last executing test programs:

4m48.00630287s ago: executing program 1 (id=646):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x60, 0x1413, 0x1, 0xf, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}, {{0x3, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6erspan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x8810)

4m47.926633633s ago: executing program 1 (id=649):
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x5, 0x0}, 0x4e21, 0x3, 'rr\x00', 0x4, 0x81, 0x5}, {@remote, 0x4e23, 0x2000000, 0x2, 0x12d5f, 0x3}}, 0x44)
r0 = io_uring_setup(0x2c49, &(0x7f0000000400))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1)

4m47.922992063s ago: executing program 1 (id=651):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1000806, &(0x7f0000005d80)=ANY=[@ANYBLOB='iocharset=cp857,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c696f636861727365743d63703933322c666d61736b3d30303030303030303030303030303030303030303030342c6572726f72733d636f6e74696e75652c666d61736b3d30303030303030303030303030303030303030303030312c6572726f72733d72656d6f756e742d726f2c6e616d65636173653d312c666d61736b3d30303030303030303030303030303030303030303030332c756d61736b3d30303030303030303030303030303030303030303030302c636f6465706167653d63703933322c0087c36ada509ad1217819ccb05e2c31c700a774505074a59028e5cccdd3"], 0x9, 0x1505, &(0x7f0000000180)="$eJzs3Au4jdX2MPAx5pwvm9BKcp9jjpeVXCZJEknIJUmSJMktIUmSJCS33JKQhNyT3ENyC8n9fss9SY4kSUJCwvweHefzndPp9P2/0/mc59nj9zzz2XPstcZY411jr9u7n72/azewUp3K5WsxM/xb8K9fugJACgD0AYBrASACgOKZi2e+dHk6jV3/vRsRf66Hp1ztDsTVJPNP3WT+qZvMP3WT+aduMv/UTeafusn8UzeZvxCp2ZapOa6TlXqXnP9PzeT1P3WT+aduMv/UTeafusn8UzOW+adyMv/UTeafusn8hUjN/pTzyGkvF/svOJ/9H1h/u6uudh9/sKL/p7yr95MnhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEECI1ORuuMADwt/3V7ksIIYQQQgghhBB/npD2ancghBBCCCGEEEKI/zwEMBoMRJAG0kIKpIP0cA1kgIyQCa6FBFwHmeF6yAI3QFbIBtkhB+SEXJAbLBA4YIghD+SFJNwI+eAmyA8FoCAUAg+FoQjcDEXhFigGt0JxuA1KwO1QEkrBHVAa7oQycBeUhXJQHu6GClARKkFluAeqwL1QFe6DanA/VIcHoAY8CDXhIagFD0NteATqwKNQFx6DelAfGkBDaPTP8/W/zn8JOsHL0Bm66Ev3QHd4BXpAT+gFvaEPvAp94TXoB69DfxgAA+ENGARvwmB4C4bAUBgGb8NwGAEjYRSMhjEwFt6BcfAujIf3YAJMhEkwGabAVJgG78N0mAEz4QOYBR/CbJgDc2EezIePYAEshEXwMSyGT2AJLIVlsBxWwEpYBathDayFdbAeNsBG2ASbYQt8ClthG2yHHbATdsFu+Az2wOewF76AffDl/zD/zD/kt0dAQIUKDRpMg2kwBVMwPabHDJgBM2EmTGACM2NmzIJZMCtmxeyYHXNiTsyNuZGQkJExD+bBJCYxH+bD/JgfC2JB9OixCBbBongLFsNiWByLYwksgSWxFJbC0lgay2AZLItlsfztcwCwAlbCSngP3oP3YlWsitWwGlbH6lgDa2BNrIm1sBbWxtpYB+tgXayL9bAeNsAG2AgbYWNsjE2wCTbDZtgcm2MLbIEtsSW2wlbYGltjG2yDbbEttsN22B47YAd8CV/Cl/Fl7IIVVDfsjt2xB/bAXtgbe+Or2Bdfw9fwdeyPA3AgvoFv4Js4GE/jEByKw3AYllEjcCSOQlZjcCyOxXE4DsfjeJyAE3EiTsYpOBWn4TScjjNwBn6As/BD/BDn4Bych/NxPi7AhbgIF+FiPINLcCkuw+W4AlfiClyNa3A1rlN/e2huxs34KX6K23Ab7sAduAt34Wf4GX6On2N/3If7cD/uxwN4AA/iQTyEh/AwHsYjeASP4lE8hsfwOJ7Ak3gCT+EpPI1n8CyexXN4Ds/jCzm/qb2rwNr+oC4xyqg0Ko1KUSkqvUqvMqgMKpPKpBIqoTKrzCqLyqKyqqwqu8qucqqcKrfKrUiRYhWrPCqPSqqkyqfyAUBXVVAVVF55VUQVUUVVUVVMFVPF1W2qhLpdlVSlVFNfWpVWZVQzX1aVU+VVeVVBVVSVVGVVWVVRVVRVVVVVU9VUdVVd1VAPqpqqG/bCh9WlydRRA7CuGoj1VH3VQDVUb+LjqrEajE1UU9VMPamG4hBsoRr7luoZ1UqNxNbqOTUKn1dt1Rhsp15U7VUH1VG9pDqpJr6z6qImYDfVXU3GHqqn6qV6q+lYUV2aWCX1uuqvBqiB6g01D99Ug9Vbaogaqoapt9VwNUKNVKPUaDVGjVXvqHHqXTVevacmqIlqkpqspqipapp6X01XM9RM9YGapT5Us9UcNVfNU/PVR2qBWqgWqY/VYvWJWqKWqmVquVqhVqpVarVao9aqdWq92qA2qk1qs9qiPlVb1Ta1Xe1QO9UutVt9pvaoz9Ve9YXap75U+9Vf1AH1lTqovlaH1DfqsPpWHVHfqaPqe3VMdVHH1Ql1Uv2oTqmf1Gl1Rp1VP6tz6hd1Xl1QF1VQoFErrbXRkU6j0+oUnU6n19foDDqjzqSv1Ql9nc6sr9dZ9A06q86ms+scOqfOpXNrq0k7zTrWeXRendQ36nz6Jp1fF9AFdSHtdWFdRN+si+pbdDF9qy6ub9Ml9O26pC6l79Cl9Z26jL5Ll9XldHl9t66gK+pKurK+R1fR9+qq+j5dTd+vq+sHdA39oK6pH9K19MO6tn5E19GP6rr6MV1P19cNdEPdSD+uG+sndBPdVDfTT+rm+indQj+tW+pndCv9rG6tn9Nt9PO6rX5Bt9Mv6va6g+6oL+iLOujOuovuqrvp7voV3UP31L10b91Hv6r76td0P/267q8H6IH6DT1Iv6kH67f0ED1UD9Nv6+F6hB6pR+nReoweq9/R4/S7erx+T0/QE/UkPVlP0VN1r8uVZl7KN/Av89/9J/n9fr31zXqL/lRv1dv0dr1D79S79G69W+/Re/RevVfv0/v0fr1fH9AH9EF9UB/Sh/RhfVgf0Uf0UX1UH9PH9HF9Qv+sf9Sn9E/6tD6jz+if9Tl9Tp+/fB+AQaOMNsZEJo1Ja1JMOpPeXGMymIwmk7nWJMx1JrO53mQxN5isJpvJbnKYnCaXyW2sIeMMm9jkMXlN0txo8pmbTH5TwBQ0hYw3hU0Rc/Pv5UeXn+H+MP93+ls+6XJ+I9PINDaNTRPTxDQzzUxz09y0MC1MS9PStDKtTGvT2rQxbUxb09a0M+1Me9PedDQdTSfTyXRGMF1NV9PdvGJ6mJ6ml+lt+phXTV/T1/Qz/Ux/098MNAPNIDPIDDaDzRAzxAwzw8xwM9yMNCPNaDPajDVjzTgzzow3480EM8FMMpPMFDPFXHphvWSmmWlmmVlmtplt5pq5Zr6ZbxaYBWaRWWQWm8VmiVlqlprlZrlZaVaa1Wa1WWvWmvVmvdloNpolZovZYraarWa72W52mp1mt9lt9pg9Zq/Za/aZfWa/2W8OmAPmoDloDplD5rA5bI6YI+aoOWqOmWPmuDluTpqT5pQ5ZU6b0+asOWvOmXPmvDlvLpqLl972RSpSkYlMlCZKE6VEKVH6KH2UIcoQZYoyRYkoEWWOMkdZohuirFG2KHuUI8oZ5YpyRzaiyEUcxVGeKG+UjG6M8kU3RfmjAlHBqFDko8JRkejmqGh0S1QsujUqHt0WlYhuj0pGpaI7otLRnVGZ6K6obFQuKh/dHVWIKkaVosrRPVGV6N6oanRfVC26P6oePRDViB6MakYPRbWih6Pa0SNRnejRqG70WFQvqh81iBpGjf7U+iGczvaE72y72LTQzXa3r9getqftZXvbPvZV29e+ZvvZ121/O8AOtG/YQfZNO9i+ZYfYoXaYfdsOtyPsSDvKjrZj7Fj7jh1n37Xj7Xt2gp1oJ9nJdoqdaqfZ9+10O8POtB/YWfZDO9vOsXPtPDvffmQX2IV2kf3YLraf2CV2qV1ml9sVdqVdZVfbNXatXWfX2w12o91kN9st9lO71W6z2+0Ou9PusrvtZ3aP/dzutV/YffZLu9/+xR6wX9mD9mt7yH5jD9tv7RH7nT1qv7fH7A/2uD1hT9of7Sn7kz1tz9iz9md7zv5iz9sL9qINl97cX3p5J0OG0lAaSqEUSk/pKQNloEyUiRKUoMyUmbJQFspKWSk7ZaeclJNyU266hIkpD+WhJCUpH+Wj/JSfClJB8uSpCBWholSUilExKk7FqQSVuPxoAbqT7qS76C4qR+XobrqbKlJFqkyVqQpVoapUlapRNapO1akG1aCaVJNqUS2qTbWpDtWhulSX6lE9akANqBE1osbUmJpQE2pGzag5NacW1IJaUktqRa2oNbWmNtSG2lJbakftqD21p47UkTpRJ+pMnakrdaXu1J16UA/qRb2oD/WhvtSX+lE/6k/9aSANpEE0iAbTYBpCQ2kYvU3DaQSNpFE0msbQWBpL42gcjafxNIEm0CSaRFNoCk2jaTSdptNMmkmzaBbNptk0l+bSfJpPC2gBLaJFtJgW0xJaQstoGa2gFbSKVtEaWkPraB1toA20iTbRFtpCW2krbafttJN20m7aTXtoD+2lvbSP9tF+2k8H6AAdpIN0iA7RYTpMR+gIHaWjdIyO0XE6TifpJJ2iU3SaTtNZOkvn6Bc6TxfoIgVKcelceneNy+AyukzuWvePcXaXw+V0uVxuZ11Wl+3vYnLO5XcFXEFXyHlX2BVxN/8mLulKuTtcaXenK+PucmV/E1dx97qq7j5Xzd3vKrt7/i6u7h5wNdyjrqZ7zNVy9V1t19DVcY+6uu4xV8/Vdw1cQ9fcPeVauKddS/eMa+We/U28wC10a9xat86td3vc5+6s+9kdcd+5c+4X19l1cX3cq66ve831c6+7/m7Ab+Jh7m033I1wI90oN9qN+U08yU12U9xUN82976a7Gb+J57uP3Cy3yM12c9xcN+/X+FJPi9zHbrH7xC1xS90yt9ytcCvdKrf6f/e63G10m9xmt9t95ra6bW672+F2ul2/xpeOY6/7wu1zX7rD7lt3wH3lDrqj7pD75tf40vEddd+7Y+4Hd9ydcCfdj+6U+8mddmd+Pf5Lx/6ju+AuuuCAkRVrNhxxGk7LKZyO0/M1nIEzcia+lhN8HWfm6zkL38BZORtn5xyck3NxbrZM7Jg55jycl5N8I+fjmzg/F+CCXIg9F+YifDMX5Vu4GN/Kxfk2LsG3c0kuxXdwab6Ty/BdXJbLcXm+mytwRa7ElfkersL3clW+j6vx/VydH+Aa/CDX5Ie4Fj/MtfkRrsOPcl1+jOtxfW7ADbkRP86N+Qluwk25GT/JzfkpbsFPc0t+hlvxs9yan+M2/Dy35Re4Hb/I7bkDd+SXuBO/zJ25C3flbtydX+Ee3JN7cW/uw69yX36N+/Hr3J8H8EB+gwfxmzyY3+IhPJSH8ds8nEfwSB7Fo3kMj+V3eBy/y+P5PZ7AE3kST+YpPJWn8fs8nWfwTP6AZ/GHPJvn8Fyex/P5I17AC3kRf8yL+RNewkt5GS/nFbySV/FqXsNreR2v5w28kTfxZt7Cn/JW3sbIO3gn7+Ld/Bnv4c95L3/B+/hL3s9/4QP8FR/kr/kQf8OH+Vs+wt/xUf6ej/EPfJxP8En+kU/xT3yaz/BZ/pnP8S98ni/wRQ4MMcYq1rGJozhNnDZOidPF6eNr4gxxxjhTfG2ciK+LM8fXx1niG+KscbY4e5wjzhnninPHNqbYxRzHcZ44b5yMb4zzxTfF+eMCccG4UOzjwnGR+Oa4aHxLXCy+NS4e3xaXiG+PS8al4kfvLx3fGZeJ74rLxuXi8vHdcYW4YlwprhzfE1eJ742rxvfF1eL742LxA3GN+MG4ZvxQXCt+OK4dPxLXiR+N68aPxfXi+nGDuGHcKH48bhw/ETeJm8bN4ifj5vFTcYv46bhl/EzcKn72Dy/vGneLu8evxK/EIdyn5ybnJecnP0ouSC5MLkp+nFyc/CS5JLk0uSy5PLkiuTK5Krk6uSa5NrkuuT65IbkxuSm5ORlC5bTg0SuvvfGRT+PT+hSfzqf31/gMPqPP5K/1CX+dz+yv91n8DT6rz+az+xw+p8/lc3vryTvPPvZ5fF6f9Df6fP4mn98X8AV9Ie99YV/EN/SNfCPf2D/hm/imvpl/0j/pn/JP+af90/4Z38o/61v753wb/7xv61/wL/gXfXvfwXf0L/lO/mXf2XfxXX1X39139z18D9/L9/J9fB/f1/f1/Xw/399f8AP9QD/ID/KD/WA/xA/xw/wwP9wP9yP9SD/aj/Zj/Vg/zo/z4/14PyFlgp/kJ/kpfoqf5qf56X66n+ln+ln5Z/nZfraf6+f6+X6+X+AX+EV+kV/sF/slfolf5pf5FX6FX+VX+TV+jV/n1/kNfoPf5Df5LX6L3+q3+u1+u9/pd/rdfrff4/f4vX6v3+dDCF32nw3+gD/ov/aH/Df+sP/WH/Hf+aP+e3/M/+CP+xP+pP/Rn/I/+dP+jD/rf/bn/C/+vL/gL/rgxybeSYxLvJsYn3gvMSExMTEpMTkxJTE1MS3xfmJ6YkZiZuKDxKzEh4nZiTmJuYl5ifmJjxILEgsTixIfJxYnPkksSSxNLEssT6xIrEyEkGtrHPKEvCEZbgz5wk0hfygQCoZCwYfCoUi4ORQNt4Ri4dZQPNwWSoTbQ8lQKtwRHgv1Qv3QIDQMjcLjoXF4IjQJTUOz8GRoHp4KLcLToWV4JrQKz4bW4bnQJjwf2oYXQrvwYmgfOoSO4aXQKbwcOocuoWvoFrqHV0KP0DP8EnqHPuHV0De8FvqF10P/MCAMDG+EQeHNMDi8FYaEoWFYeDsMDyPCyDAqjA5jwtjwThgX3g3jw3thQpgYJoXJYUqYGqaF98P0MCPMDB+EWeHDMDvMCXPDvDA/fBQWhIVhUfg4LA6fhCVhaVgWlgdIWRlWhdVhTVgb1oX1YUPYGDaFzWFL+DRsDdvC9rAj7Ay7wu7wWdgTPg97wxdhX/gy7A9/CQfCV+Fg+DocCt+Ew+HbcCR8F46G78Ox8EM4Hk6EkwHDqfBTOB3OhLPh53Au/BLOhwvhovzNmhBCCCHE/xX9B5d3+yffU5cX/Pq7c4CM23Ic+seaG7L+dd9T5WyeAIBnurR7+G+rQoWuXbtevu4SDVHeOQCQuJKfBq7ES6EZPAUtoSkU/af99VQdzvG/rv8bKQCQHv6x/i2/U3/ErD+oHyXnAOTPeyUnHVyJr9Qv9jv1szX+g/rpvhoL0OT/yMkAV+Ir9YvAE/AstPy7awohhBBCCCGEEH/VU93R5o8+3176fJ7TXMlJC1fiP/p8LoQQQgghhBBCiKvv+Q4dn368ZcumbWRzFTbtMv51Cv8t/fzOJs1/Rxt/3gYvn736b+nnP70pd/nR/j/JumpPSUIIIYQQQoj/kCtv+q92J0IIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghROr1/+OfkF3tYxRCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGutv8VAAD//zmwHF0=")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x77359400})

4m47.606646662s ago: executing program 1 (id=654):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}]}, 0x3, 0x570, &(0x7f0000000c00)="$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")
r0 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6)
open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
write$P9_RREADLINK(r0, &(0x7f0000000180)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10)

4m46.992935616s ago: executing program 1 (id=658):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x1000, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="d2ffb49ede31518d65a476b76e4a4e0b75db47c327ab5b7233ac3507e16db41df04709094056af33a6db1e301a74db81f27f6aa6a8ca9d22a565ff96d46e88fa99b284c26c46494072fc2e47da240c71"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0})

