last executing test programs:

1m8.110268084s ago: executing program 0 (id=145):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000440)={0x1, 0x4}, 0x8)
close(0x3)

1m8.037248203s ago: executing program 0 (id=146):
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f00000004c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x100000001, 0x3a, 'bcachefs\x00', 0x3a, '', 0x3a, './file1'}, 0x30)

1m8.023519224s ago: executing program 0 (id=148):
syz_mount_image$xfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x4000000, &(0x7f0000000140)={[{@bsdgroups}, {@discard}, {@ikeep}, {@grpid}, {@noalign}, {@nouuid}, {@noikeep}, {@gquota}]}, 0x1, 0x9833, &(0x7f000000ba80)="$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")
quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

1m7.314425108s ago: executing program 0 (id=157):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$eJzs3c9vG1kdAPDvOHFIdlOSBQ7LSuxGiFV3BbWTDbuNOLRFQnCqBJR7CIkTRXHiKHbaJqpQKs4ICSFAcIETFyT+ACTUPwEhVYJ7hRCogrYcOBSMxh63wdhJqtpx6nw+0uu8efPj+32uPPabmXgCOLdmIuJaRIxExPsRMZW157ISB82Srvf40Z3ltCRRr9/4exJJ1tbaV5JNX882G4+Ib34t4jtJ0mw4pLq3v7FULpd2svlibXO7WN3bv7S+ubRWWittzc/PfbRweeHDhdme9fXKV/7y4x/86qtXfveFWw8W//bed9N8J7Nlh/vRS83XJN94LVpGI2KnH8EGYCTrT/4kKyf9zwcAgKOl3/E/ERGfjYgnPxt0NgAAAEA/1K9OxtMkog4AAAAMrVzjHtgkV8juBZiMXK5QaN7D+6m4GuVKtfb51cru1krzXtnpyOdW18ul2exe4enIJ+n8XKP+fP6Dtvn5iHgjIn40NdGYLyxXyiuDPvkBAAAA50Q6zp/MNevp5J9TzfE/AAAAMGSmB50AAAAA0HfG/wAAADD8/n/8P9OcJKOnnwwAAADQa1+/fj0t9dbzr1du7u1uVG5eWilVNwqbu8uF5crOdmGtUllr/Gbf5nH7K1cq21+Mrd3bxVqpWitW9/YXNyu7W7XFxnO9F0snek40AAAA0FNvvHPvT0lEHHxpolFSY9kyY3UYbrkXWz3pVx7A6RsZdALAwLjBF84v73/guIH9+CnlAQAA9M/FTz+7/j8Rh67/X3jg+j8Muxe8/g8MEdf/4fxqu/73ixNt9LTen2SAU2WMDxx3HqDr9f/f9z4XAACgPyYbJckVsjHAZORyhULEhcZjAfLJ6nq5NBsRH4+IP07lP5bOzw06aQAAAAAAAAAAAAAAAAAAAAAAAAB4xdTrSdQBAACAoRaR+2sSEUmMR0x9brL9/MBY8q+pxjQibv38xk9uL9VqO3Np+z+etdd+mrV/MIgzGAAAAEC71ji9NY4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF56/OjOcqscan6333EffjkipjvFH43xxnQ88hHx2pMkRg9tl0TESA/iH9yNiDc7xU/StGI6y6I9fi4iJgYc//UexIfz7F56/LnW6f2Xi5nGtPP7bzQrL+vhTLfjX+7Z8W+ky/HvwjH7Hsumb93/TbFr/LsRb412Pv604o+95PH329/a3++2rP7LiIsdP3+S/4lVrG1uF6t7+5fWN5fWSmulrfn5uY8WLi98uDBbXF0vl7J/O8b44Wd++5+j+v9al/jTWf+T9v4nzZzq9c77fKdt/t/3bz/6ZKcVk4iH38/qHf7/3+wWP3vt380+B9LlF1v1g2b9sLd//Ye3j+r/Spf+jx8RP217r9tO27z/je/9uVnLn3ALAKCfqnv7G0vlcmnnVa+knTkDafSwMnM20hj2SmsUdVbyOSuVwR6XAACA3nv+pX/QmQAAAAAAAAAAAAAAAAAAAMD51fr7/9ZvOffj58QOxxtvVZLk1PsKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCU/wYAAP//VsvQDw==")
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

1m6.819701378s ago: executing program 0 (id=165):
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0x120, 0x46, 0x10, 0xb, 0x0, 0x0, 0x0, 0x10, 0x7}}, 0x50)
r0 = socket(0x400000000010, 0x3, 0x0)
write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a)

1m6.520637948s ago: executing program 0 (id=172):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0)

1m6.338706322s ago: executing program 32 (id=172):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0)

2.938322313s ago: executing program 3 (id=891):
r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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")
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x203, 0xfffd, 0xffffffffffffffff, 0x200000000000006, 0xfffffffffffffffd, 0x200, 0x8, 0x2c, 0x80000005, 0x2})
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})

2.75895397s ago: executing program 1 (id=899):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001340)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0)
write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="61030203f401060101b702"], 0xb)

2.079384648s ago: executing program 3 (id=911):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x2c8}}, 0x4048010)

1.831115665s ago: executing program 1 (id=912):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
write(r0, &(0x7f0000000240)="2cd889f03e14f3c4d5a2", 0xa)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0xff, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40)

1.738292372s ago: executing program 1 (id=913):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x49}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)

1.681349463s ago: executing program 1 (id=914):
syz_usb_connect(0x0, 0x41, &(0x7f00000016c0)={{0x12, 0x1, 0x201, 0xab, 0x62, 0x58, 0x40, 0xc880, 0x760e, 0x35fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0xe, 0xe, 0xa0, 0x32, [{{0x9, 0x4, 0x15, 0xfb, 0x0, 0x1, 0x3, 0x67, 0x2, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0xfffffff8, 0x2, 0x9}, {0x6, 0x24, 0x1a, 0x6}}]}}]}}]}}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0})

1.288406486s ago: executing program 3 (id=916):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001a00010029bd701e00000000022020000000000000200000080007"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.285294134s ago: executing program 3 (id=918):
syz_usb_connect(0x3, 0x4bc, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000845dcf0886124620b705010203010902aa04010003f00109047a0008ff0401"], 0x0)

451.535188ms ago: executing program 1 (id=928):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0)
r1 = dup(r0)
ioctl$GIO_UNISCRNMAP(r1, 0x43403d0e, &(0x7f0000000080)=""/96)

368.732265ms ago: executing program 1 (id=930):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x2, 0x5511, &(0x7f00000079c0)="$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")

260.989238ms ago: executing program 2 (id=932):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006)

260.668006ms ago: executing program 2 (id=933):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[c\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\x00\x00\xbf\xd1\xc8\x85\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40043, 0x1fe)
socket$inet6_udp(0xa, 0x2, 0x0)
mq_open(&(0x7f0000000100)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7-\xeb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00AWK\n\x8b!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3g:', 0x41, 0x80, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0xac7c, 0x10100, 0x2002, 0x4000000}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x60, 0x11, r0, 0x0, 0x0, 0x0, 0x61, 0x1, {0x1}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r1, 0x7330, 0x0, 0x0, 0x0, 0x0)

170.625348ms ago: executing program 2 (id=934):
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000c8, &(0x7f0000000c80)={[{@fat=@fmask={'fmask', 0x3d, 0x6}}, {@nodots}, {@dots}, {@fat=@tz_utc}, {@dots}, {@nodots}, {@dots}, {@dots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x6}}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x40001}}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@nodots}, {@nodots}, {@fat=@sys_immutable}, {@dots}, {@nodots}, {@dots}, {@dots}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@nodots}, {@nodots}]}, 0x0, 0x1bf, &(0x7f0000000940)="$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")

78.461338ms ago: executing program 2 (id=935):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x44, 0x0, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x20}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x14)

78.211691ms ago: executing program 2 (id=936):
openat$khugepaged_scan(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
read$FUSE(r0, &(0x7f000000a400)={0x2020}, 0x2020)

533.116µs ago: executing program 3 (id=937):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400)={<r1=>0xffffffffffffffff}, 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000640)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x7803, 0x4, {}, 0x5, 0xb, 0x2}}}, 0x90)

297.452µs ago: executing program 2 (id=938):
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffff000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

0s ago: executing program 3 (id=939):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x2, 0x2, 0x4, 0x4, 0x6, 0xffff29fe})
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x80000006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e75243301", 0x8}], 0x1, &(0x7f0000000000)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0xff}}}], 0x18}}], 0x1, 0x40000000)

kernel console output (not intermixed with test programs):

