaulting to 1000
[  463.156380][T17023] tunl0: entered promiscuous mode
[  463.162284][T17023] netlink: 'syz.9.4469': attribute type 4 has an invalid length.
[  463.168807][T17023] netlink: 9 bytes leftover after parsing attributes in process `syz.9.4469'.
[  463.219446][T13497] 0: reclassify loop, rule prio 0, protocol 800
[  463.311466][T17032] loop9: detected capacity change from 0 to 512
[  463.315403][T17032] EXT4-fs: Ignoring removed nomblk_io_submit option
[  463.326942][T17032] EXT4-fs (loop9): Test dummy encryption mode enabled
[  463.357954][T17032] EXT4-fs (loop9): 1 truncate cleaned up
[  463.364467][T17032] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  464.311420][T16549] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  464.313696][T17054] ptrace attach of "/syz-executor exec"[8147] was attempted by "\x22"[17054]
[  464.426234][   T33] audit: type=1326 audit(1756635127.393:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17056 comm="syz.9.4483" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716178ebe9 code=0x7ffc0000
[  464.434999][   T33] audit: type=1326 audit(1756635127.393:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17056 comm="syz.9.4483" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f716178ebe9 code=0x7ffc0000
[  464.464511][   T33] audit: type=1326 audit(1756635127.393:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17056 comm="" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716178ebe9 code=0x7ffc0000
[  464.477608][   T33] audit: type=1326 audit(1756635127.393:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17056 comm="" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716178ebe9 code=0x7ffc0000
[  464.493057][   T33] audit: type=1326 audit(1756635127.393:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17056 comm="" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f716178ebe9 code=0x7ffc0000
[  464.501750][   T33] audit: type=1326 audit(1756635127.402:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17056 comm="" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716178ebe9 code=0x7ffc0000
[  464.509980][   T33] audit: type=1326 audit(1756635127.402:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17056 comm="" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716178ebe9 code=0x7ffc0000
[  464.749443][T17077] netlink: 'syz.9.4493': attribute type 2 has an invalid length.
[  465.091059][T17097] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4503'.
[  465.310648][T17081] loop9: detected capacity change from 0 to 40427
[  465.343741][T17081] F2FS-fs (loop9): build fault injection rate: 26
[  465.351720][T17081] F2FS-fs (loop9): build fault injection type: 0xeffa
[  465.362858][T17112] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4510'.
[  465.369216][T17112] netlink: 'syz.6.4510': attribute type 21 has an invalid length.
[  465.407308][T17081] F2FS-fs (loop9): invalid crc value
[  465.455810][T17081] F2FS-fs (loop9): inject kvmalloc in f2fs_kvmalloc of f2fs_build_segment_manager+0x3227/0x49f0
[  465.460334][T17081] F2FS-fs (loop9): Failed to initialize F2FS segment manager (-12)
[  466.826610][T17176] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4539'.
[  466.828807][T17174] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  466.854062][ T8704] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  466.953164][   T33] audit: type=1326 audit(1756635129.760:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17179 comm="syz.6.4541" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d8d8ebe9 code=0x7ffc0000
[  466.970663][   T33] audit: type=1326 audit(1756635129.760:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17179 comm="syz.6.4541" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d8d8ebe9 code=0x7ffc0000
[  466.981919][   T33] audit: type=1326 audit(1756635129.769:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17179 comm="syz.6.4541" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8d8d8ebe9 code=0x7ffc0000
[  467.013758][ T8704] usb 10-1: Using ep0 maxpacket: 16
[  467.019991][ T8704] usb 10-1: config 0 has an invalid interface number: 120 but max is 0
[  467.023442][ T8704] usb 10-1: config 0 has no interface number 0
[  467.028956][ T8704] usb 10-1: New USB device found, idVendor=1b71, idProduct=3002, bcdDevice=e5.9f
[  467.036791][ T8704] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  467.039521][ T8704] usb 10-1: Product: syz
[  467.040978][ T8704] usb 10-1: Manufacturer: syz
[  467.046862][ T8704] usb 10-1: SerialNumber: syz
[  467.185043][ T8704] usb 10-1: config 0 descriptor??
[  467.513088][ T6018] usb 10-1: USB disconnect, device number 3
[  468.051984][T17201] geneve1: entered promiscuous mode
[  468.058495][T17201] macsec1: entered promiscuous mode
[  468.060846][T17201] macsec1: entered allmulticast mode
[  468.062913][T17201] geneve1: entered allmulticast mode
[  468.068698][T17201] geneve1: left allmulticast mode
[  468.070919][T17201] geneve1: left promiscuous mode
[  468.457173][T17205] loop9: detected capacity change from 0 to 40427
[  468.465407][T17205] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[  468.469568][T17205] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  468.493216][T17205] F2FS-fs (loop9): invalid crc value
[  468.554839][T17205] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  468.560849][T17205] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  468.566073][T17205] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  468.682636][   T26] 0: reclassify loop, rule prio 0, protocol 800
[  469.429519][ T8704] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  469.433500][T17242] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[  469.613075][ T8704] usb 10-1: config 0 has an invalid interface number: 182 but max is 1
[  469.616853][ T8704] usb 10-1: config 0 has no interface number 1
[  469.619450][ T8704] usb 10-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af
[  469.632581][ T8704] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  469.643497][ T8704] usb 10-1: config 0 descriptor??
[  470.278704][T16682] usb 10-1: USB disconnect, device number 4
[  471.123702][T17306] netlink: 'syz.6.4596': attribute type 21 has an invalid length.
[  471.126794][T17306] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4596'.
[  473.470960][  T983] 0: reclassify loop, rule prio 0, protocol 800
[  473.534618][ T8704] usb 10-1: new full-speed USB device number 5 using dummy_hcd
[  473.777317][ T8704] usb 10-1: config 1 has an invalid interface number: 63 but max is 0
[  473.791017][ T8704] usb 10-1: config 1 has no interface number 0
[  473.793090][ T8704] usb 10-1: config 1 interface 63 has no altsetting 0
[  473.800830][ T8704] usb 10-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=90.56
[  473.805153][ T8704] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.808340][ T8704] usb 10-1: Product: syz
[  473.810093][ T8704] usb 10-1: Manufacturer: syz
[  473.811994][ T8704] usb 10-1: SerialNumber: syz
[  473.972337][T17371] netlink: 'syz.7.4622': attribute type 4 has an invalid length.
[  473.976487][T17371] netlink: 152 bytes leftover after parsing attributes in process `syz.7.4622'.
[  473.989923][T17371] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  474.072165][  T983] 0: reclassify loop, rule prio 0, protocol 800
[  474.073300][ T8704] ems_usb 10-1:1.63 (unnamed net_device) (uninitialized): couldn't initialize controller: -8
[  474.094023][ T8704] ems_usb 10-1:1.63: probe with driver ems_usb failed with error -8
[  474.114179][ T8704] usb 10-1: USB disconnect, device number 5
[  474.970873][T17402] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  475.488755][T17421] loop9: detected capacity change from 0 to 1024
[  475.571633][   T33] kauditd_printk_skb: 8 callbacks suppressed
[  475.571651][   T33] audit: type=1800 audit(1756635137.823:133): pid=17411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4641" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  476.136863][T17453] batadv0: entered promiscuous mode
[  476.140700][T17453] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  476.508740][T17471] netlink: 'syz.6.4667': attribute type 5 has an invalid length.