4m46.32692726s ago: executing program 1 (id=664):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000005ac0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000007f00), &(0x7f0000007f40)='./file0\x00', 0x1210002, &(0x7f0000007f80)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}]}}, 0x1, 0x0, 0x0)

4m46.121404136s ago: executing program 32 (id=664):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000005ac0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000007f00), &(0x7f0000007f40)='./file0\x00', 0x1210002, &(0x7f0000007f80)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}]}}, 0x1, 0x0, 0x0)

3m17.755004003s ago: executing program 2 (id=1641):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0)

3m17.754127919s ago: executing program 2 (id=1643):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc, 0x6, 0xc934, 0x0, 0x10001, 0x3, 0x0, 0x42b, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010)

3m17.645129837s ago: executing program 2 (id=1644):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0}], 0x1, 0x0)
r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0x4, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r2, 0x100847c0, 0x0, 0x1, 0x0, 0x0)

3m17.534849065s ago: executing program 2 (id=1646):
syz_mount_image$udf(&(0x7f00000002c0), &(0x7f0000000000)='./file0\x00', 0x847, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES64], 0xe0, 0xc2e, &(0x7f0000000f40)="$eJzs3U9sHNd9B/DfGy7FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIRRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cvHU6fSwWwEAPEiXR7966oz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7yWxqv3HfVL7f5bt8eGR7avdjhVNfuq8uVP/fSZs+e+9MLQ+W5eas98QP377bPx2ujVi42XZ2/OzU8tLExNNsZm2hOzk1O73sNe6291ojoBjZuv35q8fn2hceb5s5s+vj34/sATxwYvDD178plu2bHhkZHRjSL13vK1e25Ix04zPA5FEScjxXPf+2lqRUQRez8X9Qc79lsdrjpxourE2PBI1ZHpdmtmsfzwSvdEFBGNnkrN7jnafiyi1v9A+7CzZsRS2fyywSfK7o3OteZb16anGlda84vtxfbszJXUaW3Zn0YUcT5FLEfE6sDdu+uPImqR4jtH19K1iOjrnocvVhODd25HsY993IWynY3+iOXiERizA2wging1UvzsneMxka8z1bXmCxGvlvmDiLfKfCkilV+McxHvbfM94tFUiyL+shz/C2tpsroedK8rl77W+MrM9dmest3ryke8P9x1pXhI94fDW/LBOODXpnoU0aqu+Gvp3n+zAwAAAAAAAAAAAAAAAMD9djiK+EykeOU//qSaVxzVvPSjF4b+cPBX+3rKPf0h+0kR8XxELBW7m5N7KE8MvJKupPSQ5xI/zupRxJ/m+X/fetiNAQAAAAAAAAAAAAAAAAAAeKwV8ZNI8eK7x9Ny9K4p3p650bjaujbdWRW2u/Zvd8309fX19UbqZDPneM6lnMs5V3Ku5owi18/ZzDmecynncs6VnKs5oy/Xz9nMOZ5zKedyzpWcqzmjluvnbOYcz7mUcznnSs7VnHFA1u4FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPg4KaKIX0SKb39jLUWKiGbEeHRyZeBhtw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2kIr4fKRp/1LyzrRYRqfq343j5y7loHirzk9EcKvOlaF7M2aqy1vzWQ2g/e9OfivhxpBiov31nwPP493fe3fkaxFvf3Hj32Von+7ofDr4/8MSxoxeGRn7j6Z1ep+0acOJSe+bW7cbY8MjIaM/mWj76J3u2DebjFven60TEwhtvvt6anp6av/cX5VdgD9UfoRep9rj01IvqRdQORDMeTt95DJT3//cixe+++5/dG37n/l+PX+m8u3OHj5//2cb9/8WtO9rl/b+2tV6+/5f39O3u/0/2bHsx/26kvxZRX7w5138sor7wxpsn2zdbN6ZuTM2cO3Xqy0NDXz57qv9QRP16e3qq59V9OV0AAAAAAAAAAAAAAAAAD04q4vcjRevHa6kREber+VqDF4aePflMX/RV8602zdt+bfTqxcbLszfn5qcWFqYmG2Mz7YnZyandHq5eTfcaGx7Zl858qMP73P7D9Zdn596Yb9/448VtPz9Sv3htYXG+NbH9x3E4iohm75YTVYPHhkeqRk+3WzNV1SvbTqb/6PpTEf8VKSbONdLn87Y8/3/rDP9N8/+Xtu5on+b/f6JnW3nMlIr4eaT4nb96Oj5ftfNI3HXOcrm/ixQnzn8ul4tDZbluGzrPFejMDCzL/l+k+KdfbC7bnQ/55EbZ07s+sY+IcvyPRorv/8V34zfzts3Pf9h+/I9s3dE+jf9TPduObHpewZ67Th7/k5HipSffjt/K2z7o+R/dZ28cz4XvPJ9jn8b/Uz3bBvNxf/v+dB0AAAAAAAAAAOCR1p+K+PtI8cORWnohb9vN3/+b3Lqjffr7X5/u2TZ5f9Yr+tAXez6pAAAAAHBA9KcifhIpbiy+fWcO9eb53z3zP39vY/7ncNryafXnfL9WPTfgfv75X6/BfNzxvXcbAAAAAAAAAAAAAAAAAAAADpSUinghr6c+Xs3nn9xxPfWVSPHK/zyXy6VjZbnuOvCD1a/1y7MzJy9OT89OtBZb16anGqNzrYmpsu5TkWLtbz+X6xbV+urd9eY7a7xvrMU+HylG/qFbtrMWe3dt8qc2yp4uy34iUvz3P24u213H+lMbZc+UZf8mUnz9X7Yve2yj7Nmy7HcjxY++3uiWPVKW7T4f9dMbZZ+fmC32YVQAAAAAAAAAAAAAAAAAAAB43PSnIv48UvzvzeU7c/nz+v/9PW8rb32zZ73/LW5X6/wPVuv/7/T6Xtb/r54rsLTTUQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OMpRRFvRoq5y2tpZaB831G/1J65dXtseGT7aodTVbOvKl/+1E+fOXvuSy8Mne/mB9e/3z4Tr41evdh4efbm3PzUwsLUZGNspj0xOzm16z3stf5WJ6oT0Lj5+q3J69cXGmeeP7vp49uD7w88cWzwwtCzJ5/plh0bHhkZ7SlT67/no98l7bD9UBTx15Hiue/9NP1wIKKIvZ+LD/nu7LfDVSdOVJ0YGx6pOjLdbs0slh9e6Z6IIqLRU6nZPUcPYCz2pBmxVDa/bPCJsnujc6351rXpqcaV1vxie7E9O3MldVpb9qcRRZxPEcsRsTpw9+76o4jXI8V3jq6lfx2I6Ouehy9eHv3qqTM7t6PYxz7uQtnORn/EcvEIjNkBNhBF/HOk+Nk7x+PfBiJq0fmJL0S8WuYPIt6Kznin8otxLuK9bb5HPJpqUcT/l+N/YS29M1BeD7rXlUtfa3xl5vpsT9nudeWRvz88SAf82lSPIn5UXfHX0r/77xoAAAAAAAAAAAAAAADgACni1yPFi+8eT9X84DtzitszNxpXW9emO9P6unP/unOm19fX1xupk82c4zmXci7nXMm5mjOKXD9ns8z6+vp4fr+UcznnSs7VnNGX6+ds5hzPuZRzOedKztWcUcv1czZzjudcyrmccyXnas44IHP3AAAAAAAAAAAAAAAAAACAj5ei+ifFt7+xltYHOutLj0cnV6wH+rH3ywAAAP//Iun4rQ==")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

3m17.423694286s ago: executing program 2 (id=1647):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x6, 0x5, 0x2)

3m17.125330204s ago: executing program 2 (id=1650):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x181001, 0x0)
ioctl$SNAPSHOT_FREE(r0, 0x3305)

3m16.893393164s ago: executing program 33 (id=1650):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x181001, 0x0)
ioctl$SNAPSHOT_FREE(r0, 0x3305)

1m27.041537126s ago: executing program 0 (id=3060):
r0 = socket$kcm(0x2b, 0x1, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000014})
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
shutdown(r0, 0x1)

1m26.965657848s ago: executing program 0 (id=3062):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = epoll_create(0x6)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000004c0))

1m26.883679925s ago: executing program 0 (id=3064):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00')
pread64(r0, &(0x7f0000000180)=""/15, 0xf, 0x40000000000000b6)
preadv(r0, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/165, 0xa5}], 0x1, 0x9, 0x4)

1m26.801803848s ago: executing program 0 (id=3066):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r0, &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000080)={0x2, 0xf8, 0x40000, {r0}}, 0x20)

1m26.767331842s ago: executing program 0 (id=3067):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', <r2=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002740)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x2c}}, 0x0)

1m26.613292369s ago: executing program 0 (id=3071):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r3=>0x0})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffa}]}]}], {0x14, 0x10}}, 0x88}}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040)

1m26.287187021s ago: executing program 34 (id=3071):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r3=>0x0})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffa}]}]}], {0x14, 0x10}}, 0x88}}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040)

2.590630455s ago: executing program 4 (id=4153):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="000a110000000b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.205483517s ago: executing program 4 (id=4203):
r0 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0)
vmsplice(r0, 0x0, 0x0, 0x1)

1.118135811s ago: executing program 4 (id=4205):
r0 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4)

1.061527111s ago: executing program 4 (id=4207):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0xfffffff9})

1.011172048s ago: executing program 4 (id=4208):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28)
write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0'}, 0xb)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

1.011031398s ago: executing program 4 (id=4209):
syz_usb_connect(0x2, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x58, 0x7a, 0xdf, 0x8, 0x2304, 0x21f, 0x15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0xd, 0x10, 0xf, [{{0x9, 0x4, 0x2a, 0xe, 0x0, 0xb5, 0xf, 0x89, 0x2f}}]}}]}}, 0x0)

491.859308ms ago: executing program 3 (id=4211):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xb, &(0x7f0000000740)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x0)
pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000100)='<', 0x1}], 0x1f, 0xffffff01, 0x2)

491.753583ms ago: executing program 3 (id=4212):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000740)={[&(0x7f0000000440)='\x84))\x00', &(0x7f0000000580)='\\@()\x00']}, 0x0)

406.86948ms ago: executing program 3 (id=4213):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000000040), 0x4)

360.388533ms ago: executing program 5 (id=4215):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000040000e657a65349ebe92b08000300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x40011}, 0x4000000)

360.272533ms ago: executing program 3 (id=4216):
io_pgetevents(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

301.099294ms ago: executing program 5 (id=4217):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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")
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
lstat(&(0x7f0000000280)='./file0\x00', 0x0)
unlink(0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

300.593421ms ago: executing program 3 (id=4218):
syz_mount_image$bcachefs(&(0x7f0000000980), &(0x7f000000ff00)='./file3\x00', 0xc00, &(0x7f0000000500)=ANY=[@ANYRES8], 0x41, 0xfe8d, &(0x7f00000210c0)="$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")

252.216002ms ago: executing program 5 (id=4219):
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x6, 0x12, 0xfd, 0x14, 0x402, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

252.038144ms ago: executing program 5 (id=4220):
bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x19, 0x4, 0x8, 0x80000000}, 0x48)

172.087463ms ago: executing program 5 (id=4221):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x18, 0x41, 0x107, 0x0, 0x7, {0x2, 0x7c}, [@nested={0x4, 0x31}]}, 0x18}}, 0x4010)

122.304982ms ago: executing program 5 (id=4222):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x18}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 3 (id=4223):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x40000103, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10138, 0x2, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00'})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r5 = socket$inet6(0xa, 0x1, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

kernel console output (not intermixed with test programs):

