last executing test programs:

3m39.623354814s ago: executing program 1 (id=224):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x8, 0x0, 0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0)

3m39.55625675s ago: executing program 1 (id=225):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3)
ioctl$SIOCAX25CTLCON(r0, 0x89e8, 0x0)

3m39.555917379s ago: executing program 1 (id=226):
write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000)
preadv(r0, &(0x7f0000001200)=[{&(0x7f0000000c00)=""/113, 0x71}], 0x1, 0x4, 0xb)
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0)

3m38.71106293s ago: executing program 1 (id=239):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x20081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x1006019, &(0x7f0000000100)={[{@noblock_validity}, {@commit={'commit', 0x3d, 0x1}}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@quota}]}, 0x1, 0x63e, &(0x7f00000003c0)="$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")
syz_mount_image$fuse(&(0x7f0000002180), &(0x7f0000002080)='./file1\x00', 0x80b0, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0)

3m38.495604955s ago: executing program 1 (id=244):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r0, &(0x7f00000000c0), 0x10)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10)

3m38.118020441s ago: executing program 1 (id=252):
syz_io_uring_setup(0xf89, &(0x7f0000000500)={0x0, 0x7d0d, 0x10, 0x1, 0x22b}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
lseek(r0, 0x289e0cb5, 0x0)

3m37.985205037s ago: executing program 32 (id=252):
syz_io_uring_setup(0xf89, &(0x7f0000000500)={0x0, 0x7d0d, 0x10, 0x1, 0x22b}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
lseek(r0, 0x289e0cb5, 0x0)

2m42.302887236s ago: executing program 3 (id=728):
unshare(0x22020400)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x2})

2m42.192373278s ago: executing program 3 (id=730):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000140)={{}, 'port0\x00'})

2m42.102535115s ago: executing program 3 (id=733):
r0 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\xae\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\x06\x00\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x2)
r1 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x0, 0x3de}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[r0], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x400000080001001, 0x0, 0x0, 0x22})
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)

2m41.999756554s ago: executing program 3 (id=735):
syz_mount_image$jfs(&(0x7f0000005dc0), &(0x7f0000005e00)='./file0\x00', 0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="009c1b06223d15055c6d39aecad6836294e3e1fc38b80cd5eb20b39dc7dceb316fa1203f802b4368850fdef916202a989ea54a4e800c324c19bad386d9a72fc1de2fa7f100eae8a434158d0ed0d6a9061d60971bcf895342571bae0ea58240ebdd0f6f3dd42fa0f9754224a9c2045d2e098e5ca269bb943549e2c2e191b7da91b8645dfdb324ceaf445cdc974884e2d5ac6dbf8b92da3a8a65176db66ca798dce71880c5e6837b5a99b6696d5003a06f62bbfb0b9ba0a6ffbfc2dd37662e077430379386d8e3abf802401b0e8382824a68cf51cde62ac99470edf8c757396564c8079d89017df3182005ec9fe433b122f1c02ca72eb68e41fc7ff69975649149ff4be64bd665e56a5fe9ef4d6ee02ff30ad838a9744100d520765c83c0178534e09d2f578bd10d3bfc68d1e75d6965613448d1045b6a0298d0804f82bc984e271c346d1e30886f81feb02b8320d47dc752b2dd23b4d8e20f2bda7ff84c57d63da96f044f8daaac7cb7132ef6"], 0x1, 0x5e11, &(0x7f000000bc40)="$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")
creat(&(0x7f0000000300)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x10000000000400, 0x0, 0x0, 0x8, 0x7, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200000000000010", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x8]})
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)

2m41.328881924s ago: executing program 3 (id=741):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r1}, 0x10, &(0x7f00000003c0)={&(0x7f0000000140)=@canfd={{0x1, 0x1, 0x0, 0x1}, 0x35, 0x0, 0x0, 0x0, "fa77068e9ba7f60291c0c2883b46271c1679c3c0cf5101a328bb3fbd261e7eba5594caf70eec1c694f644e13312db4bda5b524b6e151c1deaf3e9edb7a56adcb"}, 0x48}, 0x2, 0x0, 0x0, 0x20008004}, 0x1004c808)

2m40.169935268s ago: executing program 3 (id=742):
syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @address_request={0x11, 0x0, 0x0, 0x50}}}}}, 0x0)

2m39.641389654s ago: executing program 33 (id=742):
syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @address_request={0x11, 0x0, 0x0, 0x50}}}}}, 0x0)

2m0.871154712s ago: executing program 2 (id=1012):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d0434c500000000000109022400010000000009041c00010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "21ef4c53"}]}}, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

1m59.21763749s ago: executing program 2 (id=1036):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x10)

1m59.002745947s ago: executing program 2 (id=1037):
syz_open_dev$sg(0x0, 0x0, 0x0)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440), 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000001})

1m58.485169581s ago: executing program 2 (id=1039):
syz_mount_image$exfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x80a, &(0x7f0000000280)=ANY=[@ANYBLOB='iocharset=cp855,keep_last_dots,zero_size_dir,sys_tz,utf8,discard,fmask=00000000000000000000005,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x1533, &(0x7f0000001940)="$eJzs3AuYT1X3OPC19t5nDIlvk1yGvfc6fJPLJklySZJLkiRJkltC0iSvJCSGkKQhCcllSGIIyWVi0rjf75eEJGmSJCS3ZP+fiXnUW+/t975v/s876/M857HX7LP2WWfW9zvfc47h227DajetU6MxEcG/BS/+kQgAsQAwCADyAkAAABXiKsRlzueUmPjvHYT9Zz2YcqUrYFcS9z974/5nb9z/7I37n71x/7M37n/2xv3P3rj/jGVnm6cXuoa37Lvx8//sjD///4dklBn35doy13UHiPlnU7j/2Rv3/39W8M/sxP3P3rj/2VXslS6A/X+A3//ZQY6/OcP9z964/4xlZ1f6+fOV3iBy5b8Hsb+Oj+a82Jg/6/wZY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLE/wRl/mQKArPGVrosxxhhjjDHGGGP/OT7H35/PGfxZlTDGGGOMMcYYY+y/B0GABAUBxEAOiIWckAsEAFwNeSAvROAaiINrIR9cB/mhABSEQhAPhaEIaDBggSCEolAMonA9FIcboASUhFJQGhyUgbJwI5SDm6A83AwV4BaoCLdCJagMVaAq3AbV4HaoDndADbgTakItqA114C6oC3dDPbgH6sO90ADug4ZwPzSCB6AxPAhN4CFoCg9DM3gEmkMLaAmtoPX/Kf956AUvQG/oA4nQF/rBi9AfBsBAeAkGwcswGF6BIfAqJMFQGAavwXB4HUbAGzASRsFoeBPGwFswFsbBeJgAyTARJsHbMBnegSnwLkyFaZAC02EGvAczYRbMhvdhDnwAc2EezIcFkAofwkJYBGnwESyGjyEdlsBSWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBtthB+yET2AXfAq7YQ/shc9gH3z+L+af/qv87ggIKFCgQoUxGIOxGIu5MBfmxtyYB/NgBCMYh3GYD/NhfsyPBbEgxmM8FsEiaNAgIWFRLIpRjGJxLI4lsASWwlLo0GFZLIvl8CYsj+WxAlbAilgRK2FlrIxVsSpWw2pYHatjDayBNbEm1sbaeBfehX2xHtbD+lgfG2CDrMdT2BgbYxNsgk2xaWJm3BybY0tsia2xNbbBNtgW22J7bI8dsAN2xI6YgAnYCTthZ+yMXbALdsWu2A27YXfsgT0yns8B+AK+gH2wpuiL/bAf9sekHAPxJXwJX8bB+Aq+gq9iEg7FYfgavoav4wg8hSNxFI7G0VhNvIVjcRySmIDJmIyTcBJOxsmYWei7OA1TcDrOwBk4E2fhLHwf5+AH+AHOw3m4AFMxFRfiIkzDNFyMpzEdl+BSXIbLcQUux1W4GlfhWlyHa3EDbsBNuAm34BbchttwB+7AT1AB4Ke4B/dgEu7Dfbgf9+MBPIAH8SBmYAYewkN4GA/jETyCR/EoHsPjeAKP40k8iafwNJ7BM3gOz+F5fDb+6yaflFyTBCKTEkrEiBgRK2JFLpFL5Ba5RR6RR0RERMSJOJFP5BP5RX5RUBQU8SJeFBFFhBFGkAhjAEBERVQUF8VFCVFClBKlhBNOlBVlRTlRTpQX5UUFcYuoKG4VlURl0c5VFVVFNdHeVRd3iBqihqgpaonaoo6oI+qKuqKeqCfqi/qigWggGor7RSPRFwfigyKzM03FUGwmhmFz0ULISz/B2ogR2Fa0E+3F42IUjsSOoo1LEE+JTmIsdhZ/EePwGdFVTMBu4jnRXfQQPcXzopdo63qLPmIK9hX9xDTsLwaIgeIlMRNrifdxTs7a4lWRJIaKYeI1sQBfFyPEG2KkGCVGizfFGPGWGCvGifFigkgWE8Uk8baYLN4RU8S7YqqYJlLEdDFDvCdmillitnhfzBEfiLlinpgvFohU8aFYKBaJNPGRWCw+FuliiVgqlonlYoVYKVaJ1WKNWCvWifVig9goNonNYovYKraJ7WKH2Ck+EbvEp2K32CP2is/EPvG52C++EAfEl+Kg+EpkiK/FIfGNOCy+FUfEd+Ko+F4cE8fFCfGDOCl+FKfEaXFGnBXnxE/ivPhZXBBegEQppJRKBjJG5pCxMqfMJa+SuWXWg99rZJy8VuaT18n8soAsKAvJeFlYFpFaGmklyVAWlcVkVF4vi8sbZAlZUpaSpaWTZWRZeaMsJ2+S5eXNsoK8RVaUt8pKsrKsIqvK22Q1ebuEyMVj1JS1ZG1ZR94lE+FuWU/eI+vLe2UDeZ9sKO+XjeQDsrF8UDaRD8mm8mHZTD4im8sWsqVsJVvLR2Ub+ZhsK9vJ9vJx2UE+ITvKJ2WCfEp2kv7SS+QZ2VU+K7vJ52R32UP2lD/LC9LL3rKPhL4g+8kXZX85QA6MBQD5shwsX5FD5KsySQ6Vw+RrcrjMCSPkG3KkHCVHyzflGPmWHCvHyfFygkyWE+Uk+bacLN+RU+S7cqqcJlPkdDlQDvplpdlSyuHydfn38t/+g/whvxx9k9wst8itcpvcLnfInfITuUvukrvlbrlX7pX75D65X+6XB+QBeVAelBkyQx6Sh+RheVgekUfkUXlUHpPH5Vn5gzwpf5Sn5Gl5Wp6V5+Q5ef7S9wAUKqGkUipQMSqHilU5VS51lcqtrlZ5VF4VUdeoOHWtyqeuU/lVAVVQFVLxqrAqorQyyipSoSqqiqmouh4vvWBUKVVaOVVGlVU3/iv5qri6QZVQJX+Tn1Vf4t+or7VqrdqoNqqtaqvaq/aqg+qgOqqOKkElqE6qk+qsOqsuqovqqrqqbqqb6q66q56qp+qleqneqrdKVImqn3pR9VcD1ED1khqkXlaD1WA1RA1RSSpJDVPD1HA1XI1QI9RINVKNVqPVGDVGjVVj1Xg1XiWrZDVJTVKT1WQ1RU1RU9VUlaJS1Aw1Q81UM9VsNVvNUXPUXDVXzVfzVapKVQvVQpWm0tRitVilqyVqiVqmlqkVaoVapVapNWqNWqfWqQ1qg0pXm9VmtVVtVdvVdrVT7VS71C61W+1We9VetU/tU/vVfnVAHVAH1UGVoTLUIXVIHVaH1RF1RB1VR9UxdUydUCfUSXVSnVKn1Bl1Rp1T59R5dV5dUBcyL/sCEYhABSqICWKC2CA2yBXkCnIHuYM8QZ4gEkSCuCAuyBdcF+QPCgQFg0JBfFA4KBLowAQ2EJeaHg2uD4oHNwQlgpJBqaB04IIyQdngxqBccFNQPrg5qBDcElQMbg0qBZWDKkHV4LagWnB7UD24I6gR3BnUDGoFtYM6wV1B3eDuoF5wT1A/uDdoENwXNAzuDxoFDwSNgweDJsFDQdPg4aBZ8EjQPGgRtAxaBa3/o+t7f6rAY6637qMTdV/dT7+o++sBeqB+SQ/SL+vB+hU9RL+qk/RQPUy/pofr1/UI/YYeqUfp0fpNPUa/pcfqcXq8nqCT9UQ9Sb+tJ+t39BT9rp6qp+kUPV3P0O/pmXqWnq3f13P0B3qunqfn6wU6VX+oF+pFOk1/pBfrj3W6XqKX6mV6uV6hV2qhV+s1eq1ep9frDXqj3qQ36y16q96mt+sdeqf+RO/Sn+rdeo/eqz/T+/Tner/+Qh/QX+qD+iudob/Wh/Q3+rD+Vh/R3+mj+nt9TB/XJ/QP+qT+UZ/Sp/UZfVaf0z/p8/pnfUH7zIv7zI93o4wyMSbGxJpYk8vkMrlNbpPH5DEREzFxJs7kM/lMfpPfFDQFTbyJN0VMEZOJDJmipqiJmqgpboqbEqaEKWVKGWecKWvKmnKmnClvypsKpoKpaCqaSqaSqWKqmNvMbeZ2c7u5w9xh7jR3mlqmlqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYpqapaWaameamuWlpWprWprVpY9qYtqataW/amw6mg+loOpoEk2A6mU6ms+lsupgupqvparqZbqa76W56mp6ml+llepveJtEkmn6mn+lv+puBZqAZZAaZwWawGWKGmCSTZIaZYWa4GW5GmBFmpBllRmdeqJq3zFgzzow3E0yySTaTzCQz2Uw2U8wUM9VMNSkmxcwwM8xMM9PMNrPNHDPHzDVzzXwz36SaVLPQLDRpJs0sNotNukk3S81Ss9wsNyvNSrParDZrzVqzHtabjWaj2Ww2m61mq9lutpudZqfZZXaZ3Wa32Wv2mn1mn9lv9psD5oA5aA6aDJNhDplD5rA5bI6YI+aoOWqOmWPmhDlhTpqT5pQ5Zc6YM+acKXDp89KbWJvT5rJX2dz2apvH5rV/HRe0hWy8LWyLWG3z2wK/iY21toQtaUvZ0tbZMrasvfF3cSVb2VaxVe1ttpq93Vb/XVzX3m3r2XtsfXuvrWPv+k3cwN5nG9qHbSNEANvCNrGtbFP7sG1mH7HNbQvb0rayHewTtqN90ibYp2wn+/Tv4oV2kV1t19i1dp3dbffYM/asPWy/tefsT7a37WMH2ZftYPuKHWJftUl26O/i0fZNO8a+ZcfacXa8nfC7eKqdZlPsdDvDvmdn2lm/i1Pth3aOTbNz7Tw73y74Jc6sKc1+ZBfbj226DWCpXWaX2xV2pV2VVavPazfYjXaT3WU/tVvtNrvd7rA7sy6E7R67135m99nP7SH7jT1gv7QH7RGbYb/+Jc48vyP2O3vUfm+P2eP2hP3BnrQ/qqzszHP/wf5sL1hvgZCAJCkKKIZyUCzlpFx0FeWmqykP5aUIXUNxdC3lo+soPxWgglSI4qkwFSFNhiwRhVSUilGUrqes8kpRaXJUhsrSjVSObqLydDNVoFuoIt1KlagyVaGqdBtVo9upOt1BNehOqkm1qDbVobuoLt1N9egeqk/3UgO6jxrS/dSIHqDG9CA1oYeoKT1MzegRak4tqCW1otb0KLWhx6gttaP29Dh1oCeoIz1JCfQUdaKnqTP9hbrQM9SVnqVu9Bx1px7Uk56nXvQC9aY+lEh9qR+9SP1pAA2kl2gQvUyD6RUaQq9SEg2lYfQaDafXaQS9QSNpFI2mN2kMvUVjaRyNpwmUTBNpEr1Nk+kdmkLv0lSaRik0nWbQezSTZtFsep/m0Ac0l+bRfFpAqfQhLaRFlEYf0WL6mNJpCS2lZbScVtBKWkWraQ2tpXW0njbQRtpEm2kLbaVttJ120E76hHbRp7Sb9tBe+oz20ee0n76gA/QlHaSvKIO+pkP0DR2mb+kIfef70Pd0jI7TCfqBTtKPdIpO0xk6S+foJzpPP9MF8gQhhiKUoQqDMCbMEcaGOcNc4VVh7vDqME+YN4yE14Rx4bVhvvC6MH9YICwYFgrjw8JhkVCHJrQhhWFYNCwWRsPrw+LhDWGJsGRYKiwdurBMWDa8MSwX3hSWD28OK4S3hBXDW8NKYeXw4XurhreF1cLbw+rhHWGN8M6wZlgrrB3WCe8K64Z3h/XCe8L64b1h+fC+sGF4f9gofCBsHD4YNgkfCpuGD4fNwkfC5mGLsGXYKmwdPhq2CR8L24btwvbh42GH8ImwY/hkmBA+FXYKn/5l/r5Ff3s+Mewb9gtfDF8Mvb9Hzo8uiKZGP4wujC6KpkU/ii6OfhxNjy6JLo0uiy6ProiujK6Kro6uia6Nrouuj26IboxuinpfJwc4dMJJp1zgYlwOF+tyulzuKpfbXe3yuLwu4q5xce5al89d5/K7Aq6gK+TiXWFXxGlnnHXkQlfUFXNRd70r7m5wJVxJV8qVds6VcWVdK9fatXZt3GOurWvn2rvH3ePuCfeEe9I96aTr5J52nd1fXBf3jOvqnnXPuudcd9fD9XTPu15uYp6L78lE18/1c/1dfzfQDXSD3CA32A12Q9wQl+SS3DA3zA13w90IN8KNdCPdaDfajXFj3Fg31o13412yS3aT3CQ32U12U9wUN9VNdSkuxc1wM9xMN9NVm3XxKHPdXDffzXepLtUtdJnXjGlusVvs0l26W+qWuuVuuVvpVrrVbrVb69a69W692+g2us1us9vqtrrtbrvb6Xa6XW6X2+3zXlzU7XP73X53wB1wB91XLsN97Q65b9xh96074r5zR9337pg77k64H9xJ96M75U67M+6sO+d+cufdz+6C8y45MjEyKfJ2ZHLknciUyLuRqZFpkZTI9MiMyHuRmZFZkdmR9yNzIh9E5kbmReZHFkRSIx9GFkYWRdIiH0UWRz6OpEeWRJZGlkWWR1ZEvC+8NfRFfTEf9df74v4GX8KX9KV8ae98GV/W3+jL+Zt8eX+zr+Bv8RX9rb6Sr+yr+Ed8c9/Ct/StfGv/qG/jH/NtfTvf3j/uO/gnfEf/pE/wT/lO/mnf2f/Fd/HP+K7+Wd/NP+e7+x6+p3/e9/Iv+N6+j0/0fX0//6Lv7wf4gf4lP8i/7Af7V/wQ/6pP8kP9MP+aH+5f9yP8G36kH+VHx7zpx2TdIsMEn+wn+kn+bT/Zv+On+Hf9VD/Np/jpfoZ/z8/0s/xs/76f4z/wc/08P98v8Kn+Q7/QL/Jp/iO/2H/s0/2SrIfKfqVf5Vf7NX6tX+fX+w1+o9/kN/stfqvf5rf7HX6n/8Tv8p/63X6P3+s/8/v8536//8If8F/6g/4rn+G/9of8N/6w/9Yf8d/5o/57f8wf9yf8D/6k/9Gf8qf9GX/Wn/M/+fP+Z3+B/80aY4wxxtg/ZeLlofjtzMXH+X3/IEf8aud+AHD1tkIZv57PvKJcn//ieICI7xABgKf6dHswa6tZMzEx8dK+6RKCYvMAsv4mKFMMXI6XQHt4AhKgHZT7w/oHiB7n6B+sH70FINevcmLhcnx5/S8AMPEP1n/08dELK4Zn4v7O+vMAShS7nJMTLsdLoP0vz1faQfm/UX+BNv+g/pxfJgO0/VVObrgcX66/LDwGT0PCb/ZkjDHGGGOMMcYuGiCqdMm6/8z6jc8/uj+PV5dzcsDl+B/dnzPGGGOMMcYYY+zKe6ZHzycfTUho1+VfH1T/P2X904Nm8N9amQd/OPAeIOsrCgD+zQUBMgfyzzyLLX/KsZIuvXX+emr5WR/Af/BYWb9ic4VeElfwhxJjjDHGGGPsv+LyRf9vv66uVEGMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxlg29Gf8d2JX+hwZY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxK+3/BQAA//9Xovh9")
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)