[  477.205472][T17489] loop9: detected capacity change from 0 to 8
[  477.221191][T17489] SQUASHFS error: Unable to read inode 0x6
[  477.743880][T17495] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  477.878692][T17503] ceph: No source
[  478.596075][T17517] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4688'.
[  478.599897][T17519] loop9: detected capacity change from 0 to 256
[  478.748808][T17524] loop9: detected capacity change from 0 to 8
[  479.085854][T17536] SQUASHFS error: lzo decompression failed, data probably corrupt
[  479.088866][T17536] SQUASHFS error: Failed to read block 0x0: -5
[  479.097554][T17536] SQUASHFS error: lzo decompression failed, data probably corrupt
[  479.100960][T17536] SQUASHFS error: Failed to read block 0x0: -5
[  479.161081][   T33] audit: type=1800 audit(1756635141.134:134): pid=17536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4690" name="file2" dev="loop9" ino=3 res=0 errno=0
[  479.629272][ T3537] 0: reclassify loop, rule prio 0, protocol 800
[  479.947694][T17567] macvlan2: entered promiscuous mode
[  479.952705][T17567] macvlan2: entered allmulticast mode
[  480.100186][T17577] netlink: 296 bytes leftover after parsing attributes in process `syz.6.4713'.
[  480.270271][T17575] loop9: detected capacity change from 0 to 32768
[  480.329289][   T28] 0: reclassify loop, rule prio 0, protocol 800
[  480.331141][T17575] ERROR: (device loop9): dbAlloc: the hint is outside the map
[  480.331141][T17575] 
[  480.346770][T17575] ERROR: (device loop9): remounting filesystem as read-only
[  480.830500][T17600] loop9: detected capacity change from 0 to 1024
[  480.877594][T17600] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  480.916205][T16549] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  481.696485][T17624] netlink: 'syz.6.4732': attribute type 21 has an invalid length.
[  481.699975][T17624] netlink: 'syz.6.4732': attribute type 1 has an invalid length.
[  481.707571][T17624] netlink: 144 bytes leftover after parsing attributes in process `syz.6.4732'.
[  482.032606][T17633] cgroup: Need name or subsystem set
[  482.185326][T17637] loop9: detected capacity change from 0 to 512
[  482.258980][T17637] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  482.276251][T17637] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  482.292380][T17637] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #2: comm syz.9.4738: corrupted inode contents
[  482.304365][T17637] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #2: comm syz.9.4738: mark_inode_dirty error
[  482.311124][T17637] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #2: comm syz.9.4738: corrupted inode contents
[  482.332306][T16549] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  482.383955][T17644] loop9: detected capacity change from 0 to 512
[  482.388167][T17644] EXT4-fs warning (device loop9): ext4_multi_mount_protect:292: Invalid MMP block in superblock
[  482.422275][T17646] openvswitch: netlink: IP tunnel dst address not specified
[  482.485147][T17650] loop9: detected capacity change from 0 to 512
[  482.500712][T17650] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  482.527444][T17650] EXT4-fs (loop9): 1 truncate cleaned up
[  482.530066][T17650] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  482.583712][T16549] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  482.635333][T17655] loop9: detected capacity change from 0 to 4096
[  482.645190][T17655] EXT4-fs (loop9): Test dummy encryption mode enabled
[  482.649449][T17655] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  482.653156][T17655] System zones: 0-5
[  482.657110][T17655] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  482.756717][T16549] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.049246][    C0] 0: reclassify loop, rule prio 0, protocol 800
[  483.356288][T17696] netlink: 172 bytes leftover after parsing attributes in process `syz.7.4763'.
[  483.394769][   T33] audit: type=1326 audit(1756635145.138:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17698 comm="syz.6.4766" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe8d8d8ebe9 code=0x0
[  483.840097][ T6018] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  484.002966][ T6018] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  484.008551][ T6018] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  484.015914][ T6018] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  484.019624][ T6018] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  484.024350][ T6018] usb 10-1: SerialNumber: syz
[  484.255616][ T6018] usb 10-1: 0:2 : does not exist
[  484.290611][ T6018] usb 10-1: USB disconnect, device number 6
[  484.337995][ T5955] udevd[5955]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  484.881823][T17750] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4788'.
[  484.885801][T17751] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4789'.
[  485.021956][  T983] 0: reclassify loop, rule prio 0, protocol 800
[  485.690765][T17780] netlink: 'syz.9.4801': attribute type 1 has an invalid length.
[  485.693961][T17780] netlink: 224 bytes leftover after parsing attributes in process `syz.9.4801'.
[  485.787138][ T9419] 0: reclassify loop, rule prio 0, protocol 800
[  486.009016][T17794] netlink: 'syz.6.4808': attribute type 3 has an invalid length.
[  486.013794][T17794] netlink: 716 bytes leftover after parsing attributes in process `syz.6.4808'.
[  486.068940][T17798] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  486.072120][T17798] IPv6: NLM_F_CREATE should be set when creating new route
[  486.075122][T17798] IPv6: NLM_F_CREATE should be set when creating new route
[  486.132548][   T33] audit: type=1326 audit(1756635147.701:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17801 comm="syz.6.4812" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8d8d8ebe9 code=0x0
[  486.235537][T16682] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  486.408323][T16682] usb 10-1: Using ep0 maxpacket: 16
[  486.417205][T16682] usb 10-1: config 0 has an invalid interface number: 8 but max is 0
[  486.421781][T16682] usb 10-1: config 0 has no interface number 0
[  486.424321][T16682] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  486.437388][T16682] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  486.441447][T16682] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  486.444840][T16682] usb 10-1: Product: syz
[  486.446715][T16682] usb 10-1: SerialNumber: syz
[  486.458745][T16682] usb 10-1: config 0 descriptor??
[  486.469387][T16682] cm109 10-1:0.8: invalid payload size 3, expected 4
[  486.478445][T16682] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input15
[  486.726875][    C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71
[  486.730019][    C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71
[  486.733226][    C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71
[  486.736491][    C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71
[  486.739637][    C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71
[  486.742654][    C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71
[  486.745520][T16682] usb 10-1: USB disconnect, device number 7
[  486.748058][    C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71
[  486.748078][    C0] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  486.768737][T16682] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  488.129997][T17846] loop9: detected capacity change from 0 to 1024
[  488.156028][T17846] EXT4-fs (loop9): blocks per group (131072) and clusters per group (8192) inconsistent
[  488.758134][T17853] IPVS: sed: SCTP 172.20.20.187:0 - no destination available
[  489.509717][T17904] loop9: detected capacity change from 0 to 256
[  489.525094][T17904] exfat: Deprecated parameter 'utf8'
[  489.546728][T17904] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  490.169999][ T8575] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  490.667377][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  490.682181][ T8575] usb 10-1: Using ep0 maxpacket: 8
[  490.698264][ T8575] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3
[  490.702210][ T8575] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  490.768109][ T8575] usb 10-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  490.771866][ T8575] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  490.795721][ T8575] usb 10-1: config 0 descriptor??
