last executing test programs:

7m30.707141094s ago: executing program 32 (id=394):
syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
close(0x3)

6m14.675280901s ago: executing program 33 (id=1298):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ustat(0xfffffffffffffffc, 0x0)

4m59.916318504s ago: executing program 34 (id=2344):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="e2", 0x1}], 0x1}, 0x4040001)
setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4)
recvmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x100)

4m38.290006353s ago: executing program 5 (id=2678):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x9c0, 0x1}, {0x7f, 0x0, 0x3, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d3, 0x3c}, 0xa, @in=@multicast2, 0xffffffff, 0x4, 0x0, 0x9, 0x0, 0x4000000, 0x1}}, 0xe8)

4m38.20329205s ago: executing program 5 (id=2679):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x68})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3})

4m37.89196578s ago: executing program 5 (id=2686):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e64000000080002400000000058000000200a0101000b000000000000010000000900020073797a30000000000900010073797a30"], 0xf8}}, 0x0)

4m37.816577272s ago: executing program 5 (id=2689):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000140)={[{@grpquota}, {@delalloc}, {@usrjquota}, {@nomblk_io_submit}, {@nodioread_nolock}, {}, {@grpquota}, {@inlinecrypt}]}, 0xfe, 0x5e2, &(0x7f0000000dc0)="$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")
syz_emit_ethernet(0x72, 0x0, 0x0)
mkdir(&(0x7f0000000080)='./bus\x00', 0x3)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x40000, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000780)=@v1={0x0, @adiantum, 0x0, @desc1})
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})

4m37.602840507s ago: executing program 5 (id=2696):
syz_read_part_table(0x106a, &(0x7f0000000000)="$eJzsz71JBUEUBeAzO2/X2dQGbMPQQDAxVOzFRAVLsALBxMhYO7ALwQq2gZFdRLABfcH3RffnwOWGfzUP7fAlOb6vD2lJbpNcjUnqNCUpP8G39/O1GR+XdpBSc7Lbxv316fqz977WNdmdLRcZ+0356MO2L6dz+3VwuDvq3/nUy+e//BUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9tVXAAAA//88gxiI")

4m36.962144682s ago: executing program 5 (id=2705):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x14, 0x20, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x4, 0x117}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0)

4m36.729087224s ago: executing program 35 (id=2705):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x14, 0x20, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x4, 0x117}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0)

4m20.015629223s ago: executing program 4 (id=2896):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x5, &(0x7f0000006680))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

4m20.015497247s ago: executing program 4 (id=2897):
mq_open(&(0x7f0000000100)='\xd3\x9cqG?\x99\\\x8b\x89\x15\xb9\x8a\xa5\x0e\xa2\xfa\x05.\xc2\xd7?\xd8\xba{j\\\xc2`:f\x13\xa2\xcaS\xa4,^^&\x86\xdei\xc80\x14\x92\xeaY\xdf\xc3@\xc6W\xb8\x11\xbe\xd4D\xec\x9e1\x12{', 0xc0, 0x0, &(0x7f0000000040)={0x800000000000, 0x4000000, 0x7, 0x4})

4m19.849711021s ago: executing program 4 (id=2898):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x1d, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x600}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x87, &(0x7f0000000480)=""/135}, 0x21)

4m19.789198383s ago: executing program 4 (id=2899):
syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @local, {[@fragment={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, @dstopts={0x0, 0x3, '\x00', [@generic={0x0, 0x17, "58090e541b64f22a8982d3f5aaacd21a0ca186608b74f1"}]}]}}}}}, 0x0)

4m19.788931395s ago: executing program 4 (id=2900):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e000000000000000800000004c17d23"], 0x50)

4m17.996265902s ago: executing program 4 (id=2920):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x20008001)
recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1)

4m17.892478373s ago: executing program 36 (id=2920):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x20008001)
recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1)

2m43.992906284s ago: executing program 6 (id=4235):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)

2m43.858544659s ago: executing program 6 (id=4239):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
shutdown(r0, 0x1)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x41, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0)

2m42.967507407s ago: executing program 6 (id=4253):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {0x6, 0x7fff, 0xb25, 0xb}, 0x6, [0x9, 0x8, 0x5, 0x6, 0xb17, 0x3, 0xafc, 0x32, 0x838, 0x1000009, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x103, 0xfffffffd, 0x9, 0x10, 0x8001, 0x5, 0x2, 0xd4a, 0xffefe87e, 0x1, 0x6, 0x9, 0x9, 0x8, 0x0, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x80000001, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x26, 0xfffffffa, 0x2, 0xa45, 0x1df, 0xffff, 0x3, 0x2, 0x9, 0xf, 0x101, 0x9f, 0x9a0], [0x3, 0x6, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x100005, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x7f, 0x10000, 0x7, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x6, 0x1, 0x1, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x3, 0x3, 0x2, 0x8, 0x6, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x0, 0x3, 0x7, 0x6, 0x4, 0x4, 0xfff, 0x4], [0xfffffffe, 0x9, 0x6, 0x10000, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x9, 0x74, 0x283, 0x2, 0x4d, 0x6, 0x4, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0x8, 0x0, 0x4, 0x2, 0x80008001, 0x9, 0x1, 0xffff, 0x1, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x5, 0x80000001, 0x53c2, 0x200000, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x420, 0xfe6c, 0x802, 0x9], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x8, 0x1003, 0x101, 0x4, 0x9, 0x7, 0x7, 0x1, 0x8001, 0x1, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x2, 0x0, 0x3, 0x2, 0xffffffe3, 0xfffffff1, 0x5, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x402005, 0xe, 0xee6, 0x800, 0x7, 0x3, 0x1, 0x7, 0x3, 0x9, 0xc, 0x4, 0x1, 0x1, 0x3, 0x296, 0x4, 0xb, 0xf, 0x4, 0x6, 0x7, 0xd, 0x56be]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x6, 0x101}, 0xfffffffd, [0x8, 0x0, 0x0, 0x4, 0x1, 0x0, 0x401, 0x0, 0x4, 0x20008001, 0x2000, 0x3, 0x0, 0x0, 0x80, 0x80001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, 0x90, 0x801, 0x833, 0x2, 0x0, 0x0, 0x2, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0xfffffff9, 0x0, 0x3, 0xfffffffc, 0x0, 0x1fc00, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0xffff1e06, 0x7], [0xfffffffd, 0x3, 0x6, 0x0, 0x0, 0x5, 0x3, 0xff, 0x101, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x6189fbd8, 0x0, 0x400000, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x9e2b, 0x4, 0xfffffffa, 0x5, 0x7aae62b1, 0x100000, 0x0, 0x40002, 0xffffffff, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xfd5], [0x0, 0xfffffffe, 0x0, 0xd1, 0x0, 0x0, 0x0, 0xfa, 0x0, 0x0, 0x3, 0x7, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x8000000, 0x8, 0x0, 0x0, 0x99, 0x7fff, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x80000, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdf, 0x4a92, 0xf152, 0x0, 0x10004, 0xfffffffc, 0x0, 0xff, 0x0, 0x800, 0x0, 0x27d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9bf, 0x800, 0x5, 0x0, 0x0, 0x8, 0x0, 0x7ff, 0x0, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x735, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xb6, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c)

2m42.863845156s ago: executing program 6 (id=4254):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000840)='./file0/file0\x00', &(0x7f0000000880)='./file0/file0\x00', 0x0, 0xa53059, 0x0)
mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0)
unshare(0x22020600)
mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0)

2m42.80114662s ago: executing program 6 (id=4255):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0xb})

2m42.515355119s ago: executing program 6 (id=4259):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_MPLS_TTL={0x5, 0x7, 0x8}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

2m42.366983762s ago: executing program 37 (id=4259):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_MPLS_TTL={0x5, 0x7, 0x8}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

2m9.257384353s ago: executing program 8 (id=4576):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f00000005c0)=[{0x17, '\x00', @st={0x4, [{0x0, @svalue=0xe8}, {0x0, @svalue=0x7}, {0x1, @svalue=0xcf4}, {0x1, @svalue=0xfffffffffffffffe}]}, 0x4}, {0x21, '\x00', @buffer={"63b8d753721b6350d526caa57447b837828a7107016d9dca0aa3db8b598efe8c", 0x20}, 0x9}, {0x12, '\x00', @data=0xfffffffc, 0xe6}]})

2m9.255317415s ago: executing program 8 (id=4578):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0)
r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2)
io_uring_enter(r0, 0x2219, 0x1adf, 0x16, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f0000000000)=[{0x34, 0x0, 0x0, 0x2}]})

2m8.576928963s ago: executing program 8 (id=4586):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x7f, 0xb})
fcntl$lock(r0, 0x7, &(0x7f0000000600)={0x2, 0x0, 0x1, 0x4})

2m8.57286128s ago: executing program 8 (id=4587):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x45f, &(0x7f0000000ec0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x1c1)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x80086601, 0x0)

2m8.44292987s ago: executing program 8 (id=4588):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

2m8.217814718s ago: executing program 8 (id=4591):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
write$char_usb(r0, &(0x7f0000000640)="ead788c2d4ffa752", 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40)

2m8.052442088s ago: executing program 38 (id=4591):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
write$char_usb(r0, &(0x7f0000000640)="ead788c2d4ffa752", 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40)

1m44.717358002s ago: executing program 9 (id=4827):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080))
writev(r0, &(0x7f00000013c0)=[{&(0x7f0000001300)="ab93934e92e9fefb70cb832c1c3d351c4497bb7e0e8efb38eef23592c2f8f174fa0f212932defa65c00f1dc4cd622f2f", 0x30}], 0x1)

1m44.558630562s ago: executing program 9 (id=4830):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000400)=@sack_info={0x0, 0x0, 0x7}, 0xc)

1m44.447776241s ago: executing program 9 (id=4831):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f0000002480)="e0", 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
getsockopt$inet_opts(r0, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b)

1m44.370089938s ago: executing program 9 (id=4832):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x21008, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0)
mount$bind(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x20000, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0)

1m44.29046079s ago: executing program 9 (id=4833):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002e40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a"], 0x18c0}, 0x1, 0x0, 0x0, 0x45}, 0x0)

1m44.09256926s ago: executing program 9 (id=4836):
r0 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000580)="80", 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1}, 0x40000010)

1m43.878657851s ago: executing program 39 (id=4836):
r0 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000580)="80", 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1}, 0x40000010)

1m3.988172038s ago: executing program 0 (id=5378):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x70bd2b, 0x35dfdbff, {0xa, 0x0, 0x80, 0x0, 0x0, 0x7}, [@IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x24000000)

1m3.16248489s ago: executing program 0 (id=5388):
setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006})
capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080))
mlock2(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x0)
mlock2(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x0)

1m3.088086994s ago: executing program 0 (id=5391):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "0eb572f0ed"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x0)

1m3.028466842s ago: executing program 0 (id=5394):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200010e, &(0x7f0000000140)={[{@inlinecrypt}, {@nodelalloc}, {@jqfmt_vfsold}, {@test_dummy_encryption}, {@block_validity}, {@quota}]}, 0x3, 0x460, &(0x7f0000001380)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=')

1m2.828296264s ago: executing program 0 (id=5398):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000080000000000000000000000850000002800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="f6b9000000000000000400000000", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

1m2.538639752s ago: executing program 0 (id=5401):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0xc00}]}}, 0x0, 0x26, 0x0, 0x7, 0x1}, 0x28)

1m2.456763682s ago: executing program 40 (id=5401):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0xc00}]}}, 0x0, 0x26, 0x0, 0x7, 0x1}, 0x28)

51.296765931s ago: executing program 7 (id=5546):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x14, 0x1, 0xa, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x800)

51.296534737s ago: executing program 7 (id=5547):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}}, 0x0)

51.236703764s ago: executing program 7 (id=5550):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
close_range(r0, r0, 0x2)
syz_io_uring_setup(0x2163, &(0x7f00000001c0)={0x0, 0xf531, 0x80, 0x1, 0x32}, 0x0, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1)

51.175280382s ago: executing program 7 (id=5553):
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff)

51.117047758s ago: executing program 7 (id=5555):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000500000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000808500000004000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc)

50.72575973s ago: executing program 7 (id=5564):
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})

50.602550659s ago: executing program 41 (id=5564):
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})

2.733908647s ago: executing program 1 (id=6158):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000854}, 0x40)

2.603062684s ago: executing program 1 (id=6159):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={<r2=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000380)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdc02, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x13}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040001}, 0x0)

2.158867072s ago: executing program 1 (id=6162):
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00')
close_range(r0, 0xffffffffffffffff, 0x0)

2.158640263s ago: executing program 1 (id=6163):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8080)
syz_clone(0x2183000, 0x0, 0x29, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8924, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x29, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, 0x0)
move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0)
fsmount(r2, 0x0, 0x0)
mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e')

1.493500041s ago: executing program 3 (id=6170):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

1.261681857s ago: executing program 3 (id=6172):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x400, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121500, 0x38)
lseek(r0, 0x8000000000000000, 0x0)

1.063434456s ago: executing program 3 (id=6174):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080)

940.698121ms ago: executing program 2 (id=6175):
mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000001800)=0x7, 0x6, 0x1)
set_mempolicy_home_node(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

851.992819ms ago: executing program 3 (id=6176):
r0 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x90)
flock(r2, 0x6)
mknod(&(0x7f0000000340)='./bus\x00', 0x2, 0x40)

595.180021ms ago: executing program 2 (id=6177):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x14}}, 0x1c}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048800)

594.844049ms ago: executing program 3 (id=6178):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c08000340000000b108000440000000220500020007000000340001800c0001006269747769736500240002"], 0x108}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x2004c004}, 0x4)

320.051542ms ago: executing program 2 (id=6179):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000200)={0xc7c9, "421ae3753785251249154c944122ad068a3ab4c98900"})
ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000180)=0x8)

316.245599ms ago: executing program 1 (id=6180):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9c6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

243.710729ms ago: executing program 3 (id=6181):
syz_open_dev$dri(0x0, 0x1f, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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")
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2804001, 0x0, 0x1, 0x0, &(0x7f0000000000))
sched_setscheduler(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x480c4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
kexec_load(0x0, 0x0, 0x0, 0x0)
pipe(0x0)
mkdir(&(0x7f00000001c0)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r3 = open(&(0x7f0000000440)='./file0/file0\x00', 0x400, 0x43)
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x16e)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00')
r4 = openat$cgroup_ro(r3, &(0x7f00000004c0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448)
ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r3, 0xc0106441, &(0x7f0000000380)={0x0, 0x0, 0xe0})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0)

243.513368ms ago: executing program 2 (id=6182):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
sendfile(r0, r0, 0x0, 0x8)

174.009552ms ago: executing program 1 (id=6183):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r0, 0x107, 0x16, 0x0, 0x0)

100.825416ms ago: executing program 2 (id=6184):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e330000000c0017000201"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b"], 0xa0}}, 0x0)

