last executing test programs:

3m7.320431709s ago: executing program 2 (id=736):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="d2ffdd934517f3e145fa02e086dd", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m7.240687476s ago: executing program 2 (id=738):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000280), 0x0}, 0x20)

3m7.175742809s ago: executing program 2 (id=740):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x73}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x2, 0x4}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

3m7.071470466s ago: executing program 2 (id=741):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18008, &(0x7f0000003b40)=ANY=[], 0x7, 0x2f4, &(0x7f0000000880)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file1'}, 0xb)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0xb0}}, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ptrace(0x10, r1)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0)
ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={0x0})

3m6.960181547s ago: executing program 2 (id=745):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x2, @mcast1, 0xb}, 0x1c)
setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0)

3m6.687124436s ago: executing program 2 (id=746):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000002100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m6.469031466s ago: executing program 32 (id=746):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000002100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m24.246484891s ago: executing program 3 (id=1157):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]})
r0 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil)
shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x5000)

2m24.187272453s ago: executing program 3 (id=1159):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r1, 0x0, 0xf}, 0x18)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

2m24.051743114s ago: executing program 3 (id=1163):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1)

2m23.962776069s ago: executing program 3 (id=1165):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000200)={[{@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@umask={'umask', 0x3d, 0x9}}, {@namecase}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x5275}}, {@errors_remount}, {@gid}, {@errors_remount}, {@discard}, {@errors_continue}]}, 0x3, 0x1510, &(0x7f0000003640)="$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")
chdir(&(0x7f0000000080)='./file0\x00')
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x1, 0x5, 0xfffffffb}}, 0x30)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="b0"], 0xb0)
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
truncate(&(0x7f0000000240)='./file0\x00', 0x206b12)

2m23.875401838s ago: executing program 3 (id=1168):
ioperm(0x0, 0x8, 0x8000000000004)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0)

2m22.691773728s ago: executing program 3 (id=1190):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000007c0)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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")
syz_mount_image$ext4(0x0, &(0x7f0000000580)='./file0\x00', 0x3956400, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x51f303, 0x67)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, 0x0)

2m22.495984486s ago: executing program 33 (id=1190):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000007c0)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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")
syz_mount_image$ext4(0x0, &(0x7f0000000580)='./file0\x00', 0x3956400, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x51f303, 0x67)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, 0x0)

3.721589282s ago: executing program 4 (id=2876):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f00000001c0)=0x2f, 0x4)

3.601862679s ago: executing program 4 (id=2877):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101)
ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000001180)=0x6)

3.600168638s ago: executing program 4 (id=2879):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0, 0x7fdfee00}, {&(0x7f0000000140)="d9", 0x98}], 0x2, 0x0, 0x0, 0x3)

3.410050619s ago: executing program 4 (id=2881):
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffc}}, 0x10)
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}])
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000040}, 0x4008000)

3.173787858s ago: executing program 4 (id=2882):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002dc0)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0x1c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "5df2de6f5d4fbef2bb78e171693a589dc3"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0)

3.115184006s ago: executing program 4 (id=2883):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)
read(r0, &(0x7f00000001c0)=""/93, 0x5d)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0x3}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000240)={0x2, 0xfc}, 0x2)

1.716505883s ago: executing program 0 (id=2907):
syz_mount_image$bcachefs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0x7, 0x5b0c, &(0x7f000000f600)="$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")

1.306086681s ago: executing program 0 (id=2915):
r0 = socket$netlink(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180), 0x0, 0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vxcan1\x00'})
sendmsg$nl_route(r1, 0x0, 0x40001)
setresgid(0xee00, 0x0, 0xee00)
setresgid(0xffffffffffffffff, 0x0, 0x0)
r2 = geteuid()
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r2, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@noblock_validity}, {@nobarrier}, {@sysvgroups}, {@nobh}, {@nobh}, {@orlov}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@sysvgroups}, {@nomblk_io_submit}], [{@uid_lt={'uid<', r2}}, {@fsname={'fsname', 0x3d, 'GPL\x00'}}, {@measure}, {@smackfstransmute={'smackfstransmute', 0x3d, 'hugetlbfs\x00'}}, {@uid_lt={'uid<', r2}}, {@obj_role={'obj_role', 0x3d, 'gre0\x00'}}, {@seclabel}]}, 0x3, 0x584, &(0x7f0000001080)="$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")
mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0)
chdir(&(0x7f0000000640)='./file0\x00')
openat(r1, &(0x7f00000000c0)='./file0\x00', 0x101042, 0x45)
r4 = openat(0xffffffffffffff9c, 0x0, 0x8040, 0x0)
fcntl$setlease(r4, 0x400, 0x1)
link(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)='./bus\x00')
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0)

1.033904534s ago: executing program 0 (id=2916):
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd)
keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55)
socket$packet(0x11, 0x2, 0x300)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000040)=""/162, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x4)

153.512702ms ago: executing program 1 (id=2921):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000)

152.989224ms ago: executing program 0 (id=2922):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"a2e3ad09ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f363563030890e0879b0af8c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)
ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0)

152.84241ms ago: executing program 1 (id=2923):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4)

68.174029ms ago: executing program 1 (id=2924):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40)

67.796422ms ago: executing program 1 (id=2925):
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4)
readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/83, 0x53)

548.85µs ago: executing program 0 (id=2926):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000440)={0x0, 0x1, 0x1a, 0x1b, 0x20000006, &(0x7f0000000480)="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"})

335.516µs ago: executing program 1 (id=2927):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94)
r0 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x1d0}, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x1d})
io_uring_enter(r0, 0x6f58, 0x0, 0x0, 0x0, 0x0)

178.549µs ago: executing program 0 (id=2928):
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xa, 0x234, &(0x7f0000000900)="$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")
sync()
unlink(&(0x7f00000001c0)='./file0\x00')

0s ago: executing program 1 (id=2929):
r0 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1}}}], 0x20}, 0x8000)
sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000008c0)="657573a2aaa76a045d877c1f6455a4bb7edaedaf2406cf034c55272afe4a39f80fec79674992739b3f1d46ab6fc6b8", 0x2f}], 0x1}, 0x80)

kernel console output (not intermixed with test programs):