ng to 7
[  293.612312][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  293.623214][   T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  293.626948][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.638018][   T10] usb 1-1: config 0 descriptor??
[  293.652126][   T10] hub 1-1:0.0: USB hub found
[  293.854080][   T10] hub 1-1:0.0: 1 port detected
[  293.876866][T12890] ip6erspan0: entered promiscuous mode
[  294.059183][   T63] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  294.208494][   T63] usb 5-1: Using ep0 maxpacket: 32
[  294.213969][   T63] usb 5-1: config 2 has an invalid interface number: 1 but max is 0
[  294.221563][   T63] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  294.225860][   T63] usb 5-1: config 2 has 2 interfaces, different from the descriptor's value: 1
[  294.234749][   T63] usb 5-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64
[  294.238230][   T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.241722][   T63] usb 5-1: Product: syz
[  294.243220][   T63] usb 5-1: Manufacturer: syz
[  294.244786][   T63] usb 5-1: SerialNumber: syz
[  294.256332][   T63] cdc_acm 5-1:2.1: probe with driver cdc_acm failed with error -22
[  294.262140][   T63] cdc_acm 5-1:2.0: probe with driver cdc_acm failed with error -22
[  294.312380][T12908] netlink: 'syz.3.2699': attribute type 3 has an invalid length.
[  294.465570][   T10] hub 1-1:0.0: activate --> -90
[  294.478873][   T63] usb 5-1: USB disconnect, device number 22
[  294.497954][T12920] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2703'.
[  294.874570][  T976] usb 1-1: USB disconnect, device number 49
[  295.108579][   T10] usb 1-1-port1: config error
[  295.326786][T12947] loop4: detected capacity change from 0 to 32768
[  295.345232][T12947] jfs_mount: dbMount failed w/rc = -22
[  295.348126][T12947] Mount JFS Failure: -22
[  295.486320][T12959] loop4: detected capacity change from 0 to 1024
[  295.503658][T12959] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  295.522648][T12959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  295.568491][ T5237] Bluetooth: hci1: command tx timeout
[  296.426752][T10236] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.767278][T12986] loop0: detected capacity change from 0 to 40427
[  296.774381][T12986] F2FS-fs (loop0): invalid crc value
[  296.837156][T12999] loop4: detected capacity change from 0 to 512
[  296.853978][T12986] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  296.858155][T12986] F2FS-fs (loop0): Start checkpoint disabled!
[  296.863728][T12986] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  296.885651][T12999] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2739: bg 0: block 393: padding at end of block bitmap is not set
[  296.898441][T12999] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  296.905188][T12999] EXT4-fs (loop4): 2 truncates cleaned up
[  296.910291][T12999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  296.960466][T12999] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  296.971145][T12999] EXT4-fs (loop4): can't disable delalloc during remount
[  297.047471][T10236] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.409886][   T27] kworker/u10:0: attempt to access beyond end of device
[  297.409886][   T27] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  297.416691][   T27] CPU: 1 UID: 0 PID: 27 Comm: kworker/u10:0 Not tainted syzkaller #0 PREEMPT(full) 
[  297.416711][   T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  297.416718][   T27] Workqueue: writeback wb_workfn (flush-7:0)
[  297.416739][   T27] Call Trace:
[  297.416744][   T27]  <TASK>
[  297.416749][   T27]  dump_stack_lvl+0x189/0x250
[  297.416769][   T27]  ? __pfx_dump_stack_lvl+0x10/0x10
[  297.416781][   T27]  ? __pfx_queue_work_on+0x10/0x10
[  297.416791][   T27]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  297.416806][   T27]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  297.416831][   T27]  f2fs_handle_critical_error+0x37c/0x540
[  297.416852][   T27]  f2fs_write_end_io+0x886/0xb60
[  297.416875][   T27]  __submit_merged_bio+0x27a/0x6a0
[  297.416896][   T27]  __submit_merged_write_cond+0x255/0x530
[  297.416919][   T27]  f2fs_write_data_pages+0x261d/0x3000
[  297.416987][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  297.417049][   T27]  ? f2fs_write_meta_pages+0x357/0x450
[  297.417068][   T27]  ? __lock_acquire+0xab9/0xd20
[  297.417087][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  297.417099][   T27]  do_writepages+0x32e/0x550
[  297.417118][   T27]  ? reacquire_held_locks+0x127/0x1d0
[  297.417128][   T27]  ? writeback_sb_inodes+0x384/0x1010
[  297.417148][   T27]  __writeback_single_inode+0x145/0xff0
[  297.417162][   T27]  ? do_raw_spin_unlock+0x4d/0x240
[  297.417179][   T27]  writeback_sb_inodes+0x6c7/0x1010
[  297.417210][   T27]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  297.417255][   T27]  ? rcu_is_watching+0x15/0xb0
[  297.417273][   T27]  wb_writeback+0x43b/0xaf0
[  297.417293][   T27]  ? queue_io+0x341/0x590
[  297.417308][   T27]  ? __pfx_wb_writeback+0x10/0x10
[  297.417327][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  297.417348][   T27]  wb_workfn+0x409/0xef0
[  297.417372][   T27]  ? __pfx_wb_workfn+0x10/0x10
[  297.417388][   T27]  ? __lock_acquire+0xab9/0xd20
[  297.417413][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  297.417429][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  297.417443][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  297.417453][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  297.417465][   T27]  process_scheduled_works+0xae1/0x17b0
[  297.417497][   T27]  ? __pfx_process_scheduled_works+0x10/0x10
[  297.417521][   T27]  worker_thread+0x8a0/0xda0
[  297.417552][   T27]  kthread+0x711/0x8a0
[  297.417569][   T27]  ? __pfx_worker_thread+0x10/0x10
[  297.417580][   T27]  ? __pfx_kthread+0x10/0x10
[  297.417596][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  297.417612][   T27]  ? lockdep_hardirqs_on+0x9c/0x150
[  297.417623][   T27]  ? __pfx_kthread+0x10/0x10
[  297.417638][   T27]  ret_from_fork+0x439/0x7d0
[  297.417653][   T27]  ? __pfx_ret_from_fork+0x10/0x10
[  297.417668][   T27]  ? __switch_to_asm+0x39/0x70
[  297.417682][   T27]  ? __switch_to_asm+0x33/0x70
[  297.417694][   T27]  ? __pfx_kthread+0x10/0x10
[  297.417710][   T27]  ret_from_fork_asm+0x1a/0x30
[  297.417737][   T27]  </TASK>
[  297.417742][   T27] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  297.465424][T13004] loop4: detected capacity change from 0 to 4096
[  297.841957][T13013] Bluetooth: hci0: unsupported parameter 64000
[  297.844543][T13013] Bluetooth: hci0: unsupported parameter 64000
[  297.889836][T13018] loop0: detected capacity change from 0 to 256
[  297.896326][T13018] exfat: Deprecated parameter 'namecase'
[  297.898881][T13018] exfat: Deprecated parameter 'namecase'
[  297.909593][T13018] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  298.084450][T13022] loop0: detected capacity change from 0 to 4096
[  298.414815][T13042] loop0: detected capacity change from 0 to 256
[  299.543150][T13082] netlink: 'syz.0.2775': attribute type 1 has an invalid length.
[  299.587169][T13084] loop0: detected capacity change from 0 to 256
[  299.602100][T13084] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  299.606631][T13084] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  299.617613][T13084] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  299.731974][T13090] loop0: detected capacity change from 0 to 512
[  299.741170][T13090] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  299.743828][T13090] System zones: 0-2, 18-18, 34-34
[  299.761396][T13090] Quota error (device loop0): v2_read_file_info: Free block number 3328 out of range (1, 6).
[  299.766229][T13090] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  299.775857][T13090] EXT4-fs (loop0): mount failed
[  300.167072][T13118] loop0: detected capacity change from 0 to 128
[  300.180030][T13118] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  300.186056][T13118] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  300.532686][T13123] devpts: Bad value for 'max'
[  300.595455][T13127] Bluetooth: MGMT ver 1.23
[  300.741946][T13135] netlink: 'syz.0.2799': attribute type 25 has an invalid length.
[  300.744730][T13135] netlink: 'syz.0.2799': attribute type 7 has an invalid length.
[  301.178633][T13141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2803'.
[  301.186369][T13141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2803'.
[  301.506443][T13147] loop0: detected capacity change from 0 to 32768
[  301.523242][T13147] (syz.0.2805,13147,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  301.534250][T13147] (syz.0.2805,13147,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  301.561062][T13147] JBD2: Ignoring recovery information on journal
[  301.590189][T13147] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  301.628665][  T976] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  301.632057][T13147] (syz.0.2805,13147,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x7dc2e7ff, computed 0x15723f56. Applying ECC.
[  301.641910][T13147] (syz.0.2805,13147,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb6558d89. Applying ECC.
[  301.655584][T13147] (syz.0.2805,13147,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x7dc2e7ff, computed 0x9456929a. Applying ECC.
[  301.663547][T13147] (syz.0.2805,13147,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x7dc2e7ff, computed 0x3803a0ac
[  301.671907][T13147] (syz.0.2805,13147,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  301.678080][T13147] (syz.0.2805,13147,0):ocfs2_quota_read:201 ERROR: status = -5
[  301.681042][T13147] Quota error (device loop0): find_tree_dqentry: Can't read quota tree block 2
[  301.684250][T13147] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  301.687438][T13147] (syz.0.2805,13147,0):ocfs2_acquire_dquot:890 ERROR: status = -5
[  301.695058][T13147] (syz.0.2805,13147,0):ocfs2_mknod:317 ERROR: status = -5
[  301.698096][T13147] (syz.0.2805,13147,0):ocfs2_mknod:505 ERROR: status = -5
[  301.725189][ T5845] ocfs2: Unmounting device (7,0) on (node local)
[  301.789323][  T976] usb 5-1: Using ep0 maxpacket: 32
[  301.793195][  T976] usb 5-1: config 0 has an invalid interface number: 35 but max is 0
[  301.795917][  T976] usb 5-1: config 0 has no interface number 0
[  301.801198][  T976] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  301.804016][  T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.806536][  T976] usb 5-1: Product: syz
[  301.808194][  T976] usb 5-1: Manufacturer: syz
[  301.810898][  T976] usb 5-1: SerialNumber: syz
[  301.815441][  T976] usb 5-1: config 0 descriptor??
[  301.956840][T13180] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2820'.
[  302.025581][  T976] radio-si470x 5-1:0.35: this is not a si470x device.
[  302.059185][  T976] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  302.121276][T13182] loop0: detected capacity change from 0 to 40427
[  302.124590][T13182] F2FS-fs: quotafile must be on filesystem root
[  302.255020][T13190] netlink: 'syz.3.2825': attribute type 11 has an invalid length.
[  302.273283][  T976] radio-raremono 5-1:0.35: V4L2 device registered as radio48
[  302.466731][  T976] usb 5-1: USB disconnect, device number 23
[  302.470689][  T976] radio-raremono 5-1:0.35: Thanko's Raremono disconnected
[  302.582801][T13220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2838'.
[  302.586134][T13220] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2838'.
[  302.646586][T13224] loop0: detected capacity change from 0 to 16
[  302.669225][T13224] erofs: Unknown parameter 'cache_stegy'
[  303.960487][T13251] ptrace attach of "/syz-executor exec"[7677] was attempted by ""[13251]
[  304.648353][   T10] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  304.779171][T13277] loop4: detected capacity change from 0 to 32768
[  304.798313][   T10] usb 1-1: Using ep0 maxpacket: 32
[  304.816985][   T10] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d
[  304.820357][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.822967][   T10] usb 1-1: Product: syz
[  304.824306][   T10] usb 1-1: Manufacturer: syz
[  304.825840][   T10] usb 1-1: SerialNumber: syz
[  304.830027][   T10] usb 1-1: config 0 descriptor??
[  304.863865][T13277] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  304.863885][T13277]   allowing incompatible features above 0.0: (unknown version)
[  304.863893][T13277]   features: lz4
[  304.879609][T13277] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  304.883098][T13277] bcachefs (loop4): initializing new filesystem
[  304.893194][T13277] bcachefs (loop4): going read-write
[  304.901698][T13277] bcachefs (loop4): marking superblocks
[  304.931467][T13277] bcachefs (loop4): initializing freespace
[  304.938366][T13277] bcachefs (loop4): done initializing freespace
[  304.947161][T13277] bcachefs (loop4): reading snapshots table
[  304.949869][T13277] bcachefs (loop4): reading snapshots done
[  304.976214][T13277] bcachefs (loop4): done starting filesystem
[  305.017409][T13277] syz.4.2862 (13277) used greatest stack depth: 16856 bytes left
[  305.044347][T10236] bcachefs (loop4): shutting down
[  305.046206][T10236] bcachefs (loop4): going read-only
[  305.049482][   T10] mdc800 1-1:0.0: probe fails -> wrong Number of Configuration
[  305.052697][T10236] bcachefs (loop4): finished waiting for writes to stop
[  305.061034][T10236] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2
[  305.062527][   T10] usb 1-1: USB disconnect, device number 50
[  305.107404][T10236] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3
[  305.112449][T10236] bcachefs (loop4): clean shutdown complete, journal seq 4
[  305.115201][T10236] bcachefs (loop4): marking filesystem clean
[  305.136134][T10236] bcachefs (loop4): shutdown complete
[  305.595302][T13294] loop0: detected capacity change from 0 to 1764
[  306.231578][T13318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  306.287197][T13318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  306.298490][   T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  306.344305][T13318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  306.459427][   T10] usb 5-1: Using ep0 maxpacket: 32
[  306.463892][   T10] usb 5-1: config 4 has an invalid interface number: 8 but max is 0
[  306.467298][   T10] usb 5-1: config 4 has no interface number 0
[  306.469973][   T10] usb 5-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  306.474999][   T10] usb 5-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0
[  306.479279][   T10] usb 5-1: config 4 interface 8 has no altsetting 0
[  306.484956][   T10] usb 5-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65
[  306.488837][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.492217][   T10] usb 5-1: Product: syz
[  306.494029][   T10] usb 5-1: Manufacturer: syz
[  306.496118][   T10] usb 5-1: SerialNumber: syz
[  306.726598][   T10] opticon 5-1:4.8: opticon converter detected
[  306.732390][   T10] usb 5-1: opticon converter now attached to ttyUSB0
[  306.739771][   T10] usb 5-1: USB disconnect, device number 24
[  306.753983][   T10] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0
[  306.761745][   T10] opticon 5-1:4.8: device disconnected
[  307.028478][  T976] usb 1-1: new full-speed USB device number 51 using dummy_hcd
[  307.184289][  T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  307.198450][  T976] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00
[  307.202329][  T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.209982][  T976] usb 1-1: config 0 descriptor??
[  307.495145][T13348] netlink: 'syz.4.2891': attribute type 1 has an invalid length.
[  307.553169][ T5876] tipc: Subscription rejected, illegal request
[  307.580315][T13356] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2895'.
[  307.634563][  T976] greenasia 0003:0E8F:0012.0018: collection stack underflow
[  307.637388][  T976] greenasia 0003:0E8F:0012.0018: item 0 1 0 12 parsing failed
[  307.648150][  T976] greenasia 0003:0E8F:0012.0018: parse failed
[  307.651986][  T976] greenasia 0003:0E8F:0012.0018: probe with driver greenasia failed with error -22
[  307.816735][T13382] loop4: detected capacity change from 0 to 4096
[  307.845968][   T10] usb 1-1: USB disconnect, device number 51
[  307.993711][T13396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2914'.
[  308.075779][T13402] loop4: detected capacity change from 0 to 1024
[  308.388427][   T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  308.538325][   T10] usb 5-1: Using ep0 maxpacket: 16
[  308.550713][   T10] usb 5-1: config 1 has an invalid interface number: 105 but max is 0
[  308.553783][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  308.557704][   T10] usb 5-1: config 1 has no interface number 0
[  308.569831][   T10] usb 5-1: config 1 interface 105 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0
[  308.573615][   T10] usb 5-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  308.578647][   T10] usb 5-1: config 1 interface 105 has no altsetting 0
[  308.583540][   T10] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.08
[  308.586960][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.590383][   T10] usb 5-1: Product: syz
[  308.592134][   T10] usb 5-1: Manufacturer: syz
[  308.593778][   T10] usb 5-1: SerialNumber: syz
[  308.761905][T13424] loop0: detected capacity change from 0 to 32768
[  308.778012][T13424] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  308.786709][T13424] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  308.817676][   T10] aqc111 5-1:1.105: probe with driver aqc111 failed with error -22
[  308.839285][ T5845] ocfs2: Unmounting device (7,0) on (node local)
[  308.921113][T13428] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2928'.
[  309.028223][   T10] usb 5-1: USB disconnect, device number 25
[  309.637249][T13454] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  309.715402][T13458] loop0: detected capacity change from 0 to 2048
[  309.732349][T13458] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  309.759137][T13458] UDF-fs: error (device loop0): udf_rename: failed to find renamed entry again in directory (ino 1408)
[  310.148579][   T10] usb 1-1: new low-speed USB device number 52 using dummy_hcd
[  310.611095][   T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  310.613776][   T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  310.617767][   T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  310.628476][   T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  310.632914][   T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  310.639293][   T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  310.642308][   T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  310.646418][   T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  310.653067][   T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  310.657459][   T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  310.662859][   T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  310.665790][   T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  310.673157][   T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  310.677650][   T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  310.682039][   T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  310.691167][   T10] usb 1-1: string descriptor 0 read error: -22
[  310.693859][   T10] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  310.696831][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.707938][   T10] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  310.762377][T13487] loop4: detected capacity change from 0 to 32768
[  310.769564][T13487] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  310.769564][T13487] clean (size 2912):
[  310.769564][T13487] flags:          0
[  310.769564][T13487] journal_seq:    10
[  310.769564][T13487] usage: type=inodes v=8
[  310.769564][T13487] usage: type=key_version v=2
[  310.769564][T13487] usage: type=reserved v=0
[  310.769564][T13487] usage: type=(unknown fs_usage_type 226) v=0
[  310.769564][T13487] usage: type=reserved v=0
[  310.769564][T13487] usage: type=reserved v=0
[  310.769564][T13487] data_usage: btree: 1/1 [0]=2816
[  310.769564][T13487] data_usage: journal: 1/1 [0]=0
[  310.769564][T13487] data_usage: user: 1/1 [0]=32
[  310.769564][T13487] dev_usage: dev=0  
[  310.769564][T13487]   free: buckets=83 sectors=0 fragmented=0
[  310.769564][T13487]   sb: buckets=25 sectors=6152 fragmented=248
[  310.769564][T13487]   journal: buckets=8 sectors=2048 fragmented=0
[  310.769564][T13487]   btree: buckets=11 sectors=2816 fragmented=0
[  310.769564][T13487]   user: buckets=1 sectors=32 fragmented=224
[  310.769564][T13487]   cached: buckets=0 sectors=0 fragmented=0
[  310.769564][T13487]   parity: buckets=0 sectors=0 fragmented=0
[  310.769564][T13487]   stripe: buckets=0 sectors=0 fragmented=0
[  310.769564][T13487]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  310.769564][T13487]   need_discard: buckets=0 sectors=0 fragmented=0
[  310.769564][T13487] clock: read=0
[  310.769564][T13487] clock: write=1336
[  310.769564][T13487] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX 
[  310.770485][T13487] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  310.931898][   T63] usb 1-1: USB disconnect, device number 52
[  311.093044][T13504] wg2: entered promiscuous mode
[  311.094974][T13504] wg2: entered allmulticast mode
[  311.291692][ T7827] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  311.372061][T13524] 9pnet_fd: Insufficient options for proto=fd
[  311.438467][ T7827] usb 5-1: Using ep0 maxpacket: 16
[  311.454340][ T7827] usb 5-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01
[  311.458080][ T7827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.468437][ T7827] usb 5-1: Product: syz
[  311.470176][ T7827] usb 5-1: Manufacturer: syz
[  311.472088][ T7827] usb 5-1: SerialNumber: syz
[  311.478505][ T7827] usb 5-1: config 0 descriptor??
[  311.498136][ T7827] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected.
[  311.617693][T13545] loop0: detected capacity change from 0 to 4096
[  311.622363][T13545] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  311.689835][ T7827] pwc: Warning: more than 1 configuration available.
[  311.698465][ T7827] pwc: Failed to set LED on/off time (-71)
[  311.702646][ T7827] pwc: send_video_command error -71
[  311.705131][ T7827] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  311.709124][ T7827] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71
[  311.717022][ T7827] usb 5-1: USB disconnect, device number 26
[  311.981116][T13561] program syz.0.2990 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  312.194536][T13563] loop0: detected capacity change from 0 to 32768
[  312.199553][T13563] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  312.199553][T13563] clean (size 2912):
[  312.199553][T13563] flags:          0
[  312.199553][T13563] journal_seq:    10
[  312.199553][T13563] usage: type=inodes v=8
[  312.199553][T13563] write_buffer_keys: btree=dirents level=0 u64s 5 type deleted 0:21491613697:0 len 0 ver 4294967296
[  312.199553][T13563] usage: type=reserved v=0
[  312.199553][T13563] usage: type=reserved v=0
[  312.199553][T13563] usage: type=reserved v=0
[  312.199553][T13563] usage: type=reserved v=0
[  312.199553][T13563] data_usage: free: 0/0 []=83888896
[  312.199553][T13563] data_usage: journal: 1/1 [0]=0
[  312.199553][T13563] data_usage: user: 1/1 [0]=32
[  312.199553][T13563] dev_usage: dev=0  
[  312.199553][T13563]   free: buckets=83 sectors=0 fragmented=0
[  312.199553][T13563]   sb: buckets=25 sectors=6152 fragmented=248
[  312.199553][T13563]   journal: buckets=8 sectors=2048 fragmented=0
[  312.199553][T13563]   btree: buckets=11 sectors=2816 fragmented=0
[  312.199553][T13563]   user: buckets=1 sectors=32 fragmented=224
[  312.199553][T13563]   cached: buckets=0 sectors=0 fragmented=0
[  312.199553][T13563]   parity: buckets=0 sectors=0 fragmented=0
[  312.199553][T13563]   stripe: buckets=0 sectors=0 fragmented=0
[  312.199553][T13563]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  312.199553][T13563]   need_discard: buckets=0 sectors=0 fragmented=0
[  312.199553][T13563] clock: read=0
[  312.199553][T13563] clock: write=1336
[  312.199553][T13563] btree_root: btre
[  312.199765][T13563] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  312.962268][T13610] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3008'.
[  313.755258][T13641] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3022'.
[  314.168394][ T7827] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  314.318380][ T7827] usb 5-1: Using ep0 maxpacket: 16
[  314.321616][ T7827] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  314.324091][ T7827] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  314.327285][ T7827] usb 5-1: config 0 has no interface number 0
