last executing test programs:

3m13.801971009s ago: executing program 0 (id=665):
r0 = syz_open_procfs(0x0, &(0x7f0000001380)='stack\x00')
timerfd_gettime(r0, 0x0)

3m13.717890651s ago: executing program 0 (id=666):
syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000406b1d010140000102030109028a0003018040080904000000010100000a240107005002010208240803ff00fab008240403cd82ab090c2402030502058102000c81090401000001020000090401010101020000090501090800037c090725010700addc09040200000102000009040201010102000008240201060308050724010412011009058209ff"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})

3m12.256587856s ago: executing program 0 (id=673):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r1, 0x0, 0x0}, 0x10)

3m12.077557969s ago: executing program 0 (id=677):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000300)={[{@volume={'volume', 0x3d, 0x3e}}, {@gid}, {@dmode={'dmode', 0x3d, 0x4}}, {@rootdir={'rootdir', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@unhide}, {@noadinicb}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@longad}]}, 0x1, 0xc32, &(0x7f0000000e00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000002340)='./file0\x00', 0x1010052, &(0x7f0000000240)={[{}, {@discard}, {@errors_remount_ro}, {@errors_remount_ro}, {@nobarrier}, {@order_strict}, {@errors_continue}, {@order_relaxed}], [], 0x2c}, 0x2, 0xebd, &(0x7f0000004540)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020)

3m11.607204057s ago: executing program 0 (id=687):
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000000380), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000340), &(0x7f0000048000)=0x1, 0x0)

3m10.285929966s ago: executing program 0 (id=694):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file1\x00'})

3m10.132760174s ago: executing program 32 (id=694):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file1\x00'})

2m58.293746667s ago: executing program 3 (id=794):
r0 = io_uring_setup(0x78c4, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd})
socket$kcm(0x10, 0x2, 0x4)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c)
close_range(r0, 0xffffffffffffffff, 0x0)

2m58.17436085s ago: executing program 3 (id=795):
rt_sigtimedwait(0x0, 0x0, 0x0, 0x8)

2m58.096641423s ago: executing program 3 (id=796):
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000100)={[{@shortname_lower}, {@rodir}, {@shortname_lower}, {@shortname_winnt}, {@fat=@check_strict}]}, 0x11, 0x305, &(0x7f0000002480)="$eJzs3UGLG2UYB/Cna7srK9vZgwgK4ote9DLsrl/AIC2IC8ralepBmLqzGjJNlkyopIh68+rnKB69CeIX2It3b9724rGHYiQZmyY1ogjboe3vB8n7JG/+8A5hwnMJz9n17272juv8uBjF2lsp1iJi7W7E9qxqXGieLjSv1mPRN/FGdv3Xlz/46ON3O/v7Vw5Sutq59uZeSunyKz998eX3r/48eu7DHy7/uBGn25+c/b732+kLpy+e/XHt826dunXqD0apSDcGg1FxoyrTUbfu5Sm9X5VFXaZuvy6HS/vH1eDkZJyK/tHW5smwrOtU9MepV47TaJBGw3EqPiu6/ZTnedraDP7N4Z2Dg6LT9ik4X8Nhp5jevBt/2zm808qBAIBW/ef+f/r+rNb/Pzn0/0+Daf+//tf9u0z/DwAAAAAAAAAAAAAAj4O7k0k2mUyy++vDjxWRSy0ck3PyP75/niALf9x7NqL69tbhrcNmbfY7x9GNKsrYiSzuRUzmmvrqO/tXdtLMdmzd/LrJT9dnlvO7kcX26vxuk0/L+UuxuZjfiyyeX53fW5lfj9dfW8jnkcUvn8YgqjiKafZB/qvdlN5+b/+h/MbscwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HfI0t3J+f57/036Tn8/X34ks7q2ez7+zcj7/xXjpYrvXDgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD31ePbvaKqyqFCoVDMi7Z/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODRezD0u+2TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KZ6fLtXVFU5PMei7WsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4nPwZAAD//38rKVo=")

2m58.096340665s ago: executing program 3 (id=797):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c726573765f6c6576656c3d30303030303030303030303030303030303030302c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c646174613d77726974656261636b2c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00149e0cb4c679a55808f10855fc0d9b9d7241cc60c5c0b35a9ce6bd73d50a863d736b7f64cdbf2582b25c868128f5a0c3ca71ea7a85f79743e17bbb3291a3c43eb49fcfcab9a806f939773a5895370494ec438f24b77c23cb13a0c7c11503d4e4a25d5e8142cc163f75ca2557bc5b3dd2856dbf2f4fbffb092b1a8d3f410d0daefab8a2f41a23713a02fa9349bc76bc637fe28f733ee38a6de0e2174f54e7f4ebc705a06c4b7d76bcc94f8985dbf4791afe238c9f24f48c0f98d3898ad1f3597c15fdc241ce161617ca162b1d4a17900f12843677d372e706"], 0x1, 0x442a, &(0x7f0000008940)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x40086602, &(0x7f0000000080)={@id={0x2, 0x0, @d}})

2m57.393309937s ago: executing program 3 (id=800):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00')
fchdir(r0)
mount$9p_unix(&(0x7f00000005c0)='./cgroup\x00', &(0x7f0000000040)='.\x00', 0x0, 0xe00a, 0x0)

2m57.124008372s ago: executing program 3 (id=806):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

2m56.999455341s ago: executing program 33 (id=806):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

1m54.77971493s ago: executing program 4 (id=1378):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a40)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000180)={0x34, r0, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}]}, 0x34}}, 0x0)

1m54.779303096s ago: executing program 4 (id=1379):
r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0x3, "f787d8"}, 0x0})

1m52.886692598s ago: executing program 4 (id=1394):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x1, 0x90, 0x80000, {0x77359400}, {}, {}, 0x1, @can={{}, 0x40, 0x1, 0x0, 0x0, "ce2a4fa7a0aa108b"}}, 0x38}}, 0x40884)

1m52.760366011s ago: executing program 4 (id=1395):
syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f0000000140)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {}, {@nodiscard}, {@noquota}, {@iocharset={'iocharset', 0x3d, 'cp874'}}]}, 0x24, 0x6208, &(0x7f0000013980)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200)

1m51.680734743s ago: executing program 4 (id=1402):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x8, 0x28, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

1m50.681327754s ago: executing program 4 (id=1414):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x28, 0x10, 0x21, 0x70bd29, 0x0, {0x3}, [@nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x57, 0x0, 0x1, [@nested={0xc, 0xe3, 0x0, 0x1, [@nested={0x8, 0x9, 0x0, 0x1, [@nested={0x4, 0x109}]}]}]}]}]}, 0x28}}, 0x0)

1m35.647571238s ago: executing program 34 (id=1414):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x28, 0x10, 0x21, 0x70bd29, 0x0, {0x3}, [@nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x57, 0x0, 0x1, [@nested={0xc, 0xe3, 0x0, 0x1, [@nested={0x8, 0x9, 0x0, 0x1, [@nested={0x4, 0x109}]}]}]}]}]}, 0x28}}, 0x0)

6.666902219s ago: executing program 5 (id=2665):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x17, 0x0, &(0x7f0000000080))

6.666476459s ago: executing program 5 (id=2667):
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x2, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)

4.485958629s ago: executing program 5 (id=2689):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000c1010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000059729ec6850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_open_procfs(0x0, 0x0)
fchdir(r2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
writev(r3, &(0x7f0000001980)=[{&(0x7f00000005c0)="87", 0x1}], 0x1)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

4.347580339s ago: executing program 5 (id=2690):
syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYBLOB='s'], 0x0)

3.059258907s ago: executing program 5 (id=2712):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000003c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x70bd26, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x1, 0x0, 0xfd, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)

3.009243562s ago: executing program 5 (id=2713):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x2f00, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6]})
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x80000000})

1.178927386s ago: executing program 1 (id=2735):
open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRESHEX=0x0, @ANYRES64, @ANYRESHEX=0x0, @ANYRESHEX=0x0], 0x5, 0x6fe, &(0x7f0000000b00)="$eJzs3TtsG+cdAPD/URQluoAjJ36kRYAQMZAWFWpLFpRWXeoWRaEhKIJ06EzYckyYlgNJKWSjqJU+9g6ZOqWDtqBDke4G2rlBiiKrxgAFsmTSVBZ3vONDpEjKliU1+f2E43133+O++x/vjuRB+AL42lqdj/KTSGJ1/s3tdHlvd6k5tbs0k2c3I6ISEaWIcnsWyXpkuTfzKb6ZrszLJ52G/9W/nQ8aK29/9uXe5+2lcj5l5ZO+euNVBlft5FPUImIqnw+aPqTFjw9uvq+9W4e2N6nuHqYBu1oELv70TK3CM2sN2OnkffTv7HWgzsVzneRRzlvgjEra980BcxHp2T4b0b7r51eH0sn27vjtnHYHAAAA4KiqR6/ywn7sx3acfx7dAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK+qfPz/JJ9KRboWSTH+fyVfF3n6DBo/EOKnM+35k+ffGQAAAAAAAAB47l7dj/3YjvPFcivJnvm/1vOM/xvxXmzGWmzEtdiOemzFVmzEYkTM9TRU2a5vbW0sZjUjLo6oeSM+GVLzxuF9vHnM+wwAAAAAAAAAZ9zsmPx704Prfhur3ef/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwFiQRU+1ZNl0s0nNRKkfEbFFuJ+KTiKicbm+PJBm28snJ9wMAAACeyWz/YjI7QZ0XHsd+bMf5YrmVZN/5L2ffl2fjvViPrWjEVjRjLW7n36HTb/2lvd2l5t7u0v10Gmz3x18cqetZi9H+7WH4ll/OSlTjTjSyNdfiViTRypTyVl7e211K5/eH9+v9tE/Jj3IjejPVk76dvlz5OEv/sf9XhPKRdvEplQ7NmctypzsRWcj7lta4UERgeCT6js6wt0l55JYWo9T55efigS21+n9mGR7z90fv87kDpYb+cnMqDkbiRpQ6R+jy6JhHfPtvH/3ybnP93t07m/NnZ5eGejy2xMFILPVE4spXKBLjLWSRuNRZXo2fxS9iPr6YeSs2ohG/inpsxVqtyK/n7+f0dW50pD4917v01riepOdkrXP9GtanWvT1KWrx0yxVj9eyY/rfViOSeBARa/FG9ncjFjtXg+4RvjS639lZX5rgStvj6neyWSdMUT287F8ma/K4pHG90BPX3mvuXJbXu6YbpReHRqm4101+P+pR/laeSFv43cj7w0k7GInFnki8dNj7pR3SP2d3k83m+r2Nu/V3J9ze6/k8PY/+MPwucUrXlnRvXozZfOcuFF1pPc7zXurcYfvjVcmfuLSVBvIuderNxfloxM/jQdzuO1O/H8uxHCtZ6ctZ6emBO1aad6XTUv81PM1LP2mVOw92ej9vPYhm+/MQAGfbue+eq1T/U/1n9cPq76t3q2/O/mTmBzOvVGL6H9M/LC9MvV56JflrfBi/6X7/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnt7mw0f36s3m2sbwRGl4VjK6Vr3ZKgYSG1GmL5Hko/ZMUDjZfPioNbbB0YmZvHtPWf04E8UwfOML10a2U36mbiQ7B4/X7PhjUYzyNMEmkoGAp5WfOnTFlrtrps/AoTyYqI0uU5ksdFmieMP2ZB393VsddrymImJY4TEXjqnjuPoAp+n61v13r28+fPS9xv36O2vvrK1PLy+vLKwsv7F0/U6jubbQfu2pcCKD3wInoffjREf6weTVgaID47KOGKgVAAAAAAAAAAAAeI5O4n8hTnsfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP9vq/NRfhJJLC5cW0iX93aXmulUpLslyxFRiojk1xHJ3yNuRnuKuZ7mksO280Fj5e3Pvtz7vNtWuShfitg5tN5kdvIpahExlc+Pq71b49urdJMzQ7KTTmTSgF0tAgen7X8BAAD//5CS7ds=")

1.106860355s ago: executing program 2 (id=2736):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x58)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, 0x0, 0x0, 0x4b, 0x0, "5d9ed5ab7ede1bcf73742bc36c0ea13d3dec33e0b7cc1ff724fe1906cf9f7945230bc5d9dfea4ffd1e48aaf9a42d97f58da594d5eb926f70f03d2d46f374a6b62ee9d04ac1bf0bef969bcbd8e4700616"}, 0xd8)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)

1.105237683s ago: executing program 1 (id=2737):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x22, 0x0, &(0x7f00000006c0)="3d25ab555b19c4cbd0017085080040fee5a990ec800d53cf46bb89ed4d9d6a292051", 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.010172547s ago: executing program 1 (id=2738):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)

229.136565ms ago: executing program 2 (id=2739):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FIONCLEX(r0, 0x5450)

152.105797ms ago: executing program 2 (id=2740):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}]}]}], {0x14}}, 0x98}}, 0x0)

151.492867ms ago: executing program 1 (id=2741):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r0, &(0x7f00000000c0), 0x10)
sendto$l2tp(r0, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000000)=0x8b6d, 0x4)
recvfrom$l2tp(r0, 0x0, 0x0, 0x40002040, 0x0, 0xfffffffffffffe23)

69.999212ms ago: executing program 1 (id=2742):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3})
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
open_by_handle_at(r0, &(0x7f00000000c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x9, 0x9, 0x7, 0x5a12}}, 0x1110a0)

69.677914ms ago: executing program 2 (id=2743):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x40090}, 0x0)

749.998µs ago: executing program 2 (id=2744):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002800)=ANY=[@ANYBLOB="e41200001000210029bd70000000000003000000d0120180cc12"], 0x12e4}}, 0x0)

311.697µs ago: executing program 1 (id=2745):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f00000003c0)={&(0x7f0000000340)='L', 0x1, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000400)={0x25b, 0x0, r4, 0xbbbbbbbb})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
syz_io_uring_setup(0xd5, 0x0, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r9, &(0x7f0000001300)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000680)="d4", 0x1}], 0x1}}], 0x1, 0x20000050)
setsockopt(r9, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8)
close_range(r8, 0xffffffffffffffff, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r10, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r11 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x1, 0x32}, 0x2, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8)
connect$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0xffffffffffffffff, 0x0})
socket(0x10, 0x3, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000040)={'vxcan0\x00'})