[  490.814289][T17930] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  491.086334][T16682] usb 10-1: USB disconnect, device number 8
[  491.274088][T17981] 0: reclassify loop, rule prio 0, protocol 800
[  491.421280][T18008] pim6reg: entered allmulticast mode
[  491.630915][T18014] tmpfs: Bad value for 'mpol'
[  491.956884][ T4459] 0: reclassify loop, rule prio 0, protocol 800
[  492.181057][   T55] Bluetooth: hci0: unexpected event for opcode 0x0c1c
[  493.023614][T16682] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  493.198156][T16682] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  493.202020][T16682] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  493.215137][T16682] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  493.221342][T16682] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  493.224859][T16682] usb 10-1: SerialNumber: syz
[  493.491420][T16682] usb 10-1: 0:2 : does not exist
[  493.525005][T16682] usb 10-1: USB disconnect, device number 9
[  493.555678][ T5955] udevd[5955]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  494.292777][T18102] netlink: 'syz.7.4917': attribute type 9 has an invalid length.
[  496.917107][T18184] loop9: detected capacity change from 0 to 4096
[  496.948773][T18184] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  496.993596][T18184] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #15: comm syz.9.4953: corrupted inode contents
[  497.028694][T18184] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #15: comm syz.9.4953: mark_inode_dirty error
[  497.039106][T18184] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #15: comm syz.9.4953: corrupted inode contents
[  497.045605][T18184] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #15: comm syz.9.4953: mark_inode_dirty error
[  497.050577][T18184] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #15: comm syz.9.4953: corrupted inode contents
[  497.055946][T18184] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #15: comm syz.9.4953: mark_inode_dirty error
[  497.060951][T18184] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #15: comm syz.9.4953: corrupted inode contents
[  497.075007][T18184] EXT4-fs error (device loop9): ext4_truncate:4666: inode #15: comm syz.9.4953: mark_inode_dirty error
[  497.080750][T18184] EXT4-fs error (device loop9) in ext4_setattr:6071: Corrupt filesystem
[  497.084734][T18191] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #15: comm syz.9.4953: corrupted inode contents
[  497.100513][T18184] EXT4-fs (loop9): shut down requested (2)
[  497.125972][T16549] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  497.342051][T18204] netlink: 'syz.6.4961': attribute type 1 has an invalid length.
[  497.419133][T17980] 0: reclassify loop, rule prio 0, protocol 800
[  497.684892][T16682] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  497.844882][T16682] usb 10-1: Using ep0 maxpacket: 8
[  497.848887][T16682] usb 10-1: unable to get BOS descriptor or descriptor too short
[  497.852705][T16682] usb 10-1: config 0 has an invalid interface number: 88 but max is 0
[  497.855517][T16682] usb 10-1: config 0 has no interface number 0
[  497.857594][T16682] usb 10-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  497.861496][T16682] usb 10-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[  497.865006][T16682] usb 10-1: config 0 interface 88 has no altsetting 0
[  497.869778][T16682] usb 10-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  497.873298][T16682] usb 10-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  497.876328][T16682] usb 10-1: Product: syz
[  497.878365][T16682] usb 10-1: Manufacturer: syz
[  497.880185][T16682] usb 10-1: SerialNumber: syz
[  497.884972][T16682] usb 10-1: config 0 descriptor??
[  498.102948][ T4312] 0: reclassify loop, rule prio 0, protocol 800
[  498.128983][T16682] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.88/input/input16
[  498.147866][T16682] usb 10-1: USB disconnect, device number 10
[  498.197210][ T7456] udevd[7456]: Error opening device "/dev/input/event3": No such file or directory
[  498.218438][ T7456] udevd[7456]: Unable to EVIOCGABS device "/dev/input/event3"
[  498.223471][ T7456] udevd[7456]: Unable to EVIOCGABS device "/dev/input/event3"
[  498.679902][T18236] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4976'.
[  498.773026][T18236] 8021q: adding VLAN 0 to HW filter on device bond2
[  498.909674][T18248] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4981'.
[  498.922769][T18248] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4981'.
[  499.625388][T18280] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4989'.
[  501.803310][T18346] loop9: detected capacity change from 0 to 512
[  501.835117][T18346] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.5022: casefold flag without casefold feature
[  501.840586][T18346] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.5022: couldn't read orphan inode 15 (err -117)
[  501.847970][T18346] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  501.922495][T16549] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  502.213746][T18360] netlink: 'syz.6.5028': attribute type 1 has an invalid length.
[  502.273553][T18362] loop9: detected capacity change from 0 to 4096
[  502.282021][T18362] nilfs2: Bad value for 'cp'
[  502.372347][T18370] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5033'.
[  502.893352][  T983] 0: reclassify loop, rule prio 0, protocol 800
[  503.509036][   T40] 0: reclassify loop, rule prio 0, protocol 800
[  503.857996][   T33] audit: type=1326 audit(1756635164.285:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18399 comm="syz.9.5046" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f716178ebe9 code=0x0
[  503.995972][T18405] vcan0: tx drop: invalid da for name 0x00000000000000c7
[  504.907260][T18425] loop9: detected capacity change from 0 to 512
[  504.934430][T18425] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 546, start 22000003)
[  504.939239][T18425] FAT-fs (loop9): Filesystem has been set read-only
[  504.941473][T18425] FAT-fs (loop9): error, invalid access to FAT (entry 0x22000003)
[  504.948551][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  505.321896][T18445] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5066'.
[  506.185976][T18464] loop9: detected capacity change from 0 to 256
[  507.219717][T18494] loop9: detected capacity change from 0 to 512
[  507.226523][T18494] EXT4-fs: Ignoring removed orlov option
[  507.228862][T18494] EXT4-fs: Ignoring removed nomblk_io_submit option
[  507.233557][T18494] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[  507.284538][T18494] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c128, mo2=0002]
[  507.309774][T18494] EXT4-fs error (device loop9): ext4_iget_extra_inode:5104: inode #15: comm syz.9.5086: corrupted in-inode xattr: e_value size too large
[  507.327526][T18494] EXT4-fs (loop9): Remounting filesystem read-only
[  507.334026][T18494] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  507.374250][T16549] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  507.472701][T18510] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1136)
[  507.476014][T18510] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  507.719655][T18524] hub 2-0:1.0: USB hub found
[  507.843830][T18524] hub 2-0:1.0: 1 port detected
[  508.108729][T18531] loop9: detected capacity change from 0 to 512
[  508.115117][T18531] EXT4-fs: Ignoring removed nomblk_io_submit option
[  508.119866][T18531] EXT4-fs: Mount option(s) incompatible with ext3
[  508.223692][T18536] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5104'.
[  508.231489][T18537] netdevsim netdevsim9 netdevsim0: entered promiscuous mode
[  508.234720][T18537] netdevsim netdevsim9 netdevsim0: entered allmulticast mode
[  508.273922][T18537] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  508.365697][  T983] 0: reclassify loop, rule prio 0, protocol 800
[  508.798793][T18553] loop9: detected capacity change from 0 to 32768
[  508.924771][T18553] ocfs2: Mounting device (7,9) on (node local, slot 0) with writeback data mode.
[  509.269461][T16549] ocfs2: Unmounting device (7,9) on (node local)
[  509.452639][T18580] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5121'.