[  314.337439][ T7827] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  314.340596][ T7827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.343311][ T7827] usb 5-1: Product: syz
[  314.344805][ T7827] usb 5-1: Manufacturer: syz
[  314.346368][ T7827] usb 5-1: SerialNumber: syz
[  314.354359][ T7827] usb 5-1: config 0 descriptor??
[  314.363519][ T7827] uvcvideo 5-1:0.105: probe with driver uvcvideo failed with error -22
[  314.590637][ T7827] usb 5-1: USB disconnect, device number 27
[  314.617070][T13668] netlink: zone id is out of range
[  314.622859][T13668] netlink: zone id is out of range
[  314.625056][T13668] netlink: zone id is out of range
[  314.627228][T13668] netlink: zone id is out of range
[  314.630438][T13668] netlink: zone id is out of range
[  314.632479][T13668] netlink: zone id is out of range
[  314.634611][T13668] netlink: zone id is out of range
[  314.788814][T13668] netlink: zone id is out of range
[  314.792019][T13668] netlink: zone id is out of range
[  314.795572][T13668] netlink: zone id is out of range
[  315.019858][T13673] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3036'.
[  315.515183][T13681] loop4: detected capacity change from 0 to 512
[  315.526720][T13681] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  315.550873][T13681] EXT4-fs (loop4): 1 truncate cleaned up
[  315.556434][T13681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  315.609302][T10236] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.855214][T13692] 9pnet_fd: Insufficient options for proto=fd
[  316.141086][T13698] loop4: detected capacity change from 0 to 256
[  316.153141][T13698] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  316.157223][T13698] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  316.167157][T13698] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  316.458043][T13715] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input34
[  316.624918][T13727] loop4: detected capacity change from 0 to 512
[  316.648032][T13727] EXT4-fs: Ignoring removed oldalloc option
[  316.665530][T13727] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.3059: dx entry: limit 1024 != root limit 124
[  316.671068][T13727] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.3059: Corrupt directory, running e2fsck is recommended
[  316.681962][T13727] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  316.690802][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  316.692989][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  316.693536][T13727] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.3059: corrupted in-inode xattr: invalid ea_ino
[  316.707603][T13727] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3059: couldn't read orphan inode 15 (err -117)
[  316.732067][   T33] audit: type=1326 audit(1758641274.382:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13736 comm="syz.0.3062" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c058ec29 code=0x7ffc0000
[  316.733361][T13727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  316.744277][   T33] audit: type=1326 audit(1758641274.382:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13736 comm="syz.0.3062" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c058ec29 code=0x7ffc0000
[  316.764696][   T33] audit: type=1326 audit(1758641274.392:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13736 comm="syz.0.3062" exe="/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f55c058ec29 code=0x7ffc0000
[  316.784517][   T33] audit: type=1326 audit(1758641274.392:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13736 comm="syz.0.3062" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c058ec29 code=0x7ffc0000
[  316.786274][T13727] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.3059: dx entry: limit 1024 != root limit 124
[  316.799161][   T33] audit: type=1326 audit(1758641274.392:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13736 comm="syz.0.3062" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c058ec29 code=0x7ffc0000
[  316.811374][   T33] audit: type=1326 audit(1758641274.402:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13736 comm="syz.0.3062" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55c058ec29 code=0x7ffc0000
[  316.821139][T13727] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.3059: Corrupt directory, running e2fsck is recommended
[  316.821743][   T33] audit: type=1326 audit(1758641274.402:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13736 comm="syz.0.3062" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c058ec29 code=0x7ffc0000
[  316.836473][   T33] audit: type=1326 audit(1758641274.402:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13736 comm="syz.0.3062" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55c058ec29 code=0x7ffc0000
[  316.843407][   T33] audit: type=1326 audit(1758641274.402:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13736 comm="syz.0.3062" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c058ec29 code=0x7ffc0000
[  316.843771][T13727] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.3059: path /338/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  316.850825][   T33] audit: type=1326 audit(1758641274.402:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13736 comm="syz.0.3062" exe="/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f55c058ec29 code=0x7ffc0000
[  316.932227][T10236] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.566463][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  317.571309][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  317.576119][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  317.585432][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  317.589814][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  317.753106][T13760] chnl_net:caif_netlink_parms(): no params data found
[  317.831813][T13760] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.834832][T13760] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.838204][T13760] bridge_slave_0: entered allmulticast mode
[  317.844677][T13760] bridge_slave_0: entered promiscuous mode
[  317.855787][T13760] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.861442][T13760] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.864552][T13760] bridge_slave_1: entered allmulticast mode
[  317.873668][T13760] bridge_slave_1: entered promiscuous mode
[  317.926930][T13760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  317.939194][T13760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  317.972196][T13775] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3078'.
[  317.984057][T13760] team0: Port device team_slave_0 added
[  317.988703][T13760] team0: Port device team_slave_1 added
[  318.025158][T13760] batman_adv: batadv0: Adding interface: batadv_slave_0
[  318.028066][T13760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  318.038733][T13760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  318.044582][T13760] batman_adv: batadv0: Adding interface: batadv_slave_1
[  318.047442][T13760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  318.059618][T13760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  318.067546][T13779] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3080'.
[  318.104494][T13760] hsr_slave_0: entered promiscuous mode
[  318.107156][   T54] Bluetooth: hci2: Unknown advertising packet type: 0x52
[  318.108037][T13760] hsr_slave_1: entered promiscuous mode
[  318.114160][T13760] debugfs: 'hsr0' already exists in 'hsr'
[  318.116696][T13760] Cannot create hsr debugfs directory
[  318.195560][T13785] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3083'.
[  318.434893][T13760] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  318.460001][T13760] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  318.484374][T13760] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  318.517294][T13760] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  318.597805][T13760] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.600786][T13760] bridge0: port 2(bridge_slave_1) entered forwarding state
[  318.603821][T13760] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.606282][T13760] bridge0: port 1(bridge_slave_0) entered forwarding state
[  318.702894][T13760] 8021q: adding VLAN 0 to HW filter on device bond0
[  318.724185][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.733611][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state
[  318.772935][T13760] 8021q: adding VLAN 0 to HW filter on device team0
[  318.781064][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.783506][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[  318.797325][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.799880][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[  319.017065][T13760] 8021q: adding VLAN 0 to HW filter on device batadv0
[  319.212506][T13760] veth0_vlan: entered promiscuous mode
[  319.222212][T13760] veth1_vlan: entered promiscuous mode
[  319.229682][   T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  319.250779][T13760] veth0_macvtap: entered promiscuous mode
[  319.255548][T13760] veth1_macvtap: entered promiscuous mode
[  319.264796][T13760] batman_adv: batadv0: Interface activated: batadv_slave_0
[  319.275318][T13760] batman_adv: batadv0: Interface activated: batadv_slave_1
[  319.283126][ T5876] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  319.291817][ T5876] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  319.303022][ T5876] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  319.334870][ T5876] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  319.379041][   T10] usb 5-1: Using ep0 maxpacket: 16
[  319.388433][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  319.402190][   T10] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  319.405812][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.418676][   T10] usb 5-1: Product: syz
[  319.425080][   T10] usb 5-1: Manufacturer: syz
[  319.427024][   T10] usb 5-1: SerialNumber: syz
[  319.438626][ T6553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  319.441193][ T6553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  319.447556][   T10] usb 5-1: config 0 descriptor??
[  319.460456][   T10] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  319.464166][   T10] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  319.495230][ T6553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  319.499338][ T6553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  319.650001][   T54] Bluetooth: hci0: command tx timeout
[  319.895409][T13851] loop5: detected capacity change from 0 to 32768
[  319.913657][T13851] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  319.940918][T13851] XFS (loop5): Ending clean mount
[  319.947948][T13851] XFS (loop5): Quotacheck needed: Please wait.
[  319.985326][T13851] XFS (loop5): Quotacheck: Done.
[  320.015350][T13760] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  320.073903][   T10] em28xx 5-1:0.0: chip ID is em2765
[  320.215603][T13865] loop5: detected capacity change from 0 to 512
[  320.221745][T13865] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  320.231495][T13865] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002]
[  320.234153][T13865] System zones: 1-12
[  320.235822][T13865] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.3109: corrupted in-inode xattr: e_value size too large
[  320.242826][T13865] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3109: couldn't read orphan inode 15 (err -117)
[  320.252534][T13865] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  320.299217][T13760] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.506981][T13872] loop5: detected capacity change from 0 to 4096
[  320.526314][T13873] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  320.690873][T13881] net_ratelimit: 165 callbacks suppressed
[  320.690889][T13881] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  320.691790][   T10] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  320.701179][   T10] em28xx 5-1:0.0: board has no eeprom
[  320.968519][   T10] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  320.971374][   T10] em28xx 5-1:0.0: dvb set to bulk mode.
[  320.973719][ T2281] em28xx 5-1:0.0: Binding DVB extension
[  320.984549][   T10] usb 5-1: USB disconnect, device number 28
[  320.986922][T13886] loop5: detected capacity change from 0 to 32768
[  320.991321][   T10] em28xx 5-1:0.0: Disconnecting em28xx
[  320.995987][T13886] ocfs2: Bad value for 'commit'
[  321.023959][ T2281] em28xx 5-1:0.0: Registering input extension
[  321.029245][   T10] em28xx 5-1:0.0: Closing input extension
[  321.062035][   T10] em28xx 5-1:0.0: Freeing device
[  321.408808][ T2281] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  321.493661][T13897] loop4: detected capacity change from 0 to 128
[  321.525860][T13897] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  321.531934][T13897] ext4 filesystem being mounted at /350/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  321.557282][T10236] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  321.558447][ T2281] usb 6-1: Using ep0 maxpacket: 32
[  321.583909][ T2281] usb 6-1: config 0 has an invalid interface number: 247 but max is 0
[  321.587242][ T2281] usb 6-1: config 0 has no interface number 0
[  321.591878][ T2281] usb 6-1: config 0 interface 247 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  321.595942][ T2281] usb 6-1: config 0 interface 247 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  321.614122][ T2281] usb 6-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  321.617821][ T2281] usb 6-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  321.634137][ T2281] usb 6-1: Product: syz
[  321.635948][ T2281] usb 6-1: Manufacturer: syz
[  321.651511][ T2281] usb 6-1: config 0 descriptor??
[  321.708419][T13907] tipc: Can't bind to reserved service type 0
[  321.731845][   T54] Bluetooth: hci0: command tx timeout
[  321.881031][   T10] usb 6-1: USB disconnect, device number 2
[  322.533621][T13925] loop5: detected capacity change from 0 to 1024
[  322.603135][T13925] hfsplus: bad catalog entry type
[  322.620106][  T943] hfsplus: b-tree write err: -5, ino 4
[  322.674079][T13931] netlink: 'syz.5.3136': attribute type 7 has an invalid length.
[  322.677156][T13931] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3136'.
[  322.723970][T13934] loop5: detected capacity change from 0 to 512
[  322.727394][T13934] EXT4-fs: Ignoring removed mblk_io_submit option
[  322.730856][T13934] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  322.748122][T13934] EXT4-fs error (device loop5): xattr_find_entry:333: inode #15: comm syz.5.3137: corrupted xattr entries
[  322.760851][T13934] EXT4-fs (loop5): 1 orphan inode deleted
[  322.764434][T13934] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  322.791777][T13760] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.863119][   T63] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  322.962634][T13947] netlink: 'syz.3.3143': attribute type 21 has an invalid length.
[  322.965927][T13947] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3143'.
[  323.028450][   T63] usb 5-1: Using ep0 maxpacket: 8
[  323.031899][   T63] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  323.035355][   T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.053598][   T63] pvrusb2: Hardware description: Terratec Grabster AV400
[  323.056420][   T63] pvrusb2: **********
[  323.058151][   T63] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  323.067386][   T63] pvrusb2: Important functionality might not be entirely working.
[  323.070190][   T63] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  323.074775][   T63] pvrusb2: **********
[  323.124048][T13949] loop5: detected capacity change from 0 to 32768
[  323.133880][T13949] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3144 (13949)
[  323.147033][T13949] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  323.151906][T13949] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  323.225301][ T6553] BTRFS warning (device loop5): checksum verify failed on logical 5292032 mirror 1 wanted 0xd5bc16bf7502c3940107ef92895f3d2e7f4c766f4585e38c0ad39b0a5d2e0772 found 0xe411c7a0efa54fabafc8c0ad0545277d3e683b146ef1a47775d9ca9aa10535d4 level 0
[  323.252633][T13949] BTRFS warning (device loop5): failed to read root (objectid=9): -5
[  323.296563][ T2398] pvrusb2: Invalid write control endpoint
[  323.313096][T13949] BTRFS error (device loop5): open_ctree failed: -5
[  323.411001][ T2398] pvrusb2: Invalid write control endpoint
[  323.413629][ T2398] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  323.417492][ T2398] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  323.457017][ T2398] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  323.461403][ T2398] pvrusb2: Device being rendered inoperable
[  323.482627][ T2398] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  323.486711][ T2398] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  323.501492][ T2281] usb 5-1: USB disconnect, device number 29
[  323.550026][ T2398] pvrusb2: Attached sub-driver cx25840
[  323.565912][ T2398] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  323.573291][ T2398] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  323.808551][   T54] Bluetooth: hci0: command tx timeout
[  324.293788][T13991] loop4: detected capacity change from 0 to 4096
[  324.304709][T13991] ntfs3(loop4): ino=0, ni_load_mi_ex
[  324.317999][T13991] ntfs3(loop4): ino=0, ni_load_mi_ex
[  324.320778][T13991] ntfs3(loop4): Failed to load $MFT (-22).
[  324.429361][T13995] loop4: detected capacity change from 0 to 256
[  324.653059][T14005] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  324.817376][T14013] loop4: detected capacity change from 0 to 4096
[  324.851002][T14013] ntfs3(loop4): ino=b, mi_enum_attr
[  324.852950][T14013] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  324.870296][T14013] ntfs3(loop4): Failed to load $Extend (-22).
[  324.872551][T14013] ntfs3(loop4): Failed to initialize $Extend.
[  324.915701][T14013] ntfs3(loop4): ino=5, "/" ntfs_readdir
[  325.004168][T14025] loop4: detected capacity change from 0 to 2048
[  325.032828][T14026] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  325.048377][   T33] kauditd_printk_skb: 7 callbacks suppressed
[  325.048386][   T33] audit: type=1800 audit(1758641282.692:180): pid=14025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3173" name="file2" dev="loop4" ino=16 res=0 errno=0
[  325.111817][T14025] NILFS (loop4): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 4)
[  325.116620][T14025] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=16)
[  325.127344][T14025] Remounting filesystem read-only
[  325.155209][T10236] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  325.168753][ T7827] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  325.234591][T14034] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[  325.237535][T14034] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  325.250157][T14034] vhci_hcd vhci_hcd.0: Device attached
[  325.254800][T14034] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6)
[  325.257108][T14034] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  325.260577][T14034] vhci_hcd vhci_hcd.0: Device attached
[  325.264783][T14034] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  325.268843][T14034] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  325.272158][T14034] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  325.276706][T14034] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  325.282390][T14034] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(18)
[  325.285077][T14034] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  325.289148][T14034] vhci_hcd vhci_hcd.0: Device attached
[  325.300105][T14034] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  325.304048][T14034] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  325.317087][T14039] vhci_hcd: connection closed
[  325.318424][T14036] vhci_hcd: connection closed
[  325.321063][   T12] vhci_hcd: stop threads
[  325.329984][   T12] vhci_hcd: release socket
[  325.331520][   T12] vhci_hcd: disconnect device
[  325.332586][T14043] vhci_hcd: connection closed
[  325.334633][   T12] vhci_hcd: stop threads
[  325.337609][   T12] vhci_hcd: release socket
[  325.339199][   T12] vhci_hcd: disconnect device
[  325.340940][   T12] vhci_hcd: stop threads
[  325.342366][   T12] vhci_hcd: release socket
[  325.343868][   T12] vhci_hcd: disconnect device
[  325.350567][ T7827] usb 6-1: Using ep0 maxpacket: 8
[  325.355047][ T7827] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  325.361251][ T7827] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  325.366832][ T7827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.375021][ T7827] usb 6-1: config 0 descriptor??
[  325.391827][ T7827] gspca_main: vc032x-2.14.0 probing 046d:0892
[  325.908863][   T54] Bluetooth: hci0: command tx timeout
[  325.960458][T14054] loop4: detected capacity change from 0 to 128
[  326.347655][T14061] blkio.reset_stats is deprecated
[  326.413594][T14065] loop4: detected capacity change from 0 to 1024
[  326.442598][T14065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  326.446573][T14065] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  326.453907][T14065] EXT4-fs (loop4): shut down requested (2)
[  326.467953][T10236] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.534723][T14074] netlink: 212264 bytes leftover after parsing attributes in process `syz.4.3190'.
[  326.728385][ T7827] gspca_vc032x: reg_w err -71
[  326.730365][ T7827] vc032x 6-1:0.0: probe with driver vc032x failed with error -71
[  326.740663][ T7827] usb 6-1: USB disconnect, device number 3
[  326.818382][   T10] usb 5-1: new full-speed USB device number 30 using dummy_hcd
[  326.980688][   T10] usb 5-1: config 5 has an invalid interface number: 123 but max is 0
[  326.984159][   T10] usb 5-1: config 5 has no interface number 0
[  326.986702][   T10] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  327.009190][   T10] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x89 has invalid maxpacket 8981, setting to 64
[  327.013744][   T10] usb 5-1: config 5 interface 123 has no altsetting 0
[  327.027167][   T10] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  327.031258][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.034539][   T10] usb 5-1: Product: syz
[  327.036293][   T10] usb 5-1: Manufacturer: syz
[  327.038156][   T10] usb 5-1: SerialNumber: syz
[  327.045690][T14076] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  327.277737][   T10] ni6501 5-1:5.123: driver 'ni6501' failed to auto-configure device.
[  327.297065][   T10] usb 5-1: USB disconnect, device number 30
[  327.397484][T14101] smc: net device bond0 applied user defined pnetid SYZ2
[  327.454177][T14107] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3206'.
[  327.546606][T14115] ieee802154 phy0 wpan0: encryption failed: -22
[  327.860052][T14134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3217'.
[  327.992826][T14140] loop4: detected capacity change from 0 to 1024
[  328.022487][   T52] hfsplus: b-tree write err: -5, ino 4
[  328.308782][   T63] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  328.478640][   T63] usb 5-1: Using ep0 maxpacket: 32
[  328.484550][   T63] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  328.489476][   T63] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[  328.494941][   T63] usb 5-1: config 0 interface 0 has no altsetting 0
[  328.497796][   T63] usb 5-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00
[  328.507286][   T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.515846][   T63] usb 5-1: config 0 descriptor??
[  328.570823][T14159] loop5: detected capacity change from 0 to 32768
[  328.612906][ T7067]  loop5: p1 p2 p3 < p5 p6 >
[  328.615175][ T7067] loop5: p1 size 242222080 extends beyond EOD, truncated
[  328.625391][ T7067] loop5: p2 start 4294967295 is beyond EOD, truncated
[  328.639578][T14159]  loop5: p1 p2 p3 < p5 p6 >
[  328.641746][T14159] loop5: p1 size 242222080 extends beyond EOD, truncated
[  328.645686][T14159] loop5: p2 start 4294967295 is beyond EOD, truncated
[  328.819274][ T7066] udevd[7066]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory
[  328.823815][ T5854] udevd[5854]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  328.825196][ T7067] udevd[7067]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  328.834129][ T5922] udevd[5922]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory
[  328.864551][ T7066] udevd[7066]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory
[  328.870941][ T5854] udevd[5854]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  328.871090][ T5922] udevd[5922]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory
[  328.881261][ T7067] udevd[7067]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  328.952477][   T63] betop 0003:20BC:5500.0019: unbalanced collection at end of report description
[  328.956797][   T63] betop 0003:20BC:5500.0019: parse failed
