last executing test programs:

3m37.965928665s ago: executing program 0 (id=389):
syz_io_uring_setup(0x3cce, &(0x7f00000000c0)={0x0, 0xe4f, 0x10000, 0xfffffffd, 0x28a}, 0x0, 0x0)
rt_sigqueueinfo(0x0, 0x6, &(0x7f0000000080)={0x13, 0x5, 0x28})

3m37.840632526s ago: executing program 0 (id=392):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc513, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)

3m36.218467257s ago: executing program 0 (id=405):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d80060001"], 0x164}, 0x1, 0x0, 0x0, 0x40011c5}, 0x0)

3m36.101785009s ago: executing program 0 (id=406):
syz_mount_image$minix(&(0x7f0000000540), &(0x7f00000002c0)='./file1\x00', 0x8040, &(0x7f0000000c00)=ANY=[@ANYRES16=0x0], 0xfd, 0x1d0, &(0x7f0000000300)="$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")
syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x808000, &(0x7f00000002c0)=ANY=[@ANYBLOB="00cd067ca5fe94f358a97d3799d10d6a0f0d49553970899fa347aa76be1b2509f63779954a38f01042f578e036051ee7d6d1fb7e07c209e650464433ce970000000900000014c931bb00000000", @ANYRESOCT=0x0], 0x1, 0xa0, &(0x7f0000000000)="$eJzs17GJAlEUBdC7s8vuGjgNGNiBNdiKGGpmpAhWZCuWIIgVmInJyDgziHagngP/Py43fcnbXbaDlEm1Saoni+VqNpk3f/p5MA7voEjyl+Q/ybBs8u+tObRbkOxP62n36ubr3DUAAMArKTKqx3cbj/fmJ0mvvQOaBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCJrgEAAP//sjg1uA==")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
lstat(&(0x7f00000034c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

3m36.051648443s ago: executing program 0 (id=407):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[])
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="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", 0x2000, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x200000005, 0x0, 0x2, 0xf7fffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x80007, 0x0, 0x0, 0xf0ee, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = open(0x0, 0x1800, 0x0)
read$FUSE(r0, 0x0, 0x2160)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@migrate={0xa0, 0x21, 0x1, 0xfffffffc, 0x0, {{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x100000}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, @in=@private=0xa010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}]}]}, 0xa0}}, 0x0)

3m34.839394796s ago: executing program 0 (id=411):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

3m34.66707345s ago: executing program 32 (id=411):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

3m20.010416495s ago: executing program 2 (id=512):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2f00000020200002"], 0x20)

3m19.94593772s ago: executing program 2 (id=513):
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff7ffb, 0x8300)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000180)={0x0, 0x81, 0x2007, 0x1})

3m19.815691559s ago: executing program 2 (id=514):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004002}, 0x4000)

3m19.535810066s ago: executing program 2 (id=516):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@init_itable_val}, {@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_nolock}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
unlink(&(0x7f0000000180)='./file1\x00')

3m19.344340448s ago: executing program 2 (id=519):
r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x43bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg(r3, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="d8ba", 0x2}], 0x1}}], 0x1, 0x20000010)
syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103})
io_uring_enter(r0, 0x800046f3, 0x4, 0x40, 0x0, 0x0)

3m18.734720477s ago: executing program 2 (id=520):
syz_emit_ethernet(0x7e, &(0x7f0000000340)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x70, 0x80, 0x0, 0x8, 0x1, 0x0, @initdev={0xac, 0x1e, 0x8, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x2, 0xb7, 0x0, {0x15, 0x4, 0x1, 0x1, 0x8, 0x66, 0x0, 0x4, 0x33, 0xf, @multicast1, @rand_addr=0x64010100, {[@rr={0x7, 0x1b, 0x65, [@private=0xa010100, @rand_addr=0x64010102, @loopback, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x13}, @multicast1]}, @timestamp={0x44, 0x10, 0x5, 0x0, 0xc, [0x0, 0x8, 0x401]}, @ssrr={0x89, 0x13, 0xb, [@multicast2, @remote, @remote, @local]}]}}}}}}}, 0x0)

3m18.184657567s ago: executing program 33 (id=520):
syz_emit_ethernet(0x7e, &(0x7f0000000340)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x70, 0x80, 0x0, 0x8, 0x1, 0x0, @initdev={0xac, 0x1e, 0x8, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x2, 0xb7, 0x0, {0x15, 0x4, 0x1, 0x1, 0x8, 0x66, 0x0, 0x4, 0x33, 0xf, @multicast1, @rand_addr=0x64010100, {[@rr={0x7, 0x1b, 0x65, [@private=0xa010100, @rand_addr=0x64010102, @loopback, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x13}, @multicast1]}, @timestamp={0x44, 0x10, 0x5, 0x0, 0xc, [0x0, 0x8, 0x401]}, @ssrr={0x89, 0x13, 0xb, [@multicast2, @remote, @remote, @local]}]}}}}}}}, 0x0)

2m29.99208285s ago: executing program 3 (id=945):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r1 = syz_open_pts(r0, 0x101200)
r2 = dup3(r1, r0, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x11)

2m29.810870415s ago: executing program 3 (id=946):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

2m29.752244388s ago: executing program 3 (id=947):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1}], 0x10}, 0x40)

2m29.751864097s ago: executing program 3 (id=948):
capset(0x0, &(0x7f0000000100)={0xffff8001, 0x6, 0x2, 0x2087, 0xffffffff, 0xef})
unshare(0x28000600)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10000, &(0x7f00000002c0), 0x2, 0xbd1, &(0x7f0000001340)="$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")
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000004080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c000, &(0x7f00000004c0)=ANY=[], 0x2, 0x222, &(0x7f0000000800)="$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")
mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000000)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f0000000200)='./file0/file0\x00')
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00')

2m29.612343343s ago: executing program 3 (id=949):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @empty, 0x0, 0x3}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000004680)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c, 0x0}}], 0x1, 0xc000840)

2m29.191110422s ago: executing program 3 (id=951):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x200000, 0x1000, 0xfffffffc, 0x1}, 0x20)

2m29.028640453s ago: executing program 34 (id=951):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x200000, 0x1000, 0xfffffffc, 0x1}, 0x20)

1m46.215654607s ago: executing program 5 (id=1445):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f0000000000)=0x100ce, 0x4)

1m45.300834225s ago: executing program 5 (id=1465):
r0 = socket$tipc(0x1e, 0x5, 0x0)
getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, &(0x7f0000000040))

1m45.202103097s ago: executing program 5 (id=1466):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

1m45.138799355s ago: executing program 5 (id=1467):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000140)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x4444, &(0x7f000000cd00)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1m44.665640875s ago: executing program 5 (id=1472):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400})

1m44.170862552s ago: executing program 5 (id=1474):
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/igmp6\x00')
read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020)
pread64(r0, &(0x7f0000000240)=""/124, 0x7c, 0x20003)

1m44.012786618s ago: executing program 35 (id=1474):
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/igmp6\x00')
read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020)
pread64(r0, &(0x7f0000000240)=""/124, 0x7c, 0x20003)

1.843560056s ago: executing program 1 (id=2724):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000080)=0xffffffffffffffff, 0x4)

1.74360737s ago: executing program 1 (id=2725):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000039000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

1.741185209s ago: executing program 4 (id=2726):
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x80100)
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000180)={0x2, 0x0, 0x8, 0x6, 0x5, 0x3ff, 0xffffffff})

1.60196845s ago: executing program 4 (id=2727):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'wlan0\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000540)={0xc9, 0x1, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

1.184329808s ago: executing program 4 (id=2728):
r0 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r0, 0x114, 0x271d, 0x0, &(0x7f00000000c0))

1.102306331s ago: executing program 4 (id=2729):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000006c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}}, 0x0)

946.664202ms ago: executing program 4 (id=2730):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x8801, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x1000, 0xf, 0x0, 0x0, 0xfc, "f6a6756c9832488c"})
writev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="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", 0x218}], 0x1)

847.64472ms ago: executing program 1 (id=2731):
fanotify_mark(0xffffffffffffffff, 0x10, 0x828, 0xffffffffffffffff, 0x0)

773.737588ms ago: executing program 4 (id=2732):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e23, @empty}], 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
clock_gettime(0xfffffff2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="30e01b3981"], 0x1000f)

773.487188ms ago: executing program 1 (id=2733):
r0 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ftruncate(r0, 0x80079a0)
readv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
sendfile(r0, r0, 0x0, 0x200001)

458.690848ms ago: executing program 1 (id=2738):
r0 = socket(0x2c, 0x3, 0x0)
bind$packet(r0, &(0x7f00000003c0)={0x11, 0xc, 0x0, 0x1, 0x6}, 0x14)

381.388737ms ago: executing program 1 (id=2740):
syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa1f0009051402"], 0x0)

252.642827ms ago: executing program 6 (id=2743):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r0, 0x6)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0)

153.70589ms ago: executing program 6 (id=2744):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}}, 0x0)

103.222583ms ago: executing program 6 (id=2745):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x4b, 0x29, "4372070000001000476fb2940acfbe4c0e24"}})

52.10416ms ago: executing program 6 (id=2746):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0)

3.067711ms ago: executing program 6 (id=2747):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1})

0s ago: executing program 6 (id=2748):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000010640)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2f, 0x5, 0x0, 0x0, 0xf8, 0x0, 0x3, 0xfc, 0x0, 0xfc, 0x0, 0x0, 0x0, 0xff, 0x0, 0x45}})

kernel console output (not intermixed with test programs):