[  509.745048][   T40] 0: reclassify loop, rule prio 0, protocol 800
[  509.944071][T18601] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  509.944896][T18602] netlink: 'syz.9.5134': attribute type 1 has an invalid length.
[  510.230667][T18619] netlink: 'syz.9.5143': attribute type 13 has an invalid length.
[  510.615741][T18629] netlink: 'syz.9.5146': attribute type 23 has an invalid length.
[  510.703010][T18633] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  512.169310][T18675] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  512.263561][T18679] loop9: detected capacity change from 0 to 256
[  512.274737][T18679] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x467a0815, utbl_chksum : 0xe619d30d)
[  512.281294][T18679] exFAT-fs (loop9): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  512.360740][T18685] loop9: detected capacity change from 0 to 164
[  514.441187][T18716] loop9: detected capacity change from 0 to 32768
[  514.471205][T18716] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  514.494114][T18716] XFS (loop9): Ending clean mount
[  514.513275][T18716] xfs: Unexpected value for 'quota'
[  514.523710][T17978] 0: reclassify loop, rule prio 0, protocol 800
[  514.528090][T16549] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  514.878641][T18736] loop9: detected capacity change from 0 to 256
[  514.907763][T18736] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000001)
[  514.969077][T18740] loop9: detected capacity change from 0 to 128
[  514.974625][T18740] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  514.978957][T18740] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  515.049145][T17978] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  515.537872][ T8704] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  515.604227][T18770] nftables ruleset with unbound chain
[  515.608735][T18772] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5207'.
[  515.709678][ T8704] usb 10-1: Using ep0 maxpacket: 32
[  515.715691][ T8704] usb 10-1: config 0 has an invalid interface number: 184 but max is 0
[  515.721432][ T8704] usb 10-1: config 0 has no interface number 0
[  515.724032][ T8704] usb 10-1: config 0 interface 184 has no altsetting 0
[  515.748480][ T8704] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  515.757592][ T8704] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.761053][ T8704] usb 10-1: Product: syz
[  515.768458][ T8704] usb 10-1: Manufacturer: syz
[  515.770496][ T8704] usb 10-1: SerialNumber: syz
[  515.781436][ T8704] usb 10-1: config 0 descriptor??
[  515.797246][ T8704] smsc75xx v1.0.0
[  515.798725][ T8704] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  515.803657][ T8704] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -22
[  515.807435][T18784] overlayfs: conflicting options: nfs_export=on,index=off
[  515.892972][ T3537] 0: reclassify loop, rule prio 0, protocol 800
[  516.254998][ T5317] usb 10-1: USB disconnect, device number 11
[  516.589948][T18804] tracefs: Unknown parameter ''
[  516.963806][T18818] loop9: detected capacity change from 0 to 1024
[  517.010928][ T3537] hfsplus: b-tree write err: -5, ino 4
[  518.340455][T18861] netlink: 1041 bytes leftover after parsing attributes in process `syz.7.5249'.
[  519.435997][T18889] loop9: detected capacity change from 0 to 1024
[  519.510992][   T33] audit: type=1800 audit(1756635178.924:138): pid=18889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5264" name="file1" dev="loop9" ino=20 res=0 errno=0
[  519.910435][ T8704] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  520.083387][ T8704] usb 10-1: Using ep0 maxpacket: 32
[  520.088446][ T8704] usb 10-1: config 4 has an invalid interface number: 10 but max is 0
[  520.091937][ T8704] usb 10-1: config 4 has no interface number 0
[  520.094438][ T8704] usb 10-1: config 4 interface 10 has no altsetting 0
[  520.099647][ T8704] usb 10-1: New USB device found, idVendor=0979, idProduct=0280, bcdDevice=98.4c
[  520.103673][ T8704] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.107462][ T8704] usb 10-1: Product: syz
[  520.109131][ T8704] usb 10-1: Manufacturer: syz
[  520.110939][ T8704] usb 10-1: SerialNumber: syz
[  520.343990][ T8704] gspca_main: jeilinj-2.14.0 probing 0979:0280
[  520.367928][ T8704] usb 10-1: USB disconnect, device number 12
[  520.681532][  T983] 0: reclassify loop, rule prio 0, protocol 800
[  520.957615][T18924] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5280'.
[  521.623853][T18954] loop9: detected capacity change from 0 to 512
[  521.627673][T18954] EXT4-fs: Ignoring removed nomblk_io_submit option
[  521.644135][T18954] EXT4-fs (loop9): Test dummy encryption mode enabled
[  521.651121][T18954] EXT4-fs (loop9): 1 truncate cleaned up
[  521.655671][T18954] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  521.809154][T18958] 9pnet_fd: Insufficient options for proto=fd
[  522.227576][T17972] 0: reclassify loop, rule prio 0, protocol 800
[  522.607272][T16549] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  524.118943][T19002] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5313'.
[  524.526240][T19009] loop9: detected capacity change from 0 to 1024
[  524.553955][T19009] hfsplus: bad catalog entry type
[  524.583897][T17981] hfsplus: b-tree write err: -5, ino 4
[  524.903094][T16682] usb 10-1: new full-speed USB device number 13 using dummy_hcd
[  525.086813][T16682] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[  525.090117][T16682] usb 10-1: config 0 has no interface number 0
[  525.092564][T16682] usb 10-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  525.101193][T16682] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  525.109950][T16682] usb 10-1: config 0 descriptor??
[  525.120225][T16682] usb 10-1: selecting invalid altsetting 1
[  525.130838][T16682] dvb_ttusb_budget: ttusb_init_controller: error
[  525.133362][T16682] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  525.177894][T19025] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5324'.
[  525.181705][T19025] netlink: 6 bytes leftover after parsing attributes in process `syz.7.5324'.
[  525.324236][T16682] DVB: Unable to find symbol cx22700_attach()
[  525.355259][T16682] DVB: Unable to find symbol tda10046_attach()
[  525.357476][T16682] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  525.367043][T16682] usb 10-1: USB disconnect, device number 13
[  525.691338][T19039] netlink: 'syz.7.5329': attribute type 1 has an invalid length.
[  525.695262][T19039] netlink: 'syz.7.5329': attribute type 2 has an invalid length.
[  525.698631][T19039] netlink: 1172 bytes leftover after parsing attributes in process `syz.7.5329'.
[  525.989821][T19052] netlink: 'syz.7.5335': attribute type 29 has an invalid length.
[  526.280467][T19067] loop9: detected capacity change from 0 to 256
[  526.761391][T19104] 9pnet_fd: Insufficient options for proto=fd
[  526.838829][   T27] 0: reclassify loop, rule prio 0, protocol 800
[  527.720609][T19122] 9pnet_fd: Insufficient options for proto=fd
[  528.219476][ T9419] 0: reclassify loop, rule prio 0, protocol 800
[  528.313242][ T5317] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  528.473570][ T5317] usb 10-1: Using ep0 maxpacket: 8
[  528.488705][ T5317] usb 10-1: unable to get BOS descriptor or descriptor too short
[  528.496236][ T5317] usb 10-1: config 4 interface 0 has no altsetting 0
[  528.515247][ T5317] usb 10-1: string descriptor 0 read error: -22
[  528.518472][ T5317] usb 10-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  528.522043][ T5317] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  528.540334][ T5317] usb 10-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  528.557264][ T5317] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  528.568532][ T5317] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  528.581361][ T5317] usb 10-1: media controller created
[  528.627708][ T5317] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  528.875085][T19150] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5382'.