0s ago: executing program 2 (id=6185):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a"], 0xa8}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

kernel console output (not intermixed with test programs):

driver spca501 failed with error -22
[  418.019301][ T5861] usb 9-1: USB disconnect, device number 5
[  418.094235][T16981] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4565'.
[  418.097918][T16981] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4565'.
[  418.508428][T16989] hfsplus: unable to find HFS+ superblock
[  418.802043][T16993] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  418.846751][T16995] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4571'.
[  418.902781][T16995] veth3: entered allmulticast mode
[  418.922802][T16995] bond1: (slave veth3): Enslaving as an active interface with an up link
[  419.672390][T17027] sctp: [Deprecated]: syz.2.4585 (pid 17027) Use of int in maxseg socket option.
[  419.672390][T17027] Use struct sctp_assoc_value instead
[  419.951685][T17031] loop8: detected capacity change from 0 to 512
[  419.955657][T17031] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  419.972144][T17031] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.4587: invalid indirect mapped block 32768 (level 2)
[  419.977522][T17031] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  419.977963][T17031] EXT4-fs (loop8): Remounting filesystem read-only
[  419.983545][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  419.983562][    C1] EXT4-fs (loop8): initial error at time 1781009613: ext4_free_branches:1023: inode 16
[  419.983584][    C1] EXT4-fs (loop8): last error at time 1781009613: ext4_free_branches:1023: inode 16
[  419.998083][T17031] EXT4-fs (loop8): 1 orphan inode deleted
[  420.000431][T17031] EXT4-fs (loop8): 1 truncate cleaned up
[  420.004753][T17031] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  420.223249][T16858] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  420.316466][T17037] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4590'.
[  420.322285][ T6494] bridge_slave_1: left allmulticast mode
[  420.337245][ T6494] bridge_slave_1: left promiscuous mode
[  420.339558][ T6494] bridge0: port 2(bridge_slave_1) entered disabled state
[  420.344679][ T6494] bridge_slave_0: left allmulticast mode
[  420.346680][ T6494] bridge_slave_0: left promiscuous mode
[  420.348535][ T6494] bridge0: port 1(bridge_slave_0) entered disabled state
[  420.565978][ T5006] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  420.578701][ T5006] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  420.591274][ T5006] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  420.598272][ T5006] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  420.604876][ T5006] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  420.642557][ T6494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  420.647948][ T6494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  420.653265][ T6494] bond0 (unregistering): Released all slaves
[  420.663590][ T6494] bond1 (unregistering): (slave veth3): Releasing backup interface
[  420.668702][ T6494] bond1 (unregistering): Released all slaves
[  420.923142][T17054] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  420.954552][T17054] batadv_slave_1: entered promiscuous mode
[  421.123958][   T33] audit: type=1326 audit(1781009614.815:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17063 comm="syz.7.4599" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbb019ce59 code=0x7ffc0000
[  421.134329][   T33] audit: type=1326 audit(1781009614.815:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17063 comm="syz.7.4599" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbb019ce59 code=0x7ffc0000
[  421.143326][   T33] audit: type=1326 audit(1781009614.815:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17063 comm="syz.7.4599" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbb019ce59 code=0x7ffc0000
[  421.166038][   T33] audit: type=1326 audit(1781009614.815:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17063 comm="syz.7.4599" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbb019ce59 code=0x7ffc0000
[  421.197434][   T33] audit: type=1326 audit(1781009614.815:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17063 comm="syz.7.4599" exe="/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7ffbb019ce59 code=0x7ffc0000
[  421.207604][   T33] audit: type=1326 audit(1781009614.815:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17063 comm="syz.7.4599" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbb019ce59 code=0x7ffc0000
[  421.222884][   T33] audit: type=1326 audit(1781009614.815:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17063 comm="syz.7.4599" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbb019ce59 code=0x7ffc0000
[  421.254385][   T33] audit: type=1326 audit(1781009614.815:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17063 comm="syz.7.4599" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbb019ce59 code=0x7ffc0000
[  421.266833][   T33] audit: type=1326 audit(1781009614.815:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17063 comm="syz.7.4599" exe="/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7ffbb019ce59 code=0x7ffc0000
[  421.275792][   T33] audit: type=1326 audit(1781009614.815:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17063 comm="syz.7.4599" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbb019ce59 code=0x7ffc0000
[  421.430949][ T6494] hsr_slave_0: left promiscuous mode
[  421.434486][ T6494] hsr_slave_1: left promiscuous mode
[  421.437275][ T6494] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  421.439897][ T6494] batman_adv: batadv0: Removing interface: batadv_slave_0
[  421.451923][ T6494] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  421.463519][ T6494] batman_adv: batadv0: Removing interface: batadv_slave_1
[  421.479475][T17077] loop7: detected capacity change from 0 to 16
[  421.480828][ T6494] veth1_macvtap: left promiscuous mode
[  421.486636][ T6494] veth0_macvtap: left promiscuous mode
[  421.488928][ T6494] veth1_vlan: left promiscuous mode
[  421.490959][ T6494] veth0_vlan: left promiscuous mode
[  421.511816][T17077] erofs (device loop7): mounted with root inode @ nid 36.
[  421.765337][ T6494] team0 (unregistering): Port device team_slave_1 removed
[  421.778652][ T6494] team0 (unregistering): Port device team_slave_0 removed
[  422.289929][T17081] tipc: Started in network mode
[  422.291980][T17081] tipc: Node identity 7f000001, cluster identity 4711
[  422.295639][T17081] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  422.405320][T17086] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4607'.
[  422.502327][T17041] bridge0: port 1(bridge_slave_0) entered blocking state
[  422.505400][T17041] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.508179][T17041] bridge_slave_0: entered allmulticast mode
[  422.511720][T17041] bridge_slave_0: entered promiscuous mode
[  422.515134][T17041] bridge0: port 2(bridge_slave_1) entered blocking state
[  422.517472][T17041] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.519826][T17041] bridge_slave_1: entered allmulticast mode
[  422.522440][T17041] bridge_slave_1: entered promiscuous mode
[  422.549645][T17041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  422.556835][T17041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  422.601138][T17041] team0: Port device team_slave_0 added
[  422.605262][T17041] team0: Port device team_slave_1 added
[  422.699893][   T54] Bluetooth: hci0: command tx timeout
[  422.734332][T17041] batman_adv: batadv0: Adding interface: batadv_slave_0
[  422.737139][T17041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  422.751723][T17041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  422.761084][T17041] batman_adv: batadv0: Adding interface: batadv_slave_1
[  422.761635][T17099] loop7: detected capacity change from 0 to 256
[  422.765861][T17041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  422.765877][T17041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  422.819141][T17041] hsr_slave_0: entered promiscuous mode
[  422.822445][T17041] hsr_slave_1: entered promiscuous mode
[  422.988152][T17105] lo speed is unknown, defaulting to 1000
[  423.133554][T17105] lo speed is unknown, defaulting to 1000
[  423.273882][T17105] lo speed is unknown, defaulting to 1000
[  423.418080][T17041] 8021q: adding VLAN 0 to HW filter on device bond0
[  423.431130][T17041] 8021q: adding VLAN 0 to HW filter on device team0
[  423.438487][ T7998] bridge0: port 1(bridge_slave_0) entered blocking state
[  423.440787][ T7998] bridge0: port 1(bridge_slave_0) entered forwarding state
[  423.450595][ T7998] bridge0: port 2(bridge_slave_1) entered blocking state
[  423.453230][ T7998] bridge0: port 2(bridge_slave_1) entered forwarding state
[  423.483130][ T5882] lo speed is unknown, defaulting to 1000
[  423.488460][T17105] infiniband syz0: set down
[  423.494223][T17105] infiniband syz0: added lo
[  423.525010][T17105] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  423.532537][T17105] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  423.538902][T17105] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  423.702179][T17105] RDS/IB: syz0: added
[  423.718437][T17105] smc: adding ib device syz0 with port count 1
[  423.721413][T17105] smc:    ib device syz0 port 1 has no pnetid
[  423.729020][ T5882] lo speed is unknown, defaulting to 1000
[  423.751814][T17105] lo speed is unknown, defaulting to 1000
[  423.900762][T17131] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4618'.
[  423.937216][T17041] 8021q: adding VLAN 0 to HW filter on device batadv0
[  423.949233][T17131] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4618'.
[  424.191446][T17041] veth0_vlan: entered promiscuous mode
[  424.199562][T17041] veth1_vlan: entered promiscuous mode
[  424.227297][T17041] veth0_macvtap: entered promiscuous mode
[  424.233332][T17041] veth1_macvtap: entered promiscuous mode
[  424.238401][T17105] lo speed is unknown, defaulting to 1000
[  424.248272][T17041] batman_adv: batadv0: Interface activated: batadv_slave_0
[  424.262463][T17041] batman_adv: batadv0: Interface activated: batadv_slave_1
[  424.452445][T10044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.460799][T10044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  424.499345][ T7998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.501658][ T7998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  424.539620][T17105] lo speed is unknown, defaulting to 1000
[  424.668326][T17105] lo speed is unknown, defaulting to 1000
[  424.765324][   T54] Bluetooth: hci0: command tx timeout
[  424.806000][ T5882] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  424.963570][ T5882] usb 10-1: Using ep0 maxpacket: 32
[  424.969960][ T5882] usb 10-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  424.973940][ T5882] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  424.983019][ T5882] usb 10-1: config 0 descriptor??
[  424.998953][ T5882] gspca_main: sunplus-2.14.0 probing 041e:400b
[  426.473960][ T5882] gspca_sunplus: reg_w_riv err -71
[  426.476275][ T5882] sunplus 10-1:0.0: probe with driver sunplus failed with error -71
[  426.482019][ T5882] usb 10-1: USB disconnect, device number 2
[  426.843637][   T54] Bluetooth: hci0: command tx timeout
[  426.902783][T17157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4625'.
[  426.911473][T17157] xfrm1: entered promiscuous mode
[  426.914677][T17157] xfrm1: entered allmulticast mode
[  426.917495][T17157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4625'.
[  427.017429][T17163] loop9: detected capacity change from 0 to 256
[  427.361310][T17177] netlink: 'syz.7.4634': attribute type 1 has an invalid length.
[  427.414514][T17177] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4634'.
[  428.741235][T17205] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4646'.
[  428.746433][T17205] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4646'.
[  428.924160][   T54] Bluetooth: hci0: command tx timeout
[  430.150988][T17223] binder: 17222:17223 ioctl c0306201 200000000000 returned -22
[  430.208182][T17216] RDS: rds_bind could not find a transport for ::ff00:0:0:0, load rds_tcp or rds_rdma?
[  430.349709][T17231] bridge_slave_0: left allmulticast mode
[  430.351687][T17231] bridge_slave_0: left promiscuous mode
[  430.354354][T17231] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.360596][T17231] bond0: (slave bond_slave_0): Releasing backup interface
[  430.375554][T17231] bond0: (slave bond_slave_1): Releasing backup interface
[  430.385855][T17231] team0: Port device team_slave_0 removed
[  430.390441][T17231] team0: Port device team_slave_1 removed
[  430.395286][T17231] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  430.525639][    T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  430.577471][T17242] netlink: 'syz.7.4661': attribute type 1 has an invalid length.
[  430.580799][T17242] netlink: 'syz.7.4661': attribute type 2 has an invalid length.
[  430.638378][T17246] loop7: detected capacity change from 0 to 256
[  430.660796][T17246] FAT-fs (loop7): Directory bread(block 64) failed
[  430.664403][T17246] FAT-fs (loop7): Directory bread(block 65) failed
[  430.667724][T17246] FAT-fs (loop7): Directory bread(block 66) failed
[  430.670410][T17246] FAT-fs (loop7): Directory bread(block 67) failed
[  430.672952][T17246] FAT-fs (loop7): Directory bread(block 68) failed
[  430.676190][T17246] FAT-fs (loop7): Directory bread(block 69) failed
[  430.680352][T17246] FAT-fs (loop7): Directory bread(block 70) failed
[  430.687274][T17246] FAT-fs (loop7): Directory bread(block 71) failed
[  430.690441][T17246] FAT-fs (loop7): Directory bread(block 72) failed
[  430.695974][T17246] FAT-fs (loop7): Directory bread(block 73) failed
[  430.698810][    T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  430.707738][    T9] usb 10-1: config 0 interface 0 has no altsetting 0
[  430.712887][    T9] usb 10-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  430.722874][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.726161][    T9] usb 10-1: Product: syz
[  430.727842][    T9] usb 10-1: Manufacturer: syz
[  430.729199][    T9] usb 10-1: SerialNumber: syz
[  430.732372][    T9] usb 10-1: config 0 descriptor??
[  430.740377][    T9] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  430.798192][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  430.801551][    T9] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  430.806167][    T9] usb 10-1: media controller created
[  430.821315][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  430.854620][    T9] DVB: Unable to find symbol tda10046_attach()
[  430.856879][    T9] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  430.859671][    T9] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  430.990271][T17261] fuse: fd is not a fuse device
[  431.049196][T17267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4673'.
[  431.052948][T17267] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4673'.
[  431.143058][    T9] dvb_usb_m920x 10-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  431.151560][    T9] usb 10-1: USB disconnect, device number 3
[  431.862411][T17298] bridge0: port 2(bridge_slave_1) entered disabled state
[  431.865499][T17298] bridge0: port 1(bridge_slave_0) entered disabled state
[  431.977748][T17298] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  431.990644][T17298] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  432.276759][T17311] loop7: detected capacity change from 0 to 16
[  432.308129][T17311] erofs (device loop7): mounted with root inode @ nid 36.
[  432.387899][T17311] syz.7.4691: attempt to access beyond end of device
[  432.387899][T17311] loop7: rw=524288, sector=8, nr_sectors = 24 limit=16
[  432.388029][T17315] loop9: detected capacity change from 0 to 8192
[  432.410456][T17318] netlink: 'syz.2.4694': attribute type 3 has an invalid length.
[  432.411208][T17311] erofs (device loop7): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096
[  432.418464][T17311] erofs (device loop7): read error -117 @ 0 of nid 89
[  432.425337][   T33] kauditd_printk_skb: 31 callbacks suppressed
[  432.425382][   T33] audit: type=1800 audit(1781009626.115:327): pid=17311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4691" name="file2" dev="loop7" ino=89 res=0 errno=0
[  432.454441][T17315]  loop9: [POWERTEC]
[  432.607642][T17330] netlink: 'syz.7.4696': attribute type 3 has an invalid length.
[  432.615841][T17330] netlink: 3 bytes leftover after parsing attributes in process `syz.7.4696'.
[  433.244146][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  433.564808][T17334] orangefs_mount: mount request failed with -4
[  433.631708][T17351] netlink: 'syz.2.4708': attribute type 1 has an invalid length.
[  433.868400][T17355] loop9: detected capacity change from 0 to 128
[  433.903279][T17355] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[  433.910872][T17355] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  434.068676][   T33] audit: type=1326 audit(1781009627.755:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17360 comm="syz.9.4713" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102a59ce59 code=0x7ffc0000
[  434.082391][   T33] audit: type=1326 audit(1781009627.755:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17360 comm="syz.9.4713" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102a59ce59 code=0x7ffc0000
[  434.087746][T17363] loop7: detected capacity change from 0 to 128
[  434.093626][   T33] audit: type=1326 audit(1781009627.755:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17360 comm="syz.9.4713" exe="/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f102a59ce59 code=0x7ffc0000
[  434.115881][   T33] audit: type=1326 audit(1781009627.755:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17360 comm="syz.9.4713" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102a59ce59 code=0x7ffc0000