 has invalid wMaxPacketSize 0
[  187.127498][ T5895] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  187.150008][ T5895] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  187.153942][ T5895] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  187.157275][ T5895] usb 6-1: Manufacturer: syz
[  187.164722][ T5895] usb 6-1: config 0 descriptor??
[  187.299364][ T9109] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1070'.
[  187.586257][ T5895] appleir 0003:05AC:8243.000D: unknown main item tag 0x0
[  187.610359][ T5895] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[  188.006819][ T9129] random: crng reseeded on system resumption
[  188.872271][ T9151] mkiss: ax0: crc mode is auto.
[  188.999700][ T9153] loop4: detected capacity change from 0 to 1024
[  189.396356][ T9169] hpfs: Bad magic ... probably not HPFS
[  189.639690][  T974] usb 6-1: USB disconnect, device number 2
[  190.605749][   T33] audit: type=1326 audit(1755041532.866:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9192 comm="syz.1.1104" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a4b8ebe9 code=0x7ffc0000
[  190.632552][   T33] audit: type=1326 audit(1755041532.866:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9192 comm="syz.1.1104" exe="/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f06a4b8ebe9 code=0x7ffc0000
[  190.639400][   T33] audit: type=1326 audit(1755041532.866:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9192 comm="syz.1.1104" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a4b8ebe9 code=0x7ffc0000
[  190.673616][   T33] audit: type=1326 audit(1755041532.866:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9192 comm="syz.1.1104" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a4b8ebe9 code=0x7ffc0000
[  190.750450][ T9198] loop5: detected capacity change from 0 to 1024
[  190.783429][ T9198] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  190.805207][ T9198] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  190.828360][ T9198] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.1106: lblock 3 mapped to illegal pblock 3 (length 3)
[  190.832474][ T5845] Bluetooth: hci2: command 0x0406 tx timeout
[  190.847225][ T9198] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  190.854584][ T9198] EXT4-fs (loop5): This should not happen!! Data will be lost
[  190.854584][ T9198] 
[  190.868584][ T9198] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 4: comm syz.5.1106: lblock 4 mapped to illegal pblock 4 (length 1)
[  190.882713][ T9198] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.1106: Freeing blocks not in datazone - block = 3, count = 1
[  190.900822][ T9198] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 4: comm syz.5.1106: lblock 4 mapped to illegal pblock 4 (length 1)
[  190.921868][ T9198] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 5: comm syz.5.1106: lblock 5 mapped to illegal pblock 5 (length 1)
[  190.923636][ T9204] loop4: detected capacity change from 0 to 16
[  190.929665][   T33] audit: type=1800 audit(1755041533.191:26): pid=9198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1106" name="file1" dev="loop5" ino=15 res=0 errno=0
[  190.941599][ T9198] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.1106: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  190.941927][ T9204] erofs (device loop4): mounted with root inode @ nid 36.
[  190.961626][ T9198] EXT4-fs error (device loop5) in ext4_setattr:6071: Corrupt filesystem
[  191.007847][ T8760] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  191.281974][ T9208] erofs (device loop4): readahead error at folio 2 @ nid 89
[  191.292138][ T9208] erofs (device loop4): readahead error at folio 1 @ nid 89
[  191.295288][ T9208] erofs (device loop4): readahead error at folio 0 @ nid 89
[  191.299592][ T9208] syz.4.1108: attempt to access beyond end of device
[  191.299592][ T9208] loop4: rw=524288, sector=524296, nr_sectors = 8 limit=16
[  191.306279][ T9208] erofs (device loop4): read error -117 @ 0 of nid 89
[  191.316902][   T33] audit: type=1800 audit(1755041533.587:27): pid=9208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1108" name="file2" dev="loop4" ino=89 res=0 errno=0
[  191.477643][   T24] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  191.637819][   T24] usb 6-1: unable to get BOS descriptor or descriptor too short
[  191.641589][   T24] usb 6-1: not running at top speed; connect to a high speed hub
[  191.648812][   T24] usb 6-1: config 0 has an invalid interface number: 88 but max is 0
[  191.652131][   T24] usb 6-1: config 0 has no interface number 0
[  191.655361][   T24] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10
[  191.661916][   T24] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[  191.671188][   T24] usb 6-1: config 0 interface 88 has no altsetting 0
[  191.678972][   T24] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  191.682676][   T24] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  191.689176][   T24] usb 6-1: Product: syz
[  191.692921][   T24] usb 6-1: Manufacturer: syz
[  191.696015][   T24] usb 6-1: SerialNumber: syz
[  191.697366][ T9216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1113'.
[  191.702011][ T9216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1113'.
[  191.703299][   T24] usb 6-1: config 0 descriptor??
[  191.707315][ T9216] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1113'.
[  191.955513][   T24] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input13
[  192.314838][   T24] usb 6-1: USB disconnect, device number 3
[  192.372214][ T5854] udevd[5854]: Error opening device "/dev/input/event3": No such file or directory
[  192.379719][ T5854] udevd[5854]: Unable to EVIOCGABS device "/dev/input/event3"
[  192.382993][ T5854] udevd[5854]: Unable to EVIOCGABS device "/dev/input/event3"
[  192.585846][ T9228] CIFS: VFS: Malformed UNC in devname
[  193.766485][ T9278] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode
[  193.777099][ T9278] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode
[  193.825431][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  193.880540][ T9284] raw_sendmsg: syz.5.1131 forgot to set AF_INET. Fix it!
[  194.102753][ T9299] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1135'.
[  194.123024][ T9299] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1135'.
[  194.470424][ T9322] netlink: 'syz.5.1141': attribute type 11 has an invalid length.
[  194.566803][   T33] audit: type=1326 audit(1755041536.868:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.1.1142" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06a4b8ebe9 code=0x0
[  194.590422][ T9327] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.970179][ T9355] bridge1: entered allmulticast mode
[  195.155580][ T9369] netlink: 'syz.4.1154': attribute type 1 has an invalid length.
[  195.159229][ T9369] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1154'.
[  195.334606][ T9375] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1156'.
[  195.342790][ T9375] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1156'.
[  195.937679][ T9400] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  195.996640][ T9384] loop5: detected capacity change from 0 to 32768
[  196.004535][ T9384] XFS: ikeep mount option is deprecated.
[  196.015749][ T9384] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  196.046773][ T9384] XFS (loop5): Ending clean mount
[  196.056840][ T9384] XFS (loop5): Quotacheck needed: Please wait.
[  196.076956][   T33] audit: type=1326 audit(1755041538.405:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9413 comm="syz.1.1168" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a4b8ebe9 code=0x7ffc0000
[  196.104044][   T33] audit: type=1326 audit(1755041538.415:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9413 comm="syz.1.1168" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a4b8ebe9 code=0x7ffc0000
[  196.234287][ T9384] XFS (loop5): Quotacheck: Done.
[  196.246007][ T9418] loop4: detected capacity change from 0 to 2048
[  196.272955][ T9418] EXT4-fs (loop4): bad block size 8192
[  196.399741][ T8760] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  197.628572][ T9452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1183'.
[  197.631758][ T9452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1183'.
[  197.634888][ T9452] netlink: 'syz.4.1183': attribute type 13 has an invalid length.
[  197.643522][ T9452] netlink: 'syz.4.1183': attribute type 14 has an invalid length.
[  197.982976][ T9464] loop5: detected capacity change from 0 to 1024
[  198.120133][ T9467] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1190'.
[  198.125210][ T9464] hfsplus: request for non-existent node 62977 in B*Tree
[  198.133767][ T9464] hfsplus: request for non-existent node 62977 in B*Tree
[  198.188712][ T6152] hfsplus: b-tree write err: -5, ino 3
[  198.507620][  T974] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  198.656329][  T974] usb 6-1: Using ep0 maxpacket: 32
[  198.664117][  T974] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  198.670728][  T974] usb 6-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9
[  198.682442][  T974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.691515][  T974] usb 6-1: Product: syz
[  198.693438][  T974] usb 6-1: Manufacturer: syz
[  198.696676][  T974] usb 6-1: SerialNumber: syz
[  198.707488][  T974] usb 6-1: config 0 descriptor??
[  198.714821][  T974] etas_es58x 6-1:0.0: Starting syz syz (Serial Number syz)
[  198.766764][ T9489] loop4: detected capacity change from 0 to 128
[  198.784306][ T9489] EXT4-fs (loop4): Test dummy encryption mode enabled
[  198.810994][ T9489] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  198.818177][ T9489] ext4 filesystem being mounted at /201/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  198.839404][ T9489] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  198.877677][ T7420] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  198.936917][ T5882] usb 6-1: USB disconnect, device number 4
[  199.156951][ T9503] input: syz1 as /devices/virtual/input/input14
[  199.268107][ T9505] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  199.274713][ T9505] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  199.277461][ T9505] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  199.283329][ T9505] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  199.287100][ T9505] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  199.290258][ T9505] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  199.293344][ T9505] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4)
[  199.296458][ T9505] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  199.299031][ T9505] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  199.302609][ T9505] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  199.305381][ T9505] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  199.308011][ T9505] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  199.310858][ T9505] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4)
[  199.314019][ T9505] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[  199.569021][ T9520] loop5: detected capacity change from 0 to 512
[  199.597193][ T9520] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.1214: corrupted in-inode xattr: invalid ea_ino
[  199.612689][ T9520] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1214: couldn't read orphan inode 15 (err -117)
[  199.619308][ T9520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.176315][ T9515] loop4: detected capacity change from 0 to 131072
[  200.208931][ T9515] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0)
[  200.212741][ T9515] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  200.254758][ T9515] F2FS-fs (loop4): invalid crc value
[  200.648137][ T9515] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  200.693077][ T9515] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  200.696162][ T9515] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  200.770993][ T8760] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.243673][ T9557] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1228'.
[  202.246942][ T9557] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1228'.
[  202.445165][   T33] audit: type=1326 audit(1755044122.807:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.1.1235" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06a4b8ebe9 code=0x0
[  202.502866][ T9573] loop4: detected capacity change from 0 to 164
[  202.524547][ T9573] rock: directory entry would overflow storage
[  202.529012][ T9573] rock: sig=0x4543, size=28, remaining=18
[  202.629583][ T5895] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  202.725085][ T9586] loop4: detected capacity change from 0 to 1024
[  202.742332][ T9586] EXT4-fs: Ignoring removed orlov option
[  202.765222][ T9586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.780284][ T5895] usb 6-1: Using ep0 maxpacket: 16
[  202.785230][ T5895] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30
[  202.790856][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  202.794858][ T5895] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65
[  202.805432][ T5895] usb 6-1: New USB device found, idVendor=1e71, idProduct=2006, bcdDevice= 0.00
[  202.809089][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.819188][ T5895] usb 6-1: config 0 descriptor??
[  202.837371][ T7420] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.977824][ T9592] loop4: detected capacity change from 0 to 2048
[  202.998930][ T9592] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  203.009519][ T9592] UDF-fs: Scanning with blocksize 512 failed
[  203.023494][ T9592] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  203.138392][ T9594] loop4: detected capacity change from 0 to 512
[  203.145478][ T9594] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  203.168858][ T9594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.174071][ T9594] ext4 filesystem being mounted at /223/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  203.229726][ T7420] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.240570][ T5895] nzxt-smart2 0003:1E71:2006.000E: item fetching failed at offset 10/11
[  203.243813][ T5895] nzxt-smart2 0003:1E71:2006.000E: probe with driver nzxt-smart2 failed with error -22
[  203.298664][ T5858] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  203.302694][ T5858] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  203.305648][ T5858] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  203.308361][ T5858] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  203.343726][ T9600] program syz.4.1247 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  203.447027][ T5882] usb 6-1: USB disconnect, device number 5
[  204.255827][ T9629] loop5: detected capacity change from 0 to 256
[  204.796387][   T33] audit: type=1326 audit(1755044125.158:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9661 comm="syz.5.1275" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcea3d8ebe9 code=0x0
[  205.060512][ T5882] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  205.190576][ T9690] loop5: detected capacity change from 0 to 64
[  205.226834][ T5882] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  205.236446][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.249007][ T5882] usb 5-1: Product: syz
[  205.250682][ T5882] usb 5-1: Manufacturer: syz
[  205.252170][ T5882] usb 5-1: SerialNumber: syz
[  205.266003][ T5882] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  205.342815][ T5882] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  205.822626][ T5895] usb 5-1: USB disconnect, device number 7
[  206.398893][ T5882] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  206.402166][ T5882] ath9k_htc: Failed to initialize the device
[  206.420306][ T5895] usb 5-1: ath9k_htc: USB layer deinitialized
[  206.874653][ T9746] Bluetooth: MGMT ver 1.23
[  207.194417][ T9764] loop5: detected capacity change from 0 to 2048
[  207.234867][ T9764] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  207.539006][ T9765] loop4: detected capacity change from 0 to 32768
[  207.557013][ T9765] bcachefs (/dev/loop4): error validating superblock: Filesystem has incompatible feature bit 35, highest supported small_image (22)
[  207.569479][ T9765] bcachefs: bch2_fs_get_tree() error: invalid_sb_features
[  207.750775][ T9785] loop4: detected capacity change from 0 to 128
[  207.768250][ T9776] loop5: detected capacity change from 0 to 32768
[  207.776408][ T9776] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1323 (9776)
[  207.778988][ T9785] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  207.796268][ T9785] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  207.827394][ T9776] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  207.845019][ T9776] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  207.856778][ T9776] BTRFS info (device loop5): using free-space-tree
[  208.123228][ T8760] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  208.229725][ T9801] loop4: detected capacity change from 0 to 32768
[  208.330124][ T9801] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  208.569717][ T9818] loop5: detected capacity change from 0 to 4096
[  208.634824][ T7420] ocfs2: Unmounting device (7,4) on (node local)
[  208.643683][ T9823] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  208.925884][ T9840] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1345'.
[  208.973541][ T9845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1347'.
[  208.981814][ T9845] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  208.996075][ T9845] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  209.130962][   T33] audit: type=1326 audit(1755044129.488:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.5.1352" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcea3d8ebe9 code=0x0
[  209.581661][ T9866] netlink: 'syz.1.1357': attribute type 4 has an invalid length.