1m57.217221698s ago: executing program 2 (id=1046):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802, 0x0, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x18, 0x52, 0x1, 0x70bd2a, 0x0, {0xa}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0)

1m56.89282183s ago: executing program 2 (id=1050):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x7ffffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x68}, 0x1, 0x7}, 0x0)

1m56.705934526s ago: executing program 34 (id=1050):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x7ffffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x68}, 0x1, 0x7}, 0x0)

1m26.143353918s ago: executing program 4 (id=1331):
syz_emit_ethernet(0x4e, &(0x7f0000000800)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x18, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x3}}}}}}}, 0x0)

1m26.022434974s ago: executing program 4 (id=1334):
unshare(0x22020600)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x240702, 0x0)
copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

1m25.88456686s ago: executing program 4 (id=1337):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_bridge\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0xf0b, 0x2000, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x820}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44004}, 0x4040)

1m25.081890186s ago: executing program 4 (id=1340):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0\x00')
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x2010004, 0x0)
chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00')
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00')

1m24.993689166s ago: executing program 4 (id=1342):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)

1m24.763978503s ago: executing program 4 (id=1345):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x8000003d)

1m24.234491501s ago: executing program 35 (id=1345):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x8000003d)

47.093332466s ago: executing program 6 (id=1657):
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x400008bf)
ioctl$FS_IOC_GETFSSYSFSPATH(r3, 0x80811501, &(0x7f0000000480)={0x80})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x7, 0xff, 0x0, 0x0, 0x7, 0x10002}, [@FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008081}, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
open_tree(r4, &(0x7f0000000280)='./file0\x00', 0x101)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1000e}, [@FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}}, 0x40000)

45.834961101s ago: executing program 6 (id=1665):
r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0)
ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000003c0)={0xa, 0x2, 0x0, {0x80000004, 0x1, 0x2, 0x7}})

45.755129167s ago: executing program 6 (id=1666):
syz_emit_ethernet(0x86, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x2, '\x00', [@ra={0x5, 0x89}, @ra={0x5, 0x2, 0xe}, @jumbo={0xc2, 0x4, 0x55}, @pad1]}]}}}}}}}, 0x0)

45.669422933s ago: executing program 6 (id=1667):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x808, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743d170ddbbba28854f76e642c756d61736b3d30303030303030303030303030303030303030303030362c696f636861727365743d63703934392c6572726f72733d72656d6f756e742d726f2c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000000000003,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,discard,errors=continue,\x00'], 0x5, 0x1510, &(0x7f00000037c0)="$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")
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x0, &(0x7f0000000100))

45.556767326s ago: executing program 6 (id=1668):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

45.285247552s ago: executing program 6 (id=1670):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/ip_mr_cache\x00')
lseek(r0, 0x9, 0x0)

44.971731376s ago: executing program 36 (id=1670):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/ip_mr_cache\x00')
lseek(r0, 0x9, 0x0)

29.779621308s ago: executing program 7 (id=1782):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth1_vlan\x00', &(0x7f0000000000)=@ethtool_cmd={0x26, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffc]}})

29.634171253s ago: executing program 7 (id=1784):
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x191, &(0x7f00000002c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x40)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040))

29.552491833s ago: executing program 7 (id=1786):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30)
pipe(&(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0)
write$binfmt_misc(r6, &(0x7f0000000980), 0xfdef)
splice(r2, 0x0, r6, 0x0, 0x80, 0x4)
timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020)

28.392145401s ago: executing program 7 (id=1797):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x201000a, &(0x7f00000001c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0x6, 0xc36, &(0x7f0000002540)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000009, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

28.043359376s ago: executing program 7 (id=1800):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x309, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0xa}}]}, 0x38}}, 0x1000c840)

27.647865024s ago: executing program 7 (id=1804):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000001900010000000000000000001d01000005000d000100000008000a00", @ANYRES32, @ANYBLOB="15000200000000000000000003ef7506ecbef97003000000080009"], 0x6c}}, 0x0)

27.216497905s ago: executing program 37 (id=1804):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000001900010000000000000000001d01000005000d000100000008000a00", @ANYRES32, @ANYBLOB="15000200000000000000000003ef7506ecbef97003000000080009"], 0x6c}}, 0x0)

1.60843515s ago: executing program 0 (id=1995):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000040))

1.542827812s ago: executing program 0 (id=1997):
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r0, r1, 0x0, 0xc19)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x201}, 0x14}}, 0x0)

1.452744902s ago: executing program 0 (id=1999):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

1.02645812s ago: executing program 8 (id=2004):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', 0x3200c00, &(0x7f0000000340)=ANY=[], 0x1, 0xab6, &(0x7f0000000ec0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x141142, 0x2)
write$FUSE_INTERRUPT(r0, &(0x7f0000000100)={0x10, 0xffffffffffffffda}, 0xffffff5e)
creat(&(0x7f0000000180)='./file2\x00', 0x71283578ac7c5cd)

875.831342ms ago: executing program 5 (id=2005):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000200), &(0x7f0000000140)=r0}, 0x20)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)

751.260225ms ago: executing program 5 (id=2006):
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x40c, &(0x7f0000000480)=ANY=[@ANYBLOB="61636c2c6469726563745f696f2c6e6f7265636f766572792c6673636b2c6a6f8d726e616c5f666c7573685f64697361626c65642c6e6f7265546f766572792c62747265655f6e6f64655f6d656d5f7074725f6f7074696d697a6174696f6e2c7265636f6e7374727563745f696c6c6f632c6e6f5f646174615f696f2c686173682c00"], 0x1, 0x59b4, &(0x7f000000b8c0)="$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")

503.555806ms ago: executing program 8 (id=2007):
prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x30000008c}, 0x0)
r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0)
write(r0, &(0x7f0000000040)="06", 0x1)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)

413.742011ms ago: executing program 5 (id=2008):
syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x840, &(0x7f00000000c0), 0x1, 0x576, &(0x7f0000000140)="$eJzs3T1sG2UfAPD/neO3X3nf9JXeVwLUoQKkIlV1kn5AYWpXRKVKHZBYIHLcqIoTV7EDTZQh3StEBwSoS9lgYAQxMCAWRlYWEDNSRSOQmg5g5K80TZzglDouud9POvuee87+P8+d/499pzs5gMw62nhII56OiItJxMi6uqFoVx5trbe6slS8v7JUTKJev/RLEklE3FtZKnbWT9rPhyJiOSKeiohv8hHH081xqwuL0xPlcmmuXR6tzVwdrS4snrgyMzFVmirNnnrp5TNnT58ZPzm+/mX36+tL+Z319caPN9+98d2rt29++tmR5eL7E0mci+F23fp+PE6tbZKPcxuWn+5HsAFKBt0AHkmuneeNVPp/jESunfXd1Ed2tWlAn9X3RdSBjErkP2RU53dA4/i3M+3m748751sHII24q+2pVTPUOjcR+5vHJgd/TR46Mmkcbx7ezYayJy1fj4ixoaHNn/+k/fl7dGOPo4H01dfnWztq8/5P18af6DL+DHfOnf5NnfFvddP49yB+bovx72KPMX5/46ePtox/PeKZrvGTtfhJl/hpRLzVY/xbr395dqu6+scRx6J7/I5k+/PDo5evlEtjrceuMb46duSV7fp/cIv4rXO2+5tfM922f5fT2l198e3nzy5vE/+F57bf/922/4GIeK/H+P+998lrW9XduZ7cbfwK2On+TyIft3uM/+K5oz/0uCoAAAAAAAAAALADafNatiQtrM2naaHQuof3f3EwLVeqteOXK/Ozk61r3g5HPu1caTXSKieN8nj7etxO+eSG8qlcO2DuQLNcKFbKkwPuOwAAAAAAAAAAAAAAAAAAADwpDm24//+3XPP+/41/Vw3sVVv/5Tew18l/yK6H8z8ZWDuA3ef7HzKrLv8hu+Q/ZJf8h+yS/5Bd8h+yS/5Ddsl/AAAAAAAAAAAAAAAAAAAAAAAAAADoi4sXLjSm+v2VpWKjPDm0MD9defvEZKk6XZiZLxaKlbmrhalKZapcKhQrM3/1fkmlcnUsZuevjdZK1dpodWHxzZnK/GznP0VL+b73CAAAAAAAAAAAAAAAAAAAAP55hptTkhYiIm3Op2mhEPHviDicRHL5Srk0FhH/iYjvc/l9jfL4oBsNAAAAAAAAAAAAAAAAAAAAe0x1YXF6olwuzWVkZmgnK0fE8uNtRuMdd/yqfHtfPSnb0EwWZgY8MAEAAAAAAAAAAAAAAAAAQAY9uOm311f80d8GAQAAAAAAAAAAAAAAAAAAQCalPycR0ZiOjTw/vLH2X8lqrvkcEe/cuvTBtYlabW68sfzu2vLah+3lJwfRfqBXnTzt5DEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQHVhcXqiXC7N9XFm0H0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBR/BgAA///eANcP")
lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000700)=@random={'user.', ']]\x00'}, 0x0, 0x0, 0x2)

353.53898ms ago: executing program 8 (id=2009):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c000440000010c6f7a0b5ec0c00054086"], 0xec}}, 0x0)

262.303919ms ago: executing program 8 (id=2010):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noxattr}]}})
r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
sendfile(r4, r0, 0x0, 0x80000000)

261.806553ms ago: executing program 5 (id=2011):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010)

190.114404ms ago: executing program 0 (id=2012):
futimesat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x31a8eb60}})

165.947244ms ago: executing program 8 (id=2013):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x70, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xb6}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x4}]}, 0x70}}, 0x0)

80.298867ms ago: executing program 0 (id=2014):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x5a}, 0x28)

79.879312ms ago: executing program 5 (id=2015):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d65b00004c010000000a01080000000000000000010000030900010073797a300000000008000240000000027e000600e92eaa0ce5ceb2c822ee6ad8212f5158b56d3bf444f24ea55abd5564a813d0f1f29c043fb4fb70b02b9b9c4384f5a60d6cb5c596a0005e5746f85fdee6b0bfa6b3e9121ae775578bf0e868ec886dfb9565c2b4a2ae179eff9c94622e86031cd75ff406ca2c0d2be01126b7f7461f7606e465e2a6ef54fb9a666e00000c00044000000000000000020900010073797a30000000000900010073797a31000000007e0006005dd29184f6d9c6c62c5a7645027c5f3a88c87b43beb11847fa6118823d3febe84133d998e730ecb60a0ecae145bb69970d870391389d31c3d6c952578c63183a2e50c127b77f7a29afce7a62d7d85a9c30841651bdf8f30924650352141201f6276d949fb13c795e2df27cb4a0d6e1395a2f8520a7b23a545c33000014000000110001"], 0x1b4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
close(0x3)

828.858µs ago: executing program 0 (id=2016):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000240)={0x10, 0x0, 0x80, 0x480, 0x3, 0x0, 0x4, 0x2, {0x1, 0xc0000000, 0x1}, {0x9, 0x4, 0x1}, {0x0, 0xfffffff9}, {0x2, 0x8}, 0x1, 0xe2, 0x1, 0x42f0, 0x1, 0xf1f, 0x3c, 0x101, 0x10, 0x3ba, 0x2, 0x4, 0x10, 0x2, 0x0, 0x5})

413.19µs ago: executing program 8 (id=2017):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000e00)='./file0\x00', 0x2010800, &(0x7f0000000680)={[{@debug}, {@nolazytime}, {@barrier}, {@jqfmt_vfsv0}, {@dioread_lock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@test_dummy_encryption}]}, 0x3, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 5 (id=2018):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
close(0x3)
setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000002cc0)={{}, {0x1, 0x7}, [], {}, [], {0x10, 0x6}, {0x20, 0x4}}, 0x4, 0x3)

kernel console output (not intermixed with test programs):

tsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  169.274575][   T52] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  169.279142][   T52] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  169.284075][   T52] usb 5-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  169.285665][ T8073] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  169.292907][   T52] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  169.292930][   T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.292946][   T52] usb 5-1: Product: syz
[  169.292957][   T52] usb 5-1: Manufacturer: syz
[  169.292969][   T52] usb 5-1: SerialNumber: syz
[  169.306786][   T52] hso 5-1:6.2: Failed to find BULK IN ep
[  169.310276][ T8073] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  169.313707][ T8073] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  169.334628][ T8073] F2FS-fs (loop2): Stopped filesystem due to reason: 0
[  169.350779][ T5240] Bluetooth: hci1: command tx timeout
[  169.508941][ T6014] usb 5-1: USB disconnect, device number 2
[  169.789090][ T8088] loop2: detected capacity change from 0 to 1024
[  170.106457][ T8095] nftables ruleset with unbound set
[  170.621386][ T6014] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  170.659145][ T6251] hfsplus: b-tree write err: -5, ino 4
[  170.731737][ T8104] loop2: detected capacity change from 0 to 2048
[  170.735224][ T8104] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051
[  170.743910][ T8104] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  170.793730][ T6014] usb 5-1: Using ep0 maxpacket: 16
[  170.802285][ T6014] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  170.815201][ T6014] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  170.825578][ T6014] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  170.828901][ T6014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.839643][ T6014] usb 5-1: Product: syz
[  170.841392][ T6014] usb 5-1: Manufacturer: syz
[  170.843417][ T6014] usb 5-1: SerialNumber: syz
[  170.860359][ T6014] usb 5-1: config 0 descriptor??
[  170.867523][ T6014] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  170.871383][ T6014] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  171.045631][ T8115] gfs2: not a GFS2 filesystem
[  172.192490][ T6014] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  172.195297][ T6014] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[  172.672464][ T8145] loop2: detected capacity change from 0 to 256
[  172.779282][ T8147] netlink: 'syz.2.821': attribute type 18 has an invalid length.
[  172.801514][ T6014] em28xx 5-1:0.0: Unknown AC97 audio processor detected!
[  172.808053][ T6014] em28xx 5-1:0.0: couldn't setup AC97 register 2
[  172.815746][ T6014] em28xx 5-1:0.0: couldn't setup AC97 register 4
[  172.891789][ T8151] loop2: detected capacity change from 0 to 512
[  172.914466][ T8153] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  172.928808][ T8151] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.823: invalid indirect mapped block 4294967295 (level 1)
[  172.945865][ T8151] EXT4-fs (loop2): Remounting filesystem read-only
[  172.949166][ T8151] EXT4-fs (loop2): 2 truncates cleaned up
[  172.964136][ T8151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.995488][ T5963] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.022483][ T6014] em28xx 5-1:0.0: couldn't setup AC97 register 6
[  173.036646][ T6014] em28xx 5-1:0.0: couldn't setup AC97 register 54
[  173.059725][ T6014] em28xx 5-1:0.0: couldn't setup AC97 register 56
[  173.068717][ T6014] usb 5-1: USB disconnect, device number 3
[  173.181320][ T5240] Bluetooth: hci2: unexpected event for opcode 0x0c03
[  174.413482][ T8188] openvswitch: netlink: Flow actions attr not present in new flow.
[  175.253699][ T8196] loop4: detected capacity change from 0 to 512
[  175.402103][ T8198] netlink: 'syz.2.843': attribute type 10 has an invalid length.
[  175.517860][ T8198] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  178.007267][   T33] audit: type=1326 audit(1759038237.045:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8232 comm="syz.2.854" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e118ec29 code=0x7ffc0000
[  178.029171][   T33] audit: type=1326 audit(1759038237.045:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8232 comm="syz.2.854" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e118ec29 code=0x7ffc0000
[  178.051676][   T33] audit: type=1326 audit(1759038237.045:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8232 comm="syz.2.854" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e118ec29 code=0x7ffc0000
[  178.088218][   T33] audit: type=1326 audit(1759038237.045:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8232 comm="syz.2.854" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e118ec29 code=0x7ffc0000
[  178.103722][ T8234] loop4: detected capacity change from 0 to 4096
[  178.106968][ T8234] EXT4-fs: Ignoring removed bh option
[  178.119459][   T33] audit: type=1326 audit(1759038237.055:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8232 comm="syz.2.854" exe="/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f43e118ec29 code=0x7ffc0000
[  178.128052][   T33] audit: type=1326 audit(1759038237.055:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8232 comm="syz.2.854" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e118ec29 code=0x7ffc0000
[  178.169925][   T33] audit: type=1326 audit(1759038237.055:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8232 comm="syz.2.854" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e118ec29 code=0x7ffc0000
[  178.178998][   T33] audit: type=1326 audit(1759038237.055:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8232 comm="syz.2.854" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e118ec29 code=0x7ffc0000
[  178.209882][ T8234] EXT4-fs (loop4): Test dummy encryption mode enabled
[  178.217214][   T33] audit: type=1326 audit(1759038237.055:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8232 comm="syz.2.854" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f43e118ec29 code=0x7ffc0000
[  178.232265][ T8234] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  178.235379][ T8234] System zones: 0-5
[  178.237251][   T33] audit: type=1326 audit(1759038237.055:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8232 comm="syz.2.854" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f43e118ec29 code=0x7ffc0000
[  178.254759][ T8234] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  178.374157][ T8249] overlayfs: failed to resolve './file0': -2
[  178.374707][ T8234] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  178.517902][ T7875] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.945745][ T8244] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  179.384043][ T8271] loop4: detected capacity change from 0 to 32768
[  179.439855][ T8271] JBD2: Ignoring recovery information on journal
[  179.496523][ T8271] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  179.767838][ T7875] ocfs2: Unmounting device (7,4) on (node local)
[  180.361005][ T8290] loop2: detected capacity change from 0 to 131072
[  180.366464][ T8290] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0)
[  180.369894][ T8290] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  180.387156][ T8290] F2FS-fs (loop2): invalid crc value
[  180.432926][ T8290] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  180.439955][ T8290] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  180.442615][ T8290] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  180.494964][ T8290] F2FS-fs (loop2): checksum invalid, nid = 4, ino_of_node = 4, 8e2acc4a vs. 159afe7
[  181.621396][ T8328] Illegal XDP return value 4294967274 on prog  (id 83) dev N/A, expect packet loss!
[  181.890170][ T6001] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  182.083639][ T6001] usb 3-1: Using ep0 maxpacket: 8
[  182.092377][ T6001] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[  182.096259][ T6001] usb 3-1: config 0 has no interface number 0
[  182.105686][ T6001] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  182.109099][ T6001] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.114489][ T6001] usb 3-1: Product: syz
[  182.116150][ T6001] usb 3-1: Manufacturer: syz
[  182.117958][ T6001] usb 3-1: SerialNumber: syz
[  182.136406][ T6001] usb 3-1: config 0 descriptor??
[  182.398599][ T6001] usb 3-1: Found UVC 0.04 device syz (046d:08c3)
[  182.418080][ T6001] usb 3-1: No streaming interface found for terminal 6.
[  182.460409][ T6001] usb 3-1: USB disconnect, device number 11
[  183.625529][ T8361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.898'.
[  183.824137][ T8369] netlink: 'syz.2.900': attribute type 1 has an invalid length.
[  184.187645][ T8379] loop2: detected capacity change from 0 to 256
[  186.619959][ T6001] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  186.772470][ T6001] usb 3-1: config 0 has an invalid interface number: 82 but max is 0
[  186.775519][ T6001] usb 3-1: config 0 has no interface number 0
[  186.786762][ T6001] usb 3-1: New USB device found, idVendor=0506, idProduct=11f8, bcdDevice=b6.28
[  186.792836][ T6001] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.796013][ T6001] usb 3-1: Product: syz
[  186.797746][ T6001] usb 3-1: Manufacturer: syz
[  186.803044][ T6001] usb 3-1: SerialNumber: syz
[  186.807190][ T6001] usb 3-1: config 0 descriptor??
[  186.939903][   T52] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  187.031842][ T6001] kaweth 3-1:0.82: Firmware present in device.
[  187.103521][   T52] usb 5-1: Using ep0 maxpacket: 32
[  187.108804][   T52] usb 5-1: config 4 has an invalid interface number: 8 but max is 0
[  187.113967][   T52] usb 5-1: config 4 has no interface number 0
[  187.116477][   T52] usb 5-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  187.123807][   T52] usb 5-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0
[  187.127841][   T52] usb 5-1: config 4 interface 8 has no altsetting 0
[  187.140013][   T52] usb 5-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65
[  187.143966][   T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.147524][   T52] usb 5-1: Product: syz
[  187.154050][   T52] usb 5-1: Manufacturer: syz
[  187.155897][   T52] usb 5-1: SerialNumber: syz
[  187.218174][ T6001] kaweth 3-1:0.82: Statistics collection: 0
[  187.222554][ T6001] kaweth 3-1:0.82: Multicast filter limit: 0
[  187.225522][ T6001] kaweth 3-1:0.82: MTU: 0
[  187.227231][ T6001] kaweth 3-1:0.82: Read MAC address 00:00:00:00:00:00
[  187.389116][   T52] opticon 5-1:4.8: opticon converter detected
[  187.397358][   T52] usb 5-1: opticon converter now attached to ttyUSB0
[  187.409712][   T52] usb 5-1: USB disconnect, device number 4
[  187.427773][   T52] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0
[  187.438500][   T52] opticon 5-1:4.8: device disconnected
[  187.856014][ T6001] kaweth 3-1:0.82: kaweth interface created at eth9
[  188.036626][    T9] usb 3-1: USB disconnect, device number 12
[  189.042226][ T8448] loop4: detected capacity change from 0 to 1024
[  190.495933][ T8488] netlink: 28 bytes leftover after parsing attributes in process `syz.0.947'.
[  190.669058][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  190.669129][   T33] audit: type=1326 audit(1759038249.715:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.0.948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234a78ec29 code=0x50000
[  190.683219][   T33] audit: type=1326 audit(1759038249.745:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.0.948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234a78ec29 code=0x50000
[  190.702831][   T33] audit: type=1326 audit(1759038249.745:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.0.948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234a78ec29 code=0x50000
[  190.722643][   T33] audit: type=1326 audit(1759038249.745:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.0.948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234a78ec29 code=0x50000
[  190.745665][   T33] audit: type=1326 audit(1759038249.745:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.0.948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234a78ec29 code=0x50000
[  190.764867][   T33] audit: type=1326 audit(1759038249.745:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.0.948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234a78ec29 code=0x50000
[  190.773927][   T33] audit: type=1326 audit(1759038249.745:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.0.948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234a78ec29 code=0x50000
[  190.782035][   T33] audit: type=1326 audit(1759038249.745:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.0.948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234a78ec29 code=0x50000
[  190.788519][   T33] audit: type=1326 audit(1759038249.745:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.0.948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234a78ec29 code=0x50000
[  190.799233][   T33] audit: type=1326 audit(1759038249.745:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.0.948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234a78ec29 code=0x50000
[  193.112393][ T8514] loop4: detected capacity change from 0 to 1024
[  193.122729][ T8514] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  193.155769][ T8514] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003]
[  193.165605][ T8514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.246891][ T7875] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.847963][ T8518] loop2: detected capacity change from 0 to 32768
[  193.885765][ T8518] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  193.969474][ T8518] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  194.292341][ T5963] ocfs2: Unmounting device (7,2) on (node local)
[  194.485440][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  194.488168][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[  195.209818][ T8541] netlink: 'syz.4.966': attribute type 2 has an invalid length.
[  195.246309][ T8541] : entered promiscuous mode
[  195.866110][ T8575] loop2: detected capacity change from 0 to 256
[  195.894580][ T8575] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  196.320704][    T9] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  196.332761][ T8588] netlink: 60 bytes leftover after parsing attributes in process `syz.0.986'.
[  196.336805][ T8588] unsupported nlmsg_type 40
[  196.472646][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  196.480920][    T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4
[  196.485464][    T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  196.493168][    T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  196.496934][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.502247][    T9] usb 3-1: Product: syz
[  196.504047][    T9] usb 3-1: Manufacturer: syz
[  196.506101][    T9] usb 3-1: SerialNumber: syz
[  196.722494][    T9] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor
[  196.725820][    T9] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  196.729949][    T9] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  196.763224][    T9] usb 3-1: USB disconnect, device number 13
[  196.818453][ T6040] udevd[6040]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  198.119988][ T6014] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  198.293738][ T6014] usb 1-1: config 0 has an invalid interface number: 117 but max is 0
[  198.297310][ T6014] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  198.301856][ T6014] usb 1-1: config 0 has no interface number 0
[  198.304387][ T6014] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  198.308220][ T6014] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  198.320400][ T6014] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  198.323909][ T6014] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.326598][ T6014] usb 1-1: Product: syz
[  198.328185][ T6014] usb 1-1: Manufacturer: syz
[  198.331604][ T6014] usb 1-1: SerialNumber: syz
[  198.336106][ T6014] usb 1-1: config 0 descriptor??
[  198.422466][ T8609] loop2: detected capacity change from 0 to 1024
[  198.472309][ T1156] hfsplus: b-tree write err: -5, ino 4
[  198.509419][ T8611] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  198.657370][ T8617] loop2: detected capacity change from 0 to 512
[  198.663583][ T8617] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  198.668742][ T8617] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  198.678461][ T8617] EXT4-fs (loop2): 1 truncate cleaned up
[  198.682586][ T8617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.717821][ T5963] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.746059][ T6014] usb 1-1: USB disconnect, device number 12
[  199.406336][ T8658] loop4: detected capacity change from 0 to 4096
[  199.475806][ T8660] raw_sendmsg: syz.0.1018 forgot to set AF_INET. Fix it!
[  199.529831][ T6014] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  199.696250][ T8672] netlink: 'syz.0.1022': attribute type 8 has an invalid length.
[  199.712648][ T6014] usb 3-1: config 0 has an invalid interface number: 28 but max is 0
[  199.715458][ T6014] usb 3-1: config 0 has no interface number 0
[  199.717910][ T6014] usb 3-1: config 0 interface 28 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  199.739679][ T6014] usb 3-1: config 0 interface 28 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  199.745072][ T6014] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00
[  199.749294][ T6014] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.759318][ T6014] usb 3-1: config 0 descriptor??
[  200.183743][ T6014] logitech-djreceiver 0003:046D:C534.0003: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.2-1/input28
[  200.339718][    T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  200.388513][ T6014] usb 3-1: USB disconnect, device number 14
[  200.493079][    T9] usb 5-1: config 0 has an invalid interface number: 128 but max is 0
[  200.496699][    T9] usb 5-1: config 0 has no interface number 0
[  200.502491][    T9] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  200.506076][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.515077][    T9] usb 5-1: Product: syz
[  200.516893][    T9] usb 5-1: Manufacturer: syz
[  200.518854][    T9] usb 5-1: SerialNumber: syz
[  200.533564][    T9] usb 5-1: config 0 descriptor??
[  201.150872][    T9] usb 5-1: Firmware version (0.0) predates our first public release.
[  201.154541][    T9] usb 5-1: Please update to version 0.2 or newer
[  201.271743][    T9] usb 5-1: USB disconnect, device number 5
[  201.437567][ T8703] loop2: detected capacity change from 0 to 40427
[  201.453488][ T8703] F2FS-fs (loop2): invalid crc value
[  201.537680][ T8703] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  201.543751][ T8703] F2FS-fs (loop2): Start checkpoint disabled!
[  201.554343][ T8703] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  201.588610][ T1091] kworker/u10:5: attempt to access beyond end of device
[  201.588610][ T1091] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  201.597458][ T1091] CPU: 0 UID: 0 PID: 1091 Comm: kworker/u10:5 Not tainted syzkaller #0 PREEMPT(full) 
[  201.597478][ T1091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  201.597487][ T1091] Workqueue: writeback wb_workfn (flush-7:2)
[  201.597510][ T1091] Call Trace:
[  201.597515][ T1091]  <TASK>
[  201.597522][ T1091]  dump_stack_lvl+0x189/0x250
[  201.597541][ T1091]  ? __pfx_dump_stack_lvl+0x10/0x10
[  201.597556][ T1091]  ? __pfx_queue_work_on+0x10/0x10
[  201.597570][ T1091]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  201.597592][ T1091]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  201.597620][ T1091]  f2fs_handle_critical_error+0x37c/0x540
[  201.597645][ T1091]  f2fs_write_end_io+0x886/0xb60
[  201.597673][ T1091]  __submit_merged_bio+0x27a/0x6a0
[  201.597695][ T1091]  __submit_merged_write_cond+0x255/0x530
[  201.597719][ T1091]  f2fs_write_data_pages+0x261d/0x3000
[  201.597774][ T1091]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  201.597796][ T1091]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  201.597833][ T1091]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  201.597851][ T1091]  ? look_up_lock_class+0x74/0x170
[  201.597896][ T1091]  ? trace_f2fs_writepages+0x7f/0x200
[  201.597917][ T1091]  ? f2fs_write_node_pages+0x478/0x6e0
[  201.597949][ T1091]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  201.597961][ T1091]  do_writepages+0x32e/0x550
[  201.597981][ T1091]  ? reacquire_held_locks+0x127/0x1d0
[  201.597993][ T1091]  ? writeback_sb_inodes+0x384/0x1010
[  201.598014][ T1091]  __writeback_single_inode+0x145/0xff0
[  201.598030][ T1091]  ? do_raw_spin_unlock+0x4d/0x240
[  201.598047][ T1091]  writeback_sb_inodes+0x6c7/0x1010
[  201.598061][ T1091]  ? lockdep_hardirqs_on+0x9c/0x150
[  201.598089][ T1091]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  201.598132][ T1091]  ? rcu_is_watching+0x15/0xb0
[  201.598151][ T1091]  wb_writeback+0x43b/0xaf0
[  201.598171][ T1091]  ? queue_io+0x321/0x590
[  201.598189][ T1091]  ? __pfx_wb_writeback+0x10/0x10
[  201.598210][ T1091]  ? _raw_spin_unlock_irq+0x23/0x50
[  201.598230][ T1091]  wb_workfn+0x409/0xef0
[  201.598256][ T1091]  ? __pfx_wb_workfn+0x10/0x10
[  201.598273][ T1091]  ? __lock_acquire+0xab9/0xd20
[  201.598300][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[  201.598319][ T1091]  ? _raw_spin_unlock_irq+0x23/0x50
[  201.598337][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[  201.598347][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[  201.598360][ T1091]  process_scheduled_works+0xae1/0x17b0
[  201.598400][ T1091]  ? __pfx_process_scheduled_works+0x10/0x10
[  201.598423][ T1091]  worker_thread+0x8a0/0xda0
[  201.598452][ T1091]  kthread+0x711/0x8a0
[  201.598468][ T1091]  ? __pfx_worker_thread+0x10/0x10
[  201.598478][ T1091]  ? __pfx_kthread+0x10/0x10
[  201.598494][ T1091]  ? _raw_spin_unlock_irq+0x23/0x50
[  201.598508][ T1091]  ? lockdep_hardirqs_on+0x9c/0x150
[  201.598518][ T1091]  ? __pfx_kthread+0x10/0x10
[  201.598532][ T1091]  ret_from_fork+0x439/0x7d0
[  201.598546][ T1091]  ? __pfx_ret_from_fork+0x10/0x10
[  201.598563][ T1091]  ? __switch_to_asm+0x39/0x70
[  201.598577][ T1091]  ? __switch_to_asm+0x33/0x70
[  201.598589][ T1091]  ? __pfx_kthread+0x10/0x10
[  201.598602][ T1091]  ret_from_fork_asm+0x1a/0x30
[  201.598628][ T1091]  </TASK>
[  201.598634][ T1091] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  202.473548][ T8722] loop2: detected capacity change from 0 to 256
[  202.485495][ T8722] exfat: Deprecated parameter 'utf8'
[  202.501784][ T8722] exfat: Deprecated parameter 'utf8'
[  202.546422][ T8722] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x8ecf9da9, utbl_chksum : 0xe619d30d)
[  202.820988][ T8722] loop2: detected capacity change from 256 to 0
[  202.821229][    C0] blk_print_req_error: 14 callbacks suppressed
[  202.821253][    C0] I/O error, dev loop2, sector 160 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  202.829245][    C0] I/O error, dev loop2, sector 161 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  202.833338][    C0] I/O error, dev loop2, sector 162 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  202.836838][    C0] I/O error, dev loop2, sector 163 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  202.840298][    C0] I/O error, dev loop2, sector 164 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  202.844069][    C0] I/O error, dev loop2, sector 165 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  202.847606][    C0] I/O error, dev loop2, sector 166 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  202.851582][    C0] I/O error, dev loop2, sector 167 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  202.856678][    C0] I/O error, dev loop2, sector 160 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  202.897674][    C0] I/O error, dev loop2, sector 160 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  202.978683][    C0] Buffer I/O error on dev loop2, logical block 0, lost sync page write
[  203.013071][ T8730] loop4: detected capacity change from 0 to 128
[  203.058995][ T8730] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  203.072758][ T8730] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  203.315773][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.426761][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.480455][ T8738] loop4: detected capacity change from 0 to 8
[  203.541811][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.105255][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.277812][ T5968] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  204.284103][ T5968] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  204.295895][ T5968] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  204.309007][ T5968] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  204.334880][ T5968] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  204.554775][   T13] bridge_slave_1: left allmulticast mode
[  204.557029][   T13] bridge_slave_1: left promiscuous mode