[  434.118107][T17363] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  434.130705][T17363] ext4 filesystem being mounted at /402/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  434.150032][   T33] audit: type=1326 audit(1781009627.755:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17360 comm="syz.9.4713" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102a59ce59 code=0x7ffc0000
[  434.206535][T12925] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  434.534969][T17375] loop9: detected capacity change from 0 to 256
[  434.540960][T17375] vfat: Unknown parameter 'ich!rset'
[  434.751301][T17377] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4719'.
[  435.787389][T17414] netlink: 'syz.9.4736': attribute type 3 has an invalid length.
[  436.044493][   T24] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  436.196557][   T24] usb 10-1: Using ep0 maxpacket: 8
[  436.207654][   T24] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  436.211715][   T24] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  436.225105][   T24] usb 10-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[  436.230217][   T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.233627][   T24] usb 10-1: Product: syz
[  436.237181][   T24] usb 10-1: Manufacturer: syz
[  436.240783][   T24] usb 10-1: SerialNumber: syz
[  436.445930][T17433] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  436.452361][T17433] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  436.468382][   T24] usb 10-1: unit 5 not found!
[  436.475657][T17433] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  436.517592][   T24] usb 10-1: USB disconnect, device number 4
[  436.544709][T16591] udevd[16591]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  438.032573][T17477] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4764'.
[  438.115615][T17479] xt_hashlimit: size too large, truncated to 1048576
[  438.153810][T17488] loop9: detected capacity change from 0 to 2048
[  438.171502][T17488] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  438.357714][T17500] loop9: detected capacity change from 0 to 2048
[  438.361696][T17500] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024)
[  438.388078][T17502] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  438.392174][T16591] udevd[16591]: incorrect nilfs2 checksum on /dev/loop9
[  438.443866][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[  439.015462][ T5882] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  439.184522][ T5882] usb 10-1: Using ep0 maxpacket: 32
[  439.189557][ T5882] usb 10-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  439.192558][ T5882] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.195127][ T5882] usb 10-1: Product: syz
[  439.196670][ T5882] usb 10-1: Manufacturer: syz
[  439.198190][ T5882] usb 10-1: SerialNumber: syz
[  439.201210][ T5882] usb 10-1: config 0 descriptor??
[  439.614240][ T5882] airspy 10-1:0.0: usb_control_msg() failed -71 request 0a
[  439.617248][ T5882] airspy 10-1:0.0: Could not detect board
[  439.620296][ T5882] airspy 10-1:0.0: probe with driver airspy failed with error -71
[  439.626580][ T5882] usb 10-1: USB disconnect, device number 5
[  440.124209][   T89] wlan1: Trigger new scan to find an IBSS to join
[  440.523679][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[  441.091980][   T54] Bluetooth: hci0: unexpected event for opcode 0x1003
[  441.465254][T17547] netlink: 212320 bytes leftover after parsing attributes in process `syz.7.4793'.
[  441.469262][T17547] openvswitch: netlink: Port 7041905 exceeds max allowable 65535
[  441.661543][T17551] loop7: detected capacity change from 0 to 1024
[  441.850352][T17559] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4798'.
[  441.968978][T17565] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  442.060168][T17567] loop7: detected capacity change from 0 to 512
[  442.162196][T17569] loop7: detected capacity change from 0 to 64
[  442.187584][T17569] syz.7.4802: attempt to access beyond end of device
[  442.187584][T17569] loop7: rw=0, sector=1024, nr_sectors = 2 limit=64
[  442.197589][T17569] Buffer I/O error on dev loop7, logical block 512, async page read
[  442.202163][T17569] syz.7.4802: attempt to access beyond end of device
[  442.202163][T17569] loop7: rw=0, sector=113152, nr_sectors = 2 limit=64
[  442.211939][T17569] Buffer I/O error on dev loop7, logical block 56576, async page read
[  442.552053][T17576] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  442.715448][T17586] netlink: 207952 bytes leftover after parsing attributes in process `syz.9.4809'.
[  443.012556][T17600] loop9: detected capacity change from 0 to 32768
[  443.066650][T17600] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  443.080008][T17600] XFS (loop9): Ending clean mount
[  443.164425][   T82] wlan1: Trigger new scan to find an IBSS to join
[  443.235202][T17615] loop7: detected capacity change from 0 to 128
[  443.374295][T17041] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  444.218301][T17627] loop7: detected capacity change from 0 to 131072
[  444.224838][T17627] F2FS-fs (loop7): invalid crc value
[  444.289864][T17627] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  444.317006][T17627] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  444.350963][T17627] F2FS-fs (loop7): Stopped filesystem due to reason: 0
[  444.394246][ T6494] bridge_slave_1: left allmulticast mode
[  444.396553][ T6494] bridge_slave_1: left promiscuous mode
[  444.399370][T17651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4834'.
[  444.403134][ T6494] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.426085][ T6494] bridge_slave_0: left allmulticast mode
[  444.432989][ T6494] bridge_slave_0: left promiscuous mode
[  444.438679][ T6494] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.714984][T17656] xt_hashlimit: size too large, truncated to 1048576
[  444.809738][ T6494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  444.825855][ T6494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  444.836959][ T6494] bond0 (unregistering): Released all slaves
[  444.859157][ T5006] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  444.877917][ T5006] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  444.883099][ T5006] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  444.890193][ T5006] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  444.900223][ T5006] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  445.406335][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  445.408475][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[  445.411579][ T1381] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  445.469757][T17699] fuse: fd is not a fuse device
[  445.482213][T17661] lo speed is unknown, defaulting to 1000
[  445.506765][T17701] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4854'.
[  445.516495][T17701] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4854'.
[  445.631058][ T6494] hsr_slave_0: left promiscuous mode
[  445.639396][ T6494] hsr_slave_1: left promiscuous mode
[  445.641550][ T6494] batman_adv: batadv0: Removing interface: batadv_slave_0
[  445.647650][ T6494] batman_adv: batadv0: Removing interface: batadv_slave_1
[  445.830671][ T6494] team0 (unregistering): Port device team_slave_1 removed
[  445.841942][ T6494] team0 (unregistering): Port device team_slave_0 removed
[  446.406057][T17661] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.409201][T17661] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.412180][T17661] bridge_slave_0: entered allmulticast mode
[  446.417052][T17661] bridge_slave_0: entered promiscuous mode
[  446.421711][T17661] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.427045][T17661] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.430078][T17661] bridge_slave_1: entered allmulticast mode
[  446.433311][T17661] bridge_slave_1: entered promiscuous mode
[  446.453798][T17661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  446.459140][T17661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  446.531033][T17661] team0: Port device team_slave_0 added
[  446.539656][T17661] team0: Port device team_slave_1 added
[  446.570957][T17661] batman_adv: batadv0: Adding interface: batadv_slave_0
[  446.577684][T17661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  446.588010][T17661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  446.594837][T17661] batman_adv: batadv0: Adding interface: batadv_slave_1
[  446.597718][T17661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  446.608926][T17661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  446.637203][T17661] hsr_slave_0: entered promiscuous mode
[  446.639572][T17661] hsr_slave_1: entered promiscuous mode
[  446.765717][T17661] 8021q: adding VLAN 0 to HW filter on device bond0
[  446.778731][T17661] 8021q: adding VLAN 0 to HW filter on device team0
[  446.785192][T10037] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.787461][T10037] bridge0: port 1(bridge_slave_0) entered forwarding state
[  446.795599][T10037] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.798147][T10037] bridge0: port 2(bridge_slave_1) entered forwarding state
[  447.003933][   T54] Bluetooth: hci0: command tx timeout
[  447.043118][T17661] 8021q: adding VLAN 0 to HW filter on device batadv0
[  447.197279][T17661] veth0_vlan: entered promiscuous mode
[  447.206159][T17661] veth1_vlan: entered promiscuous mode
[  447.229062][T17661] veth0_macvtap: entered promiscuous mode
[  447.236893][T17661] veth1_macvtap: entered promiscuous mode
[  447.250796][T17661] batman_adv: batadv0: Interface activated: batadv_slave_0
[  447.261581][T17661] batman_adv: batadv0: Interface activated: batadv_slave_1
[  447.404297][T10037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  447.420239][T10037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  447.459780][T10037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  447.465071][T10037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  447.518976][T17763] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4870'.
[  447.591843][T17768] loop7: detected capacity change from 0 to 1024
[  447.832767][T17785] netlink: 'syz.2.4879': attribute type 10 has an invalid length.
[  447.844942][T17787] IPVS: Unknown mcast interface: pimreg
[  447.866496][T17785] team0: Port device veth0_to_bond added
[  447.877897][T17789] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  448.168106][T17816] netlink: 'syz.0.4893': attribute type 21 has an invalid length.
[  448.256574][T17823] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4898'.
[  448.347588][T17831] loop7: detected capacity change from 0 to 1024
[  448.356795][T17831] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  448.377443][T17831] EXT4-fs error (device loop7): ext4_empty_dir:3101: inode #11: block 32: comm syz.7.4901: bad entry in directory: directory entry overrun - offset=12, inode=32514, rec_len=1024, size=1024 fake=0
[  448.395447][T17831] EXT4-fs warning (device loop7): ext4_empty_dir:3104: inode #11: comm syz.7.4901: directory missing '..'
[  448.418293][T12925] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  448.636250][T17846] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4907'.
[  448.640326][T17846] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4907'.
[  448.644554][T17846] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4907'.
[  448.647873][T17846] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4907'.
[  449.103582][   T54] Bluetooth: hci0: command tx timeout
[  449.629397][T17872] loop7: detected capacity change from 0 to 4096
[  449.668394][T17872] NILFS (loop7): invalid segment: Checksum error in segment payload
[  449.684261][T17872] NILFS (loop7): trying rollback from an earlier position
[  449.714508][T17872] NILFS (loop7): recovery complete
[  449.723107][T17876] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  449.838028][T17859] xt_time: unknown flags 0xc
[  449.956215][T17882] loop0: detected capacity change from 0 to 64
[  450.004742][T17882] syz.0.4922: attempt to access beyond end of device
[  450.004742][T17882] loop0: rw=0, sector=45066, nr_sectors = 2 limit=64
[  450.010424][T17882] Buffer I/O error on dev loop0, logical block 22533, async page read
[  450.017178][T17882] syz.0.4922: attempt to access beyond end of device
[  450.017178][T17882] loop0: rw=0, sector=45066, nr_sectors = 2 limit=64
[  450.022839][T17882] Buffer I/O error on dev loop0, logical block 22533, async page read
[  450.039548][T17884] netlink: 136 bytes leftover after parsing attributes in process `syz.7.4923'.
[  450.222591][T17898] Invalid source name
[  451.254079][   T54] Bluetooth: hci0: command tx timeout
[  451.948350][T17937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4939'.
[  452.024165][T17939] loop7: detected capacity change from 0 to 4096
[  452.028067][T17939] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512).
[  452.083283][T17939] ntfs3(loop7): ino=5, mi_enum_attr
[  452.093853][T17939] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  452.336007][T17951] dummy0: entered promiscuous mode
[  452.366767][T17951] dummy0: left promiscuous mode
[  452.416488][T17945] loop0: detected capacity change from 0 to 32768
[  452.421800][T17945] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4949 (17945)
[  452.449073][T17945] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  452.454309][T17945] BTRFS info (device loop0): using sha256 checksum algorithm
[  452.614244][T17945] BTRFS info (device loop0): enabling ssd optimizations
[  452.621546][T17945] BTRFS info (device loop0): turning on sync discard
[  452.626541][T17945] BTRFS info (device loop0): enabling free space tree
[  452.691263][T17963] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  452.707089][T17661] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  453.212753][T17996] loop0: detected capacity change from 0 to 128
[  453.224612][T17996] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  453.230059][T17996] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  453.245161][T17996] EXT4-fs (loop0): resizing filesystem from 64 to 2 blocks
[  453.250364][T17996] EXT4-fs warning (device loop0): ext4_resize_fs:2041: can't shrink FS - resize aborted
[  453.326778][T17661] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  453.331230][   T54] Bluetooth: hci0: command tx timeout
[  453.421288][T18009] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4974'.
[  453.508020][T18011] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4974'.
[  454.057198][T18032] loop0: detected capacity change from 0 to 8
[  454.331628][T18055] loop0: detected capacity change from 0 to 2048
[  454.344470][T18055] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  454.418323][T18061] loop0: detected capacity change from 0 to 1024
[  454.516082][T18067] netlink: zone id is out of range
[  454.517881][T18067] netlink: zone id is out of range
[  454.519488][T18067] netlink: zone id is out of range
[  454.521050][T18067] netlink: zone id is out of range
[  454.659176][T18077] loop0: detected capacity change from 0 to 2048
[  454.703185][T18080] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  456.533548][   T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  457.154227][T18120] loop7: detected capacity change from 0 to 256
[  457.168592][T18120] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  457.281718][T18124] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5024'.
[  457.435454][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  457.443243][   T10] usb 1-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55
[  457.447872][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  457.451264][   T10] usb 1-1: Product: syz
[  457.453050][   T10] usb 1-1: Manufacturer: syz
[  457.455317][   T10] usb 1-1: SerialNumber: syz
[  457.459700][   T10] usb 1-1: config 0 descriptor??
[  457.500171][T18126] loop7: detected capacity change from 0 to 4096
[  457.565524][T18128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5026'.
[  457.684513][   T10] cdc_subset 1-1:0.0: probe with driver cdc_subset failed with error -71
[  457.704224][   T10] usb 1-1: USB disconnect, device number 3
[  457.750750][T18135] loop7: detected capacity change from 0 to 512
[  457.768151][T18135] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.5028: corrupted in-inode xattr: invalid ea_ino
[  457.782068][T18135] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  457.782453][T18135] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.5028: couldn't read orphan inode 15 (err -117)
[  457.786164][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  457.786178][    C0] EXT4-fs (loop7): initial error at time 1781009651: ext4_iget_extra_inode:5128: inode 15
[  457.786201][    C0] EXT4-fs (loop7): last error at time 1781009651: ext4_iget_extra_inode:5128: inode 15
[  457.807991][T18135] loop7: lost filesystem error report for type 5 error -117
[  457.809904][T18135] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000500000000 r/w without journal. Quota mode: none.
[  457.868926][T12925] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000500000000.
[  457.934122][   T10] bridge0: entered promiscuous mode
[  458.217874][T18145] loop0: detected capacity change from 0 to 128
[  458.225169][T18145] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  458.233308][T18145] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  458.310487][T17661] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  458.921010][T18167] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5042'.
[  459.800286][T18193] loop0: detected capacity change from 0 to 32768
[  460.256950][T18197] veth0_macvtap: Caught tx_queue_len zero misconfig
[  460.271251][T18195] loop0: detected capacity change from 0 to 32768
[  460.303085][   T33] audit: type=1326 audit(1781009653.985:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18203 comm="syz.2.5058" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f899ce59 code=0x7ffc0000