0s ago: executing program 2 (id=2746):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f8000000160001000000000000000000ff03000000000000000000000000000100000000000000000000ffff000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac14142300000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1ffffffffffffff"], 0xf8}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c0001"], 0x1d8}}, 0x0)
remap_file_pages(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000003, 0x200, 0x10)
r5 = socket$inet6(0xa, 0x3, 0x8000000003c)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r6, 0x0, 0x0)
setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, 0x0, 0x0)
sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x4)
futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0xfffffffe)
futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x4000000)
setsockopt$inet6_int(r5, 0x29, 0x46, &(0x7f00000001c0)=0x3, 0x4)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002)
dup(r7)

kernel console output (not intermixed with test programs):

rect mapped block 4294967295 (level 1)
[  228.004628][T12453] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1384: invalid indirect mapped block 4294967295 (level 2)
[  228.009234][T12453] EXT4-fs (loop2): 1 truncate cleaned up
[  228.011859][T12453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.034960][ T5962] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.069503][ T9361] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  228.072809][ T9361] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  228.087501][ T9361] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  228.091327][ T9361] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  228.097967][ T9361] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  228.118801][ T9361] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  228.121810][ T9361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  228.124418][ T9361] usb 5-1: Product: syz
[  228.125728][ T9361] usb 5-1: Manufacturer: syz
[  228.127148][ T9361] usb 5-1: SerialNumber: syz
[  228.144394][ T9361] usb 5-1: config 0 descriptor??
[  228.528713][ T9361] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  228.531418][ T9361] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  228.582190][   T96] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  228.587291][   T96] em28xx 2-1:0.89: board has no eeprom
[  228.644070][   T96] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67)
[  228.646355][   T96] em28xx 2-1:0.89: analog set to bulk mode.
[  228.648601][ T5956] em28xx 2-1:0.89: Registering V4L2 extension
[  228.677215][   T96] usb 2-1: USB disconnect, device number 13
[  228.680884][   T96] em28xx 2-1:0.89: Disconnecting em28xx
[  228.701278][ T5956] em28xx 2-1:0.89: Config register raw data: 0xffffffed
[  228.706118][ T5956] em28xx 2-1:0.89: AC97 chip type couldn't be determined
[  228.709081][ T5956] em28xx 2-1:0.89: No AC97 audio processor
[  228.727533][ T5956] usb 2-1: Decoder not found
[  228.730380][ T5956] em28xx 2-1:0.89: failed to create media graph
[  228.731147][ T9361] radio-si470x 5-1:0.0: software version 135, hardware version 216
[  228.733065][ T5956] em28xx 2-1:0.89: V4L2 device video103 deregistered
[  228.739688][ T5956] em28xx 2-1:0.89: Registering snapshot button...
[  228.756110][ T5956] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input9
[  228.788784][ T5956] em28xx 2-1:0.89: Remote control support is not available for this card.
[  228.792799][   T96] em28xx 2-1:0.89: Closing input extension
[  228.799960][   T96] em28xx 2-1:0.89: Deregistering snapshot button
[  228.861625][   T96] em28xx 2-1:0.89: Freeing device
[  228.904552][ T9361] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  228.932167][ T9361] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71
[  228.936459][ T9361] radio-si470x 5-1:0.0: submitting int urb failed (-90)
[  228.939534][ T9361] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71
[  228.943235][ T9361] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22
[  228.951062][ T9361] usb 5-1: USB disconnect, device number 7
[  229.178098][   T33] audit: type=1326 audit(1755040953.883:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12502 comm="syz.1.1390" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8098ebe9 code=0x7ffc0000
[  229.191996][   T33] audit: type=1326 audit(1755040953.903:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12502 comm="syz.1.1390" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8098ebe9 code=0x7ffc0000
[  229.208674][   T33] audit: type=1326 audit(1755040953.903:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12502 comm="syz.1.1390" exe="/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fee8098ebe9 code=0x7ffc0000
[  229.222596][T12506] loop6: detected capacity change from 0 to 2560
[  229.223821][   T33] audit: type=1326 audit(1755040953.903:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12502 comm="syz.1.1390" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8098ebe9 code=0x7ffc0000
[  229.227409][T12506] Buffer I/O error on dev loop6, logical block 0, async page read
[  229.235905][T12506] Buffer I/O error on dev loop6, logical block 0, async page read
[  229.239486][T12506] Buffer I/O error on dev loop6, logical block 0, async page read
[  229.240763][   T33] audit: type=1326 audit(1755040953.903:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12502 comm="syz.1.1390" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8098ebe9 code=0x7ffc0000
[  229.246867][T12506] Buffer I/O error on dev loop6, logical block 0, async page read
[  229.256264][T12506] Buffer I/O error on dev loop6, logical block 0, async page read
[  229.259580][T12506] Buffer I/O error on dev loop6, logical block 0, async page read
[  229.262710][T12506] Buffer I/O error on dev loop6, logical block 0, async page read
[  229.266716][T12506] Buffer I/O error on dev loop6, logical block 0, async page read
[  229.270137][T12506] ldm_validate_partition_table(): Disk read failed.
[  229.276261][T12506] Buffer I/O error on dev loop6, logical block 0, async page read
[  229.280725][T12506] Buffer I/O error on dev loop6, logical block 0, async page read
[  229.285771][T12506] Dev loop6: unable to read RDB block 0
[  229.288476][T12506]  loop6: unable to read partition table
[  229.291113][T12506] loop_reread_partitions: partition scan of loop6 (3) failed (rc=-5)
[  229.391590][T12510] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  229.400331][T12510] batadv_slave_0: entered promiscuous mode
[  229.856441][T12524] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1398'.
[  230.048382][T12526] loop2: detected capacity change from 0 to 2048
[  230.056410][T12526] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  230.072630][T12526] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  230.633696][T12531] loop2: detected capacity change from 0 to 32768
[  230.638425][T12531] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1400 (12531)
[  230.646501][T12522] loop4: detected capacity change from 0 to 32768
[  230.674383][T12531] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  230.677926][T12531] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  230.680962][T12531] BTRFS info (device loop2): disk space caching is enabled
[  230.683445][T12531] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  230.707970][T12531] BTRFS info (device loop2): rebuilding free space tree
[  230.730217][T12531] BTRFS info (device loop2): disabling free space tree
[  230.732595][T12531] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  230.736349][T12531] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  230.786044][T12531] BTRFS info (device loop2): balance: start -d -m
[  230.806059][T12531] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata
[  230.819762][T12555] tipc: Started in network mode
[  230.821793][T12555] tipc: Node identity 7f000001, cluster identity 4711
[  230.834349][T12555] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  230.849022][T12531] BTRFS info (device loop2): relocating block group 5242880 flags data|metadata
[  230.858299][T12555] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  230.935623][T12531] BTRFS info (device loop2): found 9 extents, stage: move data extents
[  230.972576][T12558] loop4: detected capacity change from 0 to 1024
[  230.974045][T12531] BTRFS info (device loop2): found 1 extents, stage: update data pointers
[  231.018284][T12558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.041070][T12531] BTRFS info (device loop2): balance: ended with status: 0
[  231.075471][T12566] loop1: detected capacity change from 0 to 1024
[  231.128668][ T5962] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  231.180892][ T4584] hfsplus: bad catalog file entry
[  231.183930][ T4584] hfsplus: b-tree write err: -5, ino 3
[  231.682533][ T9361] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  231.692861][   T96] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  231.759917][ T9639] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.836373][ T9361] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  231.839288][ T9361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.841847][ T9361] usb 3-1: Product: syz
[  231.843722][ T9361] usb 3-1: Manufacturer: syz
[  231.845743][ T9361] usb 3-1: SerialNumber: syz
[  231.848984][ T9361] usb 3-1: config 0 descriptor??
[  231.853802][ T9361] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 021
[  231.858275][   T96] usb 2-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c
[  231.861932][   T96] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.865370][   T96] usb 2-1: Product: syz
[  231.867121][   T96] usb 2-1: Manufacturer: syz
[  231.869057][   T96] usb 2-1: SerialNumber: syz
[  231.873777][   T96] usb 2-1: config 0 descriptor??
[  232.468043][ T9361] i2c i2c-2: failure reading functionality
[  232.475217][ T9361] i2c i2c-2: connected i2c-tiny-usb device
[  232.479926][ T9361] usb 3-1: USB disconnect, device number 21
[  232.488728][   T96] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  232.494084][   T96] asix 2-1:0.0: probe with driver asix failed with error -71
[  232.499510][   T96] usb 2-1: USB disconnect, device number 14
[  233.332232][   T96] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[  233.486150][   T96] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  233.489979][   T96] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.497262][   T96] usb 3-1: config 0 descriptor??
[  234.162416][T12639] loop1: detected capacity change from 0 to 512
[  234.179076][T12639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.185400][T12639] ext4 filesystem being mounted at /488/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  234.202053][T12639] EXT4-fs (loop1): shut down requested (0)
[  234.235406][ T5969] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.651677][T12666] loop1: detected capacity change from 0 to 8192
[  234.718800][   T96] pegasus 3-1:0.0: can't reset MAC
[  234.724229][   T96] pegasus 3-1:0.0: probe with driver pegasus failed with error -5
[  234.729331][   T96] usb 3-1: USB disconnect, device number 22
[  236.049428][T12692] loop1: detected capacity change from 0 to 256
[  236.065424][T12692] FAT-fs (loop1): Directory bread(block 64) failed
[  236.067627][T12692] FAT-fs (loop1): Directory bread(block 65) failed
[  236.069772][T12692] FAT-fs (loop1): Directory bread(block 66) failed
[  236.074713][T12692] FAT-fs (loop1): Directory bread(block 67) failed
[  236.076841][T12692] FAT-fs (loop1): Directory bread(block 68) failed
[  236.079051][T12692] FAT-fs (loop1): Directory bread(block 69) failed
[  236.082024][T12692] FAT-fs (loop1): Directory bread(block 70) failed
[  236.084179][T12692] FAT-fs (loop1): Directory bread(block 71) failed
[  236.086298][T12692] FAT-fs (loop1): Directory bread(block 72) failed
[  236.088327][T12692] FAT-fs (loop1): Directory bread(block 73) failed
[  236.325300][T12702] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1439'.
[  236.480739][T12706] loop1: detected capacity change from 0 to 1024
[  236.485629][T12706] EXT4-fs: Ignoring removed nobh option
[  236.488097][T12706] EXT4-fs: Ignoring removed bh option
[  236.537038][T12706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.624170][ T5969] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.496867][T12715] loop1: detected capacity change from 0 to 32768
[  237.505055][T12715] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  237.520592][T12715] XFS (loop1): Ending clean mount
[  237.524136][T12732] loop2: detected capacity change from 0 to 1024
[  237.533079][T12732] EXT4-fs: Ignoring removed orlov option
[  237.537926][T12715] XFS (loop1): syz.1.1442 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported
[  237.541591][T12732] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  237.554241][T12732] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.566502][ T5969] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  237.611166][T12732] EXT4-fs error (device loop2): ext4_check_all_de:659: inode #12: block 7: comm syz.2.1445: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0
[  237.663511][ T5962] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.793979][T12745] loop1: detected capacity change from 0 to 1024
[  237.798257][T12745] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  237.805044][T12745] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  237.812875][T12745] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  237.816263][T12745] EXT4-fs (loop1): orphan cleanup on readonly fs
[  237.818966][T12745] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.1446: Freeing blocks not in datazone - block = 0, count = 4096
[  237.831280][T12745] EXT4-fs (loop1): Remounting filesystem read-only
[  237.834274][T12745] EXT4-fs (loop1): 1 orphan inode deleted
[  237.837227][T12745] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  237.911591][T12753] loop2: detected capacity change from 0 to 128
[  237.915634][T12753] EXT4-fs: Ignoring removed nomblk_io_submit option
[  237.918103][T12753] EXT4-fs: Ignoring removed nomblk_io_submit option
[  237.925708][T12753] EXT4-fs (loop2): Test dummy encryption mode enabled
[  237.961022][T12753] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  237.972828][T12753] ext4 filesystem being mounted at /452/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  237.992790][ T5969] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.027383][ T5962] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  238.096554][T12766] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1454'.
[  238.564899][T12782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1461'.
[  238.850266][T12788] loop1: detected capacity change from 0 to 32768
[  238.853469][T12788] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1464 (12788)
[  238.860365][T12788] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  238.864047][T12788] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  238.866638][T12788] BTRFS info (device loop1): using free-space-tree
[  238.888122][T12788] BTRFS info (device loop1): rebuilding free space tree
[  238.936728][ T5969] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  239.490770][T12822] loop1: detected capacity change from 0 to 40427
[  239.557382][T12822] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  239.564643][T12822] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  239.609861][ T5969] syz-executor: attempt to access beyond end of device
[  239.609861][ T5969] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  239.617394][ T5969] CPU: 0 UID: 0 PID: 5969 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  239.617416][ T5969] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  239.617426][ T5969] Call Trace:
[  239.617432][ T5969]  <TASK>
[  239.617439][ T5969]  dump_stack_lvl+0x189/0x250
[  239.617473][ T5969]  ? __pfx_dump_stack_lvl+0x10/0x10
[  239.617490][ T5969]  ? __pfx_queue_work_on+0x10/0x10
[  239.617504][ T5969]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  239.617520][ T5969]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  239.617546][ T5969]  f2fs_handle_critical_error+0x37c/0x540
[  239.617570][ T5969]  f2fs_write_end_io+0x886/0xb60
[  239.617638][ T5969]  __submit_merged_bio+0x27a/0x6a0
[  239.617663][ T5969]  __submit_merged_write_cond+0x255/0x530
[  239.617687][ T5969]  f2fs_write_data_pages+0x261d/0x3000
[  239.617729][ T5969]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  239.617791][ T5969]  ? unwind_next_frame+0xa5/0x2390
[  239.617808][ T5969]  ? rcu_is_watching+0x15/0xb0
[  239.617820][ T5969]  ? __kasan_check_byte+0x12/0x40
[  239.617854][ T5969]  ? __lock_acquire+0xab9/0xd20
[  239.617883][ T5969]  ? do_raw_spin_lock+0x121/0x290
[  239.617911][ T5969]  ? do_raw_spin_unlock+0x4d/0x240
[  239.617929][ T5969]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  239.617949][ T5969]  do_writepages+0x32e/0x550
[  239.617979][ T5969]  ? do_raw_spin_unlock+0x4d/0x240
[  239.618002][ T5969]  filemap_fdatawrite+0x199/0x240
[  239.618021][ T5969]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  239.618039][ T5969]  ? __pfx_SOFTIRQ_verbose+0x10/0x10
[  239.618096][ T5969]  ? do_raw_spin_unlock+0x4d/0x240
[  239.618114][ T5969]  f2fs_sync_dirty_inodes+0x31f/0x830
[  239.618146][ T5969]  f2fs_write_checkpoint+0x95a/0x1df0
[  239.618185][ T5969]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  239.618238][ T5969]  ? kill_f2fs_super+0x298/0x6c0
[  239.618261][ T5969]  kill_f2fs_super+0x2c3/0x6c0
[  239.618282][ T5969]  ? __pfx_kill_f2fs_super+0x10/0x10
[  239.618296][ T5969]  ? radix_tree_delete_item+0x2b6/0x400
[  239.618314][ T5969]  ? shrinker_free+0x2ce/0x3e0
[  239.618328][ T5969]  deactivate_locked_super+0xbc/0x130
[  239.618343][ T5969]  cleanup_mnt+0x425/0x4c0
[  239.618356][ T5969]  ? lockdep_hardirqs_on+0x9c/0x150
[  239.618371][ T5969]  task_work_run+0x1d4/0x260
[  239.618415][ T5969]  ? __pfx_task_work_run+0x10/0x10
[  239.618431][ T5969]  ? __x64_sys_umount+0x122/0x160
[  239.618459][ T5969]  ? exit_to_user_mode_loop+0x40/0x110
[  239.618479][ T5969]  exit_to_user_mode_loop+0xec/0x110
[  239.618496][ T5969]  do_syscall_64+0x2bd/0x3b0
[  239.618510][ T5969]  ? lockdep_hardirqs_on+0x9c/0x150
[  239.618524][ T5969]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.618537][ T5969]  ? exc_page_fault+0x9f/0xf0