[  204.563047][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.571705][ T8759] loop4: detected capacity change from 0 to 256
[  204.603648][   T13] bridge_slave_0: left allmulticast mode
[  204.606267][   T13] bridge_slave_0: left promiscuous mode
[  204.608906][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.842325][  T792] kernel write not supported for file bpf-prog (pid: 792 comm: kworker/0:2)
[  205.162465][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  205.168736][   T13] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  205.178736][   T13] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  205.189008][   T13] bond0 (unregistering): Released all slaves
[  205.410689][ T8782] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.1067'.
[  205.414997][ T8782] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1067'.
[  205.504431][ T8775] loop4: detected capacity change from 0 to 32768
[  205.515620][ T8775] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1066 (8775)
[  205.517917][ T8746] chnl_net:caif_netlink_parms(): no params data found
[  205.536109][ T8775] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  205.543175][ T8775] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  205.594625][ T8775] BTRFS info (device loop4): enabling ssd optimizations
[  205.607721][ T8775] BTRFS info (device loop4): enabling free space tree
[  205.775322][ T7875] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  205.785606][   T13] hsr_slave_0: left promiscuous mode
[  205.798077][   T13] hsr_slave_1: left promiscuous mode
[  205.802556][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  205.806705][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  205.828104][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  205.842542][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  205.880570][   T13] veth1_vlan: left promiscuous mode
[  205.882835][   T13] veth0_vlan: left promiscuous mode
[  206.064667][ T8808] loop4: detected capacity change from 0 to 128
[  206.067430][ T8808] ext4: Unknown parameter 'subj_user'
[  206.406895][ T5968] Bluetooth: hci0: command tx timeout
[  206.512902][   T13] team0 (unregistering): Port device team_slave_1 removed
[  206.563527][   T13] team0 (unregistering): Port device team_slave_0 removed
[  207.276963][ T8746] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.280816][ T8746] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.293213][ T8746] bridge_slave_0: entered allmulticast mode
[  207.297498][ T8746] bridge_slave_0: entered promiscuous mode
[  207.324692][ T8746] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.336775][ T8746] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.353586][ T8746] bridge_slave_1: entered allmulticast mode
[  207.371926][ T8746] bridge_slave_1: entered promiscuous mode
[  207.499278][ T8746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  207.518295][ T8746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  207.620519][ T8746] team0: Port device team_slave_0 added
[  207.632444][ T8746] team0: Port device team_slave_1 added
[  207.711296][ T8746] batman_adv: batadv0: Adding interface: batadv_slave_0
[  207.715879][   T13] IPVS: stop unused estimator thread 0...
[  207.718428][ T8746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.748052][ T8746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  207.756031][ T8746] batman_adv: batadv0: Adding interface: batadv_slave_1
[  207.758754][ T8746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.776684][ T8746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  207.914718][ T8746] hsr_slave_0: entered promiscuous mode
[  207.927950][ T8746] hsr_slave_1: entered promiscuous mode
[  207.959061][ T8860] netlink: 'syz.0.1085': attribute type 30 has an invalid length.
[  208.047443][ T8866] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0)
[  208.236276][ T8880] loop4: detected capacity change from 0 to 1024
[  208.255587][ T8880] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  208.291935][ T8880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.334513][ T8880] futex_wake_op: syz.4.1093 tries to shift op by 36; fix this program
[  208.339362][ T8746] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  208.351734][ T8746] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  208.382181][ T8746] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  208.391999][ T7875] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.395434][ T8746] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  208.469783][ T5968] Bluetooth: hci0: command tx timeout
[  208.667265][ T8746] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.689288][ T8746] 8021q: adding VLAN 0 to HW filter on device team0
[  209.081206][ T6251] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.084023][ T6251] bridge0: port 1(bridge_slave_0) entered forwarding state
[  209.116219][ T6251] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.119104][ T6251] bridge0: port 2(bridge_slave_1) entered forwarding state
[  209.459985][ T8746] 8021q: adding VLAN 0 to HW filter on device batadv0
[  210.276688][ T8933] loop4: detected capacity change from 0 to 1024
[  210.315167][ T8746] veth0_vlan: entered promiscuous mode
[  210.326623][ T8933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.333287][ T8746] veth1_vlan: entered promiscuous mode
[  210.385888][ T7875] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.405248][ T8746] veth0_macvtap: entered promiscuous mode
[  210.549658][ T5968] Bluetooth: hci0: command tx timeout
[  210.564215][ T8746] veth1_macvtap: entered promiscuous mode
[  210.660806][ T8746] batman_adv: batadv0: Interface activated: batadv_slave_0
[  210.734202][ T8950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1106'.
[  210.960250][ T8746] batman_adv: batadv0: Interface activated: batadv_slave_1
[  210.987891][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  210.996701][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  211.012068][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.015758][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.121445][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.126442][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.157872][ T8958] 9pnet_fd: Insufficient options for proto=fd
[  211.168585][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.172298][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.050878][ T8976] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1117'.
[  212.642034][ T5968] Bluetooth: hci0: command tx timeout
[  212.696219][ T8994] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  212.970480][ T5961] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  213.143586][ T5961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  213.147013][ T5961] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  213.151674][ T5961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  213.156983][ T5961] usb 6-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[  213.160978][ T5961] usb 6-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[  213.163750][ T5961] usb 6-1: Manufacturer: syz
[  213.167782][ T5961] usb 6-1: config 0 descriptor??
[  213.179957][ T5961] smsusb:smsusb_probe: board id=9, interface number 0
[  213.183044][ T5961] smsusb:smsusb_probe: Device initialized with return code -19
[  213.393726][ T6014] usb 6-1: USB disconnect, device number 2
[  213.732544][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1137'.
[  214.950628][ T9038] loop5: detected capacity change from 0 to 131072
[  215.044914][ T9038] F2FS-fs (loop5): invalid crc value
[  215.082444][ T9038] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  215.087153][ T9038] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  215.169727][   T33] kauditd_printk_skb: 4376 callbacks suppressed
[  215.169742][   T33] audit: type=1800 audit(1759038274.215:4409): pid=9038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1145" name="file1" dev="loop5" ino=7 res=0 errno=0
[  215.181322][ T9053] syz_tun: entered allmulticast mode
[  215.188038][ T9052] syz_tun: left allmulticast mode
[  215.349065][ T9060] loop4: detected capacity change from 0 to 8
[  215.373565][ T9060] SQUASHFS error: xz decompression failed, data probably corrupt
[  215.377335][ T9060] SQUASHFS error: Failed to read block 0x108: -5
[  215.380548][ T9060] SQUASHFS error: Unable to read metadata cache entry [106]
[  215.383540][ T9060] SQUASHFS error: Unable to read inode 0x101f
[  215.642568][ T9071] netlink: 'syz.0.1160': attribute type 6 has an invalid length.
[  215.652705][ T9071] netlink: 'syz.0.1160': attribute type 6 has an invalid length.
[  215.788826][ T9076] loop4: detected capacity change from 0 to 1024
[  215.901481][ T9076] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended.
[  216.344312][ T9092] evm: overlay not supported
[  216.365719][ T9092] overlayfs: failed to verify index (index/00fb2100018fcc5eeffb3043cd9f07fd2fd7580a818ce62cf2f207000000000000, ftype=2000, err=-61)
[  216.370448][ T9092] overlayfs: failed index dir cleanup (-61)
[  216.372215][ T9092] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[  216.378726][ T9094] netlink: 'syz.4.1166': attribute type 3 has an invalid length.
[  217.172658][ T9132] pim6reg: entered allmulticast mode
[  217.176431][ T9132] pim6reg: left allmulticast mode
[  217.749954][ T6014] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  217.920705][ T6014] usb 6-1: Using ep0 maxpacket: 8
[  217.930273][ T6014] usb 6-1: unable to get BOS descriptor or descriptor too short
[  217.936662][ T6014] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  217.951182][ T6014] usb 6-1: config 7 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  217.957270][ T6014] usb 6-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  217.977049][ T6014] usb 6-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a
[  217.983279][ T6014] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.993638][ T6014] usb 6-1: Product: syz
[  217.995444][ T6014] usb 6-1: Manufacturer: syz
[  218.004301][ T6014] usb 6-1: SerialNumber: syz
[  218.300216][ T6014] usb 6-1: USB disconnect, device number 3
[  218.881484][ T9150] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.573390][   T52] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  219.729994][   T52] usb 6-1: Using ep0 maxpacket: 8
[  219.758609][   T52] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  219.764951][   T52] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.768370][   T52] usb 6-1: Product: syz
[  219.779765][   T52] usb 6-1: Manufacturer: syz
[  219.781792][   T52] usb 6-1: SerialNumber: syz
[  219.787159][   T52] usb 6-1: config 0 descriptor??
[  220.023282][   T52] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  220.038969][ T9179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1197'.
[  220.049729][ T9179] netlink: 'syz.4.1197': attribute type 2 has an invalid length.
[  220.054579][ T9179] netlink: 'syz.4.1197': attribute type 1 has an invalid length.
[  220.059375][ T9179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1197'.
[  220.640503][   T52] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  220.666659][ T9191] loop4: detected capacity change from 0 to 32768
[  220.680738][ T9191] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1202 (9191)
[  220.681109][   T52] usb 6-1: USB disconnect, device number 4
[  220.733614][ T9191] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  220.748905][ T9191] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  220.885369][ T9191] BTRFS info (device loop4): enabling ssd optimizations
[  220.888338][ T9191] BTRFS info (device loop4): enabling free space tree
[  220.939302][ T7875] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  221.242393][ T9225] loop4: detected capacity change from 0 to 256
[  221.263232][ T9225] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  221.289908][ T9225] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d)
[  221.882382][   T33] audit: type=1326 audit(1759038280.935:4410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.4.1213" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7d58ec29 code=0x7ffc0000
[  221.932202][   T33] audit: type=1326 audit(1759038280.935:4411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.4.1213" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7d58ec29 code=0x7ffc0000
[  222.012665][   T33] audit: type=1326 audit(1759038280.955:4412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.4.1213" exe="/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f3f7d58ec29 code=0x7ffc0000
[  222.024520][   T33] audit: type=1326 audit(1759038280.955:4413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.4.1213" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7d58ec29 code=0x7ffc0000
[  222.034006][   T33] audit: type=1326 audit(1759038280.955:4414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.4.1213" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3f7d58ec29 code=0x7ffc0000
[  222.042345][   T33] audit: type=1326 audit(1759038280.955:4415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.4.1213" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7d58ec29 code=0x7ffc0000
[  222.055719][   T33] audit: type=1326 audit(1759038280.955:4416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.4.1213" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3f7d58ec29 code=0x7ffc0000
[  222.075802][   T33] audit: type=1326 audit(1759038280.955:4417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.4.1213" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7d58ec29 code=0x7ffc0000
[  222.085862][   T33] audit: type=1326 audit(1759038280.955:4418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.4.1213" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3f7d58ec29 code=0x7ffc0000
[  222.107448][   T33] audit: type=1326 audit(1759038280.955:4419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.4.1213" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7d58ec29 code=0x7ffc0000
[  222.409798][ T5961] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  222.562560][ T5961] usb 1-1: Using ep0 maxpacket: 8
[  222.573909][ T5961] usb 1-1: config 0 has an invalid interface number: 193 but max is 1
[  222.579001][ T5961] usb 1-1: config 0 has an invalid interface number: 4 but max is 1
[  222.590036][ T5961] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  222.595803][ T5961] usb 1-1: config 0 has no interface number 0
[  222.598195][ T5961] usb 1-1: config 0 has no interface number 1
[  222.604079][ T5961] usb 1-1: config 0 interface 193 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  222.609744][ T5961] usb 1-1: config 0 interface 4 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 11
[  222.614708][ T5961] usb 1-1: config 0 interface 193 has no altsetting 0
[  222.617540][ T5961] usb 1-1: config 0 interface 4 has no altsetting 0
[  222.624993][ T5961] usb 1-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=7d.6a
[  222.629195][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.634507][ T5961] usb 1-1: Product: syz
[  222.636445][ T5961] usb 1-1: Manufacturer: syz
[  222.638501][ T5961] usb 1-1: SerialNumber: syz
[  222.644394][ T5961] usb 1-1: config 0 descriptor??
[  222.881837][ T5961] usb 1-1: unknown interface protocol 0x4f, assuming v1
[  222.885102][ T5961] usb 1-1: 193:2 : does not exist
[  222.891928][ T5961] usb 1-1: unknown interface protocol 0x5, assuming v1
[  222.894621][ T5961] usb 1-1: 4:0 : does not exist
[  222.921289][ T5961] usb 1-1: USB disconnect, device number 13
[  223.049051][ T6040] udevd[6040]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.193/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  223.537656][ T9264] capability: warning: `syz.0.1223' uses 32-bit capabilities (legacy support in use)
[  224.371810][ T9275] loop4: detected capacity change from 0 to 512
[  224.411436][ T9275] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  224.421963][ T9275] EXT4-fs (loop4): invalid journal inode
[  224.531212][ T9282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1231'.
[  224.550235][ T9282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1231'.
[  224.865620][ T5961] IPVS: starting estimator thread 0...
[  224.954395][ T9292] IPVS: using max 63 ests per chain, 151200 per kthread
[  226.329784][  T792] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  226.481418][  T792] usb 6-1: Using ep0 maxpacket: 8
[  226.485861][  T792] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  226.499970][  T792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  226.504275][  T792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  226.512931][ T9341] netlink: 'syz.0.1255': attribute type 7 has an invalid length.
[  226.521820][  T792] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  226.525617][  T792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.528823][  T792] usb 6-1: Product: syz
[  226.531265][  T792] usb 6-1: Manufacturer: syz
[  226.533151][  T792] usb 6-1: SerialNumber: syz
[  226.548631][  T792] usb 6-1: config 0 descriptor??
[  226.555635][  T792] streamzap 6-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?!
[  226.775765][ T6001] usb 6-1: USB disconnect, device number 5
[  226.884705][ T9345] loop4: detected capacity change from 0 to 32768
[  226.902870][ T9345] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  226.918929][ T9345] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  226.928001][ T9345] XFS (loop4): Starting recovery (logdev: internal)
[  226.941298][ T9345] XFS (loop4): Ending recovery (logdev: internal)
[  226.984183][ T7875] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  227.120028][  T792] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  227.272138][  T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  227.276469][  T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  227.289622][  T792] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  227.294812][  T792] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  227.298694][  T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.312339][  T792] usb 1-1: config 0 descriptor??
[  227.516640][ T9361] loop4: detected capacity change from 0 to 32768
[  227.587319][ T9361] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  227.782837][  T792] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd
[  227.818884][  T792] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  227.945908][ T7875] ocfs2: Unmounting device (7,4) on (node local)
[  228.147271][ T6001] usb 1-1: USB disconnect, device number 14
[  229.872129][   T33] kauditd_printk_skb: 39 callbacks suppressed
[  229.872188][   T33] audit: type=1326 audit(1759038288.915:4459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.5.1278" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd01b8ec29 code=0x0
[  230.607154][ T9435] netlink: 'syz.0.1292': attribute type 1 has an invalid length.
[  231.780272][ T9464] loop5: detected capacity change from 0 to 4096
[  231.786870][ T9464] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  231.879635][ T9464] NILFS (loop5): mounting unchecked fs
[  231.886334][ T9466] loop4: detected capacity change from 0 to 1024
[  231.923028][ T9464] NILFS (loop5): recovery complete
[  231.937285][ T6040] udevd[6040]: incorrect nilfs2 checksum on /dev/loop5
[  231.948635][ T9467] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  232.121970][ T9474] loop5: detected capacity change from 0 to 1024
[  232.154967][ T9474] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  232.192404][ T9474] EXT4-fs error (device loop5): ext4_generic_delete_entry:2668: inode #2: block 16: comm syz.5.1306: bad entry in directory: inode out of bounds - offset=12, inode=1282, rec_len=12, size=1024 fake=1
[  232.203111][ T9474] EXT4-fs error (device loop5) in ext4_delete_entry:2739: Corrupt filesystem
[  232.207805][ T9474] EXT4-fs warning (device loop5): ext4_rename_delete:3731: inode #2: comm syz.5.1306: Deleting old file: nlink 4, error=-117
[  232.237512][ T8746] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.363769][ T3617] hfsplus: bad catalog file entry
[  232.365864][ T3617] hfsplus: b-tree write err: -5, ino 3
[  233.213783][ T9511] syzkaller0: entered promiscuous mode
[  233.222700][ T9511] syzkaller0: entered allmulticast mode
[  234.077365][ T9534] program syz.0.1332 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  234.270351][ T9544] fuse: Unknown parameter '0x0000000000000007'
[  234.294062][   T33] audit: type=1800 audit(1759038293.345:4460): pid=9544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1336" name="/" dev="9p" ino=7885907883835289711 res=0 errno=0
[  235.174291][ T9554] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1338'.
[  235.447896][ T9558] input: syz1 as /devices/virtual/input/input11
[  235.541661][ T5994] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.685671][ T5994] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.813177][ T5994] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.962479][ T5994] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.177005][ T9564] QAT: Stopping all acceleration devices.
[  236.680513][ T5994] bridge_slave_1: left allmulticast mode
[  236.702324][ T5994] bridge_slave_1: left promiscuous mode
[  236.711366][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.719748][ T5994] bridge_slave_0: left allmulticast mode
[  236.721848][ T5994] bridge_slave_0: left promiscuous mode
[  236.723791][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.876358][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  236.901870][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  236.911733][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  236.917875][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  236.932923][ T9578] netlink: 'syz.5.1352': attribute type 1 has an invalid length.
[  236.936540][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  236.936856][ T9578] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1352'.
[  236.943463][ T9578] netlink: 'syz.5.1352': attribute type 2 has an invalid length.
[  236.946262][ T9578] netlink: 'syz.5.1352': attribute type 1 has an invalid length.
[  237.759144][ T5994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  237.765857][ T5994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  237.771354][ T5994] bond0 (unregistering): Released all slaves
[  237.871580][ T5994] : left promiscuous mode
[  238.295911][ T9610] input: syz0 as /devices/virtual/input/input12
[  238.426958][ T9575] chnl_net:caif_netlink_parms(): no params data found
[  238.514394][ T5994] hsr_slave_0: left promiscuous mode
[  238.524731][ T5994] hsr_slave_1: left promiscuous mode
[  238.527385][ T5994] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  238.536551][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_0
[  238.542272][ T5994] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  238.544797][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_1
[  238.563150][ T5994] veth1_macvtap: left promiscuous mode
[  238.565908][ T5994] veth0_macvtap: left promiscuous mode
[  238.568299][ T5994] veth1_vlan: left promiscuous mode
[  238.570204][ T5994] veth0_vlan: left promiscuous mode
[  238.683498][ T5961] usb 6-1: new low-speed USB device number 6 using dummy_hcd
[  238.831949][ T5961] usb 6-1: unable to get BOS descriptor or descriptor too short
[  238.836307][ T5961] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 8
[  238.842561][ T5961] usb 6-1: config 1 interface 0 has no altsetting 0
[  238.848179][ T5961] usb 6-1: string descriptor 0 read error: -22
[  238.850821][ T5961] usb 6-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice= 0.40
[  238.854326][ T5961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.859160][ T9619] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  238.871956][ T5961] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input13
[  239.030886][ T5968] Bluetooth: hci1: command tx timeout
[  239.073247][ T5284] bcm5974 6-1:1.0: could not read from device
[  239.096580][ T5284] bcm5974 6-1:1.0: could not read from device
[  239.101703][ T5284] bcm5974 6-1:1.0: could not read from device
[  239.108143][ T5961] usb 6-1: USB disconnect, device number 6
[  239.117192][ T5284] bcm5974 6-1:1.0: could not read from device
[  239.237582][ T5994] team0 (unregistering): Port device team_slave_1 removed
[  239.286594][ T5994] team0 (unregistering): Port device team_slave_0 removed
[  239.978598][ T9575] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.990631][ T9575] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.999101][ T9575] bridge_slave_0: entered allmulticast mode
[  240.003941][ T9575] bridge_slave_0: entered promiscuous mode
[  240.020761][ T9575] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.023557][ T9575] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.026543][ T9575] bridge_slave_1: entered allmulticast mode
[  240.040790][ T9575] bridge_slave_1: entered promiscuous mode
[  240.136725][ T9575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  240.154422][ T9575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  240.246718][ T9575] team0: Port device team_slave_0 added
[  240.264412][ T9575] team0: Port device team_slave_1 added