[  328.970834][   T63] betop 0003:20BC:5500.0019: probe with driver betop failed with error -22
[  329.076944][T14183] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  329.115754][T14185] loop5: detected capacity change from 0 to 2048
[  329.137016][T14185] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  329.153696][ T2281] usb 5-1: USB disconnect, device number 31
[  329.275728][T14197] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3248'.
[  329.754000][T14209] netlink: 'syz.4.3253': attribute type 20 has an invalid length.
[  329.791221][T14211] loop4: detected capacity change from 0 to 128
[  329.813362][   T33] audit: type=1800 audit(1758641287.462:181): pid=14211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3254" name="file1" dev="loop4" ino=1048662 res=0 errno=0
[  330.035735][T14221] loop4: detected capacity change from 0 to 512
[  330.040338][T14221] EXT4-fs (loop4): Test dummy encryption mode enabled
[  330.042733][T14221] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  330.052134][T14221] EXT4-fs (loop4): 1 truncate cleaned up
[  330.057189][T14221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  330.125888][T14221] EXT4-fs (loop4): Online defrag not supported for encrypted files
[  330.182141][T10236] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.558521][ T2281] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  330.657963][T14247] loop5: detected capacity change from 0 to 32768
[  330.714000][T14247] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  330.728381][ T2281] usb 5-1: Using ep0 maxpacket: 16
[  330.734012][ T2281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  330.748561][ T2281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  330.758045][ T2281] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  330.780927][T14247] XFS (loop5): Ending clean mount
[  330.783363][ T2281] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  330.792997][ T2281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.812465][ T2281] usb 5-1: config 0 descriptor??
[  330.867084][   T33] audit: type=1800 audit(1758641288.502:182): pid=14247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3271" name="file2" dev="loop5" ino=4423 res=0 errno=0
[  330.933032][T13760] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  331.246431][ T2281] microsoft 0003:045E:07DA.001A: ignoring exceeding usage max
[  331.253638][ T2281] microsoft 0003:045E:07DA.001A: ignoring exceeding usage max
[  331.277313][ T2281] microsoft 0003:045E:07DA.001A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  331.289288][ T2281] microsoft 0003:045E:07DA.001A: no inputs found
[  331.292812][ T2281] microsoft 0003:045E:07DA.001A: could not initialize ff, continuing anyway
[  331.456186][ T5878] usb 5-1: USB disconnect, device number 32
[  331.631145][T14291] loop5: detected capacity change from 0 to 256
[  332.068461][   T63] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  332.231188][   T63] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  332.235733][   T63] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3
[  332.236230][T14303] loop4: detected capacity change from 0 to 8192
[  332.241407][   T63] usb 6-1: config 220 interface 0 has no altsetting 0
[  332.247584][   T63] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  332.254566][   T63] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.258109][   T63] usb 6-1: Product: syz
[  332.261126][   T63] usb 6-1: Manufacturer: syz
[  332.264347][   T63] usb 6-1: SerialNumber: syz
[  332.615418][   T33] audit: type=1326 audit(1758641290.262:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14299 comm="syz.5.3292" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9cf8ec29 code=0x7ffc0000
[  332.633928][   T33] audit: type=1326 audit(1758641290.272:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14299 comm="syz.5.3292" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9cf8ec29 code=0x7ffc0000
[  332.634991][   T63] uvcvideo 6-1:220.0: probe with driver uvcvideo failed with error -22
[  332.649701][   T33] audit: type=1326 audit(1758641290.272:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14299 comm="syz.5.3292" exe="/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f9f9cf8ec29 code=0x7ffc0000
[  332.650586][   T63] usb 6-1: USB disconnect, device number 4
[  332.661894][   T33] audit: type=1326 audit(1758641290.272:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14299 comm="syz.5.3292" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9cf8ec29 code=0x7ffc0000
[  332.976776][   T33] audit: type=1326 audit(1758641290.272:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14299 comm="syz.5.3292" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9cf8ec29 code=0x7ffc0000
[  333.753049][T14327] loop5: detected capacity change from 0 to 32768
[  333.758915][T14327] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3304 (14327)
[  333.769208][T14327] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  333.773504][T14327] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  333.777057][T14327] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  333.778066][T14339] overlayfs: invalid origin (000000790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  333.837247][T14327] BTRFS info (device loop5): rebuilding free space tree
[  333.856722][T14327] BTRFS info (device loop5): disabling free space tree
[  333.859639][T14327] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  333.863116][T14327] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  333.877696][T14327] BTRFS info (device loop5): enabling ssd optimizations
[  333.880265][T14327] BTRFS info (device loop5): turning on sync discard
[  333.882872][T14327] BTRFS info (device loop5): enabling disk space caching
[  333.885812][T14327] BTRFS info (device loop5): force clearing of disk cache
[  333.892637][T14327] BTRFS info (device loop5): enabling auto defrag
[  333.895312][T14327] BTRFS info (device loop5): doing ref verification
[  333.919728][T14357] loop4: detected capacity change from 0 to 128
[  333.942470][T13760] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  334.288048][ T5297] udevd[5297]: worker [7067] terminated by signal 33 (Unknown signal 33)
[  334.296207][ T5297] udevd[5297]: worker [7067] failed while handling '/devices/virtual/block/loop5'
[  334.387902][T14379] netlink: 11 bytes leftover after parsing attributes in process `syz.5.3321'.
[  334.446508][T14383] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.3322' sets config #0
[  334.545168][T14390] netlink: 277 bytes leftover after parsing attributes in process `syz.3.3326'.
[  334.578472][ T5878] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  334.741764][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  334.746301][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  334.758487][ T5878] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  334.766440][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.779207][ T5878] usb 5-1: config 0 descriptor??
[  334.807743][T14394] loop5: detected capacity change from 0 to 32768
[  334.876461][   T54] Bluetooth: hci2: unexpected event for opcode 0x1407
[  334.916978][T14394] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[  334.917000][T14394]   allowing incompatible features above 0.0: (unknown version)
[  334.917008][T14394]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  334.952560][T14394] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  334.956258][T14394] bcachefs (loop5): initializing new filesystem
[  334.968225][T14394] bcachefs (loop5): going read-write
[  334.974930][T14394] bcachefs (loop5): marking superblocks
[  335.024093][T14394] bcachefs (loop5): initializing freespace
[  335.034028][T14394] bcachefs (loop5): done initializing freespace
[  335.055272][T14394] bcachefs (loop5): reading snapshots table
[  335.057886][T14394] bcachefs (loop5): reading snapshots done
[  335.107554][T14394] bcachefs (loop5): done starting filesystem
[  335.202121][ T5878] playstation 0003:054C:0DF2.001B: unknown main item tag 0x0
[  335.218061][ T5878] playstation 0003:054C:0DF2.001B: unknown main item tag 0x0
[  335.228522][ T5878] playstation 0003:054C:0DF2.001B: unknown main item tag 0x0
[  335.243904][ T5878] playstation 0003:054C:0DF2.001B: unknown main item tag 0x0
[  335.246368][T14394] syz.5.3328 (14394) used greatest stack depth: 16656 bytes left
[  335.249134][ T5878] playstation 0003:054C:0DF2.001B: unknown main item tag 0x0
[  335.255948][ T5878] playstation 0003:054C:0DF2.001B: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0
[  335.304099][T13760] bcachefs (loop5): shutting down
[  335.306202][T13760] bcachefs (loop5): going read-only
[  335.310300][T13760] bcachefs (loop5): finished waiting for writes to stop
[  335.315162][T13760] bcachefs (loop5): flushing journal and stopping allocators, journal seq 3
[  335.360570][T13760] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 4
[  335.369218][T13760] bcachefs (loop5): clean shutdown complete, journal seq 5
[  335.372392][T13760] bcachefs (loop5): marking filesystem clean
[  335.401922][T13760] bcachefs (loop5): shutdown complete
[  335.432383][ T5878] playstation 0003:054C:0DF2.001B: Invalid byte count transferred, expected 20 got 0
[  335.441962][ T5878] playstation 0003:054C:0DF2.001B: Failed to retrieve DualSense pairing info: -22
[  335.445758][ T5878] playstation 0003:054C:0DF2.001B: Failed to get MAC address from DualSense
[  335.468547][ T5878] playstation 0003:054C:0DF2.001B: Failed to create dualsense.
[  335.476956][ T5878] playstation 0003:054C:0DF2.001B: probe with driver playstation failed with error -22
[  335.640951][ T5878] usb 5-1: USB disconnect, device number 33
[  336.783052][T14445] loop4: detected capacity change from 0 to 32768
[  336.868835][T14445] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  336.903385][T14445] XFS (loop4): Ending clean mount
[  336.913203][T14445] XFS (loop4): Quotacheck needed: Please wait.
[  336.962181][T14445] XFS (loop4): Quotacheck: Done.
[  336.980848][   T33] audit: type=1800 audit(1758641294.632:188): pid=14445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3348" name="file1" dev="loop4" ino=9286 res=0 errno=0
[  337.002198][T10236] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  337.015183][T14447] loop5: detected capacity change from 0 to 32768
[  337.023267][T14447] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3338 (14447)
[  337.031889][T14447] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  337.036070][T14447] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  337.176961][T14447] BTRFS info (device loop5): setting nodatasum
[  337.180449][T14447] BTRFS info (device loop5): setting nodatacow
[  337.183114][T14447] BTRFS info (device loop5): enabling free space tree
[  337.186117][T14447] BTRFS info (device loop5): max_inline set to 0
[  337.347888][T13760] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  337.424887][T14482] batman_adv: batadv0: Adding interface: dummy0
[  337.432632][T14482] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  337.462671][T14482] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  337.596671][T14493] netlink: 'syz.5.3359': attribute type 8 has an invalid length.
[  337.768746][T14500] can0: slcan on ptm0.
[  337.983893][T14499] can0 (unregistered): slcan off ptm0.
[  338.684099][T14533] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3372'.
[  338.897210][T14541] loop4: detected capacity change from 0 to 1024
[  338.917294][T14541] EXT4-fs (loop4): bad geometry: first data block 0 is beyond end of filesystem (0)
[  340.010139][T14559] netlink: 'syz.4.3383': attribute type 2 has an invalid length.
[  340.018447][T14559] netlink: 'syz.4.3383': attribute type 8 has an invalid length.
[  340.021823][T14559] netlink: 1148 bytes leftover after parsing attributes in process `syz.4.3383'.
[  340.245931][T14563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3385'.
[  340.249932][T14563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3385'.
[  340.253026][T14563] netlink: 'syz.4.3385': attribute type 15 has an invalid length.
[  340.608975][   T63] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  340.781494][   T63] usb 5-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf
[  340.785305][   T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.809986][   T63] ums-cypress 5-1:1.0: USB Mass Storage device detected
[  341.015144][   T63] usb 5-1: USB disconnect, device number 34
[  341.154230][T14607] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3404'.
[  341.559587][T14630] lo: entered promiscuous mode
[  341.561739][T14630] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  341.637887][T14634] netlink: 'syz.3.3417': attribute type 1 has an invalid length.
[  341.771988][T14638] loop4: detected capacity change from 0 to 4096
[  341.788359][ T7827] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  341.812929][T14639] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  341.892031][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  341.999981][ T7827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 33022, setting to 64
[  342.006573][ T7827] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  342.010091][ T7827] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.012759][ T7827] usb 6-1: Product: syz
[  342.014356][ T7827] usb 6-1: Manufacturer: syz
[  342.016012][ T7827] usb 6-1: SerialNumber: syz
[  342.019478][ T7827] usb 6-1: config 0 descriptor??
[  342.643269][ T7827] usb 6-1: USB disconnect, device number 5
[  343.002587][ T5237] Bluetooth: hci2: unexpected event for opcode 0x2012
[  343.676761][T14695] loop5: detected capacity change from 0 to 32768
[  343.679527][T14695] XFS: ikeep mount option is deprecated.
[  343.681496][T14695] XFS (loop5): sunit and swidth must be specified together
[  343.798610][ T7827] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  343.802293][T14700] netlink: 'syz.5.3445': attribute type 1 has an invalid length.
[  343.804864][T14700] netlink: 136 bytes leftover after parsing attributes in process `syz.5.3445'.
[  343.809276][T14700] netlink: 'syz.5.3445': attribute type 2 has an invalid length.
[  343.812358][T14700] netlink: 'syz.5.3445': attribute type 1 has an invalid length.
[  343.862292][T14702] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3446'.
[  343.873738][T14702] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3446'.
[  343.984158][ T7827] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  344.008332][ T7827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  344.012259][ T7827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  344.015384][ T7827] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  344.021372][ T7827] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  344.024578][ T7827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.051614][ T7827] usb 5-1: config 0 descriptor??
[  344.134276][T14720] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3455'.
[  344.187546][T14718] loop5: detected capacity change from 0 to 16384
[  344.437118][T14727] overlayfs: failed to clone upperpath
[  344.537931][T14718] bcachefs (loop5): starting version 1.13: inode_has_child_snapshots opts=metadata_checksum=none,data_checksum=none,str_hash=crc64,erasure_code,prjquota,journal_flush_disabled,norecovery,recovery_pass_last=reconstruct_snapshots,read_only,reconstruct_alloc,version_upgrade=none
[  344.537944][T14718]   features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  344.553553][T14718] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  344.561478][T14718] bcachefs (loop5): recovering from clean shutdown, journal seq 18
[  344.566112][T14718] bcachefs (loop5): dropping and reconstructing all alloc info
[  344.673387][T14718] bcachefs (loop5): accounting_read...
[  344.737389][ T7827] plantronics 0003:047F:FFFF.001C: ignoring exceeding usage max
[  344.765309][T14718]  done
[  344.766309][T14718] bcachefs (loop5): alloc_read... done
[  344.770431][ T7827] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  344.774111][T14718] bcachefs (loop5): snapshots_read... done
[  344.777876][T14718] bcachefs (loop5): reading quotas
[  344.786799][T14718] bcachefs (loop5): quotas done
[  344.791492][T14718] bcachefs (loop5): done starting filesystem
[  344.831837][T13760] bcachefs (loop5): shutting down
[  344.853290][T13760] bcachefs (loop5): shutdown complete
[  345.824130][T14755] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3458'.
[  346.240178][  T976] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  346.388352][  T976] usb 6-1: Using ep0 maxpacket: 32
[  346.392268][  T976] usb 6-1: config 0 has no interfaces?
[  346.394643][  T976] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  346.399432][  T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.411716][  T976] usb 6-1: config 0 descriptor??
[  346.627476][ T2281] usb 6-1: USB disconnect, device number 6
[  346.776861][T14781] netlink: 'syz.3.3483': attribute type 1 has an invalid length.
[  347.070545][   T10] usb 5-1: reset high-speed USB device number 35 using dummy_hcd
[  347.077286][   T10] usb 5-1: device reset changed ep0 maxpacket size!
[  347.095893][ T7827] usb 5-1: USB disconnect, device number 35
[  347.438655][ T7827] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  347.510903][T14801] loop5: detected capacity change from 0 to 256
[  347.514585][T14801] vfat: Deprecated parameter 'posix'
[  347.516933][T14801] FAT-fs: "posix" option is obsolete, not supported now
[  347.608413][ T7827] usb 5-1: Using ep0 maxpacket: 8
[  347.618181][ T7827] usb 5-1: config 127 has an invalid interface number: 171 but max is 1
[  347.621597][ T7827] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config
[  347.625204][ T7827] usb 5-1: config 127 has no interface number 1
[  347.625899][T14807] bad cache= option: no%e
[  347.625899][T14807] 
[  347.627192][ T7827] usb 5-1: config 127 interface 0 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  347.627205][ T7827] usb 5-1: config 127 interface 171 has no altsetting 0
[  347.627212][ T7827] usb 5-1: config 127 interface 0 has no altsetting 0
[  347.629561][T14807] CIFS: VFS: bad cache= option: no%e
[  347.642904][ T7827] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[  347.646036][ T7827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.651580][ T7827] usb 5-1: Product: syz
[  347.653324][ T7827] usb 5-1: Manufacturer: syz
[  347.654841][ T7827] usb 5-1: SerialNumber: syz
[  347.885769][ T7827] xr_serial 5-1:127.171: xr_serial converter detected
[  347.897343][ T7827] xr_serial ttyUSB0: Failed to set reg 0x1a: -71
[  347.902455][ T7827] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  347.911691][ T7827] usb 5-1: USB disconnect, device number 36
[  347.922851][ T7827] xr_serial 5-1:127.171: device disconnected
[  348.304730][T14827] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  348.448392][   T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  348.601051][   T10] usb 6-1: Using ep0 maxpacket: 8
[  348.608454][   T10] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  348.612143][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.616002][   T10] usb 6-1: Product: syz
[  348.617945][   T10] usb 6-1: Manufacturer: syz
[  348.622580][   T10] usb 6-1: SerialNumber: syz
[  348.628431][   T10] usb 6-1: config 0 descriptor??
[  348.636059][   T10] radio-usb-si4713 6-1:0.0: Si4713 development board discovered: (10C4:8244)
[  348.733556][T14836] netlink: 'syz.3.3507': attribute type 2 has an invalid length.
[  349.458819][   T10] radio-usb-si4713 6-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[  349.462846][   T10] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  349.472164][   T10] usb 6-1: USB disconnect, device number 7
[  349.486630][T14849] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3513'.
[  349.621305][T14857] loop4: detected capacity change from 0 to 512
[  349.626042][T14857] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  349.632483][T14857] EXT4-fs (loop4): 1 truncate cleaned up
[  349.636322][T14857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  349.645871][T14857] EXT4-fs error (device loop4): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.4.3517: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  349.655779][T14857] EXT4-fs (loop4): Remounting filesystem read-only
[  349.657993][T14857] EXT4-fs warning (device loop4): ext4_rename_delete:3731: inode #2: comm syz.4.3517: Deleting old file: nlink 4, error=-117
[  349.699649][T10236] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.755988][T14863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3519'.
[  349.988421][ T7827] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  350.141997][ T7827] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  350.145308][ T7827] usb 5-1: config 0 has no interface number 0
[  350.147404][ T7827] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  350.151325][ T7827] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  350.154800][ T7827] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  350.159239][ T7827] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  350.162842][ T7827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.166971][ T7827] usb 5-1: config 0 descriptor??
[  350.290752][  T976] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  350.448697][  T976] usb 6-1: Using ep0 maxpacket: 16
[  350.455365][  T976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  350.459020][  T976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  350.463158][  T976] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  350.467046][  T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.474127][  T976] usb 6-1: config 0 descriptor??
[  350.782745][ T7827] uclogic 0003:28BD:0042.001D: failed retrieving string descriptor #100: -71
[  350.787107][ T7827] uclogic 0003:28BD:0042.001D: failed retrieving pen parameters: -71
[  350.789819][ T7827] uclogic 0003:28BD:0042.001D: pen probing failed: -71
[  350.792107][ T7827] uclogic 0003:28BD:0042.001D: failed probing parameters: -71
[  350.794620][ T7827] uclogic 0003:28BD:0042.001D: probe with driver uclogic failed with error -71
[  350.801273][ T7827] usb 5-1: USB disconnect, device number 37
[  350.892665][  T976] mcp2221 0003:04D8:00DD.001E: item fetching failed at offset 2/5
[  350.897725][  T976] mcp2221 0003:04D8:00DD.001E: can't parse reports
[  350.906728][  T976] mcp2221 0003:04D8:00DD.001E: probe with driver mcp2221 failed with error -22
[  350.946269][T14900] RDS: rds_bind could not find a transport for ::ffff:0.0.0.224, load rds_tcp or rds_rdma?
[  351.090863][   T10] usb 6-1: USB disconnect, device number 8
[  351.203593][T14904] infiniband syz!: set down
[  351.205729][T14904] infiniband syz!: added team_slave_0
[  351.244032][T14904] RDS/IB: syz!: added
[  351.246485][T14904] smc: adding ib device syz! with port count 1
[  351.250204][T14904] smc:    ib device syz! port 1 has pnetid 
[  351.474528][T14912] netlink: 512 bytes leftover after parsing attributes in process `syz.4.3540'.
[  351.748541][  T976] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  351.898384][   T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  351.911603][  T976] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  351.916300][  T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  351.921029][  T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  351.925178][  T976] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  351.931959][  T976] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  351.935517][  T976] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  351.938419][  T976] usb 5-1: Manufacturer: syz
[  351.941964][  T976] usb 5-1: config 0 descriptor??
[  352.050432][   T10] usb 6-1: Using ep0 maxpacket: 8
[  352.055248][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[  352.071657][   T10] usb 6-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0
[  352.075354][   T10] usb 6-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0
[  352.088340][   T10] usb 6-1: config 8 interface 0 has no altsetting 0
[  352.094201][   T10] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[  352.097341][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.100233][   T10] usb 6-1: Product: syz
[  352.101949][   T10] usb 6-1: Manufacturer: syz
[  352.103874][   T10] usb 6-1: SerialNumber: syz
[  352.333908][   T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  352.336834][   T10] usb 6-1: selecting invalid altsetting 0
[  352.359125][  T976] appleir 0003:05AC:8243.001F: unknown main item tag 0x0
[  352.388528][  T976] appleir 0003:05AC:8243.001F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  352.405498][   T10] snd-usb-audio 6-1:8.0: probe with driver snd-usb-audio failed with error -12
[  352.414793][   T10] usb 6-1: USB disconnect, device number 9
[  352.483273][ T7065] udevd[7065]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  352.613229][ T2281] usb 5-1: USB disconnect, device number 38
[  352.904724][T14934] netlink: 512 bytes leftover after parsing attributes in process `syz.5.3550'.