[  239.618554][ T5969]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.618566][ T5969] RIP: 0033:0x7fee8098ff17
[  239.618579][ T5969] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  239.618591][ T5969] RSP: 002b:00007ffd32c67d18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  239.618636][ T5969] RAX: 0000000000000000 RBX: 00007fee80a11c05 RCX: 00007fee8098ff17
[  239.618644][ T5969] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd32c67dd0
[  239.618651][ T5969] RBP: 00007ffd32c67dd0 R08: 0000000000000000 R09: 0000000000000000
[  239.618658][ T5969] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd32c68e60
[  239.618666][ T5969] R13: 00007fee80a11c05 R14: 000000000003a7ca R15: 00007ffd32c68ea0
[  239.618687][ T5969]  </TASK>
[  239.750549][    C0] vkms_vblank_simulate: vblank timer overrun
[  239.754634][ T5969] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  240.273936][T12837] loop1: detected capacity change from 0 to 32768
[  240.333122][T12839] loop2: detected capacity change from 0 to 32768
[  240.356336][T12839] ERROR: (device loop2): dbAdjCtl: the maximum free buddy is not the old root
[  240.356336][T12839] 
[  240.363748][T12839] ERROR: (device loop2): remounting filesystem as read-only
[  240.637985][ T9361] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  240.797910][ T9361] usb 2-1: Using ep0 maxpacket: 8
[  240.815702][ T9361] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  240.818993][ T9361] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.822104][ T9361] usb 2-1: Product: syz
[  240.823783][ T9361] usb 2-1: Manufacturer: syz
[  240.825546][ T9361] usb 2-1: SerialNumber: syz
[  240.838678][ T9361] usb 2-1: config 0 descriptor??
[  241.054475][ T9361] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  242.477850][ T9361] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  242.483195][ T9361] usb 2-1: USB disconnect, device number 15
[  242.641588][T12882] loop2: detected capacity change from 0 to 64
[  243.119646][T12902] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1489' sets config #8
[  244.030399][   T33] audit: type=1326 audit(1755040968.750:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12915 comm="syz.2.1496" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f798ebe9 code=0x7ffc0000
[  244.116754][   T33] audit: type=1326 audit(1755040968.750:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12915 comm="syz.2.1496" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f798ebe9 code=0x7ffc0000
[  244.253583][   T33] audit: type=1326 audit(1755040968.750:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12915 comm="syz.2.1496" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f61f798ebe9 code=0x7ffc0000
[  244.272680][   T33] audit: type=1326 audit(1755040968.760:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12915 comm="syz.2.1496" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f798ebe9 code=0x7ffc0000
[  244.287338][   T33] audit: type=1326 audit(1755040968.760:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12915 comm="syz.2.1496" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f798ebe9 code=0x7ffc0000
[  244.294625][   T33] audit: type=1326 audit(1755040968.760:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12919 comm="syz.2.1496" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61f79c14a5 code=0x7ffc0000
[  244.324979][   T33] audit: type=1326 audit(1755040968.770:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12915 comm="syz.2.1496" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f61f798ebe9 code=0x7ffc0000
[  244.355882][   T33] audit: type=1326 audit(1755040968.770:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12915 comm="syz.2.1496" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f798ebe9 code=0x7ffc0000
[  244.378672][   T33] audit: type=1326 audit(1755040968.770:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12915 comm="syz.2.1496" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f798ebe9 code=0x7ffc0000
[  244.387505][   T33] audit: type=1326 audit(1755040968.770:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12915 comm="syz.2.1496" exe="/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f61f798ebe9 code=0x7ffc0000
[  246.449402][T12946] loop2: detected capacity change from 0 to 256
[  246.491533][T12951] netlink: 'syz.2.1504': attribute type 29 has an invalid length.
[  246.497940][T12951] netlink: 'syz.2.1504': attribute type 29 has an invalid length.
[  246.702663][T12961] gfs2: not a GFS2 filesystem
[  247.159469][ T5966] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  247.166468][ T5966] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  247.172196][ T5966] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  247.178186][ T5966] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  247.182559][ T5966] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  247.566088][T12968] chnl_net:caif_netlink_parms(): no params data found
[  247.712254][ T5992] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.775674][T12968] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.778506][T12968] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.781450][T12968] bridge_slave_0: entered allmulticast mode
[  247.788120][T12968] bridge_slave_0: entered promiscuous mode
[  247.793368][T12968] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.797587][T12968] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.800760][T12968] bridge_slave_1: entered allmulticast mode
[  247.809594][T12968] bridge_slave_1: entered promiscuous mode
[  247.882349][ T5992] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.007819][T12968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  248.027745][T12968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  248.057467][T13109] loop2: detected capacity change from 0 to 32768
[  248.064729][T13109] jfs_mount: dbMount failed w/rc = -22
[  248.068922][T13109] Mount JFS Failure: -22
[  248.070759][T13109] jfs_mount failed w/return code = -22
[  248.123345][T12968] team0: Port device team_slave_0 added
[  248.238922][T13199] netlink: 'syz.1.1520': attribute type 6 has an invalid length.
[  248.242104][T13199] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1520'.
[  248.253692][T12968] team0: Port device team_slave_1 added
[  248.291292][ T5992] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.385953][ T5992] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.405234][T12968] batman_adv: batadv0: Adding interface: batadv_slave_0
[  248.408004][T12968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.423507][T12968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  248.443800][T12968] batman_adv: batadv0: Adding interface: batadv_slave_1
[  248.456024][T12968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.471267][T12968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  248.484965][T13234] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1525'.
[  248.504380][T13234] 8021q: VLANs not supported on ip_vti0
[  248.581538][T13261] loop2: detected capacity change from 0 to 1024
[  248.581900][T12968] hsr_slave_0: entered promiscuous mode
[  248.589429][T12968] hsr_slave_1: entered promiscuous mode
[  248.592691][T12968] debugfs: 'hsr0' already exists in 'hsr'
[  248.595005][T12968] Cannot create hsr debugfs directory
[  248.596576][T13261] EXT4-fs: Ignoring removed oldalloc option
[  248.605471][T13261] EXT4-fs: Ignoring removed bh option
[  248.626124][T13261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.666025][T13261] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.1527: Allocating blocks 497-513 which overlap fs metadata
[  248.677120][T13261] EXT4-fs (loop2): pa ffff888029a80bc8: logic 1, phys. 449, len 4
[  248.680040][T13261] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 2, pa_free 3
[  248.727494][ T5962] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.777655][ T5992] bridge_slave_1: left allmulticast mode
[  248.779540][ T5992] bridge_slave_1: left promiscuous mode
[  248.782360][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.791135][ T5992] bridge_slave_0: left allmulticast mode
[  248.792983][ T5992] bridge_slave_0: left promiscuous mode
[  248.795111][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.814013][    T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  248.968880][    T9] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  248.971767][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.975903][    T9] usb 2-1: Product: syz
[  248.977416][    T9] usb 2-1: Manufacturer: syz
[  248.979193][    T9] usb 2-1: SerialNumber: syz
[  248.982492][    T9] usb 2-1: config 0 descriptor??
[  248.987180][    T9] ch341 2-1:0.0: ch341-uart converter detected
[  249.190251][    T9] usb 2-1: failed to receive control message: -71
[  249.194177][    T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  249.199143][ T5992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  249.201107][    T9] usb 2-1: USB disconnect, device number 16
[  249.207860][ T5992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  249.208351][    T9] ch341 2-1:0.0: device disconnected
[  249.214399][ T5972] Bluetooth: hci3: command tx timeout
[  249.221117][ T5992] bond0 (unregistering): Released all slaves
[  249.232738][ T5992] bond1 (unregistering): Released all slaves
[  249.286761][T13357] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1533'.
[  249.425245][T13375] netlink: 'syz.2.1535': attribute type 3 has an invalid length.
[  249.568546][T12968] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  249.576176][T12968] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  249.586814][T12968] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  249.598788][T12968] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  249.624622][ T5992] hsr_slave_0: left promiscuous mode
[  249.632519][ T5992] hsr_slave_1: left promiscuous mode
[  249.635490][ T5992] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  249.638228][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_0
[  249.652112][ T5992] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  249.654934][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_1
[  249.716085][ T5992] veth1_macvtap: left promiscuous mode
[  249.718361][ T5992] veth0_macvtap: left promiscuous mode
[  249.720597][ T5992] veth1_vlan: left promiscuous mode
[  249.722714][ T5992] veth0_vlan: left promiscuous mode
[  249.902268][T13411] loop2: detected capacity change from 0 to 1024
[  249.909909][T13411] hfsplus: failed to load root directory
[  250.654749][ T5992] team0 (unregistering): Port device team_slave_1 removed
[  250.701850][ T5992] team0 (unregistering): Port device team_slave_0 removed
[  250.957212][T13424] loop2: detected capacity change from 0 to 1764
[  251.221038][T13404] team0: entered promiscuous mode
[  251.225798][T13404] C: entered promiscuous mode
[  251.227512][T13404] team_slave_1: entered promiscuous mode
[  251.230087][T13407] team0: left promiscuous mode
[  251.231819][T13407] C: left promiscuous mode
[  251.234957][T13407] team_slave_1: left promiscuous mode
[  251.252898][ T9361] usb 3-1: new low-speed USB device number 23 using dummy_hcd
[  251.302749][ T5972] Bluetooth: hci3: command tx timeout
[  251.340957][T12968] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.401453][T12968] 8021q: adding VLAN 0 to HW filter on device team0
[  251.406162][ T9361] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  251.409718][ T9361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.410924][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.415931][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  251.415954][ T9361] usb 3-1: config 0 descriptor??
[  251.429324][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.432395][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state
[  251.770696][T12968] 8021q: adding VLAN 0 to HW filter on device batadv0
[  252.167028][  T155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  252.170421][T12968] veth0_vlan: entered promiscuous mode
[  252.180071][T12968] veth1_vlan: entered promiscuous mode
[  252.199521][T12968] veth0_macvtap: entered promiscuous mode
[  252.204899][T12968] veth1_macvtap: entered promiscuous mode
[  252.215835][T12968] batman_adv: batadv0: Interface activated: batadv_slave_0
[  252.224245][T12968] batman_adv: batadv0: Interface activated: batadv_slave_1
[  252.239307][ T5992] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.243264][ T5992] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.250870][ T5992] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  252.257663][ T5992] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  252.335167][  T968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.338911][  T968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.384484][  T968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.387509][  T968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.616619][T13485] loop5: detected capacity change from 0 to 512
[  252.625043][T13485] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  252.651532][T13485] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.1556: bad orphan inode 15
[  252.659508][T13485] ext4_test_bit(bit=14, block=18) = 1
[  252.661515][T13485] is_bad_inode(inode)=0
[  252.665895][T13485] NEXT_ORPHAN(inode)=1023
[  252.667418][T13485] max_ino=32
[  252.668640][T13485] i_nlink=0
[  252.673554][T13485] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  252.678871][T13485] ext2 filesystem being mounted at /4/qY3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  252.722565][T12968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  252.742690][   T96] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  252.894924][   T96] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  252.900138][   T96] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  252.910307][   T96] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  252.918583][   T96] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  252.925532][   T96] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.928850][   T96] usb 2-1: Product: syz
[  252.930605][   T96] usb 2-1: Manufacturer: syz
[  252.932784][   T96] usb 2-1: SerialNumber: syz
[  252.945864][   T96] usb 2-1: config 0 descriptor??
[  252.950223][   T96] uvcvideo 2-1:0.0: probe with driver uvcvideo failed with error -22
[  253.023539][T13509] loop5: detected capacity change from 0 to 256
[  253.030560][T13509] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  253.043371][   T33] kauditd_printk_skb: 48 callbacks suppressed
[  253.043382][   T33] audit: type=1800 audit(1755040977.765:170): pid=13509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1560" name="bus" dev="loop5" ino=1048717 res=0 errno=0
[  253.157782][ T6051] usb 2-1: USB disconnect, device number 17
[  253.371714][ T5972] Bluetooth: hci3: command tx timeout
[  253.506149][T13534] loop5: detected capacity change from 0 to 1024
[  253.525182][ T6454] hfsplus: b-tree write err: -5, ino 4
[  253.768086][T13554] loop5: detected capacity change from 0 to 1024
[  253.830791][ T1155] hfsplus: b-tree write err: -5, ino 4
[  253.905747][T13564] loop5: detected capacity change from 0 to 4096
[  253.931354][T13568] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  254.219735][T13586] netlink: 'syz.5.1585': attribute type 2 has an invalid length.
[  254.236339][T13586] bridge: entered promiscuous mode
[  254.274779][ T9361] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  254.278736][ T9361] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9
[  254.287189][ T9361] asix 3-1:0.0: probe with driver asix failed with error -71
[  254.293897][ T9361] usb 3-1: USB disconnect, device number 23
[  255.039042][T13621] loop1: detected capacity change from 0 to 64
[  255.191523][ T6051] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  255.358180][ T6051] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  255.362879][ T6051] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  255.370271][ T6051] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  255.374287][ T6051] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  255.378271][ T6051] usb 6-1: Manufacturer: syz
[  255.380037][ T6051] usb 6-1: SerialNumber: syz
[  255.388087][ T6051] usb 6-1: config 0 descriptor??
[  255.392973][T13612] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  255.399120][ T6051] usb 6-1: ucan: probing device on interface #0
[  255.401374][ T6051] usb 6-1: ucan: invalid endpoint configuration
[  255.406581][ T6051] usb 6-1: ucan: probe failed; try to update the device firmware
[  255.451128][ T5972] Bluetooth: hci3: command tx timeout
[  255.557973][T13629] binder: 13628:13629 ioctl c0306201 200000001a80 returned -14
[  255.628005][    T9] usb 6-1: USB disconnect, device number 2
[  256.516922][T13655] netlink: 34 bytes leftover after parsing attributes in process `syz.5.1603'.
[  256.543235][T13655] loop5: detected capacity change from 0 to 512
[  256.557596][T13655] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  256.693124][T13655] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.714326][T13655] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  256.808587][T13663] loop1: detected capacity change from 0 to 1024
[  256.827187][T13663] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  256.837433][T13663] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  256.842938][T13666] netlink: 'syz.2.1606': attribute type 6 has an invalid length.
[  256.846948][T13663] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: inode #32: comm syz.1.1605: iget: special inode unallocated
[  256.853430][T13666] netlink: 'syz.2.1606': attribute type 6 has an invalid length.
[  256.862918][T13663] EXT4-fs (loop1): no journal found
[  256.867339][T13663] EXT4-fs (loop1): can't get journal size
[  256.876917][T13663] EXT4-fs error (device loop1): ext4_protect_reserved_inode:160: inode #32: comm syz.1.1605: iget: special inode unallocated
[  256.892864][T13663] EXT4-fs (loop1): failed to initialize system zone (-117)
[  256.898188][T13663] EXT4-fs (loop1): mount failed
[  257.358254][T12968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.749576][ T6051] usb 3-1: new full-speed USB device number 24 using dummy_hcd