[  240.316815][ T9575] batman_adv: batadv0: Adding interface: batadv_slave_0
[  240.331459][ T9575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  240.367435][ T9575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  240.386039][ T9575] batman_adv: batadv0: Adding interface: batadv_slave_1
[  240.388795][ T9575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  240.412645][ T9575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  240.494911][ T9575] hsr_slave_0: entered promiscuous mode
[  240.497459][ T9575] hsr_slave_1: entered promiscuous mode
[  240.509845][ T9575] debugfs: 'hsr0' already exists in 'hsr'
[  240.511665][ T9575] Cannot create hsr debugfs directory
[  240.515700][ T5994] IPVS: stop unused estimator thread 0...
[  240.619924][ T9660] Bluetooth: MGMT ver 1.23
[  240.822087][ T9575] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  240.840212][ T9575] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  240.885233][ T9575] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  240.912285][ T9575] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  241.054483][ T9658] loop5: detected capacity change from 0 to 32768
[  241.100556][ T9575] 8021q: adding VLAN 0 to HW filter on device bond0
[  241.110289][ T5968] Bluetooth: hci1: command tx timeout
[  241.123146][ T9658] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  241.143478][ T9575] 8021q: adding VLAN 0 to HW filter on device team0
[  241.157192][ T9658] XFS (loop5): Ending clean mount
[  241.159348][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.159473][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  241.183408][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.186372][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  241.188406][ T9658] XFS (loop5): Quotacheck needed: Please wait.
[  241.203551][ T5961] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  241.284881][ T9658] XFS (loop5): Quotacheck: Done.
[  241.375263][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  241.389835][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  241.395827][ T5961] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  241.400393][ T5961] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  241.407474][ T8746] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  241.409580][ T5961] usb 1-1: Manufacturer: syz
[  241.431048][ T5961] usb 1-1: config 0 descriptor??
[  241.528425][ T9575] 8021q: adding VLAN 0 to HW filter on device batadv0
[  241.836404][ T9575] veth0_vlan: entered promiscuous mode
[  241.859589][ T9575] veth1_vlan: entered promiscuous mode
[  241.925651][ T9575] veth0_macvtap: entered promiscuous mode
[  241.933985][ T9575] veth1_macvtap: entered promiscuous mode
[  241.949139][ T9575] batman_adv: batadv0: Interface activated: batadv_slave_0
[  241.985328][ T9575] batman_adv: batadv0: Interface activated: batadv_slave_1
[  242.035158][ T9712] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  242.040284][ T9712] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  242.356651][ T5993] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  242.365675][ T5993] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  242.370453][ T5993] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  242.374666][ T5993] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  242.424428][ T5961] uclogic 0003:256C:006D.0005: interface is invalid, ignoring
[  242.441901][ T5961] usb 1-1: USB disconnect, device number 15
[  242.514489][ T6251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.517741][ T6251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.551691][ T6241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.554763][ T6241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.099121][ T9743] loop5: detected capacity change from 0 to 128
[  243.190674][ T5968] Bluetooth: hci1: command tx timeout
[  243.546169][  T973] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  243.793430][  T973] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  243.814587][  T973] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  243.829413][  T973] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  243.838856][  T973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.841907][  T973] usb 6-1: Product: syz
[  243.843563][  T973] usb 6-1: Manufacturer: syz
[  243.845019][  T973] usb 6-1: SerialNumber: syz
[  243.853703][  T973] cdc_mbim 6-1:1.0: skipping garbage
[  243.927690][ T9758] loop6: detected capacity change from 0 to 16384
[  243.946587][ T9758] bcachefs (/dev/loop6): error validating superblock: Filesystem has incompatible version 1.13: inode_has_child_snapshots, current version 1.28: inode_has_case_insensitive
[  243.953238][ T9758] bcachefs: bch2_fs_get_tree() error: invalid_sb_features
[  244.068445][ T9751] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  244.694511][ T9751] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  244.778100][  T973] cdc_mbim 6-1:1.0: setting tx_max = 48
[  244.872580][  T973] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device
[  245.047029][  T973] wwan wwan0: port wwan0mbim0 attached
[  245.279746][ T5968] Bluetooth: hci1: command tx timeout
[  245.466449][   T24] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  245.604223][  T973] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, c2:3c:2b:cd:40:c3
[  245.690734][   T24] usb 7-1: device descriptor read/64, error -71
[  245.715712][  T973] usb 6-1: USB disconnect, device number 7
[  245.746375][  T973] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM
[  245.922066][  T973] wwan wwan0: port wwan0mbim0 disconnected
[  245.941579][   T24] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  246.090259][   T24] usb 7-1: device descriptor read/64, error -71
[  246.231279][   T24] usb usb7-port1: attempt power cycle
[  246.569646][   T24] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  246.590893][   T24] usb 7-1: device descriptor read/8, error -71
[  246.829646][   T24] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  246.850417][   T24] usb 7-1: device descriptor read/8, error -71
[  246.959942][   T24] usb usb7-port1: unable to enumerate USB device
[  247.194658][ T9813] usb usb8: usbfs: process 9813 (syz.5.1424) did not claim interface 0 before use
[  247.542647][ T9831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1432'.
[  247.547655][ T9831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1432'.
[  247.553164][ T9831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1432'.
[  247.602410][ T9833] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1433'.
[  247.608757][ T9833] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1433'.
[  247.773516][  T792] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  248.589756][  T792] usb 6-1: Using ep0 maxpacket: 32
[  248.593971][  T792] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  249.404560][  T792] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  249.407977][  T792] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  249.413561][  T792] usb 6-1: Product: syz
[  249.415305][  T792] usb 6-1: Manufacturer: syz
[  249.417174][  T792] usb 6-1: SerialNumber: syz
[  249.459358][  T792] usb 6-1: config 0 descriptor??
[  249.470619][ T9829] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  249.621743][ T9857] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  250.936628][  T792] usb 6-1: USB disconnect, device number 8
[  251.794657][ T9904] atomic_op ffff88802a0d1198 conn xmit_atomic 0000000000000000
[  251.906467][ T6014] IPVS: starting estimator thread 0...
[  251.991899][ T9905] IPVS: using max 53 ests per chain, 127200 per kthread
[  252.791413][  T973] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  252.857624][ T9917] loop5: detected capacity change from 0 to 32768
[  252.862165][ T9917] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1465 (9917)
[  252.964521][  T973] usb 7-1: unable to get BOS descriptor or descriptor too short
[  252.967660][  T973] usb 7-1: not running at top speed; connect to a high speed hub
[  252.982366][  T973] usb 7-1: config 2 has an invalid interface number: 226 but max is 1
[  253.002977][  T973] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  253.041959][  T973] usb 7-1: config 2 has 1 interface, different from the descriptor's value: 2
[  253.055115][  T973] usb 7-1: config 2 has no interface number 0
[  253.066304][  T973] usb 7-1: config 2 interface 226 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  253.076621][ T9917] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  253.080573][  T973] usb 7-1: config 2 interface 226 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10
[  253.084353][ T9917] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  253.227086][  T973] usb 7-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  253.236008][  T973] usb 7-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[  253.239306][  T973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.243295][  T973] usb 7-1: Product: syz
[  253.245242][  T973] usb 7-1: Manufacturer: syz
[  253.246791][  T973] usb 7-1: SerialNumber: syz
[  253.387062][ T9917] BTRFS info (device loop5): enabling ssd optimizations
[  253.389471][ T9917] BTRFS info (device loop5): enabling free space tree
[  253.476401][  T973] usb 7-1: USB disconnect, device number 6
[  253.524230][ T8746] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  254.227940][ T9987] IPVS: Scheduler module ip_vs_sip not found
[  254.324921][ T9990] loop6: detected capacity change from 0 to 8
[  254.346750][ T9990] SQUASHFS error: lzo decompression failed, data probably corrupt
[  254.361340][ T9990] SQUASHFS error: Failed to read block 0x91: -5
[  254.368216][ T9990] SQUASHFS error: Unable to read metadata cache entry [8f]
[  254.379662][ T9990] SQUASHFS error: Unable to read inode 0x11f
[  254.382638][ T9992] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1482'.
[  254.390032][ T9992] netlink: 'syz.0.1482': attribute type 1 has an invalid length.
[  254.514160][ T9994] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  254.739782][T10007] trusted_key: encrypted_key: insufficient parameters specified
[  255.562800][T10017] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  255.918922][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  255.921702][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[  255.939001][T10035] netlink: 'syz.6.1499': attribute type 1 has an invalid length.
[  255.981113][T10035] 8021q: adding VLAN 0 to HW filter on device bond1
[  256.008666][T10035] bond1: (slave geneve2): making interface the new active one
[  256.015446][T10035] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  256.025795][T10040] ieee802154 phy0 wpan0: encryption failed: -22
[  256.469708][  T792] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  256.600202][  T792] usb 1-1: device descriptor read/64, error -71
[  256.841852][  T792] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  256.969791][  T792] usb 1-1: device descriptor read/64, error -71
[  257.087804][  T792] usb usb1-port1: attempt power cycle
[  257.748486][ T6014] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[  257.931830][T10068] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1514'.
[  258.011354][  T792] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  258.030598][  T792] usb 1-1: device descriptor read/8, error -71
[  258.041585][ T6014] usb 7-1: config 7 has an invalid interface number: 192 but max is 0
[  258.044946][ T6014] usb 7-1: config 7 has no interface number 0
[  258.047485][ T6014] usb 7-1: config 7 interface 192 has no altsetting 0
[  258.055049][ T6014] usb 7-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=d4.8d
[  258.058717][ T6014] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.062465][ T6014] usb 7-1: Product: syz
[  258.064190][ T6014] usb 7-1: Manufacturer: syz
[  258.065989][ T6014] usb 7-1: SerialNumber: syz
[  258.199666][ T6028] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  258.288571][ T6014] usb 7-1: USB disconnect, device number 7
[  258.299879][  T792] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  258.320490][  T792] usb 1-1: device descriptor read/8, error -71
[  258.351669][ T6028] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  258.355673][ T6028] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 15
[  258.363290][ T6028] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  258.366896][ T6028] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  258.370310][ T6028] usb 6-1: SerialNumber: syz
[  258.381235][ T6028] cdc_ether 6-1:1.0: invalid descriptor buffer length
[  258.389629][ T6028] usb 6-1: bad CDC descriptors
[  258.429899][  T792] usb usb1-port1: unable to enumerate USB device
[  258.589764][  T792] usb 6-1: USB disconnect, device number 9
[  258.871990][T10074] loop6: detected capacity change from 0 to 24
[  258.969187][T10076] loop6: detected capacity change from 0 to 164
[  259.222192][T10088] loop5: detected capacity change from 0 to 512
[  259.235402][T10088] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  259.266213][T10088] EXT4-fs (loop5): 1 truncate cleaned up
[  259.276200][T10088] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.333380][ T8746] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.068432][T10117] loop5: detected capacity change from 0 to 512
[  260.074994][T10117] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  260.085614][T10117] EXT4-fs error (device loop5): ext4_init_orphan_info:611: comm syz.5.1535: orphan file block 0: bad magic
[  260.093349][T10117] EXT4-fs (loop5): mount failed
[  260.653867][T10122] loop5: detected capacity change from 0 to 1024
[  260.656474][T10122] EXT4-fs: Ignoring removed nomblk_io_submit option
[  260.675994][T10122] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.729770][ T8746] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.245242][T10148] netlink: ct family unspecified
[  261.252469][T10148] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  262.064008][T10146] loop5: detected capacity change from 0 to 32768
[  262.100552][T10146] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  262.273453][T10146] XFS (loop5): Ending clean mount
[  262.328771][   T33] audit: type=1804 audit(1759038577.382:4461): pid=10146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1546" name="/newroot/136/file1/file1" dev="loop5" ino=4422 res=1 errno=0
[  262.393514][ T8746] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  263.176904][T10201] trusted_key: encrypted_key: insufficient parameters specified
[  263.441502][T10192] loop6: detected capacity change from 0 to 40427
[  263.451368][T10192] F2FS-fs (loop6): build fault injection rate: 14
[  263.453695][T10192] F2FS-fs (loop6): build fault injection type: 0x3bfe8c
[  263.458720][T10192] F2FS-fs (loop6): invalid crc value
[  263.464292][    C1] F2FS-fs (loop6): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  263.471736][    C1] F2FS-fs (loop6): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  263.512040][T10192] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  263.515519][T10192] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  263.522912][T10192] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  263.966945][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1573'.
[  263.973122][T10218] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  263.984362][T10218] CIFS: Unable to determine destination address
[  264.330591][T10214] loop6: detected capacity change from 0 to 32768
[  264.333583][T10214] XFS: ikeep mount option is deprecated.
[  264.335722][T10214] XFS (loop6): invalid logbufs value: 1 [not 2-8]
[  264.453108][T10238] loop5: detected capacity change from 0 to 1024
[  264.458994][T10238] hfsplus: Unknown parameter '00000000000000000322'
[  264.830213][T10249] loop6: detected capacity change from 0 to 1024
[  264.925929][T10251] netlink: 'syz.6.1589': attribute type 12 has an invalid length.
[  264.930880][T10251] netlink: 'syz.6.1589': attribute type 29 has an invalid length.
[  264.934163][T10251] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1589'.
[  265.026871][   T52] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  265.176724][   T52] usb 1-1: Using ep0 maxpacket: 32
[  265.182304][   T52] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  265.185433][   T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.189939][   T52] usb 1-1: Product: syz
[  265.193408][   T52] usb 1-1: Manufacturer: syz
[  265.195021][   T52] usb 1-1: SerialNumber: syz
[  265.203852][   T52] usb 1-1: config 0 descriptor??
[  265.213947][   T52] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  265.279211][T10253] loop6: detected capacity change from 0 to 32768
[  265.327104][T10253] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  265.392285][T10253] XFS (loop6): Ending clean mount
[  265.399264][T10253] XFS (loop6): Quotacheck needed: Please wait.
[  265.449850][T10253] XFS (loop6): Quotacheck: Done.
[  265.509811][ T9575] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  266.827544][   T52] gspca_ov534_9: reg_r err -71
[  267.125974][   T52] gspca_ov534_9: Unknown sensor 0000
[  267.126081][   T52] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22
[  267.138817][   T52] usb 1-1: USB disconnect, device number 20
[  267.379584][T10290] loop5: detected capacity change from 0 to 512
[  267.393087][T10290] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  267.458585][T10290] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.463765][T10290] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  267.788566][ T8746] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.025217][T10315] loop6: detected capacity change from 0 to 128
[  269.102721][T10315] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  269.133293][T10315] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  269.717988][ T9575] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  270.004832][T10332] netlink: 'syz.6.1613': attribute type 3 has an invalid length.
[  270.137358][T10338] binfmt_misc: register: failed to install interpreter file ./file0
[  270.231547][T10343] tmpfs: Group quota block hardlimit too large.
[  270.630376][T10351] bridge0: entered promiscuous mode
[  271.007728][T10350] loop6: detected capacity change from 0 to 32768
[  271.442363][T10374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1636'.
[  272.416228][T10391] pim6reg1: entered promiscuous mode
[  272.418376][T10391] pim6reg1: entered allmulticast mode
[  272.891671][T10410] loop6: detected capacity change from 0 to 32768
[  272.897887][T10410] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1649 (10410)
[  272.917306][T10410] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  272.920934][T10410] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  272.997160][T10410] BTRFS info (device loop6): setting nodatasum
[  272.999517][T10410] BTRFS info (device loop6): setting nodatacow
[  273.001933][T10410] BTRFS info (device loop6): enabling ssd optimizations
[  273.007251][T10410] BTRFS info (device loop6): using spread ssd allocation scheme
[  273.009491][T10410] BTRFS info (device loop6): turning on sync discard
[  273.011467][T10410] BTRFS info (device loop6): enabling free space tree
[  273.043622][ T9575] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  274.440432][T10466] loop6: detected capacity change from 0 to 256
[  274.451607][T10466] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  274.842265][T10468] hsr0: entered promiscuous mode
[  274.986451][   T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.104956][   T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.245601][   T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.335861][   T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.472645][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  275.479813][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  275.484941][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  275.494826][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  275.498481][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  275.551301][   T13] bridge_slave_1: left allmulticast mode
[  275.554109][   T13] bridge_slave_1: left promiscuous mode
[  275.557934][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.565705][   T13] bridge_slave_0: left allmulticast mode
[  275.567693][   T13] bridge_slave_0: left promiscuous mode
[  275.569694][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.734434][   T13] bond1 (unregistering): (slave geneve2): Releasing active interface
[  275.957750][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  275.963739][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  275.969381][   T13] bond0 (unregistering): Released all slaves
[  276.127652][   T13] bond1 (unregistering): Released all slaves
[  276.540702][T10500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1682'.
[  277.129559][T10483] chnl_net:caif_netlink_parms(): no params data found
[  277.329321][   T13] hsr_slave_0: left promiscuous mode
[  277.338123][   T13] hsr_slave_1: left promiscuous mode
[  277.349686][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  277.354313][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  277.358224][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  277.362578][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  277.387528][   T13] veth1_macvtap: left promiscuous mode
[  277.389484][   T13] veth0_macvtap: left promiscuous mode
[  277.391997][   T13] veth1_vlan: left promiscuous mode
[  277.394051][   T13] veth0_vlan: left promiscuous mode
[  277.586152][ T5968] Bluetooth: hci1: command tx timeout
[  277.790495][ T6027] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  277.963932][ T6027] usb 1-1: Using ep0 maxpacket: 32
[  277.973802][T10527] loop5: detected capacity change from 0 to 256
[  277.994074][   T13] team0 (unregistering): Port device team_slave_1 removed
[  278.000526][ T6027] usb 1-1: unable to get BOS descriptor or descriptor too short
[  278.007523][ T6027] usb 1-1: config 128 has an invalid interface number: 127 but max is 3
[  278.018014][ T6027] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  278.037298][ T6027] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4
[  278.042188][ T6027] usb 1-1: config 128 has no interface number 0
[  278.044688][ T6027] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 28, changing to 8
[  278.048901][ T6027] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 33417, setting to 1024
[  278.054458][ T6027] usb 1-1: config 128 interface 127 has no altsetting 0
[  278.061806][ T6027] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  278.065174][ T6027] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.068295][ T6027] usb 1-1: Product: syz
[  278.070027][ T6027] usb 1-1: Manufacturer: syz
[  278.075916][ T6027] usb 1-1: SerialNumber: syz
[  278.135264][   T13] team0 (unregistering): Port device team_slave_0 removed
[  278.250383][T10533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  278.395774][ T6027] usb 1-1: USB disconnect, device number 21
[  278.436708][ T6040] udevd[6040]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  278.950079][T10539] tipc: Started in network mode
[  278.952325][T10539] tipc: Node identity fc000000000000000000000000000001, cluster identity 4711
[  278.956091][T10539] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  278.963792][T10483] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.994116][T10483] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.997282][T10483] bridge_slave_0: entered allmulticast mode
[  279.011424][T10483] bridge_slave_0: entered promiscuous mode
[  279.016157][T10483] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.019042][T10483] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.028638][T10483] bridge_slave_1: entered allmulticast mode
[  279.046505][T10483] bridge_slave_1: entered promiscuous mode
[  279.144131][T10483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  279.154892][T10483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  279.254255][T10483] team0: Port device team_slave_0 added
[  279.259041][T10483] team0: Port device team_slave_1 added
[  279.423795][T10483] batman_adv: batadv0: Adding interface: batadv_slave_0
[  279.426538][T10483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  279.446839][T10483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  279.465849][T10483] batman_adv: batadv0: Adding interface: batadv_slave_1
[  279.468708][T10483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  279.505393][T10483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  279.612991][T10483] hsr_slave_0: entered promiscuous mode
[  279.622673][T10483] hsr_slave_1: entered promiscuous mode
[  279.629638][T10483] debugfs: 'hsr0' already exists in 'hsr'
[  279.632103][T10483] Cannot create hsr debugfs directory
[  279.663204][ T5968] Bluetooth: hci1: command tx timeout
[  279.888088][T10576] netlink: 'syz.5.1702': attribute type 6 has an invalid length.
[  279.907702][T10576] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1702'.