[  353.181260][T14945] loop4: detected capacity change from 0 to 2048
[  353.193135][T14945] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  353.203855][T14945] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  353.221888][T14945] UDF-fs: unknown compression code (0)
[  353.268987][  T976] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  353.438971][  T976] usb 6-1: Using ep0 maxpacket: 16
[  353.447115][  T976] usb 6-1: config 0 has an invalid interface number: 230 but max is 0
[  353.456007][  T976] usb 6-1: config 0 has no interface number 0
[  353.463558][  T976] usb 6-1: config 0 interface 230 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 8
[  353.467470][  T976] usb 6-1: config 0 interface 230 altsetting 2 endpoint 0x1 has invalid maxpacket 447, setting to 64
[  353.481795][  T976] usb 6-1: config 0 interface 230 has no altsetting 0
[  353.493503][  T976] usb 6-1: New USB device found, idVendor=157e, idProduct=3007, bcdDevice=65.eb
[  353.500493][  T976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.503760][  T976] usb 6-1: Product: syz
[  353.505400][  T976] usb 6-1: Manufacturer: syz
[  353.507273][  T976] usb 6-1: SerialNumber: syz
[  353.552761][  T976] usb 6-1: config 0 descriptor??
[  353.557960][T14942] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  353.577529][  T976] usb 6-1: Could not find all expected endpoints
[  353.791848][T14976] netlink: 'syz.4.3570': attribute type 1 has an invalid length.
[  353.795081][T14976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3570'.
[  353.840160][  T976] usb 6-1: USB disconnect, device number 10
[  354.616848][T14990] pim6reg: entered allmulticast mode
[  354.934068][T15007] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3583'.
[  354.999481][   T63] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  355.152564][   T63] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  355.156450][   T63] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  355.166600][   T63] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  355.178502][   T63] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  355.186915][   T63] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  355.209187][   T63] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  355.213197][   T63] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  355.216443][   T63] usb 5-1: Product: syz
[  355.228447][   T63] usb 5-1: Manufacturer: syz
[  355.239749][   T63] cdc_wdm 5-1:1.0: skipping garbage
[  355.241904][   T63] cdc_wdm 5-1:1.0: skipping garbage
[  355.250065][   T63] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  355.252652][   T63] cdc_wdm 5-1:1.0: Unknown control protocol
[  355.324488][T15011] loop5: detected capacity change from 0 to 32768
[  355.391461][T15019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3589'.
[  355.396040][T15019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3589'.
[  355.402190][T15019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3589'.
[  355.664108][   T10] usb 5-1: USB disconnect, device number 39
[  356.049155][  T976] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  356.101573][T15039] overlayfs: failed to clone upperpath
[  356.221636][  T976] usb 6-1: Using ep0 maxpacket: 16
[  356.240319][  T976] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  356.249720][  T976] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  356.253031][  T976] usb 6-1: config 0 interface 0 has no altsetting 0
[  356.256391][  T976] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  356.263294][  T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.272513][  T976] usb 6-1: config 0 descriptor??
[  356.692233][T15059] loop4: detected capacity change from 0 to 32768
[  356.699309][T15059] XFS: attr2 mount option is deprecated.
[  356.699502][  T976] cougar 0003:060B:500A.0020: unexpected long global item
[  356.701681][T15059] XFS: ikeep mount option is deprecated.
[  356.718847][  T976] cougar 0003:060B:500A.0020: parse failed
[  356.723523][  T976] cougar 0003:060B:500A.0020: probe with driver cougar failed with error -22
[  356.723719][T15059] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  356.753369][T15059] XFS (loop4): Ending clean mount
[  356.756610][T15059] XFS (loop4): Quotacheck needed: Please wait.
[  356.794784][T15059] XFS (loop4): Quotacheck: Done.
[  356.838156][T10236] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  356.891803][  T976] usb 6-1: USB disconnect, device number 11
[  357.545394][T15103] syz_tun: entered allmulticast mode
[  357.974654][T15112] loop5: detected capacity change from 0 to 1024
[  358.357473][T15130] loop4: detected capacity change from 0 to 256
[  358.361247][T15132] netlink: 'syz.5.3638': attribute type 11 has an invalid length.
[  358.403999][T15130] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  358.768480][  T976] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  358.953430][  T976] usb 5-1: config 0 has an invalid interface number: 57 but max is 0
[  358.961125][  T976] usb 5-1: config 0 has no interface number 0
[  358.963595][  T976] usb 5-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=c6.63
[  358.967649][  T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.987291][  T976] usb 5-1: config 0 descriptor??
[  358.999753][  T976] gspca_main: mr97310a-2.14.0 probing 093a:010f
[  359.002356][  T976] gspca_mr97310a: reg write [21] error -22
[  359.004943][  T976] mr97310a 5-1:0.57: probe with driver mr97310a failed with error -22
[  359.202851][  T976] usb 5-1: USB disconnect, device number 40
[  359.988604][T15170] bond0: entered promiscuous mode
[  359.990799][T15170] bond_slave_0: entered promiscuous mode
[  359.993348][T15170] bond_slave_1: entered promiscuous mode
[  360.094072][T15174] binder: 15173:15174 ioctl 4018620d 0 returned -22
[  360.458487][ T5878] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  360.610113][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  360.614195][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  360.618048][ T5878] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  360.623234][ T5878] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  360.626862][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.632509][ T5878] usb 5-1: config 0 descriptor??
[  361.053118][ T5878] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  361.191097][T15205] loop5: detected capacity change from 0 to 32768
[  361.217306][T15205] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3674 (15205)
[  361.231690][T15205] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  361.236297][T15205] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  361.362484][  T976] usb 5-1: USB disconnect, device number 41
[  361.545479][T15205] BTRFS info (device loop5): enabling ssd optimizations
[  361.558963][T15205] BTRFS info (device loop5): enabling free space tree
[  361.641457][T13760] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  362.458633][ T5878] usb 5-1: new full-speed USB device number 42 using dummy_hcd
[  362.637716][ T5878] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  362.661652][ T5878] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  362.682234][ T5878] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  362.723184][ T5878] usb 5-1: config 0 interface 0 has no altsetting 0
[  362.730369][ T5878] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  362.739635][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.748700][ T5878] usb 5-1: config 0 descriptor??
[  362.753205][T15247] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  363.175713][ T5878] hid-u2fzero 0003:10C4:8ACF.0022: unbalanced collection at end of report description
[  363.182054][ T5878] hid-u2fzero 0003:10C4:8ACF.0022: probe with driver hid-u2fzero failed with error -22
[  363.844833][   T63] usb 5-1: USB disconnect, device number 42
[  364.175579][T15283] nfs: Unknown parameter 'ntext'
[  364.402843][T15294] loop4: detected capacity change from 0 to 16
[  364.407897][T15294] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  364.530943][T15304] overlayfs: failed to clone upperpath
[  365.050157][T15322] loop4: detected capacity change from 0 to 32768
[  365.079373][T15322] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  365.113602][T15322] XFS (loop4): Ending clean mount
[  365.147055][T10236] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  365.209105][T15336] loop5: detected capacity change from 0 to 4096
[  365.231334][T15336] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  365.468784][T15347] netlink: 'syz.3.3724': attribute type 1 has an invalid length.
[  365.484436][T15346] binder_alloc: 15344: binder_alloc_buf size 16456 failed, no address space
[  365.498543][T15346] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  365.635631][T15357] loop5: detected capacity change from 0 to 256
[  365.642326][T15357] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  365.646430][T15357] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  365.656945][T15357] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  366.060484][T15378] loop4: detected capacity change from 0 to 8
[  366.115636][T15378] SQUASHFS error: zstd decompression error: 10
[  366.117960][T15378] SQUASHFS error: zstd decompression failed, data probably corrupt
[  366.122629][T15378] SQUASHFS error: Failed to read block 0x60: -5
[  366.125459][T15378] SQUASHFS error: zstd decompression error: 10
[  366.129678][T15378] SQUASHFS error: zstd decompression failed, data probably corrupt
[  366.132724][T15378] SQUASHFS error: Failed to read block 0x60: -5
[  366.438461][ T5878] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  366.616099][ T5878] usb 5-1: Using ep0 maxpacket: 32
[  366.625895][ T5878] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  366.635786][ T5878] usb 5-1: config 0 has no interface number 0
[  366.646124][ T5878] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  366.653334][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.663060][ T5878] usb 5-1: Product: syz
[  366.665887][ T5878] usb 5-1: Manufacturer: syz
[  366.669942][ T5878] usb 5-1: SerialNumber: syz
[  366.675365][ T5878] usb 5-1: config 0 descriptor??
[  366.688112][ T5878] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  366.929006][ T5878] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  366.963789][ T5878] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  367.140074][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short
[  367.293211][T15384] loop5: detected capacity change from 0 to 32768
[  367.325107][T15384] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  367.340368][    C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  367.342180][   T63] usb 5-1: USB disconnect, device number 43
[  367.360489][   T63] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  367.384640][T15384] XFS (loop5): Ending clean mount
[  367.389627][   T63] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  367.395768][   T63] quatech2 5-1:0.51: device disconnected
[  367.437417][T13760] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  367.663463][T15401] netlink: 2036 bytes leftover after parsing attributes in process `syz.3.3745'.
[  367.668865][T15401] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3745'.
[  367.998099][T15414] veth1_macvtap: left promiscuous mode
[  368.003695][T15414] macsec0: entered allmulticast mode
[  368.012424][T15414] veth1_macvtap: entered promiscuous mode
[  368.028431][T15414] veth1_macvtap: entered allmulticast mode
[  368.033659][T15414] macsec0: left allmulticast mode
[  368.037435][T15414] veth1_macvtap: left allmulticast mode
[  368.167424][T15419] loop4: detected capacity change from 0 to 4096
[  368.802131][   T33] audit: type=1326 audit(1758641326.452:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15432 comm="syz.3.3759" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac7a38ec29 code=0x0
[  369.144721][T15451] loop4: detected capacity change from 0 to 1024
[  369.157199][T15451] EXT4-fs (loop4): first meta block group too large: 33024 (group descriptor block count 1)
[  369.181885][T15453] loop5: detected capacity change from 0 to 1024
[  369.185290][T15453] EXT4-fs: Ignoring removed bh option
[  369.223396][T15453] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  369.246916][T15453] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.3768: corrupted in-inode xattr: e_value out of bounds
[  369.285736][T13760] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  369.485143][T15468] loop4: detected capacity change from 0 to 1024
[  369.500425][T15468] EXT4-fs: inline encryption not supported
[  369.517285][T15468] EXT4-fs: Ignoring removed bh option
[  369.544414][T15468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  369.574567][T10236] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  369.658760][ T7827] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  369.710269][T15477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3776'.
[  369.827474][ T7827] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  369.837039][ T7827] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.843632][ T7827] usb 6-1: Product: syz
[  369.845351][ T7827] usb 6-1: Manufacturer: syz
[  369.847299][ T7827] usb 6-1: SerialNumber: syz
[  369.946865][   T33] audit: type=1326 audit(1758641327.592:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15490 comm="syz.4.3783" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcdd7d8ec29 code=0x0
[  370.649688][ T5237] Bluetooth: hci2: hardware error 0xf4
[  370.654121][   T54] Bluetooth: hci2: SCO packet for unknown connection handle 200
[  371.085008][ T7827] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO
[  371.094351][ T7827] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  371.099242][ T7827] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  371.108818][ T7827] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[  371.116252][ T7827] usb 6-1: USB disconnect, device number 12
[  371.844363][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  371.848218][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.279024][T15537] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  372.618419][   T63] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  372.621027][   T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  372.689464][ T5237] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  372.870272][   T63] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  372.877264][   T63] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  372.882931][   T63] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  372.957727][   T63] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  372.964160][   T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.967957][   T63] usb 5-1: Product: syz
[  372.974400][   T63] usb 5-1: Manufacturer: syz
[  372.977344][   T63] usb 5-1: SerialNumber: syz
[  372.984821][   T63] usb 5-1: bad CDC descriptors
[  372.986498][   T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  372.997174][   T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  373.001154][   T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  373.010967][   T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  373.015050][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.018704][   T10] usb 6-1: Product: syz
[  373.020704][   T10] usb 6-1: Manufacturer: syz
[  373.022851][   T10] usb 6-1: SerialNumber: syz
[  373.038883][   T10] hub 6-1:1.0: bad descriptor, ignoring hub
[  373.041545][   T10] hub 6-1:1.0: probe with driver hub failed with error -5
[  373.216103][ T7827] usb 5-1: USB disconnect, device number 44
[  374.754578][   T10] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  374.784899][   T10] usb 6-1: USB disconnect, device number 13
[  374.799732][T15598] Bluetooth: MGMT ver 1.23
[  374.812822][   T10] usblp0: removed
[  374.816334][T15598] Bluetooth: hci0: load_link_keys: too big key_count value 32768
[  374.898072][T15609] loop4: detected capacity change from 0 to 512
[  374.904014][T15611] loop5: detected capacity change from 0 to 256
[  374.909793][T15609] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  374.920198][T15609] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  374.925325][T15609] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  374.929993][T15609] System zones: 0-2, 18-18, 34-34
[  374.938230][T15609] EXT4-fs error (device loop4): ext4_orphan_get:1392: comm syz.4.3820: inode #15: comm syz.4.3820: iget: illegal inode #
[  374.946614][T15609] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3820: couldn't read orphan inode 15 (err -117)
[  374.956889][T15609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  375.007339][T10236] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.192789][T15630] loop4: detected capacity change from 0 to 512
[  375.203973][T15630] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  375.230841][T15630] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002]
[  375.235422][T15630] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.3824: corrupted in-inode xattr: e_value size too large
[  375.253640][T15630] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3824: couldn't read orphan inode 15 (err -117)
[  375.274058][T15630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  375.354153][T10236] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.612446][T15637] loop5: detected capacity change from 0 to 40427
[  375.631610][T15637] F2FS-fs (loop5): Image doesn't support compression
[  375.634512][T15637] F2FS-fs (loop5): build fault injection rate: 690
[  375.641089][T15637] F2FS-fs (loop5): invalid crc value
[  375.698640][T15637] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  375.703035][T15637] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  375.711043][   T33] audit: type=1800 audit(1758641333.362:191): pid=15637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3832" name="file1" dev="loop5" ino=10 res=0 errno=0
[  375.735951][T13760] syz-executor: attempt to access beyond end of device
[  375.735951][T13760] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  375.742248][T13760] CPU: 1 UID: 0 PID: 13760 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  375.742261][T13760] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  375.742266][T13760] Call Trace:
[  375.742269][T13760]  <TASK>
[  375.742273][T13760]  dump_stack_lvl+0x189/0x250
[  375.742287][T13760]  ? __pfx_dump_stack_lvl+0x10/0x10
[  375.742296][T13760]  ? __pfx_queue_work_on+0x10/0x10
[  375.742303][T13760]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  375.742315][T13760]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  375.742330][T13760]  f2fs_handle_critical_error+0x37c/0x540
[  375.742344][T13760]  f2fs_write_end_io+0x886/0xb60
[  375.742359][T13760]  __submit_merged_bio+0x27a/0x6a0
[  375.742371][T13760]  __submit_merged_write_cond+0x255/0x530
[  375.742384][T13760]  f2fs_write_data_pages+0x261d/0x3000
[  375.742404][T13760]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  375.742433][T13760]  ? folios_put_refs+0x559/0x640
[  375.742446][T13760]  ? __pfx_folios_put_refs+0x10/0x10
[  375.742452][T13760]  ? rcu_is_watching+0x15/0xb0
[  375.742464][T13760]  ? __lock_acquire+0xab9/0xd20
[  375.742480][T13760]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  375.742488][T13760]  do_writepages+0x32e/0x550
[  375.742502][T13760]  ? do_raw_spin_unlock+0x4d/0x240
[  375.742513][T13760]  filemap_fdatawrite+0x199/0x240
[  375.742523][T13760]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  375.742550][T13760]  ? do_raw_spin_unlock+0x4d/0x240
[  375.742560][T13760]  f2fs_sync_dirty_inodes+0x31f/0x830
[  375.742574][T13760]  f2fs_write_checkpoint+0x95a/0x1df0
[  375.742591][T13760]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  375.742617][T13760]  ? kill_f2fs_super+0x298/0x6c0
[  375.742627][T13760]  kill_f2fs_super+0x2c3/0x6c0
[  375.742636][T13760]  ? __pfx_kill_f2fs_super+0x10/0x10
[  375.742643][T13760]  ? radix_tree_delete_item+0x2b6/0x400
[  375.742653][T13760]  ? shrinker_free+0x2ce/0x3e0
[  375.742662][T13760]  deactivate_locked_super+0xbc/0x130
[  375.742672][T13760]  cleanup_mnt+0x425/0x4c0
[  375.742679][T13760]  ? lockdep_hardirqs_on+0x9c/0x150
[  375.742713][T13760]  task_work_run+0x1d4/0x260
[  375.742726][T13760]  ? __pfx_task_work_run+0x10/0x10
[  375.742734][T13760]  ? __x64_sys_umount+0x122/0x160
[  375.742747][T13760]  ? exit_to_user_mode_loop+0x40/0x110
[  375.742758][T13760]  exit_to_user_mode_loop+0xec/0x110
[  375.742768][T13760]  do_syscall_64+0x2bd/0x3b0
[  375.742776][T13760]  ? lockdep_hardirqs_on+0x9c/0x150
[  375.742782][T13760]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.742789][T13760]  ? exc_page_fault+0x9f/0xf0
[  375.742797][T13760]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.742803][T13760] RIP: 0033:0x7f9f9cf8ff57
[  375.742812][T13760] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  375.742817][T13760] RSP: 002b:00007ffcdf451b28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  375.742827][T13760] RAX: 0000000000000000 RBX: 00007f9f9d011c2d RCX: 00007f9f9cf8ff57
[  375.742831][T13760] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcdf451be0
[  375.742836][T13760] RBP: 00007ffcdf451be0 R08: 0000000000000000 R09: 0000000000000000
[  375.742840][T13760] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcdf452c70
[  375.742845][T13760] R13: 00007f9f9d011c2d R14: 000000000005bb46 R15: 00007ffcdf452cb0
[  375.742857][T13760]  </TASK>
[  375.742860][T13760] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  375.937517][T15658] netlink: 596 bytes leftover after parsing attributes in process `syz.3.3842'.
[  376.227786][T15673] overlayfs: upper fs does not support tmpfile.
[  376.868105][T15686] loop5: detected capacity change from 0 to 32768
[  376.901166][T15686] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  376.952976][T15686] XFS (loop5): Ending clean mount
[  376.957722][T15686] XFS (loop5): Quotacheck needed: Please wait.
[  377.013467][T15686] XFS (loop5): Quotacheck: Done.
[  377.108466][T13760] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  378.134817][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  378.137648][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  378.678506][ T5912] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  378.751971][T15731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3870'.
[  378.777692][T15733] loop5: detected capacity change from 0 to 128
[  378.787438][T15733] ext2: Unknown parameter 'dont_appraise'
[  378.857939][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  378.863042][ T5912] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  378.877986][ T5912] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  378.892339][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.915150][ T5912] usb 5-1: config 0 descriptor??
[  379.419197][ T5912] kovaplus 0003:1E7D:2D50.0023: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0
[  379.757973][T15748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3878'.
[  379.764806][T15748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3878'.
[  379.959584][ T5912] kovaplus 0003:1E7D:2D50.0023: couldn't init struct kovaplus_device
[  379.969730][ T5912] kovaplus 0003:1E7D:2D50.0023: couldn't install mouse
[  380.002391][ T5912] kovaplus 0003:1E7D:2D50.0023: probe with driver kovaplus failed with error -71
[  380.027798][ T5912] usb 5-1: USB disconnect, device number 45
[  380.033384][T15754] netlink: 'syz.3.3881': attribute type 5 has an invalid length.
[  380.747855][T15775] loop4: detected capacity change from 0 to 8
[  380.751928][T15775] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  381.497914][T15810] new mount options do not match the existing superblock, will be ignored
[  381.728789][T15818] binder: 15816:15818 ioctl c0306201 200000000680 returned -14
[  382.236259][T15833] loop4: detected capacity change from 0 to 32768
[  382.247613][T15833] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  382.262061][T15833] XFS (loop4): Ending clean mount
[  382.265361][T15833] XFS (loop4): Quotacheck needed: Please wait.
[  382.303151][T15833] XFS (loop4): Quotacheck: Done.
[  382.344817][T10236] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  382.789479][T15859] loop4: detected capacity change from 0 to 736
[  382.803412][T15859] rock: directory entry would overflow storage
[  382.805608][T15859] rock: sig=0x3b10, size=4, remaining=3
[  382.990063][T15883] loop4: detected capacity change from 0 to 256
[  383.329342][T15903] fuse: Bad value for 'fd'
[  383.339123][T15903] fuse: Bad value for 'fd'
[  383.541333][T15899] loop4: detected capacity change from 0 to 32768
[  383.549008][T15899] (syz.4.3939,15899,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x62b9e51c, computed 0xfaa9014d. Applying ECC.
[  383.555050][T15899] (syz.4.3939,15899,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x62b9e51c, computed 0x266ec356
[  383.563693][T15899] (syz.4.3939,15899,1):ocfs2_validate_dir_block:452 ERROR: Checksum failed for dinode 352