[  257.799525][   T96] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  257.901322][ T6051] usb 3-1: config 7 has an invalid interface number: 34 but max is 0
[  257.904453][ T6051] usb 3-1: config 7 has no interface number 0
[  257.909284][ T6051] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db51, bcdDevice=5e.35
[  257.912985][ T6051] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.916068][ T6051] usb 3-1: Product: syz
[  257.917698][ T6051] usb 3-1: Manufacturer: syz
[  257.919569][ T6051] usb 3-1: SerialNumber: syz
[  257.962888][   T96] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  257.966828][   T96] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  257.971413][   T96] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10
[  257.975539][   T96] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64
[  257.982389][   T96] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  257.986604][   T96] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 213, setting to 64
[  257.990769][   T96] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  257.998713][   T96] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  258.004349][   T96] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.007406][   T96] usb 6-1: Product: syz
[  258.008999][   T96] usb 6-1: Manufacturer: syz
[  258.017520][   T96] usb 6-1: SerialNumber: syz
[  258.023669][   T96] usb 6-1: config 0 descriptor??
[  258.026346][T13700] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  258.028603][T13700] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  258.140748][ T6051] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual USB' in warm state.
[  258.144876][ T6051] dvb-usb: bulk message failed: -22 (2/0)
[  258.152849][ T6051] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  258.160751][ T6051] dvb-usb: DViCO FusionHDTV DVB-T Dual USB error while loading driver (-19)
[  258.164893][ T6051] dvb_usb_cxusb 3-1:7.34: probe with driver dvb_usb_cxusb failed with error -22
[  258.170501][ T6051] usb 3-1: USB disconnect, device number 24
[  258.347253][T13733] cgroup: Bad value for 'name'
[  258.562486][T13738] loop1: detected capacity change from 0 to 32768
[  258.566746][T13738] (syz.1.1626,13738,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  258.571837][T13738] (syz.1.1626,13738,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  258.582589][T13738] JBD2: Ignoring recovery information on journal
[  258.603607][T13738] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  258.613356][T13738] (syz.1.1626,13738,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xf53e8faf, computed 0xf6557595. Applying ECC.
[  258.660074][ T5969] ocfs2: Unmounting device (7,1) on (node local)
[  258.775081][T13750] loop5: detected capacity change from 0 to 256
[  259.160153][   T96] rc_core: IR keymap rc-snapstream-firefly not found
[  259.162879][   T96] Registered IR keymap rc-empty
[  259.176775][   T96] rc rc0: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  259.189986][   T96] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input11
[  259.221465][   T96] input: syz syz mouse as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input12
[  259.285682][    C1] ati_remote 6-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19
[  259.290470][   T96] usb 6-1: USB disconnect, device number 3
[  259.436804][T13814] loop1: detected capacity change from 0 to 256
[  259.445878][T13814] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  259.455996][T13814] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  259.798770][ T6051] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  259.985096][T13858] loop1: detected capacity change from 0 to 512
[  259.990496][T13858] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  260.003169][T13858] EXT4-fs (loop1): 1 truncate cleaned up
[  260.006910][T13858] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.033691][   T33] audit: type=1800 audit(1755040984.758:171): pid=13858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1667" name="bus" dev="loop1" ino=18 res=0 errno=0
[  260.059345][ T6051] usb 3-1: Using ep0 maxpacket: 32
[  260.069943][ T6051] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  260.073227][ T6051] usb 3-1: config 0 has no interface number 0
[  260.073508][ T5969] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.075682][ T6051] usb 3-1: config 0 interface 132 has no altsetting 0
[  260.101248][ T6051] usb 3-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.0f
[  260.105696][ T6051] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.108728][ T6051] usb 3-1: Product: syz
[  260.110704][ T6051] usb 3-1: Manufacturer: syz
[  260.112302][ T6051] usb 3-1: SerialNumber: syz
[  260.123181][ T6051] usb 3-1: config 0 descriptor??
[  260.138684][ T6051] ftdi_sio 3-1:0.132: FTDI USB Serial Device converter detected
[  260.149967][ T6051] usb 3-1: Detected SIO
[  260.160820][T13868] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  260.171105][ T6051] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  260.430916][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  260.433646][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  260.449724][ T6059] usb 3-1: USB disconnect, device number 25
[  260.459156][ T6059] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  260.462976][ T6059] ftdi_sio 3-1:0.132: device disconnected
[  261.042654][T13895] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  261.609612][T13909] loop2: detected capacity change from 0 to 4096
[  261.641171][T13909] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  261.645728][T13909] ntfs3(loop2): Failed to load $UpCase (-22).
[  261.832051][T13921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1678'.
[  261.962616][T13931] loop1: detected capacity change from 0 to 256
[  261.966544][T13931] exfat: Bad value for 'uid'
[  261.969757][T13931] exfat: Bad value for 'uid'
[  262.043843][T13942] loop1: detected capacity change from 0 to 256
[  262.210706][T13958] vlan0: entered promiscuous mode
[  262.251679][T13960] netlink: 'syz.2.1694': attribute type 2 has an invalid length.
[  262.257337][T13960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1694'.
[  262.311841][T13964] loop2: detected capacity change from 0 to 64
[  262.333032][T13964] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  262.487942][T13977] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  262.845038][T13998] loop5: detected capacity change from 0 to 8
[  262.853964][T13998] Major/Minor mismatch, older Squashfs 1.0 filesystems are unsupported
[  263.965523][T14022] loop1: detected capacity change from 0 to 16
[  263.975889][T14022] erofs (device loop1): mounted with root inode @ nid 36.
[  264.314401][T14033] loop1: detected capacity change from 0 to 32768
[  264.315064][T14037] loop2: detected capacity change from 0 to 8192
[  264.322422][T14033] XFS: attr2 mount option is deprecated.
[  264.322618][T14037] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  264.332995][T14033] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  264.337498][T14040] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1726'.
[  264.346760][T14033] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  264.388822][T14033] XFS (loop1): Ending clean mount
[  264.393268][T14033] XFS (loop1): Quotacheck needed: Please wait.
[  264.419781][T14033] XFS (loop1): Quotacheck: Done.
[  264.486892][ T5969] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  264.747781][T14084] loop1: detected capacity change from 0 to 164
[  264.751981][T14084] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet.
[  264.797470][T14090] loop1: detected capacity change from 0 to 512
[  264.800304][T14090] EXT4-fs: Ignoring removed oldalloc option
[  264.814435][T14090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.826149][T14090] ext4 filesystem being mounted at /593/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  264.854529][T14096] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1741'.
[  264.857328][T14096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1741'.
[  264.909435][ T5969] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.968631][T14104] [U] V3Fپ"S/4:XTZWTLW=
[  264.971829][T14104] [U] J"E:"
[  264.972967][T14104] [U] 
[  265.186705][T14116] loop1: detected capacity change from 0 to 1024
[  265.308728][T14118] loop5: detected capacity change from 0 to 512
[  265.342154][T14118] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  265.347375][T14118] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001)
[  265.351428][T14118] FAT-fs (loop5): Filesystem has been set read-only
[  265.785606][T14131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1752'.
[  265.789335][T14131] netlink: 'syz.2.1752': attribute type 5 has an invalid length.
[  265.792569][T14131] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1752'.
[  266.319323][T14137] netlink: 300 bytes leftover after parsing attributes in process `syz.5.1755'.
[  266.396613][T14145] loop5: detected capacity change from 0 to 8
[  266.403259][T14145] SQUASHFS error: zstd decompression error: 10
[  266.408804][T14145] SQUASHFS error: zstd decompression failed, data probably corrupt
[  266.411632][T14145] SQUASHFS error: Failed to read block 0x4ec: -5
[  266.413890][T14145] SQUASHFS error: Unable to read metadata cache entry [4ea]
[  266.417592][T14145] SQUASHFS error: Unable to read inode 0x2011f
[  266.755125][   T96] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  266.905006][   T96] usb 6-1: Using ep0 maxpacket: 16
[  266.908620][   T96] usb 6-1: config 8 has an invalid interface number: 206 but max is 0
[  266.911485][   T96] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  266.916711][   T96] usb 6-1: config 8 has no interface number 0
[  266.919180][   T96] usb 6-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87
[  266.923431][   T96] usb 6-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  266.928392][   T96] usb 6-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  266.933298][   T96] usb 6-1: config 8 interface 206 has no altsetting 0
[  266.937966][   T96] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb
[  266.940692][   T96] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.943073][   T96] usb 6-1: Product: syz
[  266.944413][   T96] usb 6-1: Manufacturer: syz
[  266.945920][   T96] usb 6-1: SerialNumber: syz
[  267.064790][   T47] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  267.155254][   T96] garmin_gps 6-1:8.206: Garmin GPS usb/tty converter detected
[  267.159160][   T96] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  267.162510][   T96] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  267.167798][   T96] usb 6-1: USB disconnect, device number 4
[  267.172525][   T96] garmin_gps 6-1:8.206: device disconnected
[  267.216555][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  267.220776][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  267.224512][   T47] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  267.228171][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.232787][   T47] usb 2-1: config 0 descriptor??
[  267.570990][T14173] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  267.616902][T14199] netlink: 'syz.2.1773': attribute type 153 has an invalid length.
[  267.642369][   T47] pyra 0003:1E7D:2CF6.0008: ignoring exceeding usage max
[  267.646417][   T47] pyra 0003:1E7D:2CF6.0008: ignoring exceeding usage max
[  267.650671][   T47] pyra 0003:1E7D:2CF6.0008: usage index exceeded
[  267.653167][   T47] pyra 0003:1E7D:2CF6.0008: item 0 1 2 2 parsing failed
[  267.655849][   T47] pyra 0003:1E7D:2CF6.0008: parse failed
[  267.658105][   T47] pyra 0003:1E7D:2CF6.0008: probe with driver pyra failed with error -22
[  267.759456][T14208] loop5: detected capacity change from 0 to 2048
[  267.764132][T14208] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  267.777261][T14210] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  267.844117][ T9361] usb 2-1: USB disconnect, device number 18
[  268.114259][   T47] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  268.274198][   T47] usb 6-1: Using ep0 maxpacket: 16
[  268.278633][   T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  268.282812][   T47] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  268.286983][   T47] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  268.289863][   T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.293795][   T47] usb 6-1: config 0 descriptor??
[  268.509979][T14239] loop1: detected capacity change from 0 to 1024
[  268.520170][T14240] loop2: detected capacity change from 0 to 1024
[  268.531698][T14240] hfsplus: bad catalog file entry
[  268.533394][T14240] hfsplus: failed to load root directory
[  268.714411][   T47] HID 045e:07da: Invalid code 65791 type 1
[  268.720987][   T47] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0009/input/input13
[  268.747972][   T47] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  268.761232][T14270] loop1: detected capacity change from 0 to 256
[  268.764860][T14268] loop2: detected capacity change from 0 to 256
[  268.768565][T14268] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  268.771931][T14268] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  268.781304][T14268] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x2d0d25cc, utbl_chksum : 0xe619d30d)
[  269.671072][ T6059] usb 6-1: USB disconnect, device number 5
[  269.757074][T14293] loop1: detected capacity change from 0 to 32768
[  269.799277][T14293] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  269.799292][T14293]   allowing incompatible features above 0.0: (unknown version)
[  269.799298][T14293]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  269.813677][T14293] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  269.817757][T14293] bcachefs (loop1): initializing new filesystem
[  269.829233][T14293] bcachefs (loop1): going read-write
[  269.873964][T14293] bcachefs (loop1): marking superblocks
[  269.910578][T14293] bcachefs (loop1): initializing freespace
[  269.925931][T14293] bcachefs (loop1): done initializing freespace
[  269.934138][T14293] bcachefs (loop1): reading snapshots table
[  269.936915][T14293] bcachefs (loop1): reading snapshots done
[  269.967987][T14293] bcachefs (loop1): done starting filesystem
[  270.499094][ T5969] bcachefs (loop1): shutting down
[  270.516254][ T5969] bcachefs (loop1): going read-only
[  270.518352][ T5969] bcachefs (loop1): finished waiting for writes to stop
[  270.526038][ T5969] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3
[  270.555229][ T5969] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 4
[  270.561298][ T5969] bcachefs (loop1): clean shutdown complete, journal seq 5
[  270.564556][ T5969] bcachefs (loop1): marking filesystem clean
[  270.580819][ T5969] bcachefs (loop1): shutdown complete
[  270.763026][ T6059] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  270.932864][ T6059] usb 6-1: Using ep0 maxpacket: 32
[  270.938791][ T6059] usb 6-1: config 0 has an invalid interface number: 231 but max is 0
[  270.942145][ T6059] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  270.949755][ T6059] usb 6-1: config 0 has no interface number 0
[  270.956512][ T6059] usb 6-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  270.960272][ T6059] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.963893][ T6059] usb 6-1: Product: syz
[  270.965629][ T6059] usb 6-1: Manufacturer: syz
[  270.967448][ T6059] usb 6-1: SerialNumber: syz
[  270.971798][ T6059] usb 6-1: config 0 descriptor??
[  270.981021][ T6059] plusb 6-1:0.231: probe with driver plusb failed with error -22
[  271.182815][ T9361] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  271.188225][   T47] usb 6-1: USB disconnect, device number 6
[  271.362751][ T9361] usb 3-1: Using ep0 maxpacket: 16
[  271.367040][ T9361] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  271.370313][ T9361] usb 3-1: config 0 has no interface number 0
[  271.373962][ T9361] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  271.378390][ T9361] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  271.387288][ T9361] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  271.392477][ T9361] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  271.395811][ T9361] usb 3-1: Product: syz
[  271.397498][ T9361] usb 3-1: SerialNumber: syz
[  271.401919][ T9361] usb 3-1: config 0 descriptor??
[  271.407763][ T9361] cm109 3-1:0.8: invalid payload size 0, expected 4
[  271.413806][ T9361] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input14
[  271.633859][   T47] usb 3-1: USB disconnect, device number 26
[  271.634013][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  271.641654][    C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  271.651394][   T47] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  271.774647][T14376] netlink: 'syz.5.1807': attribute type 39 has an invalid length.
[  271.928518][T14387] loop1: detected capacity change from 0 to 2048
[  271.937516][T14389] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  271.973495][   T33] audit: type=1800 audit(1755040996.704:172): pid=14387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1810" name="file2" dev="loop1" ino=16 res=0 errno=0
[  271.974355][T14387] syz.1.1810: attempt to access beyond end of device
[  271.974355][T14387] loop1: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048
[  271.985721][T14387] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15)
[  271.988337][T14387] NILFS (loop1): error -5 truncating bmap (ino=16)
[  272.000964][T14387] syz.1.1810: attempt to access beyond end of device
[  272.000964][T14387] loop1: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048
[  272.006769][T14387] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15)
[  272.010082][T14387] NILFS (loop1): error -5 truncating bmap (ino=16)
[  272.013895][T14387] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12
[  272.025064][T14387] Remounting filesystem read-only
[  272.035390][T14387] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  272.195919][T14393] loop2: detected capacity change from 0 to 1024
[  272.229692][   T53] hfsplus: b-tree write err: -5, ino 4
[  272.768347][T14420] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  273.137507][T14456] netlink: 284 bytes leftover after parsing attributes in process `syz.5.1838'.