[  202.755802][   T51] usb-storage 1-1:1.0: USB Mass Storage device detected
[  202.762383][   T51] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  202.950731][   T51] usb 1-1: USB disconnect, device number 21
[  203.053369][T10321] loop4: detected capacity change from 0 to 8192
[  203.255360][T10335] netlink: 5348 bytes leftover after parsing attributes in process `syz.1.1551'.
[  203.515761][T10358] loop0: detected capacity change from 0 to 64
[  203.908273][   T51] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  204.083842][   T51] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  204.087754][   T51] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  204.096066][   T51] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  204.098904][   T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.111185][   T51] usb 1-1: Product: syz
[  204.112716][   T51] usb 1-1: Manufacturer: syz
[  204.114273][   T51] usb 1-1: SerialNumber: syz
[  204.121724][   T51] cdc_mbim 1-1:1.0: skipping garbage
[  204.275375][T10403] loop4: detected capacity change from 0 to 512
[  204.303189][T10403] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1582: casefold flag without casefold feature
[  204.328530][T10403] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1582: couldn't read orphan inode 15 (err -117)
[  204.333828][T10369] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  204.342646][T10403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.391092][ T9273] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.941766][T10369] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  204.944488][   T51] cdc_mbim 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  204.947017][   T51] cdc_mbim 1-1:1.0: setting rx_max = 2048
[  205.104067][T10419] netlink: 'syz.1.1587': attribute type 1 has an invalid length.
[  205.106604][T10419] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.145431][   T51] cdc_mbim 1-1:1.0: setting tx_max = 184
[  205.152507][   T51] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device
[  205.163649][   T51] wwan wwan0: port wwan0mbim0 attached
[  205.174062][   T51] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, a2:fc:83:c0:03:86
[  205.365997][   T51] usb 1-1: USB disconnect, device number 22
[  205.443813][   T51] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM
[  205.506172][   T51] wwan wwan0: port wwan0mbim0 disconnected
[  205.519296][T10429] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1590'.
[  205.525972][T10429] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  205.887027][T10457] loop4: detected capacity change from 0 to 512
[  205.925587][T10457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.934878][T10457] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  206.272556][T10470] loop0: detected capacity change from 0 to 128
[  206.298446][T10470] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  206.307315][T10470] ext4 filesystem being mounted at /560/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  206.360503][ T5844] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  206.746320][ T9273] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.495848][T10480] syz.0.1608 (10480): drop_caches: 2
[  207.867471][T10492] syz.0.1613 (10492): drop_caches: 2
[  208.115785][T10512] loop0: detected capacity change from 0 to 256
[  208.127270][T10512] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  208.384617][T10523] loop0: detected capacity change from 0 to 4096
[  208.399546][T10523] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  208.447781][T10523] ntfs3(loop0): ino=19, mi_enum_attr
[  208.449609][T10529] loop4: detected capacity change from 0 to 512
[  208.451053][T10523] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  208.478026][T10523] ntfs3(loop0): failed to convert "c46c" to cp1255
[  208.478293][T10529] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1631: bad orphan inode 11
[  208.480433][T10523] ntfs3(loop0): ino=20, mi_enum_attr
[  208.506525][T10529] ext4_test_bit(bit=10, block=4) = 1
[  208.508766][T10529] is_bad_inode(inode)=0
[  208.510449][T10529] NEXT_ORPHAN(inode)=2080374784
[  208.521360][T10529] max_ino=32
[  208.529337][T10529] i_nlink=0
[  208.530579][T10529] EXT4-fs (loop4): 1 truncate cleaned up
[  208.536851][T10529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.560189][T10529] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1631: bg 0: block 393: padding at end of block bitmap is not set
[  208.587613][T10529] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  208.624788][ T9273] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.300284][T10533] loop0: detected capacity change from 0 to 32768
[  209.323547][T10533] read_mapping_page failed!
[  209.753836][T10553] loop4: detected capacity change from 0 to 2048
[  209.826193][T10553] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  211.765699][T10581] loop0: detected capacity change from 0 to 4096
[  212.089893][T10581] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  212.104091][T10581] ntfs3(loop0): Failed to load $Extend (-22).
[  212.106114][T10581] ntfs3(loop0): Failed to initialize $Extend.
[  212.511384][ T5909] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  212.671452][ T5909] usb 5-1: Using ep0 maxpacket: 16
[  212.677154][ T5909] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  212.680877][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.686411][ T5909] usb 5-1: config 0 descriptor??
[  212.699491][ T5909] gspca_main: sonixj-2.14.0 probing 0471:0327
[  213.101388][ T5909] gspca_sonixj: reg_r err -71
[  213.103912][ T5909] sonixj 5-1:0.0: probe with driver sonixj failed with error -71
[  213.109705][ T5909] usb 5-1: USB disconnect, device number 9
[  213.820346][ T8017] block nbd0: Receive control failed (result -32)
[  213.879200][T10639] <
[  214.118203][T10653] netlink: 'syz.1.1684': attribute type 84 has an invalid length.
[  214.385373][T10663] loop0: detected capacity change from 0 to 512
[  214.399740][T10663] EXT4-fs: Ignoring removed nomblk_io_submit option
[  214.419553][T10663] EXT4-fs (loop0): Test dummy encryption mode enabled
[  214.545977][T10663] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 17. Delete some EAs or run e2fsck.
[  214.563017][T10663] EXT4-fs (loop0): 1 truncate cleaned up
[  214.566616][T10663] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  214.686149][T10644] loop4: detected capacity change from 0 to 131072
[  214.693644][T10644] F2FS-fs (loop4): Test dummy encryption mode enabled
[  214.701120][T10644] F2FS-fs (loop4): invalid crc value
[  214.844575][T10644] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  214.882027][T10644] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  215.178268][T10684] netlink: 'syz.1.1693': attribute type 1 has an invalid length.
[  215.183179][T10684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1693'.
[  215.193362][T10644] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  215.248165][T10687] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1694'.
[  216.577878][ T5239] Bluetooth: hci1: command 0x0406 tx timeout
[  216.995822][T10730] loop4: detected capacity change from 0 to 40427
[  217.011116][T10730] F2FS-fs (loop4): Image doesn't support compression
[  217.015716][T10730] F2FS-fs (loop4): build fault injection rate: 690
[  217.020752][T10730] F2FS-fs (loop4): invalid crc value
[  217.087052][T10730] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  217.090735][T10730] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  217.099025][   T33] audit: type=1800 audit(1755142596.340:31): pid=10730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1713" name="file1" dev="loop4" ino=10 res=0 errno=0
[  217.124531][ T9273] syz-executor: attempt to access beyond end of device
[  217.124531][ T9273] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  217.129835][ T9273] CPU: 1 UID: 0 PID: 9273 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  217.129860][ T9273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  217.129869][ T9273] Call Trace:
[  217.129875][ T9273]  <TASK>
[  217.129881][ T9273]  dump_stack_lvl+0x189/0x250
[  217.129900][ T9273]  ? __pfx_dump_stack_lvl+0x10/0x10
[  217.129910][ T9273]  ? __pfx_queue_work_on+0x10/0x10
[  217.129920][ T9273]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  217.129933][ T9273]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  217.129950][ T9273]  f2fs_handle_critical_error+0x37c/0x540
[  217.129967][ T9273]  f2fs_write_end_io+0x886/0xb60
[  217.129985][ T9273]  __submit_merged_bio+0x27a/0x6a0
[  217.130000][ T9273]  __submit_merged_write_cond+0x255/0x530
[  217.130014][ T9273]  f2fs_write_data_pages+0x261d/0x3000
[  217.130024][ T9273]  ? __lock_acquire+0xab9/0xd20
[  217.130054][ T9273]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  217.130089][ T9273]  ? __pfx_stack_trace_save+0x10/0x10
[  217.130112][ T9273]  ? __lock_acquire+0xab9/0xd20
[  217.130127][ T9273]  ? do_raw_spin_lock+0x121/0x290
[  217.130143][ T9273]  ? do_raw_spin_unlock+0x4d/0x240
[  217.130152][ T9273]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  217.130164][ T9273]  do_writepages+0x32e/0x550
[  217.130182][ T9273]  ? do_raw_spin_unlock+0x4d/0x240
[  217.130194][ T9273]  filemap_fdatawrite+0x199/0x240
[  217.130206][ T9273]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  217.130265][ T9273]  ? do_raw_spin_unlock+0x4d/0x240
[  217.130278][ T9273]  f2fs_sync_dirty_inodes+0x31f/0x830
[  217.130294][ T9273]  f2fs_write_checkpoint+0x95a/0x1df0
[  217.130316][ T9273]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  217.130349][ T9273]  ? kill_f2fs_super+0x298/0x6c0