[  280.342238][T10483] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  280.353923][T10483] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  280.371525][T10483] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  280.392107][T10483] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  280.532984][T10563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  280.575800][T10483] 8021q: adding VLAN 0 to HW filter on device bond0
[  280.590439][T10483] 8021q: adding VLAN 0 to HW filter on device team0
[  280.596537][ T6251] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.599389][ T6251] bridge0: port 1(bridge_slave_0) entered forwarding state
[  280.615450][ T6251] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.618235][ T6251] bridge0: port 2(bridge_slave_1) entered forwarding state
[  280.642854][T10483] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  280.799771][T10483] 8021q: adding VLAN 0 to HW filter on device batadv0
[  280.885494][T10613] fuse: Bad value for 'fd'
[  281.275731][T10483] veth0_vlan: entered promiscuous mode
[  281.286756][T10483] veth1_vlan: entered promiscuous mode
[  281.346829][T10483] veth0_macvtap: entered promiscuous mode
[  281.352881][T10483] veth1_macvtap: entered promiscuous mode
[  281.377996][T10483] batman_adv: batadv0: Interface activated: batadv_slave_0
[  281.396138][T10483] batman_adv: batadv0: Interface activated: batadv_slave_1
[  281.428241][   T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  281.450282][   T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  281.453712][   T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  281.506031][   T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  281.616816][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.628838][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.674723][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.678190][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.738870][ T5968] Bluetooth: hci1: command tx timeout
[  281.983175][T10643] loop7: detected capacity change from 0 to 4096
[  283.626011][ T5968] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  283.630259][ T5968] CPU: 1 UID: 0 PID: 5968 Comm: kworker/u11:4 Not tainted syzkaller #0 PREEMPT(full) 
[  283.630273][ T5968] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  283.630280][ T5968] Workqueue: hci1 hci_rx_work
[  283.630297][ T5968] Call Trace:
[  283.630315][ T5968]  <TASK>
[  283.630321][ T5968]  dump_stack_lvl+0x189/0x250
[  283.630335][ T5968]  ? __pfx_dump_stack_lvl+0x10/0x10
[  283.630346][ T5968]  ? __pfx__printk+0x10/0x10
[  283.630360][ T5968]  ? kernfs_path_from_node+0x250/0x290
[  283.630369][ T5968]  ? kernfs_path_from_node+0x2f/0x290
[  283.630380][ T5968]  sysfs_create_dir_ns+0x259/0x280
[  283.630390][ T5968]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  283.630400][ T5968]  ? do_raw_spin_unlock+0x4d/0x240
[  283.630412][ T5968]  kobject_add_internal+0x59f/0xb40
[  283.630426][ T5968]  kobject_add+0x155/0x220
[  283.630437][ T5968]  ? __pfx_kobject_add+0x10/0x10
[  283.630447][ T5968]  ? _raw_spin_unlock+0x3f/0x50
[  283.630460][ T5968]  ? get_device_parent+0x366/0x3a0
[  283.630473][ T5968]  device_add+0x408/0xb50
[  283.630484][ T5968]  hci_conn_add_sysfs+0xd5/0x1e0
[  283.630496][ T5968]  le_conn_complete_evt+0xc3a/0x1220
[  283.630513][ T5968]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  283.630523][ T5968]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  283.630539][ T5968]  ? __asan_memcpy+0x40/0x70
[  283.630552][ T5968]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  283.630561][ T5968]  ? skb_pull_data+0xfb/0x200
[  283.630575][ T5968]  hci_le_conn_complete_evt+0x187/0x450
[  283.630587][ T5968]  hci_event_packet+0x78f/0x1200
[  283.630600][ T5968]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  283.630609][ T5968]  ? __pfx_hci_event_packet+0x10/0x10
[  283.630621][ T5968]  ? kcov_remote_start+0x4d3/0x7f0
[  283.630632][ T5968]  ? lockdep_hardirqs_on+0x90/0x150
[  283.630643][ T5968]  ? hci_send_to_monitor+0xe2/0x570
[  283.630653][ T5968]  hci_rx_work+0x46a/0xe80
[  283.630668][ T5968]  ? process_scheduled_works+0x9ef/0x17b0
[  283.630677][ T5968]  process_scheduled_works+0xae1/0x17b0
[  283.630712][ T5968]  ? __pfx_process_scheduled_works+0x10/0x10
[  283.630729][ T5968]  worker_thread+0x8a0/0xda0
[  283.630749][ T5968]  kthread+0x711/0x8a0
[  283.630760][ T5968]  ? __pfx_worker_thread+0x10/0x10
[  283.630768][ T5968]  ? __pfx_kthread+0x10/0x10
[  283.630781][ T5968]  ? _raw_spin_unlock_irq+0x23/0x50
[  283.630794][ T5968]  ? lockdep_hardirqs_on+0x9c/0x150
[  283.630801][ T5968]  ? __pfx_kthread+0x10/0x10
[  283.630811][ T5968]  ret_from_fork+0x439/0x7d0
[  283.630820][ T5968]  ? __pfx_ret_from_fork+0x10/0x10
[  283.630831][ T5968]  ? __switch_to_asm+0x39/0x70
[  283.630840][ T5968]  ? __switch_to_asm+0x33/0x70
[  283.630850][ T5968]  ? __pfx_kthread+0x10/0x10
[  283.630860][ T5968]  ret_from_fork_asm+0x1a/0x30
[  283.630877][ T5968]  </TASK>
[  283.630991][ T5968] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  284.013316][T10661] loop5: detected capacity change from 0 to 32768
[  284.023808][T10661] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1723 (10661)
[  284.053840][ T5968] Bluetooth: hci1: failed to register connection device
[  284.059163][ T5968] Bluetooth: hci1: command tx timeout
[  284.078741][T10661] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  284.089442][T10661] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  284.252342][T10661] BTRFS info (device loop5): enabling ssd optimizations
[  284.259670][T10661] BTRFS info (device loop5): enabling free space tree
[  284.420572][ T8746] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  284.736086][T10680] loop7: detected capacity change from 0 to 32768
[  285.407693][T10694] loop5: detected capacity change from 0 to 4096
[  285.648277][T10700] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  285.662396][T10694] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  285.702651][T10694] NILFS (loop5): mounting fs with errors
[  286.363952][T10707] befs: (nbd0): No write support. Marking filesystem read-only
[  286.379046][T10707] block nbd0: Attempted send on invalid socket
[  286.381306][T10707] blk_print_req_error: 11 callbacks suppressed
[  286.381316][T10707] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  286.397847][T10707] befs: (nbd0): unable to read superblock
[  286.694163][T10710] loop7: detected capacity change from 0 to 2048
[  286.714892][T10710] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found!
[  286.767796][T10710] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  287.520615][T10731] loop5: detected capacity change from 0 to 1024
[  287.528507][ T9717] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  287.548046][   T33] audit: type=1800 audit(1759038602.683:4462): pid=10731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1741" name="file1" dev="loop5" ino=20 res=0 errno=0
[  287.680897][T10733] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1742'.
[  287.715065][ T9717] usb 8-1: Using ep0 maxpacket: 16
[  287.720309][ T9717] usb 8-1: config 0 has an invalid interface number: 105 but max is 0
[  287.723427][ T9717] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  287.732791][ T9717] usb 8-1: config 0 has no interface number 0
[  287.741266][ T9717] usb 8-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[  287.745257][ T9717] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.751041][ T9717] usb 8-1: Product: syz
[  287.752521][ T9717] usb 8-1: Manufacturer: syz
[  287.754113][ T9717] usb 8-1: SerialNumber: syz
[  287.759121][ T9717] usb 8-1: config 0 descriptor??
[  287.764709][ T9717] usb 8-1: Found UVC 0.00 device syz (046c:14e8)
[  287.769542][ T9717] usb 8-1: No valid video chain found.
[  287.814140][T10737] loop5: detected capacity change from 0 to 16
[  287.839030][T10737] erofs (device loop5): mounted with root inode @ nid 36.
[  287.965892][ T6028] usb 8-1: USB disconnect, device number 2
[  288.251721][ T7202] block nbd0: Receive control failed (result -32)
[  288.260948][T10727] block nbd0: shutting down sockets
[  288.657825][ T6028] IPVS: starting estimator thread 0...
[  288.781026][T10759] IPVS: using max 33 ests per chain, 79200 per kthread
[  288.879920][T10765] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  289.148371][T10778] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  289.185934][T10780] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  289.645885][T10794] loop7: detected capacity change from 0 to 32768
[  289.677016][T10794] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  289.694897][   T33] audit: type=1800 audit(1759038604.824:4463): pid=10794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1769" name="file1" dev="loop7" ino=17058 res=0 errno=0
[  289.728572][T10483] ocfs2: Unmounting device (7,7) on (node local)
[  290.175450][T10815] loop5: detected capacity change from 0 to 1024
[  290.190403][T10814] loop7: detected capacity change from 0 to 4096
[  290.195135][T10815] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  290.199976][T10815] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  290.207876][T10814] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512).
[  290.211881][T10814] ntfs3(loop7): ino=3, mi_enum_attr
[  290.247307][T10815] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.1777: corrupted xattr block 128: e_value size too large
[  290.315714][ T8746] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.333555][T10823] loop8: detected capacity change from 0 to 8
[  290.354695][ T6040] Dev loop8: unable to read RDB block 8
[  290.366828][ T6040]  loop8: unable to read partition table
[  290.369438][ T6040] loop8: partition table beyond EOD, truncated
[  290.376442][T10823] Dev loop8: unable to read RDB block 8
[  290.378750][T10823]  loop8: unable to read partition table
[  290.381221][T10823] loop8: partition table beyond EOD, truncated
[  290.412580][T10823] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5)
[  290.519857][T10829] loop7: detected capacity change from 0 to 256
[  291.797636][T10874] loop7: detected capacity change from 0 to 2048
[  291.840981][T10874] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  291.849803][T10877] netlink: 'syz.5.1798': attribute type 13 has an invalid length.
[  291.855267][T10877] netlink: 'syz.5.1798': attribute type 17 has an invalid length.
[  292.015801][T10874] overlayfs: upper fs needs to support d_type.
[  292.021997][T10874] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  292.035790][T10874] overlayfs: failed to set xattr on upper
[  292.038251][T10874] overlayfs: ...falling back to redirect_dir=nofollow.
[  292.040785][T10874] overlayfs: ...falling back to index=off.
[  292.042991][T10874] overlayfs: ...falling back to uuid=null.
[  292.127077][T10877] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  292.127907][T10483] UDF-fs: error (device loop7): udf_read_inode: (ino 1317) failed !bh
[  292.141476][T10483] UDF-fs: error (device loop7): udf_read_inode: (ino 1317) failed !bh
[  292.229960][T10889] dummy0: entered promiscuous mode
[  292.236841][T10889] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  292.247084][T10889] hsr1: entered allmulticast mode
[  292.249193][T10889] dummy0: entered allmulticast mode
[  292.257129][T10889] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  292.273232][ T6027] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  292.433722][ T6027] usb 1-1: Using ep0 maxpacket: 32
[  292.439052][ T6027] usb 1-1: unable to get BOS descriptor or descriptor too short
[  292.444810][ T6027] usb 1-1: config 6 has an invalid interface number: 254 but max is 0
[  292.452862][ T6027] usb 1-1: config 6 has no interface number 0
[  292.463689][ T6027] usb 1-1: config 6 interface 254 has no altsetting 0
[  292.482794][ T6027] usb 1-1: New USB device found, idVendor=1b5c, idProduct=0104, bcdDevice=30.00
[  292.492199][ T6027] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.504275][ T6027] usb 1-1: Product: syz
[  292.506042][ T6027] usb 1-1: Manufacturer: syz
[  292.507966][ T6027] usb 1-1: SerialNumber: syz
[  292.547506][T10899] loop5: detected capacity change from 0 to 1024
[  292.584189][T10899] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  292.605740][T10899] EXT4-fs (loop5): Test dummy encryption mode enabled
[  292.608570][T10899] EXT4-fs (loop5): filesystem too large to mount safely on this system
[  292.676064][ T5994] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.755247][ T6027] ftdi_sio 1-1:6.254: FTDI USB Serial Device converter detected
[  292.764683][ T6027] usb 1-1: Detected FT2232HP
[  292.767377][ T6027] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  292.770430][ T6027] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  292.781436][ T6027] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  292.797849][ T6027] usb 1-1: USB disconnect, device number 22
[  292.803673][ T6027] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  292.809750][ T6027] ftdi_sio 1-1:6.254: device disconnected
[  292.870069][ T5994] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.079510][ T5994] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.256476][ T5994] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.476697][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  293.491487][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  293.502184][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  293.513278][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  293.519768][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  293.806692][ T5994] bridge_slave_1: left allmulticast mode
[  293.808947][ T5994] bridge_slave_1: left promiscuous mode
[  293.811704][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.839291][ T5994] bridge_slave_0: left allmulticast mode
[  293.841494][ T5994] bridge_slave_0: left promiscuous mode
[  293.848146][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.182259][ T8959] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  294.363466][ T8959] usb 1-1: Using ep0 maxpacket: 32
[  294.369443][ T8959] usb 1-1: config 254 has an invalid interface number: 185 but max is 0
[  294.373924][ T8959] usb 1-1: config 254 has no interface number 0
[  294.376486][ T8959] usb 1-1: config 254 interface 185 altsetting 255 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  294.380897][ T8959] usb 1-1: config 254 interface 185 has no altsetting 0
[  294.384045][ T8959] usb 1-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=26.0f
[  294.388062][ T8959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.416691][ T8959] aiptek 1-1:254.185: interface has no int in endpoints, but must have minimum 1
[  294.622912][ T8959] usb 1-1: USB disconnect, device number 23
[  294.815809][ T5994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  294.830743][ T5994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  294.842326][ T5994] bond0 (unregistering): Released all slaves
[  295.336807][ T5994] hsr_slave_0: left promiscuous mode
[  295.347473][ T5994] hsr_slave_1: left promiscuous mode
[  295.356118][ T5994] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  295.360487][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_0
[  295.367450][ T5994] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  295.370809][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_1
[  295.437026][ T5994] veth1_macvtap: left promiscuous mode
[  295.439544][ T5994] veth0_macvtap: left promiscuous mode
[  295.445603][ T5994] veth1_vlan: left promiscuous mode
[  295.448283][ T5994] veth0_vlan: left promiscuous mode
[  295.651893][ T5968] Bluetooth: hci1: command tx timeout
[  296.306081][ T5994] team0 (unregistering): Port device team_slave_1 removed
[  296.358337][ T5994] team0 (unregistering): Port device team_slave_0 removed
[  296.887714][T10918] chnl_net:caif_netlink_parms(): no params data found
[  297.081257][T10918] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.083671][T10918] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.086159][T10918] bridge_slave_0: entered allmulticast mode
[  297.100556][T10918] bridge_slave_0: entered promiscuous mode
[  297.116186][T10918] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.119360][T10918] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.130416][T10918] bridge_slave_1: entered allmulticast mode
[  297.144723][T10918] bridge_slave_1: entered promiscuous mode
[  297.237205][T10918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  297.254020][T10918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  297.352367][T10918] team0: Port device team_slave_0 added
[  297.378137][T10918] team0: Port device team_slave_1 added
[  297.422806][T10918] batman_adv: batadv0: Adding interface: batadv_slave_0
[  297.425609][T10918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  297.437136][T10918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  297.442805][T10918] batman_adv: batadv0: Adding interface: batadv_slave_1
[  297.445369][T10918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  297.461189][T10918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  297.527891][T10918] hsr_slave_0: entered promiscuous mode
[  297.530166][T10918] hsr_slave_1: entered promiscuous mode
[  297.534465][T10918] debugfs: 'hsr0' already exists in 'hsr'
[  297.536660][T10918] Cannot create hsr debugfs directory
[  297.735634][ T5968] Bluetooth: hci1: command tx timeout
[  298.253217][T10918] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  298.273452][T10918] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  298.279748][T10918] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  298.293430][T10918] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  298.570916][T11009] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  298.663064][T10918] 8021q: adding VLAN 0 to HW filter on device bond0
[  298.699545][T10918] 8021q: adding VLAN 0 to HW filter on device team0
[  298.716600][T11019] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.725139][T11013] loop5: detected capacity change from 0 to 4096
[  298.737965][T11019] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  298.788152][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.791191][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state
[  298.823124][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.826203][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state
[  298.920584][T10918] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  298.953488][T11027] netlink: 'syz.0.1841': attribute type 83 has an invalid length.
[  299.074545][T11039] loop5: detected capacity change from 0 to 256
[  299.313076][T10918] 8021q: adding VLAN 0 to HW filter on device batadv0
[  299.413380][T11053] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  299.664110][T10918] veth0_vlan: entered promiscuous mode
[  299.673231][T10918] veth1_vlan: entered promiscuous mode
[  299.710847][T10918] veth0_macvtap: entered promiscuous mode
[  299.719197][T10918] veth1_macvtap: entered promiscuous mode
[  299.738689][T10918] batman_adv: batadv0: Interface activated: batadv_slave_0
[  299.751602][T10918] batman_adv: batadv0: Interface activated: batadv_slave_1
[  299.762181][   T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  299.766194][   T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  299.774080][   T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  299.777828][   T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  299.809900][ T5968] Bluetooth: hci1: command tx timeout
[  299.864945][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.868309][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.910936][ T6243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.915298][ T6243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.254679][T11087] tipc: Enabled bearer <eth:vlan0>, priority 10
[  300.304971][T11088] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  300.304971][T11088] The task syz.0.1854 (11088) triggered the difference, watch for misbehavior.
[  300.356236][T11092] netlink: 'syz.8.1857': attribute type 10 has an invalid length.
[  300.376199][T11094] ALSA: mixer_oss: invalid OSS volume ''
[  300.388520][T11092] team0: Port device dummy0 added
[  300.401335][T11092] netlink: 'syz.8.1857': attribute type 10 has an invalid length.
[  300.425888][T11092] team0: Port device dummy0 removed
[  300.454242][T11098] loop5: detected capacity change from 0 to 256
[  300.455566][T11092] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  300.472124][T11098] FAT-fs (loop5): Directory bread(block 64) failed
[  300.474536][T11098] FAT-fs (loop5): Directory bread(block 65) failed
[  300.477048][T11098] FAT-fs (loop5): Directory bread(block 66) failed
[  300.488717][T11098] FAT-fs (loop5): Directory bread(block 67) failed
[  300.490998][T11098] FAT-fs (loop5): Directory bread(block 68) failed
[  300.493145][T11098] FAT-fs (loop5): Directory bread(block 69) failed
[  300.495685][T11098] FAT-fs (loop5): Directory bread(block 70) failed
[  300.498258][T11098] FAT-fs (loop5): Directory bread(block 71) failed
[  300.502304][T11098] FAT-fs (loop5): Directory bread(block 72) failed
[  300.504649][T11098] FAT-fs (loop5): Directory bread(block 73) failed
[  300.717137][T11106] loop5: detected capacity change from 0 to 512
[  300.760881][T11106] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  300.772345][T11106] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  300.837042][T11113] loop8: detected capacity change from 0 to 4096
[  300.878606][T11113] overlayfs: upper fs does not support tmpfile.
[  300.896573][T11113] overlayfs: workdir/#26 already exists
[  300.901616][ T8746] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.204395][T11127] loop8: detected capacity change from 0 to 512
[  301.227257][T11127] EXT4-fs (loop8): Test dummy encryption mode enabled
[  301.239253][T11127] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  301.279450][T11127] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.1872: bad orphan inode 131083
[  301.286508][T11127] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  301.438355][ T5573] tipc: Node number set to 4227858433
[  301.514494][T10918] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.743145][T11137] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  301.891953][ T5968] Bluetooth: hci1: command tx timeout
[  302.739520][T11172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1890'.
[  302.752270][T11172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1890'.
[  302.817118][T11176] netlink: 'syz.5.1893': attribute type 1 has an invalid length.
[  302.825720][T11176] netlink: 'syz.5.1893': attribute type 2 has an invalid length.
[  302.838922][T11176] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1893'.
[  302.935521][T11182] loop5: detected capacity change from 0 to 128
[  302.939631][T11182] vfat: Unknown parameter '0xffffffffffffffff01777777777777777777777'
[  303.102410][T11180] loop8: detected capacity change from 0 to 32768
[  303.453896][T11180] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  303.453922][T11180]   allowing incompatible features above 0.0: (unknown version)
[  303.453932][T11180]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  303.472501][T11180] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0
[  303.475681][T11180] bcachefs (loop8): initializing new filesystem
[  303.489613][T11180] bcachefs (loop8): going read-write
[  303.500228][T11180] bcachefs (loop8): marking superblocks
[  303.509250][T11180] bcachefs (loop8): initializing freespace
[  303.514732][T11180] bcachefs (loop8): done initializing freespace
[  303.519569][T11180] bcachefs (loop8): reading snapshots table
[  303.522051][T11180] bcachefs (loop8): reading snapshots done
[  303.564125][T11180] bcachefs (loop8): done starting filesystem
[  303.617224][T10918] bcachefs (loop8): shutting down
[  303.621936][T10918] bcachefs (loop8): going read-only
[  303.627504][T10918] bcachefs (loop8): finished waiting for writes to stop
[  303.633047][T10918] bcachefs (loop8): flushing journal and stopping allocators, journal seq 4
[  303.682754][T10918] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 4
[  303.687580][T10918] bcachefs (loop8): clean shutdown complete, journal seq 5
[  303.691153][T10918] bcachefs (loop8): marking filesystem clean
[  303.714732][T10918] bcachefs (loop8): shutdown complete
[  303.909390][T11202] netlink: 'syz.5.1901': attribute type 83 has an invalid length.
[  307.115254][T11224] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.336174][T11224] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.488881][T11224] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.584997][T11224] netdevsim netdevsim5 netdevsim0 (unregistering): left promiscuous mode
[  307.590521][T11224] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.732869][ T5992] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  307.759643][   T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  307.786503][   T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  307.808943][ T5992] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  308.206680][T11228] loop5: detected capacity change from 0 to 256
[  308.229527][T11228] MINIX-fs: mounting file system with errors, running fsck is recommended