[  460.319744][T18195] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  460.327846][   T33] audit: type=1326 audit(1781009653.995:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18203 comm="syz.2.5058" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f899ce59 code=0x7ffc0000
[  460.338214][   T33] audit: type=1326 audit(1781009653.995:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18203 comm="syz.2.5058" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f899ce59 code=0x7ffc0000
[  460.346823][T18209] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.5059'.
[  460.369934][   T33] audit: type=1326 audit(1781009653.995:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18203 comm="syz.2.5058" exe="/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fd2f899ce59 code=0x7ffc0000
[  460.387163][T18195] XFS (loop0): Ending clean mount
[  460.400184][   T33] audit: type=1326 audit(1781009653.995:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18203 comm="syz.2.5058" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f899ce59 code=0x7ffc0000
[  460.423757][   T33] audit: type=1326 audit(1781009653.995:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18203 comm="syz.2.5058" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f899ce59 code=0x7ffc0000
[  460.445035][   T33] audit: type=1326 audit(1781009653.995:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18203 comm="syz.2.5058" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f899ce59 code=0x7ffc0000
[  460.465114][   T33] audit: type=1326 audit(1781009653.995:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18203 comm="syz.2.5058" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd2f899ce59 code=0x7ffc0000
[  460.474528][   T33] audit: type=1326 audit(1781009653.995:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18203 comm="syz.2.5058" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd2f899ce59 code=0x7ffc0000
[  460.505977][T17661] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  462.256874][T18269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5085'.
[  462.260844][T18269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5085'.
[  462.264758][T18269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5085'.
[  462.268334][T18269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5085'.
[  462.271753][T18269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5085'.
[  462.276208][T18269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5085'.
[  462.585535][T18295] IPv6: NLM_F_CREATE should be specified when creating new route
[  462.636637][T18298] sctp: [Deprecated]: syz.7.5099 (pid 18298) Use of struct sctp_assoc_value in delayed_ack socket option.
[  462.636637][T18298] Use struct sctp_sack_info instead
[  462.883514][    T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  462.925912][T18312] loop7: detected capacity change from 0 to 512
[  462.959161][T18312] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  462.966047][T18312] ext4 filesystem being mounted at /530/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  463.035075][    T9] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  463.038042][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  463.042353][    T9] usb 1-1: config 0 descriptor??
[  463.409928][    T9] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0e
[  463.415061][    T9] hackrf 1-1:0.0: Could not detect board
[  463.416922][    T9] hackrf 1-1:0.0: probe with driver hackrf failed with error -71
[  463.422669][    T9] usb 1-1: USB disconnect, device number 4
[  463.809851][T12925] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  464.203522][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  464.926155][T18354] __nla_validate_parse: 40 callbacks suppressed
[  464.926171][T18354] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5123'.
[  464.978697][T18356] netlink: 'syz.7.5124': attribute type 1 has an invalid length.
[  464.981859][T18356] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5124'.
[  464.985519][    T9] usb 1-1: Using ep0 maxpacket: 32
[  464.989347][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  464.995351][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  464.999049][    T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  465.003536][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  465.012681][    T9] usb 1-1: config 0 descriptor??
[  465.020006][    T9] hub 1-1:0.0: USB hub found
[  465.029207][T18358] loop7: detected capacity change from 0 to 64
[  465.058769][T18358] BFS-fs: bfs_fill_super(): loop7 is unclean, continuing
[  465.243635][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  465.252950][    T9] hub 1-1:0.0: 1 port detected
[  466.039252][T18384] 9p: Bad value for 'rfdno'
[  466.091945][    T9] hub 1-1:0.0: activate --> -90
[  466.267507][T18396] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  466.271306][T18396] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  466.276879][T18396] overlayfs: missing 'lowerdir'
[  466.887616][    T9] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[  466.894849][ T5882] usb 1-1: USB disconnect, device number 5
[  466.897840][    T9] usb 1-1-port1: attempt power cycle
[  467.656525][T18423] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5157'.
[  468.155831][T18444] fuse: fd is not a fuse device
[  468.341663][T18458] loop0: detected capacity change from 0 to 1024
[  468.353358][T18458] EXT4-fs: Ignoring removed nobh option
[  468.363668][T18458] EXT4-fs: Ignoring removed i_version option
[  468.380295][T18458] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  468.480197][T18458] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  468.503717][T18458] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 884 with error 28
[  468.509065][T18458] EXT4-fs (loop0): This should not happen!! Data will be lost
[  468.509065][T18458] 
[  468.515176][T18458] EXT4-fs (loop0): Total free blocks count 0
[  468.517778][T18458] EXT4-fs (loop0): Free/Dirty block details
[  468.520448][T18458] EXT4-fs (loop0): free_blocks=20480
[  468.522741][T18458] EXT4-fs (loop0): dirty_blocks=896
[  468.525582][T18458] EXT4-fs (loop0): Block reservation details
[  468.528177][T18458] EXT4-fs (loop0): i_reserved_data_blocks=56
[  468.648540][ T7445] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 128 with max blocks 756 with error 28
[  468.666459][T17661] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[  468.672784][T18478] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  469.977850][T18511] loop0: detected capacity change from 0 to 32768
[  469.999008][T18511] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  470.023034][T18511] XFS (loop0): Ending clean mount
[  470.076906][T17661] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  470.405509][T18536] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  470.488865][T18542] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5205'.
[  471.083577][ T7998] wlan1: Trigger new scan to find an IBSS to join
[  474.561726][T18588] kAFS: unable to lookup cell 'էKyy
[  474.561726][T18588] 
[  474.561726][T18588] =6%*;eܲ5;Z*d{iElZSjUF/k!btF\_vfVnDPPB1%A)X\YT"8ώdJ_.5d#ۜhGp6"5ͺ*,ImI-(WA?WZ)n[qGjnڇ%(J-%ؘccʵ{|6ZA5k@a+oST;]5!G3{K,'
[  474.622592][T18592] netlink: 'syz.7.5229': attribute type 3 has an invalid length.
[  474.627788][T18592] netlink: 'syz.7.5229': attribute type 1 has an invalid length.
[  474.630660][T18592] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5229'.
[  474.777827][T18604] loop0: detected capacity change from 0 to 2048
[  474.791182][T18604] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  474.824717][T18610] cgroup: Need name or subsystem set
[  475.043858][T18625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5244'.
[  475.210280][T18641] loop0: detected capacity change from 0 to 8
[  475.221804][T18641] syz_tun: entered allmulticast mode
[  475.225241][T18641] syz_tun: left allmulticast mode
[  475.692446][T18675] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  476.153787][ T7445] wlan1: Trigger new scan to find an IBSS to join
[  477.069536][   T82] wlan1: Creating new IBSS network, BSSID 12:95:fd:c0:a4:18
[  477.080741][T18707] netlink: 'syz.2.5278': attribute type 16 has an invalid length.
[  477.084471][T18707] netlink: 'syz.2.5278': attribute type 17 has an invalid length.
[  477.098801][T18707] tipc: Resetting bearer <eth:hsr0>
[  477.104699][T18707] tipc: Resetting bearer <eth:hsr0>
[  477.114738][T18707] bridge0: port 3(macvlan2) entered disabled state
[  477.464719][T18715] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5280'.
[  478.053719][ T5433] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  478.126088][ T7998] tipc: Resetting bearer <eth:hsr0>
[  478.141430][ T7998] tipc: Resetting bearer <eth:hsr0>
[  478.213987][ T5433] usb 1-1: Using ep0 maxpacket: 32
[  478.222327][ T5433] usb 1-1: config index 0 descriptor too short (expected 539, got 27)
[  478.227624][ T5433] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  478.232756][ T5433] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  478.240257][ T5433] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  478.254424][ T5433] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  478.261558][ T5433] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  478.270010][ T5433] usb 1-1: Product: syz
[  478.273098][ T5433] usb 1-1: Manufacturer: syz
[  478.277797][ T5433] usb 1-1: SerialNumber: syz
[  478.291708][ T5433] usb 1-1: config 0 descriptor??
[  478.299268][T18737] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  478.307531][ T5433] hub 1-1:0.0: bad descriptor, ignoring hub
[  478.314289][ T5433] hub 1-1:0.0: probe with driver hub failed with error -5
[  478.328461][ T5433] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input18
[  478.581576][   T10] usb 1-1: USB disconnect, device number 10
[  478.581605][    C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  479.296980][T18784] loop7: detected capacity change from 0 to 32768
[  479.300721][T18784] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.5306 (18784)
[  479.308144][T18784] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  479.312047][T18784] BTRFS info (device loop7): using sha256 checksum algorithm
[  479.335130][T18788] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5308'.
[  479.385645][T18790] ALSA: mixer_oss: invalid OSS volume '>.<!af'
[  479.467664][T18801] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5309'.
[  479.520045][T18784] BTRFS info (device loop7): enabling ssd optimizations
[  479.523483][T18784] BTRFS info (device loop7): turning on sync discard
[  479.526017][T18784] BTRFS info (device loop7): enabling free space tree
[  479.924001][   T33] audit: type=1800 audit(1781009673.485:342): pid=18819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5306" name="file1" dev="loop7" ino=260 res=0 errno=0
[  480.080584][T12925] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  480.085615][ T5433] usb 1-1: new low-speed USB device number 11 using dummy_hcd
[  480.289271][ T5433] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  480.293108][ T5433] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  480.296954][ T5433] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6
[  480.301475][ T5433] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8
[  480.324920][ T5433] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  480.327802][ T5433] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  480.335210][T18816] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  480.344852][ T5433] hub 1-1:1.0: bad descriptor, ignoring hub
[  480.349142][ T5433] hub 1-1:1.0: probe with driver hub failed with error -5
[  480.355334][ T5433] cdc_wdm 1-1:1.0: skipping garbage
[  480.359098][ T5433] cdc_wdm 1-1:1.0: skipping garbage
[  480.361528][ T5433] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[  480.663828][ T5433] usb 1-1: USB disconnect, device number 11
[  482.629030][T18901] bridge0: port 3(veth1_virt_wifi) entered blocking state
[  482.632432][T18901] bridge0: port 3(veth1_virt_wifi) entered disabled state
[  482.636517][T18901] veth1_virt_wifi: entered allmulticast mode
[  482.651927][T18901] veth1_virt_wifi: left allmulticast mode
[  483.057568][T18919] comedi comedi3: 8255: I/O base address not correctly aligned
[  484.035800][T18946] loop0: detected capacity change from 0 to 131072
[  484.045995][T18946] F2FS-fs (loop0): invalid crc value
[  484.146178][T18946] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  484.162557][T18946] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  484.208218][T18969] xt_hashlimit: size too large, truncated to 1048576
[  484.368536][T18946] F2FS-fs (loop0): Stopped filesystem due to reason: 0
[  485.499887][T19010] loop0: detected capacity change from 0 to 512
[  485.503345][T19010] EXT4-fs: inline encryption not supported
[  485.511410][T19010] EXT4-fs (loop0): Test dummy encryption mode enabled
[  485.519863][T19010] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  485.533702][T19010] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #17: comm syz.0.5394: corrupted in-inode xattr: e_name out of bounds
[  485.542326][T19010] loop0: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117
[  485.543477][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  485.544055][T19010] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.5394: couldn't read orphan inode 17 (err -117)
[  485.546575][    C0] EXT4-fs (loop0): initial error at time 1781009679: ext4_iget_extra_inode:5128: inode 17
[  485.556372][    C0] EXT4-fs (loop0): last error at time 1781009679: ext4_iget_extra_inode:5128: inode 17
[  485.560224][T19010] loop0: lost filesystem error report for type 5 error -117
[  485.565992][T19010] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  485.601623][T19017] loop7: detected capacity change from 0 to 64
[  485.608280][T19017] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  485.624668][T19010] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  485.669480][T17661] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  485.687320][T17661] EXT4-fs error (device loop0): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 17
[  485.699357][T17661] EXT4-fs error (device loop0): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 17
[  485.885310][ T5842] bridge_slave_1: left allmulticast mode
[  485.887720][ T5842] bridge_slave_1: left promiscuous mode
[  485.890114][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.894352][T17661] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  485.924941][ T5842] bridge_slave_0: left allmulticast mode
[  485.930925][ T5842] bridge_slave_0: left promiscuous mode
[  485.934811][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.941761][   T33] audit: type=1326 audit(1781009679.625:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19024 comm="syz.2.5400" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f899ce59 code=0x7ffc0000
[  485.958978][   T33] audit: type=1326 audit(1781009679.625:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19024 comm="syz.2.5400" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f899ce59 code=0x7ffc0000
[  485.981143][   T33] audit: type=1326 audit(1781009679.635:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19024 comm="syz.2.5400" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f899ce59 code=0x7ffc0000
[  485.995290][   T33] audit: type=1326 audit(1781009679.635:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19024 comm="syz.2.5400" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f899ce59 code=0x7ffc0000
[  486.013800][   T33] audit: type=1326 audit(1781009679.635:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19024 comm="syz.2.5400" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd2f899ce59 code=0x7ffc0000
[  486.030560][   T33] audit: type=1326 audit(1781009679.655:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19024 comm="syz.2.5400" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f899ce59 code=0x7ffc0000
[  486.045832][   T33] audit: type=1326 audit(1781009679.655:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19024 comm="syz.2.5400" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f899ce59 code=0x7ffc0000
[  486.079740][   T33] audit: type=1326 audit(1781009679.655:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19026 comm="syz.2.5400" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2f895d68e code=0x7ffc0000
[  486.087660][   T33] audit: type=1326 audit(1781009679.695:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19024 comm="syz.2.5400" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f899ce59 code=0x7ffc0000
[  486.095947][   T33] audit: type=1326 audit(1781009679.695:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19024 comm="syz.2.5400" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f899ce59 code=0x7ffc0000
[  486.185886][T19029] loop7: detected capacity change from 0 to 8192
[  486.277070][ T5006] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  486.300667][ T5006] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  486.306911][ T5006] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  486.309690][T19029] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  486.313136][T19029] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  486.316237][T19029]  loop7: unable to read partition table
[  486.322031][T19029] loop_reread_partitions: partition scan of loop7 () failed (rc=-5)
[  486.327741][ T5006] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  486.331545][ T5006] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  486.346203][ T5065] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  486.349201][ T5065] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  486.354506][ T5065]  loop7: unable to read partition table
[  486.503120][ T5842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  486.510712][ T5842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  486.515153][ T5842] bond0 (unregistering): Released all slaves
[  486.679458][T19046] netlink: 25 bytes leftover after parsing attributes in process `syz.2.5408'.