[  209.590197][ T9866] netlink: 'syz.1.1357': attribute type 4 has an invalid length.
[  209.906227][ T9871] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.911849][ T9871] batadv_slave_1: entered promiscuous mode
[  210.322684][ T9896] loop4: detected capacity change from 0 to 128
[  210.381556][ T9896] ADFS-fs (loop4): error: can't find an ADFS filesystem on dev loop4.
[  210.706707][ T9911] sd 0:0:0:0: PR command failed: 1026
[  210.713624][ T9911] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[  210.742038][ T9911] sd 0:0:0:0: Add. Sense: Invalid command operation code
[  211.245598][ T9929] loop4: detected capacity change from 0 to 32768
[  211.279555][ T9929] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  211.342764][ T9929] XFS (loop4): Ending clean mount
[  211.375116][ T7420] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  211.498160][ T5895] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  211.648186][ T5895] usb 6-1: Using ep0 maxpacket: 16
[  211.660114][ T5895] usb 6-1: config 0 has an invalid interface number: 102 but max is 0
[  211.663337][ T5895] usb 6-1: config 0 has no interface number 0
[  211.684700][ T5895] usb 6-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=53.54
[  211.693318][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.698034][ T5895] usb 6-1: Product: syz
[  211.699666][ T5895] usb 6-1: Manufacturer: syz
[  211.701459][ T5895] usb 6-1: SerialNumber: syz
[  211.721563][ T5895] usb 6-1: config 0 descriptor??
[  211.954497][ T5895] snd-usb-audio 6-1:0.102: probe with driver snd-usb-audio failed with error -71
[  211.974452][ T5895] usb 6-1: USB disconnect, device number 6
[  212.793325][T10010] loop5: detected capacity change from 0 to 40427
[  212.799270][T10010] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  212.801792][T10010] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  212.805645][T10010] F2FS-fs (loop5): invalid crc value
[  212.862634][T10010] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  212.871466][T10010] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  212.873952][T10010] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  212.896148][T10010] syz.5.1385: attempt to access beyond end of device
[  212.896148][T10010] loop5: rw=2051, sector=65536, nr_sectors = 65536 limit=40427
[  212.904380][T10010] F2FS-fs (loop5): Issue discard(8192, 8192, 8192) failed, ret: -5
[  213.795469][T10053] loop4: detected capacity change from 0 to 1024
[  214.796938][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1411'.
[  214.844722][T10070] team0: entered promiscuous mode
[  214.847110][T10070] team_slave_0: entered promiscuous mode
[  214.862990][T10070] team_slave_1: entered promiscuous mode
[  214.876407][T10070] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  214.903188][T10070] team0: left promiscuous mode
[  214.905631][T10070] team_slave_0: left promiscuous mode
[  214.910301][T10070] team_slave_1: left promiscuous mode
[  215.058367][T10074] loop4: detected capacity change from 0 to 512
[  215.066888][T10074] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  215.088376][T10076] capability: warning: `syz.5.1414' uses 32-bit capabilities (legacy support in use)
[  215.172117][T10082] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  215.175437][T10082] IPv6: NLM_F_CREATE should be set when creating new route
[  215.473849][T10107] pimreg3: entered allmulticast mode
[  216.214674][T10137] tmpfs: Bad value for 'mpol'
[  216.276589][   T33] audit: type=1326 audit(1755044136.630:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10138 comm="syz.4.1441" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378398ebe9 code=0x7ffc0000
[  216.293252][   T33] audit: type=1326 audit(1755044136.640:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10138 comm="syz.4.1441" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378398ebe9 code=0x7ffc0000
[  216.315651][   T33] audit: type=1326 audit(1755044136.640:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10138 comm="syz.4.1441" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f378398ebe9 code=0x7ffc0000
[  216.339719][   T33] audit: type=1326 audit(1755044136.650:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10138 comm="syz.4.1441" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378398ebe9 code=0x7ffc0000
[  216.353626][   T33] audit: type=1326 audit(1755044136.650:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10138 comm="syz.4.1441" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f378398ebe9 code=0x7ffc0000
[  216.362821][   T33] audit: type=1326 audit(1755044136.650:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10138 comm="syz.4.1441" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378398ebe9 code=0x7ffc0000
[  216.371589][   T33] audit: type=1326 audit(1755044136.650:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10138 comm="syz.4.1441" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378398ebe9 code=0x7ffc0000
[  216.381104][   T33] audit: type=1326 audit(1755044136.650:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10138 comm="syz.4.1441" exe="/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f378398ebe9 code=0x7ffc0000
[  216.390723][   T33] audit: type=1326 audit(1755044136.670:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10138 comm="syz.4.1441" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378398ebe9 code=0x7ffc0000
[  216.401250][   T33] audit: type=1326 audit(1755044136.680:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10138 comm="syz.4.1441" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378398ebe9 code=0x7ffc0000
[  216.793183][T10145] loop4: detected capacity change from 0 to 32768
[  216.822953][T10145] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  216.842728][T10145] XFS (loop4): Ending clean mount
[  216.875324][ T7420] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  217.243722][T10194] netlink: 'syz.1.1461': attribute type 10 has an invalid length.
[  217.250187][T10194] netlink: 'syz.1.1461': attribute type 10 has an invalid length.
[  217.266319][T10194] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.273855][T10194] team0: Port device bond0 added
[  217.357695][T10190] loop4: detected capacity change from 0 to 32768
[  217.402076][T10190] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow,no_data_io
[  217.402092][T10190]   allowing incompatible features above 0.0: (unknown version)
[  217.402097][T10190]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  217.417401][T10190] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  217.420161][T10190] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  217.422696][T10190] bcachefs (loop4): Version upgrade required:
[  217.422696][T10190] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  217.422696][T10190] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  217.422696][T10190]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  217.448686][T10190] bcachefs (loop4): dropping and reconstructing all alloc info
[  217.463109][T10190] bcachefs (loop4): accounting_read... done
[  217.467038][T10190] bcachefs (loop4): alloc_read... done
[  217.468955][T10190] bcachefs (loop4): snapshots_read... done
[  217.471206][T10190] bcachefs (loop4): done starting filesystem
[  217.510668][ T7420] bcachefs (loop4): shutting down
[  217.553559][ T7420] bcachefs (loop4): shutdown complete
[  217.950175][T10211] loop5: detected capacity change from 0 to 32768
[  217.971388][T10211] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  217.983768][T10211] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  218.048716][T10211] loop5: detected capacity change from 32768 to 64
[  218.062456][T10211] syz.5.1467: attempt to access beyond end of device
[  218.062456][T10211] loop5: rw=0, sector=71, nr_sectors = 1 limit=64
[  218.075310][T10211] (syz.5.1467,10211,0):ocfs2_assign_bh:2417 ERROR: status = -5
[  218.080467][T10211] (syz.5.1467,10211,0):ocfs2_inode_lock_full_nested:2512 ERROR: status = -5
[  218.083823][T10211] (syz.5.1467,10211,0):ocfs2_reserve_suballoc_bits:795 ERROR: status = -5
[  218.090699][T10211] (syz.5.1467,10211,0):ocfs2_reserve_cluster_bitmap_bits:1139 ERROR: status = -5
[  218.094116][T10211] (syz.5.1467,10211,0):ocfs2_local_alloc_reserve_for_window:1119 ERROR: status = -5
[  218.098681][T10211] (syz.5.1467,10211,0):ocfs2_local_alloc_reserve_for_window:1135 ERROR: status = -5
[  218.102499][T10211] (syz.5.1467,10211,0):ocfs2_local_alloc_slide_window:1250 ERROR: status = -5
[  218.106022][T10211] (syz.5.1467,10211,0):ocfs2_local_alloc_slide_window:1317 ERROR: status = -5
[  218.109758][T10211] (syz.5.1467,10211,0):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -5
[  218.112677][T10211] (syz.5.1467,10211,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -5
[  218.116529][T10211] (syz.5.1467,10211,0):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -5
[  218.122690][T10211] (syz.5.1467,10211,0):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -5
[  218.126236][T10211] (syz.5.1467,10211,0):ocfs2_expand_inline_dir:2864 ERROR: status = -5
[  218.129578][T10211] (syz.5.1467,10211,0):ocfs2_extend_dir:3211 ERROR: status = -5
[  218.134417][T10211] (syz.5.1467,10211,0):ocfs2_prepare_dir_for_insert:4316 ERROR: status = -5
[  218.137973][T10211] (syz.5.1467,10211,0):ocfs2_symlink:1879 ERROR: status = -5
[  218.142882][T10211] (syz.5.1467,10211,0):ocfs2_symlink:2080 ERROR: status = -5
[  218.180264][ T8760] syz-executor: attempt to access beyond end of device
[  218.180264][ T8760] loop5: rw=0, sector=17057, nr_sectors = 1 limit=64
[  218.188793][ T8760] (syz-executor,8760,0):ocfs2_read_locked_inode:597 ERROR: status = -5
[  218.192981][ T8760] syz-executor: attempt to access beyond end of device
[  218.192981][ T8760] loop5: rw=0, sector=17057, nr_sectors = 1 limit=64
[  218.202339][ T8760] (syz-executor,8760,0):ocfs2_read_locked_inode:597 ERROR: status = -5
[  218.473651][T10219] jbd2/loop5-75: attempt to access beyond end of device
[  218.473651][T10219] loop5: rw=38913, sector=640, nr_sectors = 1 limit=64
[  218.481922][T10219] Buffer I/O error on dev loop5, logical block 640, lost sync page write
[  218.485484][T10219] JBD2: I/O error when updating journal superblock for loop5-75.
[  218.489575][T10219] Aborting journal on device loop5-75.
[  218.493421][T10219] jbd2/loop5-75: attempt to access beyond end of device
[  218.493421][T10219] loop5: rw=38913, sector=640, nr_sectors = 1 limit=64
[  218.504944][T10219] Buffer I/O error on dev loop5, logical block 640, lost sync page write
[  218.517900][T10219] JBD2: I/O error when updating journal superblock for loop5-75.
[  218.531576][ T8760] syz-executor: attempt to access beyond end of device
[  218.531576][ T8760] loop5: rw=0, sector=71, nr_sectors = 1 limit=64
[  218.531749][ T5858] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.547805][ T8760] (syz-executor,8760,0):ocfs2_assign_bh:2417 ERROR: status = -5
[  218.554680][ T8760] (syz-executor,8760,0):ocfs2_inode_lock_full_nested:2512 ERROR: status = -5
[  218.558983][ T8760] (syz-executor,8760,0):ocfs2_shutdown_local_alloc:412 ERROR: status = -5
[  218.562476][ T8760] syz-executor: attempt to access beyond end of device
[  218.562476][ T8760] loop5: rw=1, sector=17024, nr_sectors = 1 limit=64
[  218.568451][ T8760] Buffer I/O error on dev loop5, logical block 17024, lost sync page write
[  218.572200][ T8760] (syz-executor,8760,0):ocfs2_write_block:78 ERROR: status = -5
[  218.575463][ T8760] (syz-executor,8760,0):ocfs2_update_disk_slot:199 ERROR: status = -5
[  218.578847][ T8760] (syz-executor,8760,0):ocfs2_put_slot:517 ERROR: status = -5
[  218.582830][ T8760] (syz-executor,8760,0):ocfs2_journal_shutdown:1107 ERROR: status = -5
[  218.589247][ T8760] ocfs2: Unmounting device (7,5) on (node local)
[  218.651992][ T5858] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.799868][ T5858] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.903929][ T5858] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.053980][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  219.060646][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  219.086684][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  219.090445][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  219.092897][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  219.141616][ T5858] bridge_slave_1: left allmulticast mode
[  219.143904][ T5858] bridge_slave_1: left promiscuous mode
[  219.146229][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.171660][ T5858] bridge_slave_0: left allmulticast mode
[  219.175084][ T5858] bridge_slave_0: left promiscuous mode
[  219.183018][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.268596][ T5895] usb 5-1: new low-speed USB device number 8 using dummy_hcd
[  219.429261][ T5895] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  219.434706][ T5895] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  219.441639][ T5895] usb 5-1: string descriptor 0 read error: -22
[  219.443866][ T5895] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  219.447221][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.472411][ T5895] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  219.476263][ T5895] usb 5-1: MIDIStreaming interface descriptor not found
[  219.673224][   T10] usb 5-1: USB disconnect, device number 8
[  219.761859][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  219.772989][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  219.779133][ T5858] bond0 (unregistering): Released all slaves
[  220.129496][ T5858] hsr_slave_0: left promiscuous mode
[  220.135567][ T5858] hsr_slave_1: left promiscuous mode
[  220.150073][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  220.153029][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  220.164554][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  220.168988][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  220.194789][ T5858] veth1_macvtap: left promiscuous mode
[  220.199121][ T5858] veth0_macvtap: left promiscuous mode
[  220.206871][ T5858] veth1_vlan: left promiscuous mode
[  220.212361][ T5858] veth0_vlan: left promiscuous mode
[  220.472417][ T5882] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  220.630718][ T5882] usb 5-1: Using ep0 maxpacket: 32
[  220.644996][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.651334][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  220.669739][ T5882] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  220.673086][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.692050][ T5882] usb 5-1: config 0 descriptor??
[  220.777396][ T5858] team0 (unregistering): Port device team_slave_1 removed
[  220.844186][ T5858] team0 (unregistering): Port device team_slave_0 removed
[  221.116612][ T5845] Bluetooth: hci0: command tx timeout
[  221.183516][ T5882] savu 0003:1E7D:2D5A.000F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[  221.409733][    T9] usb 5-1: USB disconnect, device number 9
[  221.548083][T10234] chnl_net:caif_netlink_parms(): no params data found
[  221.714693][T10234] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.719456][T10234] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.722143][T10234] bridge_slave_0: entered allmulticast mode
[  221.725101][T10234] bridge_slave_0: entered promiscuous mode
[  221.735896][T10234] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.740628][T10234] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.743015][T10234] bridge_slave_1: entered allmulticast mode
[  221.749308][T10234] bridge_slave_1: entered promiscuous mode
[  221.807969][T10234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  221.814686][T10234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  221.863356][T10234] team0: Port device team_slave_0 added
[  221.873046][T10234] team0: Port device team_slave_1 added
[  221.911224][T10234] batman_adv: batadv0: Adding interface: batadv_slave_0
[  221.914134][T10234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.935218][T10234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  221.958993][T10234] batman_adv: batadv0: Adding interface: batadv_slave_1
[  221.962862][T10234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.975180][T10234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  222.004715][T10283] loop4: detected capacity change from 0 to 1024
[  222.103022][T10234] hsr_slave_0: entered promiscuous mode
[  222.111939][T10234] hsr_slave_1: entered promiscuous mode
[  222.118474][   T36] hfsplus: b-tree write err: -5, ino 8
[  222.490171][T10234] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  222.497783][T10234] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  222.503565][T10234] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  222.531321][T10234] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  222.564456][T10234] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.566766][T10234] bridge0: port 2(bridge_slave_1) entered forwarding state
[  222.571650][T10234] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.574008][T10234] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.621887][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.628766][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.685802][T10234] 8021q: adding VLAN 0 to HW filter on device bond0
[  222.712838][T10234] 8021q: adding VLAN 0 to HW filter on device team0
[  222.733604][ T6168] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.736307][ T6168] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.750866][ T6168] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.753692][ T6168] bridge0: port 2(bridge_slave_1) entered forwarding state
[  223.123580][T10234] 8021q: adding VLAN 0 to HW filter on device batadv0
[  223.196072][ T5845] Bluetooth: hci0: command tx timeout
[  223.482534][T10234] veth0_vlan: entered promiscuous mode
[  223.504976][T10234] veth1_vlan: entered promiscuous mode
[  223.568053][T10234] veth0_macvtap: entered promiscuous mode