[  217.130361][ T9273]  kill_f2fs_super+0x2c3/0x6c0
[  217.130372][ T9273]  ? __pfx_kill_f2fs_super+0x10/0x10
[  217.130379][ T9273]  ? radix_tree_delete_item+0x2b6/0x400
[  217.130395][ T9273]  ? shrinker_free+0x2ce/0x3e0
[  217.130406][ T9273]  deactivate_locked_super+0xbc/0x130
[  217.130419][ T9273]  cleanup_mnt+0x425/0x4c0
[  217.130429][ T9273]  ? lockdep_hardirqs_on+0x9c/0x150
[  217.130442][ T9273]  task_work_run+0x1d4/0x260
[  217.130455][ T9273]  ? __pfx_task_work_run+0x10/0x10
[  217.130464][ T9273]  ? __x64_sys_umount+0x122/0x160
[  217.130478][ T9273]  ? exit_to_user_mode_loop+0x40/0x110
[  217.130491][ T9273]  exit_to_user_mode_loop+0xec/0x110
[  217.130502][ T9273]  do_syscall_64+0x2bd/0x3b0
[  217.130515][ T9273]  ? lockdep_hardirqs_on+0x9c/0x150
[  217.130529][ T9273]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.130541][ T9273]  ? exc_page_fault+0x9f/0xf0
[  217.130559][ T9273]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.130570][ T9273] RIP: 0033:0x7f05dcf8ff17
[  217.130584][ T9273] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  217.130595][ T9273] RSP: 002b:00007ffc6bdff478 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  217.130610][ T9273] RAX: 0000000000000000 RBX: 00007f05dd011c05 RCX: 00007f05dcf8ff17
[  217.130616][ T9273] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6bdff530
[  217.130621][ T9273] RBP: 00007ffc6bdff530 R08: 0000000000000000 R09: 0000000000000000
[  217.130628][ T9273] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc6be005c0
[  217.130636][ T9273] R13: 00007f05dd011c05 R14: 0000000000034faf R15: 00007ffc6be00600
[  217.130660][ T9273]  </TASK>
[  217.130665][ T9273] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  217.427254][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.122969][T10760] loop0: detected capacity change from 0 to 32768
[  218.179320][T10760] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  218.301942][T10760] XFS (loop0): Ending clean mount
[  218.311070][T10760] XFS (loop0): Quotacheck needed: Please wait.
[  218.400903][T10760] XFS (loop0): Quotacheck: Done.
[  218.583342][ T5844] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  218.630280][T10779] Zero length message leads to an empty skb
[  219.358112][T10810] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  219.414004][T10816] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1748'.
[  220.527024][T10831] loop4: detected capacity change from 0 to 1024
[  220.537724][T10833] netlink: 'syz.1.1753': attribute type 8 has an invalid length.
[  220.560038][T10831] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  220.587394][ T9273] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.661866][ T5909] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  220.811838][ T5909] usb 1-1: Using ep0 maxpacket: 8
[  220.818635][ T5909] usb 1-1: unable to get BOS descriptor or descriptor too short
[  220.822730][ T5909] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  220.826035][ T5909] usb 1-1: config 7 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  220.829255][ T5909] usb 1-1: No eUSB2 isoc ep 7 companion for config 7 interface 0 altsetting 0
[  220.837240][ T5909] usb 1-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  220.848125][ T5909] usb 1-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a
[  220.853455][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.856778][ T5909] usb 1-1: Product: syz
[  220.858512][ T5909] usb 1-1: Manufacturer: syz
[  220.860385][ T5909] usb 1-1: SerialNumber: syz
[  220.901464][  T791] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  221.080639][  T791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  221.085474][  T791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  221.091405][  T791] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  221.099488][ T5909] usb 1-1: USB disconnect, device number 23
[  221.113065][  T791] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  221.116743][  T791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.140607][  T791] usb 5-1: config 0 descriptor??
[  221.586212][  T791] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  222.579862][    T9] usb 5-1: USB disconnect, device number 10
[  222.923164][   T51] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  223.083506][   T51] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  223.087935][   T51] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  223.092363][   T51] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  223.097003][   T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.104053][T10877] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  223.110205][   T51] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  223.332474][    T9] usb 1-1: USB disconnect, device number 24
[  223.712861][T10890] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1775'.
[  224.167940][T10907] loop4: detected capacity change from 0 to 1024
[  224.203982][T10907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.224717][T10907] EXT4-fs error (device loop4): ext4_xattr_set_entry:1660: inode #16: comm syz.4.1782: corrupted xattr entries
[  224.240184][T10907] EXT4-fs (loop4): Remounting filesystem read-only
[  224.274405][ T9273] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.678593][T10938] loop0: detected capacity change from 0 to 2048
[  224.706332][T10938] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  225.277132][T10954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1802'.
[  225.280539][T10954] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1802'.
[  225.468972][T10970] loop4: detected capacity change from 0 to 256
[  225.475146][T10972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1811'.
[  225.495354][T10970] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  225.573662][   T33] audit: type=1326 audit(1755142604.810:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.1.1814" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f059538ebe9 code=0x0
[  225.918760][T11007] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1828'.
[  226.062811][T11020] team_slave_0: entered promiscuous mode
[  226.064997][T11020] team_slave_1: entered promiscuous mode
[  226.359499][T11030] loop4: detected capacity change from 0 to 32768
[  226.372619][T11030] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  226.396180][ T9273] ocfs2: Unmounting device (7,4) on (node local)
[  226.442980][    T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  226.508606][T11036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1841'.
[  226.576974][T11040] loop4: detected capacity change from 0 to 512
[  226.597163][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  226.599742][T11040] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1843: casefold flag without casefold feature
[  226.602911][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  226.610859][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  226.611246][T11040] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1843: couldn't read orphan inode 15 (err -117)
[  226.617773][    T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  226.624492][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.630557][T11040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.631158][    T9] usb 1-1: config 0 descriptor??
[  226.696857][ T9273] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.960354][T11056] : entered promiscuous mode
[  227.046141][    T9] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0
[  227.049210][    T9] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0
[  227.049741][T11059] loop4: detected capacity change from 0 to 2048
[  227.052702][    T9] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0
[  227.057708][    T9] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0
[  227.060524][    T9] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0
[  227.068040][    T9] kovaplus 0003:1E7D:2D50.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0
[  227.124391][T11059]  loop4: p1 p2 < > p3 < p5 >
[  227.126171][T11059] loop4: partition table partially beyond EOD, truncated
[  227.128984][T11059] loop4: p1 size 917504 extends beyond EOD, truncated
[  227.133077][T11059] loop4: p2 start 4278190080 is beyond EOD, truncated
[  227.139155][T11059] loop4: p5 size 917504 extends beyond EOD, truncated
[  227.244613][ T6734] udevd[6734]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory
[  227.249108][ T5847] udevd[5847]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  227.266499][   T51] usb 1-1: USB disconnect, device number 25
[  227.611217][T11073] syz.1.1858 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  227.769408][T11083] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1863'.
[  227.968843][T11099] loop0: detected capacity change from 0 to 512
[  227.982480][T11099] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  227.985261][T11099] EXT4-fs (loop0): orphan cleanup on readonly fs
[  227.987986][T11099] EXT4-fs error (device loop0): ext4_quota_enable:7124: inode #15: comm syz.0.1870: iget: bad i_size value: 360287970189639690
[  227.993335][T11099] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.1870: Bad quota inode: 15, type: 2
[  227.997059][T11099] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix.
[  228.003457][T11099] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  228.007114][T11099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  228.048970][T11102] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1871'.