[  528.955714][T19156] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5385'.
[  529.012266][ T5317] usb 10-1: USB disconnect, device number 14
[  529.031089][T19156] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5385'.
[  530.574345][T19197] tunl0: left promiscuous mode
[  530.664873][T19197] bridge0: port 2(bridge_slave_1) entered disabled state
[  530.668453][T19197] bridge0: port 1(bridge_slave_0) entered disabled state
[  530.798730][T19197] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  530.894608][T19197] netdevsim netdevsim9 netdevsim0: left promiscuous mode
[  530.897436][T19197] netdevsim netdevsim9 netdevsim0: left allmulticast mode
[  530.966941][T19197] macvlan2: left promiscuous mode
[  530.969096][T19197] macvlan2: left allmulticast mode
[  530.983474][   T13] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  530.990948][   T13] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  530.994535][   T13] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  530.998467][   T13] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  531.248188][T19222] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5414'.
[  531.251472][T19222] tc_dump_action: action bad kind
[  532.998254][T17981] 0: reclassify loop, rule prio 0, protocol 800
[  533.381214][T19282] loop9: detected capacity change from 0 to 4096
[  533.595263][ T9419] 0: reclassify loop, rule prio 0, protocol 800
[  533.780106][T19296] loop9: detected capacity change from 0 to 2048
[  533.863427][ T5299]  loop9: p1 < > p3 p4 < >
[  533.893727][ T5299] loop9: p3 start 4284289 is beyond EOD, truncated
[  533.919946][ T5299]  loop9: p1 < > p3 p4 < >
[  533.923433][ T5299] loop9: p3 start 4284289 is beyond EOD, truncated
[  533.932091][T19296]  loop9: p1 < > p3 p4 < >
[  533.934716][T19296] loop9: p3 start 4284289 is beyond EOD, truncated
[  534.052494][T19298] fuse: Unknown parameter 'gro00000000000000000000'
[  534.283412][ T5299]  loop9: p1 < > p3 p4 < >
[  534.291635][ T5299] loop9: p3 start 4284289 is beyond EOD, truncated
[  534.382600][ T7456] udevd[7456]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory
[  534.387976][T19300] loop9: detected capacity change from 0 to 2048
[  534.398104][ T5955] udevd[5955]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  534.423409][T19300] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  534.433304][T19300] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  534.438198][ T7456] udevd[7456]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory
[  534.446520][ T5955] udevd[5955]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  534.484709][   T33] audit: type=1804 audit(1756635192.937:139): pid=19300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.5450" name="/newroot/284/file0/file1" dev="loop9" ino=15 res=1 errno=0
[  534.527179][ T7456] udevd[7456]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory
[  534.529404][ T5955] udevd[5955]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  534.534013][T16549] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  534.629833][ T5955] udevd[5955]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  534.637840][ T7456] udevd[7456]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory
[  535.068733][   T33] audit: type=1326 audit(1756635193.470:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19319 comm="syz.7.5458" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd7bcf8ebe9 code=0x0
[  535.139536][T19326] netlink: 'syz.6.5460': attribute type 12 has an invalid length.
[  535.139549][T19326] netlink: 'syz.6.5460': attribute type 29 has an invalid length.
[  535.139555][T19326] netlink: 148 bytes leftover after parsing attributes in process `syz.6.5460'.
[  535.139566][T19326] netlink: 'syz.6.5460': attribute type 1 has an invalid length.
[  535.274555][T19332] 9pnet_fd: Insufficient options for proto=fd
[  535.610010][T19342] lo speed is unknown, defaulting to 1000
[  537.096907][T19368] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  537.100003][T19368] overlayfs: failed to set xattr on upper
[  537.104074][T19368] overlayfs: ...falling back to redirect_dir=nofollow.
[  537.108770][T19355] loop9: detected capacity change from 0 to 131072
[  537.110859][T19368] overlayfs: ...falling back to index=off.
[  537.117961][T19368] overlayfs: ...falling back to uuid=null.
[  537.120315][T19355] F2FS-fs (loop9): Invalid log sectorsize (67108873)
[  537.123822][T19355] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  537.134387][T19355] F2FS-fs (loop9): invalid crc value
[  537.169359][T19374] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[  537.205082][T19355] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  537.215960][T19355] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  537.219437][T19355] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[  537.967439][T19416] netdevsim netdevsim7 netdevsim0: entered allmulticast mode
[  539.068938][ T4312] 0: reclassify loop, rule prio 0, protocol 800
[  539.154567][T17981] 0: reclassify loop, rule prio 0, protocol 800
[  541.054441][T19505] loop9: detected capacity change from 0 to 128
[  541.063476][T19505] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[  541.107792][T19505] UDF-fs: error (device loop9): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  541.127048][T19505] UDF-fs: error (device loop9): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  541.192691][T19507] loop9: detected capacity change from 0 to 256
[  541.201969][T19507] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  541.276265][   T33] audit: type=1326 audit(1756635199.260:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19506 comm="syz.9.5541" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716178ebe9 code=0x7ffc0000
[  541.297451][   T33] audit: type=1326 audit(1756635199.260:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19506 comm="syz.9.5541" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f716178ebe9 code=0x7ffc0000
[  541.325528][   T33] audit: type=1326 audit(1756635199.260:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19506 comm="syz.9.5541" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f716178ec23 code=0x7ffc0000
[  541.345113][   T33] audit: type=1326 audit(1756635199.269:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19506 comm="syz.9.5541" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f716178d69f code=0x7ffc0000
[  541.374730][   T33] audit: type=1326 audit(1756635199.269:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19506 comm="syz.9.5541" exe="/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f716178ec77 code=0x7ffc0000
[  541.384758][   T33] audit: type=1326 audit(1756635199.269:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19506 comm="syz.9.5541" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f716178d550 code=0x7ffc0000
[  541.393448][   T33] audit: type=1326 audit(1756635199.269:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19506 comm="syz.9.5541" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f716178d84a code=0x7ffc0000
[  541.405184][   T33] audit: type=1326 audit(1756635199.307:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19506 comm="syz.9.5541" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716178ebe9 code=0x7ffc0000
[  541.414050][   T33] audit: type=1326 audit(1756635199.307:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19506 comm="syz.9.5541" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716178ebe9 code=0x7ffc0000
[  543.003978][ T5317] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  543.169131][ T5317] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  543.175901][ T5317] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  543.181656][ T5317] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  543.191766][ T5317] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  543.197758][ T5317] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  543.201397][ T5317] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  543.213497][ T5317] usb 10-1: config 0 descriptor??
[  543.469326][T19545] overlayfs: failed to clone upperpath
[  543.688407][ T5317] hid_parser_main: 7 callbacks suppressed
[  543.688428][ T5317] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0
[  543.720997][ T5317] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[  543.863662][T19558] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5563'.
[  543.871161][T19558] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5563'.