[  223.592243][T10234] veth1_macvtap: entered promiscuous mode
[  223.638620][T10234] batman_adv: batadv0: Interface activated: batadv_slave_0
[  223.662662][T10234] batman_adv: batadv0: Interface activated: batadv_slave_1
[  223.694870][ T5874] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  223.702436][ T5874] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  223.728220][ T5874] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  223.731755][ T5874] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  223.869561][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.872092][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.908641][ T6168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.917951][ T6168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.104670][   T33] kauditd_printk_skb: 2 callbacks suppressed
[  224.104686][   T33] audit: type=1400 audit(1755044144.461:46): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=10391 comm="syz.6.1518"
[  224.364540][T10411] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  224.381789][T10411] CIFS mount error: No usable UNC path provided in device string!
[  224.381789][T10411] 
[  224.388490][T10411] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  224.422632][T10414] loop4: detected capacity change from 0 to 512
[  224.431514][T10414] EXT4-fs: Ignoring removed orlov option
[  224.447947][T10414] EXT4-fs: Ignoring removed bh option
[  224.476749][T10414] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  224.481671][T10414] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c119, mo2=0002]
[  224.484170][T10414] System zones: 1-12
[  224.579913][T10414] EXT4-fs error (device loop4): ext4_orphan_get:1392: comm syz.4.1527: inode #15: comm syz.4.1527: iget: illegal inode #
[  224.605957][T10414] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1527: couldn't read orphan inode 15 (err -117)
[  224.620795][T10414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.209838][T10438] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #12: comm syz.4.1527: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  225.277094][ T5845] Bluetooth: hci0: command tx timeout
[  225.979626][ T7420] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.080470][T10451] tipc: Started in network mode
[  226.082084][T10451] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711
[  226.084530][T10451] tipc: Enabled bearer <eth:batadv0>, priority 10
[  226.321059][   T33] audit: type=1804 audit(1755044146.681:47): pid=10461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1539" name="/newroot/12/file1" dev="fuse" ino=1 res=1 errno=0
[  226.328889][ T5895] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  226.394304][   T33] audit: type=1326 audit(1755044146.751:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10467 comm="syz.6.1541" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c1918ebe9 code=0x0
[  226.484073][T10472] netlink: 'syz.1.1543': attribute type 11 has an invalid length.
[  226.495368][ T5895] usb 5-1: Using ep0 maxpacket: 16
[  226.503680][ T5895] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  226.508168][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  226.515640][ T5895] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  226.519647][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.522850][ T5895] usb 5-1: Product: syz
[  226.524805][ T5895] usb 5-1: Manufacturer: syz
[  226.528531][ T5895] usb 5-1: SerialNumber: syz
[  226.532124][ T5895] usb 5-1: config 0 descriptor??
[  226.536871][ T5895] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  226.541046][ T5895] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  227.150580][ T5895] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  227.153318][ T5895] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[  227.198785][ T5311] tipc: Node number set to 8432298
[  227.360264][ T5895] em28xx 5-1:0.0: AC97 chip type couldn't be determined
[  227.363970][ T5895] em28xx 5-1:0.0: No AC97 audio processor
[  227.369477][ T5895] usb 5-1: USB disconnect, device number 10
[  227.372398][ T5895] em28xx 5-1:0.0: Disconnecting em28xx
[  227.384267][ T5895] em28xx 5-1:0.0: Freeing device
[  227.465947][T10494] loop6: detected capacity change from 0 to 32768
[  227.469334][T10494] btrfs: Deprecated parameter 'usebackuproot'
[  227.471766][T10494] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  227.481128][T10494] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1553 (10494)
[  227.493018][T10494] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  227.497340][T10494] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  227.500726][T10494] BTRFS info (device loop6): using free-space-tree
[  227.647505][T10494] BTRFS info (device loop6): rebuilding free space tree
[  227.679421][ T5845] Bluetooth: hci0: command tx timeout
[  227.740530][T10520] BTRFS info (device loop6): space_info DATA+METADATA (sub-group id 0) has 159744 free, is not full
[  227.744161][T10520] BTRFS info (device loop6): space_info total=3276800, used=53248, pinned=20480, reserved=1236992, may_use=1806336, readonly=0 zone_unusable=0
[  227.749028][T10520] BTRFS info (device loop6): global_block_rsv: size 1441792 reserved 1441792
[  227.752944][T10520] BTRFS info (device loop6): trans_block_rsv: size 0 reserved 0
[  227.756199][T10520] BTRFS info (device loop6): chunk_block_rsv: size 0 reserved 0
[  227.759071][T10520] BTRFS info (device loop6): delayed_block_rsv: size 0 reserved 0
[  227.761707][T10520] BTRFS info (device loop6): delayed_refs_rsv: size 65536 reserved 65536
[  227.853702][   T33] audit: type=1800 audit(1755044148.212:49): pid=10520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1553" name="file1" dev="loop6" ino=260 res=0 errno=0
[  228.341730][   T33] audit: type=1804 audit(1755044148.692:50): pid=10531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1561" name="/newroot/310/file0" dev="tmpfs" ino=1633 res=1 errno=0
[  228.447146][T10531] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1
[  228.462640][T10531] ref_ctr increment failed for inode: 0x661 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888020e85600
[  228.489563][T10234] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  229.107231][ T5845] Bluetooth: hci0: hardware error 0x00
[  229.158019][T10541] tmpfs: Bad value for 'mpol'
[  229.252923][T10550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1570'.
[  229.404279][T10562] autofs4:pid:10562:validate_dev_ioctl: path string terminator missing for cmd(0xc0189373)
[  229.761872][T10557] loop6: detected capacity change from 0 to 40427
[  229.766338][T10557] F2FS-fs (loop6): Invalid SB checksum offset: 0
[  229.768911][T10557] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  229.774266][T10557] F2FS-fs (loop6): invalid crc value
[  229.904800][ T5895] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  229.908329][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  229.914374][T10557] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  229.924339][T10557] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[  229.928543][T10557] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  230.025649][T10234] syz-executor: attempt to access beyond end of device
[  230.025649][T10234] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  230.035618][T10234] CPU: 1 UID: 0 PID: 10234 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  230.035640][T10234] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  230.035650][T10234] Call Trace:
[  230.035658][T10234]  <TASK>
[  230.035665][T10234]  dump_stack_lvl+0x189/0x250
[  230.035721][T10234]  ? __pfx_dump_stack_lvl+0x10/0x10
[  230.035739][T10234]  ? __pfx_queue_work_on+0x10/0x10
[  230.035755][T10234]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  230.035773][T10234]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  230.035805][T10234]  f2fs_handle_critical_error+0x37c/0x540
[  230.035831][T10234]  f2fs_write_end_io+0x886/0xb60
[  230.035867][T10234]  __submit_merged_bio+0x27a/0x6a0
[  230.035889][T10234]  __submit_merged_write_cond+0x255/0x530
[  230.035913][T10234]  f2fs_write_data_pages+0x261d/0x3000
[  230.035956][T10234]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  230.036021][T10234]  ? folios_put_refs+0x559/0x640
[  230.036047][T10234]  ? __lock_acquire+0xab9/0xd20
[  230.036076][T10234]  ? do_raw_spin_lock+0x121/0x290
[  230.036102][T10234]  ? do_raw_spin_unlock+0x4d/0x240
[  230.036119][T10234]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  230.036138][T10234]  do_writepages+0x32e/0x550
[  230.036166][T10234]  ? do_raw_spin_unlock+0x4d/0x240
[  230.036185][T10234]  filemap_fdatawrite+0x199/0x240
[  230.036205][T10234]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  230.036259][T10234]  ? do_raw_spin_unlock+0x4d/0x240
[  230.036280][T10234]  f2fs_sync_dirty_inodes+0x31f/0x830
[  230.036313][T10234]  f2fs_write_checkpoint+0x95a/0x1df0
[  230.036351][T10234]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  230.036407][T10234]  ? kill_f2fs_super+0x298/0x6c0
[  230.036433][T10234]  kill_f2fs_super+0x2c3/0x6c0
[  230.036457][T10234]  ? __pfx_kill_f2fs_super+0x10/0x10
[  230.036475][T10234]  ? radix_tree_delete_item+0x2b6/0x400
[  230.036497][T10234]  ? shrinker_free+0x2ce/0x3e0
[  230.036515][T10234]  deactivate_locked_super+0xbc/0x130
[  230.036534][T10234]  cleanup_mnt+0x425/0x4c0
[  230.036553][T10234]  ? lockdep_hardirqs_on+0x9c/0x150
[  230.036572][T10234]  task_work_run+0x1d4/0x260
[  230.036594][T10234]  ? __pfx_task_work_run+0x10/0x10
[  230.036615][T10234]  ? __x64_sys_umount+0x122/0x160
[  230.036637][T10234]  ? exit_to_user_mode_loop+0x40/0x110
[  230.036663][T10234]  exit_to_user_mode_loop+0xec/0x110
[  230.036682][T10234]  do_syscall_64+0x2bd/0x3b0
[  230.036723][T10234]  ? lockdep_hardirqs_on+0x9c/0x150
[  230.036739][T10234]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.036754][T10234]  ? exc_page_fault+0x9f/0xf0
[  230.036771][T10234]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.036790][T10234] RIP: 0033:0x7f3c1918ff17
[  230.036823][T10234] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  230.036836][T10234] RSP: 002b:00007fffc4ea1588 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  230.036852][T10234] RAX: 0000000000000000 RBX: 00007f3c19211c05 RCX: 00007f3c1918ff17
[  230.036862][T10234] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc4ea1640
[  230.036871][T10234] RBP: 00007fffc4ea1640 R08: 0000000000000000 R09: 0000000000000000
[  230.036879][T10234] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffc4ea26d0
[  230.036888][T10234] R13: 00007f3c19211c05 R14: 000000000003835e R15: 00007fffc4ea2710
[  230.036910][T10234]  </TASK>
[  230.036936][T10234] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  230.054742][ T5895] usb 5-1: device descriptor read/64, error -32
[  230.314729][ T5895] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  230.484586][ T5895] usb 5-1: Using ep0 maxpacket: 16
[  230.722148][T10594] loop6: detected capacity change from 0 to 4096
[  231.195034][ T5845] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  231.910950][T10637] netlink: 'syz.6.1604': attribute type 23 has an invalid length.
[  232.624825][ T5895] usb 5-1: unable to get BOS descriptor or descriptor too short
[  232.642593][ T5895] usb 5-1: unable to read config index 0 descriptor/start: -71
[  232.662577][ T5895] usb 5-1: can't read configurations, error -71
[  232.667849][ T5895] usb usb5-port1: attempt power cycle
[  232.707047][T10665] sctp: [Deprecated]: syz.4.1616 (pid 10665) Use of struct sctp_assoc_value in delayed_ack socket option.
[  232.707047][T10665] Use struct sctp_sack_info instead
[  232.856008][T10667] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1617'.
[  233.022834][   T33] audit: type=1326 audit(1755044153.382:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10670 comm="syz.4.1619" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f378398ebe9 code=0x0
[  233.319428][T10678] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1621'.
[  233.323262][T10678] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1621'.
[  234.056799][T10704] loop4: detected capacity change from 0 to 2048
[  234.081789][   T33] audit: type=1800 audit(1755044154.443:52): pid=10704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1633" name="file1" dev="loop4" ino=1346 res=0 errno=0
[  234.113778][   T33] audit: type=1800 audit(1755044154.463:53): pid=10704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1633" name="file1" dev="loop4" ino=1346 res=0 errno=0
[  234.341702][T10711] loop4: detected capacity change from 0 to 128
[  234.361353][T10711] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  234.375648][T10711] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  235.268075][    T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  235.433961][    T9] usb 7-1: Using ep0 maxpacket: 16
[  235.437739][    T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  235.441418][    T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  235.448379][    T9] usb 7-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=f4.95
[  235.451803][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.463864][    T9] usb 7-1: Product: syz
[  235.465597][    T9] usb 7-1: Manufacturer: syz
[  235.467476][    T9] usb 7-1: SerialNumber: syz
[  235.471520][    T9] usb 7-1: config 0 descriptor??
[  235.474926][T10728] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  235.484661][T10728] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  235.700272][T10728] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  235.703174][T10728] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  236.061981][    T9] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  236.169324][    T9] asix 7-1:0.0: probe with driver asix failed with error -71
[  236.174624][    T9] usb 7-1: USB disconnect, device number 2
[  236.635204][   T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  236.971313][T10800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1659'.
[  237.045469][ T2200] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  237.197726][ T2200] usb 7-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  237.201525][ T2200] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.215731][ T2200] usb 7-1: Product: syz
[  237.219948][ T2200] usb 7-1: Manufacturer: syz
[  237.223402][ T2200] usb 7-1: SerialNumber: syz
[  237.234640][ T2200] usb 7-1: config 0 descriptor??
[  237.249865][ T2200] gspca_main: sq905c-2.14.0 probing 2770:9052
[  237.671364][ T2200] gspca_sq905c: sq905c_read: usb_control_msg failed (-71)
[  237.676699][ T2200] sq905c 7-1:0.0: Reading version command failed
[  237.680264][ T2200] sq905c 7-1:0.0: probe with driver sq905c failed with error -71
[  237.689666][ T2200] usb 7-1: USB disconnect, device number 3
[  237.857221][T10837] tmpfs: Bad value for 'mpol'
[  238.517582][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1685'.
[  238.523891][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1685'.
[  238.527209][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1685'.
[  238.530665][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1685'.
[  238.656901][T10878] netlink: 'syz.4.1688': attribute type 9 has an invalid length.
[  238.812226][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1691'.
[  238.835296][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1691'.
[  238.945670][T10888] loop6: detected capacity change from 0 to 256
[  239.883811][T10899] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1696'.
[  240.650575][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1703'.
[  240.737868][T10918] loop4: detected capacity change from 0 to 512
[  240.746658][T10918] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  240.784672][T10918] EXT4-fs (loop4): 1 truncate cleaned up
[  240.788711][T10918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.819795][ T7420] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.131115][T10926] loop4: detected capacity change from 0 to 32768
[  241.184622][T10926] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  241.226913][T10926] XFS (loop4): Ending clean mount
[  241.234344][  T974] IPVS: starting estimator thread 0...
[  241.241537][T10926] XFS (loop4): Quotacheck needed: Please wait.
[  241.310712][T10926] XFS (loop4): Quotacheck: Done.
[  241.323071][T10939] IPVS: using max 61 ests per chain, 146400 per kthread
[  241.398506][ T7420] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  242.148048][T10963] loop6: detected capacity change from 0 to 32768
[  242.153245][T10963] (syz.6.1720,10963,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  242.158140][T10963] (syz.6.1720,10963,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  242.174876][T10963] JBD2: Ignoring recovery information on journal
[  242.210922][T10963] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  242.330625][T10234] ocfs2: Unmounting device (7,6) on (node local)
[  242.708170][T10974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1724'.
[  244.510790][T11006] loop4: detected capacity change from 0 to 32768
[  244.586350][T11006] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  244.682228][T11006] XFS (loop4): Ending clean mount
[  244.698072][T11006] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  245.312532][T11034] loop6: detected capacity change from 0 to 24
[  245.319805][T11034] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  245.364532][T11034] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  246.584999][T11060] process '/newroot/697/file0' started with executable stack
[  248.346169][T11093] netlink: 'syz.6.1771': attribute type 5 has an invalid length.
[  248.387459][T11095] loop6: detected capacity change from 0 to 24
[  248.393443][T11095] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  248.407068][T11095] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  248.426090][T11095] romfs: read error for inode 0x70040