[  228.056538][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.360843][T11119] sock: sock_timestamping_bind_phc: sock not bind to device
[  228.513747][T11121] loop0: detected capacity change from 0 to 256
[  228.517775][T11121] exfat: Deprecated parameter 'utf8'
[  228.544007][T11121] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  228.862383][   T51] usb 1-1: new full-speed USB device number 26 using dummy_hcd
[  229.264743][T11151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1892'.
[  229.474088][T11161] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1897'.
[  229.482806][   T51] usb 1-1: unable to get BOS descriptor or descriptor too short
[  229.485840][   T51] usb 1-1: not running at top speed; connect to a high speed hub
[  229.489192][   T51] usb 1-1: config 2 has an invalid interface number: 226 but max is 1
[  229.492960][   T51] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  229.496286][   T51] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 2
[  229.499004][   T51] usb 1-1: config 2 has no interface number 0
[  229.500868][   T51] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  229.504999][   T51] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10
[  229.508962][   T51] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  229.520332][   T51] usb 1-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[  229.523794][   T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.526277][   T51] usb 1-1: Product: syz
[  229.527670][   T51] usb 1-1: Manufacturer: syz
[  229.529365][   T51] usb 1-1: SerialNumber: syz
[  229.783433][   T51] usb 1-1: USB disconnect, device number 26
[  229.849154][T11167] input: syz1 as /devices/virtual/input/input12
[  230.216601][T11179] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  230.228551][T11179] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  230.317058][T11184] 9pnet_fd: Insufficient options for proto=fd
[  230.319940][T11183] loop0: detected capacity change from 0 to 1024
[  230.338198][T11183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.363558][   T33] audit: type=1800 audit(1755142609.600:33): pid=11183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1908" name="bus" dev="loop0" ino=19 res=0 errno=0
[  230.377313][T11183] Trying to write to read-only block-device loop0
[  230.417828][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.648879][T11191] loop0: detected capacity change from 0 to 32768
[  230.926461][T11197] loop4: detected capacity change from 0 to 512
[  230.929289][T11197] EXT4-fs: Ignoring removed mblk_io_submit option
[  230.939379][T11197] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  230.947109][T11197] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002]
[  230.950566][T11197] System zones: 1-12
[  230.954803][T11197] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.1913: corrupted in-inode xattr: e_value size too large
[  230.964751][T11197] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1913: couldn't read orphan inode 15 (err -117)
[  230.972502][T11197] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.997668][ T9273] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.135794][T11206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1917'.
[  231.283864][T11218] loop4: detected capacity change from 0 to 512
[  231.337905][T11218] Quota error (device loop4): do_check_range: Getting dqdh_next_free 256 out of range 0-7
[  231.346086][T11218] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  231.353524][T11218] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1923: Failed to acquire dquot type 1
[  231.387303][T11218] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1923: corrupted inode contents
[  231.395982][T11218] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.1923: mark_inode_dirty error
[  231.402790][T11218] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1923: corrupted inode contents
[  231.413070][T11218] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1923: mark_inode_dirty error
[  231.419296][T11218] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1923: corrupted inode contents
[  231.425837][T11218] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[  231.428803][T11218] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1923: corrupted inode contents
[  231.433045][T11218] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.1923: mark_inode_dirty error
[  231.436606][T11218] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  231.446665][T11218] EXT4-fs (loop4): 1 truncate cleaned up
[  231.449300][T11218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  231.456592][T11218] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  231.480203][ T9273] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.579974][T11231] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1929'.
[  231.926677][T11244] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.1934'.
[  231.967666][T11240] loop0: detected capacity change from 0 to 4096
[  232.068924][T11252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1937'.
[  232.075722][T11252] netlink: 'syz.4.1937': attribute type 15 has an invalid length.
[  232.081487][T11252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1937'.
[  232.114570][ T5678] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  232.117335][ T5678] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  232.130100][ T5678] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  232.141337][ T5678] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  232.215395][T11258] loop0: detected capacity change from 0 to 4096
[  232.222575][T11258] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  232.235125][T11258] ntfs3(loop0): Failed to load $Extend (-22).
[  232.237325][T11258] ntfs3(loop0): Failed to initialize $Extend.
[  232.304488][T11264] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  232.489443][T11277] loop0: detected capacity change from 0 to 256
[  232.642567][T11285] vlan0: entered promiscuous mode
[  232.712199][  T791] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  232.735605][T11294] netlink: 'syz.0.1959': attribute type 1 has an invalid length.
[  232.871443][  T791] usb 5-1: Using ep0 maxpacket: 16
[  232.877760][  T791] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  232.887692][  T791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  232.905931][  T791] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  232.909810][  T791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.914642][  T791] usb 5-1: Product: syz
[  232.916213][  T791] usb 5-1: Manufacturer: syz
[  232.917889][  T791] usb 5-1: SerialNumber: syz
[  232.930246][  T791] usb 5-1: config 0 descriptor??
[  232.946531][  T791] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  232.949509][  T791] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  233.587961][  T791] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  233.591836][  T791] em28xx 5-1:0.0: Config register raw data: 0xfa
[  233.594377][  T791] em28xx 5-1:0.0: I2S Audio (3 sample rate(s))
[  233.596921][  T791] em28xx 5-1:0.0: No AC97 audio processor
[  233.903907][T11342] netlink: 'syz.1.1979': attribute type 32 has an invalid length.
[  233.999800][  T791] usb 5-1: USB disconnect, device number 11
[  234.594551][T11375] overlayfs: failed to clone lowerpath
[  234.656947][   T33] audit: type=1326 audit(1755142613.890:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.0.1997" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9978ebe9 code=0x7ffc0000
[  234.672155][   T33] audit: type=1326 audit(1755142613.890:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.0.1997" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9978ebe9 code=0x7ffc0000
[  234.689120][   T33] audit: type=1326 audit(1755142613.910:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.0.1997" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbb9978ebe9 code=0x7ffc0000
[  234.705125][   T33] audit: type=1326 audit(1755142613.910:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.0.1997" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9978ebe9 code=0x7ffc0000
[  234.726348][   T33] audit: type=1326 audit(1755142613.910:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.0.1997" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9978ebe9 code=0x7ffc0000
[  234.756564][   T33] audit: type=1326 audit(1755142613.910:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.0.1997" exe="/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fbb9978ebe9 code=0x7ffc0000
[  234.766634][T11373] loop4: detected capacity change from 0 to 32768
[  234.766743][   T33] audit: type=1326 audit(1755142613.910:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.0.1997" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9978ebe9 code=0x7ffc0000
[  234.786009][   T33] audit: type=1326 audit(1755142613.910:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.0.1997" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9978ebe9 code=0x7ffc0000
[  234.804402][ T5847]  loop4: p9 p11 p16
[  234.839453][T11373]  loop4: p9 p11 p16
[  235.004064][T11400] 8021q: adding VLAN 0 to HW filter on device batadv1
[  235.007281][T11400] team0: Failed to send port change of device batadv1 via netlink (err -105)
[  235.010650][T11400] team0: Failed to send options change via netlink (err -105)
[  235.016246][ T6734] udevd[6734]: inotify_add_watch(7, /dev/loop4p11, 10) failed: No such file or directory
[  235.024772][ T5847] udevd[5847]: inotify_add_watch(7, /dev/loop4p9, 10) failed: No such file or directory
[  235.033826][ T5923] udevd[5923]: inotify_add_watch(7, /dev/loop4p16, 10) failed: No such file or directory