ying later): interface not active
[   64.825644][ T5856] hsr_slave_0: entered promiscuous mode
[   64.828935][ T5856] hsr_slave_1: entered promiscuous mode
[   64.833839][ T5856] debugfs: 'hsr0' already exists in 'hsr'
[   64.836113][ T5856] Cannot create hsr debugfs directory
[   64.903857][ T5849] hsr_slave_0: entered promiscuous mode
[   64.906755][ T5849] hsr_slave_1: entered promiscuous mode
[   64.909249][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   64.911415][ T5849] Cannot create hsr debugfs directory
[   65.193885][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.202018][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.207730][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.213407][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.281114][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.302739][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.310048][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.317559][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.399757][ T5856] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.410271][ T5856] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.418844][ T5856] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.430038][ T5856] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.495156][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.557052][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   65.582658][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.585884][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.592404][ T5239] Bluetooth: hci0: command tx timeout
[   65.610124][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.614939][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.617779][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.665889][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   65.675765][ T5239] Bluetooth: hci1: command tx timeout
[   65.694592][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.704389][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.707474][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.728812][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.731905][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.760756][ T5239] Bluetooth: hci2: command tx timeout
[   65.778124][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   65.802334][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.805205][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.818935][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.837787][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.840725][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.975156][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.015310][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.037632][ T5853] veth0_vlan: entered promiscuous mode
[   66.062601][ T5853] veth1_vlan: entered promiscuous mode
[   66.068959][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.085334][ T5849] veth0_vlan: entered promiscuous mode
[   66.099082][ T5849] veth1_vlan: entered promiscuous mode
[   66.112966][ T5853] veth0_macvtap: entered promiscuous mode
[   66.119030][ T5853] veth1_macvtap: entered promiscuous mode
[   66.157428][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.185473][ T5856] veth0_vlan: entered promiscuous mode
[   66.189911][ T5849] veth0_macvtap: entered promiscuous mode
[   66.196316][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.218453][ T5856] veth1_vlan: entered promiscuous mode
[   66.224816][ T5718] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.228144][ T5718] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.234616][ T5849] veth1_macvtap: entered promiscuous mode
[   66.242970][ T5718] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.259009][ T5718] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.281231][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.320760][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.345743][ T5718] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.352605][ T5718] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.356203][ T5718] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.359814][ T5718] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.365202][ T5856] veth0_macvtap: entered promiscuous mode
[   66.393946][ T5856] veth1_macvtap: entered promiscuous mode
[   66.412611][ T4158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.415985][ T4158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.438075][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.463182][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.491837][ T4158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.495182][ T4158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.516827][ T5718] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.529433][ T5718] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.554047][ T5718] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.557698][ T5718] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.593006][ T4158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.597942][ T4158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.670335][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.673204][ T4158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.689471][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.692319][ T4158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.703121][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.787813][ T4158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.794641][ T4158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.856892][ T5916] netlink: 'syz.2.3': attribute type 10 has an invalid length.
[   66.857480][ T5917] netlink: 'syz.0.4': attribute type 10 has an invalid length.
[   66.865455][ T5916] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.872936][ T5917] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4'.
[   66.875270][ T5916] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   66.880287][ T5917] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[   66.884164][ T5917] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   66.889217][ T5917] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[   66.996024][ T5919] =======================================================
[   66.996024][ T5919] WARNING: The mand mount option has been deprecated and
[   66.996024][ T5919]          and is ignored by this kernel. Remove the mand
[   66.996024][ T5919]          option from the mount to silence this warning.
[   66.996024][ T5919] =======================================================
[   67.049100][ T5923] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   67.166236][ T5923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'.
[   67.256379][ T5933] netlink: 'syz.0.9': attribute type 30 has an invalid length.
[   67.661598][ T2303] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   67.681382][ T5239] Bluetooth: hci0: command tx timeout
[   67.751622][ T5239] Bluetooth: hci1: command tx timeout
[   67.846869][ T5239] Bluetooth: hci2: command tx timeout
[   67.887069][ T2303] usb 1-1: config 0 has an invalid interface number: 255 but max is 0
[   67.896478][ T2303] usb 1-1: config 0 has no interface number 0
[   67.899769][ T2303] usb 1-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[   67.930597][ T2303] usb 1-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[   67.955987][ T2303] usb 1-1: config 0 interface 255 altsetting 0 endpoint 0xA has an invalid bInterval 255, changing to 11
[   67.984868][ T2303] usb 1-1: config 0 interface 255 altsetting 0 endpoint 0xA has invalid maxpacket 59391, setting to 1024
[   68.048819][ T2303] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[   68.069152][ T2303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.089099][ T2303] usb 1-1: Product: syz
[   68.099672][ T2303] usb 1-1: Manufacturer: syz
[   68.112474][ T2303] usb 1-1: SerialNumber: syz
[   68.210956][ T2303] usb 1-1: config 0 descriptor??
[   68.214564][ T5944] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   68.610649][ T5911] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   68.760675][ T5911] usb 2-1: Using ep0 maxpacket: 8
[   68.769223][ T5911] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c
[   68.774043][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.777479][ T5911] usb 2-1: Product: syz
[   68.779462][ T5911] usb 2-1: Manufacturer: syz
[   68.782155][ T5911] usb 2-1: SerialNumber: syz
[   68.786741][ T5911] usb 2-1: config 0 descriptor??
[   68.794908][ T5911] usb 2-1: bad CDC descriptors
[   68.799431][ T5911] usb 2-1: unsupported MDLM descriptors
[   69.007483][ T5911] usb 2-1: USB disconnect, device number 2
[   69.283166][ T5987] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.32'.
[   69.287544][ T5987] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   69.297835][ T5987] openvswitch: netlink: Duplicate key (type 0).
[   69.368557][  T791] IPVS: starting estimator thread 0...
[   69.481196][ T5990] IPVS: using max 80 ests per chain, 192000 per kthread
[   69.492697][ T5995] netlink: 36 bytes leftover after parsing attributes in process `syz.0.35'.
[   69.496087][ T5995] netlink: 16 bytes leftover after parsing attributes in process `syz.0.35'.
[   69.499517][ T5995] netlink: 36 bytes leftover after parsing attributes in process `syz.0.35'.
[   69.512196][ T5995] netlink: 36 bytes leftover after parsing attributes in process `syz.0.35'.
[   69.770600][ T5239] Bluetooth: hci0: command tx timeout
[   69.816582][ T6004] loop1: detected capacity change from 0 to 2048
[   69.830900][ T5239] Bluetooth: hci1: command tx timeout
[   69.876011][ T6004] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   69.911291][ T5239] Bluetooth: hci2: command tx timeout
[   70.179531][ T6010] netlink: 9 bytes leftover after parsing attributes in process `syz.1.41'.
[   70.196814][ T6010] 0: renamed from hsr_slave_1 (while UP)
[   70.256486][ T6010] 0: entered allmulticast mode
[   70.271972][ T6010] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[   70.834997][ T6038] sctp: [Deprecated]: syz.1.55 (pid 6038) Use of struct sctp_assoc_value in delayed_ack socket option.
[   70.834997][ T6038] Use struct sctp_sack_info instead
[   70.888614][ T6034] loop0: detected capacity change from 0 to 32768
[   70.931134][  T791] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   70.943341][ T6034] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   70.985792][ T6046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.58'.
[   71.002727][ T6034] syz.0.53 (6034) used greatest stack depth: 18488 bytes left
[   71.041611][ T5853] ocfs2: Unmounting device (7,0) on (node local)
[   71.100540][  T791] usb 3-1: Using ep0 maxpacket: 8
[   71.107343][ T6048] loop1: detected capacity change from 0 to 8192
[   71.112273][  T791] usb 3-1: unable to get BOS descriptor or descriptor too short
[   71.119046][  T791] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E
[   71.128295][  T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[   71.135533][  T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   71.146554][  T791] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1
[   71.151460][  T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[   71.156997][  T791] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 166
[   71.170168][  T791] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[   71.177027][  T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.182858][  T791] usb 3-1: Product: syz
[   71.184551][  T791] usb 3-1: Manufacturer: syz
[   71.186313][  T791] usb 3-1: SerialNumber: syz
[   71.191276][  T791] usb 3-1: config 0 descriptor??
[   71.194535][ T6028] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   71.198102][ T6028] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   71.256092][  T791] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[   71.358559][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.361716][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.415864][ T5911] usb 3-1: USB disconnect, device number 2
[   71.677073][ T6068] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.712291][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.67'.
[   71.842227][ T5239] Bluetooth: hci0: command tx timeout
[   71.911156][ T5239] Bluetooth: hci1: command tx timeout
[   72.002492][ T5239] Bluetooth: hci2: command tx timeout
[   72.082789][ T6091] loop2: detected capacity change from 0 to 512
[   72.088175][ T6091] EXT4-fs: Ignoring removed oldalloc option
[   72.103915][ T6091] EXT4-fs error (device loop2): ext4_orphan_get:1392: comm syz.2.77: inode #13: comm syz.2.77: iget: illegal inode #
[   72.109312][ T6091] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.77: couldn't read orphan inode 13 (err -117)
[   72.115485][ T6091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.124679][ T6091] EXT4-fs error (device loop2): ext4_resize_begin:60: comm syz.2.77: resize_inode disabled but reserved GDT blocks non-zero
[   72.150205][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.203058][ T5911] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   72.350808][ T5911] usb 2-1: Using ep0 maxpacket: 32
[   72.355374][ T5911] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[   72.358803][ T5911] usb 2-1: config 0 has no interface number 0
[   72.373809][ T5911] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[   72.377942][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.388034][ T5911] usb 2-1: Product: syz
[   72.389787][ T5911] usb 2-1: Manufacturer: syz
[   72.396117][ T5911] usb 2-1: SerialNumber: syz
[   72.401560][ T5911] usb 2-1: config 0 descriptor??
[   72.407833][ T5911] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz)
[   72.614810][ T5316] usb 2-1: USB disconnect, device number 3
[   72.720196][ T6110] loop2: detected capacity change from 0 to 512
[   72.725734][ T6110] EXT4-fs: Ignoring removed mblk_io_submit option
[   72.728194][ T6110] EXT4-fs: inline encryption not supported
[   72.730609][ T6110] EXT4-fs: Ignoring removed mblk_io_submit option
[   72.733734][ T6110] EXT4-fs (loop2): Test dummy encryption mode enabled
[   72.736535][ T6110] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   72.743912][ T6110] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   72.765852][ T6110] EXT4-fs (loop2): 1 truncate cleaned up
[   72.771313][ T6110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.805153][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.410699][  T791] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   73.573698][  T791] usb 2-1: config 67 has an invalid interface number: 37 but max is 0
[   73.576822][  T791] usb 2-1: config 67 has no interface number 0
[   73.579064][  T791] usb 2-1: config 67 interface 37 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64
[   73.582813][  T791] usb 2-1: config 67 interface 37 has no altsetting 0
[   73.585665][  T791] usb 2-1: New USB device found, idVendor=0424, idProduct=9903, bcdDevice=f3.3b
[   73.588773][  T791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.601300][  T791] smsc95xx v2.0.0
[   73.602720][  T791] smsc95xx 2-1:67.37 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[   73.606601][  T791] smsc95xx 2-1:67.37: probe with driver smsc95xx failed with error -22
[   73.823715][ T5911] usb 2-1: USB disconnect, device number 4
[   73.887180][ T6123] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.944928][ T6125] loop2: detected capacity change from 0 to 256
[   73.951838][ T6125] exfat: Deprecated parameter 'utf8'
[   73.953999][ T6125] exfat: Invalid uid '0xffffffff'
[   74.350573][  T791] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   74.465073][ T6134] loop0: detected capacity change from 0 to 32768
[   74.485985][ T6134] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[   74.500941][  T791] usb 3-1: Using ep0 maxpacket: 32
[   74.517032][  T791] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[   74.520050][  T791] usb 3-1: config 0 has no interface number 0
[   74.524942][  T791] usb 3-1: config 0 interface 184 has no altsetting 0
[   74.546426][  T791] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   74.555794][  T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.567552][  T791] usb 3-1: Product: syz
[   74.569577][  T791] usb 3-1: Manufacturer: syz
[   74.572743][  T791] usb 3-1: SerialNumber: syz
[   74.585594][  T791] usb 3-1: config 0 descriptor??
[   74.592686][ T6136] loop1: detected capacity change from 0 to 32768
[   74.607210][  T791] smsc75xx v1.0.0
[   74.717316][ T6136] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2'
[   74.772011][ T6136] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[   74.782910][ T6136] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   74.795918][ T6136] (syz.1.97,6136,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=0, inode=65, rec_len=1023, name_len=0
[   74.802450][ T6136] (syz.1.97,6136,1):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2
[   74.807454][ T6136] (syz.1.97,6136,1):ocfs2_symlink:1879 ERROR: status = -2
[   74.810642][ T6136] (syz.1.97,6136,1):ocfs2_symlink:2080 ERROR: status = -2
[   75.253436][ T5856] ocfs2: Unmounting device (7,1) on (node local)
[   75.386289][ T5853] ocfs2: Unmounting device (7,0) on (node local)
[   75.568957][  T791] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[   75.574726][  T791] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   75.583894][  T791] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   75.590624][  T791] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   75.600563][  T791] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[   75.604553][  T791] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   75.613061][  T791] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[   75.627007][  T791] usb 3-1: USB disconnect, device number 3
[   76.190637][ T6176] __nla_validate_parse: 1 callbacks suppressed
[   76.190655][ T6176] netlink: 36 bytes leftover after parsing attributes in process `syz.2.110'.
[   76.200004][ T6176] netlink: 20 bytes leftover after parsing attributes in process `syz.2.110'.
[   76.204978][ T6176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'.
[   76.457293][ T6195] bond0: option all_slaves_active: invalid value (20)
[   76.798560][ T6225] loop1: detected capacity change from 0 to 8
[   76.944557][ T6233] loop1: detected capacity change from 0 to 512
[   76.981389][ T6233] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.131: bg 0: block 248: padding at end of block bitmap is not set