[  486.756280][T19050] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.5409'.
[  486.860727][T19030] lo speed is unknown, defaulting to 1000
[  487.569263][T19062] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5413'.
[  487.826173][T19073] netlink: 392 bytes leftover after parsing attributes in process `syz.7.5418'.
[  487.934058][T19076] wg2: entered promiscuous mode
[  488.443876][ T5006] Bluetooth: hci0: command tx timeout
[  488.542987][ T5842] hsr_slave_0: left promiscuous mode
[  488.547947][ T5842] hsr_slave_1: left promiscuous mode
[  488.550962][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  488.554317][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_0
[  488.558568][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  488.561587][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_1
[  488.580588][ T5842] veth1_macvtap: left promiscuous mode
[  488.582912][ T5842] veth0_macvtap: left promiscuous mode
[  488.585745][ T5842] veth1_vlan: left promiscuous mode
[  488.588031][ T5842] veth0_vlan: left promiscuous mode
[  488.939959][ T5842] team0 (unregistering): Port device team_slave_1 removed
[  488.950806][ T5842] team0 (unregistering): Port device team_slave_0 removed
[  489.386982][T19030] bridge0: port 1(bridge_slave_0) entered blocking state
[  489.391408][T19030] bridge0: port 1(bridge_slave_0) entered disabled state
[  489.397278][T19030] bridge_slave_0: entered allmulticast mode
[  489.404801][T19030] bridge_slave_0: entered promiscuous mode
[  489.419146][T19030] bridge0: port 2(bridge_slave_1) entered blocking state
[  489.432325][T19030] bridge0: port 2(bridge_slave_1) entered disabled state
[  489.435803][T19030] bridge_slave_1: entered allmulticast mode
[  489.440325][T19030] bridge_slave_1: entered promiscuous mode
[  489.512948][T19030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  489.530281][T19030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  489.617862][T19099] loop7: detected capacity change from 0 to 32768
[  489.618328][T19030] team0: Port device team_slave_0 added
[  489.627874][T19030] team0: Port device team_slave_1 added
[  489.692136][T19030] batman_adv: batadv0: Adding interface: batadv_slave_0
[  489.695829][T19030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  489.698020][T19099] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  489.706337][T19030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  489.722670][T19030] batman_adv: batadv0: Adding interface: batadv_slave_1
[  489.732598][T19030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  489.737570][T19099] XFS (loop7): Ending clean mount
[  489.743294][T19030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  489.750880][T19118] netlink: 'syz.2.5431': attribute type 2 has an invalid length.
[  489.819138][T19030] hsr_slave_0: entered promiscuous mode
[  489.822561][T19030] hsr_slave_1: entered promiscuous mode
[  489.883174][T12925] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  490.313068][T19030] 8021q: adding VLAN 0 to HW filter on device bond0
[  490.330958][T19030] 8021q: adding VLAN 0 to HW filter on device team0
[  490.340490][T10042] bridge0: port 1(bridge_slave_0) entered blocking state
[  490.343147][T10042] bridge0: port 1(bridge_slave_0) entered forwarding state
[  490.359560][ T7445] bridge0: port 2(bridge_slave_1) entered blocking state
[  490.362421][ T7445] bridge0: port 2(bridge_slave_1) entered forwarding state
[  490.434088][T19139] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5436'.
[  490.530258][ T5006] Bluetooth: hci0: command tx timeout
[  490.825078][T19030] 8021q: adding VLAN 0 to HW filter on device batadv0
[  490.897069][T19168] loop7: detected capacity change from 0 to 256
[  491.066920][T19030] veth0_vlan: entered promiscuous mode
[  491.073816][T19030] veth1_vlan: entered promiscuous mode
[  491.145943][T19030] veth0_macvtap: entered promiscuous mode
[  491.153004][T19030] veth1_macvtap: entered promiscuous mode
[  491.195221][T19030] batman_adv: batadv0: Interface activated: batadv_slave_0
[  491.216631][T19030] batman_adv: batadv0: Interface activated: batadv_slave_1
[  491.362179][   T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  491.365485][   T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  491.428099][T19180] syzkaller0: entered promiscuous mode
[  491.430995][T19180] syzkaller0: entered allmulticast mode
[  491.438963][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  491.442735][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  491.813282][T19196] sock: sock_timestamping_bind_phc: sock not bind to device
[  492.056766][T19206] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5459'.
[  492.185703][  T993] IPVS: starting estimator thread 0...
[  492.241777][T19217] 9p: Bad value for 'rfdno'
[  492.284011][T19215] IPVS: using max 43 ests per chain, 103200 per kthread
[  492.487104][T19233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5471'.
[  492.491067][T19233] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5471'.
[  492.603812][ T5006] Bluetooth: hci0: command tx timeout
[  492.852000][T19256] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5481'.
[  493.185364][T19269] loop1: detected capacity change from 0 to 512
[  493.208082][T19269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  493.297721][T19030] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  494.404288][T19301] loop7: detected capacity change from 0 to 32768
[  494.411112][T19301] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.5499 (19301)
[  494.417654][T19301] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  494.420897][T19301] BTRFS info (device loop7): using sha256 checksum algorithm
[  494.517419][T19301] BTRFS info (device loop7): setting nodatasum
[  494.519427][T19301] BTRFS info (device loop7): enabling ssd optimizations
[  494.521646][T19301] BTRFS info (device loop7): turning on async discard
[  494.524447][T19301] BTRFS info (device loop7): enabling free space tree
[  494.685895][ T5006] Bluetooth: hci0: command tx timeout
[  495.234424][T12925] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  495.964784][T19361] loop7: detected capacity change from 0 to 128
[  495.985443][T19361] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  495.990035][T19361] ext4 filesystem being mounted at /645/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  496.057781][T12925] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  496.136622][T19370] : renamed from veth0_vlan (while UP)
[  496.754743][T19410] loop7: detected capacity change from 0 to 256
[  496.831986][T19411] IPv6: NLM_F_CREATE should be specified when creating new route
[  496.835932][T19411] netlink: 'syz.1.5536': attribute type 1 has an invalid length.
[  496.949884][T19410] FAT-fs (loop7): Directory bread(block 64) failed
[  496.959667][T19410] FAT-fs (loop7): Directory bread(block 65) failed
[  496.979537][T19410] FAT-fs (loop7): Directory bread(block 66) failed
[  496.986264][T19410] FAT-fs (loop7): Directory bread(block 67) failed
[  496.992491][T19410] FAT-fs (loop7): Directory bread(block 68) failed
[  497.002587][T19410] FAT-fs (loop7): Directory bread(block 69) failed
[  497.005751][T19410] FAT-fs (loop7): Directory bread(block 70) failed
[  497.008535][T19410] FAT-fs (loop7): Directory bread(block 71) failed
[  497.011302][T19410] FAT-fs (loop7): Directory bread(block 72) failed
[  497.016169][T19410] FAT-fs (loop7): Directory bread(block 73) failed
[  497.241251][T19428] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5547'.
[  497.274264][T19431] Cannot find add_set index 2 as target
[  497.399175][T19443] netlink: 'syz.2.5556': attribute type 12 has an invalid length.
[  497.401941][T19443] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5556'.
[  497.436138][T19445] fuse: fd is not a fuse device
[  497.698371][T19458] binder: BINDER_SET_CONTEXT_MGR already set
[  497.708166][T19458] binder: 19457:19458 ioctl 4018620d 200000000040 returned -16
[  497.712190][T19458] binder: 19457:19458 ioctl c0306201 200000002680 returned -22
[  497.940615][ T6494] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  497.948085][ T6494] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.079454][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  498.084567][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  498.090572][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  498.113916][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  498.117557][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  498.305646][ T6494] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  498.310308][ T6494] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.466362][T19479] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  498.826039][T19464] lo speed is unknown, defaulting to 1000
[  499.059250][ T6494] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  499.129682][ T6494] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.655499][ T6494] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  499.659860][ T6494] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.672231][T19497] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  499.690783][T19497] bridge0: entered allmulticast mode
[  499.788494][T19502] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5578'.
[  500.048471][T19506] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5579'.
[  500.098242][ T6494] bridge_slave_1: left allmulticast mode
[  500.100600][ T6494] bridge_slave_1: left promiscuous mode
[  500.102775][ T6494] bridge0: port 2(bridge_slave_1) entered disabled state
[  500.107867][ T6494] bridge_slave_0: left allmulticast mode
[  500.109687][ T6494] bridge_slave_0: left promiscuous mode
[  500.111970][ T6494] bridge0: port 1(bridge_slave_0) entered disabled state
[  500.223821][ T5006] Bluetooth: hci1: command tx timeout
[  500.585871][ T6494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  500.592357][ T6494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  500.598034][ T6494] bond0 (unregistering): Released all slaves
[  500.825021][T19464] bridge0: port 1(bridge_slave_0) entered blocking state
[  500.827465][T19464] bridge0: port 1(bridge_slave_0) entered disabled state
[  500.829976][T19464] bridge_slave_0: entered allmulticast mode
[  500.832692][T19464] bridge_slave_0: entered promiscuous mode
[  500.836558][T19464] bridge0: port 2(bridge_slave_1) entered blocking state
[  500.839070][T19464] bridge0: port 2(bridge_slave_1) entered disabled state
[  500.841787][T19464] bridge_slave_1: entered allmulticast mode
[  500.863199][T19464] bridge_slave_1: entered promiscuous mode
[  500.877364][ T6494] tipc: Left network mode
[  500.972101][T19464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  500.986829][T19464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  501.070070][T19464] team0: Port device team_slave_0 added
[  501.120545][T19464] team0: Port device team_slave_1 added
[  501.152857][T19464] batman_adv: batadv0: Adding interface: batadv_slave_0
[  501.159166][T19464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  501.180634][T19464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  501.207204][   T10] usb 2-1: new low-speed USB device number 13 using dummy_hcd
[  501.261702][T19464] batman_adv: batadv0: Adding interface: batadv_slave_1
[  501.266100][T19464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  501.277317][T19464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  501.303169][ T5361] 8021q: adding VLAN 0 to HW filter on device eth21
[  501.378914][   T10] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  501.385116][   T10] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 255, setting to 8
[  501.395655][   T10] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  501.400508][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  501.403053][   T10] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00
[  501.409316][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  501.415933][   T10] usb 2-1: config 0 descriptor??
[  501.418358][T19527] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  501.424430][   T10] usbhid 2-1:0.0: can't add hid device: -22
[  501.426392][   T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -22
[  501.518873][T19464] hsr_slave_0: entered promiscuous mode
[  501.522235][T19464] hsr_slave_1: entered promiscuous mode
[  501.525950][T19464] debugfs: 'hsr0' already exists in 'hsr'
[  501.528812][T19464] Cannot create hsr debugfs directory
[  501.655009][  T993] usb 2-1: USB disconnect, device number 13
[  502.091367][ T5361] 8021q: adding VLAN 0 to HW filter on device eth22
[  502.182618][T19464] 8021q: adding VLAN 0 to HW filter on device bond0
[  502.283826][ T5006] Bluetooth: hci1: command tx timeout
[  502.295697][T19464] 8021q: adding VLAN 0 to HW filter on device team0
[  502.302602][T10038] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.304914][T10038] bridge0: port 1(bridge_slave_0) entered forwarding state
[  502.320207][T10038] bridge0: port 2(bridge_slave_1) entered blocking state
[  502.323122][T10038] bridge0: port 2(bridge_slave_1) entered forwarding state
[  502.424785][ T6494] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  502.433644][ T6494] batman_adv: batadv0: Removing interface: batadv_slave_0
[  502.439385][ T6494] batman_adv: batadv0: Removing interface: batadv_slave_1
[  502.457112][ T6494] batman_adv: batadv0: Interface deactivated: ipvlan2
[  502.466572][ T6494] batman_adv: batadv0: Removing interface: ipvlan2
[  502.498667][T19564] loop1: detected capacity change from 0 to 512
[  502.501852][T19564] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  502.536978][T19564] EXT4-fs (loop1): 1 truncate cleaned up
[  502.539202][ T6494] veth1_macvtap: left promiscuous mode
[  502.542910][T19564] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  502.547242][ T6494] veth0_macvtap: left promiscuous mode
[  502.549129][ T6494] veth1_vlan: left promiscuous mode
[  502.550816][ T6494] : left promiscuous mode
[  502.602875][T19030] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  503.048063][ T6494] team0 (unregistering): Port device team_slave_1 removed
[  503.063377][ T6494] team0 (unregistering): Port device team_slave_0 removed
[  503.139401][   T33] kauditd_printk_skb: 52 callbacks suppressed
[  503.139450][   T33] audit: type=1326 audit(1781009696.825:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19587 comm="syz.2.5603" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2f899ce59 code=0x0
[  503.222585][ T5361] 8021q: adding VLAN 0 to HW filter on device eth23
[  503.377371][T19595] loop1: detected capacity change from 0 to 4096
[  503.622491][ T5361] 8021q: adding VLAN 0 to HW filter on device eth24
[  503.632836][ T6494] IPVS: stop unused estimator thread 0...
[  503.717953][T19464] 8021q: adding VLAN 0 to HW filter on device batadv0
[  503.966174][T19464] veth0_vlan: entered promiscuous mode
[  503.970331][T19632] netlink: 'syz.1.5610': attribute type 1 has an invalid length.
[  503.972259][T19464] veth1_vlan: entered promiscuous mode
[  503.992836][T19464] veth0_macvtap: entered promiscuous mode
[  504.006453][T19464] veth1_macvtap: entered promiscuous mode
[  504.020443][T19464] batman_adv: batadv0: Interface activated: batadv_slave_0
[  504.032940][T19464] batman_adv: batadv0: Interface activated: batadv_slave_1
[  504.101158][T19638] loop1: detected capacity change from 0 to 256
[  504.207089][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  504.220518][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  504.267118][ T7996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  504.282929][ T7996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  504.363685][ T5006] Bluetooth: hci1: command tx timeout
[  505.246887][T19657] loop1: detected capacity change from 0 to 32768
[  505.251625][T19657] btrfs: Deprecated parameter 'usebackuproot'
[  505.254315][T19657] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  505.261393][T19657] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5619 (19657)
[  505.278209][T19657] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  505.282445][T19657] BTRFS info (device loop1): using crc32c checksum algorithm
[  505.440189][   T51] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  505.466093][T19657] BTRFS error (device loop1): failed to load root extent
[  505.469181][T19657] BTRFS warning (device loop1): try to load backup roots slot 1
[  505.473056][   T89] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  505.479703][T19657] BTRFS warning (device loop1): couldn't read tree root
[  505.482621][T19657] BTRFS warning (device loop1): try to load backup roots slot 2
[  505.487802][   T26] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  505.496117][T19657] BTRFS warning (device loop1): couldn't read tree root
[  505.498560][T19657] BTRFS warning (device loop1): try to load backup roots slot 3
[  505.530632][T19657] BTRFS info (device loop1): rebuilding free space tree
[  505.562044][T19657] BTRFS info (device loop1): checking UUID tree
[  505.569523][T19657] BTRFS info (device loop1): enabling ssd optimizations
[  505.573029][T19657] BTRFS info (device loop1): turning on async discard
[  505.575160][T19657] BTRFS info (device loop1): enabling free space tree
[  505.577279][T19657] BTRFS info (device loop1): force clearing of disk cache
[  505.580018][T19657] BTRFS info (device loop1): enabling auto defrag
[  505.584052][T19657] BTRFS info (device loop1): trying to use backup root at mount time
[  505.587331][T19657] BTRFS info (device loop1): use zstd compression, level 3
[  505.769551][T19030] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  506.185355][T19689] loop3: detected capacity change from 0 to 32768
[  506.215772][T19695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5629'.
[  506.260263][T19689] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5627 (19689)
[  506.273965][T19697] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5630'.