[  235.036184][T11400] team0: Port device batadv1 added
[  235.059238][ T5923] udevd[5923]: inotify_add_watch(7, /dev/loop4p16, 10) failed: No such file or directory
[  235.067898][ T6734] udevd[6734]: inotify_add_watch(7, /dev/loop4p11, 10) failed: No such file or directory
[  235.075487][ T5847] udevd[5847]: inotify_add_watch(7, /dev/loop4p9, 10) failed: No such file or directory
[  235.158551][T11410] loop0: detected capacity change from 0 to 1024
[  235.258800][T11414] loop0: detected capacity change from 0 to 2048
[  235.396669][T11421] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  235.404026][T11421] syz.4.2016: attempt to access beyond end of device
[  235.404026][T11421] loop4: rw=0, sector=0, nr_sectors = 2 limit=0
[  235.451100][T11426] loop4: detected capacity change from 0 to 256
[  235.460192][T11426] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  235.466570][T11426] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  235.485512][ T5909] kernel write not supported for file /sg0 (pid: 5909 comm: kworker/1:6)
[  235.499192][T11426] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  235.795362][T11439] loop4: detected capacity change from 0 to 32768
[  235.850826][T11439] JBD2: Ignoring recovery information on journal
[  235.873075][T11439] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  235.946851][T11439] OCFS2: ERROR (device loop4): int ocfs2_reserve_local_alloc_bits(struct ocfs2_super *, u32, struct ocfs2_alloc_context *): local alloc inode 76 says it has 2 used bits, but a count shows 1
[  235.954201][T11439] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  235.957215][T11439] OCFS2: File system is now read-only.
[  235.959217][T11439] (syz.4.2024,11439,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30
[  235.963108][T11439] (syz.4.2024,11439,0):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -30
[  235.966788][T11439] (syz.4.2024,11439,0):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -30
[  235.970386][T11439] (syz.4.2024,11439,0):ocfs2_lock_allocators:2775 ERROR: status = -30
[  235.973702][T11439] (syz.4.2024,11439,0):ocfs2_write_begin_nolock:1723 ERROR: status = -30
[  235.976860][T11439] (syz.4.2024,11439,0):ocfs2_write_begin:1887 ERROR: status = -30
[  236.021916][ T9273] ocfs2: Unmounting device (7,4) on (node local)
[  236.401436][  T791] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  236.560991][T11458] loop0: detected capacity change from 0 to 32768
[  236.573291][  T791] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  236.576602][  T791] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  236.579255][  T791] usb 5-1: config 1 has no interface number 0
[  236.581079][  T791] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  236.585224][  T791] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  236.589115][  T791] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  236.595468][  T791] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  236.598171][  T791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.600707][  T791] usb 5-1: Product: syz
[  236.602458][  T791] usb 5-1: Manufacturer: syz
[  236.603863][  T791] usb 5-1: SerialNumber: syz
[  236.656003][T11460] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2032'.
[  236.921482][    T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  237.074166][    T9] usb 1-1: config 0 has an invalid interface number: 120 but max is 0
[  237.076709][    T9] usb 1-1: config 0 has no interface number 0
[  237.079540][    T9] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  237.084441][    T9] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  237.087165][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.104009][    T9] usb 1-1: config 0 descriptor??
[  237.115485][    T9] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input13
[  237.213354][  T791] cdc_ncm 5-1:1.1: bind() failure
[  237.220885][  T791] usb 5-1: USB disconnect, device number 12
[  237.316258][    T9] usb 1-1: USB disconnect, device number 27
[  237.778110][T11472] loop4: detected capacity change from 0 to 2048
[  237.802878][T11472] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  237.851542][ T5850] Bluetooth: hci2: command 0x0406 tx timeout
[  237.904769][T11474] loop0: detected capacity change from 0 to 2048
[  238.003314][T11478] loop0: detected capacity change from 0 to 512
[  238.014702][T11478] EXT4-fs: Ignoring removed nomblk_io_submit option
[  238.357903][T11482] loop4: detected capacity change from 0 to 32768
[  238.428742][T11482] (syz.4.2042,11482,0):ocfs2_init_local_system_inodes:496 ERROR: status=-22, sysfile=10, slot=0
[  238.432066][T11482] (syz.4.2042,11482,0):ocfs2_init_local_system_inodes:505 ERROR: status = -22
[  238.434844][T11482] (syz.4.2042,11482,0):ocfs2_mount_volume:1758 ERROR: status = -22
[  238.443786][T11482] (syz.4.2042,11482,0):ocfs2_fill_super:1177 ERROR: status = -22
[  238.771100][T11500] loop4: detected capacity change from 0 to 32768
[  238.816820][T11500] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  238.852890][T11500] OCFS2: ERROR (device loop4): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature 
[  238.866173][T11500] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  238.874414][T11500] OCFS2: File system is now read-only.
[  238.882531][T11500] (syz.4.2048,11500,0):ocfs2_find_entry_dx:1037 ERROR: status = -30
[  238.918344][ T9273] ocfs2: Unmounting device (7,4) on (node local)
[  239.157630][T11517] loop0: detected capacity change from 0 to 2048
[  239.176622][T11521] atomic_op ffff88810f98e198 conn xmit_atomic 0000000000000000
[  239.188020][T11517] UDF-fs: warning (device loop0): udf_verify_domain_identifier: Not OSTA UDF compliant logical volume descriptor.
[  239.207195][T11517] UDF-fs: warning (device loop0): udf_fill_super: No fileset found
[  239.216242][T11523] netlink: 'syz.1.2058': attribute type 10 has an invalid length.
[  239.218922][T11523] team0: Device dummy0 is up. Set it down before adding it as a team port
[  239.527780][T11535] loop4: detected capacity change from 0 to 40427
[  240.372862][T11535] F2FS-fs (loop4): build fault injection rate: 14
[  240.374916][T11535] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  240.582240][T11539] overlayfs: failed to clone upperpath
[  240.662685][T11535] F2FS-fs (loop4): invalid crc value
[  240.668953][    C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  240.679930][    C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  240.729269][T11535] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  240.734313][T11535] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  240.838063][T11535] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  240.844507][T11535] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  240.852201][   T33] audit: type=1800 audit(1755142620.080:42): pid=11535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2063" name="file1" dev="loop4" ino=10 res=0 errno=0
[  240.862863][T11535] F2FS-fs (loop4): inject checkpoint error in f2fs_balance_fs of f2fs_setattr+0x1169/0x15f0
[  240.869666][T11535] CPU: 0 UID: 0 PID: 11535 Comm: syz.4.2063 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  240.869683][T11535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  240.869691][T11535] Call Trace:
[  240.869696][T11535]  <TASK>
[  240.869702][T11535]  dump_stack_lvl+0x189/0x250
[  240.869723][T11535]  ? __pfx_dump_stack_lvl+0x10/0x10
[  240.869733][T11535]  ? __pfx_queue_work_on+0x10/0x10
[  240.869745][T11535]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  240.869759][T11535]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  240.869772][T11535]  ? f2fs_hw_is_readonly+0x39b/0x470
[  240.869788][T11535]  f2fs_handle_critical_error+0x37c/0x540
[  240.869802][T11535]  f2fs_balance_fs+0x32d/0x7f0
[  240.869817][T11535]  ? f2fs_setattr+0x1169/0x15f0
[  240.869828][T11535]  ? __pfx_f2fs_balance_fs+0x10/0x10
[  240.869841][T11535]  ? _raw_spin_unlock+0x28/0x50
[  240.869851][T11535]  ? f2fs_inode_dirtied+0x328/0x3c0
[  240.869866][T11535]  ? f2fs_mark_inode_dirty_sync+0x120/0x1f0
[  240.869878][T11535]  f2fs_setattr+0x1169/0x15f0
[  240.869890][T11535]  ? __pfx_f2fs_setattr+0x10/0x10
[  240.869899][T11535]  notify_change+0xb36/0xe40
[  240.869915][T11535]  do_truncate+0x1a4/0x220
[  240.869927][T11535]  ? __pfx_do_truncate+0x10/0x10
[  240.869937][T11535]  ? apparmor_path_truncate+0x238/0x2d0
[  240.869953][T11535]  ? mnt_get_write_access+0x223/0x2a0
[  240.869996][T11535]  vfs_truncate+0x493/0x520
[  240.870007][T11535]  ? lockdep_hardirqs_on+0x9c/0x150
[  240.870023][T11535]  ? __pfx_vfs_truncate+0x10/0x10
[  240.870034][T11535]  ? user_path_at+0x44/0x60
[  240.870051][T11535]  do_sys_truncate+0xdb/0x190
[  240.870063][T11535]  ? __pfx_do_sys_truncate+0x10/0x10
[  240.870075][T11535]  ? rcu_is_watching+0x15/0xb0
[  240.870089][T11535]  __x64_sys_truncate+0x5b/0x70
[  240.870100][T11535]  do_syscall_64+0xfa/0x3b0
[  240.870111][T11535]  ? lockdep_hardirqs_on+0x9c/0x150
[  240.870120][T11535]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.870129][T11535]  ? exc_page_fault+0x9f/0xf0
[  240.870142][T11535]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.870151][T11535] RIP: 0033:0x7f05dcf8ebe9
[  240.870161][T11535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  240.870168][T11535] RSP: 002b:00007f05db1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[  240.870179][T11535] RAX: ffffffffffffffda RBX: 00007f05dd1b5fa0 RCX: 00007f05dcf8ebe9
[  240.870187][T11535] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000200000000000
[  240.870192][T11535] RBP: 00007f05dd011e19 R08: 0000000000000000 R09: 0000000000000000