[  248.484429][T11097] netlink: 452 bytes leftover after parsing attributes in process `syz.1.1773'.
[  248.673062][T11083] loop4: detected capacity change from 0 to 32768
[  248.700685][T11083] JBD2: Ignoring recovery information on journal
[  248.756147][T11083] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  248.808662][T11083] (syz.4.1766,11083,0):ocfs2_get_suballoc_slot_bit:2819 ERROR: invalid inode 8192 requested
[  248.817223][T11083] (syz.4.1766,11083,0):ocfs2_get_suballoc_slot_bit:2844 ERROR: status = -22
[  248.820916][T11083] (syz.4.1766,11083,0):ocfs2_test_inode_bit:2926 ERROR: get alloc slot and bit failed -22
[  248.824699][T11083] (syz.4.1766,11083,0):ocfs2_test_inode_bit:2967 ERROR: status = -22
[  248.854471][ T7420] ocfs2: Unmounting device (7,4) on (node local)
[  249.063003][T11123] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  249.068999][T11123] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  250.361344][  T974] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  250.388907][ T2200] IPVS: starting estimator thread 0...
[  250.490036][T11180] IPVS: using max 62 ests per chain, 148800 per kthread
[  250.657330][  T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  250.726173][  T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  250.735084][  T974] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  250.748163][  T974] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  250.757433][  T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.824760][  T974] usb 5-1: config 0 descriptor??
[  251.111268][ T5850] Bluetooth: hci2: command 0x0406 tx timeout
[  251.144096][ T5850] Bluetooth: hci2: unexpected event 0x03 length: 17 > 11
[  251.243986][  T974] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  251.328919][T11197] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1817'.
[  251.497329][  T974] usb 5-1: USB disconnect, device number 14
[  251.810884][ T2200] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  251.884371][T11233] tc_dump_action: action bad kind
[  251.960919][ T2200] usb 7-1: Using ep0 maxpacket: 32
[  251.965051][ T2200] usb 7-1: config index 0 descriptor too short (expected 29220, got 36)
[  251.971941][ T2200] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  251.981019][ T2200] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81
[  251.988059][ T2200] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  251.997217][ T2200] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  252.001800][ T2200] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  252.004717][ T2200] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  252.007924][ T2200] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  252.014714][ T2200] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  252.018688][ T2200] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.025851][ T2200] usb 7-1: config 0 descriptor??
[  252.114058][T11245] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1840'.
[  252.117711][T11245] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  252.241202][ T2200] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  252.444048][ T2200] usb 7-1: USB disconnect, device number 4
[  252.464800][ T2200] usblp0: removed
[  253.045511][T11267] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1850'.
[  253.190803][ T5850] Bluetooth: hci2: command 0x0406 tx timeout
[  253.648170][T11281] loop6: detected capacity change from 0 to 1024
[  253.657676][T11281] hfsplus: unable to find HFS+ superblock
[  253.783510][T11285] loop6: detected capacity change from 0 to 4096
[  253.922047][T11287] loop4: detected capacity change from 0 to 32768
[  253.956534][T11287] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  254.014642][ T7420] (syz-executor,7420,1):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  254.024405][ T7420] ocfs2: Unmounting device (7,4) on (node local)
[  254.331117][ T5311] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  254.495313][ T5311] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  254.498769][ T5311] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[  254.505470][ T5311] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  254.508430][ T5311] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.526344][ T5311] usb 7-1: config 0 descriptor??
[  254.533915][ T5311] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  254.536495][ T5311] dvb-usb: bulk message failed: -22 (3/0)
[  254.564067][ T5311] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  254.572906][ T5311] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  254.576995][ T5311] usb 7-1: media controller created
[  254.586622][ T5311] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  254.601511][ T5311] dvb-usb: bulk message failed: -22 (6/0)
[  254.613237][ T5311] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  254.617399][ T5311] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input16
[  254.627541][ T5311] dvb-usb: schedule remote query interval to 150 msecs.
[  254.629686][ T5311] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  254.795570][ T5311] dvb-usb: bulk message failed: -22 (1/0)
[  254.797563][ T5311] dvb-usb: error while querying for an remote control event.
[  254.865332][ T2200] usb 7-1: USB disconnect, device number 5
[  254.904818][ T2200] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  255.271394][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  255.711356][T11332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1879'.
[  255.776802][T11334] loop4: detected capacity change from 0 to 512
[  255.799016][T11334] FAT-fs (loop4): unable to read block(3544) for building NFS inode
[  255.898764][T11336] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  255.921075][ T2200] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  256.081095][ T2200] usb 7-1: Using ep0 maxpacket: 16
[  256.086123][ T2200] usb 7-1: config 0 has an invalid interface number: 105 but max is 0
[  256.089280][ T2200] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  256.094740][ T2200] usb 7-1: config 0 has no interface number 0
[  256.103299][ T2200] usb 7-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[  256.107297][ T2200] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.112135][ T2200] usb 7-1: Product: syz
[  256.114305][ T2200] usb 7-1: Manufacturer: syz
[  256.116203][ T2200] usb 7-1: SerialNumber: syz
[  256.128419][ T2200] usb 7-1: config 0 descriptor??
[  256.139796][ T2200] uvcvideo 7-1:0.105: probe with driver uvcvideo failed with error -22
[  256.223683][T11351] loop4: detected capacity change from 0 to 4096
[  256.239557][T11351] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  256.252222][T11351] ntfs3(loop4): Failed to load $Extend (-22).
[  256.254836][T11351] ntfs3(loop4): Failed to initialize $Extend.
[  256.354037][   T24] usb 7-1: USB disconnect, device number 6
[  256.656695][T11367] loop4: detected capacity change from 0 to 164
[  256.667128][T11367] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  256.674938][T11367] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  256.686364][T11367] rock: directory entry would overflow storage
[  256.688411][T11367] rock: sig=0x4f50, size=4, remaining=3
[  256.692103][T11367] iso9660: Corrupted directory entry in block 4 of inode 1792
[  257.463139][T11392] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1904'.
[  257.768686][T11404] loop4: detected capacity change from 0 to 2048
[  257.777422][T11404] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  258.700086][    T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  258.869682][    T9] usb 7-1: Using ep0 maxpacket: 32
[  260.014350][T11427] loop4: detected capacity change from 0 to 1024
[  260.036563][T11427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  260.196052][ T7420] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.722557][T11439] loop4: detected capacity change from 0 to 256
[  260.769686][T11439] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  260.958555][T11447] loop4: detected capacity change from 0 to 512
[  260.968089][T11447] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.1926: corrupted in-inode xattr: invalid ea_ino
[  260.981643][T11447] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1926: couldn't read orphan inode 15 (err -117)
[  260.986328][T11447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  261.012839][ T7420] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.176384][    T9] usb 7-1: unable to get BOS descriptor or descriptor too short
[  261.184092][    T9] usb 7-1: unable to read config index 0 descriptor/start: -71
[  261.187165][    T9] usb 7-1: can't read configurations, error -71
[  262.168249][T11491] nbd: device at index 6 is going down
[  262.217957][T11493] loop6: detected capacity change from 0 to 512
[  262.223506][T11493] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  262.261247][T11493] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1947: invalid indirect mapped block 4294967295 (level 1)
[  262.273407][T11493] EXT4-fs (loop6): Remounting filesystem read-only
[  262.276641][T11493] EXT4-fs (loop6): 2 truncates cleaned up
[  262.280013][T11493] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.287968][T11493] EXT4-fs warning (device loop6): empty_inline_dir:1767: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60
[  262.306537][T10234] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.546155][   T33] audit: type=1326 audit(1755044182.918:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.6.1954" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1918ebe9 code=0x7ffc0000
[  262.557200][   T33] audit: type=1326 audit(1755044182.928:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.6.1954" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1918ebe9 code=0x7ffc0000
[  262.568429][   T33] audit: type=1326 audit(1755044182.938:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.6.1954" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3c1918ebe9 code=0x7ffc0000
[  262.578091][   T33] audit: type=1326 audit(1755044182.938:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.6.1954" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1918ebe9 code=0x7ffc0000
[  262.601082][   T33] audit: type=1326 audit(1755044182.938:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.6.1954" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1918ebe9 code=0x7ffc0000
[  262.614305][   T33] audit: type=1326 audit(1755044182.948:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.6.1954" exe="/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3c1918ebe9 code=0x7ffc0000
[  262.635523][   T33] audit: type=1326 audit(1755044182.948:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.6.1954" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1918ebe9 code=0x7ffc0000
[  262.656972][   T33] audit: type=1326 audit(1755044182.948:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.6.1954" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1918ebe9 code=0x7ffc0000
[  262.678613][   T33] audit: type=1326 audit(1755044182.948:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.6.1954" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3c1918ebe9 code=0x7ffc0000
[  262.689786][   T33] audit: type=1326 audit(1755044182.948:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.6.1954" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1918ebe9 code=0x7ffc0000
[  262.691927][T11518] netlink: 'syz.6.1958': attribute type 1 has an invalid length.
[  262.718370][T11521] overlayfs: failed to clone upperpath
[  262.721850][T11521] overlayfs: failed to clone upperpath
[  262.866308][T11529] loop6: detected capacity change from 0 to 4096
[  264.918461][T11586] sch_tbf: burst 8256 is lower than device lo mtu (11337746) !
[  266.667397][T11607] usb usb9: usbfs: process 11607 (syz.6.1997) did not claim interface 3 before use
[  266.922166][T11600] loop4: detected capacity change from 0 to 32768
[  266.956697][T11619] loop6: detected capacity change from 0 to 512
[  267.002731][T11600] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  267.154547][ T7420] ocfs2: Unmounting device (7,4) on (node local)
[  267.947220][T11662] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.2021'.
[  267.951778][T11662] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2021'.
[  268.536269][T11680] Bluetooth: MGMT ver 1.23
[  268.596251][T11684] loop4: detected capacity change from 0 to 512
[  268.626756][T11684] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix.
[  268.634022][T11684] EXT4-fs (loop4): mount failed
[  268.706531][T11689] loop4: detected capacity change from 0 to 128
[  268.730026][T11689] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  268.746561][T11689] ext4 filesystem being mounted at /429/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  268.782436][T11692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2032'.
[  268.818714][   T33] kauditd_printk_skb: 13 callbacks suppressed
[  268.818728][   T33] audit: type=1800 audit(1755044189.189:77): pid=11695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2031" name="file2" dev="loop4" ino=12 res=0 errno=0
[  268.970030][T11701] bond0: option packets_per_slave: invalid value (70683304)
[  268.973086][T11701] bond0: option packets_per_slave: allowed values 0 - 65535
[  269.565770][T11707] netlink: 'syz.1.2038': attribute type 14 has an invalid length.
[  269.705712][ T7420] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  269.848172][T11717] loop4: detected capacity change from 0 to 4096
[  269.883331][T11720] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  270.000568][T11724] loop4: detected capacity change from 0 to 1764
[  270.332306][T11742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2055'.
[  270.340427][T11742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2055'.
[  270.552109][ T5850] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  271.758949][T11794] loop4: detected capacity change from 0 to 4096
[  271.913141][T11796] loop4: detected capacity change from 0 to 1024
[  271.960161][ T6148] hfsplus: b-tree write err: -5, ino 4
[  272.266484][T11808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2084'.
[  272.574352][T11821] loop4: detected capacity change from 0 to 256
[  272.579711][T11821] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  272.590345][T11821] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  272.595463][T11821] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  272.598959][T11821] UDF-fs: Scanning with blocksize 512 failed
[  272.603673][T11821] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  272.611781][T11821] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  272.850843][T11823] loop4: detected capacity change from 0 to 4096
[  272.887768][T11823] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  272.930883][ T7420] ntfs3(loop4): ino=9, ntfs_sync_fs failed, -22.
[  274.730396][T11859] loop6: detected capacity change from 0 to 512
[  274.733585][T11859] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  274.736348][T11859] EXT4-fs (loop6): ea_inode feature is not supported for Hurd
[  275.054707][T11857] loop4: detected capacity change from 0 to 40427
[  275.066012][T11857] F2FS-fs: Quota file already specified
[  275.273749][T11890] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2120'.
[  275.359329][ T5845] Bluetooth: hci2: command 0x0406 tx timeout
[  276.202365][T11907] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2125'.
[  276.303354][T11908] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2125'.
[  276.859774][T11896] syz.6.2120 (11896): drop_caches: 2
[  276.941090][T11914] loop6: detected capacity change from 0 to 512
[  276.964872][T11914] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.2128: bad orphan inode 15
[  276.976460][T11914] ext4_test_bit(bit=14, block=5) = 0
[  276.979200][T11914] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  277.005233][T11914] EXT4-fs warning (device loop6): ext4_resize_begin:72: won't resize using backup superblock at 1
[  277.070092][T10234] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.376772][   T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  277.684942][   T24] usb 5-1: Using ep0 maxpacket: 32
[  277.749357][   T24] usb 5-1: config 0 has an invalid interface number: 86 but max is 0
[  277.775062][   T24] usb 5-1: config 0 has no interface number 0
[  277.802232][   T24] usb 5-1: config 0 interface 86 altsetting 2 endpoint 0x9 has an invalid bInterval 0, changing to 7
[  277.840856][   T24] usb 5-1: config 0 interface 86 altsetting 2 endpoint 0x9 has invalid wMaxPacketSize 0
[  277.851731][   T24] usb 5-1: config 0 interface 86 has no altsetting 0
[  277.860434][   T24] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=33.7a
[  277.867770][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.875376][   T24] usb 5-1: Product: syz
[  277.880693][   T24] usb 5-1: Manufacturer: syz
[  277.883729][   T24] usb 5-1: SerialNumber: syz
[  277.898174][   T24] usb 5-1: config 0 descriptor??
[  278.118100][   T24] usb 5-1: USB disconnect, device number 15
[  278.395054][T11949] Invalid ELF header type: 0 != 1
[  278.641132][T11962] loop6: detected capacity change from 0 to 128
[  278.643814][T11962] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  278.658717][T11962] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  278.717467][ T6148] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  279.170753][T11977] loop6: detected capacity change from 0 to 32768
[  279.182802][T11977] bcachefs (/dev/loop6): error validating superblock: Invalid superblock section journal: journal bucket 128 past end of device (nbuckets 128)
[  279.182802][T11977] journal (size 40):
[  279.182802][T11977] Buckets:  9 7 128 1
[  279.182802][T11977] 
[  279.211966][T11977] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal
[  279.553119][T11989] 9pnet: Could not find request transport: tצUunix
[  279.653555][T11994] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2164'.