[  273.509777][T14477] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  273.770823][T14494] loop5: detected capacity change from 0 to 512
[  273.773492][T14494] EXT4-fs: Ignoring removed bh option
[  273.775905][T14494] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  273.779936][T14494] EXT4-fs (loop5): orphan cleanup on readonly fs
[  273.782096][T14494] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #3: comm syz.5.1851: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0)
[  273.787664][T14494] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.1851: Bad quota inode: 3, type: 0
[  273.791120][T14494] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  273.796405][T14494] EXT4-fs (loop5): Cannot turn on quotas: error -117
[  273.799385][T14494] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  273.831957][T12968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.881989][ T9361] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  274.051313][ T9361] usb 3-1: Using ep0 maxpacket: 8
[  274.058016][ T9361] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab
[  274.062082][ T9361] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  274.065489][ T9361] usb 3-1: Product: syz
[  274.067193][ T9361] usb 3-1: Manufacturer: syz
[  274.070260][ T9361] usb 3-1: SerialNumber: syz
[  274.076191][ T9361] usb 3-1: config 0 descriptor??
[  274.520293][ T9361] usb 3-1: USB disconnect, device number 27
[  274.714030][T14530] openvswitch: netlink: Multiple metadata blocks provided
[  275.191024][T14543] loop5: detected capacity change from 0 to 32768
[  275.196786][T14543] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1863 (14543)
[  275.212268][T14543] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  275.216267][T14543] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  275.219581][T14543] BTRFS info (device loop5): using free-space-tree
[  275.309476][T12968] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  275.343458][T14574] loop2: detected capacity change from 0 to 1764
[  277.005247][T14666] netlink: 'syz.1.1892': attribute type 10 has an invalid length.
[  277.086453][T14666] 8021q: adding VLAN 0 to HW filter on device batadv0
[  277.104464][T14666] : (slave batadv0): Enslaving as an active interface with an up link
[  277.157393][T14663] : entered promiscuous mode
[  277.159534][T14663] bond_slave_0: entered promiscuous mode
[  277.165472][T14663] bond_slave_1: entered promiscuous mode
[  277.168083][T14663] batadv0: entered promiscuous mode
[  277.691344][T14691] loop5: detected capacity change from 0 to 4096
[  277.725627][   T33] audit: type=1800 audit(1755041002.457:173): pid=14691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1904" name="file1" dev="loop5" ino=30 res=0 errno=0
[  277.886418][T14711] netlink: 'syz.5.1911': attribute type 21 has an invalid length.
[  277.889207][T14711] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1911'.
[  278.170595][   T96] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  278.177540][T14737] openvswitch: netlink: Message has 8 unknown bytes.
[  278.181437][T14737] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  278.319504][   T96] usb 6-1: Using ep0 maxpacket: 16
[  278.324487][   T96] usb 6-1: config 0 has an invalid interface number: 104 but max is 1
[  278.327613][   T96] usb 6-1: config 0 has an invalid interface number: 104 but max is 1
[  278.332366][   T96] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  278.336372][   T96] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  278.340484][   T96] usb 6-1: config 0 has no interface number 0
[  278.343428][   T96] usb 6-1: config 0 interface 104 has no altsetting 1
[  278.348617][   T96] usb 6-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00
[  278.352917][   T96] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.356044][   T96] usb 6-1: Product: syz
[  278.357754][   T96] usb 6-1: Manufacturer: syz
[  278.360373][ T6051] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  278.363472][   T96] usb 6-1: SerialNumber: syz
[  278.370326][   T96] usb 6-1: config 0 descriptor??
[  278.529084][ T6051] usb 3-1: Using ep0 maxpacket: 32
[  278.533924][ T6051] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[  278.537162][ T6051] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  278.541012][ T6051] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[  278.545351][ T6051] usb 3-1: config 1 has no interface number 0
[  278.547866][ T6051] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  278.552653][ T6051] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  278.557571][ T6051] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  278.562654][ T6051] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.578124][   T96] asix 6-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  278.582356][ T6051] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[  278.585625][   T96] asix 6-1:0.104: probe with driver asix failed with error -71
[  278.593903][   T96] usb 6-1: USB disconnect, device number 7
[  278.780081][ T6051] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached
[  278.993649][T14730] loop2: detected capacity change from 0 to 1024
[  278.998071][T14730] EXT4-fs: Ignoring removed mblk_io_submit option
[  279.005695][T14730] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  279.238973][ T9361] usb 3-1: USB disconnect, device number 28
[  279.246199][T14775] loop5: detected capacity change from 0 to 22
[  279.250871][T14775] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  279.255474][ T9361] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[  279.260418][T14775] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  279.508782][   T96] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  279.671781][   T96] usb 6-1: Using ep0 maxpacket: 32
[  279.677831][   T96] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  279.681188][   T96] usb 6-1: config 0 has no interface number 0
[  279.697147][   T96] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  279.703204][   T96] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.705654][   T96] usb 6-1: Product: syz
[  279.707209][   T96] usb 6-1: Manufacturer: syz
[  279.709287][   T96] usb 6-1: SerialNumber: syz
[  279.712529][   T96] usb 6-1: config 0 descriptor??
[  279.715962][   T96] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  279.805828][ T5962] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.923270][   T96] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  279.952594][   T96] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  280.170975][T14824] loop2: detected capacity change from 0 to 32768
[  280.174529][T14824] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1943 (14824)
[  280.181647][T14824] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  280.185346][T14824] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  280.191095][T14824] BTRFS info (device loop2): using free-space-tree
[  280.332893][    C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  280.351373][   T96] usb 6-1: USB disconnect, device number 8
[  280.357783][   T96] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  280.370358][   T96] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  280.376026][   T96] quatech2 6-1:0.51: device disconnected
[  280.409331][ T5962] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  281.227442][T14889] loop5: detected capacity change from 0 to 1024
[  281.575791][T14898] loop2: detected capacity change from 0 to 1024
[  281.583431][T14898] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  281.604267][T14898] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1958: Invalid block bitmap block 0 in block_group 0
[  281.610409][T14898] Quota error (device loop2): write_blk: dquota write failed
[  281.613526][T14898] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  281.619918][T14898] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1958: Failed to acquire dquot type 0
[  281.630171][T14898] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.1958: Freeing blocks not in datazone - block = 0, count = 4096
[  281.636534][T14898] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1958: Invalid inode bitmap blk 0 in block_group 0
[  281.649030][ T6454] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8
[  281.653085][ T6454] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u9:5: Failed to release dquot type 0
[  281.659154][T14898] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  281.665398][T14898] EXT4-fs (loop2): 1 orphan inode deleted
[  281.670507][T14898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  281.695204][ T5962] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.937474][   T47] usb 6-1: new low-speed USB device number 9 using dummy_hcd
[  281.998126][T14916] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  282.006280][T14916] CIFS mount error: No usable UNC path provided in device string!
[  282.006280][T14916] 
[  282.010030][T14916] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  282.193753][   T47] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  282.204993][   T47] usb 6-1: config 0 has no interface number 0
[  282.216875][   T47] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  282.231327][   T47] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  282.238499][   T47] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  282.250991][   T47] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  282.260117][   T47] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  282.266110][   T47] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  282.270975][   T47] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  282.274017][   T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.278474][   T47] usb 6-1: config 0 descriptor??
[  282.281650][T14905] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  282.286632][T14905] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  282.298031][   T47] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  282.313817][ T6059] IPVS: starting estimator thread 0...
[  282.317979][T14926] IPVS: sed: SCTP 172.20.20.187:0 - no destination available
[  282.407813][T14928] IPVS: using max 61 ests per chain, 146400 per kthread
[  282.486826][T14938] team_slave_1: mtu greater than device maximum
[  282.489148][T14938] team0: Device team_slave_1 failed to change mtu
[  282.504230][ T6059] usb 6-1: USB disconnect, device number 9
[  282.513167][ T6059] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  282.538999][T14948] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  282.728492][T14950] loop2: detected capacity change from 0 to 1024
[  282.733221][T14950] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  282.737094][T14950] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  282.743683][T14950] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000]
[  282.755086][T14950] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.1971: Freeing blocks not in datazone - block = 0, count = 4096
[  282.760854][T14950] EXT4-fs (loop2): Remounting filesystem read-only
[  282.763650][T14950] EXT4-fs (loop2): 1 orphan inode deleted
[  282.767344][T14950] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  282.781384][   T28] EXT4-fs (loop2): Quota write (off=3072, len=1024) cancelled because transaction is not started
[  282.785501][   T28] Quota error (device loop2): write_blk: dquota write failed
[  282.789062][   T28] Quota error (device loop2): free_dqentry: Can't move quota data block (2) to free list
[  282.819369][ T5962] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.866718][T14956] netem: incorrect ge model size
[  282.869303][T14956] netem: change failed
[  282.909190][T14958] loop2: detected capacity change from 0 to 16
[  282.912417][T14958] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  283.187221][   T28] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  283.206309][T14976] evm: overlay not supported
[  283.730988][T14988] IPVS: Error connecting to the multicast addr
[  284.184841][T14994] loop5: detected capacity change from 0 to 32768
[  285.660718][T15044] loop2: detected capacity change from 0 to 2048
[  285.752635][T15044]  loop2: p1 p2 < > p3 p4 < p5 >
[  285.754688][T15044] loop2: partition table partially beyond EOD, truncated
[  285.772216][T15044] loop2: p2 start 4294934784 is beyond EOD, truncated
[  285.774964][T15044] loop2: p3 start 3724543488 is beyond EOD, truncated
[  285.901625][T15061] comedi comedi3: bad chanlist[0]=0x00000008 chan=8 range length=4
[  285.972692][T15066] loop5: detected capacity change from 0 to 1024
[  285.979498][T15066] EXT4-fs: Ignoring removed bh option
[  285.984427][T15066] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  285.998405][T15070] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2016'.
[  286.016677][T15066] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  286.040849][T15066] overlay: Bad value for 'workdir'
[  286.073618][T12968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.221160][T15091] netlink: 39 bytes leftover after parsing attributes in process `syz.2.2024'.
[  286.262869][T15097] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2027'.
[  286.310189][T15100] ip6gre1: entered promiscuous mode
[  286.358110][T15107] loop5: detected capacity change from 0 to 512
[  286.420404][T15114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2033'.
[  286.554613][T15129] loop5: detected capacity change from 0 to 2048
[  286.558729][T15129] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  286.561737][T15129] NILFS (loop5): mounting unchecked fs
[  286.572543][T15134] loop2: detected capacity change from 0 to 256
[  286.572546][T15129] NILFS (loop5): recovery complete
[  286.576082][T15134] exfat: Deprecated parameter 'namecase'
[  286.578564][T15134] exfat: Bad value for 'uid'
[  286.580121][T15134] exfat: Bad value for 'uid'
[  286.596968][T15137] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  286.613761][   T33] audit: type=1800 audit(1755041011.342:174): pid=15129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2039" name="file1" dev="loop5" ino=15 res=0 errno=0
[  286.732003][T15146] Invalid source name
[  286.807138][T15150] loop2: detected capacity change from 0 to 256
[  286.812878][T15150] exfat: Deprecated parameter 'utf8'
[  286.818439][T15150] exfat: Deprecated parameter 'namecase'
[  286.820599][T15150] exfat: Deprecated parameter 'utf8'
[  286.826764][T15150] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  287.288841][T15166] netlink: 'syz.1.2051': attribute type 9 has an invalid length.
[  287.460156][T15176] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2055'.
[  287.462914][T15176] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2055'.
[  288.899710][T15204] loop5: detected capacity change from 0 to 4096
[  288.916833][T15204] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  288.948827][T15204] Quota error (device loop5): do_check_range: Getting block 7 out of range 1-5
[  288.962732][T15204] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  288.967167][T15204] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2066: Failed to acquire dquot type 1
[  289.020700][T12968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.208346][T15238] tmpfs: Bad value for 'mpol'
[  289.424465][   T96] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  289.429614][T15258] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2089'.
[  289.577834][   T96] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  289.583988][   T96] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  289.590693][   T96] usb 6-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00
[  289.594345][   T96] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.599999][   T96] usb 6-1: config 0 descriptor??
[  289.603763][T15233] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  290.027093][   T96] gembird 0003:11FF:3331.000A: hidraw0: USB HID v0.00 Device [HID 11ff:3331] on usb-dummy_hcd.5-1/input0
[  290.098102][T15307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2110'.
[  290.100747][T15307] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2110'.
[  290.179073][T15317] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2114'.
[  290.222187][ T6059] usb 6-1: USB disconnect, device number 10
[  290.251307][ T9361] kernel write not supported for file /1573/clear_refs (pid: 9361 comm: kworker/0:6)
[  290.442477][T15337] loop2: detected capacity change from 0 to 32768
[  290.514358][T15337] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  290.514374][T15337]   allowing incompatible features above 0.0: (unknown version)
[  290.514380][T15337]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  290.529386][T15337] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  290.532590][T15337] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[  290.535910][T15337] bcachefs (loop2): Version upgrade required:
[  290.535910][T15337] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  290.535910][T15337] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  290.535910][T15337]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  290.567414][T15337] bcachefs (loop2): dropping and reconstructing all alloc info
[  290.586185][T15337] bcachefs (loop2): accounting_read... done
[  290.591833][T15337] bcachefs (loop2): alloc_read... done
[  290.594520][T15337] bcachefs (loop2): snapshots_read... done
[  290.597229][T15337] bcachefs (loop2): check_allocations... done
[  290.616025][T15337] bcachefs (loop2): going read-write
[  290.622602][T15337] bcachefs (loop2): done starting filesystem
[  290.675825][ T5962] bcachefs (loop2): shutting down
[  290.677470][ T5962] bcachefs (loop2): going read-only
[  290.679101][ T5962] bcachefs (loop2): finished waiting for writes to stop
[  290.681596][ T5962] bcachefs (loop2): flushing journal and stopping allocators, journal seq 10
[  290.686507][ T5962] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 10
[  290.698242][ T5962] bcachefs (loop2): unclean shutdown complete, journal seq 11
[  290.701431][ T5962] bcachefs (loop2): done going read-only, filesystem not clean
[  290.719507][ T5962] bcachefs (loop2): shutdown complete
[  290.895741][T15364] loop5: detected capacity change from 0 to 2048