[  308.249514][T11228] MINIX-fs warning: remounting fs with errors, running fsck is recommended
[  308.470447][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1911'.
[  308.745208][ T6001] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  308.796104][T11241] loop8: detected capacity change from 0 to 8192
[  308.802661][T11241] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  308.957609][ T6001] usb 1-1: config index 0 descriptor too short (expected 149, got 148)
[  308.961033][ T6001] usb 1-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config
[  308.964327][ T6001] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  308.969716][ T6001] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  308.973422][ T6001] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  308.977946][ T6001] usb 1-1: SerialNumber: syz
[  308.989930][ T6001] usb 1-1: 0:2 : does not exist
[  308.991537][ T6001] usb 1-1: unit 48 not found!
[  309.188297][ T6001] usb 1-1: USB disconnect, device number 24
[  309.817441][T11263] trusted_key: syz.8.1916 sent an empty control message without MSG_MORE.
[  310.155846][ T6027] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  310.207420][T11268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1920'.
[  310.417086][ T6027] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  310.421193][ T6027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.427555][ T6027] usb 6-1: config 0 descriptor??
[  310.433446][ T6027] gspca_main: sunplus-2.14.0 probing 055f:c420
[  310.604684][ T5240] Bluetooth: hci1: command 0x0405 tx timeout
[  310.860137][ T6027] gspca_sunplus: reg_w_riv err -71
[  310.861953][ T6027] sunplus 6-1:0.0: probe with driver sunplus failed with error -71
[  310.881142][ T6027] usb 6-1: USB disconnect, device number 10
[  310.890750][T11274] netlink: 'syz.8.1922': attribute type 1 has an invalid length.
[  311.559999][T11292] loop5: detected capacity change from 0 to 2048
[  311.607555][T11292] NILFS (loop5): invalid segment: Inconsistency found
[  311.610431][T11292] NILFS (loop5): trying rollback from an earlier position
[  311.620224][T11292] NILFS (loop5): invalid segment: Checksum error in segment payload
[  311.630183][T11292] NILFS (loop5): error -22 while searching super root
[  311.727240][   T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  311.883854][   T24] usb 9-1: Using ep0 maxpacket: 32
[  311.894982][   T24] usb 9-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  311.898501][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.901761][   T24] usb 9-1: Product: syz
[  311.905726][   T24] usb 9-1: Manufacturer: syz
[  311.908041][   T24] usb 9-1: SerialNumber: syz
[  311.913100][   T24] usb 9-1: config 0 descriptor??
[  312.003361][ T6014] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  312.075998][T11308] loop5: detected capacity change from 0 to 32768
[  312.101465][T11308] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  312.123900][T11308] XFS (loop5): Ending clean mount
[  312.153459][ T6014] usb 1-1: Using ep0 maxpacket: 8
[  312.157022][ T6014] usb 1-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 117, changing to 10
[  312.163291][ T6014] usb 1-1: config 1 interface 0 has no altsetting 0
[  312.169706][ T6014] usb 1-1: New USB device found, idVendor=05ac, idProduct=0215, bcdDevice= 0.40
[  312.174759][ T6014] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.178512][ T6014] usb 1-1: Product: syz
[  312.180176][ T6014] usb 1-1: Manufacturer: syz
[  312.182020][ T6014] usb 1-1: SerialNumber: syz
[  312.198944][ T8746] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  312.780675][   T24] airspy 9-1:0.0: usb_control_msg() failed -71 request 0a
[  312.788177][   T24] airspy 9-1:0.0: Could not detect board
[  312.790629][   T24] airspy 9-1:0.0: probe with driver airspy failed with error -71
[  312.805619][   T24] usb 9-1: USB disconnect, device number 2
[  312.853072][   T52] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  313.007019][   T52] usb 6-1: Using ep0 maxpacket: 32
[  313.015148][   T52] usb 6-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice= d.2d
[  313.018836][   T52] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.022135][   T52] usb 6-1: Product: syz
[  313.025057][   T52] usb 6-1: Manufacturer: syz
[  313.027100][   T52] usb 6-1: SerialNumber: syz
[  313.251135][   T52] aqc111 6-1:1.0: probe with driver aqc111 failed with error -22
[  313.260750][   T52] usb 6-1: USB disconnect, device number 11
[  313.327354][ T6014] usbhid 1-1:1.0: can't add hid device: -71
[  313.330010][ T6014] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  313.343236][ T6014] usb 1-1: USB disconnect, device number 25
[  313.493285][T11334] tipc: Started in network mode
[  313.494966][T11334] tipc: Node identity ac14140f, cluster identity 4711
[  313.498141][T11334] tipc: New replicast peer: 255.255.255.255
[  313.501639][T11334] tipc: Enabled bearer <udp:syz2>, priority 10
[  313.669333][T11344] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1944'.
[  314.249947][T11357] loop5: detected capacity change from 0 to 764
[  314.852442][   T24] tipc: Node number set to 2886997007
[  314.880459][T11372] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1954'.
[  314.888185][T11368] tipc: Enabled bearer <udp:syz0>, priority 10
[  316.135994][T11398] loop5: detected capacity change from 0 to 32768
[  316.188492][T11398] JBD2: Ignoring recovery information on journal
[  316.291489][T11398] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  316.357465][ T8746] ocfs2: Unmounting device (7,5) on (node local)
[  316.850989][   T52] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  317.005920][   T52] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  317.010869][   T52] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  317.015784][   T52] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  317.016205][T11429] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1979'.
[  317.019613][   T52] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  317.031866][   T52] usb 9-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e
[  317.035365][   T52] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.039937][   T52] usb 9-1: Product: syz
[  317.043610][   T52] usb 9-1: Manufacturer: syz
[  317.045319][   T52] usb 9-1: SerialNumber: syz
[  317.051144][ T5573] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  317.051801][   T52] usb 9-1: config 0 descriptor??
[  317.079740][   T52] ti_usb_3410_5052 9-1:0.0: TI USB 3410 1 port adapter converter detected
[  317.090635][   T52] usb 9-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0
[  317.232673][ T5573] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  317.235413][ T5573] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  317.238237][ T5573] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  317.241748][ T5573] usb 6-1: config 220 has no interface number 2
[  317.243797][ T5573] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  317.248337][ T5573] usb 6-1: config 220 interface 0 has no altsetting 0
[  317.251419][ T5573] usb 6-1: config 220 interface 76 has no altsetting 0
[  317.253736][ T5573] usb 6-1: config 220 interface 1 has no altsetting 0
[  317.258000][ T5573] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  317.261283][ T5573] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.268999][  T792] usb 9-1: USB disconnect, device number 3
[  317.272498][ T5573] usb 6-1: Product: syz
[  317.276138][ T5573] usb 6-1: Manufacturer: syz
[  317.277970][ T5573] usb 6-1: SerialNumber: syz
[  317.280740][  T792] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0
[  317.284578][  T792] ti_usb_3410_5052 9-1:0.0: device disconnected
[  317.325128][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  317.327245][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[  317.498452][ T5573] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  317.502027][ T5573] usb 6-1: No valid video chain found.
[  317.504334][ T5573] usb 6-1: selecting invalid altsetting 0
[  317.526702][ T5573] usb 6-1: selecting invalid altsetting 0
[  317.528955][ T5573] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[  317.533918][ T5573] usb 6-1: USB disconnect, device number 12
[  317.816750][T11431] geneve2: entered promiscuous mode
[  317.889158][   T33] audit: type=1326 audit(1759038633.028:4464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11436 comm="syz.8.1982" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b39b8ec29 code=0x7ffc0000
[  317.900730][   T33] audit: type=1326 audit(1759038633.028:4465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11436 comm="syz.8.1982" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b39b8ec29 code=0x7ffc0000
[  318.357640][T11456] loop5: detected capacity change from 0 to 64
[  318.954882][  T792] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  319.021792][ T7202] block nbd8: Receive control failed (result -32)
[  319.029463][T11448] block nbd8: shutting down sockets
[  319.036824][T11481] loop5: detected capacity change from 0 to 4096
[  319.086729][T11483] loop8: detected capacity change from 0 to 2048
[  319.093270][T11483] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024)
[  319.106113][T11484] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  319.127169][  T792] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  319.132964][  T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.149573][  T792] usb 1-1: config 0 descriptor??
[  319.384778][  T792] usb 1-1: Cannot read MAC address
[  319.387067][  T792] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  319.400287][  T792] usb 1-1: USB disconnect, device number 26
[  319.522656][T11485] NILFS (loop8): error -2 truncating bmap (ino=16)
[  319.610591][T11489] loop5: detected capacity change from 0 to 32768
[  319.632616][T11489] bcachefs (/dev/loop5): error validating superblock: Invalid superblock layout: no superblocks
[  319.636091][T11489] bcachefs: bch2_fs_get_tree() error: invalid_sb_layout_nr_superblocks
[  319.751942][T11491] loop5: detected capacity change from 0 to 1024
[  319.795642][T11491] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  319.809887][T11491] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  319.876655][ T8746] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.015142][T11505] netlink: del zone limit has 4 unknown bytes
[  320.033167][T11502] netlink: set zone limit has 4 unknown bytes
[  320.136342][T11515] loop8: detected capacity change from 0 to 128
[  320.140244][T11515] EXT4-fs (loop8): Test dummy encryption mode enabled
[  320.144531][T11515] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0082]
[  320.147169][T11515] System zones: 1-3, 19-19, 35-36
[  320.153370][T11515] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  320.161567][T11515] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  320.232747][T11520] ==================================================================
[  320.236010][T11520] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  320.239123][T11520] Read of size 4 at addr ffff8881202540c4 by task syz.0.2019/11520
[  320.243034][T11520] 
[  320.244489][T11520] CPU: 1 UID: 0 PID: 11520 Comm: syz.0.2019 Not tainted syzkaller #0 PREEMPT(full) 
[  320.244508][T11520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  320.244520][T11520] Call Trace:
[  320.244527][T11520]  <TASK>
[  320.244535][T11520]  dump_stack_lvl+0x189/0x250
[  320.244556][T11520]  ? __kasan_check_byte+0x12/0x40
[  320.244579][T11520]  ? __pfx_dump_stack_lvl+0x10/0x10
[  320.244597][T11520]  ? lock_release+0x4b/0x3e0
[  320.244620][T11520]  ? __virt_addr_valid+0x4a5/0x5c0
[  320.244638][T11520]  print_report+0xca/0x240
[  320.244679][T11520]  ? xfrm_alloc_spi+0x570/0xf30
[  320.244699][T11520]  kasan_report+0x118/0x150
[  320.244720][T11520]  ? xfrm_alloc_spi+0x570/0xf30
[  320.244741][T11520]  xfrm_alloc_spi+0x570/0xf30
[  320.244759][T11520]  ? xfrm_alloc_spi+0x2a0/0xf30
[  320.244781][T11520]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  320.244799][T11520]  ? xfrm_find_acq+0x87/0xa0
[  320.244819][T11520]  xfrm_alloc_userspi+0x70b/0xc90
[  320.244844][T11520]  ? apparmor_capable+0x137/0x1b0
[  320.244861][T11520]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  320.244882][T11520]  ? __nla_parse+0x40/0x60
[  320.244900][T11520]  xfrm_user_rcv_msg+0x7a3/0xab0
[  320.244920][T11520]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  320.244950][T11520]  ? __pfx___mutex_trylock_common+0x10/0x10
[  320.244967][T11520]  ? rcu_is_watching+0x15/0xb0
[  320.244982][T11520]  ? trace_contention_end+0x39/0x120
[  320.244997][T11520]  ? __mutex_lock+0x335/0x1350
[  320.245016][T11520]  netlink_rcv_skb+0x208/0x470
[  320.245032][T11520]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  320.245052][T11520]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  320.245072][T11520]  ? netlink_deliver_tap+0x2e/0x1b0
[  320.245088][T11520]  ? netlink_deliver_tap+0x2e/0x1b0
[  320.245103][T11520]  xfrm_netlink_rcv+0x79/0x90
[  320.245141][T11520]  netlink_unicast+0x82f/0x9e0
[  320.245164][T11520]  ? __pfx_netlink_unicast+0x10/0x10
[  320.245184][T11520]  ? netlink_sendmsg+0x642/0xb30
[  320.245198][T11520]  ? skb_put+0x11b/0x210
[  320.245215][T11520]  netlink_sendmsg+0x805/0xb30
[  320.245232][T11520]  ? __pfx_netlink_sendmsg+0x10/0x10
[  320.245248][T11520]  ? aa_sock_msg_perm+0xf1/0x1d0
[  320.245261][T11520]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  320.245276][T11520]  ? __pfx_netlink_sendmsg+0x10/0x10
[  320.245290][T11520]  __sock_sendmsg+0x21c/0x270
[  320.245311][T11520]  ____sys_sendmsg+0x505/0x830
[  320.245330][T11520]  ? __pfx_____sys_sendmsg+0x10/0x10
[  320.245355][T11520]  ? import_iovec+0x74/0xa0
[  320.245376][T11520]  ___sys_sendmsg+0x21f/0x2a0
[  320.245394][T11520]  ? __pfx____sys_sendmsg+0x10/0x10
[  320.245424][T11520]  ? __fget_files+0x2a/0x420
[  320.245436][T11520]  ? __fget_files+0x3a0/0x420
[  320.245451][T11520]  __x64_sys_sendmsg+0x19b/0x260
[  320.245468][T11520]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  320.245488][T11520]  ? rcu_is_watching+0x15/0xb0
[  320.245503][T11520]  ? do_syscall_64+0xbe/0x3b0
[  320.245523][T11520]  do_syscall_64+0xfa/0x3b0
[  320.245537][T11520]  ? lockdep_hardirqs_on+0x9c/0x150
[  320.245551][T11520]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.245565][T11520]  ? exc_page_fault+0x9f/0xf0
[  320.245578][T11520]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.245592][T11520] RIP: 0033:0x7f234a78ec29
[  320.245607][T11520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  320.245619][T11520] RSP: 002b:00007f234b57d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  320.245636][T11520] RAX: ffffffffffffffda RBX: 00007f234a9d5fa0 RCX: 00007f234a78ec29
[  320.245676][T11520] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  320.245687][T11520] RBP: 00007f234a811e41 R08: 0000000000000000 R09: 0000000000000000
[  320.245696][T11520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  320.245705][T11520] R13: 00007f234a9d6038 R14: 00007f234a9d5fa0 R15: 00007fffdc2cfe78
[  320.245722][T11520]  </TASK>
[  320.245728][T11520] 
[  320.398747][T11520] Allocated by task 9145:
[  320.400434][T11520]  kasan_save_track+0x3e/0x80
[  320.402403][T11520]  __kasan_slab_alloc+0x6c/0x80
[  320.404447][T11520]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  320.406851][T11520]  xfrm_state_alloc+0x24/0x2f0
[  320.408781][T11520]  xfrm_state_find+0x37d4/0x5400
[  320.410759][T11520]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  320.413192][T11520]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  320.415410][T11520]  xfrm_lookup_route+0x3c/0x1c0
[  320.417433][T11520]  rawv6_sendmsg+0xdab/0x1820
[  320.419400][T11520]  __sock_sendmsg+0x19c/0x270
[  320.421361][T11520]  ____sys_sendmsg+0x52d/0x830
[  320.423350][T11520]  ___sys_sendmsg+0x21f/0x2a0
[  320.425287][T11520]  __sys_sendmmsg+0x227/0x430
[  320.427342][T11520]  __x64_sys_sendmmsg+0xa0/0xc0
[  320.429511][T11520]  do_syscall_64+0xfa/0x3b0
[  320.431493][T11520]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.434078][T11520] 
[  320.435077][T11520] Freed by task 52:
[  320.436658][T11520]  kasan_save_track+0x3e/0x80
[  320.438612][T11520]  kasan_save_free_info+0x46/0x50
[  320.440704][T11520]  __kasan_slab_free+0x5b/0x80
[  320.442572][T11520]  kmem_cache_free+0x18f/0x400
[  320.444568][T11520]  xfrm_state_gc_task+0x52d/0x6b0
[  320.446778][T11520]  process_scheduled_works+0xae1/0x17b0
[  320.449252][T11520]  worker_thread+0x8a0/0xda0
[  320.451177][T11520]  kthread+0x711/0x8a0
[  320.452912][T11520]  ret_from_fork+0x439/0x7d0
[  320.454817][T11520]  ret_from_fork_asm+0x1a/0x30
[  320.457283][T11520] 
[  320.458341][T11520] The buggy address belongs to the object at ffff888120254000
[  320.458341][T11520]  which belongs to the cache xfrm_state of size 928
[  320.463989][T11520] The buggy address is located 196 bytes inside of
[  320.463989][T11520]  freed 928-byte region [ffff888120254000, ffff8881202543a0)
[  320.469608][T11520] 
[  320.470614][T11520] The buggy address belongs to the physical page:
[  320.473197][T11520] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888120254480 pfn:0x120254
[  320.477093][T11520] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  320.480425][T11520] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  320.483379][T11520] page_type: f5(slab)
[  320.485004][T11520] raw: 057ff00000000040 ffff88801c7ebb40 ffffea0004494700 0000000000000002
[  320.487961][T11520] raw: ffff888120254480 00000000000e0000 00000000f5000000 0000000000000000
[  320.490723][T11520] head: 057ff00000000040 ffff88801c7ebb40 ffffea0004494700 0000000000000002
[  320.493605][T11520] head: ffff888120254480 00000000000e0000 00000000f5000000 0000000000000000
[  320.496653][T11520] head: 057ff00000000002 ffffea0004809501 00000000ffffffff 00000000ffffffff
[  320.499320][T11520] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  320.502696][T11520] page dumped because: kasan: bad access detected
[  320.505328][T11520] page_owner tracks the page as allocated
[  320.507690][T11520] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7103, tgid 7102 (syz.0.443), ts 127903314187, free_ts 127396227775
[  320.515009][T11520]  post_alloc_hook+0x240/0x2a0
[  320.516843][T11520]  get_page_from_freelist+0x21e4/0x22c0
[  320.518976][T11520]  __alloc_frozen_pages_noprof+0x181/0x370
[  320.521211][T11520]  alloc_pages_mpol+0x232/0x4a0
[  320.523175][T11520]  allocate_slab+0x8a/0x370
[  320.525067][T11520]  ___slab_alloc+0xbeb/0x1420
[  320.526919][T11520]  kmem_cache_alloc_noprof+0x283/0x3c0
[  320.528941][T11520]  xfrm_state_alloc+0x24/0x2f0
[  320.530900][T11520]  __find_acq_core+0x8a7/0x1c00
[  320.532820][T11520]  xfrm_find_acq+0x78/0xa0
[  320.534644][T11520]  xfrm_alloc_userspi+0x6b3/0xc90
[  320.536686][T11520]  xfrm_user_rcv_msg+0x7a3/0xab0
[  320.538683][T11520]  netlink_rcv_skb+0x208/0x470
[  320.540492][T11520]  xfrm_netlink_rcv+0x79/0x90
[  320.542289][T11520]  netlink_unicast+0x82f/0x9e0
[  320.544201][T11520]  netlink_sendmsg+0x805/0xb30
[  320.546168][T11520] page last free pid 7079 tgid 7079 stack trace:
[  320.548754][T11520]  __free_frozen_pages+0xbc4/0xd30
[  320.550813][T11520]  stack_depot_save_flags+0x436/0x860
[  320.553004][T11520]  kasan_save_track+0x4f/0x80
[  320.554855][T11520]  __kasan_kmalloc+0x93/0xb0
[  320.556740][T11520]  __kmalloc_cache_noprof+0x230/0x3d0
[  320.558773][T11520]  kobject_uevent_env+0x27c/0x8c0
[  320.560682][T11520]  disk_force_media_change+0xfe/0x1b0
[  320.562784][T11520]  lo_release+0x492/0x7c0
[  320.564554][T11520]  bdev_release+0x536/0x650
[  320.566419][T11520]  blkdev_release+0x15/0x20
[  320.568378][T11520]  __fput+0x44c/0xa70
[  320.570169][T11520]  task_work_run+0x1d4/0x260
[  320.572136][T11520]  exit_to_user_mode_loop+0xec/0x110
[  320.574161][T11520]  do_syscall_64+0x2bd/0x3b0
[  320.576033][T11520]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.578312][T11520] 
[  320.579237][T11520] Memory state around the buggy address:
[  320.581426][T11520]  ffff888120253f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  320.584718][T11520]  ffff888120254000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  320.588026][T11520] >ffff888120254080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  320.591150][T11520]                                            ^
[  320.593492][T11520]  ffff888120254100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  320.596565][T11520]  ffff888120254180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  320.599851][T11520] ==================================================================
[  320.603404][    C1] vkms_vblank_simulate: vblank timer overrun
[  320.606075][T11520] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  320.608967][T11520] CPU: 1 UID: 0 PID: 11520 Comm: syz.0.2019 Not tainted syzkaller #0 PREEMPT(full) 
[  320.612532][T11520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  320.616311][T11520] Call Trace:
[  320.617654][T11520]  <TASK>
[  320.618832][T11520]  dump_stack_lvl+0x99/0x250
[  320.620681][T11520]  ? __asan_memcpy+0x40/0x70
[  320.622568][T11520]  ? __pfx_dump_stack_lvl+0x10/0x10
[  320.624666][T11520]  ? __pfx__printk+0x10/0x10
[  320.626541][T11520]  vpanic+0x281/0x750
[  320.628167][T11520]  ? __pfx_vpanic+0x10/0x10
[  320.630050][T11520]  ? irqentry_exit+0x74/0x90
[  320.631807][T11520]  panic+0xb9/0xc0
[  320.633258][T11520]  ? __pfx_panic+0x10/0x10
[  320.634938][T11520]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  320.637200][T11520]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  320.639632][T11520]  ? xfrm_alloc_spi+0x570/0xf30
[  320.641659][T11520]  check_panic_on_warn+0x89/0xb0
[  320.643721][T11520]  ? xfrm_alloc_spi+0x570/0xf30
[  320.645659][T11520]  end_report+0x78/0x160
[  320.647406][T11520]  kasan_report+0x129/0x150
[  320.649258][T11520]  ? xfrm_alloc_spi+0x570/0xf30
[  320.651239][T11520]  xfrm_alloc_spi+0x570/0xf30
[  320.653123][T11520]  ? xfrm_alloc_spi+0x2a0/0xf30
[  320.655011][T11520]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  320.656983][T11520]  ? xfrm_find_acq+0x87/0xa0
[  320.658757][T11520]  xfrm_alloc_userspi+0x70b/0xc90
[  320.660834][T11520]  ? apparmor_capable+0x137/0x1b0
[  320.662926][T11520]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  320.665144][T11520]  ? __nla_parse+0x40/0x60
[  320.666783][T11520]  xfrm_user_rcv_msg+0x7a3/0xab0
[  320.668590][T11520]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  320.670648][T11520]  ? __pfx___mutex_trylock_common+0x10/0x10
[  320.672822][T11520]  ? rcu_is_watching+0x15/0xb0
[  320.674754][T11520]  ? trace_contention_end+0x39/0x120
[  320.676549][T11520]  ? __mutex_lock+0x335/0x1350
[  320.678057][T11520]  netlink_rcv_skb+0x208/0x470
[  320.679542][T11520]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  320.681784][T11520]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  320.683858][T11520]  ? netlink_deliver_tap+0x2e/0x1b0
[  320.685806][T11520]  ? netlink_deliver_tap+0x2e/0x1b0
[  320.687811][T11520]  xfrm_netlink_rcv+0x79/0x90
[  320.689729][T11520]  netlink_unicast+0x82f/0x9e0
[  320.691713][T11520]  ? __pfx_netlink_unicast+0x10/0x10
[  320.693880][T11520]  ? netlink_sendmsg+0x642/0xb30
[  320.695852][T11520]  ? skb_put+0x11b/0x210
[  320.697538][T11520]  netlink_sendmsg+0x805/0xb30
[  320.699421][T11520]  ? __pfx_netlink_sendmsg+0x10/0x10
[  320.701446][T11520]  ? aa_sock_msg_perm+0xf1/0x1d0
[  320.703398][T11520]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  320.705438][T11520]  ? __pfx_netlink_sendmsg+0x10/0x10
[  320.707442][T11520]  __sock_sendmsg+0x21c/0x270
[  320.709341][T11520]  ____sys_sendmsg+0x505/0x830
[  320.711327][T11520]  ? __pfx_____sys_sendmsg+0x10/0x10
[  320.713501][T11520]  ? import_iovec+0x74/0xa0
[  320.715364][T11520]  ___sys_sendmsg+0x21f/0x2a0
[  320.717171][T11520]  ? __pfx____sys_sendmsg+0x10/0x10
[  320.719218][T11520]  ? __fget_files+0x2a/0x420
[  320.721072][T11520]  ? __fget_files+0x3a0/0x420
[  320.722934][T11520]  __x64_sys_sendmsg+0x19b/0x260
[  320.724848][T11520]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  320.726951][T11520]  ? rcu_is_watching+0x15/0xb0
[  320.728905][T11520]  ? do_syscall_64+0xbe/0x3b0
[  320.730847][T11520]  do_syscall_64+0xfa/0x3b0
[  320.732797][T11520]  ? lockdep_hardirqs_on+0x9c/0x150
[  320.734903][T11520]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.737239][T11520]  ? exc_page_fault+0x9f/0xf0
[  320.739071][T11520]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.741311][T11520] RIP: 0033:0x7f234a78ec29
[  320.743072][T11520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  320.750434][T11520] RSP: 002b:00007f234b57d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  320.753631][T11520] RAX: ffffffffffffffda RBX: 00007f234a9d5fa0 RCX: 00007f234a78ec29
[  320.756946][T11520] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  320.760169][T11520] RBP: 00007f234a811e41 R08: 0000000000000000 R09: 0000000000000000
[  320.763940][T11520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  320.767081][T11520] R13: 00007f234a9d6038 R14: 00007f234a9d5fa0 R15: 00007fffdc2cfe78
[  320.770255][T11520]  </TASK>
[  320.772299][T11520] Kernel Offset: disabled
[  320.774026][T11520] Rebooting in 86400 seconds..