[  506.327162][T19689] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  506.330423][T19689] BTRFS info (device loop3): using sha256 checksum algorithm
[  506.412075][T19709] loop1: detected capacity change from 0 to 512
[  506.444292][ T5006] Bluetooth: hci1: command tx timeout
[  506.455233][T19709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  506.465796][T19709] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  506.495848][T19030] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  506.531210][T19689] BTRFS info (device loop3): enabling ssd optimizations
[  506.533337][T19689] BTRFS info (device loop3): turning on async discard
[  506.539085][T19689] BTRFS info (device loop3): enabling free space tree
[  506.559201][T19689] BTRFS warning (device loop3): can't clear the compat:0,compat:4,compat:5,compat:8,compat:12,compat:13,compat:15,compat:16,compat:17,compat:19,compat:20,compat:21,compat:24,compat:26,compat:29,compat:35,compat:36,compat:40,compat:42,compat:46,compat:49,compat:50,compat:53,compat:54,compat:57,compat:58,compat:59,compat:60,compat:63 feature bits while mounted
[  506.599074][T19464] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  506.637347][T19731] loop1: detected capacity change from 0 to 128
[  506.644924][T19731] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  506.680117][T19731] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  506.775899][T19030] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  506.856290][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  506.858441][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[  506.861077][ T1381] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  507.040880][T19741] loop1: detected capacity change from 0 to 2048
[  507.073949][T19741] EXT4-fs: Ignoring removed mblk_io_submit option
[  507.093747][T19741] EXT4-fs (loop1): bad geometry: first data block 0 is beyond end of filesystem (0)
[  507.221406][T19749] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5646'.
[  507.360745][T19757] loop3: detected capacity change from 0 to 1024
[  507.381276][T19757] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal
[  507.942526][T19774] C: renamed from veth1_to_team (while UP)
[  507.946293][T19774] netlink: 'syz.3.5656': attribute type 4 has an invalid length.
[  507.948823][T19774] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5656'.
[  507.951718][T19774] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  508.140976][T19782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5660'.
[  508.220648][T19783] bond0: (slave bond_slave_0): Releasing backup interface
[  508.551004][T19792] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5664'.
[  508.561683][T19792] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5664'.
[  508.565400][T19792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5664'.
[  508.617005][T19794] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048)
[  508.743258][T19798] loop1: detected capacity change from 0 to 2048
[  508.804582][T19798] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  508.849928][T19805] batadv_slave_1: entered promiscuous mode
[  508.885712][T19030] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  509.078199][T19800] loop3: detected capacity change from 0 to 32768
[  509.093685][T19800] JBD2: Ignoring recovery information on journal
[  509.139472][T19800] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  509.349220][T19800] syz.3.5667 (19800) used greatest stack depth: 19064 bytes left
[  509.401192][T19464] ocfs2: Unmounting device (7,3) on (node local)
[  509.405893][   T32] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  509.587914][T19831] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.5680'.
[  509.624245][T19827] loop1: detected capacity change from 0 to 32768
[  509.665158][T19827] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5677 (19827)
[  509.705386][T19827] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  509.719742][T19827] BTRFS info (device loop1): using blake2b checksum algorithm
[  509.794770][T19851] binder: 19848:19851 ioctl c0306201 200000000640 returned -22
[  509.802681][T19827] BTRFS info (device loop1): enabling ssd optimizations
[  509.811722][T19827] BTRFS info (device loop1): turning on async discard
[  509.816720][T19827] BTRFS info (device loop1): enabling free space tree
[  510.069873][T19030] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  510.098265][T19865] loop3: detected capacity change from 0 to 2048
[  510.168752][T19865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  510.279651][T19869] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  510.297397][T19869] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  510.301549][T19869] EXT4-fs (loop3): This should not happen!! Data will be lost
[  510.301549][T19869] 
[  510.304903][T19869] EXT4-fs (loop3): Total free blocks count 0
[  510.306950][T19869] EXT4-fs (loop3): Free/Dirty block details
[  510.309084][T19869] EXT4-fs (loop3): free_blocks=2415919504
[  510.311042][T19869] EXT4-fs (loop3): dirty_blocks=48
[  510.312703][T19869] EXT4-fs (loop3): Block reservation details
[  510.314727][T19869] EXT4-fs (loop3): i_reserved_data_blocks=3
[  510.800328][T19878] loop1: detected capacity change from 0 to 4096
[  511.592256][T19464] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  511.603380][T19464] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  512.084449][T19888] loop3: detected capacity change from 0 to 128
[  512.525223][  T993] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  512.753917][  T993] usb 2-1: Using ep0 maxpacket: 8
[  512.758453][  T993] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  512.762219][  T993] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  512.769893][  T993] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  512.779209][  T993] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  512.786978][  T993] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  512.798604][  T993] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  512.802990][  T993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  513.023630][  T993] usb 2-1: GET_CAPABILITIES returned 0
[  513.025500][  T993] usbtmc 2-1:16.0: can't read capabilities
[  513.539751][T19896] usbtmc 2-1:16.0: usb_bulk_msg returned -71
[  513.766359][ T5875] usb 2-1: USB disconnect, device number 14
[  514.317367][T19963] program syz.3.5725 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  514.492986][T19974] loop1: detected capacity change from 0 to 512
[  514.496510][T19974] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  514.593917][ T5914] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  514.752590][ T5914] usb 4-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c
[  514.763143][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  514.790769][ T5914] usb 4-1: config 0 descriptor??
[  514.823303][ T5914] rndis_host 4-1:0.0: GUID doesn't match
[  514.974781][T20001] tipc: Failed to remove unknown binding: 66,0,0/3438547197:2921755740/2921755742
[  514.987978][T19998] tipc: Failed to remove unknown binding: 66,0,0/3438547197:685166912/685166913
[  514.988498][T20003] Bluetooth: MGMT ver 1.23
[  514.994396][T19998] tipc: Failed to remove unknown binding: 66,0,0/3438547197:685166912/685166913
[  515.002883][ T5914] usb 4-1: USB disconnect, device number 22
[  515.333029][T20029] loop1: detected capacity change from 0 to 512
[  515.339136][T20029] EXT4-fs: Ignoring removed orlov option
[  515.341053][T20031] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  515.345723][T20029] EXT4-fs: Ignoring removed mblk_io_submit option
[  515.359617][T20029] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.5752: corrupted in-inode xattr: e_value size too large
[  515.367080][T20029] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  515.367613][T20029] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.5752: couldn't read orphan inode 15 (err -117)
[  515.376027][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  515.376051][    C1] EXT4-fs (loop1): initial error at time 1781009709: ext4_iget_extra_inode:5128: inode 15
[  515.376077][    C1] EXT4-fs (loop1): last error at time 1781009709: ext4_iget_extra_inode:5128: inode 15
[  515.387197][T20029] loop1: lost filesystem error report for type 5 error -117
[  515.389053][T20029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  515.435674][T19030] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  515.692937][T20054] loop1: detected capacity change from 0 to 128
[  515.841301][T20061] loop1: detected capacity change from 0 to 128
[  515.867914][T20061] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  515.873682][T20061] hpfs: filesystem error: improperly stopped
[  515.877403][T20061] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  515.888918][T20061] hpfs: You really don't want any checks? You are crazy...
[  515.897609][T20061] hpfs: Code page index out of array
[  515.902193][T20061] hpfs: code page support is disabled
[  515.907970][T20061] hpfs: hpfs_map_4sectors(): unaligned read
[  515.913244][T20061] hpfs: hpfs_map_4sectors(): unaligned read
[  515.919464][T20061] hpfs: filesystem error: unable to find root dir
[  516.718430][T20083] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5774'.
[  518.086433][T20105] serio: Serial port ptm0
[  518.787646][T20120] loop1: detected capacity change from 0 to 1024
[  518.812246][T20120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  518.817301][T20120] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  518.842900][T19030] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  519.133234][T20134] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5795'.
[  519.138147][T20134] netlink: 276 bytes leftover after parsing attributes in process `syz.3.5795'.
[  519.523868][T20150] loop3: detected capacity change from 0 to 512
[  519.586863][T20150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  519.591931][T20150] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  519.651690][T19464] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  520.013596][ T5914] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  520.167209][ T5914] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  520.171350][ T5914] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3
[  520.176073][ T5914] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  520.179917][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  520.192255][ T5914] usb 4-1: config 0 descriptor??
[  520.227489][T20168] loop1: detected capacity change from 0 to 128
[  520.245781][T20168] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  520.250279][T20168] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  520.380521][T19030] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  520.733575][ T6507] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  520.817440][ T5914] Bluetooth: Can't get version to change to load ram patch err
[  520.826296][ T5914] Bluetooth: Loading sysconfig file failed
[  520.829131][ T5914] ath3k 4-1:0.0: probe with driver ath3k failed with error -71
[  520.834950][ T5914] usb 4-1: USB disconnect, device number 23
[  520.885447][ T6507] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  520.888958][ T6507] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  520.894203][ T6507] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  520.897795][ T6507] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  520.902051][ T6507] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  520.908954][ T6507] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  520.913001][ T6507] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  520.917362][ T6507] usb 2-1: Product: syz
[  520.919373][ T6507] usb 2-1: Manufacturer: syz
[  520.931874][ T6507] cdc_wdm 2-1:1.0: skipping garbage
[  520.934429][ T6507] cdc_wdm 2-1:1.0: skipping garbage
[  520.941434][ T6507] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  520.944084][ T6507] cdc_wdm 2-1:1.0: Unknown control protocol
[  521.300043][T20180] netlink: 'syz.2.5814': attribute type 1 has an invalid length.
[  521.304063][T20180] netlink: 'syz.2.5814': attribute type 2 has an invalid length.
[  521.409578][T20188] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  521.596209][T20200] loop3: detected capacity change from 0 to 512
[  521.603770][T20200] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  521.630688][T20200] EXT4-fs (loop3): 1 orphan inode deleted
[  521.632761][T20200] EXT4-fs (loop3): 1 truncate cleaned up
[  521.636824][T20200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  521.698175][T19464] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  521.714831][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -EPIPE
[  521.774577][ T5914] usb 2-1: USB disconnect, device number 15
[  522.871550][T20250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5846'.
[  522.882210][T20250] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  522.898319][T20250] batman_adv: batadv0: Removing interface: batadv_slave_1
[  523.062448][T20262] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5852'.
[  523.130708][T20266] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5854'.
[  523.200231][T20268] loop3: detected capacity change from 0 to 4096
[  523.322322][T20268] ntfs3(loop3): ino=19, mi_enum_attr
[  523.330572][T20275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5858'.
[  523.333781][T20268] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  524.736194][T20292] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5864'.
[  524.739382][T20292] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5864'.
[  524.974079][T20294] loop1: detected capacity change from 0 to 32768
[  524.977136][T20294] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5865 (20294)
[  524.990997][T20294] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  524.994414][T20294] BTRFS info (device loop1): using crc32c checksum algorithm
[  525.096591][T20294] BTRFS info (device loop1): enabling ssd optimizations
[  525.099238][T20294] BTRFS info (device loop1): turning on flush-on-commit
[  525.102082][T20294] BTRFS info (device loop1): enabling free space tree
[  525.104362][T20319] xt_ecn: cannot match TCP bits for non-tcp packets
[  525.104831][T20294] BTRFS info (device loop1): force zlib compression, level 3
[  525.109719][T20294] BTRFS info (device loop1): max_inline set to 4096
[  525.171487][T19030] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  525.978947][T20339] loop3: detected capacity change from 0 to 4096
[  526.004711][T20339] ntfs3(loop3): ino=1a, mi_enum_attr
[  526.007118][T20339] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  527.095731][T20346] loop3: detected capacity change from 0 to 32768
[  527.108503][T20346] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  527.137657][T20346] XFS (loop3): Ending clean mount
[  527.153762][   T31] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  527.208484][T19464] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  527.362914][   T31] usb 2-1: unable to get BOS descriptor or descriptor too short
[  527.378133][   T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  527.387704][   T31] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  527.396261][   T31] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  527.406521][   T31] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  527.417899][   T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  527.427803][   T31] usb 2-1: config 1 interface 1 has no altsetting 0
[  527.438037][   T31] usb 2-1: string descriptor 0 read error: -22
[  527.444045][   T31] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  527.452500][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.526261][T20358] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5884'.
[  527.673057][   T31] usb 2-1: 2:0: failed to get current value for ch 0 (-32)
[  527.694820][T20364] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5887'.
[  527.881577][   T31] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2)
[  527.889908][   T31] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[  527.899043][   T31] usb 2-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1
[  527.925051][T16591] udevd[16591]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: Read-only file system
[  527.942207][   T31] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2)
[  527.956107][   T31] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2)
[  527.974041][   T31] usb 2-1: USB disconnect, device number 16
[  528.153621][ T5914] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  528.306045][ T5914] usb 4-1: Using ep0 maxpacket: 16
[  528.311239][ T5914] usb 4-1: unable to get BOS descriptor or descriptor too short
[  528.317188][ T5914] usb 4-1: config 1 has an invalid interface number: 151 but max is 0
[  528.323037][ T5914] usb 4-1: config 1 has no interface number 0
[  528.325749][ T5914] usb 4-1: config 1 interface 151 has no altsetting 0
[  528.332289][ T5914] usb 4-1: string descriptor 0 read error: -22
[  528.334488][ T5914] usb 4-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85
[  528.337646][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  528.355999][ T5914] gspca_main: pac7311-2.14.0 probing 093a:260e
[  528.519032][T20384] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5897'.
[  528.582411][T20386] sctp: [Deprecated]: syz.2.5898 (pid 20386) Use of int in max_burst socket option.
[  528.582411][T20386] Use struct sctp_assoc_value instead
[  528.776952][ T5914] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71
[  528.784101][ T5914] pac7311 4-1:1.151: probe with driver pac7311 failed with error -71
[  528.791438][ T5914] usb 4-1: USB disconnect, device number 24
[  529.081279][T20407] loop1: detected capacity change from 0 to 1024
[  529.147720][T20407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  529.152744][T20407] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  529.162118][T20407] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.5906: lblock 0 mapped to illegal pblock 0 (length 6)