[   76.989020][ T6233] Quota error (device loop1): write_blk: dquota write failed
[   76.993705][ T6233] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[   76.997337][ T6233] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.131: Failed to acquire dquot type 1
[   77.007912][ T6233] EXT4-fs (loop1): 1 truncate cleaned up
[   77.013551][ T6233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.025650][ T6233] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   77.076191][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.095155][   T53] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5
[   77.103578][   T53] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u9:2: Failed to release dquot type 1
[   77.284056][ T6249] loop1: detected capacity change from 0 to 128
[   77.294172][ T6249] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   77.299867][ T6249] hpfs: filesystem error: improperly stopped
[   77.303161][ T6249] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   77.306584][ T6249] hpfs: You really don't want any checks? You are crazy...
[   77.310270][ T6249] hpfs: hpfs_map_sector(): read error
[   77.313460][ T6249] hpfs: code page support is disabled
[   77.316575][ T6249] hpfs: hpfs_map_4sectors(): unaligned read
[   77.319442][ T6249] hpfs: hpfs_map_4sectors(): unaligned read
[   77.322854][ T6249] hpfs: filesystem error: unable to find root dir
[   77.699297][ T5883] IPVS: starting estimator thread 0...
[   77.800554][ T5911] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   77.812671][ T6264] IPVS: using max 81 ests per chain, 194400 per kthread
[   77.947742][ T6267] loop1: detected capacity change from 0 to 4096
[   77.953974][ T5911] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   77.958090][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.976425][ T5911] usb 3-1: config 0 descriptor??
[   77.991118][ T5911] cp210x 3-1:0.0: cp210x converter detected
[   78.041435][ T6268] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   78.109932][ T6267] NILFS (loop1): unable to set label with more than 80 bytes
[   78.190809][ T5718] IPVS: stop unused estimator thread 0...
[   78.256189][ T6276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.147'.
[   78.400258][ T5911] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32
[   78.424287][ T6282] trusted_key: encrypted_key: keyword 'neW' not recognized
[   78.440645][ T5911] usb 3-1: cp210x converter now attached to ttyUSB0
[   78.586586][ T6274] loop0: detected capacity change from 0 to 32768
[   78.616268][ T5911] usb 3-1: USB disconnect, device number 4
[   78.622672][ T5911] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   78.642514][ T6274] XFS: ikeep mount option is deprecated.
[   78.646469][ T5911] cp210x 3-1:0.0: device disconnected
[   78.648573][ T6274] XFS: noikeep mount option is deprecated.
[   78.699433][ T6274] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   78.750954][ T6274] XFS (loop0): Ending clean mount
[   78.766283][ T6274] XFS (loop0): Quotacheck needed: Please wait.
[   78.804045][ T6274] XFS (loop0): Quotacheck: Done.
[   78.867819][ T5853] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   78.927939][   T33] audit: type=1400 audit(1757561494.244:2): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A307866666666666666666666666666666666 pid=6303 comm="syz.1.158"
[   79.178255][ T6310] loop0: detected capacity change from 0 to 512
[   79.203631][ T6310] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   79.286589][ T6310] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[   79.294452][ T6310] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[   79.298647][ T6310] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.157: Failed to acquire dquot type 0
[   79.309805][ T6310] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[   79.346056][ T5853] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /46/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0
[   79.449379][ T6323] netlink: 84 bytes leftover after parsing attributes in process `syz.2.166'.
[   79.473136][ T6325] loop1: detected capacity change from 0 to 16
[   79.496890][ T6325] erofs (device loop1): mounted with root inode @ nid 36.
[   79.514159][   T33] audit: type=1800 audit(1757561494.834:3): pid=6325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.167" name="file1" dev="loop1" ino=86 res=0 errno=0
[   79.818454][ T5718] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.875065][ T6329] loop1: detected capacity change from 0 to 32768
[   79.942029][ T5718] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.052013][ T6329] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[   80.052035][ T6329]   allowing incompatible features above 0.0: (unknown version)
[   80.052043][ T6329]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   80.053038][ T5718] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.130648][ T6329] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[   80.133943][ T6329] bcachefs (loop1): initializing new filesystem
[   80.166878][ T6329] bcachefs (loop1): going read-write
[   80.216452][ T5718] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.226564][ T6329] bcachefs (loop1): marking superblocks
[   80.258035][ T6329] bcachefs (loop1): initializing freespace
[   80.268753][ T6329] bcachefs (loop1): done initializing freespace
[   80.269004][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   80.278062][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   80.279609][ T6329] bcachefs (loop1): reading snapshots table
[   80.284197][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   80.285666][ T6329] bcachefs (loop1): reading snapshots done
[   80.302743][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   80.306802][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   80.310277][ T6336] loop2: detected capacity change from 0 to 32768
[   80.323878][ T6329] bcachefs (loop1): done starting filesystem
[   80.363762][ T6336] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   80.426930][ T5718] bridge_slave_1: left allmulticast mode
[   80.428965][ T5718] bridge_slave_1: left promiscuous mode
[   80.433024][ T5718] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.438506][   T33] audit: type=1800 audit(1757561495.754:4): pid=6336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.174" name="file1" dev="loop2" ino=17058 res=0 errno=0
[   80.456709][ T5718] bridge_slave_0: left allmulticast mode
[   80.458808][ T5718] bridge_slave_0: left promiscuous mode
[   80.465027][ T5718] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.476527][ T5849] (syz-executor,5849,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[   80.488030][ T5849] ocfs2: Unmounting device (7,2) on (node local)
[   80.498027][ T6329] syz.1.169 (6329) used greatest stack depth: 15912 bytes left
[   80.539202][ T5856] bcachefs (loop1): shutting down
[   80.545547][ T5856] bcachefs (loop1): going read-only
[   80.555926][ T5856] bcachefs (loop1): finished waiting for writes to stop
[   80.565681][ T5856] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[   80.633940][ T5856] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[   80.643035][ T5856] bcachefs (loop1): clean shutdown complete, journal seq 4
[   80.661085][ T5856] bcachefs (loop1): marking filesystem clean
[   80.684568][ T6354] loop2: detected capacity change from 0 to 2048
[   80.706524][ T6354] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   80.720136][ T5856] bcachefs (loop1): shutdown complete
[   80.866730][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'.
[   80.936051][ T6358] capability: warning: `syz.2.178' uses deprecated v2 capabilities in a way that may be insecure
[   80.940591][ T6358] netlink: 36 bytes leftover after parsing attributes in process `syz.2.178'.
[   81.029815][ T6360] loop2: detected capacity change from 0 to 4096
[   81.069549][ T6361] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   81.118062][ T5718] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   81.127213][   T33] audit: type=1800 audit(1757561496.444:5): pid=6360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.179" name="file1" dev="loop2" ino=15 res=0 errno=0
[   81.137778][   T33] audit: type=1800 audit(1757561496.454:6): pid=6360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.179" name="file1" dev="loop2" ino=15 res=0 errno=0
[   81.149331][ T5718] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   81.158378][ T5718] bond0 (unregistering): Released all slaves
[   81.726054][ T5718] hsr_slave_0: left promiscuous mode
[   81.729291][ T5718] hsr_slave_1: left promiscuous mode
[   81.732028][ T5718] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.734486][ T5718] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.738803][ T5718] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.743463][ T5718] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.760311][ T5718] veth1_macvtap: left promiscuous mode
[   81.763425][ T5718] veth0_macvtap: left promiscuous mode
[   81.765584][ T5718] veth1_vlan: left promiscuous mode
[   81.767848][ T5718] veth0_vlan: left promiscuous mode
[   82.105532][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'.
[   82.390733][ T5239] Bluetooth: hci1: command tx timeout
[   82.404826][ T5718] team0 (unregistering): Port device team_slave_1 removed
[   82.437594][ T5718] team0 (unregistering): Port device team_slave_0 removed
[   82.535153][ T6374] loop1: detected capacity change from 0 to 32768
[   82.562501][ T6374] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   82.588503][   T33] kauditd_printk_skb: 2 callbacks suppressed
[   82.588514][   T33] audit: type=1800 audit(1757561497.904:9): pid=6374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.176" name="file1" dev="loop1" ino=17058 res=0 errno=0
[   82.638523][ T5856] ocfs2: Unmounting device (7,1) on (node local)
[   83.003143][ T6388] loop2: detected capacity change from 0 to 256
[   83.103638][ T6347] chnl_net:caif_netlink_parms(): no params data found
[   83.137059][ T6388] FAT-fs (loop2): IO charset cp863 not found
[   83.435718][ T6347] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.438753][ T6347] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.462722][ T6347] bridge_slave_0: entered allmulticast mode
[   83.467385][ T6347] bridge_slave_0: entered promiscuous mode
[   83.472234][ T6347] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.474641][ T6347] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.477380][ T6347] bridge_slave_1: entered allmulticast mode
[   83.482129][ T6347] bridge_slave_1: entered promiscuous mode
[   83.514668][ T5718] IPVS: stop unused estimator thread 0...
[   83.558575][ T6347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.560345][ T6410] loop2: detected capacity change from 0 to 4096
[   83.572404][ T6347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.617392][ T6410] ntfs3(loop2): Failed to load $Volume (-22).
[   83.742967][ T5239] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1
[   83.783082][ T6347] team0: Port device team_slave_0 added
[   83.823950][ T6415] loop2: detected capacity change from 0 to 4096
[   83.834516][ T6415] EXT4-fs: Conflicting test_dummy_encryption options
[   84.070235][ T6347] team0: Port device team_slave_1 added
[   84.304421][ T6347] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.307240][ T6347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.331686][ T6347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.356589][ T6347] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.359083][ T6347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.375947][ T6347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.457005][ T6347] hsr_slave_0: entered promiscuous mode
[   84.459958][ T6347] hsr_slave_1: entered promiscuous mode
[   84.471416][ T5239] Bluetooth: hci1: command tx timeout
[   84.603232][ T6435] loop2: detected capacity change from 0 to 128
[   84.643113][ T6347] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   84.648148][ T6347] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   84.662277][ T6347] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   84.685647][ T6435] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   84.692337][ T6435] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   84.720177][ T6347] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   84.742210][ T5849] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   84.946802][ T6347] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.012802][ T6347] 8021q: adding VLAN 0 to HW filter on device team0
[   85.042954][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.045875][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.074721][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.077712][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.096987][ T6464] netlink: 288 bytes leftover after parsing attributes in process `syz.1.205'.
[   85.195091][ T6347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   85.246663][ T6470] loop2: detected capacity change from 0 to 1764
[   85.410166][ T6347] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.496529][ T6347] veth0_vlan: entered promiscuous mode
[   85.514843][ T6347] veth1_vlan: entered promiscuous mode
[   85.545464][ T6347] veth0_macvtap: entered promiscuous mode
[   85.559829][ T6347] veth1_macvtap: entered promiscuous mode
[   85.596692][ T6347] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.606471][ T6347] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.636382][ T5896] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.639552][ T5896] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.667136][   T33] audit: type=1800 audit(1757561500.984:10): pid=6489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.212" name="bus" dev="overlay" ino=353 res=0 errno=0
[   85.730912][ T5896] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.737502][ T5896] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.854418][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.869175][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.903955][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.907550][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.094093][ T6493] syz.3.213(6493): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[   86.560803][ T5239] Bluetooth: hci1: command tx timeout
[   86.564284][ T5911] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   86.727259][ T1271] cfg80211: failed to load regulatory.db
[   86.748032][ T5911] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[   86.760700][ T5911] usb 2-1: config 0 interface 0 has no altsetting 0
[   86.769718][ T5911] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   86.775524][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   86.781197][ T5911] usb 2-1: Product: syz
[   86.783160][ T5911] usb 2-1: Manufacturer: syz
[   86.785448][ T5911] usb 2-1: SerialNumber: syz
[   86.798455][ T5911] usb 2-1: config 0 descriptor??
[   86.834963][ T5911] usb 2-1: selecting invalid altsetting 0
[   87.259041][ T5911] usb 2-1: USB disconnect, device number 5
[   87.752402][ T5239] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[   87.757265][ T5239] Bluetooth: hci0: Injecting HCI hardware error event
[   87.762625][   T55] Bluetooth: hci0: hardware error 0x00
[   87.852447][ T6507] loop2: detected capacity change from 0 to 32768
[   88.493029][   T10] usb 4-1: new low-speed USB device number 2 using dummy_hcd
[   88.566907][ T6531] vivid-000: disconnect
[   88.571462][ T6529] vivid-000: reconnect
[   88.631150][ T2303] iguanair 1-1:0.255: failed to get version
[   88.632930][ T5239] Bluetooth: hci1: command tx timeout
[   88.636001][ T2303] iguanair 1-1:0.255: probe with driver iguanair failed with error -110
[   88.669898][   T10] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   88.681168][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[   88.683943][   T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.00
[   88.687639][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.695888][ T6540] program syz.1.233 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   88.715015][ T2303] usb 1-1: USB disconnect, device number 2
[   88.718425][   T10] usb 4-1: config 0 descriptor??
[   88.730625][   T10] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6
[   88.927030][ T5283] bcm5974 4-1:0.0: could not read from device
[   88.937471][ T5283] bcm5974 4-1:0.0: could not read from device
[   88.952551][   T10] usb 4-1: USB disconnect, device number 2
[   89.060592][  T791] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   89.068646][ T6552] loop1: detected capacity change from 0 to 32768
[   89.098199][ T6552] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   89.125961][ T6552] XFS (loop1): Ending clean mount
[   89.131944][ T6552] XFS (loop1): Quotacheck needed: Please wait.
[   89.155409][ T6552] XFS (loop1): Quotacheck: Done.
[   89.188745][ T5856] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   89.220648][  T791] usb 3-1: Using ep0 maxpacket: 32
[   89.235227][  T791] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[   89.253019][  T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.267318][  T791] usb 3-1: config 0 descriptor??
[   89.347168][ T6562] netlink: 'syz.1.240': attribute type 11 has an invalid length.
[   89.489440][  T791] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[   89.508617][  T791] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   89.537603][  T791] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[   89.546851][  T791] usb 3-1: media controller created
[   89.554742][ T6570] program syz.1.244 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   89.573565][  T791] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   89.638968][  T791] DVB: Unable to find symbol dib7000p_attach()
[   89.642916][  T791] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[   89.701999][  T791] rc_core: IR keymap rc-dib0700-rc5 not found
[   89.705017][  T791] Registered IR keymap rc-empty
[   89.708646][  T791] dvb-usb: could not initialize remote control.
[   89.711719][  T791] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[   89.775458][ T6569] loop3: detected capacity change from 0 to 40427
[   89.785203][ T6569] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[   89.788636][ T6569] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   89.796520][ T6569] F2FS-fs (loop3): invalid crc value