[  279.659959][T11994] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2164'.
[  279.663570][T11994] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2164'.
[  279.751968][T12000] loop6: detected capacity change from 0 to 512
[  279.764274][T12000] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  279.781392][T12000] EXT4-fs (loop6): orphan cleanup on readonly fs
[  279.786086][T12000] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  279.807400][T12000] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  279.809736][T12000] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #16: comm syz.6.2167: casefold flag without casefold feature
[  279.817462][T12000] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2167: couldn't read orphan inode 16 (err -117)
[  279.827295][T12000] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  279.850352][T10234] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.898702][T12009] loop6: detected capacity change from 0 to 64
[  279.918804][T12009] syz.6.2170: attempt to access beyond end of device
[  279.918804][T12009] loop6: rw=2049, sector=268435468, nr_sectors = 2 limit=64
[  280.063891][T12017] loop6: detected capacity change from 0 to 512
[  280.237263][T12017] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  280.401371][T12017] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #17: comm syz.6.2172: iget: bad i_size value: -6917529027641081756
[  280.424937][T12017] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2172: couldn't read orphan inode 17 (err -117)
[  280.476837][T12017] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  280.980817][T10234] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.450409][T12024] loop6: detected capacity change from 0 to 32768
[  281.453026][T12024] btrfs: Deprecated parameter 'usebackuproot'
[  281.454936][T12024] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  281.458428][T12024] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2173 (12024)
[  281.466730][T12024] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  281.470045][T12024] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  281.472899][T12024] BTRFS info (device loop6): disk space caching is enabled
[  281.475272][T12024] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  281.636190][T10234] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  282.032784][T12063] bond0: option mode: unable to set because the bond device has slaves
[  282.045884][ T2200] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  282.205805][ T2200] usb 5-1: Using ep0 maxpacket: 8
[  282.212627][ T2200] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  282.217048][ T2200] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.220600][ T2200] usb 5-1: Product: syz
[  282.222582][ T2200] usb 5-1: Manufacturer: syz
[  282.224152][ T2200] usb 5-1: SerialNumber: syz
[  282.227510][ T2200] usb 5-1: config 0 descriptor??
[  282.315645][    T9] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[  282.438844][ T2200] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -71
[  282.441814][ T2200] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  282.450443][ T2200] usb 5-1: USB disconnect, device number 16
[  282.489116][    T9] usb 7-1: config index 0 descriptor too short (expected 539, got 27)
[  282.492207][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4
[  282.498035][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 15692, setting to 1023
[  282.503444][    T9] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  282.506300][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.508820][    T9] usb 7-1: Product: syz
[  282.510226][    T9] usb 7-1: Manufacturer: syz
[  282.511763][    T9] usb 7-1: SerialNumber: syz
[  282.521193][    T9] usb 7-1: config 0 descriptor??
[  282.526082][    T9] hub 7-1:0.0: bad descriptor, ignoring hub
[  282.528545][    T9] hub 7-1:0.0: probe with driver hub failed with error -5
[  282.534696][    T9] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input17
[  282.543160][    T9] usbtouchscreen 7-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22
[  282.554626][    T9] usbtouchscreen 7-1:0.0: probe with driver usbtouchscreen failed with error -22
[  282.846023][    T9] usb 7-1: USB disconnect, device number 9
[  283.316379][   T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  283.465498][   T24] usb 5-1: Using ep0 maxpacket: 32
[  283.474609][   T24] usb 5-1: config 4 has an invalid interface number: 128 but max is 0
[  283.486459][   T24] usb 5-1: config 4 has no interface number 0
[  283.511050][   T24] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  283.525423][   T24] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  283.533106][   T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  283.550012][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.564163][   T24] hub 5-1:4.128: USB hub found
[  284.085399][   T24] hub 5-1:4.128: 2 ports detected
[  284.087462][   T24] hub 5-1:4.128: Using single TT (err -22)
[  284.321926][   T24] usb 5-1: USB disconnect, device number 17
[  284.356466][T12113] netlink: 'syz.6.2207': attribute type 6 has an invalid length.
[  284.800979][T12136] loop6: detected capacity change from 0 to 16
[  284.808503][T12136] erofs (device loop6): mounted with root inode @ nid 36.
[  285.184029][T12164] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2231'.
[  285.336360][T12171] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2234'.
[  285.478302][T12177] binder: 12176:12177 ioctl 40046205 0 returned -22
[  285.488901][T12161] loop6: detected capacity change from 0 to 32768
[  285.497873][T12161] 
[  285.497873][T12161]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  285.497873][T12161] 
[  285.510663][T12161] ERROR: (device loop6): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[  285.510663][T12161] 
[  285.545813][ T1089] 
[  285.545813][ T1089]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  285.545813][ T1089] 
[  285.550565][ T1089] 
[  285.550565][ T1089]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  285.550565][ T1089] 
[  285.560979][  T114] 
[  285.560979][  T114]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  285.560979][  T114] 
[  285.568606][T10234] 
[  285.568606][T10234]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  285.568606][T10234] 
[  285.582867][T10234] 
[  285.582867][T10234]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  285.582867][T10234] 
[  286.456703][T12190] loop6: detected capacity change from 0 to 32768
[  286.488117][T12190] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  286.511131][T12190] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  286.513604][T12208] loop4: detected capacity change from 0 to 512
[  286.527589][T12208] EXT4-fs: inline encryption not supported
[  286.532664][T12190] XFS (loop6): Starting recovery (logdev: internal)
[  286.538978][T12208] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  286.552457][T12208] EXT4-fs (loop4): 1 truncate cleaned up
[  286.559082][T12208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  286.578245][T12190] XFS (loop6): Ending recovery (logdev: internal)
[  286.590702][ T7420] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.642822][T10234] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  287.629102][T12253] loop6: detected capacity change from 0 to 32768
[  287.631871][T12253] XFS (loop6): sunit and swidth options incompatible with the noalign option
[  288.226288][T12278] loop4: detected capacity change from 0 to 32768
[  288.240031][T12278] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  288.317912][ T7420] ocfs2: Unmounting device (7,4) on (node local)
[  288.689358][T12298] openvswitch: netlink: IPv6 tunnel dst address is zero
[  289.441591][T12328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2291'.
[  289.727237][T12330] loop6: detected capacity change from 0 to 32768
[  289.770821][T12330] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  289.834931][T12330] XFS (loop6): Ending clean mount
[  289.910719][T10234] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  290.445606][T12363] loop4: detected capacity change from 0 to 32768
[  290.489580][T12363] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  290.759099][ T7420] ocfs2: Unmounting device (7,4) on (node local)
[  292.182909][T12402] loop6: detected capacity change from 0 to 32768
[  292.220089][T12402] XFS: ikeep mount option is deprecated.
[  292.249450][T12402] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  292.328673][T12402] XFS (loop6): Ending clean mount
[  292.335740][T12402] XFS (loop6): Quotacheck needed: Please wait.
[  292.349751][T12424] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2326'.
[  292.381191][T12402] XFS (loop6): Quotacheck: Done.
[  292.412797][T10234] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  292.569745][T12428] loop4: detected capacity change from 0 to 4096
[  292.588506][T12428] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  292.626868][T12428] ntfs3(loop4): ino=19, mi_enum_attr
[  292.631623][T12428] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  292.839073][T12442] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2337'.
[  292.842576][T12442] unsupported nlmsg_type 40
[  292.920650][T12447] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2338'.
[  293.083516][T12458] loop6: detected capacity change from 0 to 8192
[  293.112044][   T33] audit: type=1800 audit(1755044213.483:78): pid=12458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2343" name="file1" dev="loop6" ino=1048651 res=0 errno=0
[  293.174517][T12470] netlink: 'syz.4.2348': attribute type 10 has an invalid length.
[  293.195233][T12470] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  293.336302][T12481] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2352'.
[  293.364599][T12485] (unnamed net_device) (uninitialized): (slave wg2): Device is not bonding slave
[  293.367795][T12485] (unnamed net_device) (uninitialized): option active_slave: invalid value (wg2)
[  293.491593][T12497] loop6: detected capacity change from 0 to 512
[  293.503122][T12497] EXT4-fs (loop6): fragment/cluster size (4096) != block size (1024)
[  293.713649][T12512] loop6: detected capacity change from 0 to 512
[  293.738106][T12512] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.2367: Invalid inode bitmap blk 4 in block_group 0
[  293.761901][T12512] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.818308][T10234] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.178566][T12530] vlan2: entered allmulticast mode
[  294.596274][T12542] loop4: detected capacity change from 0 to 64
[  294.609240][T12542] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  295.051141][T12567] bridge1: entered allmulticast mode
[  295.402102][T12584] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2398'.
[  295.550610][T12585] kernel profiling enabled (shift: 17)
[  296.732025][T12597] loop6: detected capacity change from 0 to 1024
[  296.819796][T12597] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  296.827365][T12597] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  296.933815][   T33] audit: type=1800 audit(1755044217.314:79): pid=12597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2404" name="file1" dev="loop6" ino=15 res=0 errno=0
[  296.999780][T10234] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.039573][T12602] loop4: detected capacity change from 0 to 16
[  297.056329][T12602] erofs (device loop4): mounted with root inode @ nid 36.
[  297.207579][T12610] input: syz0 as /devices/virtual/input/input18
[  297.380841][T12620] veth0_to_bond: entered allmulticast mode
[  297.386679][T12620] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  297.403227][   T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  297.428919][T12624] overlayfs: failed to clone upperpath
[  297.518837][T12632] overlayfs: failed to clone upperpath
[  297.693156][   T24] usb 5-1: Using ep0 maxpacket: 16
[  297.924186][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  297.927920][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  298.231256][T12644] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  298.369986][   T24] usb 5-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00
[  298.377036][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.381694][   T24] usb 5-1: config 0 descriptor??
[  298.684435][   T33] audit: type=1326 audit(1755044219.064:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12664 comm="syz.6.2432" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1918ebe9 code=0x7ffc0000
[  298.700944][   T33] audit: type=1326 audit(1755044219.064:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12664 comm="syz.6.2432" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1918ebe9 code=0x7ffc0000
[  298.712058][   T33] audit: type=1326 audit(1755044219.074:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12664 comm="syz.6.2432" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c1918d550 code=0x7ffc0000
[  298.722242][   T33] audit: type=1326 audit(1755044219.074:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12664 comm="syz.6.2432" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c1918d550 code=0x7ffc0000
[  298.729863][   T33] audit: type=1326 audit(1755044219.074:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12664 comm="syz.6.2432" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1918ebe9 code=0x7ffc0000
[  298.740813][   T33] audit: type=1326 audit(1755044219.074:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12664 comm="syz.6.2432" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1918ebe9 code=0x7ffc0000
[  298.752084][   T33] audit: type=1326 audit(1755044219.074:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12664 comm="syz.6.2432" exe="/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f3c1918ebe9 code=0x7ffc0000
[  298.773182][   T33] audit: type=1326 audit(1755044219.074:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12664 comm="syz.6.2432" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1918ebe9 code=0x7ffc0000
[  298.793552][   T33] audit: type=1326 audit(1755044219.074:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12664 comm="syz.6.2432" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1918ebe9 code=0x7ffc0000
[  298.816107][   T24] kye 0003:0458:500F.0011: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  298.828431][T12670] netlink: 'syz.6.2433': attribute type 1 has an invalid length.
[  298.831361][   T24] kye 0003:0458:500F.0011: item fetching failed at offset 4/5
[  298.831577][T12670] netlink: 'syz.6.2433': attribute type 1 has an invalid length.
[  298.836865][   T24] kye 0003:0458:500F.0011: parse failed
[  298.839571][T12670] netlink: 'syz.6.2433': attribute type 1 has an invalid length.
[  298.840296][   T24] kye 0003:0458:500F.0011: probe with driver kye failed with error -22
[  298.844105][T12670] netlink: 'syz.6.2433': attribute type 1 has an invalid length.
[  298.849998][T12670] netlink: 'syz.6.2433': attribute type 1 has an invalid length.
[  298.857409][T12670] netlink: 'syz.6.2433': attribute type 1 has an invalid length.
[  298.860403][T12670] netlink: 'syz.6.2433': attribute type 1 has an invalid length.
[  298.866347][T12670] netlink: 'syz.6.2433': attribute type 1 has an invalid length.
[  298.869581][T12670] netlink: 'syz.6.2433': attribute type 1 has an invalid length.
[  298.873020][T12670] netlink: 'syz.6.2433': attribute type 1 has an invalid length.
[  298.947013][T12676] netlink: 'syz.1.2437': attribute type 11 has an invalid length.
[  299.011509][ T2200] usb 5-1: USB disconnect, device number 18
[  299.144149][   T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  299.292772][   T24] usb 7-1: Using ep0 maxpacket: 8
[  299.296437][   T24] usb 7-1: unable to get BOS descriptor or descriptor too short
[  299.303596][   T24] usb 7-1: config 7 has an invalid interface number: 142 but max is 0
[  299.306170][   T24] usb 7-1: config 7 has no interface number 0
[  299.310666][   T24] usb 7-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d
[  299.314165][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.316747][   T24] usb 7-1: Product: syz
[  299.318192][   T24] usb 7-1: Manufacturer: syz
[  299.322668][   T24] usb 7-1: SerialNumber: syz
[  299.837706][   T24] usb 7-1: USB disconnect, device number 10
[  300.000156][T12704] block nbd4: shutting down sockets
[  300.159048][T12710] loop4: detected capacity change from 0 to 16
[  300.170821][T12710] erofs (device loop4): unidentified incompatible feature 1000000, please upgrade kernel
[  300.301039][T12714] loop4: detected capacity change from 0 to 16
[  300.306384][T12714] erofs (device loop4): rootino(nid 36) is not a directory(i_mode 23300)
[  300.460181][T12721] loop6: detected capacity change from 0 to 512
[  300.527797][T12721] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  300.562699][T12721] ext4 filesystem being mounted at /256/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  300.641315][T12730] cgroup: name respecified
[  300.685144][T10234] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.838099][T12735] loop6: detected capacity change from 0 to 2048
[  300.846770][T12735] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  300.891705][T12735] overlayfs: upper fs needs to support d_type.
[  300.910331][T12735] overlayfs: cleanup of 'work/#13' failed (-2)
[  300.920685][T12735] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  300.927397][T12735] overlayfs: failed to set xattr on upper
[  300.932107][T12735] overlayfs: ...falling back to redirect_dir=nofollow.
[  300.942821][T12735] overlayfs: ...falling back to index=off.
[  300.945327][T12735] overlayfs: ...falling back to uuid=null.
[  300.950105][T12735] overlayfs: conflicting lowerdir path
[  301.385520][T12742] loop4: detected capacity change from 0 to 1024
[  301.390366][T12742] EXT4-fs: inline encryption not supported