[  529.172268][T20407] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.5906: lblock 0 mapped to illegal pblock 0 (length 5)
[  529.186810][T20407] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117
[  529.191704][T20407] EXT4-fs (loop1): This should not happen!! Data will be lost
[  529.191704][T20407] 
[  529.218953][T19030] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  529.224568][T19030] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  529.438361][T20416] loop3: detected capacity change from 0 to 128
[  529.451003][T20416] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  529.467725][T20416] hpfs: filesystem error: improperly stopped
[  529.470958][T20416] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  529.474456][T20416] hpfs: You really don't want any checks? You are crazy...
[  529.476893][T20416] hpfs: Code page index out of array
[  529.479154][T20416] hpfs: code page support is disabled
[  529.481986][T20416] hpfs: hpfs_map_4sectors(): unaligned read
[  529.485082][T20416] hpfs: hpfs_map_4sectors(): unaligned read
[  529.487689][T20416] hpfs: filesystem error: unable to find root dir
[  529.508192][T20416] hpfs: hpfs_map_4sectors(): unaligned read
[  529.875844][T20422] loop1: detected capacity change from 0 to 40427
[  529.879658][T20422] F2FS-fs (loop1): invalid crc value
[  529.923280][T20422] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  529.931202][T20422] F2FS-fs (loop1): Start checkpoint disabled!
[  529.945190][T20422] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[  529.948933][T20422] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  529.967876][   T33] audit: type=1800 audit(1781009723.655:406): pid=20422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5912" name="file1" dev="loop1" ino=10 res=0 errno=0
[  530.303993][T20432] syz.1.5912: attempt to access beyond end of device
[  530.303993][T20432] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  530.317191][T20432] syz.1.5912: attempt to access beyond end of device
[  530.317191][T20432] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  530.328632][T20432] syz.1.5912: attempt to access beyond end of device
[  530.328632][T20432] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  530.339783][T20432] syz.1.5912: attempt to access beyond end of device
[  530.339783][T20432] loop1: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[  530.346986][T20432] syz.1.5912: attempt to access beyond end of device
[  530.346986][T20432] loop1: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[  530.357672][T20432] syz.1.5912: attempt to access beyond end of device
[  530.357672][T20432] loop1: rw=2049, sector=45136, nr_sectors = 16 limit=40427
[  530.365624][T20432] syz.1.5912: attempt to access beyond end of device
[  530.365624][T20432] loop1: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[  530.371840][T20432] syz.1.5912: attempt to access beyond end of device
[  530.371840][T20432] loop1: rw=2049, sector=45160, nr_sectors = 8 limit=40427
[  530.383082][T20432] syz.1.5912: attempt to access beyond end of device
[  530.383082][T20432] loop1: rw=2049, sector=45168, nr_sectors = 8 limit=40427
[  530.396349][T20432] syz.1.5912: attempt to access beyond end of device
[  530.396349][T20432] loop1: rw=2049, sector=45176, nr_sectors = 8 limit=40427
[  530.673587][T10042] CPU: 0 UID: 0 PID: 10042 Comm: kworker/u10:26 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  530.673613][T10042] Tainted: [L]=SOFTLOCKUP
[  530.673618][T10042] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  530.673627][T10042] Workqueue: writeback wb_workfn (flush-7:1)
[  530.673659][T10042] Call Trace:
[  530.673665][T10042]  <TASK>
[  530.673671][T10042]  dump_stack_lvl+0xe8/0x150
[  530.673687][T10042]  f2fs_stop_checkpoint+0x3c7/0x590
[  530.673715][T10042]  f2fs_write_end_io+0x1274/0x1740
[  530.673747][T10042]  __submit_merged_bio+0x256/0x6a0
[  530.673795][T10042]  __submit_merged_write_cond+0x3c9/0x4e0
[  530.673821][T10042]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  530.673858][T10042]  f2fs_write_data_pages+0x287e/0x34f0
[  530.673871][T10042]  ? f2fs_build_free_nids+0xdc/0x1810
[  530.673911][T10042]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  530.673937][T10042]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  530.673974][T10042]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  530.674006][T10042]  ? __lock_acquire+0x6b5/0x2cf0
[  530.674029][T10042]  ? f2fs_update_inode+0x13d9/0x2620
[  530.674049][T10042]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  530.674066][T10042]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  530.674080][T10042]  do_writepages+0x32e/0x550
[  530.674102][T10042]  ? reacquire_held_locks+0x104/0x190
[  530.674116][T10042]  ? writeback_sb_inodes+0x463/0x19d0
[  530.674139][T10042]  __writeback_single_inode+0x133/0x10e0
[  530.674154][T10042]  ? do_raw_spin_unlock+0x4d/0x210
[  530.674173][T10042]  writeback_sb_inodes+0x979/0x19d0
[  530.674192][T10042]  ? __lock_acquire+0x6b5/0x2cf0
[  530.674224][T10042]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  530.674241][T10042]  ? do_raw_spin_lock+0x12b/0x2f0
[  530.674283][T10042]  ? rcu_is_watching+0x15/0xb0
[  530.674304][T10042]  wb_writeback+0x445/0xb00
[  530.674326][T10042]  ? queue_io+0x231/0x470
[  530.674347][T10042]  ? __pfx_wb_writeback+0x10/0x10
[  530.674364][T10042]  ? do_raw_spin_lock+0x12b/0x2f0
[  530.674393][T10042]  wb_workfn+0x3f8/0xf10
[  530.674408][T10042]  ? __lock_acquire+0x6b5/0x2cf0
[  530.674418][T10042]  ? look_up_lock_class+0x57/0x110
[  530.674447][T10042]  ? __pfx_wb_workfn+0x10/0x10
[  530.674466][T10042]  ? do_raw_spin_lock+0x12b/0x2f0
[  530.674482][T10042]  ? lock_acquire+0x106/0x350
[  530.674532][T10042]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  530.674550][T10042]  ? process_scheduled_works+0xa70/0x1860
[  530.674565][T10042]  ? process_scheduled_works+0xa70/0x1860
[  530.674584][T10042]  ? process_scheduled_works+0xa70/0x1860
[  530.674597][T10042]  ? process_scheduled_works+0xa70/0x1860
[  530.674611][T10042]  process_scheduled_works+0xb5d/0x1860
[  530.674646][T10042]  ? __pfx_process_scheduled_works+0x10/0x10
[  530.674665][T10042]  ? assign_work+0x3d5/0x5e0
[  530.674681][T10042]  worker_thread+0xa53/0xfc0
[  530.674717][T10042]  kthread+0x389/0x470
[  530.674735][T10042]  ? __pfx_worker_thread+0x10/0x10
[  530.674748][T10042]  ? __pfx_kthread+0x10/0x10
[  530.674773][T10042]  ret_from_fork+0x514/0xb70
[  530.674793][T10042]  ? __pfx_ret_from_fork+0x10/0x10
[  530.674806][T10042]  ? __switch_to+0xc79/0x1410
[  530.674828][T10042]  ? __pfx_kthread+0x10/0x10
[  530.674847][T10042]  ret_from_fork_asm+0x1a/0x30
[  530.674873][T10042]  </TASK>
[  530.674879][T10042] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  530.889723][T20445] netlink: 'syz.3.5922': attribute type 1 has an invalid length.
[  530.972087][T20449] loop3: detected capacity change from 0 to 512
[  530.982068][T20449] EXT4-fs: Ignoring removed oldalloc option
[  531.008628][T20449] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.5924: Parent and EA inode have the same ino 15
[  531.013782][T20449] loop3: lost filesystem error report for type 5 error -117
[  531.014189][T20449] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.5924: Parent and EA inode have the same ino 15
[  531.022100][T20449] loop3: lost filesystem error report for type 5 error -117
[  531.022790][T20449] EXT4-fs (loop3): 1 orphan inode deleted
[  531.025815][    C0] EXT4-fs (loop3): error count since last fsck: 2
[  531.025830][    C0] EXT4-fs (loop3): initial error at time 1781009724: ext4_xattr_inode_iget:437
[  531.025846][    C0] EXT4-fs (loop3): last error at time 1781009724: ext4_xattr_inode_iget:437
[  531.051343][T20449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  531.100722][T19464] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  531.229025][T20462] loop1: detected capacity change from 0 to 16
[  531.232221][T20462] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  531.372342][T20472] netlink: 'syz.2.5935': attribute type 6 has an invalid length.
[  531.377815][T20472] IPv6: NLM_F_CREATE should be specified when creating new route
[  531.411929][T20474] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5934'.
[  531.470387][T20482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5939'.
[  531.519267][T20487] xt_hashlimit: max too large, truncated to 1048576
[  532.050068][T20515] loop1: detected capacity change from 0 to 512
[  532.068979][T20515] EXT4-fs: test_dummy_encryption requires encrypt feature
[  532.909596][T20524] GUP no longer grows the stack in syz.2.5955 (20524): 200000004000-200000005000 (200000001000)
[  532.913906][T20524] CPU: 1 UID: 0 PID: 20524 Comm: syz.2.5955 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  532.913921][T20524] Tainted: [L]=SOFTLOCKUP
[  532.913924][T20524] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  532.913929][T20524] Call Trace:
[  532.913934][T20524]  <TASK>
[  532.913937][T20524]  dump_stack_lvl+0xe8/0x150
[  532.913951][T20524]  __get_user_pages+0x2378/0x2730
[  532.913972][T20524]  ? __gup_longterm_locked+0xc4e/0x1630
[  532.913983][T20524]  ? down_read_killable+0x1bb/0x340
[  532.913997][T20524]  __gup_longterm_locked+0xdcf/0x1630
[  532.914009][T20524]  ? lock_acquire+0x106/0x350
[  532.914025][T20524]  gup_fast_fallback+0x1d8e/0x20e0
[  532.914048][T20524]  ? __pfx_gup_fast_fallback+0x10/0x10
[  532.914060][T20524]  ? is_valid_gup_args+0x11f/0x200
[  532.914071][T20524]  ? get_user_pages_fast+0x4d/0xb0
[  532.914082][T20524]  __iov_iter_get_pages_alloc+0x370/0xa10
[  532.914103][T20524]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  532.914115][T20524]  iov_iter_get_pages2+0x5e/0xa0
[  532.914128][T20524]  __se_sys_vmsplice+0x7c7/0x1620
[  532.914145][T20524]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  532.914154][T20524]  ? __pfx_futex_wait+0x10/0x10
[  532.914194][T20524]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  532.914203][T20524]  do_syscall_64+0x174/0x580
[  532.914213][T20524]  ? trace_irq_disable+0x3b/0x140
[  532.914226][T20524]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  532.914234][T20524] RIP: 0033:0x7fd2f899ce59
[  532.914242][T20524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  532.914249][T20524] RSP: 002b:00007fd2f6bee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  532.914258][T20524] RAX: ffffffffffffffda RBX: 00007fd2f8c15fa0 RCX: 00007fd2f899ce59
[  532.914264][T20524] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004
[  532.914269][T20524] RBP: 00007fd2f8a32d6f R08: 0000000000000000 R09: 0000000000000000
[  532.914273][T20524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  532.914278][T20524] R13: 00007fd2f8c16038 R14: 00007fd2f8c15fa0 R15: 00007ffdac41d5b8
[  532.914291][T20524]  </TASK>
[  533.201921][T20535] tipc: Failed to remove unknown binding: 66,1,1/0:1395623736/1395623738
[  533.205666][T20535] tipc: Failed to remove unknown binding: 66,1,1/0:1395623736/1395623738
[  534.812304][T20564] netlink: 'syz.2.5972': attribute type 9 has an invalid length.
[  534.816355][T20564] netlink: 'syz.2.5972': attribute type 11 has an invalid length.
[  534.819469][T20564] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.5972'.
[  535.035006][T20570] overlayfs: failed to clone upperpath
[  535.147987][T20582] xt_TCPMSS: Only works on TCP SYN packets
[  535.154098][T20581] openvswitch: netlink: IP tunnel dst address not specified
[  535.173067][T20584] loop3: detected capacity change from 0 to 128
[  535.187437][T20584] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  535.194456][T20584] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  535.226748][T19464] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  535.508425][T20598] netlink: 'syz.3.5987': attribute type 7 has an invalid length.
[  535.511743][T20598] netlink: 'syz.3.5987': attribute type 8 has an invalid length.
[  535.521547][T20597] netlink: 'syz.3.5987': attribute type 7 has an invalid length.
[  535.528339][T20597] netlink: 'syz.3.5987': attribute type 8 has an invalid length.
[  535.759803][T20600] tmpfs: Bad value for 'mpol'
[  536.426062][T20608] fuse: fd is not a fuse device
[  536.989937][T20629] netlink: 'syz.2.6002': attribute type 1 has an invalid length.
[  537.014991][T20632] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  537.127773][T20634] input: syz1 as /devices/virtual/input/input21
[  537.132204][T20634] input: failed to attach handler leds to device input21, error: -6
[  537.203687][ T5875] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  537.235902][T20638] ip6tnl0: Caught tx_queue_len zero misconfig
[  537.356268][ T5875] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  537.362563][ T5875] usb 2-1: config 0 has no interfaces?
[  537.365005][ T5875] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  537.368738][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  537.379359][ T5875] usb 2-1: config 0 descriptor??
[  537.441504][T20651] netlink: 'syz.2.6012': attribute type 2 has an invalid length.
[  537.448200][T20651] netlink: 'syz.2.6012': attribute type 8 has an invalid length.
[  537.451375][T20651] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6012'.
[  537.611875][ T5875] usb 2-1: USB disconnect, device number 17
[  537.666646][T20661] loop3: detected capacity change from 0 to 4096
[  537.709560][T20661] ntfs3(loop3): ino=19, mi_enum_attr
[  537.713238][T20661] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  538.176087][T20668] netlink: 'syz.1.6020': attribute type 1 has an invalid length.
[  538.209090][T20668] bond1: entered promiscuous mode
[  538.216377][T20668] 8021q: adding VLAN 0 to HW filter on device bond1
[  538.263672][T20668] bond1: (slave bridge1): making interface the new active one
[  538.270533][T20668] bridge1: entered promiscuous mode
[  538.291687][T20668] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  538.670411][T20685] program syz.1.6027 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  538.798249][T20695] loop1: detected capacity change from 0 to 128
[  539.241494][   T33] audit: type=1326 audit(1781009732.925:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20720 comm="syz.1.6045" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7fb59ce59 code=0x0
[  539.598092][T20737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6052'.
[  539.604979][T20737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6052'.
[  539.611175][T20737] netlink: 'syz.1.6052': attribute type 19 has an invalid length.
[  539.617195][T20737] netlink: 'syz.1.6052': attribute type 20 has an invalid length.
[  539.753055][T20748] loop3: detected capacity change from 0 to 512
[  539.766593][T20748] EXT4-fs: Ignoring removed mblk_io_submit option
[  539.779578][T20748] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  539.789625][T20748] EXT4-fs (loop3): first meta block group too large: 9 (group descriptor block count 1)
[  539.868989][T20754] loop1: detected capacity change from 0 to 2048
[  539.879140][T20754] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  539.976518][T20760] QAT: failed to copy from user cfg_data.
[  540.018425][T20762] loop1: detected capacity change from 0 to 4096
[  540.024385][T20762] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  540.086624][T20762] Invalid source name
[  540.179557][T20770] netlink: 'syz.3.6067': attribute type 2 has an invalid length.
[  540.305985][T20772] loop3: detected capacity change from 0 to 2048
[  540.358987][T20772]  loop3: p1 < > p4
[  540.361029][T20772] loop3: partition table partially beyond EOD, truncated
[  540.370592][T20772] loop3: p4 start 4096 is beyond EOD, truncated
[  540.383374][T20769] loop1: detected capacity change from 0 to 32768
[  540.536345][T20774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  540.981777][T20794] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6079'.
[  541.073907][ T5914] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  541.224184][ T5914] usb 2-1: Using ep0 maxpacket: 8
[  541.234964][ T5914] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15
[  541.239265][T20800] loop3: detected capacity change from 0 to 32768
[  541.243871][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  541.254424][T20800] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  541.266901][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  541.297296][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  541.316119][ T5914] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  541.329483][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.346048][ T5914] usb 2-1: Product: syz
[  541.349638][ T5914] usb 2-1: Manufacturer: syz
[  541.353304][ T5914] usb 2-1: SerialNumber: syz
[  541.367192][ T5914] usb 2-1: config 0 descriptor??
[  541.371931][T20786] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  541.394989][T19464] ocfs2: Unmounting device (7,3) on (node local)
[  541.502633][T20808] loop3: detected capacity change from 0 to 256
[  541.513971][T20808] FAT-fs (loop3): Directory bread(block 64) failed
[  541.516707][T20808] FAT-fs (loop3): Directory bread(block 65) failed
[  541.518986][T20808] FAT-fs (loop3): Directory bread(block 66) failed
[  541.521509][T20808] FAT-fs (loop3): Directory bread(block 67) failed
[  541.524779][T20808] FAT-fs (loop3): Directory bread(block 68) failed
[  541.526912][T20808] FAT-fs (loop3): Directory bread(block 69) failed
[  541.529072][T20808] FAT-fs (loop3): Directory bread(block 70) failed
[  541.531138][T20808] FAT-fs (loop3): Directory bread(block 71) failed
[  541.533367][T20808] FAT-fs (loop3): Directory bread(block 72) failed
[  541.535496][T20808] FAT-fs (loop3): Directory bread(block 73) failed
[  541.594039][ T5914] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[  541.622134][ T5914] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input22
[  541.845573][    C0] powermate: config urb returned -71
[  541.846515][   T24] usb 2-1: USB disconnect, device number 18
[  541.847838][    C0] powermate: usb_submit_urb(config) failed