[   89.830624][   T55] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   89.854033][ T6569] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   89.864067][ T6569] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   89.867333][ T6569] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[   89.879438][ T6569] syz.3.243: attempt to access beyond end of device
[   89.879438][ T6569] loop3: rw=2051, sector=36912, nr_sectors = 8152 limit=40427
[   89.886213][ T6569] syz.3.243: attempt to access beyond end of device
[   89.886213][ T6569] loop3: rw=2051, sector=45096, nr_sectors = 85976 limit=40427
[   89.905726][ T6569] F2FS-fs (loop3): Issue discard(4614, 4614, 1019) failed, ret: -5
[   89.909263][ T6569] F2FS-fs (loop3): Issue discard(5637, 5637, 10747) failed, ret: -5
[   89.925725][  T791] usb 3-1: USB disconnect, device number 5
[   89.930804][   T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   89.994825][  T791] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[   90.103152][   T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[   90.110531][   T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[   90.119794][   T10] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[   90.125216][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.128470][   T10] usb 2-1: Product: syz
[   90.130213][   T10] usb 2-1: Manufacturer: syz
[   90.133598][   T10] usb 2-1: SerialNumber: syz
[   90.137977][   T10] usb 2-1: config 0 descriptor??
[   90.147427][ T6574] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   90.153184][ T6574] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   90.365234][ T6574] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   90.368527][ T6574] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   90.777017][   T10] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[   90.830601][ T5883] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[   90.979130][   T10] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[   90.989525][   T10] usb 2-1: USB disconnect, device number 6
[   91.006914][ T5883] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[   91.010062][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.013625][ T5883] usb 3-1: Product: syz
[   91.015224][ T5883] usb 3-1: Manufacturer: syz
[   91.017456][ T5883] usb 3-1: SerialNumber: syz
[   91.023883][ T5883] usb 3-1: config 0 descriptor??
[   91.233141][   T10] usb 3-1: USB disconnect, device number 6
[   91.295977][ T6596] xt_l2tp: invalid flags combination: 0
[   91.388216][ T6602] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.393468][ T6602] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.453217][ T6605] loop3: detected capacity change from 0 to 256
[   91.463937][ T6605] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   91.469557][ T6605] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[   91.477095][ T6605] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[   91.575616][ T6612] syz_tun: entered allmulticast mode
[   91.733446][ T6610] loop1: detected capacity change from 0 to 32768
[   91.741895][ T6610] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.260 (6610)
[   91.808161][ T6610] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   91.818161][ T6610] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   91.825578][ T6619] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[   91.828448][ T6619] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   91.837471][ T6619] vhci_hcd vhci_hcd.0: Device attached
[   91.905816][ T6610] BTRFS info (device loop1): enabling ssd optimizations
[   91.908278][ T6610] BTRFS info (device loop1): enabling free space tree
[   91.933635][ T5856] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   92.012865][  T791] vhci_hcd: vhci_device speed not set
[   92.070907][  T791] usb 37-1: new full-speed USB device number 2 using vhci_hcd
[   92.080530][   T10] usb 3-1: new low-speed USB device number 7 using dummy_hcd
[   92.237610][   T10] usb 3-1: config 0 has no interfaces?
[   92.240186][   T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   92.246911][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.257605][   T10] usb 3-1: config 0 descriptor??
[   92.465732][ T6621] vhci_hcd: unknown pdu 2
[   92.469085][ T5883] usb 3-1: USB disconnect, device number 7
[   92.484828][ T5718] vhci_hcd: stop threads
[   92.490173][ T5718] vhci_hcd: release socket
[   92.493250][ T5718] vhci_hcd: disconnect device
[   92.531427][  T791] vhci_hcd: vhci_device speed not set
[   92.721577][ T6653] loop3: detected capacity change from 0 to 40427
[   92.728781][ T6653] F2FS-fs (loop3): invalid crc value
[   92.765792][ T6653] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   92.769539][ T6653] F2FS-fs (loop3): Start checkpoint disabled!
[   92.778047][ T6653] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   93.177598][ T6669] loop2: detected capacity change from 0 to 128
[   93.224218][ T6676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.280'.
[   93.226252][ T6669] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   93.227670][ T6676] netlink: 48 bytes leftover after parsing attributes in process `syz.1.280'.
[   93.245019][ T6669] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   93.306777][ T6680] warning: `syz.3.281' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   93.375260][ T6669] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[   93.566162][ T6669] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[   93.615089][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.289'.
[   93.617047][ T5849] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   93.640886][ T5883] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   93.793249][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[   93.803286][ T5883] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   93.806971][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.810108][ T5883] usb 4-1: Product: syz
[   93.812024][ T5883] usb 4-1: Manufacturer: syz
[   93.813666][ T5883] usb 4-1: SerialNumber: syz
[   93.820881][ T5883] usb 4-1: config 0 descriptor??
[   94.011270][ T5911] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   94.048230][ T6727] loop2: detected capacity change from 0 to 512
[   94.063768][ T5883] usb 4-1: USB disconnect, device number 3
[   94.114899][ T5945] udevd[5945]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   94.161405][ T5911] usb 2-1: Using ep0 maxpacket: 16
[   94.168674][ T5911] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   94.175802][ T5911] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   94.179180][ T5911] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   94.185679][ T5911] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   94.188980][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.193722][ T5911] usb 2-1: Product: syz
[   94.195390][ T5911] usb 2-1: Manufacturer: syz
[   94.197029][ T5911] usb 2-1: SerialNumber: syz
[   94.414331][ T6713] netlink: 36 bytes leftover after parsing attributes in process `syz.1.293'.
[   94.428801][ T5911] usb 2-1: 0:2 : does not exist
[   94.468084][ T5911] usb 2-1: USB disconnect, device number 7
[   94.541391][ T5945] udevd[5945]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   94.788153][ T6738] loop3: detected capacity change from 0 to 2048
[   94.854623][ T6738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.860094][ T6738] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.691544][ T6347] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.230610][ T6763] loop3: detected capacity change from 0 to 40427
[   96.236690][ T6763] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   96.239487][ T6763] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   96.253741][ T6763] F2FS-fs (loop3): invalid crc value
[   96.259934][ T6763] F2FS-fs (loop3): Failed to get valid F2FS checkpoint
[   96.320245][ T6770] netlink: 76 bytes leftover after parsing attributes in process `syz.2.317'.
[   96.455357][ T6774] loop2: detected capacity change from 0 to 1024
[   96.488427][ T6774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.495218][ T6774] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.525314][ T6774] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.319: bg 0: block 480: padding at end of block bitmap is not set
[   96.534344][ T6774] EXT4-fs (loop2): Remounting filesystem read-only
[   96.580143][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.009779][ T6814] netlink: 24 bytes leftover after parsing attributes in process `syz.1.331'.
[   97.230817][ T6827] loop2: detected capacity change from 0 to 2048
[   97.272321][ T6832] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   97.804241][ T6848] loop1: detected capacity change from 0 to 40427
[   97.812236][ T6848] F2FS-fs (loop1): invalid crc value
[   97.858140][ T6848] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   97.864478][ T6848] F2FS-fs (loop1): Start checkpoint disabled!
[   97.869906][ T6848] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   97.888107][ T6848] process 'syz.1.342' launched '/dev/fd/4' with NULL argv: empty string added
[   97.906039][ T1088] kworker/u9:5: attempt to access beyond end of device
[   97.906039][ T1088] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   97.913285][ T1088] CPU: 0 UID: 0 PID: 1088 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) 
[   97.913299][ T1088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   97.913304][ T1088] Workqueue: writeback wb_workfn (flush-7:1)
[   97.913318][ T1088] Call Trace:
[   97.913322][ T1088]  <TASK>
[   97.913325][ T1088]  dump_stack_lvl+0x189/0x250
[   97.913338][ T1088]  ? __pfx_dump_stack_lvl+0x10/0x10
[   97.913345][ T1088]  ? __pfx_queue_work_on+0x10/0x10
[   97.913352][ T1088]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   97.913393][ T1088]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   97.913408][ T1088]  f2fs_handle_critical_error+0x37c/0x540
[   97.913421][ T1088]  f2fs_write_end_io+0x886/0xb60
[   97.913436][ T1088]  __submit_merged_bio+0x27a/0x6a0
[   97.913449][ T1088]  __submit_merged_write_cond+0x255/0x530
[   97.913462][ T1088]  f2fs_write_data_pages+0x261d/0x3000
[   97.913484][ T1088]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   97.913496][ T1088]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   97.913519][ T1088]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   97.913534][ T1088]  ? trace_f2fs_writepages+0x7f/0x200
[   97.913544][ T1088]  ? f2fs_write_node_pages+0x478/0x6e0
[   97.913558][ T1088]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   97.913571][ T1088]  ? check_path+0x21/0x40
[   97.913579][ T1088]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   97.913586][ T1088]  do_writepages+0x32e/0x550
[   97.913598][ T1088]  ? reacquire_held_locks+0x127/0x1d0
[   97.913604][ T1088]  ? writeback_sb_inodes+0x384/0x1010
[   97.913617][ T1088]  __writeback_single_inode+0x145/0xff0
[   97.913625][ T1088]  ? do_raw_spin_unlock+0x4d/0x240
[   97.913635][ T1088]  writeback_sb_inodes+0x6c7/0x1010
[   97.913655][ T1088]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   97.913682][ T1088]  ? rcu_is_watching+0x15/0xb0
[   97.913693][ T1088]  wb_writeback+0x43b/0xaf0
[   97.913705][ T1088]  ? queue_io+0x3d1/0x590
[   97.913715][ T1088]  ? __pfx_wb_writeback+0x10/0x10
[   97.913727][ T1088]  ? _raw_spin_unlock_irq+0x23/0x50
[   97.913744][ T1088]  wb_workfn+0x409/0xef0
[   97.913759][ T1088]  ? __pfx_wb_workfn+0x10/0x10
[   97.913770][ T1088]  ? __lock_acquire+0xab9/0xd20
[   97.913784][ T1088]  ? process_scheduled_works+0x9ef/0x17b0
[   97.913794][ T1088]  ? _raw_spin_unlock_irq+0x23/0x50
[   97.913802][ T1088]  ? process_scheduled_works+0x9ef/0x17b0
[   97.913808][ T1088]  ? process_scheduled_works+0x9ef/0x17b0
[   97.913815][ T1088]  process_scheduled_works+0xae1/0x17b0
[   97.913835][ T1088]  ? __pfx_process_scheduled_works+0x10/0x10
[   97.913849][ T1088]  worker_thread+0x8a0/0xda0
[   97.913869][ T1088]  kthread+0x711/0x8a0
[   97.913881][ T1088]  ? __pfx_worker_thread+0x10/0x10
[   97.913887][ T1088]  ? __pfx_kthread+0x10/0x10
[   97.913896][ T1088]  ? _raw_spin_unlock_irq+0x23/0x50
[   97.913905][ T1088]  ? lockdep_hardirqs_on+0x9c/0x150
[   97.913911][ T1088]  ? __pfx_kthread+0x10/0x10
[   97.913920][ T1088]  ret_from_fork+0x3fc/0x770
[   97.913929][ T1088]  ? __pfx_ret_from_fork+0x10/0x10
[   97.913938][ T1088]  ? __switch_to_asm+0x39/0x70
[   97.913946][ T1088]  ? __switch_to_asm+0x33/0x70
[   97.913953][ T1088]  ? __pfx_kthread+0x10/0x10
[   97.913962][ T1088]  ret_from_fork_asm+0x1a/0x30
[   97.913978][ T1088]  </TASK>
[   97.913981][ T1088] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   98.223979][ T6879] netlink: 136 bytes leftover after parsing attributes in process `syz.3.353'.
[   98.227099][ T6879] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[   98.266950][ T6885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.356'.
[   98.273491][ T6885] tc_dump_action: action bad kind
[   98.533303][ T6905] netlink: 'syz.3.366': attribute type 11 has an invalid length.
[   98.570014][ T6907] loop3: detected capacity change from 0 to 2048
[   98.612175][ T6907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.645622][ T6347] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.940530][  T791] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[   98.940551][ T5883] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   99.090517][ T5883] usb 4-1: Using ep0 maxpacket: 16
[   99.094697][ T5883] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[   99.098021][ T5883] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   99.102133][ T5883] usb 4-1: config 0 has no interface number 0
[   99.107612][ T5883] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[   99.113085][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.113101][  T791] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   99.116770][ T5883] usb 4-1: Product: syz
[   99.123176][ T5883] usb 4-1: Manufacturer: syz
[   99.123507][  T791] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[   99.125136][ T5883] usb 4-1: SerialNumber: syz
[   99.127468][ T5883] usb 4-1: config 0 descriptor??
[   99.129043][  T791] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[   99.137253][  T791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.144822][  T791] usb 2-1: config 0 descriptor??
[   99.144942][ T5883] usb 4-1: Found UVC 0.00 device syz (046d:08f3)
[   99.152606][ T5883] usb 4-1: No valid video chain found.
[   99.153044][  T791] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[   99.158257][  T791] dvb-usb: bulk message failed: -22 (3/0)
[   99.165940][  T791] dvb-usb: will use the device's hardware PID filter (table count: 16).
[   99.174297][  T791] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[   99.177390][  T791] usb 2-1: media controller created
[   99.182182][  T791] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   99.190261][  T791] dvb-usb: bulk message failed: -22 (6/0)
[   99.195548][  T791] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[   99.202331][  T791] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8
[   99.209937][  T791] dvb-usb: schedule remote query interval to 150 msecs.
[   99.214980][  T791] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[   99.356043][ T5883] usb 4-1: USB disconnect, device number 4
[   99.375275][  T791] dvb-usb: bulk message failed: -22 (1/0)
[   99.377850][  T791] dvb-usb: error while querying for an remote control event.
[   99.430078][  T791] usb 2-1: USB disconnect, device number 8
[   99.433316][ T6916] loop2: detected capacity change from 0 to 1764
[   99.457225][  T791] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  100.843278][ T6934] loop1: detected capacity change from 0 to 32768
[  100.866477][ T6934] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  100.909909][ T6934] XFS (loop1): Ending clean mount
[  100.918049][ T6934] XFS (loop1): Quotacheck needed: Please wait.
[  100.952571][ T6934] XFS (loop1): Quotacheck: Done.
[  101.031271][ T5856] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  101.313564][ T6950] loop3: detected capacity change from 0 to 512
[  101.327746][ T6952] capability: warning: `syz.1.379' uses 32-bit capabilities (legacy support in use)
[  101.339775][ T6950] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.378: corrupted in-inode xattr: invalid ea_ino
[  101.352046][ T6950] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.378: couldn't read orphan inode 15 (err -117)
[  101.358970][ T6950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.393925][ T6347] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.466680][ T6959] 8021q: adding VLAN 0 to HW filter on device batadv1
[  101.472252][ T6959] team0: Port device batadv1 added
[  101.810532][ T5911] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  101.974749][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  101.983565][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  101.989568][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  101.994472][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  101.999683][ T5911] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  102.003249][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.006339][ T5911] usb 2-1: Product: syz
[  102.007840][ T5911] usb 2-1: Manufacturer: syz
[  102.009501][ T5911] usb 2-1: SerialNumber: syz
[  102.013887][ T5911] usb 2-1: config 0 descriptor??
[  102.237737][ T5911] adutux 2-1:0.0: ADU208  now attached to /dev/usb/adutux0
[  102.250970][ T5911] usb 2-1: USB disconnect, device number 9
[  102.571679][   T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  102.746932][   T10] usb 4-1: config 0 has an invalid interface number: 171 but max is 0
[  102.749413][ T6994] netlink: 'syz.2.397': attribute type 1 has an invalid length.
[  102.754264][   T10] usb 4-1: config 0 has no interface number 0
[  102.756876][   T10] usb 4-1: config 0 interface 171 has no altsetting 0
[  102.778455][   T10] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00
[  102.785119][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.788564][   T10] usb 4-1: Product: syz
[  102.800747][   T10] usb 4-1: Manufacturer: syz
[  102.802869][   T10] usb 4-1: SerialNumber: syz
[  102.814340][   T10] usb 4-1: config 0 descriptor??
[  102.825100][   T10] usb-storage 4-1:0.171: USB Mass Storage device detected
[  102.916900][ T7002] netlink: 'syz.1.399': attribute type 10 has an invalid length.