[  240.870198][T11535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  240.870203][T11535] R13: 00007f05dd1b6038 R14: 00007f05dd1b5fa0 R15: 00007ffc6be001e8
[  240.870219][T11535]  </TASK>
[  240.870223][T11535] F2FS-fs (loop4): Stopped filesystem due to reason: 1
[  241.950800][T11556] loop0: detected capacity change from 0 to 512
[  241.966664][T11556] EXT4-fs: inline encryption not supported
[  242.409968][T11562] loop0: detected capacity change from 0 to 32768
[  242.420255][T11562] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2073 (11562)
[  242.438631][T11562] BTRFS error: failed to open device for path /dev/loop0 with flags 0x23: -13
[  242.879062][T11596] loop0: detected capacity change from 0 to 8
[  243.253469][   T51] kernel write not supported for file /binder/transactions (pid: 51 comm: kworker/1:1)
[  244.830836][T11643] loop0: detected capacity change from 0 to 2048
[  245.162838][T11660] ptrace attach of "/syz-executor exec"[11661] was attempted by "/syz-executor exec"[11660]
[  245.189526][T11663] capability: warning: `syz.1.2117' uses 32-bit capabilities (legacy support in use)
[  248.100430][T11717] loop0: detected capacity change from 0 to 8
[  248.137543][T11717] squashfs image failed sanity check
[  248.410972][T11725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2136'.
[  248.575291][T11730] loop4: detected capacity change from 0 to 512
[  248.588762][T11730] EXT4-fs: inline encryption not supported
[  248.590620][T11730] EXT4-fs: Ignoring removed mblk_io_submit option
[  248.594313][T11730] EXT4-fs (loop4): Test dummy encryption mode enabled
[  248.598844][T11730] EXT4-fs (loop4): orphan cleanup on readonly fs
[  248.600972][T11730] EXT4-fs error (device loop4): ext4_orphan_get:1392: comm syz.4.2140: inode #13: comm syz.4.2140: iget: illegal inode #
[  248.607868][T11730] EXT4-fs (loop4): Remounting filesystem read-only
[  248.610738][T11730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  248.627986][ T9273] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.168619][ T5876] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  249.303270][ T5883] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  249.341383][ T5876] usb 1-1: Using ep0 maxpacket: 8
[  249.346122][ T5876] usb 1-1: config 7 has an invalid interface number: 190 but max is 0
[  249.349583][ T5876] usb 1-1: config 7 has no interface number 0
[  249.352531][ T5876] usb 1-1: config 7 interface 190 has no altsetting 0
[  249.358494][ T5876] usb 1-1: New USB device found, idVendor=0af0, idProduct=8400, bcdDevice=c0.15
[  249.362537][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.365687][ T5876] usb 1-1: Product: syz
[  249.367508][ T5876] usb 1-1: Manufacturer: syz
[  249.369489][ T5876] usb 1-1: SerialNumber: syz
[  249.451462][ T5883] usb 5-1: Using ep0 maxpacket: 16
[  249.455693][ T5883] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  249.459059][ T5883] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  249.467936][ T5883] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  249.470790][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.473774][ T5883] usb 5-1: Product: syz
[  249.475338][ T5883] usb 5-1: Manufacturer: syz
[  249.476973][ T5883] usb 5-1: SerialNumber: syz
[  249.599029][ T5876] hso 1-1:7.190: Not our interface
[  249.605439][ T5876] usb 1-1: USB disconnect, device number 28
[  249.888307][ T5883] usb 5-1: 0:2 : does not exist
[  250.295568][ T5883] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  250.315191][ T5883] usb 5-1: USB disconnect, device number 13
[  250.345882][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  250.461479][ T5876] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  250.625798][ T5876] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  250.629009][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  250.634552][ T5876] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  250.637944][ T5876] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  250.641912][ T5876] usb 1-1: Manufacturer: syz
[  250.646218][ T5876] usb 1-1: config 0 descriptor??
[  250.651232][ T5876] igorplugusb 1-1:0.0: endpoint incorrect
[  250.868856][ T5883] usb 1-1: USB disconnect, device number 29
[  251.311454][ T5876] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  251.465052][ T5876] usb 5-1: Using ep0 maxpacket: 8
[  251.476366][ T5876] usb 5-1: unable to get BOS descriptor or descriptor too short
[  251.482179][ T5876] usb 5-1: config 6 has an invalid interface number: 81 but max is 0
[  251.487666][ T5876] usb 5-1: config 6 has no interface number 0
[  251.492890][ T5876] usb 5-1: config 6 interface 81 has no altsetting 0
[  251.499522][ T5876] usb 5-1: New USB device found, idVendor=061d, idProduct=c1a0, bcdDevice=f7.ec
[  251.507048][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.510192][ T5876] usb 5-1: Product: syz
[  251.513366][ T5876] usb 5-1: Manufacturer: syz
[  251.515207][ T5876] usb 5-1: SerialNumber: syz
[  251.731653][ T5876] quatech2 5-1:6.81: Quatech 2nd gen USB to Serial Driver converter detected
[  251.736958][ T5876] usb 5-1: qt2_attach - failed to power on unit: -71
[  251.744449][ T5876] quatech2 5-1:6.81: probe with driver quatech2 failed with error -71
[  251.756361][ T5876] usb 5-1: USB disconnect, device number 14
[  251.929137][T11807] loop0: detected capacity change from 0 to 32768
[  251.940192][T11807] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2172 (11807)
[  251.950592][T11807] BTRFS error: failed to open device for path /dev/loop0 with flags 0x23: -13
[  252.241047][T11818] tmpfs: Bad value for 'mpol'
[  252.930241][T11828] netlink: 'syz.0.2181': attribute type 1 has an invalid length.
[  253.006260][T11822] loop4: detected capacity change from 0 to 32768
[  253.132049][T11834] loop4: detected capacity change from 0 to 128
[  253.150343][T11834] befs: (loop4): invalid magic header
[  253.212051][    T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  253.361433][    T9] usb 1-1: Using ep0 maxpacket: 32
[  253.370549][    T9] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  253.376420][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.380828][    T9] usb 1-1: config 0 descriptor??
[  253.392941][    T9] gspca_main: sq930x-2.14.0 probing 041e:403c
[  253.491802][ T5876] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  253.641341][ T5876] usb 5-1: Using ep0 maxpacket: 8
[  253.652816][ T5876] usb 5-1: unable to get BOS descriptor or descriptor too short
[  253.656303][ T5876] usb 5-1: config 5 has an invalid interface number: 215 but max is 0
[  253.659209][ T5876] usb 5-1: config 5 has no interface number 0
[  253.661053][ T5876] usb 5-1: config 5 interface 215 has no altsetting 0
[  253.665788][ T5876] usb 5-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba
[  253.668454][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.670970][ T5876] usb 5-1: Product: syz
[  253.681352][ T5876] usb 5-1: Manufacturer: syz
[  253.682838][ T5876] usb 5-1: SerialNumber: syz
[  253.896381][ T5876] cypress_m8 5-1:5.215: DeLorme Earthmate USB converter detected
[  253.909377][ T5876] usb 5-1: DeLorme Earthmate USB converter now attached to ttyUSB0
[  253.921566][ T5876] usb 5-1: USB disconnect, device number 15
[  253.932837][ T5876] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0
[  253.937465][ T5876] cypress_m8 5-1:5.215: device disconnected
[  254.436574][T11859] loop4: detected capacity change from 0 to 256
[  254.452476][T11859] exfat: Deprecated parameter 'utf8'
[  254.454206][T11859] exfat: Deprecated parameter 'utf8'
[  254.455944][T11859] exfat: Deprecated parameter 'utf8'
[  254.474845][T11859] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[  254.851428][    T9] gspca_sq930x: reg_w 0105 bc00 failed -71
[  254.853397][    T9] sq930x 1-1:0.0: probe with driver sq930x failed with error -71
[  254.858029][    T9] usb 1-1: USB disconnect, device number 30
[  254.911390][   T10] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  255.067732][   T10] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  255.079500][   T10] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  255.082498][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.084976][   T10] usb 5-1: Product: syz
[  255.086254][   T10] usb 5-1: Manufacturer: syz
[  255.087717][   T10] usb 5-1: SerialNumber: syz
[  255.101512][   T10] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  255.111850][   T33] audit: type=1326 audit(1755142634.340:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11875 comm="syz.1.2203" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059538ebe9 code=0x7ffc0000
[  255.136688][   T33] audit: type=1326 audit(1755142634.340:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11875 comm="syz.1.2203" exe="/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f059538ebe9 code=0x7ffc0000
[  255.148906][   T33] audit: type=1326 audit(1755142634.340:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11875 comm="syz.1.2203" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059538ebe9 code=0x7ffc0000
[  255.159000][   T33] audit: type=1326 audit(1755142634.340:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11875 comm="syz.1.2203" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059538ebe9 code=0x7ffc0000
[  255.224487][T11880] veth3: entered allmulticast mode
[  255.383262][T11886] loop0: detected capacity change from 0 to 8
[  255.405323][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.407413][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  255.473204][T11888] loop0: detected capacity change from 0 to 2048
[  255.510852][   T10] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  255.530935][   T10] usb 5-1: USB disconnect, device number 16