[  543.972369][ T5317] usb 10-1: USB disconnect, device number 15
[  544.322147][T19562] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  544.638563][ T9419] 0: reclassify loop, rule prio 0, protocol 800
[  545.022664][ T8575] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  545.204407][ T8575] usb 10-1: Using ep0 maxpacket: 32
[  545.210082][ T8575] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  545.212119][T19619] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5589'.
[  545.213883][ T8575] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  545.220529][ T8575] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  545.227258][ T8575] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  545.236570][ T8575] usb 10-1: config 0 descriptor??
[  545.281834][T19623] Non-string source
[  545.313350][T17978] 0: reclassify loop, rule prio 0, protocol 800
[  545.340158][T19626] openvswitch: netlink: Message has 1 unknown bytes.
[  545.344419][T19626] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  545.452845][T19635] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5596'.
[  545.460266][T19635] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5596'.
[  545.699222][ T8575] savu 0003:1E7D:2D5A.000F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0
[  545.970567][T19597] loop9: detected capacity change from 0 to 512
[  545.986560][T19597] EXT4-fs (loop9): filesystem is read-only
[  546.007475][T19597] EXT4-fs (loop9): filesystem is read-only
[  546.009886][T19597] EXT4-fs (loop9): orphan cleanup on readonly fs
[  546.013029][T19597] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.5579: bad orphan inode 16
[  546.017685][T19597] ext4_test_bit(bit=15, block=3) = 0
[  546.027899][T19597] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  546.038493][ T8575] usb 10-1: USB disconnect, device number 16
[  546.189559][T19649] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5601'.
[  546.620228][T16549] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  547.424438][T19669] loop9: detected capacity change from 0 to 32768
[  547.429056][T19669] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.5610 (19669)
[  547.446971][T19669] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  547.455261][T19669] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm
[  547.700229][T19669] BTRFS info (device loop9): enabling ssd optimizations
[  547.702685][T19669] BTRFS info (device loop9): enabling free space tree
[  547.737969][   T33] audit: type=1800 audit(1756635205.321:150): pid=19669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5610" name="file1" dev="loop9" ino=260 res=0 errno=0
[  547.850916][T16549] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  547.925147][T19710] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5622'.
[  548.333651][T19727] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[  549.014202][T19745] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5637'.
[  549.388211][T19757] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5642'.
[  549.391841][T19757] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5642'.
[  549.396495][T19757] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5642'.
[  549.402122][T19757] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5642'.
[  549.408146][T19757] netlink: 'syz.9.5642': attribute type 6 has an invalid length.
[  549.754853][T19774] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5651'.
[  550.609433][T19783] loop9: detected capacity change from 0 to 32768
[  550.624895][T19783] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.5655 (19783)
[  550.642126][T19783] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  550.647745][T19783] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm
[  550.844697][T17978] 0: reclassify loop, rule prio 0, protocol 800
[  550.848161][T17978] 0: reclassify loop, rule prio 0, protocol 800
[  550.906494][T19783] BTRFS info (device loop9): rebuilding free space tree
[  550.940430][T19783] BTRFS info (device loop9): enabling ssd optimizations
[  550.943054][T19783] BTRFS info (device loop9): turning on sync discard
[  550.952575][T19783] BTRFS info (device loop9): enabling free space tree
[  550.955297][T19783] BTRFS info (device loop9): force clearing of disk cache
[  550.958627][T19783] BTRFS info (device loop9): enabling auto defrag
[  550.961254][T19783] BTRFS info (device loop9): doing ref verification
[  550.964041][T19783] BTRFS info (device loop9): max_inline set to 0
[  551.197660][T16549] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  551.552602][T19826] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5667'.
[  551.659472][T19833] overlayfs: empty lowerdir
[  551.765067][T19836] gretap0: entered promiscuous mode
[  551.767370][T19836] vlan4: entered promiscuous mode
[  552.220932][T19878] 9pnet: p9_errstr2errno: server reported unknown error @L	O!L+
[  552.988120][T19889] batadv1: entered promiscuous mode
[  552.995459][T19889] 8021q: adding VLAN 0 to HW filter on device batadv1
[  553.172221][T19899] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5701'.
[  553.270401][T19905] netlink: 'syz.9.5704': attribute type 12 has an invalid length.
[  553.273439][T19905] netlink: 'syz.9.5704': attribute type 29 has an invalid length.
[  553.280974][T19905] netlink: 148 bytes leftover after parsing attributes in process `syz.9.5704'.
[  553.284543][T19905] netlink: 51 bytes leftover after parsing attributes in process `syz.9.5704'.
[  553.336670][T19909] overlayfs: failed to clone upperpath
[  553.352659][T19909] overlayfs: failed to clone upperpath
[  553.531345][T19927] loop9: detected capacity change from 0 to 2048
[  553.551516][T19928] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  553.581162][   T33] audit: type=1800 audit(1756635210.793:151): pid=19927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5715" name="file1" dev="loop9" ino=15 res=0 errno=0
[  553.687252][T19937] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5720'.
[  553.811973][T19940] vlan0: entered promiscuous mode
[  556.268191][T17980] 0: reclassify loop, rule prio 0, protocol 800
[  556.437310][T19992] netlink: 'syz.9.5741': attribute type 10 has an invalid length.
[  556.441320][T19992] 8021q: adding VLAN 0 to HW filter on device bond0
[  556.445064][T19992] team0: Port device bond0 added
[  556.771750][T20001] ptrace attach of "/syz-executor exec"[20002] was attempted by "/syz-executor exec"[20001]
[  556.775907][ T5317] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[  556.936362][ T5317] usb 10-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  556.940289][ T5317] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.945459][T17980] 0: reclassify loop, rule prio 0, protocol 800
[  556.950877][ T5317] usb 10-1: Product: syz
[  556.952711][ T5317] usb 10-1: Manufacturer: syz
[  556.963368][ T5317] usb 10-1: SerialNumber: syz
[  556.986303][ T5317] r8152-cfgselector 10-1: Unknown version 0x0000
[  557.000521][ T5317] r8152-cfgselector 10-1: config 0 descriptor??
[  557.454419][ T5317] r8152-cfgselector 10-1: USB disconnect, device number 17
[  557.823171][T20018] __nla_validate_parse: 1 callbacks suppressed
[  557.823193][T20018] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5753'.
[  558.251493][   T33] audit: type=1326 audit(1756635215.162:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20027 comm="syz.7.5758" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7bcf8ebe9 code=0x7ffc0000
[  558.265361][   T33] audit: type=1326 audit(1756635215.162:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20027 comm="syz.7.5758" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7bcf8ebe9 code=0x7ffc0000
[  558.275002][   T33] audit: type=1326 audit(1756635215.171:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20027 comm="syz.7.5758" exe="/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd7bcf8ebe9 code=0x7ffc0000
[  558.289532][   T33] audit: type=1326 audit(1756635215.171:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20027 comm="syz.7.5758" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7bcf8ebe9 code=0x7ffc0000
[  558.298794][   T33] audit: type=1326 audit(1756635215.171:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20027 comm="syz.7.5758" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7bcf8ebe9 code=0x7ffc0000
[  558.309795][   T33] audit: type=1326 audit(1756635215.171:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20027 comm="syz.7.5758" exe="/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fd7bcf8ebe9 code=0x7ffc0000
[  558.322098][   T33] audit: type=1326 audit(1756635215.171:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20027 comm="syz.7.5758" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7bcf8ebe9 code=0x7ffc0000
[  558.407362][ T8575] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[  558.521602][T20040] v: renamed from ip6_vti0 (while UP)
[  558.574142][ T8575] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  558.581732][ T8575] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  558.587783][ T8575] usb 10-1: config 0 descriptor??