[  102.948920][ T7002] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.975644][ T7002] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  103.074092][  T791] usb 4-1: USB disconnect, device number 5
[  103.376726][ T7009] Bluetooth: MGMT ver 1.23
[  103.514858][ T7011] bond0: option packets_per_slave: invalid value (70683304)
[  103.517594][ T7011] bond0: option packets_per_slave: allowed values 0 - 65535
[  104.160697][ T5911] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  104.185592][ T7027] loop1: detected capacity change from 0 to 512
[  104.231429][  T791] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  104.250704][ T7029] loop1: detected capacity change from 0 to 512
[  104.259179][ T7029] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  104.277282][ T7029] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002]
[  104.286231][ T7029] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.412: corrupted in-inode xattr: e_value size too large
[  104.297615][ T7029] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.412: couldn't read orphan inode 15 (err -117)
[  104.304273][ T7029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.313901][ T5911] usb 3-1: Using ep0 maxpacket: 16
[  104.318291][ T5911] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  104.322923][ T5911] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  104.331463][ T5911] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  104.334520][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.337781][ T5911] usb 3-1: Product: syz
[  104.339318][ T5911] usb 3-1: Manufacturer: syz
[  104.339566][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.343097][ T5911] usb 3-1: SerialNumber: syz
[  104.392912][ T7033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.413'.
[  104.404725][  T791] usb 4-1: config index 0 descriptor too short (expected 149, got 148)
[  104.407710][  T791] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  104.414112][  T791] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  104.422471][  T791] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  104.427836][  T791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  104.437312][  T791] usb 4-1: SerialNumber: syz
[  104.533192][   T33] audit: type=1326 audit(1757561519.854:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7040 comm="syz.1.417" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d078eba9 code=0x7ffc0000
[  104.542515][   T33] audit: type=1326 audit(1757561519.854:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7040 comm="syz.1.417" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d078eba9 code=0x7ffc0000
[  104.550145][   T33] audit: type=1326 audit(1757561519.864:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7040 comm="syz.1.417" exe="/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f92d078eba9 code=0x7ffc0000
[  104.561043][   T33] audit: type=1326 audit(1757561519.864:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7040 comm="syz.1.417" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d078eba9 code=0x7ffc0000
[  104.561234][ T5911] usb 3-1: 0:2 : does not exist
[  104.569009][   T33] audit: type=1326 audit(1757561519.864:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7040 comm="syz.1.417" exe="/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f92d078eba9 code=0x7ffc0000
[  104.593001][   T33] audit: type=1326 audit(1757561519.864:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7040 comm="syz.1.417" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d078eba9 code=0x7ffc0000
[  104.595060][ T5911] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  104.601421][   T33] audit: type=1326 audit(1757561519.864:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7040 comm="syz.1.417" exe="/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f92d078eba9 code=0x7ffc0000
[  104.611259][   T33] audit: type=1326 audit(1757561519.864:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7040 comm="syz.1.417" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d078eba9 code=0x7ffc0000
[  104.617322][ T5911] usb 3-1: USB disconnect, device number 8
[  104.621924][  T791] usb 4-1: 0:2 : does not exist
[  104.626651][   T33] audit: type=1326 audit(1757561519.864:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7040 comm="syz.1.417" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d078eba9 code=0x7ffc0000
[  104.648977][  T791] usb 4-1: USB disconnect, device number 6
[  104.677125][ T5945] udevd[5945]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  104.854262][ T7054] loop1: detected capacity change from 0 to 256
[  105.152425][  T791] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  105.328582][  T791] usb 2-1: Using ep0 maxpacket: 8
[  105.342324][  T791] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 242, using maximum allowed: 30
[  105.344554][ T7066] loop3: detected capacity change from 0 to 256
[  105.360329][  T791] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 254, changing to 11
[  105.370109][  T791] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.375469][  T791] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 242
[  105.385774][  T791] usb 2-1: config 0 interface 0 has no altsetting 0
[  105.388673][  T791] usb 2-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00
[  105.394274][  T791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.406221][  T791] usb 2-1: config 0 descriptor??
[  105.625345][ T7079] netlink: 128 bytes leftover after parsing attributes in process `syz.2.435'.
[  105.864720][  T791] microsoft 0003:045E:00F9.0001: hidraw0: USB HID v0.03 Device [HID 045e:00f9] on usb-dummy_hcd.1-1/input0
[  105.869434][  T791] microsoft 0003:045E:00F9.0001: no inputs found
[  105.879578][  T791] microsoft 0003:045E:00F9.0001: could not initialize ff, continuing anyway
[  105.900051][   T33] audit: type=1326 audit(1757561521.214:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.2.440" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d19f8eba9 code=0x0
[  106.059820][  T791] usb 2-1: USB disconnect, device number 10
[  106.245697][ T7097] loop3: detected capacity change from 0 to 40427
[  106.251422][ T7097] F2FS-fs: heap/no_heap options were deprecated
[  106.260693][ T7097] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  106.265219][ T7097] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  106.267994][ T7097] F2FS-fs (loop3): old and new quota format mixing
[  106.395178][ T7099] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.444'.
[  106.469670][ T7103] Illegal XDP return value 4294967274 on prog  (id 27) dev syz_tun, expect packet loss!
[  106.553088][ T7107] netlink: 20 bytes leftover after parsing attributes in process `syz.3.448'.
[  106.848834][ T7124] loop1: detected capacity change from 0 to 4096
[  106.893056][ T7124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.909563][ T7124] EXT4-fs (loop1): shut down requested (1)
[  106.937340][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.126970][ T7150] netlink: 'syz.2.465': attribute type 1 has an invalid length.
[  107.132330][ T7152] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  107.137177][ T7152] bond0: (slave lo): Error: Device can not be enslaved while up
[  107.302428][ T7164] ptrace attach of "/syz-executor exec"[5849] was attempted by "/syz-executor exec"[7164]
[  107.959634][ T7175] cgroup: Unknown subsys name '@﬽4*oңhoU'
[  108.149295][ T7177] loop3: detected capacity change from 0 to 512
[  108.226152][ T7177] EXT4-fs (loop3): 1 orphan inode deleted
[  108.239541][ T7177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.245759][ T1088] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u9:5: Failed to release dquot type 1
[  108.252099][ T7177] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.252849][ T7171] loop1: detected capacity change from 0 to 32768
[  108.272732][ T7171] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.473 (7171)
[  108.384353][ T7171] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  108.396885][ T7171] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  108.439819][ T6347] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.561520][ T7171] BTRFS info (device loop1): enabling ssd optimizations
[  108.573193][ T7171] BTRFS info (device loop1): enabling free space tree
[  108.575993][ T7171] BTRFS info (device loop1): use lzo compression, level 0
[  108.622619][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  108.807955][ T5856] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  108.860531][   T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  109.019598][   T10] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  109.024278][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.035306][   T10] usb 3-1: config 0 descriptor??
[  109.134415][ T7214] loop1: detected capacity change from 0 to 1024
[  109.202842][ T7214] hfsplus: b-tree write err: -5, ino 3
[  109.246152][ T7200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.479'.
[  109.252997][   T10] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  109.272666][ T7216] TCP: TCP_TX_DELAY enabled
[  109.397833][ T7220] loop1: detected capacity change from 0 to 8192
[  109.464487][ T5945]  loop1: AHDI p1 p2 p4
[  109.465140][   T10] [drm:udl_init] *ERROR* Selecting channel failed
[  109.483574][ T7220]  loop1: AHDI p1 p2 p4
[  109.486130][   T10] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 3
[  109.489044][   T10] [drm] Initialized udl on minor 3
[  109.495345][   T10] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  109.505765][   T10] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  109.523341][    T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  109.533921][    T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  109.538561][   T10] usb 3-1: USB disconnect, device number 9
[  109.541928][    T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  109.561796][ T5945] udevd[5945]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  109.604402][ T5945] udevd[5945]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  109.769552][ T7234] mmap: syz.1.494 (7234) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  109.920503][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  110.070735][    T9] usb 4-1: Using ep0 maxpacket: 16
[  110.074909][    T9] usb 4-1: config 8 has an invalid interface number: 57 but max is 0
[  110.078420][    T9] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  110.086311][    T9] usb 4-1: config 8 has no interface number 0
[  110.088921][    T9] usb 4-1: config 8 interface 57 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  110.094579][    T9] usb 4-1: config 8 interface 57 has no altsetting 0
[  110.099738][    T9] usb 4-1: New USB device found, idVendor=39c6, idProduct=8f68, bcdDevice=dd.44
[  110.104000][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.107542][    T9] usb 4-1: Product: syz
[  110.109286][    T9] usb 4-1: Manufacturer: syz
[  110.111251][    T9] usb 4-1: SerialNumber: syz
[  110.195962][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  110.195976][   T33] audit: type=1326 audit(1757561525.514:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.2.498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d19f8eba9 code=0x7ffc0000
[  110.209504][   T33] audit: type=1326 audit(1757561525.514:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.2.498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d19f8eba9 code=0x7ffc0000
[  110.217186][   T33] audit: type=1326 audit(1757561525.514:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.2.498" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0d19f8eba9 code=0x7ffc0000
[  110.225842][   T33] audit: type=1326 audit(1757561525.514:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.2.498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d19f8eba9 code=0x7ffc0000
[  110.240157][   T33] audit: type=1326 audit(1757561525.514:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.2.498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d19f8eba9 code=0x7ffc0000
[  110.249693][   T33] audit: type=1326 audit(1757561525.514:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.2.498" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0d19f8eba9 code=0x7ffc0000
[  110.265173][   T33] audit: type=1326 audit(1757561525.514:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.2.498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d19f8eba9 code=0x7ffc0000
[  110.275474][   T33] audit: type=1326 audit(1757561525.514:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.2.498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d19f8eba9 code=0x7ffc0000
[  110.327288][ T1271] kernel read not supported for file /dsp (pid: 1271 comm: kworker/1:2)
[  110.360337][    T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  110.363457][    T9] usb 4-1: MIDIStreaming interface descriptor not found
[  110.392394][ T7250] loop1: detected capacity change from 0 to 64
[  110.417427][    T9] usb 4-1: USB disconnect, device number 7
[  110.425580][ T7250] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  110.694745][ T7248] loop2: detected capacity change from 0 to 32768
[  110.705243][ T7248] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.501 (7248)
[  110.722747][ T7248] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  110.726035][ T7248] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  110.813780][ T7278] loop1: detected capacity change from 0 to 2048
[  110.814775][ T7248] BTRFS info (device loop2): enabling ssd optimizations
[  110.827048][ T7278] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  110.831017][ T7248] BTRFS info (device loop2): enabling free space tree
[  110.919415][ T5849] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  111.156414][ T7291] loop1: detected capacity change from 0 to 4096
[  111.163837][ T7291] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  111.215005][ T7297] program syz.2.510 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  111.317606][ T7305] overlayfs: missing 'lowerdir'
[  111.407084][ T7312] loop1: detected capacity change from 0 to 164
[  111.427717][ T7312] iso9660: Corrupted directory entry in block 2 of inode 1792
[  112.429248][ T7340] loop2: detected capacity change from 0 to 2048
[  112.443337][ T7340] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  112.545661][ T7344] loop1: detected capacity change from 0 to 512
[  112.548742][ T7344] EXT4-fs: Ignoring removed bh option
[  112.574505][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.534'.
[  112.579022][ T7344] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  112.595821][ T7344] EXT4-fs (loop1): 1 truncate cleaned up
[  112.598891][ T7344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.641515][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.806824][   T33] audit: type=1326 audit(1757561528.124:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.2.544" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d19f8eba9 code=0x7ffc0000
[  112.833496][   T33] audit: type=1326 audit(1757561528.124:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.2.544" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0d19f8eba9 code=0x7ffc0000
[  112.870244][ T7372] loop2: detected capacity change from 0 to 512
[  112.897080][ T7372] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.546: bad orphan inode 11
[  112.902819][ T7379] netlink: 'syz.1.549': attribute type 1 has an invalid length.
[  112.905673][ T7379] netlink: 224 bytes leftover after parsing attributes in process `syz.1.549'.
[  112.906162][ T7372] ext4_test_bit(bit=10, block=4) = 1
[  112.915778][ T7372] is_bad_inode(inode)=0
[  112.917593][ T7372] NEXT_ORPHAN(inode)=2080374784
[  112.919688][ T7372] max_ino=32
[  112.922877][ T7372] i_nlink=0
[  112.924261][ T7372] EXT4-fs (loop2): 1 truncate cleaned up
[  112.926885][ T7372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.948311][ T7372] EXT4-fs (loop2): shut down requested (2)
[  112.956254][ T7382] netlink: 16 bytes leftover after parsing attributes in process `syz.3.550'.
[  112.959410][ T7372] EXT4-fs warning (device loop2): empty_inline_dir:1767: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60
[  112.989752][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.040064][ T7385] loop3: detected capacity change from 0 to 2048
[  113.074334][ T7385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.103728][ T7385] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  113.160128][ T6347] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.390686][  T791] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  113.426090][ T7412] option changes via remount are deprecated (pid=7411 comm=syz.3.564)
[  113.540481][  T791] usb 3-1: Using ep0 maxpacket: 32
[  113.546348][  T791] usb 3-1: config 0 has an invalid interface number: 54 but max is 0
[  113.549154][  T791] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  113.554608][  T791] usb 3-1: config 0 has no interface number 0
[  113.556836][  T791] usb 3-1: too many endpoints for config 0 interface 54 altsetting 205: 134, using maximum allowed: 30
[  113.562992][  T791] usb 3-1: config 0 interface 54 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 134
[  113.569968][  T791] usb 3-1: config 0 interface 54 has no altsetting 0
[  113.573109][ T5911] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  113.574807][  T791] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  113.578968][  T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.582581][  T791] usb 3-1: Product: syz
[  113.584444][  T791] usb 3-1: Manufacturer: syz
[  113.586168][  T791] usb 3-1: SerialNumber: syz
[  113.593074][  T791] usb 3-1: config 0 descriptor??
[  113.597647][  T791] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  113.601844][  T791] usb 3-1: MIDIStreaming interface descriptor not found
[  113.742287][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  113.746166][ T5911] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  113.751698][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  113.762188][ T5911] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  113.774628][ T5911] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  113.778300][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.793068][ T5911] usb 2-1: Product: syz
[  113.794815][ T5911] usb 2-1: Manufacturer: syz
[  113.800644][ T5911] usb 2-1: SerialNumber: syz
[  113.811336][ T5911] usb 2-1: config 0 descriptor??
[  113.819041][ T5911] kvaser_usb 2-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0