[  541.850145][    C0] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  542.629609][ T5006] Bluetooth: hci1: Malformed LE Event: 0x0d
[  543.002799][T20867] loop1: detected capacity change from 0 to 24
[  543.873722][T20883] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4.
[  543.876950][T20880] loop3: detected capacity change from 0 to 4096
[  543.937681][T20880] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  544.043125][T20880] ntfs3(loop3): ino=19, mi_enum_attr
[  544.045648][T20880] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  544.059523][T20880] ntfs3(loop3): ino=18, mi_enum_attr
[  544.428518][T20893] loop3: detected capacity change from 0 to 512
[  544.442431][T20893] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  544.465090][T20893] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  544.476866][T20893] EXT4-fs (loop3): orphan cleanup on readonly fs
[  544.488455][T20893] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.6123: bad orphan inode 3
[  544.492985][T20893] loop3: lost filesystem error report for type 5 error -117
[  544.493521][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  544.499064][    C0] EXT4-fs (loop3): initial error at time 1781009738: ext4_orphan_get:1423
[  544.502453][    C0] EXT4-fs (loop3): last error at time 1781009738: ext4_orphan_get:1423
[  544.506462][T20893] EXT4-fs (loop3): Remounting filesystem read-only
[  544.510323][T20893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  544.530534][T20893] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.6123: dx entry: limit 0 != root limit 125
[  544.552045][T20893] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.6123: Corrupt directory, running e2fsck is recommended
[  544.566673][T20900] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6126'.
[  544.578476][T19464] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  544.858201][T20916] netlink: 'syz.1.6134': attribute type 4 has an invalid length.
[  545.204755][T20941] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6145'.
[  545.217532][T20941] netlink: 192 bytes leftover after parsing attributes in process `syz.2.6145'.
[  545.221452][T20941] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6145'.
[  545.576189][   T33] audit: type=1800 audit(1781009739.265:408): pid=20960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6154" name="bus" dev="tmpfs" ino=1181 res=0 errno=0
[  545.710177][T20966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6157'.
[  546.226461][T20978] loop3: detected capacity change from 0 to 1024
[  546.231761][T20978] EXT4-fs: Ignoring removed mblk_io_submit option
[  546.256653][T20978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  546.261152][T20978] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  546.268822][   T56] block nbd0: Receive control failed (result -32)
[  546.335842][ T7996] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm kworker/u10:10: lblock 3 mapped to illegal pblock 3 (length 3)
[  546.345580][ T7996] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  546.352150][ T7996] EXT4-fs (loop3): This should not happen!! Data will be lost
[  546.352150][ T7996] 
[  546.363301][T10042] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 8: comm kworker/u10:26: lblock 8 mapped to illegal pblock 8 (length 5)
[  546.369969][T10042] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117
[  546.377378][T10042] EXT4-fs (loop3): This should not happen!! Data will be lost
[  546.377378][T10042] 
[  546.381075][T19464] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  546.387759][T19464] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  547.264034][T21004] IPv6: NLM_F_CREATE should be specified when creating new route
[  548.120843][T21018] netlink: 'syz.3.6178': attribute type 12 has an invalid length.
[  548.130424][T21018] netlink: 'syz.3.6178': attribute type 29 has an invalid length.
[  548.136820][T21018] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6178'.
[  548.145486][T21018] netlink: 'syz.3.6178': attribute type 1 has an invalid length.
[  548.149702][T21018] netlink: 'syz.3.6178': attribute type 2 has an invalid length.
[  548.153133][T21018] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6178'.
[  548.370796][T21024] loop3: detected capacity change from 0 to 32768
[  548.388256][T21024] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  548.866381][T21038] overlayfs: upper fs does not support tmpfile.
[  548.874016][T21037] loop1: detected capacity change from 0 to 512
[  548.875207][T21038] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  548.879763][T21038] 
[  548.880760][T21038] ======================================================
[  548.883542][T21038] WARNING: possible circular locking dependency detected
[  548.886386][T21038] syzkaller #0 Tainted: G             L     
[  548.888769][T21038] ------------------------------------------------------
[  548.891383][T21038] syz.3.6181/21038 is trying to acquire lock:
[  548.893266][T21038] ffff8881ac9933a0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x16d/0x4840
[  548.894178][T21037] EXT4-fs: Ignoring removed nobh option
[  548.898137][T21038] 
[  548.898137][T21038] but task is already holding lock:
[  548.898148][T21038] ffff88801b5c86e8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x475/0x13e0
[  548.898197][T21038] 
[  548.898197][T21038] which lock already depends on the new lock.
[  548.898197][T21038] 
[  548.898202][T21038] 
[  548.898202][T21038] the existing dependency chain (in reverse order) is:
[  548.898209][T21038] 
[  548.898209][T21038] -> #4 (&oi->ip_xattr_sem){++++}-{4:4}:
[  548.898231][T21038]        down_read+0x47/0x2e0
[  548.919735][T21038]        ocfs2_init_acl+0x2fd/0x7e0
[  548.921829][T21038]        ocfs2_mknod+0x1679/0x2260
[  548.923936][T21038]        ocfs2_create+0x195/0x460
[  548.925888][T21038]        path_openat+0x1395/0x3860
[  548.927964][T21038]        do_file_open+0x23e/0x4a0
[  548.929956][T21038]        do_sys_openat2+0x113/0x200
[  548.932011][T21038]        __x64_sys_openat+0x138/0x170
[  548.934029][T21038]        do_syscall_64+0x174/0x580
[  548.936020][T21038]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.938452][T21038] 
[  548.938452][T21038] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  548.941790][T21038]        down_read+0x47/0x2e0
[  548.943682][T21038]        ocfs2_start_trans+0x3ab/0x700
[  548.945864][T21038]        ocfs2_mknod+0x1181/0x2260
[  548.947932][T21038]        ocfs2_create+0x195/0x460
[  548.949961][T21038]        path_openat+0x1395/0x3860
[  548.952002][T21038]        do_file_open+0x23e/0x4a0
[  548.954017][T21038]        do_sys_openat2+0x113/0x200
[  548.956129][T21038]        __x64_sys_open+0x11e/0x150
[  548.958685][T21038]        do_syscall_64+0x174/0x580
[  548.960287][T21038]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.962219][T21038] 
[  548.962219][T21038] -> #2 (sb_internal#4){.+.+}-{0:0}:
[  548.964481][T21038]        ocfs2_start_trans+0x2ac/0x700
[  548.966152][T21038]        ocfs2_mknod+0x1181/0x2260
[  548.967775][T21038]        ocfs2_create+0x195/0x460
[  548.969699][T21038]        path_openat+0x1395/0x3860
[  548.971695][T21038]        do_file_open+0x23e/0x4a0
[  548.973401][T21038]        do_sys_openat2+0x113/0x200
[  548.974992][T21038]        __x64_sys_open+0x11e/0x150
[  548.977034][T21038]        do_syscall_64+0x174/0x580
[  548.978650][T21038]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.980579][T21038] 
[  548.980579][T21038] -> #1 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  548.984460][T21038]        down_write+0x96/0x200
[  548.985959][T21038]        ocfs2_reserve_local_alloc_bits+0x11f/0x2660
[  548.988035][T21038]        ocfs2_reserve_clusters_with_limit+0x1b9/0xc20
[  548.990130][T21038]        ocfs2_mknod+0x111f/0x2260
[  548.991680][T21038]        ocfs2_create+0x195/0x460
[  548.993183][T21038]        path_openat+0x1395/0x3860
[  548.994846][T21038]        do_file_open+0x23e/0x4a0
[  548.996442][T21038]        do_sys_openat2+0x113/0x200
[  548.998331][T21038]        __x64_sys_open+0x11e/0x150
[  549.000312][T21038]        do_syscall_64+0x174/0x580
[  549.002362][T21038]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  549.004925][T21038] 
[  549.004925][T21038] -> #0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  549.009115][T21038]        __lock_acquire+0x15a5/0x2cf0
[  549.011263][T21038]        lock_acquire+0x106/0x350
[  549.013261][T21038]        down_write+0x96/0x200
[  549.015183][T21038]        ocfs2_reserve_suballoc_bits+0x16d/0x4840
[  549.017679][T21038]        ocfs2_reserve_new_metadata_blocks+0x415/0x9a0
[  549.020308][T21038]        ocfs2_init_xattr_set_ctxt+0x2f5/0x760
[  549.022747][T21038]        ocfs2_xattr_set+0xc42/0x13e0
[  549.024876][T21038]        __vfs_setxattr+0x43c/0x480
[  549.026944][T21038]        __vfs_setxattr_noperm+0x12d/0x660
[  549.029256][T21038]        vfs_setxattr+0x163/0x360
[  549.031216][T21038]        ovl_fill_super+0x4b5e/0x5e20
[  549.033338][T21038]        get_tree_nodev+0xbb/0x150
[  549.035363][T21038]        vfs_get_tree+0x92/0x2a0
[  549.037351][T21038]        do_new_mount+0x341/0xd30
[  549.039337][T21038]        __se_sys_mount+0x31d/0x420
[  549.041365][T21038]        do_syscall_64+0x174/0x580
[  549.043407][T21038]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  549.045861][T21038] 
[  549.045861][T21038] other info that might help us debug this:
[  549.045861][T21038] 
[  549.049612][T21038] Chain exists of:
[  549.049612][T21038]   &ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE] --> &journal->j_trans_barrier --> &oi->ip_xattr_sem
[  549.049612][T21038] 
[  549.055465][T21038]  Possible unsafe locking scenario:
[  549.055465][T21038] 
[  549.057682][T21038]        CPU0                    CPU1
[  549.059421][T21038]        ----                    ----
[  549.061523][T21038]   lock(&oi->ip_xattr_sem);
[  549.063380][T21038]                                lock(&journal->j_trans_barrier);
[  549.066347][T21038]                                lock(&oi->ip_xattr_sem);
[  549.068888][T21038]   lock(&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]);
[  549.072173][T21038] 
[  549.072173][T21038]  *** DEADLOCK ***
[  549.072173][T21038] 
[  549.075455][T21038] 4 locks held by syz.3.6181/21038:
[  549.077598][T21038]  #0: ffff8881a0ec00d8 (&type->s_umount_key#59/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xab0
[  549.081609][T21038]  #1: ffff8881a0b2a410 (sb_writers#28){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  549.085088][T21038]  #2: ffff88801b5c89a0 (&sb->s_type->i_mutex_key#37){++++}-{4:4}, at: vfs_setxattr+0x13e/0x360
[  549.089314][T21038]  #3: ffff88801b5c86e8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x475/0x13e0
[  549.093136][T21038] 
[  549.093136][T21038] stack backtrace:
[  549.095533][T21038] CPU: 0 UID: 0 PID: 21038 Comm: syz.3.6181 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  549.095553][T21038] Tainted: [L]=SOFTLOCKUP
[  549.095560][T21038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  549.095571][T21038] Call Trace:
[  549.095579][T21038]  <TASK>
[  549.095590][T21038]  dump_stack_lvl+0xe8/0x150
[  549.095608][T21038]  print_circular_bug+0x2e1/0x300
[  549.095629][T21038]  check_noncircular+0x12e/0x150
[  549.095649][T21038]  __lock_acquire+0x15a5/0x2cf0
[  549.095669][T21038]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  549.095696][T21038]  ? _raw_spin_unlock+0x28/0x50
[  549.095715][T21038]  ? ocfs2_reserve_suballoc_bits+0x16d/0x4840
[  549.095731][T21038]  lock_acquire+0x106/0x350
[  549.095747][T21038]  ? ocfs2_reserve_suballoc_bits+0x16d/0x4840
[  549.095771][T21038]  down_write+0x96/0x200
[  549.095792][T21038]  ? ocfs2_reserve_suballoc_bits+0x16d/0x4840
[  549.095808][T21038]  ? __pfx_down_write+0x10/0x10
[  549.095827][T21038]  ? add_lock_to_list+0xc7/0x100
[  549.095848][T21038]  ? __lock_acquire+0x146e/0x2cf0
[  549.095868][T21038]  ocfs2_reserve_suballoc_bits+0x16d/0x4840
[  549.095895][T21038]  ? do_raw_spin_lock+0x12b/0x2f0
[  549.095975][T21038]  ? __pfx_ocfs2_reserve_suballoc_bits+0x10/0x10
[  549.095999][T21038]  ? lockdep_hardirqs_on+0x7a/0x110
[  549.096025][T21038]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  549.096053][T21038]  ? stack_depot_save_flags+0x3f3/0x810
[  549.096080][T21038]  ? kasan_save_track+0x4f/0x80
[  549.096100][T21038]  ? kasan_save_track+0x3e/0x80
[  549.096116][T21038]  ? __kasan_kmalloc+0x93/0xb0
[  549.096134][T21038]  ? __kmalloc_cache_noprof+0x31c/0x660
[  549.096152][T21038]  ? ocfs2_reserve_new_metadata_blocks+0x10c/0x9a0
[  549.096172][T21038]  ? ocfs2_init_xattr_set_ctxt+0x2f5/0x760
[  549.096191][T21038]  ? ocfs2_xattr_set+0xc42/0x13e0
[  549.096213][T21038]  ? __vfs_setxattr+0x43c/0x480
[  549.096276][T21038]  ? __vfs_setxattr_noperm+0x12d/0x660
[  549.096293][T21038]  ? vfs_setxattr+0x163/0x360
[  549.096310][T21038]  ? ovl_fill_super+0x4b5e/0x5e20
[  549.096326][T21038]  ? get_tree_nodev+0xbb/0x150
[  549.096347][T21038]  ? vfs_get_tree+0x92/0x2a0
[  549.096367][T21038]  ? do_new_mount+0x341/0xd30
[  549.096401][T21038]  ? __se_sys_mount+0x31d/0x420
[  549.096417][T21038]  ? do_syscall_64+0x174/0x580
[  549.096434][T21038]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  549.096473][T21038]  ? __kasan_kmalloc+0x93/0xb0
[  549.096490][T21038]  ? __kmalloc_cache_noprof+0x31c/0x660
[  549.096505][T21038]  ? ocfs2_reserve_new_metadata_blocks+0x10c/0x9a0
[  549.096523][T21038]  ? __kmalloc_cache_noprof+0x15b/0x660
[  549.096543][T21038]  ocfs2_reserve_new_metadata_blocks+0x415/0x9a0
[  549.096564][T21038]  ? __pfx_ocfs2_reserve_new_metadata_blocks+0x10/0x10
[  549.096583][T21038]  ? __pfx_ocfs2_calc_xattr_set_need+0x10/0x10
[  549.096616][T21038]  ocfs2_init_xattr_set_ctxt+0x2f5/0x760
[  549.096638][T21038]  ? __pfx_ocfs2_init_xattr_set_ctxt+0x10/0x10
[  549.096664][T21038]  ? ocfs2_xattr_set+0xc08/0x13e0
[  549.096685][T21038]  ? up_write+0x1ab/0x410
[  549.096706][T21038]  ? __kmalloc_cache_noprof+0x15b/0x660
[  549.096723][T21038]  ocfs2_xattr_set+0xc42/0x13e0
[  549.096743][T21038]  ? desc_read+0x294/0x410
[  549.096772][T21038]  ? __pfx_ocfs2_xattr_set+0x10/0x10
[  549.096791][T21038]  ? _prb_read_valid+0xa18/0xab0
[  549.096818][T21038]  ? __pfx_up+0x10/0x10
[  549.096842][T21038]  ? posix_xattr_acl+0x93/0xc0
[  549.096869][T21038]  ? evm_protect_xattr+0x4d4/0xac0
[  549.096896][T21038]  ? __pfx_evm_protect_xattr+0x10/0x10
[  549.096915][T21038]  ? __pfx_ocfs2_xattr_trusted_set+0x10/0x10
[  549.096933][T21038]  __vfs_setxattr+0x43c/0x480
[  549.096954][T21038]  __vfs_setxattr_noperm+0x12d/0x660
[  549.096971][T21038]  vfs_setxattr+0x163/0x360
[  549.096987][T21038]  ? __pfx_vfs_setxattr+0x10/0x10
[  549.097001][T21038]  ? __dentry_kill+0x4f6/0x690
[  549.097018][T21038]  ? finish_dput+0xad/0x480
[  549.097032][T21038]  ? finish_dput+0x3da/0x480
[  549.097045][T21038]  ovl_fill_super+0x4b5e/0x5e20
[  549.097073][T21038]  ? __pfx_ovl_fill_super+0x10/0x10
[  549.097090][T21038]  ? rcu_is_watching+0x15/0xb0
[  549.097109][T21038]  ? __pfx___mutex_trylock_common+0x10/0x10
[  549.097125][T21038]  ? trace_contention_end+0x3d/0x140
[  549.097142][T21038]  ? shrinker_register+0x124/0x230
[  549.097159][T21038]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  549.097175][T21038]  ? shrinker_register+0x61/0x230
[  549.097197][T21038]  ? __pfx___mutex_lock+0x10/0x10
[  549.097212][T21038]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  549.097260][T21038]  ? __raw_spin_lock_init+0x45/0x100
[  549.097281][T21038]  ? sget_fc+0x962/0xa40
[  549.097296][T21038]  ? __pfx_set_anon_super_fc+0x10/0x10
[  549.097313][T21038]  ? __pfx_ovl_fill_super+0x10/0x10
[  549.097328][T21038]  get_tree_nodev+0xbb/0x150
[  549.097341][T21038]  vfs_get_tree+0x92/0x2a0
[  549.097357][T21038]  do_new_mount+0x341/0xd30
[  549.097368][T21038]  ? apparmor_capable+0x126/0x170
[  549.097394][T21038]  ? __pfx_do_new_mount+0x10/0x10
[  549.097406][T21038]  ? ns_capable+0x89/0xe0
[  549.097421][T21038]  ? path_mount+0x690/0x10e0
[  549.097441][T21038]  ? user_path_at+0xd4/0x160
[  549.097456][T21038]  __se_sys_mount+0x31d/0x420
[  549.097470][T21038]  ? __pfx___se_sys_mount+0x10/0x10
[  549.097483][T21038]  ? __x64_sys_mount+0x20/0xc0
[  549.097494][T21038]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  549.097509][T21038]  do_syscall_64+0x174/0x580
[  549.097526][T21038]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  549.097540][T21038] RIP: 0033:0x7fd34759ce59
[  549.097555][T21038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  549.097567][T21038] RSP: 002b:00007fd3457b4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  549.097581][T21038] RAX: ffffffffffffffda RBX: 00007fd347816180 RCX: 00007fd34759ce59
[  549.097593][T21038] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[  549.097609][T21038] RBP: 00007fd347632d6f R08: 0000200000000400 R09: 0000000000000000
[  549.097617][T21038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  549.097626][T21038] R13: 00007fd347816218 R14: 00007fd347816180 R15: 00007ffca768b898
[  549.097642][T21038]  </TASK>
[  549.101667][T21037] EXT4-fs: Ignoring removed orlov option
[  549.104521][T21038] overlayfs: upper fs missing required features.
[  549.443947][T19464] ocfs2: Unmounting device (7,3) on (node local)
[  549.476834][T21037] EXT4-fs error (device loop1): __ext4_iget:5481: inode #11: block 1: comm syz.1.6186: invalid block
[  549.486624][T21037] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  549.487636][T21037] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.6186: couldn't read orphan inode 11 (err -117)
[  549.494244][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  549.494261][    C1] EXT4-fs (loop1): initial error at time 1781009743: __ext4_iget:5481: inode 11: block 1
[  549.494276][    C1] EXT4-fs (loop1): last error at time 1781009743: __ext4_iget:5481: inode 11: block 1
[  549.536067][T21037] loop1: lost filesystem error report for type 5 error -117
[  549.537055][T21037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  549.566107][T19030] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