[  301.396790][T12742] EXT4-fs: Ignoring removed i_version option
[  301.407724][T12742] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  301.459700][T12742] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.2467: lblock 2 mapped to illegal pblock 2 (length 1)
[  301.474896][T12742] Quota error (device loop4): qtree_write_dquot: dquota write failed
[  301.483539][T12742] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.2467: lblock 0 mapped to illegal pblock 48 (length 1)
[  301.488379][T12742] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2467: Failed to acquire dquot type 0
[  301.496915][T12742] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  301.501203][T12747] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2469'.
[  301.505648][T12742] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.2467: mark_inode_dirty error
[  301.514066][T12742] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  301.518471][T12742] EXT4-fs (loop4): 1 orphan inode deleted
[  301.525337][T12742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  301.537819][ T1089] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u10:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  301.562035][ T1089] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u10:5: Failed to release dquot type 0
[  301.597961][ T7420] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.601916][ T1089] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u10:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  301.610135][ T1089] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u10:5: Failed to release dquot type 0
[  301.617846][ T7420] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[  301.630493][ T7420] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  301.634539][ T7420] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  301.675915][T12751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2471'.
[  301.679405][T12751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2471'.
[  301.767695][T12755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2473'.
[  301.860290][T12759] loop4: detected capacity change from 0 to 128
[  301.985179][T12759] syz.4.2475: attempt to access beyond end of device
[  301.985179][T12759] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128
[  301.991425][T12759] syz.4.2475: attempt to access beyond end of device
[  301.991425][T12759] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128
[  302.001924][T12759] syz.4.2475: attempt to access beyond end of device
[  302.001924][T12759] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128
[  302.008585][T12759] syz.4.2475: attempt to access beyond end of device
[  302.008585][T12759] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128
[  302.017795][T12759] syz.4.2475: attempt to access beyond end of device
[  302.017795][T12759] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128
[  302.026754][T12759] syz.4.2475: attempt to access beyond end of device
[  302.026754][T12759] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128
[  302.034635][T12759] syz.4.2475: attempt to access beyond end of device
[  302.034635][T12759] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128
[  302.038839][T12759] syz.4.2475: attempt to access beyond end of device
[  302.038839][T12759] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128
[  302.047646][T12759] syz.4.2475: attempt to access beyond end of device
[  302.047646][T12759] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128
[  302.080903][T12759] syz.4.2475: attempt to access beyond end of device
[  302.080903][T12759] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128
[  302.443686][T12764] loop6: detected capacity change from 0 to 32768
[  302.450278][T12764] bcachefs (/dev/loop6): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  302.450278][T12764] clean (size 2912):
[  302.450278][T12764] flags:          0
[  302.450278][T12764] journal_seq:    8
[  302.450278][T12764] usage: type=inodes v=8
[  302.450278][T12764] usage: type=key_version v=0
[  302.450278][T12764] usage: type=reserved v=0
[  302.450278][T12764] usage: type=reserved v=0
[  302.450278][T12764] usage: type=reserved v=0
[  302.450278][T12764] usage: type=(unknown fs_usage_type 3) v=0
[  302.450278][T12764] data_usage: btree: 1/1 [0]=2816
[  302.450278][T12764] data_usage: journal: 1/1 [0]=0
[  302.450278][T12764] data_usage: user: 1/1 [0]=32
[  302.450278][T12764] dev_usage: dev=0  
[  302.450278][T12764]   free: buckets=83 sectors=0 fragmented=0
[  302.450278][T12764]   sb: buckets=25 sectors=6152 fragmented=248
[  302.450278][T12764]   journal: buckets=8 sectors=2048 fragmented=0
[  302.450278][T12764]   btree: buckets=11 sectors=2816 fragmented=0
[  302.450278][T12764]   user: buckets=1 sectors=32 fragmented=224
[  302.450278][T12764]   cached: buckets=0 sectors=0 fragmented=0
[  302.450278][T12764]   parity: buckets=0 sectors=0 fragmented=0
[  302.450278][T12764]   stripe: buckets=0 sectors=0 fragmented=0
[  302.450278][T12764]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  302.450278][T12764]   need_discard: buckets=0 sectors=0 fragmented=0
[  302.450278][T12764] clock: read=0
[  302.450278][T12764] clock: write=1288
[  302.450278][T12764] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 720575940379
[  302.450479][T12764] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  303.010780][T12804] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2497'.
[  303.032405][  T974] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  303.071510][T12808] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2499'.
[  303.186895][  T974] usb 7-1: Using ep0 maxpacket: 32
[  303.198317][  T974] usb 7-1: unable to get BOS descriptor or descriptor too short
[  303.206181][  T974] usb 7-1: config 244 has an invalid interface number: 68 but max is 0
[  303.209035][  T974] usb 7-1: config 244 has no interface number 0
[  303.211730][  T974] usb 7-1: config 244 interface 68 altsetting 3 has an endpoint descriptor with address 0xF8, changing to 0x88
[  303.220363][  T974] usb 7-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  303.228221][  T974] usb 7-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  303.233690][  T974] usb 7-1: config 244 interface 68 altsetting 3 endpoint 0xA has invalid wMaxPacketSize 0
[  303.238103][  T974] usb 7-1: config 244 interface 68 has no altsetting 0
[  303.250186][  T974] usb 7-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f
[  303.255362][  T974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.260043][  T974] usb 7-1: Product: syz
[  303.265731][  T974] usb 7-1: Manufacturer: syz
[  303.267894][  T974] usb 7-1: SerialNumber: syz
[  303.516180][  T974] comedi comedi5: Endpoint has wrong direction
[  303.519471][  T974] dt9812 7-1:244.68: driver 'dt9812' failed to auto-configure device.
[  303.538076][  T974] usb 7-1: USB disconnect, device number 11
[  304.198943][T12843] loop4: detected capacity change from 0 to 32768
[  304.205173][T12843] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section members_v2: device 0: bucket size 9 smaller than btree node size 256
[  304.205173][T12843] members_v2 (size 152):
[  304.205173][T12843] Device:                        0
[  304.205173][T12843]   Label:                       (none)
[  304.205173][T12843]   UUID:                        7af6772b-00de-4159-84cd-1faead05e13e
[  304.205173][T12843]   Size:                        589824
[  304.205173][T12843]   read errors:                 0
[  304.205173][T12843]   write errors:                0
[  304.205173][T12843]   checksum errors:             0
[  304.205173][T12843]   seqread iops:                0
[  304.205173][T12843]   seqwrite iops:               0
[  304.205173][T12843]   randread iops:               0
[  304.205173][T12843]   randwrite iops:              0
[  304.205173][T12843]   Bucket size:                 4608
[  304.205173][T12843]   First bucket:                0
[  304.205173][T12843]   Buckets:                     128
[  304.205173][T12843]   Last mount:                  1714618368
[  304.205173][T12843]   Last superblock write:       42
[  304.205173][T12843]   State:                       rw
[  304.205173][T12843]   Data allowed:                journal,btree,user
[  304.205173][T12843]   Has data:                    (none)
[  304.205173][T12843]   Btree allocated bitmap blocksize:1
[  304.205173][T12843]   Btree allocated bitmap:      0000000000000000000001000010000010011000000000000000000000000000
[  304.205173][T12843]   Durab
[  304.205401][T12843] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  304.260714][    C0] vkms_vblank_simulate: vblank timer overrun
[  304.687222][T12869] loop6: detected capacity change from 0 to 512
[  304.703493][T12869] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  304.756251][T12869] EXT4-fs (loop6): 1 truncate cleaned up
[  304.768422][T12869] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  304.883670][T10234] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.984397][T12878] vivid-007: =================  START STATUS  =================
[  304.987110][T12878] vivid-007: Generate PTS: true
[  304.989329][T12878] vivid-007: Generate SCR: true
[  304.990947][T12878] tpg source WxH: 320x240 (Y'CbCr)
[  305.004761][T12878] tpg field: 1
[  305.005882][T12878] tpg crop: (0,0)/320x240
[  305.007228][T12878] tpg compose: (0,0)/320x240
[  305.008742][T12878] tpg colorspace: 8
[  305.009966][T12878] tpg transfer function: 0/0
[  305.011546][T12878] tpg Y'CbCr encoding: 0/0
[  305.033999][T12878] tpg quantization: 0/0
[  305.040104][T12878] tpg RGB range: 0/2
[  305.041532][T12878] vivid-007: ==================  END STATUS  ==================
[  305.112179][T12880] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10)
[  305.114811][T12880] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  305.131035][T12880] vhci_hcd vhci_hcd.0: Device attached
[  305.373324][ T2200] usb 41-1: new high-speed USB device number 2 using vhci_hcd
[  305.454071][T12894] loop6: detected capacity change from 0 to 4096
[  305.460717][T12894] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  305.479310][T12894] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  305.487141][T12894] ntfs3(loop6): Failed to load $UpCase (-22).
[  305.742822][T12883] vhci_hcd: connection reset by peer
[  305.750103][ T5875] vhci_hcd: stop threads
[  305.754966][ T5875] vhci_hcd: release socket
[  305.773310][ T5875] vhci_hcd: disconnect device
[  306.627226][T12916] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  306.644113][T12916] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  306.707876][T12922] loop6: detected capacity change from 0 to 512
[  306.712016][T12922] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  306.716888][T12922] EXT4-fs (loop6): orphan cleanup on readonly fs
[  306.719210][T12922] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.2548: bad orphan inode 458763
[  306.727028][T12922] EXT4-fs (loop6): Remounting filesystem read-only
[  306.730780][T12922] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  306.785857][T10234] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.174693][T12927] loop6: detected capacity change from 0 to 32768
[  307.191589][T12927] find_entry called with index = 0
[  307.723182][T12955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2560'.
[  308.047941][T12978] netlink: 356 bytes leftover after parsing attributes in process `syz.4.2571'.
[  308.435577][T12995] loop4: detected capacity change from 0 to 1024
[  308.438408][   T33] kauditd_printk_skb: 4 callbacks suppressed
[  308.438425][   T33] audit: type=1326 audit(1755044228.816:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12997 comm="syz.1.2580" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06a4b8ebe9 code=0x0
[  308.445587][T12999] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2581'.
[  308.460882][T12995] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  308.468562][T12995] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[  308.473855][T12995] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  308.482551][T12995] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.2579: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  308.495124][T12995] EXT4-fs (loop4): no journal found
[  308.497270][T12995] EXT4-fs (loop4): can't get journal size
[  308.523134][T12995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  308.557860][ T7420] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.583991][    C0] vkms_vblank_simulate: vblank timer overrun
[  308.700692][T13010] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2586'.
[  309.004840][T13016] loop6: detected capacity change from 0 to 32768
[  309.094970][T13032] netlink: 212364 bytes leftover after parsing attributes in process `syz.1.2593'.
[  309.099314][T13032] openvswitch: netlink: Message has 5 unknown bytes.
[  309.117460][T13016] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=24,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=very,nojournal_transaction_names,rebalance_on_ac_only
[  309.117493][T13016]   allowing incompatible features above 0.0: (unknown version)
[  309.117504][T13016]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  309.148968][T13016] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0
[  309.154406][T13016] bcachefs (loop6): initializing new filesystem
[  309.211175][    T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  309.232901][T13016] bcachefs (loop6): going read-write
[  309.250542][T13016] bcachefs (loop6): marking superblocks
[  309.279298][T13016] bcachefs (loop6): initializing freespace
[  309.299122][T13016] bcachefs (loop6): done initializing freespace
[  309.358717][T13016] bcachefs (loop6): reading snapshots table
[  309.362251][T13016] bcachefs (loop6): reading snapshots done
[  309.371193][    T9] usb 5-1: Using ep0 maxpacket: 32
[  309.392268][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  309.511801][T13039] Invalid ELF header magic: != ELF
[  309.723467][T13016] bcachefs (loop6): done starting filesystem
[  309.747142][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  309.751424][    T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[  309.755259][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.774326][    T9] usb 5-1: config 0 descriptor??
[  309.907199][T10234] bcachefs (loop6): shutting down
[  309.909389][T10234] bcachefs (loop6): going read-only
[  309.913690][T10234] bcachefs (loop6): finished waiting for writes to stop
[  309.920494][T10234] bcachefs (loop6): flushing journal and stopping allocators, journal seq 2
[  309.980620][T10234] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 3
[  310.006621][T10234] bcachefs (loop6): clean shutdown complete, journal seq 4
[  310.009415][T10234] bcachefs (loop6): marking filesystem clean
[  310.039422][T10234] bcachefs (loop6): shutdown complete
[  310.203071][    T9] redragon 0003:0C45:760B.0012: unknown main item tag 0x0
[  310.205855][    T9] redragon 0003:0C45:760B.0012: unknown main item tag 0x0
[  310.208732][    T9] redragon 0003:0C45:760B.0012: unknown main item tag 0x0
[  310.211807][    T9] redragon 0003:0C45:760B.0012: unknown main item tag 0x0
[  310.214913][    T9] redragon 0003:0C45:760B.0012: unknown main item tag 0x0
[  310.221701][    T9] redragon 0003:0C45:760B.0012: hidraw0: USB HID v80.00 Device [HID 0c45:760b] on usb-dummy_hcd.4-1/input0
[  310.312094][T13046] validate_nla: 43 callbacks suppressed
[  310.312153][T13046] netlink: 'syz.1.2598': attribute type 10 has an invalid length.
[  310.317707][T13046] netlink: 1948 bytes leftover after parsing attributes in process `syz.1.2598'.
[  310.322742][T13046] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2598'.
[  310.414238][    T9] usb 5-1: USB disconnect, device number 19
[  310.530814][ T2200] vhci_hcd: vhci_device speed not set
[  310.849575][    C0] vkms_vblank_simulate: vblank timer overrun
[  311.021075][T13050] loop4: detected capacity change from 0 to 256
[  311.027726][T13050] exfat: Deprecated parameter 'namecase'
[  311.057433][T13050] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb45cf0ee, utbl_chksum : 0xe619d30d)
[  311.318511][T13062] loop6: detected capacity change from 0 to 256
[  311.326741][T13062] exfat: Deprecated parameter 'namecase'
[  311.329167][T13062] exfat: Deprecated parameter 'utf8'
[  311.384669][T13062] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  311.399911][T13062] overlay: filesystem on ./file0 not supported
[  311.616815][T13074] loop4: detected capacity change from 0 to 1024
[  311.989845][T13083] loop4: detected capacity change from 0 to 256
[  312.020138][T13083] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  312.178207][T13085] loop4: detected capacity change from 0 to 64
[  312.920448][ T2200] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  313.080600][ T2200] usb 7-1: Using ep0 maxpacket: 32
[  313.088681][ T2200] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[  313.099496][ T2200] usb 7-1: config 0 has no interface number 0
[  313.118156][ T2200] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  313.127712][ T2200] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.137771][ T2200] usb 7-1: Product: syz
[  313.143247][ T2200] usb 7-1: Manufacturer: syz
[  313.147534][ T2200] usb 7-1: SerialNumber: syz
[  313.163196][ T2200] usb 7-1: config 0 descriptor??
[  313.189589][ T2200] smsc95xx v2.0.0
[  313.467200][T13107] loop4: detected capacity change from 0 to 1024
[  313.519012][T13107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  313.539800][T13107] ext4 filesystem being mounted at /622/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  313.557964][T13107] EXT4-fs (loop4): Online resizing not supported with bigalloc
[  313.585525][ T7420] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.623147][ T2200] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  313.631212][ T2200] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  313.740983][T13114] tipc: Enabling of bearer <etl:g> rejected, media not registered