[  113.838423][ T5911] kvaser_usb 2-1:0.0: error -EMSGSIZE: Failed to initialize card
[  113.842708][ T5911] kvaser_usb 2-1:0.0: probe with driver kvaser_usb failed with error -90
[  113.849013][ T5883] usb 3-1: USB disconnect, device number 10
[  114.028479][    T9] usb 2-1: USB disconnect, device number 11
[  114.220739][ T5316] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  114.387521][ T5316] usb 4-1: config 0 has no interfaces?
[  114.393626][ T5316] usb 4-1: New USB device found, idVendor=0421, idProduct=0128, bcdDevice=a6.84
[  114.400114][ T5316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.517188][ T5316] usb 4-1: Product: syz
[  114.519564][ T5316] usb 4-1: Manufacturer: syz
[  114.522112][ T5316] usb 4-1: SerialNumber: syz
[  114.529895][ T5316] usb 4-1: config 0 descriptor??
[  114.886631][ T2303] usb 4-1: USB disconnect, device number 8
[  114.940656][    T9] usb 2-1: new low-speed USB device number 12 using dummy_hcd
[  115.092217][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  115.096335][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8
[  115.102491][    T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00
[  115.106406][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.110767][    T9] usb 2-1: config 0 descriptor??
[  115.113664][ T7440] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  115.123205][    T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9
[  115.324300][ T5283] bcm5974 2-1:0.0: could not read from device
[  115.342406][    T9] usb 2-1: USB disconnect, device number 12
[  115.479065][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.581'.
[  115.779160][ T7473] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  115.832548][ T7475] loop3: detected capacity change from 0 to 4096
[  115.870049][ T7475] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  115.891672][ T6347] ntfs3(loop3): ino=9, ntfs_sync_fs failed, -22.
[  115.907647][ T7477] loop1: detected capacity change from 0 to 4096
[  115.915427][ T7477] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  115.918317][ T7479] loop3: detected capacity change from 0 to 128
[  115.926895][ T7479] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  115.937770][ T7479] hpfs: filesystem error: improperly stopped
[  115.939943][ T7479] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  115.950640][ T7479] hpfs: You really don't want any checks? You are crazy...
[  115.954646][ T7479] hpfs: hpfs_map_sector(): read error
[  115.956512][ T7479] hpfs: code page support is disabled
[  115.960299][ T7477] ntfs3(loop1): ino=19, mi_enum_attr
[  115.961998][ T7479] hpfs: hpfs_map_4sectors(): unaligned read
[  115.965197][ T7479] hpfs: hpfs_map_4sectors(): unaligned read
[  115.966294][ T7477] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  115.967313][ T7479] hpfs: filesystem error: unable to find root dir
[  116.003290][ T7477] ntfs3(loop1): failed to convert "c46c" to cp950
[  116.012882][ T7477] ntfs3(loop1): ino=20, mi_enum_attr
[  116.107806][ T7483] loop1: detected capacity change from 0 to 4096
[  116.111308][ T7483] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  116.125977][ T7483] ntfs3(loop1): ino=19, mi_enum_attr
[  116.127828][ T7483] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  116.240462][ T7487] netlink: 268 bytes leftover after parsing attributes in process `syz.1.598'.
[  116.245194][ T7487] unsupported nla_type 65024
[  116.410739][    T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  116.987344][ T7501] loop2: detected capacity change from 0 to 32768
[  117.003457][   T33] kauditd_printk_skb: 8 callbacks suppressed
[  117.003473][   T33] audit: type=1326 audit(1757561532.204:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz.1.604" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92d078eba9 code=0x0
[  117.018729][ T7501] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.605 (7501)
[  117.032003][    T9] usb 4-1: Using ep0 maxpacket: 32
[  117.039492][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.046902][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  117.051546][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  117.055272][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.063657][ T7501] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  117.067789][ T7501] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  117.076617][    T9] usb 4-1: config 0 descriptor??
[  117.097943][    T9] hub 4-1:0.0: USB hub found
[  117.129414][ T7501] BTRFS info (device loop2): rebuilding free space tree
[  117.154980][ T7501] BTRFS info (device loop2): disabling free space tree
[  117.157307][ T7501] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  117.161638][ T7501] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  117.177863][ T7501] BTRFS info (device loop2): enabling ssd optimizations
[  117.180818][ T7501] BTRFS info (device loop2): force clearing of disk cache
[  117.183698][ T7501] BTRFS info (device loop2): enabling auto defrag
[  117.186330][ T7501] BTRFS info (device loop2): doing ref verification
[  117.225803][   T33] audit: type=1800 audit(1757561532.544:40): pid=7501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.605" name="file1" dev="loop2" ino=260 res=0 errno=0
[  117.363479][    T9] hub 4-1:0.0: 1 port detected
[  117.587568][ T7531] loop1: detected capacity change from 0 to 1024
[  117.705054][ T5849] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  117.850629][   T53] wlan1: Trigger new scan to find an IBSS to join
[  118.034516][   T10] hub 4-1:0.0: activate --> -90
[  118.075292][ T7535] nbd: nbd2 already in use
[  118.453325][ T1397] hfsplus: b-tree write err: -5, ino 4
[  118.550652][ T5883] usb 4-1: USB disconnect, device number 9
[  118.790777][ T5316] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  118.955232][ T5316] usb 2-1: Using ep0 maxpacket: 32
[  118.970992][ T5316] usb 2-1: unable to get BOS descriptor or descriptor too short
[  118.975592][ T5316] usb 2-1: config 128 has an invalid interface number: 127 but max is 3
[  118.980033][ T5316] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  118.994754][ T5316] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4
[  118.998694][ T5316] usb 2-1: config 128 has no interface number 0
[  119.004115][ T5316] usb 2-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  119.018942][ T5316] usb 2-1: config 128 interface 127 has no altsetting 0
[  119.033435][ T5316] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  119.038444][ T5316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.048249][ T5316] usb 2-1: Product: syz
[  119.050068][ T5316] usb 2-1: Manufacturer: syz
[  119.056054][ T5316] usb 2-1: SerialNumber: syz
[  119.079500][ T7558] loop3: detected capacity change from 0 to 4096
[  119.083526][ T7558] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  119.096029][ T7558] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  119.098597][ T7558] ntfs3(loop3): Failed to load root (-22).
[  119.298468][ T5316] usb 2-1: USB disconnect, device number 13
[  119.335861][ T5945] udevd[5945]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  119.410562][    T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  119.561178][    T9] usb 4-1: Using ep0 maxpacket: 16
[  119.574282][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  119.578466][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  119.582643][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  119.599060][    T9] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59
[  119.603202][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.607919][    T9] usb 4-1: Product: syz
[  119.609487][    T9] usb 4-1: Manufacturer: syz
[  119.611672][    T9] usb 4-1: SerialNumber: syz
[  119.616499][    T9] usb 4-1: config 0 descriptor??
[  119.627838][    T9] peak_usb 4-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8
[  119.630503][    T9] peak_usb 4-1:0.0: unable to read PCAN-USB serial number (err -8)
[  119.691216][    T9] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -8
[  119.837337][ T5316] usb 4-1: USB disconnect, device number 10
[  120.044128][ T7590] loop1: detected capacity change from 0 to 512
[  120.059114][ T7590] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  120.099284][ T7590] EXT4-fs (loop1): 1 truncate cleaned up
[  120.104083][ T7590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.114305][ T7590] EXT4-fs error (device loop1): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.1.634: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  120.132630][ T7590] EXT4-fs (loop1): Remounting filesystem read-only
[  120.135580][ T7590] EXT4-fs warning (device loop1): ext4_rename_delete:3731: inode #2: comm syz.1.634: Deleting old file: nlink 5, error=-117
[  120.164502][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.384528][ T7596] loop2: detected capacity change from 0 to 32768
[  120.388565][ T7596] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.636 (7596)
[  120.413774][ T7596] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  120.427000][ T7606] veth0: entered promiscuous mode
[  120.430514][ T7605] veth0: left promiscuous mode
[  120.437850][ T7596] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  120.662484][ T7596] BTRFS info (device loop2): enabling ssd optimizations
[  120.665196][ T7596] BTRFS info (device loop2): enabling free space tree
[  120.667717][ T7596] BTRFS info (device loop2): use zlib compression, level 3
[  121.008614][ T5849] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  121.036253][ T7634] tmpfs: Bad value for 'mpol'
[  121.280305][ T7638] geneve2: entered promiscuous mode
[  121.740512][ T5883] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  121.796052][ T7640] loop1: detected capacity change from 0 to 16384
[  121.904182][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  121.908846][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.913991][ T5883] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  121.914574][ T7640] bcachefs (loop1): starting version 1.13: inode_has_child_snapshots opts=metadata_checksum=none,data_checksum=none,str_hash=crc64,erasure_code,prjquota,journal_flush_disabled,norecovery,recovery_pass_last=reconstruct_snapshots,read_only,reconstruct_alloc,version_upgrade=none
[  121.917896][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.933181][ T7640]   features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  121.934978][ T5883] usb 3-1: config 0 descriptor??
[  121.939476][ T7640] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  121.945275][ T7640] bcachefs (loop1): recovering from clean shutdown, journal seq 18
[  121.950044][ T7640] bcachefs (loop1): dropping and reconstructing all alloc info
[  122.009118][ T7640] bcachefs (loop1): accounting_read... done
[  122.017864][ T7640] bcachefs (loop1): alloc_read... done
[  122.022802][ T7640] bcachefs (loop1): snapshots_read... done
[  122.026357][ T7640] bcachefs (loop1): reading quotas
[  122.033490][ T7640] bcachefs (loop1): quotas done
[  122.036883][ T7640] bcachefs (loop1): done starting filesystem
[  122.116223][ T5856] bcachefs (loop1): shutting down
[  122.169165][ T5856] bcachefs (loop1): shutdown complete
[  122.471071][ T5911] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  122.554802][ T5883] hid-led 0003:1D34:000A.0002: probe with driver hid-led failed with error -71
[  122.567564][ T5883] usb 3-1: USB disconnect, device number 11
[  122.640810][ T5911] usb 4-1: Using ep0 maxpacket: 16
[  122.644969][ T5911] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  122.649139][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  122.654669][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  122.658992][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  122.666531][ T5911] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  122.670983][ T5911] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  122.674785][ T5911] usb 4-1: Manufacturer: syz
[  122.678978][ T5911] usb 4-1: config 0 descriptor??
[  122.790545][ T1397] wlan1: Trigger new scan to find an IBSS to join
[  122.892712][ T5883] usb 4-1: USB disconnect, device number 11
[  123.219743][ T7662] loop1: detected capacity change from 0 to 256
[  123.232830][ T7662] MINIX-fs: file system does not have enough imap blocks allocated.  Refusing to mount.
[  123.238119][ T7662] MINIX-fs: bad superblock or unable to read bitmaps
[  123.603251][ T7684] loop3: detected capacity change from 0 to 4096
[  123.711519][ T7685] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  123.784660][ T7684] NILFS error (device loop3): nilfs_dotdot: directory #12 missing '.'
[  123.795901][ T7684] Remounting filesystem read-only
[  123.853942][   T36] wlan1: Creating new IBSS network, BSSID 2e:fa:ea:26:cf:26
[  123.956240][ T7682] loop1: detected capacity change from 0 to 32768
[  123.989449][ T7682] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  124.025978][ T7682] XFS (loop1): Ending clean mount
[  124.033655][ T7702] pimreg: entered allmulticast mode
[  124.034729][ T7682] XFS (loop1): Quotacheck needed: Please wait.
[  124.080837][ T7682] XFS (loop1): Quotacheck: Done.
[  124.115325][ T5856] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  124.208787][ T7704] loop3: detected capacity change from 0 to 32768
[  124.222151][ T7704] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.674 (7704)
[  124.261009][ T7704] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  124.264690][ T7704] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  124.306866][ T7704] BTRFS info (device loop3): enabling ssd optimizations
[  124.309633][ T7704] BTRFS info (device loop3): using spread ssd allocation scheme
[  124.319901][ T7722] netlink: 'syz.1.675': attribute type 1 has an invalid length.
[  124.326417][ T7704] BTRFS info (device loop3): enabling free space tree
[  124.357781][ T6347] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  124.367507][ T7722] bond1: entered promiscuous mode
[  124.369361][ T7722] 8021q: adding VLAN 0 to HW filter on device bond1
[  124.458999][ T7726] 8021q: adding VLAN 0 to HW filter on device bond1
[  124.472192][ T7726] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address
[  124.476535][ T7726] bond1: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  124.499694][ T7726] bond1: (slave vxcan1): making interface the new active one
[  124.505834][ T7726] vxcan1: entered promiscuous mode
[  124.510320][ T7726] bond1: (slave vxcan1): Enslaving as an active interface with an up link
[  124.777528][ T7742] loop3: detected capacity change from 0 to 4096
[  124.810273][ T7746] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  124.837944][   T33] audit: type=1800 audit(1757561540.154:41): pid=7742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.684" name="file1" dev="loop3" ino=15 res=0 errno=0
[  125.123286][ T7763] loop1: detected capacity change from 0 to 64
[  125.221332][ T7761] loop3: detected capacity change from 0 to 16384
[  125.312233][ T7761] bcachefs (loop3): starting version 1.13: inode_has_child_snapshots opts=errors=continue,metadata_checksum=none,data_checksum=none,grpquota,norecovery,reconstruct_alloc
[  125.312250][ T7761]   features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  125.330078][ T7761] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  125.346701][ T7761] bcachefs (loop3): invalid journal entry, version=1.13: inode_has_child_snapshots type=clock in superblock: bad size, fixing
[  125.360659][ T7761] bcachefs (loop3): recovering from clean shutdown, journal seq 18
[  125.371879][ T7761] bcachefs (loop3): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive
[  125.371879][ T7761]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  125.380148][ T7761] bcachefs (loop3): dropping and reconstructing all alloc info
[  125.406441][ T7761] bcachefs (loop3): accounting_read... done
[  125.409281][ T7761] bcachefs (loop3): alloc_read... done
[  125.413234][ T7761] bcachefs (loop3): snapshots_read... done
[  125.415895][ T7761] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean
[  125.419437][ T7761] bcachefs (loop3): reading quotas
[  125.431862][ T7761] bcachefs (loop3): quotas done
[  125.434066][ T7761] bcachefs (loop3): done starting filesystem
[  125.483979][ T6347] bcachefs (loop3): shutting down
[  125.516446][ T6347] bcachefs (loop3): shutdown complete
[  125.646317][ T7780] loop1: detected capacity change from 0 to 32768
[  125.667113][ T7780] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  125.682969][ T7780] XFS (loop1): Ending clean mount
[  125.690261][ T7780] XFS (loop1): Quotacheck needed: Please wait.
[  125.718225][ T7780] XFS (loop1): Quotacheck: Done.
[  125.747440][ T7780] XFS (loop1): User initiated shutdown received.
[  125.750100][ T7780] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:466).  Shutting down filesystem.
[  125.756793][ T7780] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  125.782259][ T5856] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  125.852350][   T33] audit: type=1326 audit(1757561541.174:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="+}[@" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d19f8eba9 code=0x7ffc0000
[  125.868690][   T33] audit: type=1326 audit(1757561541.174:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="+}[@" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d19f8eba9 code=0x7ffc0000
[  125.890124][   T33] audit: type=1326 audit(1757561541.174:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="+}[@" exe="/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f0d19f8eba9 code=0x7ffc0000
[  125.911543][   T33] audit: type=1326 audit(1757561541.174:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="+}[@" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d19f8eba9 code=0x7ffc0000
[  125.937835][   T33] audit: type=1326 audit(1757561541.194:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="+}[@" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d19f8eba9 code=0x7ffc0000
[  125.997774][ T7806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.705'.
[  126.904674][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.732'.
[  129.001512][ T7865] syz.2.733 uses obsolete (PF_INET,SOCK_PACKET)
[  129.338691][ T7875] netlink: 28 bytes leftover after parsing attributes in process `syz.1.736'.
[  129.549337][ T7891] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.742'.
[  129.574691][ T7893] loop3: detected capacity change from 0 to 256
[  129.621667][ T7893] FAT-fs (loop3): Directory bread(block 64) failed