[  256.841406][ T5876] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  257.010280][ T5876] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  257.017547][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  257.020801][ T5876] usb 5-1: Product: syz
[  257.022766][ T5876] usb 5-1: SerialNumber: syz
[  257.027091][ T5876] usb 5-1: config 0 descriptor??
[  257.246753][ T5876] hso 5-1:0.0: Failed to find BULK IN ep
[  257.447613][   T10] usb 5-1: USB disconnect, device number 17
[  257.745674][T11929] loop0: detected capacity change from 0 to 32768
[  258.044541][T11942] Invalid ELF header magic: != ELF
[  258.382884][T11944] loop0: detected capacity change from 0 to 512
[  258.686666][ T5239] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  258.839679][T11968] loop0: detected capacity change from 0 to 1024
[  258.957243][T11975] loop4: detected capacity change from 0 to 256
[  258.980874][T11975] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  259.138135][T11986] loop4: detected capacity change from 0 to 8192
[  259.260536][T11988] loop4: detected capacity change from 0 to 512
[  259.271007][T11988] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  259.284448][T11988] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2252: iget: bogus i_mode (5)
[  259.288697][T11988] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2252: couldn't read orphan inode 15 (err -117)
[  259.291518][    T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  259.296743][T11988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  259.301856][T11988] ext2 filesystem being mounted at /289/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  259.334395][ T9273] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.433847][T11998] overlayfs: missing 'lowerdir'
[  259.444693][    T9] usb 1-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a9.25
[  259.451213][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.458047][    T9] usb 1-1: Product: syz
[  259.459417][    T9] usb 1-1: Manufacturer: syz
[  259.460844][    T9] usb 1-1: SerialNumber: syz
[  259.473415][    T9] usb 1-1: config 0 descriptor??
[  259.683648][ T5876] usb 1-1: USB disconnect, device number 31
[  259.713536][T12013] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma?
[  259.803460][T12019] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  259.876115][   T33] audit: type=1326 audit(1755142639.110:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12026 comm="syz.1.2269" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059538ebe9 code=0x7ffc0000
[  259.883563][   T33] audit: type=1326 audit(1755142639.110:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12026 comm="syz.1.2269" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059538ebe9 code=0x7ffc0000
[  259.890252][   T33] audit: type=1326 audit(1755142639.110:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12026 comm="syz.1.2269" exe="/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f059538ebe9 code=0x7ffc0000
[  259.899125][   T33] audit: type=1326 audit(1755142639.110:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12026 comm="syz.1.2269" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059538ebe9 code=0x7ffc0000
[  260.247510][T12039] cgroup: none used incorrectly
[  261.843509][T12070] loop0: detected capacity change from 0 to 32768
[  261.855233][T12070] BTRFS error: failed to open device for path /dev/loop0 with flags 0x23: -13
[  262.166483][T12070] overlayfs: overlapping lowerdir path
[  262.222741][T12087] loop0: detected capacity change from 0 to 2048
[  262.522968][T12107] netlink: 'syz.0.2304': attribute type 32 has an invalid length.
[  262.529364][T12107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2304'.
[  262.539862][T12107] (unnamed net_device) (uninitialized): option coupled_control: invalid value (241)
[  262.775032][T12128] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  262.779957][T12128] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  262.847270][T12130] loop4: detected capacity change from 0 to 4096
[  262.935304][T12132] netlink: 'syz.4.2316': attribute type 2 has an invalid length.
[  262.938119][T12132] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2316'.
[  263.024403][T12138] loop4: detected capacity change from 0 to 16
[  263.038978][T12138] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  263.435653][T12145] input: syz0 as /devices/virtual/input/input14
[  263.532059][T12147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2322'.
[  263.683796][T12149] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.2323'.
[  263.693759][ T5239] Bluetooth: hci1: command 0x0406 tx timeout
[  263.877273][T12160] wg1 speed is unknown, defaulting to 1000
[  263.879479][T12160] wg1 speed is unknown, defaulting to 1000
[  263.885225][T12160] wg1 speed is unknown, defaulting to 1000
[  263.895216][T12160] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  263.906665][T12160] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  263.909703][T12162] syz.1.2329: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  263.916014][T12162] CPU: 0 UID: 0 PID: 12162 Comm: syz.1.2329 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  263.916030][T12162] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  263.916038][T12162] Call Trace:
[  263.916042][T12162]  <TASK>
[  263.916047][T12162]  dump_stack_lvl+0x189/0x250
[  263.916065][T12162]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  263.916080][T12162]  ? __pfx_dump_stack_lvl+0x10/0x10
[  263.916091][T12162]  ? __pfx__printk+0x10/0x10
[  263.916105][T12162]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  263.916116][T12162]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  263.916130][T12162]  warn_alloc+0x214/0x310
[  263.916144][T12162]  ? stack_depot_save_flags+0x41b/0x860
[  263.916156][T12162]  ? __pfx_warn_alloc+0x10/0x10
[  263.916168][T12162]  ? kasan_save_track+0x4f/0x80
[  263.916179][T12162]  ? xskq_create+0x56/0x170
[  263.916189][T12162]  ? xsk_init_queue+0xb0/0x110
[  263.916197][T12162]  ? xsk_setsockopt+0x4dc/0x8d0
[  263.916206][T12162]  ? do_sock_setsockopt+0x17c/0x1b0
[  263.916214][T12162]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  263.916223][T12162]  ? do_syscall_64+0xfa/0x3b0
[  263.916235][T12162]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.916254][T12162]  __vmalloc_node_range_noprof+0x125/0x12f0
[  263.916281][T12162]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  263.916296][T12162]  ? __kasan_kmalloc+0x93/0xb0
[  263.916310][T12162]  vmalloc_user_noprof+0xad/0xf0
[  263.916322][T12162]  ? xskq_create+0xbf/0x170
[  263.916333][T12162]  xskq_create+0xbf/0x170
[  263.916346][T12162]  xsk_init_queue+0xb0/0x110
[  263.916357][T12162]  xsk_setsockopt+0x4dc/0x8d0
[  263.916368][T12162]  ? __pfx_xsk_setsockopt+0x10/0x10
[  263.916377][T12162]  ? __pfx_aa_sk_perm+0x10/0x10
[  263.916391][T12162]  ? aa_sock_opt_perm+0xff/0x1b0
[  263.916400][T12162]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  263.916408][T12162]  ? __pfx_xsk_setsockopt+0x10/0x10
[  263.916418][T12162]  do_sock_setsockopt+0x17c/0x1b0
[  263.916428][T12162]  __x64_sys_setsockopt+0x13f/0x1b0
[  263.916438][T12162]  do_syscall_64+0xfa/0x3b0
[  263.916448][T12162]  ? lockdep_hardirqs_on+0x9c/0x150
[  263.916458][T12162]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.916466][T12162]  ? exc_page_fault+0x9f/0xf0
[  263.916476][T12162]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.916484][T12162] RIP: 0033:0x7f059538ebe9
[  263.916493][T12162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  263.916500][T12162] RSP: 002b:00007f05962c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  263.916510][T12162] RAX: ffffffffffffffda RBX: 00007f05955b5fa0 RCX: 00007f059538ebe9
[  263.916515][T12162] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  263.916538][T12162] RBP: 00007f0595411e19 R08: 0000000000000004 R09: 0000000000000000
[  263.916543][T12162] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  263.916550][T12162] R13: 00007f05955b6038 R14: 00007f05955b5fa0 R15: 00007ffd711679c8
[  263.916565][T12162]  </TASK>
[  263.916645][T12162] Mem-Info:
[  263.940915][T12160] wg1 speed is unknown, defaulting to 1000
[  263.949279][T12162] active_anon:11802 inactive_anon:0 isolated_anon:0
[  263.949279][T12162]  active_file:10529 inactive_file:38758 isolated_file:0
[  263.949279][T12162]  unevictable:1768 dirty:144 writeback:0
[  263.949279][T12162]  slab_reclaimable:5495 slab_unreclaimable:55167
[  263.949279][T12162]  mapped:19176 shmem:6619 pagetables:1366
[  263.949279][T12162]  sec_pagetables:0 bounce:0
[  263.949279][T12162]  kernel_misc_reclaimable:0
[  263.949279][T12162]  free:275409 free_pcp:25028 free_cma:0
[  263.954707][T12160] wg1 speed is unknown, defaulting to 1000
[  263.955587][T12162] Node 0 active_anon:32112kB inactive_anon:0kB active_file:8224kB inactive_file:21216kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:51920kB dirty:376kB writeback:0kB shmem:21212kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7556kB pagetables:3220kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  263.958455][T12160] wg1 speed is unknown, defaulting to 1000
[  263.959653][T12162] Node 1 active_anon:15096kB inactive_anon:0kB active_file:33892kB inactive_file:133816kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24784kB dirty:200kB writeback:0kB shmem:5264kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4896kB pagetables:2244kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  263.964383][T12160] wg1 speed is unknown, defaulting to 1000