[  559.319115][ T8575] cp210x 10-1:0.0: cp210x converter detected
[  559.327229][ T8575] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -32
[  559.340207][ T8575] usb 10-1: cp210x converter now attached to ttyUSB0
[  559.552918][ T8575] usb 10-1: USB disconnect, device number 18
[  559.564222][ T8575] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  559.571091][T20062] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5772'.
[  559.581827][ T8575] cp210x 10-1:0.0: device disconnected
[  560.532625][T20097] netlink: 'syz.9.5787': attribute type 14 has an invalid length.
[  561.196609][T20124] loop9: detected capacity change from 0 to 32768
[  561.218131][T20124] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  561.243524][T20124] OCFS2: ERROR (device loop9): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature 
[  561.256487][T20124] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  561.260559][T20124] OCFS2: File system is now read-only.
[  561.263745][T20124] (syz.9.5800,20124,0):ocfs2_find_entry_dx:1037 ERROR: status = -30
[  561.302609][T16549] ocfs2: Unmounting device (7,9) on (node local)
[  561.737661][T20128] loop9: detected capacity change from 0 to 32768
[  561.760965][T20128] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.5801 (20128)
[  561.780306][T20128] BTRFS info (device loop9): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  561.784460][T20128] BTRFS info (device loop9): using xxhash64 (xxhash64-generic) checksum algorithm
[  562.023456][T20128] BTRFS info (device loop9): enabling ssd optimizations
[  562.026234][T20128] BTRFS info (device loop9): enabling free space tree
[  562.358613][T17976] 0: reclassify loop, rule prio 0, protocol 800
[  562.423924][T17980] 0: reclassify loop, rule prio 0, protocol 800
[  562.440386][T16549] BTRFS info (device loop9): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  562.613706][T20173] openvswitch: netlink: IP tunnel dst address not specified
[  562.970195][T20184] bad cache= option: no%e
[  562.970195][T20184] 
[  562.975822][T20184] CIFS: VFS: bad cache= option: no%e
[  563.080909][T20190] loop9: detected capacity change from 0 to 8
[  563.099696][T20190] SQUASHFS error: lzo decompression failed, data probably corrupt
[  563.113473][T20190] SQUASHFS error: Failed to read block 0x91: -5
[  563.116125][T20190] SQUASHFS error: Unable to read metadata cache entry [8f]
[  563.120198][T20190] SQUASHFS error: Unable to read inode 0x11f
[  563.711577][T20202] lo speed is unknown, defaulting to 1000
[  564.442475][T20213] overlayfs: failed to clone upperpath
[  564.668291][T20221] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  565.152935][    C0] 0: reclassify loop, rule prio 0, protocol 800
[  565.156073][    C0] 0: reclassify loop, rule prio 0, protocol 800
[  566.222401][T20227] loop9: detected capacity change from 0 to 262144
[  566.239017][T20227] F2FS-fs (loop9): invalid crc value
[  566.302179][T20227] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  566.309234][T20227] F2FS-fs (loop9): Start checkpoint disabled!
[  566.329783][T20227] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  568.575671][T17976] 0: reclassify loop, rule prio 0, protocol 800
[  568.578682][T17972] 0: reclassify loop, rule prio 0, protocol 800
[  568.773843][T20295] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5863'.
[  570.102625][T20336] loop9: detected capacity change from 0 to 16
[  570.115876][T20336] MTD: Attempt to mount non-MTD device "/dev/loop9"
[  570.734354][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  570.866676][T20348] netlink: 161716 bytes leftover after parsing attributes in process `syz.6.5887'.
[  572.249527][T20400] netlink: 304 bytes leftover after parsing attributes in process `syz.9.5913'.
[  572.334792][T20403] loop9: detected capacity change from 0 to 512
[  572.367623][T20403] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  572.373772][T20403] ext4 filesystem being mounted at /397/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  572.505461][T16549] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  572.936335][ T5239] Bluetooth: hci2: command 0x0405 tx timeout
[  572.995104][T20414] loop9: detected capacity change from 0 to 32768
[  572.998895][T20414] XFS: ikeep mount option is deprecated.
[  573.003857][T20414] XFS: ikeep mount option is deprecated.
[  573.020945][T20414] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  573.089188][T20414] XFS (loop9): Ending clean mount
[  573.144160][T16549] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  574.130792][T17980] 0: reclassify loop, rule prio 0, protocol 800
[  574.154989][T16682] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[  574.171570][T20449] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5929'.
[  574.321401][T16682] usb 10-1: unable to get BOS descriptor or descriptor too short
[  574.327941][T16682] usb 10-1: config 5 has an invalid interface number: 58 but max is 0
[  574.332085][T16682] usb 10-1: config 5 has no interface number 0
[  574.334812][T16682] usb 10-1: config 5 interface 58 has no altsetting 0
[  574.342665][T16682] usb 10-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= a.af
[  574.346927][T16682] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.350419][T16682] usb 10-1: Product: syz
[  574.352257][T16682] usb 10-1: Manufacturer: syz
[  574.354261][T16682] usb 10-1: SerialNumber: syz
[  574.672622][T16682] usb 10-1: USB disconnect, device number 19
[  574.732458][   T26] 0: reclassify loop, rule prio 0, protocol 800
[  575.372262][T20480] netlink: 'syz.6.5943': attribute type 49 has an invalid length.