[  129.626089][ T7893] FAT-fs (loop3): Directory bread(block 65) failed
[  129.636289][ T7893] FAT-fs (loop3): Directory bread(block 66) failed
[  129.641110][ T7893] FAT-fs (loop3): Directory bread(block 67) failed
[  129.643815][ T7893] FAT-fs (loop3): Directory bread(block 68) failed
[  129.646491][ T7893] FAT-fs (loop3): Directory bread(block 69) failed
[  129.659829][ T7893] FAT-fs (loop3): Directory bread(block 70) failed
[  129.664250][ T7893] FAT-fs (loop3): Directory bread(block 71) failed
[  129.667001][ T7893] FAT-fs (loop3): Directory bread(block 72) failed
[  129.669724][ T7893] FAT-fs (loop3): Directory bread(block 73) failed
[  129.675779][ T7897] loop1: detected capacity change from 0 to 512
[  129.687627][ T7897] EXT4-fs: Ignoring removed orlov option
[  129.696478][ T7897] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  129.738249][ T7897] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  129.763101][ T7897] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.747: corrupted in-inode xattr: e_value size too large
[  129.789314][ T7897] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.747: couldn't read orphan inode 15 (err -117)
[  129.804901][ T7897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.853798][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.005561][ T7940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.765'.
[  131.117263][ T7932] loop3: detected capacity change from 0 to 32768
[  131.280289][ T7946] netlink: 64 bytes leftover after parsing attributes in process `syz.3.767'.
[  131.891678][ T7957] loop1: detected capacity change from 0 to 32768
[  131.920311][ T7957] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  131.954679][ T7957] XFS (loop1): Ending clean mount
[  131.964319][ T7957] XFS (loop1): Quotacheck needed: Please wait.
[  131.971692][ T7969] netlink: 16 bytes leftover after parsing attributes in process `syz.2.774'.
[  131.998481][ T7957] XFS (loop1): Quotacheck: Done.
[  132.032586][ T5856] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  132.191584][ T7977] netlink: 'syz.2.779': attribute type 10 has an invalid length.
[  132.213882][ T7977] bond0: entered promiscuous mode
[  132.216397][ T7977] bond_slave_0: entered promiscuous mode
[  132.219185][ T7977] bond_slave_1: entered promiscuous mode
[  132.224081][ T7977] batadv0: entered promiscuous mode
[  132.401945][ T7991] netlink: 16 bytes leftover after parsing attributes in process `syz.2.784'.
[  132.588579][ T7996] loop1: detected capacity change from 0 to 16384
[  132.648444][ T7996] bcachefs (loop1): starting version 1.13: inode_has_child_snapshots opts=errors=continue,metadata_checksum=none,data_checksum=none,background_compression=gzip,erasure_code,grpquota,no_splitbrain_check,norecovery,reconstruct_alloc,version_upgrade=none,nocow
[  132.648466][ T7996]   features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  132.665234][ T7996] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  132.668805][ T7996] bcachefs (loop1): invalid journal entry, version=1.13: inode_has_child_snapshots type=clock in superblock: bad size, fixing
[  132.673889][ T7996] bcachefs (loop1): recovering from clean shutdown, journal seq 18
[  132.676680][ T7996] bcachefs (loop1): dropping and reconstructing all alloc info
[  132.687437][ T7996] bcachefs (loop1): accounting_read... done
[  132.690554][ T7996] bcachefs (loop1): alloc_read... done
[  132.693006][ T7996] bcachefs (loop1): snapshots_read... done
[  132.695455][ T7996] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean
[  132.698933][ T7996] bcachefs (loop1): reading quotas
[  132.701927][ T7996] bcachefs (loop1): quotas done
[  132.704219][ T7996] bcachefs (loop1): done starting filesystem
[  132.745623][ T5856] bcachefs (loop1): shutting down
[  132.769053][ T5856] bcachefs (loop1): shutdown complete
[  132.800631][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.802663][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.918363][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.791'.
[  132.921764][ T8013] netlink: 24 bytes leftover after parsing attributes in process `syz.2.791'.
[  132.928419][ T5883] IPVS: starting estimator thread 0...
[  133.020568][ T8014] IPVS: using max 80 ests per chain, 192000 per kthread
[  133.738996][ T8018] loop1: detected capacity change from 0 to 16
[  133.743476][ T8018] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  133.760740][ T8018] cramfs: root is not a directory
[  134.110936][ T8024] loop1: detected capacity change from 0 to 40427
[  134.125452][ T8024] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  134.128634][ T8024] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  134.138686][ T8024] F2FS-fs (loop1): invalid crc value
[  134.194580][ T8024] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  134.199887][ T8024] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  134.203346][ T8024] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  134.751554][ T5856] syz-executor: attempt to access beyond end of device
[  134.751554][ T5856] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  134.769478][ T5856] CPU: 0 UID: 0 PID: 5856 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  134.769497][ T5856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  134.769504][ T5856] Call Trace:
[  134.769509][ T5856]  <TASK>
[  134.769515][ T5856]  dump_stack_lvl+0x189/0x250
[  134.769536][ T5856]  ? __pfx_dump_stack_lvl+0x10/0x10
[  134.769549][ T5856]  ? __pfx_queue_work_on+0x10/0x10
[  134.769559][ T5856]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  134.769575][ T5856]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  134.769600][ T5856]  f2fs_handle_critical_error+0x37c/0x540
[  134.769621][ T5856]  f2fs_write_end_io+0x886/0xb60
[  134.769651][ T5856]  __submit_merged_bio+0x27a/0x6a0
[  134.769664][ T5856]  ? up_write+0x1c4/0x420
[  134.769680][ T5856]  __submit_merged_write_cond+0x44c/0x530
[  134.769703][ T5856]  f2fs_sync_node_pages+0x1479/0x15e0
[  134.769735][ T5856]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  134.769784][ T5856]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  134.769799][ T5856]  ? up_write+0x1c4/0x420
[  134.769808][ T5856]  ? do_raw_spin_unlock+0x4d/0x240
[  134.769826][ T5856]  f2fs_write_checkpoint+0xe6f/0x1df0
[  134.769859][ T5856]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  134.769914][ T5856]  ? kill_f2fs_super+0x298/0x6c0
[  134.769931][ T5856]  kill_f2fs_super+0x2c3/0x6c0
[  134.769948][ T5856]  ? __pfx_kill_f2fs_super+0x10/0x10
[  134.769957][ T5856]  ? radix_tree_delete_item+0x2b6/0x400
[  134.769980][ T5856]  ? shrinker_free+0x2ce/0x3e0
[  134.769996][ T5856]  deactivate_locked_super+0xbc/0x130
[  134.770011][ T5856]  cleanup_mnt+0x425/0x4c0
[  134.770024][ T5856]  ? lockdep_hardirqs_on+0x9c/0x150
[  134.770037][ T5856]  task_work_run+0x1d4/0x260
[  134.770054][ T5856]  ? __pfx_task_work_run+0x10/0x10
[  134.770065][ T5856]  ? __x64_sys_umount+0x122/0x160
[  134.770084][ T5856]  ? exit_to_user_mode_loop+0x40/0x110
[  134.770103][ T5856]  exit_to_user_mode_loop+0xec/0x110
[  134.770117][ T5856]  do_syscall_64+0x2bd/0x3b0
[  134.770127][ T5856]  ? lockdep_hardirqs_on+0x9c/0x150
[  134.770138][ T5856]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.770148][ T5856]  ? exc_page_fault+0x9f/0xf0
[  134.770161][ T5856]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.770170][ T5856] RIP: 0033:0x7f92d078fed7
[  134.770182][ T5856] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  134.770191][ T5856] RSP: 002b:00007ffdc8f520e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  134.770203][ T5856] RAX: 0000000000000000 RBX: 00007f92d0811c05 RCX: 00007f92d078fed7
[  134.770210][ T5856] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdc8f521a0
[  134.770216][ T5856] RBP: 00007ffdc8f521a0 R08: 0000000000000000 R09: 0000000000000000
[  134.770222][ T5856] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdc8f53230
[  134.770229][ T5856] R13: 00007f92d0811c05 R14: 0000000000020dc5 R15: 00007ffdc8f53270
[  134.770252][ T5856]  </TASK>
[  134.770258][ T5856] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  136.779317][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.814'.
[  136.849237][ T8074] Zero length message leads to an empty skb
[  138.006995][ T8094] loop1: detected capacity change from 0 to 40427
[  138.012952][ T8094] F2FS-fs (loop1): build fault injection rate: 771
[  138.024413][ T8094] F2FS-fs (loop1): invalid crc value
[  138.134863][ T8094] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  138.145441][ T8094] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  138.201068][ T8103] f2fs_ckpt-7:1: attempt to access beyond end of device
[  138.201068][ T8103] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  138.209028][ T8103] CPU: 0 UID: 0 PID: 8103 Comm: f2fs_ckpt-7:1 Not tainted syzkaller #0 PREEMPT(full) 
[  138.209048][ T8103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  138.209057][ T8103] Call Trace:
[  138.209064][ T8103]  <TASK>
[  138.209070][ T8103]  dump_stack_lvl+0x189/0x250
[  138.209091][ T8103]  ? __pfx_dump_stack_lvl+0x10/0x10
[  138.209105][ T8103]  ? __pfx_queue_work_on+0x10/0x10
[  138.209117][ T8103]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  138.209136][ T8103]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  138.209160][ T8103]  f2fs_handle_critical_error+0x37c/0x540
[  138.209183][ T8103]  f2fs_write_end_io+0x886/0xb60
[  138.209210][ T8103]  __submit_merged_bio+0x27a/0x6a0
[  138.209225][ T8103]  ? up_write+0x1c4/0x420
[  138.209242][ T8103]  __submit_merged_write_cond+0x44c/0x530
[  138.209264][ T8103]  f2fs_sync_node_pages+0x1479/0x15e0
[  138.209294][ T8103]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  138.209334][ T8103]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  138.209351][ T8103]  ? up_write+0x1c4/0x420
[  138.209360][ T8103]  ? do_raw_spin_unlock+0x4d/0x240
[  138.209411][ T8103]  f2fs_write_checkpoint+0xe6f/0x1df0
[  138.209446][ T8103]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  138.209491][ T8103]  ? down_write+0x162/0x1f0
[  138.209505][ T8103]  ? __pfx_down_write+0x10/0x10
[  138.209517][ T8103]  ? __pfx___schedule+0x10/0x10
[  138.209539][ T8103]  __checkpoint_and_complete_reqs+0xd9/0x3b0
[  138.209555][ T8103]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[  138.209578][ T8103]  issue_checkpoint_thread+0xd9/0x260
[  138.209592][ T8103]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  138.209603][ T8103]  ? __pfx_autoremove_wake_function+0x10/0x10
[  138.209616][ T8103]  ? __kthread_parkme+0x7b/0x200
[  138.209627][ T8103]  ? __kthread_parkme+0x1a1/0x200
[  138.209644][ T8103]  kthread+0x711/0x8a0
[  138.209660][ T8103]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  138.209671][ T8103]  ? __pfx_kthread+0x10/0x10
[  138.209686][ T8103]  ? _raw_spin_unlock_irq+0x23/0x50
[  138.209702][ T8103]  ? lockdep_hardirqs_on+0x9c/0x150
[  138.209711][ T8103]  ? __pfx_kthread+0x10/0x10
[  138.209726][ T8103]  ret_from_fork+0x3fc/0x770
[  138.209741][ T8103]  ? __pfx_ret_from_fork+0x10/0x10
[  138.209759][ T8103]  ? __switch_to_asm+0x39/0x70
[  138.209773][ T8103]  ? __switch_to_asm+0x33/0x70
[  138.209785][ T8103]  ? __pfx_kthread+0x10/0x10
[  138.209799][ T8103]  ret_from_fork_asm+0x1a/0x30
[  138.209828][ T8103]  </TASK>
[  138.209842][ T8103] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  138.333628][ T8103] CPU: 0 UID: 0 PID: 8103 Comm: f2fs_ckpt-7:1 Not tainted syzkaller #0 PREEMPT(full) 
[  138.333649][ T8103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  138.333656][ T8103] Call Trace:
[  138.333661][ T8103]  <TASK>
[  138.333667][ T8103]  dump_stack_lvl+0x189/0x250
[  138.333691][ T8103]  ? __pfx_dump_stack_lvl+0x10/0x10
[  138.333706][ T8103]  ? __pfx_queue_work_on+0x10/0x10
[  138.333718][ T8103]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  138.333735][ T8103]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  138.333763][ T8103]  f2fs_handle_critical_error+0x37c/0x540
[  138.333785][ T8103]  f2fs_write_end_io+0x886/0xb60
[  138.333812][ T8103]  __submit_merged_bio+0x27a/0x6a0
[  138.333835][ T8103]  ? up_write+0x1c4/0x420
[  138.333852][ T8103]  __submit_merged_write_cond+0x44c/0x530
[  138.333874][ T8103]  f2fs_sync_node_pages+0x1479/0x15e0
[  138.333906][ T8103]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  138.333946][ T8103]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  138.333963][ T8103]  ? up_write+0x1c4/0x420
[  138.333973][ T8103]  ? do_raw_spin_unlock+0x4d/0x240
[  138.333992][ T8103]  f2fs_write_checkpoint+0xe6f/0x1df0
[  138.334025][ T8103]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  138.334073][ T8103]  ? down_write+0x162/0x1f0
[  138.334085][ T8103]  ? __pfx_down_write+0x10/0x10
[  138.334099][ T8103]  ? __pfx___schedule+0x10/0x10
[  138.334123][ T8103]  __checkpoint_and_complete_reqs+0xd9/0x3b0
[  138.334140][ T8103]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[  138.334168][ T8103]  issue_checkpoint_thread+0xd9/0x260
[  138.334184][ T8103]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  138.334198][ T8103]  ? __pfx_autoremove_wake_function+0x10/0x10
[  138.334213][ T8103]  ? __kthread_parkme+0x7b/0x200
[  138.334227][ T8103]  ? __kthread_parkme+0x1a1/0x200
[  138.334246][ T8103]  kthread+0x711/0x8a0
[  138.334264][ T8103]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  138.334277][ T8103]  ? __pfx_kthread+0x10/0x10
[  138.334293][ T8103]  ? _raw_spin_unlock_irq+0x23/0x50
[  138.334310][ T8103]  ? lockdep_hardirqs_on+0x9c/0x150
[  138.334319][ T8103]  ? __pfx_kthread+0x10/0x10
[  138.334335][ T8103]  ret_from_fork+0x3fc/0x770
[  138.334350][ T8103]  ? __pfx_ret_from_fork+0x10/0x10
[  138.334368][ T8103]  ? __switch_to_asm+0x39/0x70
[  138.334412][ T8103]  ? __switch_to_asm+0x33/0x70
[  138.334426][ T8103]  ? __pfx_kthread+0x10/0x10
[  138.334441][ T8103]  ret_from_fork_asm+0x1a/0x30
[  138.334469][ T8103]  </TASK>
[  138.334475][ T8103] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  138.594429][   T33] audit: type=1326 audit(1757561553.914:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.836" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae8338eba9 code=0x0
[  139.372846][ T8135] loop1: detected capacity change from 0 to 512
[  139.406007][ T8135] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data
[  139.657728][ T8146] overlayfs: failed to resolve './file0/../file0': -2
[  139.901194][ T8163] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  140.073811][ T8160] loop3: detected capacity change from 0 to 40427
[  140.078343][ T8160] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  140.082081][ T8160] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  140.088235][ T8160] F2FS-fs (loop3): invalid crc value
[  140.157225][ T8160] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  140.165048][ T8160] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  140.168056][ T8160] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  140.638136][   T33] audit: type=1326 audit(1757561555.954:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8194 comm="syz.3.865" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fae8338eba9 code=0x0
[  140.702979][ T8198] loop1: detected capacity change from 0 to 256
[  140.706421][ T8198] exfat: Deprecated parameter 'utf8'
[  140.708678][ T8198] exfat: Deprecated parameter 'utf8'
[  140.722291][ T8198] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36d2a6b4, utbl_chksum : 0xe619d30d)
[  140.907186][ T8202] loop1: detected capacity change from 0 to 8
[  141.558368][ T8220] loop3: detected capacity change from 0 to 64
[  141.564366][ T8220] bfs: Unknown parameter ''
[  142.326747][ T8229] loop3: detected capacity change from 0 to 64
[  142.370659][ T8229] BFS-fs: bfs_fill_super(): Inode 0x00000032 corrupted on loop3
[  143.277782][ T8251] loop3: detected capacity change from 0 to 512
[  143.341186][ T8251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.355059][ T8251] ext4 filesystem being mounted at /212/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  143.539717][ T5718] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  143.635539][ T8285] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.640275][ T8285] batadv_slave_0: entered promiscuous mode
[  144.094813][ T6347] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.750566][    T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  144.903187][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  144.908833][    T9] usb 2-1: config 14 has an invalid interface number: 21 but max is 0
[  144.920947][    T9] usb 2-1: config 14 has no interface number 0
[  144.924195][    T9] usb 2-1: config 14 interface 21 has no altsetting 0
[  144.946458][    T9] usb 2-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc
[  144.955489][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.960053][    T9] usb 2-1: Product: syz
[  144.963320][    T9] usb 2-1: Manufacturer: syz
[  144.965461][    T9] usb 2-1: SerialNumber: syz
[  145.180650][ T5316] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  145.209547][    T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  145.213920][ T8321] devpts: Bad value for 'max'
[  145.217608][    T9] usb 2-1: MIDIStreaming interface descriptor not found
[  145.240207][    T9] usb 2-1: USB disconnect, device number 14
[  145.307527][ T6052] udevd[6052]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:14.21/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  145.342173][ T5316] usb 4-1: Using ep0 maxpacket: 8
[  145.345157][ T8326] netlink: 'syz.2.924': attribute type 21 has an invalid length.
[  145.350156][ T5316] usb 4-1: config 0 has an invalid interface number: 122 but max is 0
[  145.354968][ T5316] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  145.356868][ T8326] netlink: 132 bytes leftover after parsing attributes in process `syz.2.924'.
[  145.359770][ T5316] usb 4-1: config 0 has no interface number 0
[  145.365987][ T5316] usb 4-1: config 0 interface 122 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[  145.367888][ T8326] netlink: 20 bytes leftover after parsing attributes in process `syz.2.924'.
[  145.380621][ T5316] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[  145.385819][ T5316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.388663][ T5316] usb 4-1: Product: syz
[  145.390079][ T5316] usb 4-1: Manufacturer: syz
[  145.391893][ T5316] usb 4-1: SerialNumber: syz
[  145.400325][ T5316] usb 4-1: config 0 descriptor??