[  290.899870][T15364] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  290.908157][T15364] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  292.551607][T15434] binder: BC_ACQUIRE_RESULT not supported
[  292.558184][T15434] binder: 15433:15434 ioctl c0306201 200000000480 returned -22
[  292.682239][    T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  292.862870][    T9] usb 6-1: Using ep0 maxpacket: 16
[  292.889834][    T9] usb 6-1: config 1 interface 0 has no altsetting 0
[  292.929338][    T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.40
[  292.944488][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.951820][    T9] usb 6-1: Product: syz
[  292.953247][    T9] usb 6-1: Manufacturer: syz
[  292.954811][    T9] usb 6-1: SerialNumber: syz
[  293.546112][T15452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2148'.
[  293.685565][    T9] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input15
[  293.897875][T15457] loop2: detected capacity change from 0 to 32768
[  293.903059][T15457] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2149 (15457)
[  293.915433][T15457] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  293.918942][T15457] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  293.922297][T15457] BTRFS info (device loop2): using free-space-tree
[  293.981949][   T33] audit: type=1800 audit(1755041018.715:175): pid=15457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2149" name="file0" dev="loop2" ino=258 res=0 errno=0
[  294.035839][ T5962] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  294.116302][ T5279] bcm5974 6-1:1.0: could not read from device
[  294.120470][ T6051] usb 6-1: USB disconnect, device number 11
[  294.272038][T15498] IPv6: addrconf: prefix option has invalid lifetime
[  295.835147][T15573] loop5: detected capacity change from 0 to 4096
[  295.839402][T15573] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  296.376823][T15603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2195'.
[  297.028139][   T47] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  297.371942][   T47] usb 3-1: config 0 has an invalid interface number: 69 but max is 0
[  297.408243][   T47] usb 3-1: config 0 has no interface number 0
[  297.424080][   T47] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  297.427904][   T47] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  297.446598][   T47] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  297.451940][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.454868][   T47] usb 3-1: Product: syz
[  297.456403][   T47] usb 3-1: Manufacturer: syz
[  297.458058][   T47] usb 3-1: SerialNumber: syz
[  297.463899][   T47] usb 3-1: config 0 descriptor??
[  297.469174][T15609] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  297.485596][   T47] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  297.497379][   T47] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  297.677878][    C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22
[  297.878040][ T6059] usb 3-1: USB disconnect, device number 29
[  298.331970][ T6059] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  298.342523][ T6059] cyberjack 3-1:0.69: device disconnected
[  298.599196][ T9361] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  298.637482][T15674] fuse: Bad value for 'fd'
[  298.643078][T15674] fuse: Bad value for 'fd'
[  298.762337][ T9361] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  298.766670][ T9361] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  298.773798][ T9361] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  298.777509][ T9361] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  298.781019][ T9361] usb 6-1: SerialNumber: syz
[  299.034331][ T9361] usb 6-1: 0:2 : does not exist
[  299.046286][ T9361] usb 6-1: USB disconnect, device number 12
[  299.842430][T15721] loop5: detected capacity change from 0 to 4096
[  299.889916][T15728] loop2: detected capacity change from 0 to 1024
[  299.899813][T15728] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  299.921111][T15721] ntfs3(loop5): ino=19, mi_enum_attr
[  299.923633][T15721] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  300.051601][T15737] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8)
[  300.324150][T15755] loop5: detected capacity change from 0 to 4096
[  300.487130][T15768] loop2: detected capacity change from 0 to 512
[  300.512474][T15768] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  300.556167][T15768] EXT4-fs (loop2): 1 truncate cleaned up
[  300.560683][T15768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  300.586322][   T33] audit: type=1800 audit(1755041025.329:176): pid=15768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2251" name="file1" dev="loop2" ino=15 res=0 errno=0
[  301.015549][ T5962] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.391936][T15787] loop2: detected capacity change from 0 to 32768
[  301.398645][T15787] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2254 (15787)
[  301.409297][T15787] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  301.413500][T15787] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  301.417269][T15787] BTRFS info (device loop2): using free-space-tree
[  301.478250][ T5962] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  301.610374][   T96] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  301.789501][   T96] usb 6-1: config 0 has an invalid interface number: 52 but max is 0
[  301.792741][   T96] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  301.797083][   T96] usb 6-1: config 0 has no interface number 0
[  301.802742][   T96] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  301.808669][   T96] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  301.812851][   T96] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  301.820502][   T96] usb 6-1: config 0 interface 52 has no altsetting 0
[  301.824705][   T96] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00
[  301.834033][   T96] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35
[  301.839562][   T96] usb 6-1: SerialNumber: syz
[  301.844445][   T96] usb 6-1: config 0 descriptor??
[  302.056874][   T96] synaptics_usb 6-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  302.063878][   T96] synaptics_usb 6-1:0.52: probe with driver synaptics_usb failed with error -5
[  302.265923][   T96] usb 6-1: USB disconnect, device number 13
[  302.278793][T15843] CIFS mount error: No usable UNC path provided in device string!
[  302.278793][T15843] 
[  302.283310][T15843] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  303.160756][T15881] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  303.235725][T15885] loop5: detected capacity change from 0 to 1024
[  303.264909][   T33] audit: type=1800 audit(1755041028.010:177): pid=15885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2278" name="file1" dev="loop5" ino=20 res=0 errno=0
[  303.266177][T15885] syz.5.2278: attempt to access beyond end of device
[  303.266177][T15885] loop5: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  303.623593][T15910] loop2: detected capacity change from 0 to 256
[  303.628823][T15910] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  303.636153][T15910] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  303.644747][T15910] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  303.651552][T15910] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  303.656072][   T33] audit: type=1800 audit(1755041028.400:178): pid=15910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2288" name="file0" dev="loop2" ino=1048725 res=0 errno=0
[  303.830922][T15916] loop2: detected capacity change from 0 to 4096
[  303.853194][   T33] audit: type=1326 audit(1755041028.600:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15925 comm="syz.1.2293" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8098ebe9 code=0x7ffc0000
[  303.871719][   T33] audit: type=1326 audit(1755041028.610:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15925 comm="syz.1.2293" exe="/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fee8098ebe9 code=0x7ffc0000
[  303.882747][   T33] audit: type=1326 audit(1755041028.610:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15925 comm="syz.1.2293" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8098ebe9 code=0x7ffc0000
[  303.893052][   T33] audit: type=1326 audit(1755041028.610:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15925 comm="syz.1.2293" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8098ebe9 code=0x7ffc0000
[  304.156308][   T96] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  304.306313][   T96] usb 3-1: Using ep0 maxpacket: 32
[  304.310710][   T96] usb 3-1: config 0 has an invalid interface number: 30 but max is 0
[  304.314396][   T96] usb 3-1: config 0 has no interface number 0
[  304.322353][   T96] usb 3-1: New USB device found, idVendor=061d, idProduct=c180, bcdDevice=fc.f0
[  304.326285][   T96] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.329713][   T96] usb 3-1: Product: syz
[  304.331522][   T96] usb 3-1: Manufacturer: syz
[  304.333687][   T96] usb 3-1: SerialNumber: syz
[  304.342146][   T96] usb 3-1: config 0 descriptor??
[  304.347393][   T96] quatech2 3-1:0.30: Quatech 2nd gen USB to Serial Driver converter detected
[  304.554170][   T96] usb 3-1: qt2_attach - failed to power on unit: -71
[  304.566556][   T96] quatech2 3-1:0.30: probe with driver quatech2 failed with error -71
[  304.572682][   T96] usb 3-1: USB disconnect, device number 30
[  304.954976][   T33] audit: type=1326 audit(1755041029.701:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15953 comm="syz.5.2301" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa802b8ebe9 code=0x7ffe0000
[  305.904975][ T9361] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  306.146734][ T9361] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  306.149612][ T9361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.166009][ T9361] usb 3-1: config 0 descriptor??
[  306.824657][ T9361] ath6kl: Failed to submit usb control message: -71
[  306.827695][ T9361] ath6kl: unable to send the bmi data to the device: -71
[  306.830444][ T9361] ath6kl: Unable to send get target info: -71
[  306.835701][ T9361] ath6kl: Failed to init ath6kl core: -71
[  306.839854][ T9361] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[  306.848190][ T9361] usb 3-1: USB disconnect, device number 31
[  306.947651][T16020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2324'.
[  306.950998][T16020] bridge_slave_1: left allmulticast mode
[  306.952875][T16020] bridge_slave_1: left promiscuous mode
[  306.955523][T16020] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.968145][T16020] bridge_slave_0: left allmulticast mode
[  306.970079][T16020] bridge_slave_0: left promiscuous mode
[  306.972106][T16020] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.188658][   T33] audit: type=1326 audit(1755041031.932:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16031 comm="syz.5.2326" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa802b8ebe9 code=0x0
[  307.253388][T16036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2329'.
[  307.267980][T16036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2329'.
[  307.277967][T16034] loop2: detected capacity change from 0 to 4096
[  307.284482][T16034] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  307.298142][T16034] ntfs3(loop2): Failed to initialize MFT zone (-22).
[  307.409995][T16051] loop5: detected capacity change from 0 to 1024
[  307.453696][T16054] sctp: [Deprecated]: syz.2.2336 (pid 16054) Use of int in max_burst socket option.
[  307.453696][T16054] Use struct sctp_assoc_value instead
[  307.941532][T16062] loop2: detected capacity change from 0 to 4096
[  307.970805][T16062] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  307.984967][T16062] ntfs3(loop2): Failed to load $Extend (-22).
[  307.987637][T16062] ntfs3(loop2): Failed to initialize $Extend.
[  308.006201][T16062] ntfs3(loop2): ino=21, The size of extended attributes must not exceed 64KiB
[  308.988974][ T9361] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  309.160552][ T9361] usb 6-1: Using ep0 maxpacket: 8
[  309.184250][ T9361] usb 6-1: config 0 has an invalid interface number: 130 but max is 0
[  309.187640][ T9361] usb 6-1: config 0 has no interface number 0
[  309.200605][ T9361] usb 6-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56
[  309.206218][ T9361] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.209460][ T9361] usb 6-1: Product: syz
[  309.211156][ T9361] usb 6-1: Manufacturer: syz
[  309.212978][ T9361] usb 6-1: SerialNumber: syz
[  309.528055][ T9361] usb 6-1: config 0 descriptor??
[  309.535035][ T9361] as10x_usb: device has been detected
[  309.537214][ T9361] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e))
[  309.554140][ T9361] usb 6-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))...
[  309.569982][ T9361] as10x_usb: error during firmware upload part1
[  309.572236][ T9361] Registered device PCTV Systems picoStick (74e)
[  309.788022][   T47] usb 6-1: USB disconnect, device number 14
[  309.831439][   T47] Unregistered device PCTV Systems picoStick (74e)
[  309.835105][   T47] as10x_usb: device has been disconnected
[  310.263633][T16130] tipc: Failed to remove unknown binding: 66,1,1/0:3052667327/3052667329
[  310.267497][T16130] tipc: Failed to remove unknown binding: 66,1,1/0:3052667327/3052667329
[  310.539612][T16134] loop5: detected capacity change from 0 to 256
[  310.562208][T16134] exfat: Deprecated parameter 'utf8'
[  310.564456][T16134] exfat: Deprecated parameter 'namecase'
[  310.582422][T16134] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  310.867774][T16147] netlink: 'syz.1.2364': attribute type 10 has an invalid length.
[  310.870238][T16147] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2364'.
[  310.886754][T16147] batman_adv: batadv0: Adding interface: vlan1
[  310.889664][T16147] batman_adv: batadv0: Interface activated: vlan1
[  311.385580][T16157] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  312.911319][T16208] syz_tun: entered allmulticast mode
[  312.919546][T16207] syz_tun: left allmulticast mode
[  313.363914][   T47] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  313.413649][T16214] loop2: detected capacity change from 0 to 1024
[  313.437414][T16214] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  313.459247][ T5962] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.534415][   T47] usb 6-1: config 0 has an invalid interface number: 199 but max is 1
[  313.538530][   T47] usb 6-1: config 0 has no interface number 1
[  313.541170][   T47] usb 6-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  313.545913][   T47] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  313.553686][   T47] usb 6-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  313.558096][   T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  313.562392][   T47] usb 6-1: SerialNumber: syz
[  313.567026][   T47] usb 6-1: config 0 descriptor??
[  313.578497][   T47] usb 6-1: Found UVC 0.00 device <unnamed> (0002:0000)
[  313.581717][   T47] usb 6-1: No valid video chain found.
[  313.882364][   T96] usb 6-1: USB disconnect, device number 15
[  314.292923][   T53] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  314.518525][T16253] netlink: 'syz.2.2396': attribute type 2 has an invalid length.
[  314.531417][T16253] netlink: 'syz.2.2396': attribute type 1 has an invalid length.
[  316.056385][T16303] overlayfs: failed to clone upperpath
[  316.158889][T16313] loop2: detected capacity change from 0 to 8192
[  316.175783][T16320] delete_channel: no stack
[  316.203265][   T33] audit: type=1326 audit(1755041040.957:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16321 comm="syz.1.2426" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8098ebe9 code=0x7ffc0000
[  316.210684][   T33] audit: type=1326 audit(1755041040.967:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16321 comm="syz.1.2426" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8098ebe9 code=0x7ffc0000
[  316.218135][   T33] audit: type=1326 audit(1755041040.967:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16321 comm="syz.1.2426" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fee8098ebe9 code=0x7ffc0000
[  316.226755][   T33] audit: type=1326 audit(1755041040.967:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16321 comm="syz.1.2426" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fee8098ec23 code=0x7ffc0000
[  316.235367][   T33] audit: type=1326 audit(1755041040.967:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16321 comm="syz.1.2426" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fee8098d69f code=0x7ffc0000
[  316.248748][   T33] audit: type=1326 audit(1755041040.967:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16321 comm="syz.1.2426" exe="/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fee8098ec77 code=0x7ffc0000
[  316.257381][   T33] audit: type=1326 audit(1755041040.977:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16321 comm="syz.1.2426" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fee8098d550 code=0x7ffc0000
[  316.265762][   T33] audit: type=1326 audit(1755041040.977:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16321 comm="syz.1.2426" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fee8098d84a code=0x7ffc0000
[  316.282524][   T33] audit: type=1326 audit(1755041040.977:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16321 comm="syz.1.2426" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8098ebe9 code=0x7ffc0000
[  316.287861][T16326] loop2: detected capacity change from 0 to 2048
[  316.289214][   T33] audit: type=1326 audit(1755041040.977:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16321 comm="syz.1.2426" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8098ebe9 code=0x7ffc0000
[  316.309334][T16326] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  316.969897][   T96] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  317.143487][   T96] usb 6-1: unable to get BOS descriptor or descriptor too short
[  317.146958][   T96] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  317.150899][   T96] usb 6-1: config 1 has no interface number 1
[  317.157236][   T96] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  317.164096][   T96] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.168806][   T96] usb 6-1: Product: syz