[  313.886981][T13124] netlink: 'syz.4.2631': attribute type 1 has an invalid length.
[  313.898376][T13124] netlink: 'syz.4.2631': attribute type 4 has an invalid length.
[  313.902759][T13124] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2631'.
[  313.906949][T13124] NCSI netlink: No device for ifindex 3088861696
[  314.717174][T13148] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2642'.
[  316.130071][T13202] batman_adv: batadv0: Adding interface: dummy0
[  316.132286][T13202] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem.
[  316.143101][T13202] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  316.321880][ T2200] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  316.326755][ T2200] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71
[  316.337394][ T2200] usb 7-1: USB disconnect, device number 12
[  316.492144][T13221] fuse: Bad value for 'fd'
[  316.633052][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  317.207794][T13235] netlink: 172 bytes leftover after parsing attributes in process `syz.6.2682'.
[  318.029819][  T974] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  318.189810][  T974] usb 7-1: Using ep0 maxpacket: 16
[  318.235291][  T974] usb 7-1: unable to get BOS descriptor or descriptor too short
[  318.281237][  T974] usb 7-1: config 128 has an invalid interface number: 66 but max is 0
[  318.283870][  T974] usb 7-1: config 128 has no interface number 0
[  318.286126][  T974] usb 7-1: config 128 interface 66 has no altsetting 0
[  318.304196][  T974] usb 7-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=1e.90
[  318.307142][  T974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.316028][  T974] usb 7-1: Product: syz
[  318.317417][  T974] usb 7-1: Manufacturer: syz
[  318.318946][  T974] usb 7-1: SerialNumber: syz
[  318.403897][T13279] tipc: Started in network mode
[  318.406041][T13279] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  318.413258][T13279] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  318.583883][  T974] comedi comedi5: could not set alternate setting 3 in high speed
[  318.587108][  T974] usbduxsigma 7-1:128.66: driver 'usbduxsigma' failed to auto-configure device.
[  318.603091][  T974] usbduxsigma 7-1:128.66: probe with driver usbduxsigma failed with error -71
[  318.613558][  T974] usb 7-1: USB disconnect, device number 13
[  319.027435][T13292] loop4: detected capacity change from 0 to 128
[  319.038510][   T33] audit: type=1800 audit(1755044239.417:91): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2709" name="file1" dev="loop4" ino=1048662 res=0 errno=0
[  319.379330][T13298] loop6: detected capacity change from 0 to 32768
[  319.383030][T13298] XFS: ikeep mount option is deprecated.
[  319.427190][T13298] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  319.448419][T13298] XFS (loop6): Ending clean mount
[  319.454317][T13298] XFS (loop6): Quotacheck needed: Please wait.
[  319.506624][T13298] XFS (loop6): Quotacheck: Done.
[  319.509559][   T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  320.225762][   T24] usb 5-1: config 0 has an invalid interface number: 64 but max is 0
[  320.228780][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  320.233722][   T24] usb 5-1: config 0 has no interface number 0
[  320.252676][   T24] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  320.256368][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.259622][   T24] usb 5-1: Product: syz
[  320.261355][   T24] usb 5-1: Manufacturer: syz
[  320.263247][   T24] usb 5-1: SerialNumber: syz
[  320.277143][   T24] usb 5-1: config 0 descriptor??
[  320.302585][   T24] usb 5-1: Found UVC 0.00 device syz (046d:0823)
[  320.305145][   T24] usb 5-1: No valid video chain found.
[  320.457011][T10234] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  320.550307][   T24] usb 5-1: USB disconnect, device number 20
[  320.717043][T13327] netlink: 'syz.1.2721': attribute type 5 has an invalid length.
[  320.749043][    C0] vkms_vblank_simulate: vblank timer overrun
[  320.778594][T13329] loop6: detected capacity change from 0 to 256
[  320.783732][T13329] exfat: Deprecated parameter 'utf8'
[  320.793532][T13329] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  321.782333][T13350] vlan2: entered promiscuous mode
[  321.784295][T13350] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  321.984920][T13352] [U] V3Fپ"W/4:XTZWTLW=
[  321.989966][T13352] [U] J"E:"
[  322.912667][    C1] ==================================================================
[  322.915925][    C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  322.919188][    C1] Write of size 8 at addr ffff88802101a430 by task syz-executor/7420
[  322.923197][    C1] 
[  322.924594][    C1] CPU: 1 UID: 0 PID: 7420 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  322.924613][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  322.924623][    C1] Call Trace:
[  322.924630][    C1]  <TASK>
[  322.924640][    C1]  dump_stack_lvl+0x189/0x250
[  322.924662][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  322.924680][    C1]  ? rcu_is_watching+0x15/0xb0
[  322.924693][    C1]  ? __kasan_check_byte+0x12/0x40
[  322.924711][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  322.924725][    C1]  ? rcu_is_watching+0x15/0xb0
[  322.924737][    C1]  ? lock_release+0x4b/0x3e0
[  322.924759][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  322.924775][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  322.924796][    C1]  print_report+0xca/0x240
[  322.924812][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  322.924829][    C1]  kasan_report+0x118/0x150
[  322.924846][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  322.924866][    C1]  __xfrm_state_delete+0x696/0xca0
[  322.924886][    C1]  xfrm_timer_handler+0x18f/0xa00
[  322.924903][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  322.924917][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  322.924935][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  322.924952][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  322.924967][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  322.924985][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  322.925011][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  322.925061][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  322.925082][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  322.925095][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  322.925109][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  322.925126][    C1]  handle_softirqs+0x286/0x870
[  322.925142][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  322.925157][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  322.925174][    C1]  __irq_exit_rcu+0xca/0x1f0
[  322.925187][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  322.925205][    C1]  irq_exit_rcu+0x9/0x30
[  322.925218][    C1]  sysvec_apic_timer_interrupt+0x57/0xc0
[  322.925237][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  322.925256][    C1] RIP: 0033:0x7f378398d3fa
[  322.925272][    C1] Code: 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 0b 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 90 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7
[  322.925287][    C1] RSP: 002b:00007ffc464563a8 EFLAGS: 00000286
[  322.925302][    C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f378398d3fa
[  322.925312][    C1] RDX: 00007ffc464563d0 RSI: 00007ffc46456460 RDI: 00000000ffffff9c
[  322.925323][    C1] RBP: 00007ffc46456460 R08: 0000000000000000 R09: 0000000000000000
[  322.925332][    C1] R10: 0000000000000100 R11: 0000000000000286 R12: 00007ffc464574f0
[  322.925343][    C1] R13: 00007f3783a11c05 R14: 000000000004ee43 R15: 00007ffc46457530
[  322.925360][    C1]  </TASK>
[  322.925365][    C1] 
[  323.039800][    C1] Allocated by task 11808:
[  323.041572][    C1]  kasan_save_track+0x3e/0x80
[  323.043530][    C1]  __kasan_slab_alloc+0x6c/0x80
[  323.045620][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  323.047973][    C1]  xfrm_state_alloc+0x24/0x2f0
[  323.050004][    C1]  __find_acq_core+0x8a7/0x1c00
[  323.052074][    C1]  xfrm_find_acq+0x78/0xa0
[  323.053876][    C1]  xfrm_alloc_userspi+0x6b3/0xc90
[  323.055941][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  323.058043][    C1]  netlink_rcv_skb+0x208/0x470
[  323.060074][    C1]  xfrm_netlink_rcv+0x79/0x90
[  323.062096][    C1]  netlink_unicast+0x82f/0x9e0
[  323.064048][    C1]  netlink_sendmsg+0x805/0xb30
[  323.065990][    C1]  __sock_sendmsg+0x21c/0x270
[  323.067980][    C1]  ____sys_sendmsg+0x505/0x830
[  323.069946][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  323.071934][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  323.073953][    C1]  do_syscall_64+0xfa/0x3b0
[  323.075836][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.078316][    C1] 
[  323.079336][    C1] Freed by task 9:
[  323.080905][    C1]  kasan_save_track+0x3e/0x80
[  323.082934][    C1]  kasan_save_free_info+0x46/0x50
[  323.085101][    C1]  __kasan_slab_free+0x5b/0x80
[  323.087157][    C1]  kmem_cache_free+0x18f/0x400
[  323.089158][    C1]  xfrm_state_gc_task+0x52d/0x6b0
[  323.091273][    C1]  process_scheduled_works+0xae1/0x17b0
[  323.093494][    C1]  worker_thread+0x8a0/0xda0
[  323.095454][    C1]  kthread+0x711/0x8a0
[  323.097222][    C1]  ret_from_fork+0x3fc/0x770
[  323.099239][    C1]  ret_from_fork_asm+0x1a/0x30
[  323.101290][    C1] 
[  323.102302][    C1] The buggy address belongs to the object at ffff88802101a400
[  323.102302][    C1]  which belongs to the cache xfrm_state of size 928
[  323.107901][    C1] The buggy address is located 48 bytes inside of
[  323.107901][    C1]  freed 928-byte region [ffff88802101a400, ffff88802101a7a0)
[  323.113578][    C1] 
[  323.114600][    C1] The buggy address belongs to the physical page:
[  323.117217][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802101a400 pfn:0x21018
[  323.121274][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  323.124687][    C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  323.127879][    C1] page_type: f5(slab)
[  323.129587][    C1] raw: 00fff00000000040 ffff888104e66780 dead000000000122 0000000000000000
[  323.133034][    C1] raw: ffff88802101a400 00000000800e0006 00000000f5000000 0000000000000000
[  323.136687][    C1] head: 00fff00000000040 ffff888104e66780 dead000000000122 0000000000000000
[  323.140421][    C1] head: ffff88802101a400 00000000800e0006 00000000f5000000 0000000000000000
[  323.143993][    C1] head: 00fff00000000002 ffffea0000840601 00000000ffffffff 00000000ffffffff
[  323.147507][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  323.151042][    C1] page dumped because: kasan: bad access detected
[  323.153807][    C1] page_owner tracks the page as allocated
[  323.156286][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6081, tgid 6078 (syz.0.61), ts 73220418903, free_ts 67593987123
[  323.164043][    C1]  post_alloc_hook+0x240/0x2a0
[  323.166085][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  323.168530][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  323.171048][    C1]  alloc_pages_mpol+0x232/0x4a0
[  323.173227][    C1]  allocate_slab+0x8a/0x370
[  323.175165][    C1]  ___slab_alloc+0xbeb/0x1410
[  323.177157][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  323.179387][    C1]  xfrm_state_alloc+0x24/0x2f0
[  323.181349][    C1]  xfrm_state_find+0x37d4/0x5400
[  323.183478][    C1]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  323.186299][    C1]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  323.188719][    C1]  xfrm_lookup_route+0x3c/0x1c0
[  323.190825][    C1]  udp_sendmsg+0x142e/0x2170
[  323.192747][    C1]  __sock_sendmsg+0x19c/0x270
[  323.194661][    C1]  ____sys_sendmsg+0x52d/0x830
[  323.196645][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  323.198645][    C1] page last free pid 5847 tgid 5847 stack trace:
[  323.201390][    C1]  __free_frozen_pages+0xbc4/0xd30
[  323.203622][    C1]  __put_partials+0x156/0x1a0
[  323.205668][    C1]  put_cpu_partial+0x17c/0x250
[  323.207665][    C1]  __slab_free+0x2d5/0x3c0
[  323.209481][    C1]  qlist_free_all+0x97/0x140
[  323.211425][    C1]  kasan_quarantine_reduce+0x148/0x160
[  323.213785][    C1]  __kasan_slab_alloc+0x22/0x80
[  323.216072][    C1]  __kmalloc_node_track_caller_noprof+0x216/0x4e0
[  323.218872][    C1]  memdup_user+0x2b/0xd0
[  323.220693][    C1]  strndup_user+0x68/0xd0
[  323.222508][    C1]  __se_sys_mount+0x9c/0x410
[  323.224392][    C1]  do_syscall_64+0xfa/0x3b0
[  323.226248][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.228748][    C1] 
[  323.229841][    C1] Memory state around the buggy address:
[  323.232340][    C1]  ffff88802101a300: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  323.235776][    C1]  ffff88802101a380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  323.238977][    C1] >ffff88802101a400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  323.242316][    C1]                                      ^
[  323.244670][    C1]  ffff88802101a480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  323.247965][    C1]  ffff88802101a500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  323.251297][    C1] ==================================================================
[  323.255076][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  323.257951][    C1] CPU: 1 UID: 0 PID: 7420 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  323.262886][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  323.267336][    C1] Call Trace:
[  323.268732][    C1]  <TASK>
[  323.269939][    C1]  dump_stack_lvl+0x99/0x250
[  323.271764][    C1]  ? __asan_memcpy+0x40/0x70
[  323.273632][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  323.275843][    C1]  ? __pfx__printk+0x10/0x10
[  323.277820][    C1]  vpanic+0x281/0x750
[  323.279550][    C1]  ? __pfx_print_hex_dump+0x10/0x10
[  323.281762][    C1]  ? __pfx_vpanic+0x10/0x10
[  323.283661][    C1]  ? irqentry_exit+0x74/0x90
[  323.285458][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  323.287482][    C1]  panic+0xb9/0xc0
[  323.288991][    C1]  ? __pfx_panic+0x10/0x10
[  323.290835][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  323.293358][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  323.296034][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  323.298161][    C1]  check_panic_on_warn+0x89/0xb0
[  323.300101][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  323.302238][    C1]  end_report+0x78/0x160
[  323.304023][    C1]  kasan_report+0x129/0x150
[  323.305897][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  323.308174][    C1]  __xfrm_state_delete+0x696/0xca0
[  323.310281][    C1]  xfrm_timer_handler+0x18f/0xa00
[  323.312330][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  323.314498][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  323.316795][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  323.318943][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  323.321410][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  323.323940][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  323.326322][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  323.328709][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  323.330905][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  323.333225][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  323.335736][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  323.337943][    C1]  handle_softirqs+0x286/0x870
[  323.340019][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  323.342103][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  323.344305][    C1]  __irq_exit_rcu+0xca/0x1f0
[  323.346192][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  323.348323][    C1]  irq_exit_rcu+0x9/0x30
[  323.350051][    C1]  sysvec_apic_timer_interrupt+0x57/0xc0
[  323.352333][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  323.354780][    C1] RIP: 0033:0x7f378398d3fa
[  323.356658][    C1] Code: 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 0b 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 90 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7
[  323.364540][    C1] RSP: 002b:00007ffc464563a8 EFLAGS: 00000286
[  323.367030][    C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f378398d3fa
[  323.370225][    C1] RDX: 00007ffc464563d0 RSI: 00007ffc46456460 RDI: 00000000ffffff9c
[  323.373529][    C1] RBP: 00007ffc46456460 R08: 0000000000000000 R09: 0000000000000000
[  323.376893][    C1] R10: 0000000000000100 R11: 0000000000000286 R12: 00007ffc464574f0
[  323.380157][    C1] R13: 00007f3783a11c05 R14: 000000000004ee43 R15: 00007ffc46457530
[  323.383304][    C1]  </TASK>
[  323.385329][    C1] Kernel Offset: disabled
[  323.387164][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:34:25  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000004 RBX=0000000000000202 RCX=95d47bedf1df6700 RDX=0000000000000000
RSI=ffffffff8d9c7f0a RDI=ffffffff8be32600 RBP=ffff88810fae27b0 RSP=ffffc900082e7528
R8 =ffff88810180b08f R9 =1ffff11020301611 R10=dffffc0000000000 R11=ffffed1020301612
R12=0000000000000003 R13=0000000000000003 R14=ffffffff8e139ee0 R15=ffff88810fae1cc0
RIP=ffffffff819d6cf3 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555569e11500 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b34323ffc CR3=000000011307a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=0000000000000000 00007f3c19212ee7 XMM09=0000000000000000 00007f3c19212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90004fd72f0
R8 =ffff88801ef10237 R9 =1ffff11003de2046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af18c6 R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558da64500 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc46455bf8 CR3=000000002fa00000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f3783a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