[  145.449331][ T8330] netlink: 64 bytes leftover after parsing attributes in process `syz.2.926'.
[  145.614706][ T5316] usb 4-1: NFC: intf ffff8881184c0000 id ffffffff8eb54b20
[  145.627551][ T5316] usb 4-1: USB disconnect, device number 12
[  145.815885][ T8336] netlink: 'syz.2.929': attribute type 2 has an invalid length.
[  145.819247][ T8336] netlink: 132 bytes leftover after parsing attributes in process `syz.2.929'.
[  145.887519][ T8340] netlink: 28 bytes leftover after parsing attributes in process `syz.2.931'.
[  146.124247][ T8338] loop1: detected capacity change from 0 to 40427
[  146.130140][ T8338] F2FS-fs (loop1): invalid crc value
[  146.133884][ T8338] F2FS-fs (loop1): invalid crc value
[  146.136418][ T8338] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
[  146.245128][    C1] ==================================================================
[  146.248212][    C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  146.251677][    C1] Write of size 8 at addr ffff8880228a0930 by task syz.2.938/8353
[  146.255627][    C1] 
[  146.256630][    C1] CPU: 1 UID: 0 PID: 8353 Comm: syz.2.938 Not tainted syzkaller #0 PREEMPT(full) 
[  146.256645][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  146.256651][    C1] Call Trace:
[  146.256657][    C1]  <IRQ>
[  146.256663][    C1]  dump_stack_lvl+0x189/0x250
[  146.256679][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  146.256692][    C1]  ? rcu_is_watching+0x15/0xb0
[  146.256701][    C1]  ? __kasan_check_byte+0x12/0x40
[  146.256716][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  146.256727][    C1]  ? rcu_is_watching+0x15/0xb0
[  146.256736][    C1]  ? lock_release+0x4b/0x3e0
[  146.256751][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  146.256762][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  146.256770][    C1]  print_report+0xca/0x240
[  146.256781][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  146.256791][    C1]  kasan_report+0x118/0x150
[  146.256805][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  146.256817][    C1]  __xfrm_state_delete+0x696/0xca0
[  146.256831][    C1]  xfrm_timer_handler+0x18f/0xa00
[  146.256844][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  146.256854][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  146.256865][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  146.256875][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  146.256887][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  146.256903][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  146.256913][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  146.256923][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  146.256939][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  146.256948][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  146.256961][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  146.256972][    C1]  handle_softirqs+0x286/0x870
[  146.256980][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  146.256989][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  146.257007][    C1]  __irq_exit_rcu+0xca/0x1f0
[  146.257016][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  146.257027][    C1]  irq_exit_rcu+0x9/0x30
[  146.257036][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  146.257051][    C1]  </IRQ>
[  146.257055][    C1]  <TASK>
[  146.257059][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  146.257070][    C1] RIP: 0010:__get_pfnblock_flags_mask+0xb4/0x240
[  146.257085][    C1] Code: 01 00 00 49 69 ed 80 07 00 00 4d 8d 2c 2c 49 81 c5 90 00 00 00 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 08 4c 89 ef e8 52 05 0e 00 49 8b 5d 00 4c 39 f3 0f 87 4b 01 00
[  146.257092][    C1] RSP: 0018:ffffc90006ca7aa8 EFLAGS: 00000246
[  146.257100][    C1] RAX: 1ffff1100bfff782 RBX: ff000fffffffffff RCX: dffffc0000000000
[  146.257108][    C1] RDX: 0000000000000017 RSI: 000000000003d34a RDI: ffffea0000f4d280
[  146.257115][    C1] RBP: 0000000000000780 R08: dffffc0000000000 R09: 0000000000000000
[  146.257122][    C1] R10: ffffed1007a69400 R11: fffffbfff1f47407 R12: ffff88805fffb400
[  146.257129][    C1] R13: ffff88805fffbc10 R14: 000000000003d34a R15: ffffea0000f4d280
[  146.257142][    C1]  __free_frozen_pages+0x5cf/0xd30
[  146.257158][    C1]  pagetable_dtor_free+0x2d2/0x3b0
[  146.257171][    C1]  ? __pfx_pagetable_dtor_free+0x10/0x10
[  146.257185][    C1]  ? __phys_addr+0xd3/0x180
[  146.257196][    C1]  ? pgd_free+0x1af/0x1e0
[  146.257208][    C1]  __mmdrop+0xb5/0x570
[  146.257217][    C1]  exit_mm+0x1da/0x2c0
[  146.257227][    C1]  ? __pfx_exit_mm+0x10/0x10
[  146.257239][    C1]  ? rcu_is_watching+0x15/0xb0
[  146.257249][    C1]  do_exit+0x648/0x2300
[  146.257262][    C1]  ? preempt_schedule_common+0x83/0xd0
[  146.257271][    C1]  ? preempt_schedule+0xae/0xc0
[  146.257285][    C1]  ? __pfx_do_exit+0x10/0x10
[  146.257298][    C1]  ? preempt_schedule_thunk+0x16/0x30
[  146.257315][    C1]  do_group_exit+0x21c/0x2d0
[  146.257328][    C1]  __x64_sys_exit_group+0x3f/0x40
[  146.257337][    C1]  x64_sys_call+0x21f7/0x2200
[  146.257347][    C1]  do_syscall_64+0xfa/0x3b0
[  146.257357][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  146.257365][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.257373][    C1]  ? exc_page_fault+0x9f/0xf0
[  146.257407][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.257417][    C1] RIP: 0033:0x7f0d19f8eba9
[  146.257426][    C1] Code: Unable to access opcode bytes at 0x7f0d19f8eb7f.
[  146.257431][    C1] RSP: 002b:00007fffdf8bf6c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  146.257441][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0d19f8eba9
[  146.257448][    C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
[  146.257455][    C1] RBP: 00007fffdf8bf72c R08: 00000005df8bf7bf R09: 00000000000927c0
[  146.257462][    C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000143
[  146.257469][    C1] R13: 00000000000927c0 R14: 0000000000023a83 R15: 00007fffdf8bf780
[  146.257480][    C1]  </TASK>
[  146.257484][    C1] 
[  146.426529][    C1] Allocated by task 8330:
[  146.428220][    C1]  kasan_save_track+0x3e/0x80
[  146.430000][    C1]  __kasan_slab_alloc+0x6c/0x80
[  146.431871][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  146.433739][    C1]  xfrm_state_alloc+0x24/0x2f0
[  146.435432][    C1]  xfrm_add_sa+0x17d1/0x4070
[  146.437248][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  146.438995][    C1]  netlink_rcv_skb+0x208/0x470
[  146.440755][    C1]  xfrm_netlink_rcv+0x79/0x90
[  146.442295][    C1]  netlink_unicast+0x82f/0x9e0
[  146.443874][    C1]  netlink_sendmsg+0x805/0xb30
[  146.445515][    C1]  __sock_sendmsg+0x21c/0x270
[  146.447457][    C1]  ____sys_sendmsg+0x505/0x830
[  146.449130][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  146.450790][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  146.452472][    C1]  do_syscall_64+0xfa/0x3b0
[  146.454234][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.456404][    C1] 
[  146.457215][    C1] Freed by task 9:
[  146.458511][    C1]  kasan_save_track+0x3e/0x80
[  146.460099][    C1]  kasan_save_free_info+0x46/0x50
[  146.461977][    C1]  __kasan_slab_free+0x5b/0x80
[  146.463658][    C1]  kmem_cache_free+0x18f/0x400
[  146.465305][    C1]  xfrm_state_gc_task+0x52d/0x6b0
[  146.467147][    C1]  process_scheduled_works+0xae1/0x17b0
[  146.469156][    C1]  worker_thread+0x8a0/0xda0
[  146.470828][    C1]  kthread+0x711/0x8a0
[  146.472208][    C1]  ret_from_fork+0x3fc/0x770
[  146.473791][    C1]  ret_from_fork_asm+0x1a/0x30
[  146.475367][    C1] 
[  146.476251][    C1] The buggy address belongs to the object at ffff8880228a0900
[  146.476251][    C1]  which belongs to the cache xfrm_state of size 928
[  146.481237][    C1] The buggy address is located 48 bytes inside of
[  146.481237][    C1]  freed 928-byte region [ffff8880228a0900, ffff8880228a0ca0)
[  146.486259][    C1] 
[  146.487175][    C1] The buggy address belongs to the physical page:
[  146.489601][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x228a0
[  146.492689][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  146.495891][    C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  146.498360][    C1] page_type: f5(slab)
[  146.499693][    C1] raw: 00fff00000000040 ffff88801d74c280 dead000000000122 0000000000000000
[  146.502519][    C1] raw: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  146.505610][    C1] head: 00fff00000000040 ffff88801d74c280 dead000000000122 0000000000000000
[  146.508733][    C1] head: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  146.511796][    C1] head: 00fff00000000002 ffffea00008a2801 00000000ffffffff 00000000ffffffff
[  146.514753][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  146.517578][    C1] page dumped because: kasan: bad access detected
[  146.519622][    C1] page_owner tracks the page as allocated
[  146.521470][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6001, tgid 6000 (syz.0.37), ts 69713566764, free_ts 69623125698
[  146.528921][    C1]  post_alloc_hook+0x240/0x2a0
[  146.530898][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  146.533152][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  146.535450][    C1]  alloc_pages_mpol+0x232/0x4a0
[  146.537474][    C1]  allocate_slab+0x8a/0x370
[  146.539421][    C1]  ___slab_alloc+0xbeb/0x1420
[  146.541310][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  146.543593][    C1]  xfrm_state_alloc+0x24/0x2f0
[  146.545666][    C1]  xfrm_add_sa+0x17d1/0x4070
[  146.547619][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  146.549705][    C1]  netlink_rcv_skb+0x208/0x470
[  146.551756][    C1]  xfrm_netlink_rcv+0x79/0x90
[  146.553795][    C1]  netlink_unicast+0x82f/0x9e0
[  146.555835][    C1]  netlink_sendmsg+0x805/0xb30
[  146.557893][    C1]  __sock_sendmsg+0x21c/0x270
[  146.559863][    C1]  ____sys_sendmsg+0x505/0x830
[  146.561886][    C1] page last free pid 5833 tgid 5833 stack trace:
[  146.564576][    C1]  __free_frozen_pages+0xbc4/0xd30
[  146.566767][    C1]  __slab_free+0x303/0x3c0
[  146.568663][    C1]  qlist_free_all+0x97/0x140
[  146.570619][    C1]  kasan_quarantine_reduce+0x148/0x160
[  146.572927][    C1]  __kasan_slab_alloc+0x22/0x80
[  146.575039][    C1]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  146.577524][    C1]  __alloc_skb+0x112/0x2d0
[  146.579365][    C1]  tcp_stream_alloc_skb+0x3d/0x340
[  146.581554][    C1]  tcp_sendmsg_locked+0xf38/0x5620
[  146.583717][    C1]  tcp_sendmsg+0x2f/0x50
[  146.585529][    C1]  __sock_sendmsg+0x19c/0x270
[  146.587544][    C1]  sock_write_iter+0x258/0x330
[  146.589530][    C1]  vfs_write+0x5c9/0xb30
[  146.591321][    C1]  ksys_write+0x145/0x250
[  146.593096][    C1]  do_syscall_64+0xfa/0x3b0
[  146.595001][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.597464][    C1] 
[  146.598489][    C1] Memory state around the buggy address:
[  146.600790][    C1]  ffff8880228a0800: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  146.604152][    C1]  ffff8880228a0880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  146.607616][    C1] >ffff8880228a0900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  146.611017][    C1]                                      ^
[  146.613412][    C1]  ffff8880228a0980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  146.616340][    C1]  ffff8880228a0a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  146.619340][    C1] ==================================================================
[  146.622548][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  146.625623][    C1] CPU: 1 UID: 0 PID: 8353 Comm: syz.2.938 Not tainted syzkaller #0 PREEMPT(full) 
[  146.629534][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  146.633710][    C1] Call Trace:
[  146.635137][    C1]  <IRQ>
[  146.636352][    C1]  dump_stack_lvl+0x99/0x250
[  146.638258][    C1]  ? __asan_memcpy+0x40/0x70
[  146.640308][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  146.642568][    C1]  ? __pfx__printk+0x10/0x10
[  146.644580][    C1]  vpanic+0x281/0x750
[  146.646319][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  146.648566][    C1]  ? __pfx_vpanic+0x10/0x10
[  146.650305][    C1]  ? irqentry_exit+0x74/0x90
[  146.652263][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  146.654123][    C1]  panic+0xb9/0xc0
[  146.655607][    C1]  ? __pfx_panic+0x10/0x10
[  146.657475][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  146.660020][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  146.662628][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  146.664841][    C1]  check_panic_on_warn+0x89/0xb0
[  146.666922][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  146.669081][    C1]  end_report+0x78/0x160
[  146.670886][    C1]  kasan_report+0x129/0x150
[  146.672737][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  146.674671][    C1]  __xfrm_state_delete+0x696/0xca0
[  146.676641][    C1]  xfrm_timer_handler+0x18f/0xa00
[  146.678620][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  146.680816][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  146.683142][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  146.685162][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  146.687583][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  146.690081][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  146.692132][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  146.694150][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  146.696161][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  146.698557][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  146.701011][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  146.703049][    C1]  handle_softirqs+0x286/0x870
[  146.704866][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  146.706709][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  146.708612][    C1]  __irq_exit_rcu+0xca/0x1f0
[  146.710406][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  146.712267][    C1]  irq_exit_rcu+0x9/0x30
[  146.713709][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  146.715718][    C1]  </IRQ>
[  146.716914][    C1]  <TASK>
[  146.718072][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  146.720196][    C1] RIP: 0010:__get_pfnblock_flags_mask+0xb4/0x240
[  146.722492][    C1] Code: 01 00 00 49 69 ed 80 07 00 00 4d 8d 2c 2c 49 81 c5 90 00 00 00 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 08 4c 89 ef e8 52 05 0e 00 49 8b 5d 00 4c 39 f3 0f 87 4b 01 00
[  146.729676][    C1] RSP: 0018:ffffc90006ca7aa8 EFLAGS: 00000246
[  146.732161][    C1] RAX: 1ffff1100bfff782 RBX: ff000fffffffffff RCX: dffffc0000000000
[  146.735358][    C1] RDX: 0000000000000017 RSI: 000000000003d34a RDI: ffffea0000f4d280
[  146.738556][    C1] RBP: 0000000000000780 R08: dffffc0000000000 R09: 0000000000000000
[  146.741216][    C1] R10: ffffed1007a69400 R11: fffffbfff1f47407 R12: ffff88805fffb400
[  146.743872][    C1] R13: ffff88805fffbc10 R14: 000000000003d34a R15: ffffea0000f4d280
[  146.746755][    C1]  __free_frozen_pages+0x5cf/0xd30
[  146.748675][    C1]  pagetable_dtor_free+0x2d2/0x3b0
[  146.750497][    C1]  ? __pfx_pagetable_dtor_free+0x10/0x10
[  146.752518][    C1]  ? __phys_addr+0xd3/0x180
[  146.754528][    C1]  ? pgd_free+0x1af/0x1e0
[  146.756412][    C1]  __mmdrop+0xb5/0x570
[  146.758205][    C1]  exit_mm+0x1da/0x2c0
[  146.759998][    C1]  ? __pfx_exit_mm+0x10/0x10
[  146.762035][    C1]  ? rcu_is_watching+0x15/0xb0
[  146.764168][    C1]  do_exit+0x648/0x2300
[  146.766005][    C1]  ? preempt_schedule_common+0x83/0xd0
[  146.768307][    C1]  ? preempt_schedule+0xae/0xc0
[  146.770291][    C1]  ? __pfx_do_exit+0x10/0x10
[  146.772309][    C1]  ? preempt_schedule_thunk+0x16/0x30
[  146.774490][    C1]  do_group_exit+0x21c/0x2d0
[  146.776565][    C1]  __x64_sys_exit_group+0x3f/0x40
[  146.778924][    C1]  x64_sys_call+0x21f7/0x2200
[  146.781029][    C1]  do_syscall_64+0xfa/0x3b0
[  146.782930][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  146.785291][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.787950][    C1]  ? exc_page_fault+0x9f/0xf0
[  146.789967][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.792474][    C1] RIP: 0033:0x7f0d19f8eba9
[  146.794319][    C1] Code: Unable to access opcode bytes at 0x7f0d19f8eb7f.
[  146.797209][    C1] RSP: 002b:00007fffdf8bf6c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  146.800788][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0d19f8eba9
[  146.804111][    C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
[  146.807509][    C1] RBP: 00007fffdf8bf72c R08: 00000005df8bf7bf R09: 00000000000927c0
[  146.810714][    C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000143
[  146.814034][    C1] R13: 00000000000927c0 R14: 0000000000023a83 R15: 00007fffdf8bf780
[  146.817371][    C1]  </TASK>
[  146.819727][    C1] Kernel Offset: disabled
[  146.821684][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:32:41  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff8203a008 RBX=0000607e5c00d548 RCX=ffff8880213e3980 RDX=0000000000000000
RSI=ffff88801bb22000 RDI=0000000000000000 RBP=0000000000000001 RSP=ffffc900064bf7b0
R8 =ffffffff8fa3a037 R9 =1ffffffff1f47406 R10=dffffc0000000000 R11=fffffbfff1f47407
R12=ffff88801bb22000 R13=ffffe8ff14622548 R14=0000000000000004 R15=0000000000000000
RIP=ffffffff82039a81 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558cdd3500 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055558cde6588 CR3=000000003d348000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fae835a7498 00007fae835a7470 XMM03=00007fae835a74a8 00007fae835a74a0
XMM04=00007fae8410d100 00007fae835a7460 XMM05=00007fae835a7478 00007fae835a74c0
XMM06=00007fae835a74b8 00007fae835a74b0 XMM07=00007fae835a74a8 00007fae835a74a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fae83412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bea60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99df56b0 RSP=ffffc900001e0350
R8 =ffff888107818237 R9 =1ffff11020f03046 R10=dffffc0000000000 R11=ffffffff854f6db0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f6e27 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558077f500 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32a1eff8 CR3=00000000268f2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000021 0000000032322f2e
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff00000000 XMM09=303a312d342f312d 342f346273752f33
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