VM DIAGNOSIS:
05:46:19  Registers:
info registers vcpu 0

CPU#0
RAX=f1d66a473633cf00 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000000
RSI=ffffffff8be33f60 RDI=ffffffff8be33f20 RBP=ffffffff8210055e RSP=ffffc90006fb7840
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=ffffed1020ffcac9
R12=0000000000000000 R13=ffff8880305c4af8 R14=0000000000000000 R15=0000000000000001
RIP=ffffffff8b7a7167 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f2b3aaa86c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2e91dff8 CR3=0000000037d0a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=65756e69746e6f63 3d73726f7272652c XMM01=ffffffff00000000 0000000000000000
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 00007f2b3aaa76e0
XMM06=00007f2b3aaa76e0 00007f2b3aaa7560 XMM07=00007f2b3aaa75a0 00007f2b3aaa7580
XMM08=abf4ff3d1f7c36dc ca7f9a8dccff3549 XMM09=0000000000000000 00007f2b39c12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bee60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000001583 RDI=0000000000001584 RBP=ffffffff99df76f0 RSP=ffffc90006fa6990
R8 =ffff888106ab0237 R9 =1ffff11020d56046 R10=dffffc0000000000 R11=ffffffff854facd0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df7460 R15=0000000000000000
RIP=ffffffff854fad47 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f234b57d6c0 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000280 CR3=000000011c58e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f234a9a7498 00007f234a9a7470 XMM03=00007f234a9a74a8 00007f234a9a74a0
XMM04=00007f234b50d100 00007f234a9a7460 XMM05=00007f234a9a7478 00007f234a9a74c0
XMM06=00007f234a9a74b8 00007f234a9a74b0 XMM07=00007f234a9a74a8 00007f234a9a74a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f234a812fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