[  383.578880][T15899] (syz.4.3939,15899,1):ocfs2_read_virt_blocks:1037 ERROR: status = -5
[  383.582267][T15899] (syz.4.3939,15899,1):ocfs2_read_dir_block:511 ERROR: status = -5
[  383.585360][T15899] (syz.4.3939,15899,1):ocfs2_find_entry_el:728 ERROR: reading directory 66, offset 0
[  383.589842][T15899] (syz.4.3939,15899,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  383.593432][T15899] (syz.4.3939,15899,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs?
[  383.593454][T15899] (syz.4.3939,15899,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  383.604221][T15899] (syz.4.3939,15899,0):ocfs2_initialize_super:2198 ERROR: status = -22
[  383.607524][T15899] (syz.4.3939,15899,0):ocfs2_fill_super:1177 ERROR: status = -22
[  383.800149][T15923] erspan0: entered promiscuous mode
[  384.790537][T15972] loop4: detected capacity change from 0 to 256
[  384.803762][T15972] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  385.068052][T15978] loop4: detected capacity change from 0 to 32768
[  385.070993][T15978] XFS (loop4): invalid log iosize: 1 [not 12-30]
[  385.246655][T15995] loop4: detected capacity change from 0 to 256
[  385.270855][T15995] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  385.277463][T15995] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  385.293897][T15995] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  386.550143][T16015] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  386.553438][T16015] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  386.624678][T16015] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  386.635361][T16015] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  386.661197][T16015] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  386.667650][T16015] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  386.693725][T16010] overlayfs: failed to resolve './file0': -2
[  388.001941][T16046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4005'.
[  388.005538][T16046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4005'.
[  388.097055][T16050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4007'.
[  388.102343][T16050] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4007'.
[  388.267614][T16058] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  388.530612][ T5237] Bluetooth: hci1: command 0x0c1a tx timeout
[  388.688862][ T5237] Bluetooth: hci0: command 0x0c1a tx timeout
[  388.736792][T16070] netlink: 'syz.3.4017': attribute type 1 has an invalid length.
[  388.841477][T16078] netlink: 'syz.5.4021': attribute type 1 has an invalid length.
[  388.867854][T16082] fuse: Bad value for 'fd'
[  388.977537][T16093] netem: incorrect gi model size
[  388.983175][T16093] netem: change failed
[  390.028840][   T10] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  390.298548][   T10] usb 5-1: Using ep0 maxpacket: 32
[  390.302705][   T10] usb 5-1: config 0 has an invalid interface number: 133 but max is 0
[  390.306147][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  390.313526][   T10] usb 5-1: config 0 has no interface number 0
[  390.316084][   T10] usb 5-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  390.320407][   T10] usb 5-1: config 0 interface 133 altsetting 0 has an endpoint descriptor with address 0x43, changing to 0x3
[  390.325356][   T10] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  390.332283][   T10] usb 5-1: config 0 interface 133 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  390.336644][   T10] usb 5-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  390.344827][   T10] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e
[  390.351546][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.354953][   T10] usb 5-1: Product: syz
[  390.356715][   T10] usb 5-1: Manufacturer: syz
[  390.359086][   T10] usb 5-1: SerialNumber: syz
[  390.460917][   T10] usb 5-1: config 0 descriptor??
[  390.487853][T16150] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  390.608547][ T5237] Bluetooth: hci1: command 0x0c1a tx timeout
[  390.733221][   T10] usb 5-1: probing VID:PID(0424:012C)   
[  390.737274][   T10] usb 5-1: vub300 testing BULK OUT EndPoint(0) 0B
[  390.743150][   T10] usb 5-1: vub300 testing BULK OUT EndPoint(1) 03
[  390.746003][   T10] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs
[  390.750538][   T10] vub300 5-1:0.133: probe with driver vub300 failed with error -22
[  390.764777][   T10] usb 5-1: USB disconnect, device number 46
[  390.768889][ T5237] Bluetooth: hci0: command 0x0c1a tx timeout
[  392.689281][ T5237] Bluetooth: hci1: command 0x0c1a tx timeout
[  392.858592][ T5237] Bluetooth: hci0: command 0x0c1a tx timeout
[  393.252296][T16203] tipc: Enabling of bearer </h:s> rejected, media not registered
[  394.950527][T16242] loop4: detected capacity change from 0 to 32768
[  395.141323][T16242] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4092 (16242)
[  395.152314][T16242] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  395.156487][T16242] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  395.348686][T16242] BTRFS info (device loop4): rebuilding free space tree
[  395.359407][T16242] BTRFS info (device loop4): disabling free space tree
[  395.362654][T16242] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  395.366684][T16242] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  395.376534][T16242] BTRFS info (device loop4): enabling ssd optimizations
[  395.379273][T16242] BTRFS info (device loop4): force clearing of disk cache
[  395.381514][T16242] BTRFS info (device loop4): enabling auto defrag
[  395.383587][T16242] BTRFS info (device loop4): doing ref verification
[  395.434324][   T33] audit: type=1800 audit(1758641353.082:192): pid=16242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4092" name="file1" dev="loop4" ino=260 res=0 errno=0
[  396.017710][T10236] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  398.996896][T16364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4136'.
[  399.031062][T16364] bridge_slave_1 (unregistering): left allmulticast mode
[  399.033450][T16364] bridge_slave_1 (unregistering): left promiscuous mode
[  399.035970][T16364] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.766537][T16377] loop4: detected capacity change from 0 to 40427
[  399.778502][T16377] F2FS-fs (loop4): build fault injection rate: 690
[  399.791454][T16377] F2FS-fs (loop4): invalid crc value
[  399.841794][T16377] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  399.847376][T16377] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  399.860874][   T33] audit: type=1800 audit(1758641357.512:193): pid=16377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4141" name="file1" dev="loop4" ino=10 res=0 errno=0
[  399.877372][T10236] syz-executor: attempt to access beyond end of device
[  399.877372][T10236] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  399.884026][T10236] CPU: 0 UID: 0 PID: 10236 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  399.884045][T10236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  399.884052][T10236] Call Trace:
[  399.884058][T10236]  <TASK>
[  399.884064][T10236]  dump_stack_lvl+0x189/0x250
[  399.884087][T10236]  ? __pfx_dump_stack_lvl+0x10/0x10
[  399.884102][T10236]  ? __pfx_queue_work_on+0x10/0x10
[  399.884115][T10236]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  399.884133][T10236]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  399.884160][T10236]  f2fs_handle_critical_error+0x37c/0x540
[  399.884185][T10236]  f2fs_write_end_io+0x886/0xb60
[  399.884214][T10236]  __submit_merged_bio+0x27a/0x6a0
[  399.884236][T10236]  __submit_merged_write_cond+0x255/0x530
[  399.884258][T10236]  f2fs_write_data_pages+0x261d/0x3000
[  399.884299][T10236]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  399.884381][T10236]  ? folios_put_refs+0x559/0x640
[  399.884406][T10236]  ? __lock_acquire+0xab9/0xd20
[  399.884430][T10236]  ? do_raw_spin_lock+0x121/0x290
[  399.884454][T10236]  ? do_raw_spin_unlock+0x4d/0x240
[  399.884470][T10236]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  399.884482][T10236]  do_writepages+0x32e/0x550
[  399.884508][T10236]  ? do_raw_spin_unlock+0x4d/0x240
[  399.884526][T10236]  filemap_fdatawrite+0x199/0x240
[  399.884542][T10236]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  399.884597][T10236]  ? do_raw_spin_unlock+0x4d/0x240
[  399.884622][T10236]  f2fs_sync_dirty_inodes+0x31f/0x830
[  399.884648][T10236]  f2fs_write_checkpoint+0x95a/0x1df0
[  399.884681][T10236]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  399.884728][T10236]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  399.884743][T10236]  ? kfree+0x18e/0x440
[  399.884760][T10236]  ? kill_f2fs_super+0x298/0x6c0
[  399.884777][T10236]  kill_f2fs_super+0x2c3/0x6c0
[  399.884796][T10236]  ? __pfx_kill_f2fs_super+0x10/0x10
[  399.884807][T10236]  ? radix_tree_delete_item+0x2b6/0x400
[  399.884827][T10236]  ? shrinker_free+0x2ce/0x3e0
[  399.884843][T10236]  deactivate_locked_super+0xbc/0x130
[  399.884860][T10236]  cleanup_mnt+0x425/0x4c0
[  399.884874][T10236]  ? lockdep_hardirqs_on+0x9c/0x150
[  399.884891][T10236]  task_work_run+0x1d4/0x260
[  399.884910][T10236]  ? __pfx_task_work_run+0x10/0x10
[  399.884923][T10236]  ? __x64_sys_umount+0x122/0x160
[  399.884943][T10236]  ? exit_to_user_mode_loop+0x40/0x110
[  399.884963][T10236]  exit_to_user_mode_loop+0xec/0x110
[  399.884979][T10236]  do_syscall_64+0x2bd/0x3b0
[  399.884990][T10236]  ? lockdep_hardirqs_on+0x9c/0x150
[  399.885001][T10236]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.885012][T10236]  ? exc_page_fault+0x9f/0xf0
[  399.885027][T10236]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.885040][T10236] RIP: 0033:0x7fcdd7d8ff57
[  399.885051][T10236] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  399.885062][T10236] RSP: 002b:00007fff2ffb23b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  399.885077][T10236] RAX: 0000000000000000 RBX: 00007fcdd7e11c2d RCX: 00007fcdd7d8ff57
[  399.885085][T10236] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff2ffb2470
[  399.885093][T10236] RBP: 00007fff2ffb2470 R08: 0000000000000000 R09: 0000000000000000
[  399.885100][T10236] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff2ffb3500
[  399.885108][T10236] R13: 00007fcdd7e11c2d R14: 0000000000061991 R15: 00007fff2ffb3540
[  399.885130][T10236]  </TASK>
[  399.885137][T10236] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  399.893853][T16382] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4142'.
[  400.686995][T16401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4149'.
[  400.731185][T16403] overlayfs: failed to clone upperpath
[  400.767365][T16405] overlayfs: failed to clone upperpath
[  401.108201][T16411] overlayfs: failed to clone upperpath
[  401.308646][  T976] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  401.474922][  T976] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  401.489565][  T976] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  401.492833][  T976] usb 5-1: Product: syz
[  401.494518][  T976] usb 5-1: SerialNumber: syz
[  401.519271][  T976] usb 5-1: config 0 descriptor??
[  401.737057][  T976] hso 5-1:0.0: Failed to find BULK IN ep
[  401.737264][T16453] overlayfs: failed to clone upperpath
[  401.936570][  T976] usb 5-1: USB disconnect, device number 47
[  402.483514][T16510] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4202'.
[  402.898972][   T63] usb 5-1: new full-speed USB device number 48 using dummy_hcd
[  403.051114][   T63] usb 5-1: config 5 has an invalid interface number: 42 but max is 0
[  403.054374][   T63] usb 5-1: config 5 has no interface number 0
[  403.056790][   T63] usb 5-1: config 5 interface 42 has no altsetting 0
[  403.061406][   T63] usb 5-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice= 0.15
[  403.064765][   T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.067650][   T63] usb 5-1: Product: syz
[  403.069432][   T63] usb 5-1: Manufacturer: syz
[  403.071492][   T63] usb 5-1: SerialNumber: syz
[  403.300343][   T63] dvb-usb: found a 'PCTV HDTV USB' in warm state.
[  403.300839][T16536] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4215'.
[  403.303064][   T63] pctv452e: pctv452e_power_ctrl: 1
[  403.303064][   T63] 
[  403.315784][   T63] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  403.315784][   T63] 
[  403.321476][   T63] dvb-usb: bulk message failed: -22 (5/0)
[  403.328135][   T63] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  403.336085][   T63] dvb-usb: PCTV HDTV USB error while loading driver (-19)
[  403.341065][   T63] usb 5-1: USB disconnect, device number 48
[  404.183004][T16552] ==================================================================
[  404.185568][T16552] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  404.188196][T16552] Read of size 2 at addr ffff88801ff90142 by task syz.3.4223/16552
[  404.191931][T16552] 
[  404.192810][T16552] CPU: 1 UID: 0 PID: 16552 Comm: syz.3.4223 Not tainted syzkaller #0 PREEMPT(full) 
[  404.192821][T16552] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  404.192826][T16552] Call Trace:
[  404.192830][T16552]  <TASK>
[  404.192834][T16552]  dump_stack_lvl+0x189/0x250
[  404.192846][T16552]  ? __kasan_check_byte+0x12/0x40
[  404.192858][T16552]  ? __pfx_dump_stack_lvl+0x10/0x10
[  404.192867][T16552]  ? lock_release+0x4b/0x3e0
[  404.192878][T16552]  ? __virt_addr_valid+0x4a5/0x5c0
[  404.192887][T16552]  print_report+0xca/0x240
[  404.192894][T16552]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  404.192903][T16552]  kasan_report+0x118/0x150
[  404.192912][T16552]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  404.192921][T16552]  __xfrm_state_lookup+0x6ad/0x8d0
[  404.192930][T16552]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  404.192940][T16552]  xfrm_state_add+0x27d/0xc40
[  404.192952][T16552]  pfkey_add+0x1edd/0x2e00
[  404.192964][T16552]  ? __pfx_pfkey_add+0x10/0x10
[  404.192971][T16552]  ? kmem_cache_free+0x18f/0x400
[  404.192983][T16552]  pfkey_sendmsg+0xbfe/0x1090
[  404.192991][T16552]  ? trace_sched_exit_tp+0x36/0x110
[  404.193003][T16552]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  404.193014][T16552]  ? aa_sock_msg_perm+0xf1/0x1d0
[  404.193021][T16552]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  404.193029][T16552]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  404.193036][T16552]  __sock_sendmsg+0x21c/0x270
[  404.193047][T16552]  ____sys_sendmsg+0x505/0x830
[  404.193056][T16552]  ? __pfx_____sys_sendmsg+0x10/0x10
[  404.193066][T16552]  ? import_iovec+0x74/0xa0
[  404.193076][T16552]  ___sys_sendmsg+0x21f/0x2a0
[  404.193084][T16552]  ? __pfx____sys_sendmsg+0x10/0x10
[  404.193099][T16552]  ? __fget_files+0x2a/0x420
[  404.193105][T16552]  ? __fget_files+0x3a0/0x420
[  404.193112][T16552]  __x64_sys_sendmsg+0x19b/0x260
[  404.193120][T16552]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  404.193131][T16552]  ? do_syscall_64+0xbe/0x3b0
[  404.193140][T16552]  do_syscall_64+0xfa/0x3b0
[  404.193147][T16552]  ? lockdep_hardirqs_on+0x9c/0x150
[  404.193154][T16552]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.193160][T16552]  ? exc_page_fault+0x9f/0xf0
[  404.193167][T16552]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.193173][T16552] RIP: 0033:0x7fac7a38ec29
[  404.193181][T16552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  404.193187][T16552] RSP: 002b:00007fac7b153038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  404.193195][T16552] RAX: ffffffffffffffda RBX: 00007fac7a5d5fa0 RCX: 00007fac7a38ec29
[  404.193201][T16552] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  404.193205][T16552] RBP: 00007fac7a411e41 R08: 0000000000000000 R09: 0000000000000000
[  404.193210][T16552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  404.193214][T16552] R13: 00007fac7a5d6038 R14: 00007fac7a5d5fa0 R15: 00007ffcc25db678
[  404.193221][T16552]  </TASK>
[  404.193224][T16552] 
[  404.300486][T16552] Allocated by task 11206:
[  404.302150][T16552]  kasan_save_track+0x3e/0x80
[  404.304051][T16552]  __kasan_slab_alloc+0x6c/0x80
[  404.305702][T16552]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  404.307544][T16552]  xfrm_state_alloc+0x24/0x2f0
[  404.308979][T16552]  __find_acq_core+0x8a7/0x1c00
[  404.310609][T16552]  xfrm_find_acq+0x78/0xa0
[  404.312182][T16552]  xfrm_alloc_userspi+0x6b3/0xc90
[  404.313972][T16552]  xfrm_user_rcv_msg+0x7a3/0xab0
[  404.315554][T16552]  netlink_rcv_skb+0x208/0x470
[  404.317266][T16552]  xfrm_netlink_rcv+0x79/0x90
[  404.318993][T16552]  netlink_unicast+0x82f/0x9e0
[  404.320914][T16552]  netlink_sendmsg+0x805/0xb30
[  404.322574][T16552]  __sock_sendmsg+0x21c/0x270
[  404.324081][T16552]  ____sys_sendmsg+0x505/0x830
[  404.325839][T16552]  ___sys_sendmsg+0x21f/0x2a0
[  404.327572][T16552]  __x64_sys_sendmsg+0x19b/0x260
[  404.329452][T16552]  do_syscall_64+0xfa/0x3b0
[  404.331054][T16552]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.332879][T16552] 
[  404.333774][T16552] Freed by task 63:
[  404.335279][T16552]  kasan_save_track+0x3e/0x80
[  404.337209][T16552]  kasan_save_free_info+0x46/0x50
[  404.339194][T16552]  __kasan_slab_free+0x5b/0x80
[  404.340833][T16552]  kmem_cache_free+0x18f/0x400
[  404.342686][T16552]  xfrm_state_gc_task+0x52d/0x6b0
[  404.344656][T16552]  process_scheduled_works+0xae1/0x17b0
[  404.346495][T16552]  worker_thread+0x8a0/0xda0
[  404.348365][T16552]  kthread+0x711/0x8a0
[  404.349943][T16552]  ret_from_fork+0x439/0x7d0
[  404.351708][T16552]  ret_from_fork_asm+0x1a/0x30
[  404.353411][T16552] 
[  404.354265][T16552] The buggy address belongs to the object at ffff88801ff90000
[  404.354265][T16552]  which belongs to the cache xfrm_state of size 928
[  404.359307][T16552] The buggy address is located 322 bytes inside of
[  404.359307][T16552]  freed 928-byte region [ffff88801ff90000, ffff88801ff903a0)
[  404.364769][T16552] 
[  404.365784][T16552] The buggy address belongs to the physical page:
[  404.368384][T16552] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801ff90d80 pfn:0x1ff90
[  404.372048][T16552] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  404.374991][T16552] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  404.377460][T16552] page_type: f5(slab)
[  404.378997][T16552] raw: 00fff00000000040 ffff88801abc1280 dead000000000122 0000000000000000
[  404.381695][T16552] raw: ffff88801ff90d80 00000000800e0004 00000000f5000000 0000000000000000
[  404.384866][T16552] head: 00fff00000000040 ffff88801abc1280 dead000000000122 0000000000000000
[  404.388223][T16552] head: ffff88801ff90d80 00000000800e0004 00000000f5000000 0000000000000000
[  404.392036][T16552] head: 00fff00000000002 ffffea00007fe401 00000000ffffffff 00000000ffffffff
[  404.395414][T16552] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  404.399001][T16552] page dumped because: kasan: bad access detected
[  404.401536][T16552] page_owner tracks the page as allocated
[  404.403857][T16552] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5943, tgid 5941 (syz.2.13), ts 58158117778, free_ts 58139217881
[  404.411579][T16552]  post_alloc_hook+0x240/0x2a0
[  404.413528][T16552]  get_page_from_freelist+0x21e4/0x22c0
[  404.415696][T16552]  __alloc_frozen_pages_noprof+0x181/0x370
[  404.417917][T16552]  alloc_pages_mpol+0x232/0x4a0
[  404.419765][T16552]  allocate_slab+0x8a/0x370
[  404.421349][T16552]  ___slab_alloc+0xbeb/0x1420
[  404.423165][T16552]  kmem_cache_alloc_noprof+0x283/0x3c0
[  404.425364][T16552]  xfrm_state_alloc+0x24/0x2f0
[  404.427320][T16552]  xfrm_add_sa+0x17d1/0x4070
[  404.429180][T16552]  xfrm_user_rcv_msg+0x7a3/0xab0
[  404.431058][T16552]  netlink_rcv_skb+0x208/0x470
[  404.433045][T16552]  xfrm_netlink_rcv+0x79/0x90
[  404.434890][T16552]  netlink_unicast+0x82f/0x9e0
[  404.436871][T16552]  netlink_sendmsg+0x805/0xb30
[  404.438771][T16552]  __sock_sendmsg+0x21c/0x270
[  404.440638][T16552]  ____sys_sendmsg+0x505/0x830
[  404.442548][T16552] page last free pid 5297 tgid 5297 stack trace:
[  404.444756][T16552]  __free_frozen_pages+0xbc4/0xd30
[  404.446768][T16552]  __slab_free+0x303/0x3c0
[  404.448584][T16552]  qlist_free_all+0x97/0x140
[  404.450453][T16552]  kasan_quarantine_reduce+0x148/0x160
[  404.452704][T16552]  __kasan_slab_alloc+0x22/0x80
[  404.454719][T16552]  __kmalloc_noprof+0x224/0x4f0
[  404.456725][T16552]  tomoyo_realpath_from_path+0xe3/0x5d0
[  404.458773][T16552]  tomoyo_path_perm+0x213/0x4b0
[  404.460760][T16552]  security_inode_getattr+0x12f/0x330
[  404.462949][T16552]  vfs_fstatat+0xb1/0x170
[  404.464720][T16552]  __x64_sys_newfstatat+0x116/0x190
[  404.466800][T16552]  do_syscall_64+0xfa/0x3b0
[  404.468568][T16552]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.470866][T16552] 
[  404.471876][T16552] Memory state around the buggy address:
[  404.474094][T16552]  ffff88801ff90000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  404.477207][T16552]  ffff88801ff90080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  404.480322][T16552] >ffff88801ff90100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  404.483634][T16552]                                            ^
[  404.486173][T16552]  ffff88801ff90180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  404.489223][T16552]  ffff88801ff90200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  404.492440][T16552] ==================================================================
[  404.495999][T16552] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  404.499058][T16552] CPU: 1 UID: 0 PID: 16552 Comm: syz.3.4223 Not tainted syzkaller #0 PREEMPT(full) 
[  404.502877][T16552] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  404.507048][T16552] Call Trace:
[  404.508372][T16552]  <TASK>
[  404.509603][T16552]  dump_stack_lvl+0x99/0x250
[  404.511457][T16552]  ? __asan_memcpy+0x40/0x70
[  404.513263][T16552]  ? __pfx_dump_stack_lvl+0x10/0x10
[  404.515314][T16552]  ? __pfx__printk+0x10/0x10
[  404.517221][T16552]  vpanic+0x281/0x750
[  404.518949][T16552]  ? __pfx_vpanic+0x10/0x10
[  404.520891][T16552]  ? irqentry_exit+0x74/0x90
[  404.522842][T16552]  panic+0xb9/0xc0
[  404.524456][T16552]  ? __pfx_panic+0x10/0x10
[  404.526343][T16552]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  404.528745][T16552]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  404.531188][T16552]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  404.533269][T16552]  check_panic_on_warn+0x89/0xb0
[  404.534949][T16552]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  404.537082][T16552]  end_report+0x78/0x160
[  404.538806][T16552]  kasan_report+0x129/0x150
[  404.540707][T16552]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  404.542933][T16552]  __xfrm_state_lookup+0x6ad/0x8d0
[  404.545099][T16552]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  404.547496][T16552]  xfrm_state_add+0x27d/0xc40
[  404.549474][T16552]  pfkey_add+0x1edd/0x2e00
[  404.551365][T16552]  ? __pfx_pfkey_add+0x10/0x10
[  404.553355][T16552]  ? kmem_cache_free+0x18f/0x400
[  404.555412][T16552]  pfkey_sendmsg+0xbfe/0x1090
[  404.557425][T16552]  ? trace_sched_exit_tp+0x36/0x110
[  404.559494][T16552]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  404.561550][T16552]  ? aa_sock_msg_perm+0xf1/0x1d0
[  404.563540][T16552]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  404.565749][T16552]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  404.569000][T16552]  __sock_sendmsg+0x21c/0x270
[  404.570928][T16552]  ____sys_sendmsg+0x505/0x830
[  404.572999][T16552]  ? __pfx_____sys_sendmsg+0x10/0x10
[  404.575273][T16552]  ? import_iovec+0x74/0xa0
[  404.577101][T16552]  ___sys_sendmsg+0x21f/0x2a0
[  404.579053][T16552]  ? __pfx____sys_sendmsg+0x10/0x10
[  404.581303][T16552]  ? __fget_files+0x2a/0x420
[  404.583320][T16552]  ? __fget_files+0x3a0/0x420
[  404.585346][T16552]  __x64_sys_sendmsg+0x19b/0x260
[  404.587416][T16552]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  404.589697][T16552]  ? do_syscall_64+0xbe/0x3b0
[  404.591750][T16552]  do_syscall_64+0xfa/0x3b0
[  404.593711][T16552]  ? lockdep_hardirqs_on+0x9c/0x150
[  404.595936][T16552]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.598485][T16552]  ? exc_page_fault+0x9f/0xf0
[  404.600372][T16552]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.602840][T16552] RIP: 0033:0x7fac7a38ec29
[  404.604884][T16552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  404.612690][T16552] RSP: 002b:00007fac7b153038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  404.616424][T16552] RAX: ffffffffffffffda RBX: 00007fac7a5d5fa0 RCX: 00007fac7a38ec29
[  404.619549][T16552] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  404.622819][T16552] RBP: 00007fac7a411e41 R08: 0000000000000000 R09: 0000000000000000
[  404.626114][T16552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  404.629472][T16552] R13: 00007fac7a5d6038 R14: 00007fac7a5d5fa0 R15: 00007ffcc25db678
[  404.632877][T16552]  </TASK>
[  404.635006][T16552] Kernel Offset: disabled
[  404.636865][T16552] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:25:05  Registers:
info registers vcpu 0