[  317.171942][   T96] usb 6-1: Manufacturer: syz
[  317.175672][   T96] usb 6-1: SerialNumber: syz
[  317.409416][   T96] usb 6-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  317.414365][   T96] usb 6-1: 2:1 : sample bitwidth 139 in over sample bytes 13
[  317.416947][   T96] usb 6-1: 2:1 : unsupported sample bitwidth 139 in 13 bytes
[  317.455051][   T96] usb 6-1: USB disconnect, device number 16
[  317.723438][T16403] loop2: detected capacity change from 0 to 764
[  317.727523][T16403] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  317.887146][T16414] loop2: detected capacity change from 0 to 256
[  317.916803][T16414] FAT-fs (loop2): Directory bread(block 64) failed
[  317.920752][T16414] FAT-fs (loop2): Directory bread(block 65) failed
[  317.922895][T16414] FAT-fs (loop2): Directory bread(block 66) failed
[  317.925115][T16414] FAT-fs (loop2): Directory bread(block 67) failed
[  317.927507][T16414] FAT-fs (loop2): Directory bread(block 68) failed
[  317.935662][T16414] FAT-fs (loop2): Directory bread(block 69) failed
[  317.938238][T16414] FAT-fs (loop2): Directory bread(block 70) failed
[  317.940552][T16414] FAT-fs (loop2): Directory bread(block 71) failed
[  317.942931][T16414] FAT-fs (loop2): Directory bread(block 72) failed
[  317.945843][T16414] FAT-fs (loop2): Directory bread(block 73) failed
[  318.178311][T16432] loop2: detected capacity change from 0 to 1024
[  318.184108][T16432] EXT4-fs: Ignoring removed nobh option
[  318.186764][T16432] EXT4-fs: inline encryption not supported
[  318.211010][T16432] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  318.298384][T16432] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[  318.399435][ T5962] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.709475][T16503] netlink: 'syz.1.2479': attribute type 29 has an invalid length.
[  319.913799][T16523] loop2: detected capacity change from 0 to 1024
[  319.922880][T16523] EXT4-fs (loop2): blocks per group (131072) and clusters per group (8192) inconsistent
[  319.959672][ T9361] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  320.092932][T16535] netlink: 'syz.2.2486': attribute type 1 has an invalid length.
[  320.432358][ T9361] usb 6-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0
[  320.447674][ T9361] usb 6-1: config 0 interface 0 has no altsetting 0
[  320.453683][ T9361] usb 6-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00
[  320.457941][ T9361] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.531986][ T9361] usb 6-1: config 0 descriptor??
[  321.183497][ T9361] elecom 0003:056E:010C.000B: hidraw0: USB HID v8.00 Device [HID 056e:010c] on usb-dummy_hcd.5-1/input0
[  321.388100][   T96] usb 6-1: USB disconnect, device number 17
[  321.663693][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  321.663712][   T33] audit: type=1326 audit(1755041046.419:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16565 comm="syz.2.2491" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f798ebe9 code=0x7ffc0000
[  321.675173][   T33] audit: type=1326 audit(1755041046.419:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16565 comm="syz.2.2491" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f798ebe9 code=0x7ffc0000
[  321.684422][   T33] audit: type=1326 audit(1755041046.429:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16565 comm="syz.2.2491" exe="/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f61f798ebe9 code=0x7ffc0000
[  321.821831][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  321.824695][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  322.132767][T16568] loop5: detected capacity change from 0 to 32768
[  322.140947][T16568] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2492 (16568)
[  322.151831][T16568] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  322.155846][T16568] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  322.160354][T16568] BTRFS info (device loop5): using free-space-tree
[  322.210915][   T33] audit: type=1800 audit(1755041046.970:203): pid=16568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2492" name="file1" dev="loop5" ino=260 res=0 errno=0
[  322.336151][T12968] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  322.589145][T16598] netlink: 'syz.5.2494': attribute type 10 has an invalid length.
[  323.668763][T16620] overlayfs: failed to resolve './file0': -2
[  323.794664][T16621] loop5: detected capacity change from 0 to 2048
[  323.817832][T16621] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  323.860985][T16613] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  323.871215][T16613] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28
[  323.877859][T16613] EXT4-fs (loop5): This should not happen!! Data will be lost
[  323.877859][T16613] 
[  323.881474][T16613] EXT4-fs (loop5): Total free blocks count 0
[  323.883840][T16613] EXT4-fs (loop5): Free/Dirty block details
[  323.886021][T16613] EXT4-fs (loop5): free_blocks=2415919504
[  323.888226][T16613] EXT4-fs (loop5): dirty_blocks=16
[  323.889919][T16613] EXT4-fs (loop5): Block reservation details
[  323.892114][T16613] EXT4-fs (loop5): i_reserved_data_blocks=1
[  324.044267][T16617] loop2: detected capacity change from 0 to 32768
[  324.319716][T12968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.497291][T16638] netlink: 'syz.5.2507': attribute type 1 has an invalid length.
[  324.603920][T16642] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2510'.
[  324.655538][T16640] loop5: detected capacity change from 0 to 4096
[  324.662405][ T5972] Bluetooth: hci2: Malformed Event: 0x2f
[  325.080224][   T33] audit: type=1326 audit(1755041049.771:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.2.2508" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f798ebe9 code=0x7ffc0000
[  325.101096][   T33] audit: type=1326 audit(1755041049.771:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.2.2508" exe="/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f61f798ebe9 code=0x7ffc0000
[  325.154412][   T33] audit: type=1326 audit(1755041049.771:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.2.2508" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f798ebe9 code=0x7ffc0000
[  325.244844][   T33] audit: type=1326 audit(1755041049.771:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.2.2508" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f61f798ebe9 code=0x7ffc0000
[  325.255967][   T33] audit: type=1326 audit(1755041049.771:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.2.2508" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f798ebe9 code=0x7ffc0000
[  325.265438][   T33] audit: type=1326 audit(1755041049.771:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.2.2508" exe="/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f61f798ebe9 code=0x7ffc0000
[  325.338241][   T96] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  325.495997][   T96] usb 3-1: Using ep0 maxpacket: 32
[  325.501692][   T96] usb 3-1: config 0 has an invalid interface number: 155 but max is 0
[  325.505108][   T96] usb 3-1: config 0 has no interface number 0
[  325.509483][T16682] delete_channel: no stack
[  325.512622][   T96] usb 3-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=a7.4c
[  325.515929][   T96] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.518748][   T96] usb 3-1: Product: syz
[  325.520143][   T96] usb 3-1: Manufacturer: syz
[  325.521863][   T96] usb 3-1: SerialNumber: syz
[  325.535997][   T96] usb 3-1: config 0 descriptor??
[  326.121122][T16712] loop5: detected capacity change from 0 to 1024
[  326.138032][T16712] EXT4-fs: Ignoring removed bh option
[  326.174473][T16712] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  326.201980][T16719] 9pnet_fd: Insufficient options for proto=fd
[  326.231624][T16712] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt.
[  326.241878][T16712] EXT4-fs (loop5): Remounting filesystem read-only
[  326.280714][T12968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.391733][T16767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  327.643574][   T96] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.155/input/input17
[  327.669874][ T5279] bcm5974 3-1:0.155: could not read from device
[  327.710537][   T96] usb 3-1: USB disconnect, device number 32
[  327.713942][ T5279] bcm5974 3-1:0.155: could not read from device
[  329.154765][T16822] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2580'.
[  329.489315][T16840] loop5: detected capacity change from 0 to 1024
[  329.562606][T16840] EXT4-fs: Ignoring removed nobh option
[  329.564751][T16840] EXT4-fs: Ignoring removed bh option
[  329.604840][T16840] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  329.634502][T16829] loop2: detected capacity change from 0 to 32768
[  329.669918][T16829] jfs_mkdir: dtInsert returned -EIO
[  329.675303][T16829] ERROR: (device loop2): jfs_mkdir: 
[  329.675303][T16829] 
[  329.685380][T16829] ERROR: (device loop2): remounting filesystem as read-only
[  329.806844][T12968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.851197][T16857] loop2: detected capacity change from 0 to 1024
[  329.869688][T16857] hfsplus: request for non-existent node 24 in B*Tree
[  329.876116][T16857] hfsplus: request for non-existent node 24 in B*Tree
[  329.973075][T16870] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2596'.
[  330.005541][T16874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2598'.
[  330.065902][T16882] netlink: 146840 bytes leftover after parsing attributes in process `syz.5.2602'.
[  330.248204][T16893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2606'.
[  330.254732][T16893] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  330.555794][T16903] loop2: detected capacity change from 0 to 512
[  330.560506][T16903] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  330.567195][T16903] EXT4-fs (loop2): orphan cleanup on readonly fs
[  330.569880][T16903] EXT4-fs error (device loop2): __ext4_iget:5464: inode #11: block 8: comm syz.2.2611: invalid block
[  330.577554][T16903] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2611: couldn't read orphan inode 11 (err -117)
[  330.588929][T16903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  330.606487][T16903] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (57259!=33349)
[  330.631230][ T5962] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.946205][T16944] loop5: detected capacity change from 0 to 1024
[  330.964290][ T5972] Bluetooth: hci2: Unknown advertising packet type: 0x7f
[  330.964333][ T5972] Bluetooth: hci2: Unknown advertising packet type: 0x5d
[  330.966660][ T5972] Bluetooth: hci2: Unknown advertising packet type: 0x7f
[  330.968796][ T5972] Bluetooth: hci2: Unknown advertising packet type: 0x7f
[  330.970986][ T5972] Bluetooth: hci2: Malformed LE Event: 0x0d
[  330.980907][T16947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2629'.
[  330.999160][  T155] hfsplus: b-tree write err: -5, ino 3
[  331.075128][T16954] loop5: detected capacity change from 0 to 4096
[  331.101631][T16956] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  331.183555][ T9361] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  331.210411][T16962] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2633'.
[  331.213624][T16962] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2633'.
[  331.667518][ T9361] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  331.671237][ T9361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.675304][ T9361] usb 3-1: Product: syz
[  331.677164][ T9361] usb 3-1: Manufacturer: syz
[  331.679161][ T9361] usb 3-1: SerialNumber: syz
[  331.690599][ T9361] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  331.708289][ T6059] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  332.529483][ T6051] usb 3-1: USB disconnect, device number 33
[  332.569258][T16985] loop5: detected capacity change from 0 to 256
[  332.590771][T16985] FAT-fs (loop5): Directory bread(block 64) failed
[  332.594618][T16985] FAT-fs (loop5): Directory bread(block 65) failed
[  332.598518][T16985] FAT-fs (loop5): Directory bread(block 66) failed
[  332.601167][T16985] FAT-fs (loop5): Directory bread(block 67) failed
[  332.604499][T16985] FAT-fs (loop5): Directory bread(block 68) failed
[  332.607118][T16985] FAT-fs (loop5): Directory bread(block 69) failed
[  332.609919][T16985] FAT-fs (loop5): Directory bread(block 70) failed
[  332.614427][T16985] FAT-fs (loop5): Directory bread(block 71) failed
[  332.617138][T16985] FAT-fs (loop5): Directory bread(block 72) failed
[  332.619733][T16985] FAT-fs (loop5): Directory bread(block 73) failed
[  332.666914][T16985] syz.5.2640: attempt to access beyond end of device
[  332.666914][T16985] loop5: rw=1, sector=1224, nr_sectors = 64 limit=256
[  332.672505][T16985] syz.5.2640: attempt to access beyond end of device
[  332.672505][T16985] loop5: rw=1, sector=1320, nr_sectors = 36 limit=256
[  333.026577][T16990] loop5: detected capacity change from 0 to 32768
[  333.036307][T16990] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2641 (16990)
[  333.049406][T16990] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  333.054718][T16990] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  333.058497][T16990] BTRFS info (device loop5): using free-space-tree
[  333.116549][   T33] kauditd_printk_skb: 39 callbacks suppressed
[  333.116561][   T33] audit: type=1800 audit(1755041057.875:249): pid=16990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2641" name="file1" dev="loop5" ino=260 res=0 errno=0
[  333.149698][T17015] loop2: detected capacity change from 0 to 16
[  333.158260][T17015] erofs (device loop2): mounted with root inode @ nid 36.
[  333.165023][T17015] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36
[  333.171190][T17015] erofs (device loop2): failed to decompress -29 in[58, 4038] out[1851]
[  333.177032][T17015] erofs (device loop2): read error -117 @ 43 of nid 36
[  333.248434][T12968] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  333.342052][ T6059] usb 3-1: Service connection timeout for: 259
[  333.344339][ T6059] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
[  333.347960][ T6059] ath9k_htc: Failed to initialize the device
[  333.349729][T17021] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36
[  333.356410][ T6051] usb 3-1: ath9k_htc: USB layer deinitialized
[  333.359960][T17021] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36
[  333.392730][T17021] erofs (device loop2): readahead error at folio 42 @ nid 36
[  333.397421][T17021] erofs (device loop2): bogus lookback distance 774 @ lcn 40 of nid 36
[  333.400312][T17021] erofs (device loop2): readahead error at folio 41 @ nid 36
[  333.407560][T17021] erofs (device loop2): bogus lookback distance 774 @ lcn 40 of nid 36
[  333.414487][T17021] erofs (device loop2): readahead error at folio 40 @ nid 36
[  333.442279][T17021] erofs (device loop2): readahead error at folio 39 @ nid 36
[  333.447823][T17021] erofs (device loop2): readahead error at folio 38 @ nid 36
[  333.463116][T17021] erofs (device loop2): readahead error at folio 36 @ nid 36
[  333.470611][T17021] erofs (device loop2): bogus lookback distance 1468 @ lcn 31 of nid 36
[  333.477137][T17021] erofs (device loop2): readahead error at folio 31 @ nid 36
[  333.504529][T17021] erofs (device loop2): readahead error at folio 25 @ nid 36
[  333.507588][T17021] erofs (device loop2): readahead error at folio 24 @ nid 36
[  333.514167][T17021] erofs (device loop2): readahead error at folio 19 @ nid 36
[  333.523276][T17021] syz.2.2644: attempt to access beyond end of device
[  333.523276][T17021] loop2: rw=524288, sector=784, nr_sectors = 64 limit=16
[  333.547447][T17021] syz.2.2644: attempt to access beyond end of device
[  333.547447][T17021] loop2: rw=524288, sector=13478624080, nr_sectors = 24 limit=16
[  333.564410][T17021] syz.2.2644: attempt to access beyond end of device
[  333.564410][T17021] loop2: rw=524288, sector=13478624032, nr_sectors = 48 limit=16
[  333.614019][T17021] erofs (device loop2): failed to decompress -29 in[58, 4038] out[2639]
[  333.631990][T17021] erofs (device loop2): bogus lookback distance 1586 @ lcn 46 of nid 36
[  333.637959][T17021] erofs (device loop2): readahead error at folio 47 @ nid 36
[  333.647647][T17021] erofs (device loop2): bogus lookback distance 1586 @ lcn 46 of nid 36
[  333.677450][T17021] erofs (device loop2): readahead error at folio 46 @ nid 36
[  333.684198][T17021] erofs (device loop2): readahead error at folio 45 @ nid 36
[  333.688319][T17021] syz.2.2644: attempt to access beyond end of device
[  333.688319][T17021] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16
[  333.713044][T17021] erofs (device loop2): failed to decompress -29 in[58, 4038] out[3537]
[  333.738085][T17029] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2646'.
[  335.796032][T17080] overlayfs: failed to resolve './cgroup': -2
[  336.118165][ T6051] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  336.401295][ T6051] usb 6-1: Using ep0 maxpacket: 32
[  336.405698][ T6051] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  336.415343][ T6051] usb 6-1: config 0 interface 0 has no altsetting 0
[  336.419653][ T6051] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  336.428079][ T6051] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.433919][ T6051] usb 6-1: config 0 descriptor??
[  337.208270][ T6051] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0
[  337.211531][ T6051] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0
[  337.214796][ T6051] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0
[  337.217895][ T6051] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0
[  337.225436][ T6051] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0
[  337.243255][ T6051] corsair-cpro 0003:1B1C:0C10.000C: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0
[  337.451188][T17129] pim6reg: entered allmulticast mode
[  337.456319][T17129] pim6reg: left allmulticast mode
[  337.715859][ T6051] corsair-cpro 0003:1B1C:0C10.000C: probe with driver corsair-cpro failed with error -110
[  337.727867][ T6051] usb 6-1: USB disconnect, device number 18
[  338.369386][ T6051] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  338.519685][ T6051] usb 6-1: Using ep0 maxpacket: 8