[  576.033633][T20499] loop9: detected capacity change from 0 to 128
[  576.046154][T20499] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[  576.076444][T20499] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  579.159823][T20563] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  579.163794][T20563] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  579.167445][T20563] CPU: 0 UID: 0 PID: 20563 Comm: syz.7.5977 Not tainted syzkaller #0 PREEMPT(full) 
[  579.172034][T20563] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  579.175500][T20563] RIP: 0010:xfrm_alloc_spi+0xe0e/0xf30
[  579.177662][T20563] Code: 00 fc ff df 80 3c 03 00 4c 8b 34 24 74 08 4c 89 f7 e8 f6 50 01 f8 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 48 8b 5c 24 58 74 08 4c 89 f7 e8 bf 51 01 f8 4d 89 3e
[  579.184459][T20563] RSP: 0018:ffffc90009f170e0 EFLAGS: 00010246
[  579.187388][T20563] RAX: 0000000000000000 RBX: 1ffff11006abfad6 RCX: dffffc0000000000
[  579.190579][T20563] RDX: ffffc900218a9000 RSI: 000000000000021e RDI: 000000000000021f
[  579.193556][T20563] RBP: ffffc90009f17230 R08: dffffc0000000000 R09: 0000000000000002
[  579.196537][T20563] R10: 000000000000000a R11: 0000000000000002 R12: 1ffff11006abfad6
[  579.199574][T20563] R13: ffff8880355fd6b0 R14: 0000000000000000 R15: ffff8880355fd6a8
[  579.202504][T20563] FS:  00007fd7bde1b6c0(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[  579.206642][T20563] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  579.208887][T20563] CR2: 0000200000001100 CR3: 000000011296e000 CR4: 00000000000006f0
[  579.211519][T20563] Call Trace:
[  579.212872][T20563]  <TASK>
[  579.214076][T20563]  ? xfrm_alloc_spi+0x2a0/0xf30
[  579.216153][T20563]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  579.217980][T20563]  ? xfrm_find_acq+0x87/0xa0
[  579.219384][T20563]  xfrm_alloc_userspi+0x70b/0xc90
[  579.220983][T20563]  ? apparmor_capable+0x137/0x1b0
[  579.222806][T20563]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  579.224771][T20563]  ? __nla_parse+0x40/0x60
[  579.226544][T20563]  xfrm_user_rcv_msg+0x7a3/0xab0
[  579.228513][T20563]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  579.230737][T20563]  ? __pfx___mutex_trylock_common+0x10/0x10
[  579.233115][T20563]  ? rcu_is_watching+0x15/0xb0
[  579.235098][T20563]  ? trace_contention_end+0x39/0x120
[  579.237421][T20563]  ? __mutex_lock+0x335/0x1350
[  579.239232][T20563]  netlink_rcv_skb+0x208/0x470
[  579.241146][T20563]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  579.243411][T20563]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  579.245647][T20563]  ? netlink_deliver_tap+0x2e/0x1b0
[  579.247816][T20563]  ? netlink_deliver_tap+0x2e/0x1b0
[  579.249997][T20563]  xfrm_netlink_rcv+0x79/0x90
[  579.251882][T20563]  netlink_unicast+0x82f/0x9e0
[  579.253763][T20563]  ? __pfx_netlink_unicast+0x10/0x10
[  579.255931][T20563]  ? netlink_sendmsg+0x642/0xb30
[  579.258046][T20563]  ? skb_put+0x11b/0x210
[  579.259829][T20563]  netlink_sendmsg+0x805/0xb30
[  579.261818][T20563]  ? __pfx_netlink_sendmsg+0x10/0x10
[  579.264097][T20563]  ? aa_sock_msg_perm+0xf1/0x1d0
[  579.266064][T20563]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  579.268140][T20563]  ? __pfx_netlink_sendmsg+0x10/0x10
[  579.270230][T20563]  __sock_sendmsg+0x21c/0x270
[  579.272105][T20563]  ____sys_sendmsg+0x505/0x830
[  579.274001][T20563]  ? __pfx_____sys_sendmsg+0x10/0x10
[  579.276278][T20563]  ? import_iovec+0x74/0xa0
[  579.278079][T20563]  ___sys_sendmsg+0x21f/0x2a0
[  579.279918][T20563]  ? __pfx____sys_sendmsg+0x10/0x10
[  579.281906][T20563]  ? __fget_files+0x2a/0x420
[  579.283801][T20563]  ? __fget_files+0x3a0/0x420
[  579.285710][T20563]  __x64_sys_sendmsg+0x19b/0x260
[  579.287640][T20563]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  579.289789][T20563]  ? rcu_is_watching+0x15/0xb0
[  579.291665][T20563]  ? do_syscall_64+0xbe/0x3b0
[  579.293575][T20563]  do_syscall_64+0xfa/0x3b0
[  579.295414][T20563]  ? lockdep_hardirqs_on+0x9c/0x150
[  579.297443][T20563]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  579.299799][T20563]  ? exc_page_fault+0x9f/0xf0
[  579.301674][T20563]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  579.303973][T20563] RIP: 0033:0x7fd7bcf8ebe9
[  579.305805][T20563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  579.313425][T20563] RSP: 002b:00007fd7bde1b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  579.316788][T20563] RAX: ffffffffffffffda RBX: 00007fd7bd1c5fa0 RCX: 00007fd7bcf8ebe9
[  579.319740][T20563] RDX: 0000000020004000 RSI: 0000200000000540 RDI: 0000000000000003
[  579.322760][T20563] RBP: 00007fd7bd011e19 R08: 0000000000000000 R09: 0000000000000000
[  579.325730][T20563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  579.328440][T20563] R13: 00007fd7bd1c6038 R14: 00007fd7bd1c5fa0 R15: 00007fffe1a8bd38
[  579.330976][T20563]  </TASK>
[  579.331960][T20563] Modules linked in:
[  579.333370][T20563] ---[ end trace 0000000000000000 ]---
[  579.335146][T20563] RIP: 0010:xfrm_alloc_spi+0xe0e/0xf30
[  579.337349][T20563] Code: 00 fc ff df 80 3c 03 00 4c 8b 34 24 74 08 4c 89 f7 e8 f6 50 01 f8 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 48 8b 5c 24 58 74 08 4c 89 f7 e8 bf 51 01 f8 4d 89 3e
[  579.343952][T20563] RSP: 0018:ffffc90009f170e0 EFLAGS: 00010246
[  579.345880][T20563] RAX: 0000000000000000 RBX: 1ffff11006abfad6 RCX: dffffc0000000000
[  579.348321][T20563] RDX: ffffc900218a9000 RSI: 000000000000021e RDI: 000000000000021f
[  579.350884][T20563] RBP: ffffc90009f17230 R08: dffffc0000000000 R09: 0000000000000002
[  579.353604][T20563] R10: 000000000000000a R11: 0000000000000002 R12: 1ffff11006abfad6
[  579.356194][T20563] R13: ffff8880355fd6b0 R14: 0000000000000000 R15: ffff8880355fd6a8
[  579.358679][T20563] FS:  00007fd7bde1b6c0(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[  579.361538][T20563] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  579.363558][T20563] CR2: 0000200000001100 CR3: 000000011296e000 CR4: 00000000000006f0
[  579.366189][T20563] Kernel panic - not syncing: Fatal exception in interrupt
[  579.369601][T20563] Kernel Offset: disabled
[  579.371125][T20563] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:09:47  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000005d RBX=000000000000005d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001390 RDI=0000000000001391 RBP=00000000000003f8 RSP=ffffc90009f16870
R8 =ffff88801f9d0237 R9 =1ffff11003f3a046 R10=dffffc0000000000 R11=ffffffff854f3980
R12=dffffc0000000000 R13=ffffffff99afa8ce R14=ffffffff99def420 R15=0000000000000000
RIP=ffffffff854f39fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd7bde1b6c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001100 CR3=000000011296e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fd7bd197498 00007fd7bd197470 XMM03=00007fd7bd1974a8 00007fd7bd1974a0
XMM04=00007fd7bdcfd100 00007fd7bd197460 XMM05=00007fd7bd197478 00007fd7bd1974c0
XMM06=00007fd7bd1974b8 00007fd7bd1974b0 XMM07=00007fd7bd1974a8 00007fd7bd1974a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fd7bd012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000080080783 RBX=1ffff1100436e25a RCX=000000000000009d RDX=ffff888021b712d0
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffc900001e0c28 RSP=ffffc900001e0a80
R8 =ffff888021b716bf R9 =1ffff1100436e2d7 R10=dffffc0000000000 R11=ffffed100436e2d8
R12=dffffc0000000000 R13=00000000000036b0 R14=00000000004a3800 R15=0000000000000000
RIP=ffffffff8698b247 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa73ae91800 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055da1e39a7e8 CR3=0000000021f20000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