CPU#0
RAX=ffff8881088e0000 RBX=0000000000000000 RCX=0e0284358ac41a00 RDX=0000000000000000
RSI=ffffffff822e7d46 RDI=1ffffffff1c27434 RBP=ffffffff822e7d2a RSP=ffffc90007647268
R8 =0000000000000000 R9 =0000000000000000 R10=dffffc0000000000 R11=fffff94000853211
R12=0000000000000002 R13=ffffffff8e13a1a0 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff819d5df9 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555911dc500 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcdd8b056c0 CR3=0000000123146000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f9f9d1a7498 00007f9f9d1a7470 XMM03=00007f9f9d1a74a8 00007f9f9d1a74a0
XMM04=00007f9f9dd0d100 00007f9f9d1a7460 XMM05=00007f9f9d1a7478 00007f9f9d1a74c0
XMM06=00007f9f9d1a74b8 00007f9f9d1a74b0 XMM07=00007f9f9d1a74a8 00007f9f9d1a74a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f9f9d012fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000000d RBX=000000000000000d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001318 RDI=0000000000001319 RBP=00000000000003f8 RSP=ffffc90006e46d90
R8 =ffff888106a90237 R9 =1ffff11020d52046 R10=dffffc0000000000 R11=ffffffff854fbd20
R12=dffffc0000000000 R13=ffffffff99b03917 R14=ffffffff99df8460 R15=0000000000000000
RIP=ffffffff854fbd9c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fac7b1536c0 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000012b0e4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fac7a5a7498 00007fac7a5a7470 XMM03=00007fac7a5a74a8 00007fac7a5a74a0
XMM04=00007fac7b10d100 00007fac7a5a7460 XMM05=00007fac7a5a7478 00007fac7a5a74c0
XMM06=00007fac7a5a74b8 00007fac7a5a74b0 XMM07=00007fac7a5a74a8 00007fac7a5a74a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fac7a412fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