[  338.523895][ T6051] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3
[  338.528674][ T6051] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  338.543985][ T6051] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  338.547940][ T6051] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.554288][ T6051] usb 6-1: Product: syz
[  338.561313][ T6051] usb 6-1: Manufacturer: syz
[  338.563186][ T6051] usb 6-1: SerialNumber: syz
[  338.578633][ T6051] usb 6-1: config 0 descriptor??
[  338.592143][ T6051] streamzap 6-1:0.0: streamzap_probe: endpoint doesn't match input device 0203
[  338.795932][ T6059] usb 6-1: USB disconnect, device number 19
[  339.120981][T17202] loop2: detected capacity change from 0 to 4096
[  339.125594][T17202] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  339.548872][ T6059] usb 3-1: new full-speed USB device number 34 using dummy_hcd
[  339.601718][T17237] kAFS: unable to lookup cell '.,'
[  339.710969][ T6059] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  339.715572][ T6059] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  339.725811][ T6059] usb 3-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00
[  339.738779][ T6059] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.745569][ T6059] usb 3-1: config 0 descriptor??
[  340.210566][ T6059] uclogic 0003:5543:0003.000D: unknown main item tag 0x0
[  340.216178][ T6059] uclogic 0003:5543:0003.000D: unknown main item tag 0x0
[  340.219542][ T6059] uclogic 0003:5543:0003.000D: unknown main item tag 0x0
[  340.226330][ T6059] uclogic 0003:5543:0003.000D: unknown main item tag 0x0
[  340.231671][ T6059] uclogic 0003:5543:0003.000D: unknown main item tag 0x0
[  340.240671][ T6059] uclogic 0003:5543:0003.000D: hidraw0: USB HID v0.00 Device [HID 5543:0003] on usb-dummy_hcd.2-1/input0
[  340.410660][   T96] usb 3-1: USB disconnect, device number 34
[  341.095849][T17282] loop2: detected capacity change from 0 to 256
[  341.101188][T17282] exfat: Deprecated parameter 'utf8'
[  341.103303][T17282] exfat: Deprecated parameter 'namecase'
[  341.105674][T17282] exfat: Deprecated parameter 'utf8'
[  341.118491][T17282] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  342.401922][T17313] netlink: 'syz.2.2744': attribute type 1 has an invalid length.
[  342.665202][T17319] ==================================================================
[  342.667696][T17319] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  342.670031][T17319] Read of size 4 at addr ffff8880275f00c4 by task syz.2.2746/17319
[  342.672780][T17319] 
[  342.674080][T17319] CPU: 1 UID: 0 PID: 17319 Comm: syz.2.2746 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  342.674103][T17319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  342.674116][T17319] Call Trace:
[  342.674124][T17319]  <TASK>
[  342.674131][T17319]  dump_stack_lvl+0x189/0x250
[  342.674148][T17319]  ? __kasan_check_byte+0x12/0x40
[  342.674163][T17319]  ? __pfx_dump_stack_lvl+0x10/0x10
[  342.674173][T17319]  ? lock_release+0x4b/0x3e0
[  342.674432][T17319]  ? __virt_addr_valid+0x4a5/0x5c0
[  342.674443][T17319]  print_report+0xca/0x240
[  342.674453][T17319]  ? xfrm_alloc_spi+0x570/0xf30
[  342.674466][T17319]  kasan_report+0x118/0x150
[  342.674479][T17319]  ? xfrm_alloc_spi+0x570/0xf30
[  342.674493][T17319]  xfrm_alloc_spi+0x570/0xf30
[  342.674504][T17319]  ? xfrm_alloc_spi+0x2a0/0xf30
[  342.674518][T17319]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  342.674533][T17319]  ? xfrm_find_acq+0x87/0xa0
[  342.674547][T17319]  xfrm_alloc_userspi+0x70b/0xc90
[  342.674557][T17319]  ? apparmor_capable+0x137/0x1b0
[  342.674566][T17319]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  342.674574][T17319]  ? __nla_parse+0x40/0x60
[  342.674586][T17319]  xfrm_user_rcv_msg+0x7a3/0xab0
[  342.674596][T17319]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  342.674610][T17319]  ? __pfx___mutex_trylock_common+0x10/0x10
[  342.674621][T17319]  ? rcu_is_watching+0x15/0xb0
[  342.674632][T17319]  ? trace_contention_end+0x39/0x120
[  342.674641][T17319]  ? __mutex_lock+0x335/0x1360
[  342.674653][T17319]  netlink_rcv_skb+0x208/0x470
[  342.674664][T17319]  ? rcu_is_watching+0x15/0xb0
[  342.674671][T17319]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  342.674679][T17319]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  342.674692][T17319]  ? netlink_deliver_tap+0x2e/0x1b0
[  342.674702][T17319]  xfrm_netlink_rcv+0x79/0x90
[  342.674710][T17319]  netlink_unicast+0x82f/0x9e0
[  342.674721][T17319]  ? __pfx_netlink_unicast+0x10/0x10
[  342.674729][T17319]  ? netlink_sendmsg+0x642/0xb30
[  342.674739][T17319]  ? skb_put+0x11b/0x210
[  342.674750][T17319]  netlink_sendmsg+0x805/0xb30
[  342.674761][T17319]  ? __pfx_netlink_sendmsg+0x10/0x10
[  342.674773][T17319]  ? __pfx_netlink_sendmsg+0x10/0x10
[  342.674782][T17319]  __sock_sendmsg+0x21c/0x270
[  342.674792][T17319]  ____sys_sendmsg+0x505/0x830
[  342.674804][T17319]  ? __pfx_____sys_sendmsg+0x10/0x10
[  342.674816][T17319]  ? import_iovec+0x74/0xa0
[  342.674824][T17319]  ___sys_sendmsg+0x21f/0x2a0
[  342.674835][T17319]  ? __pfx____sys_sendmsg+0x10/0x10
[  342.674852][T17319]  ? __fget_files+0x2a/0x420
[  342.674864][T17319]  ? __fget_files+0x3a0/0x420
[  342.674877][T17319]  __x64_sys_sendmsg+0x19b/0x260
[  342.674888][T17319]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  342.674901][T17319]  ? rcu_is_watching+0x15/0xb0
[  342.674909][T17319]  ? do_syscall_64+0xbe/0x3b0
[  342.674920][T17319]  do_syscall_64+0xfa/0x3b0
[  342.674937][T17319]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.674945][T17319]  ? asm_sysvec_call_function_single+0x1a/0x20
[  342.674955][T17319]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.674964][T17319] RIP: 0033:0x7f61f798ebe9
[  342.674975][T17319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  342.674984][T17319] RSP: 002b:00007f61f8893038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  342.674995][T17319] RAX: ffffffffffffffda RBX: 00007f61f7bb6180 RCX: 00007f61f798ebe9
[  342.675002][T17319] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000005
[  342.675007][T17319] RBP: 00007f61f7a11e19 R08: 0000000000000000 R09: 0000000000000000
[  342.675012][T17319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  342.675018][T17319] R13: 00007f61f7bb6218 R14: 00007f61f7bb6180 R15: 00007ffddded6378
[  342.675027][T17319]  </TASK>
[  342.675030][T17319] 
[  342.818312][T17319] Allocated by task 13792:
[  342.820239][T17319]  kasan_save_track+0x3e/0x80
[  342.822135][T17319]  __kasan_slab_alloc+0x6c/0x80
[  342.824086][T17319]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  342.826221][T17319]  xfrm_state_alloc+0x24/0x2f0
[  342.828078][T17319]  xfrm_add_acquire+0xf7/0xb20
[  342.830071][T17319]  xfrm_user_rcv_msg+0x7a3/0xab0
[  342.832296][T17319]  netlink_rcv_skb+0x208/0x470
[  342.834401][T17319]  xfrm_netlink_rcv+0x79/0x90
[  342.836435][T17319]  netlink_unicast+0x82f/0x9e0
[  342.838442][T17319]  netlink_sendmsg+0x805/0xb30
[  342.840356][T17319]  __sock_sendmsg+0x21c/0x270
[  342.842164][T17319]  ____sys_sendmsg+0x505/0x830
[  342.844062][T17319]  ___sys_sendmsg+0x21f/0x2a0
[  342.845909][T17319]  __x64_sys_sendmsg+0x19b/0x260
[  342.847923][T17319]  do_syscall_64+0xfa/0x3b0
[  342.849823][T17319]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.852223][T17319] 
[  342.853189][T17319] Freed by task 13792:
[  342.854884][T17319]  kasan_save_track+0x3e/0x80
[  342.856797][T17319]  kasan_save_free_info+0x46/0x50
[  342.858885][T17319]  __kasan_slab_free+0x5b/0x80
[  342.860894][T17319]  kmem_cache_free+0x18f/0x400
[  342.862975][T17319]  xfrm_add_acquire+0x280/0xb20
[  342.864987][T17319]  xfrm_user_rcv_msg+0x7a3/0xab0
[  342.867010][T17319]  netlink_rcv_skb+0x208/0x470
[  342.868914][T17319]  xfrm_netlink_rcv+0x79/0x90
[  342.870775][T17319]  netlink_unicast+0x82f/0x9e0
[  342.872757][T17319]  netlink_sendmsg+0x805/0xb30
[  342.874827][T17319]  __sock_sendmsg+0x21c/0x270
[  342.876774][T17319]  ____sys_sendmsg+0x505/0x830
[  342.878785][T17319]  ___sys_sendmsg+0x21f/0x2a0
[  342.880696][T17319]  __x64_sys_sendmsg+0x19b/0x260
[  342.882522][T17319]  do_syscall_64+0xfa/0x3b0
[  342.884275][T17319]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.886087][T17319] 
[  342.886850][T17319] The buggy address belongs to the object at ffff8880275f0000
[  342.886850][T17319]  which belongs to the cache xfrm_state of size 928
[  342.892229][T17319] The buggy address is located 196 bytes inside of
[  342.892229][T17319]  freed 928-byte region [ffff8880275f0000, ffff8880275f03a0)
[  342.897863][T17319] 
[  342.898862][T17319] The buggy address belongs to the physical page:
[  342.901506][T17319] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880275f1200 pfn:0x275f0
[  342.905649][T17319] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  342.909334][T17319] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  342.912615][T17319] page_type: f5(slab)
[  342.914277][T17319] raw: 00fff00000000040 ffff888104f63640 dead000000000122 0000000000000000
[  342.917650][T17319] raw: ffff8880275f1200 00000000800e000a 00000000f5000000 0000000000000000
[  342.921233][T17319] head: 00fff00000000040 ffff888104f63640 dead000000000122 0000000000000000
[  342.924961][T17319] head: ffff8880275f1200 00000000800e000a 00000000f5000000 0000000000000000
[  342.928532][T17319] head: 00fff00000000002 ffffea00009d7c01 00000000ffffffff 00000000ffffffff
[  342.931928][T17319] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  342.935371][T17319] page dumped because: kasan: bad access detected
[  342.938138][T17319] page_owner tracks the page as allocated
[  342.940659][T17319] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6536, tgid 6535 (syz.2.248), ts 98635920899, free_ts 70754177877
[  342.948111][T17319]  post_alloc_hook+0x240/0x2a0
[  342.950049][T17319]  get_page_from_freelist+0x21e4/0x22c0
[  342.952362][T17319]  __alloc_frozen_pages_noprof+0x181/0x370
[  342.954832][T17319]  alloc_pages_mpol+0x232/0x4a0
[  342.956903][T17319]  allocate_slab+0x8a/0x370
[  342.958906][T17319]  ___slab_alloc+0xbeb/0x1410
[  342.960852][T17319]  kmem_cache_alloc_noprof+0x283/0x3c0
[  342.963046][T17319]  xfrm_state_alloc+0x24/0x2f0
[  342.965044][T17319]  __find_acq_core+0x8a7/0x1c00
[  342.967141][T17319]  xfrm_find_acq+0x78/0xa0
[  342.969087][T17319]  xfrm_alloc_userspi+0x6b3/0xc90
[  342.971380][T17319]  xfrm_user_rcv_msg+0x7a3/0xab0
[  342.973707][T17319]  netlink_rcv_skb+0x208/0x470
[  342.975682][T17319]  xfrm_netlink_rcv+0x79/0x90
[  342.977594][T17319]  netlink_unicast+0x82f/0x9e0
[  342.979526][T17319]  netlink_sendmsg+0x805/0xb30
[  342.981531][T17319] page last free pid 5856 tgid 5856 stack trace:
[  342.984283][T17319]  __free_frozen_pages+0xbc4/0xd30
[  342.986452][T17319]  __slab_free+0x303/0x3c0
[  342.988345][T17319]  qlist_free_all+0x97/0x140
[  342.990231][T17319]  kasan_quarantine_reduce+0x148/0x160
[  342.992503][T17319]  __kasan_slab_alloc+0x22/0x80
[  342.994625][T17319]  __kmalloc_noprof+0x224/0x4f0
[  342.996780][T17319]  tomoyo_realpath_from_path+0xe3/0x5d0
[  342.999266][T17319]  tomoyo_path_perm+0x213/0x4b0
[  343.001285][T17319]  security_inode_getattr+0x12f/0x330
[  343.003445][T17319]  vfs_fstatat+0xb1/0x170
[  343.005221][T17319]  __x64_sys_newfstatat+0x116/0x190
[  343.007351][T17319]  do_syscall_64+0xfa/0x3b0
[  343.009225][T17319]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  343.011703][T17319] 
[  343.012761][T17319] Memory state around the buggy address:
[  343.014962][T17319]  ffff8880275eff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  343.018492][T17319]  ffff8880275f0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  343.021656][T17319] >ffff8880275f0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  343.024860][T17319]                                            ^
[  343.027275][T17319]  ffff8880275f0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  343.030776][T17319]  ffff8880275f0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  343.034347][T17319] ==================================================================
[  343.038032][    C1] vkms_vblank_simulate: vblank timer overrun
[  343.040693][T17319] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  343.043624][T17319] CPU: 1 UID: 0 PID: 17319 Comm: syz.2.2746 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  343.048828][T17319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  343.053121][T17319] Call Trace:
[  343.054489][T17319]  <TASK>
[  343.055598][T17319]  dump_stack_lvl+0x99/0x250
[  343.057512][T17319]  ? __asan_memcpy+0x40/0x70
[  343.059516][T17319]  ? __pfx_dump_stack_lvl+0x10/0x10
[  343.061913][T17319]  ? __pfx__printk+0x10/0x10
[  343.064103][T17319]  vpanic+0x281/0x750
[  343.066072][T17319]  ? __pfx_vpanic+0x10/0x10
[  343.068153][T17319]  ? irqentry_exit+0x74/0x90
[  343.070251][T17319]  panic+0xb9/0xc0
[  343.071874][T17319]  ? __pfx_panic+0x10/0x10
[  343.073789][T17319]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  343.076442][T17319]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  343.079220][T17319]  ? xfrm_alloc_spi+0x570/0xf30
[  343.081537][T17319]  check_panic_on_warn+0x89/0xb0
[  343.083821][T17319]  ? xfrm_alloc_spi+0x570/0xf30
[  343.085904][T17319]  end_report+0x78/0x160
[  343.087683][T17319]  kasan_report+0x129/0x150
[  343.089673][T17319]  ? xfrm_alloc_spi+0x570/0xf30
[  343.091854][T17319]  xfrm_alloc_spi+0x570/0xf30
[  343.094052][T17319]  ? xfrm_alloc_spi+0x2a0/0xf30
[  343.096404][T17319]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  343.098751][T17319]  ? xfrm_find_acq+0x87/0xa0
[  343.100677][T17319]  xfrm_alloc_userspi+0x70b/0xc90
[  343.102682][T17319]  ? apparmor_capable+0x137/0x1b0
[  343.104836][T17319]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  343.107279][T17319]  ? __nla_parse+0x40/0x60
[  343.109313][T17319]  xfrm_user_rcv_msg+0x7a3/0xab0
[  343.111432][T17319]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  343.113740][T17319]  ? __pfx___mutex_trylock_common+0x10/0x10
[  343.116156][T17319]  ? rcu_is_watching+0x15/0xb0
[  343.118242][T17319]  ? trace_contention_end+0x39/0x120
[  343.120546][T17319]  ? __mutex_lock+0x335/0x1360
[  343.122628][T17319]  netlink_rcv_skb+0x208/0x470
[  343.124793][T17319]  ? rcu_is_watching+0x15/0xb0
[  343.126806][T17319]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  343.129022][T17319]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  343.131250][T17319]  ? netlink_deliver_tap+0x2e/0x1b0
[  343.133519][T17319]  xfrm_netlink_rcv+0x79/0x90
[  343.135607][T17319]  netlink_unicast+0x82f/0x9e0
[  343.137748][T17319]  ? __pfx_netlink_unicast+0x10/0x10
[  343.140084][T17319]  ? netlink_sendmsg+0x642/0xb30
[  343.142131][T17319]  ? skb_put+0x11b/0x210
[  343.143845][T17319]  netlink_sendmsg+0x805/0xb30
[  343.145822][T17319]  ? __pfx_netlink_sendmsg+0x10/0x10
[  343.148147][T17319]  ? __pfx_netlink_sendmsg+0x10/0x10
[  343.150555][T17319]  __sock_sendmsg+0x21c/0x270
[  343.152621][T17319]  ____sys_sendmsg+0x505/0x830
[  343.154670][T17319]  ? __pfx_____sys_sendmsg+0x10/0x10
[  343.156823][T17319]  ? import_iovec+0x74/0xa0
[  343.158684][T17319]  ___sys_sendmsg+0x21f/0x2a0
[  343.160608][T17319]  ? __pfx____sys_sendmsg+0x10/0x10
[  343.162862][T17319]  ? __fget_files+0x2a/0x420
[  343.165156][T17319]  ? __fget_files+0x3a0/0x420
[  343.167344][T17319]  __x64_sys_sendmsg+0x19b/0x260
[  343.169489][T17319]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  343.171599][T17319]  ? rcu_is_watching+0x15/0xb0
[  343.173518][T17319]  ? do_syscall_64+0xbe/0x3b0
[  343.175378][T17319]  do_syscall_64+0xfa/0x3b0
[  343.177313][T17319]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  343.179932][T17319]  ? asm_sysvec_call_function_single+0x1a/0x20
[  343.182652][T17319]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  343.185095][T17319] RIP: 0033:0x7f61f798ebe9
[  343.186843][T17319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  343.193268][T17319] RSP: 002b:00007f61f8893038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  343.196066][T17319] RAX: ffffffffffffffda RBX: 00007f61f7bb6180 RCX: 00007f61f798ebe9
[  343.199133][T17319] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000005
[  343.202152][T17319] RBP: 00007f61f7a11e19 R08: 0000000000000000 R09: 0000000000000000
[  343.205328][T17319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  343.208219][T17319] R13: 00007f61f7bb6218 R14: 00007f61f7bb6180 R15: 00007ffddded6378
[  343.211140][T17319]  </TASK>
[  343.213214][T17319] Kernel Offset: disabled
[  343.215001][T17319] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:20:11  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffff888028ed01e0 RCX=00000000000001b5 RDX=00000000000401b5
RSI=00000000000001b5 RDI=ffff888108c30000 RBP=0000000000000000 RSP=ffffc900042a7ad8
R8 =0000000000000000 R9 =ffffffff820b7950 R10=dffffc0000000000 R11=fffff52000854ecd
R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=ffff888108c30af0
RIP=ffffffff819d615e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f61f88b46c0 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fee80ba4158 CR3=000000011fa96000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f61f7b87498 00007f61f7b87470 XMM03=00007f61f7b874a8 00007f61f7b874a0
XMM04=00007f61f86ed100 00007f61f7b87460 XMM05=00007f61f7b87478 00007f61f7b874c0
XMM06=00007f61f7b874b8 00007f61f7b874b0 XMM07=00007f61f7b874a8 00007f61f7b874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f61f7a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000009 RCX=0000000000080000 RDX=ffffc9002481b000
RSI=0000000000003179 RDI=000000000000317a RBP=000000000000002e RSP=ffffc900042962c8
R8 =ffffc900042963a0 R9 =ffffc900042964c0 R10=0000000000000073 R11=0000000000000002
R12=ffffc900042963e0 R13=dffffc0000000000 R14=00000000000000e0 R15=ffffffff8cc0cf04
RIP=ffffffff81b4c68b RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f61f88936c0 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b31b1cff8 CR3=000000011fa96000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f61f7b87498 00007f61f7b87470 XMM03=00007f61f7b874a8 00007f61f7b874a0
XMM04=00007f61f86ed100 00007f61f7b87460 XMM05=00007f61f7b87478 00007f61f7b874c0
XMM06=00007f61f7b874b8 00007f61f7b874b0 XMM07=00007f61f7b874a8 00007f61f7b874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f61f7a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