[  263.966591][T12162] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  264.061800][T12162] lowmem_reserve[]: 0 811 811 811 811
[  264.063494][T12162] Node 0 DMA32 free:306764kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32112kB inactive_anon:0kB active_file:8224kB inactive_file:21216kB unevictable:3536kB writepending:376kB present:1556484kB managed:830956kB mlocked:0kB bounce:0kB free_pcp:59616kB local_pcp:43628kB free_cma:0kB
[  264.073681][T12162] lowmem_reserve[]: 0 0 0 0 0
[  264.075202][T12162] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  264.084499][T12162] lowmem_reserve[]: 0 0 854 854 854
[  264.086211][T12162] Node 1 Normal free:321020kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15028kB inactive_anon:0kB active_file:33892kB inactive_file:133816kB unevictable:3536kB writepending:200kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:40044kB local_pcp:22604kB free_cma:0kB
[  264.099248][T12162] lowmem_reserve[]: 0 0 0 0 0
[  264.102247][T12162] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  264.106334][T12162] Node 0 DMA32: 129*4kB (UME) 372*8kB (UME) 377*16kB (UME) 290*32kB (UME) 123*64kB (UME) 34*128kB (UE) 33*256kB (UME) 22*512kB (UME) 12*1024kB (UME) 5*2048kB (UM) 57*4096kB (UM) = 306740kB
[  264.112670][T12162] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  264.117808][T12162] Node 1 Normal: 841*4kB (UM) 1086*8kB (UME) 761*16kB (UME) 155*32kB (UME) 402*64kB (UME) 197*128kB (UME) 69*256kB (UME) 26*512kB (UM) 9*1024kB (UME) 4*2048kB (UM) 47*4096kB (UM) = 321028kB
[  264.123934][T12162] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  264.126856][T12162] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  264.129766][T12162] 55896 total pagecache pages
[  264.132522][T12162] 0 pages in swap cache
[  264.134043][T12162] Free swap  = 124996kB
[  264.135537][T12162] Total swap = 124996kB
[  264.137110][T12162] 786301 pages RAM
[  264.138503][T12162] 0 pages HighMem/MovableOnly
[  264.141217][T12162] 241330 pages reserved
[  264.144407][T12162] 0 pages cma reserved
[  264.163169][T12168] loop4: detected capacity change from 0 to 128
[  264.236444][   T33] audit: type=1326 audit(1755142643.470:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.4.2335" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05dcf8ebe9 code=0x7ffc0000
[  264.264012][   T33] audit: type=1326 audit(1755142643.480:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.4.2335" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05dcf8ebe9 code=0x7ffc0000
[  264.881729][   T51] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  265.035784][   T51] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  265.044234][   T51] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  265.050106][   T51] usb 1-1: config 1 has no interface number 0
[  265.055141][   T51] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  265.058563][   T51] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  265.061688][   T51] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  265.069426][   T51] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  265.073204][   T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.076889][   T51] usb 1-1: Product: syz
[  265.079875][   T51] usb 1-1: Manufacturer: syz
[  265.082517][   T51] usb 1-1: SerialNumber: syz
[  265.521974][  T971] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  265.691628][  T971] usb 5-1: Using ep0 maxpacket: 8
[  265.695739][  T971] usb 5-1: config 162 has an invalid interface number: 150 but max is 0
[  265.698658][  T971] usb 5-1: config 162 has no interface number 0
[  265.700832][  T971] usb 5-1: config 162 interface 150 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  265.707534][  T971] usb 5-1: config 162 interface 150 has no altsetting 0
[  265.712495][  T971] usb 5-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=e0.0e
[  265.715550][  T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.718143][  T971] usb 5-1: Product: syz
[  265.719773][  T971] usb 5-1: Manufacturer: syz
[  265.721492][  T971] usb 5-1: SerialNumber: syz
[  265.922284][   T51] cdc_ncm 1-1:1.1: bind() failure
[  265.929501][   T51] usb 1-1: USB disconnect, device number 32
[  265.943964][  T971] usb 5-1: Found UVC 0.0a device syz (058f:3820)
[  265.946308][  T971] usb 5-1: No valid video chain found.
[  265.950312][  T971] usb 5-1: USB disconnect, device number 18
[  266.083742][T12230] netlink: 'syz.1.2359': attribute type 3 has an invalid length.
[  266.109840][T12232] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  266.556762][T12244] loop4: detected capacity change from 0 to 4096
[  266.781500][  T971] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  266.852839][T12252] loop4: detected capacity change from 0 to 32768
[  266.864158][T12252] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2370 (12252)
[  266.875115][T12252] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  266.878395][T12252] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  266.880993][T12252] BTRFS info (device loop4): using free-space-tree
[  266.914374][   T33] audit: type=1800 audit(1755142646.150:53): pid=12252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2370" name="file1" dev="loop4" ino=260 res=0 errno=0
[  266.942170][  T971] usb 1-1: Using ep0 maxpacket: 32
[  266.949106][  T971] usb 1-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f
[  266.954001][  T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.956739][  T971] usb 1-1: Product: syz
[  266.958190][  T971] usb 1-1: Manufacturer: syz
[  266.959800][  T971] usb 1-1: SerialNumber: syz
[  266.975985][  T971] usb 1-1: config 0 descriptor??
[  266.987752][  T971] ums-onetouch 1-1:0.0: USB Mass Storage device detected
[  267.006346][ T9273] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  267.051130][  T971] usb 1-1: Found UVC 0.00 device syz (0d49:7000)
[  267.066364][  T971] usb 1-1: No valid video chain found.
[  267.195819][  T971] usb 1-1: USB disconnect, device number 33
[  267.811940][   T51] usb 5-1: new low-speed USB device number 19 using dummy_hcd
[  267.962764][   T51] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  267.965267][   T51] usb 5-1: config 0 has no interface number 0
[  267.967179][   T51] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  267.981347][   T51] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  267.984777][   T51] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  267.987569][   T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.012028][   T51] usb 5-1: config 0 descriptor??
[  268.021871][T12296] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  268.038514][   T51] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  268.099605][T12300] loop0: detected capacity change from 0 to 32768
[  268.278014][    T9] usb 5-1: USB disconnect, device number 19
[  269.757736][   T33] audit: type=1107 audit(1755142648.870:54): pid=12335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  270.318810][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2400'.
[  270.394495][T12346] loop4: detected capacity change from 0 to 16
[  270.407541][T12346] erofs (device loop4): mounted with root inode @ nid 36.
[  270.419110][T12346] erofs (device loop4): unknown HEAD2 format 8 for nid 36, please upgrade kernel
[  270.425610][T12346] erofs (device loop4): unknown HEAD2 format 8 for nid 36, please upgrade kernel
[  270.429438][T12346] erofs (device loop4): read error -95 @ 8200 of nid 36
[  270.652553][ T5876] usb 1-1: new low-speed USB device number 34 using dummy_hcd
[  270.826380][ T5876] usb 1-1: config 0 has an invalid interface number: 168 but max is 0
[  270.829543][ T5876] usb 1-1: config 0 has no interface number 0
[  270.832521][ T5876] usb 1-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=dd.b8
[  270.836064][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.840861][T12355] loop4: detected capacity change from 0 to 32768
[  270.841984][ T5876] usb 1-1: config 0 descriptor??
[  270.862795][ T5876] lan78xx 1-1:0.168 (unnamed net_device) (uninitialized): USB bus speed not supported
[  270.874715][ T5876] lan78xx 1-1:0.168: probe with driver lan78xx failed with error -5
[  271.063233][    T9] usb 1-1: USB disconnect, device number 34
[  271.663092][T12365] loop0: detected capacity change from 0 to 512
[  271.666449][T12365] EXT4-fs: Ignoring removed nobh option
[  271.768749][T12369] loop0: detected capacity change from 0 to 2048
[  271.830906][T12371] loop0: detected capacity change from 0 to 256
[  271.834154][T12371] exfat: Deprecated parameter 'namecase'
[  272.038183][T12381] loop0: detected capacity change from 0 to 256
[  272.284903][   T51] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  272.308986][   T51] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  272.570772][T12418] overlayfs: failed to clone upperpath
[  272.588729][T12418] overlayfs: failed to clone lowerpath
[  272.643449][    T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  272.793454][    T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  272.798115][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  272.812261][ T5850] Bluetooth: hci1: command 0x0406 tx timeout
[  272.814379][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  272.817112][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  272.825715][    T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  272.828492][    T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  272.830971][    T9] usb 1-1: Product: syz
[  272.833354][    T9] usb 1-1: Manufacturer: syz
[  272.843717][    T9] cdc_wdm 1-1:1.0: skipping garbage
[  272.845448][    T9] cdc_wdm 1-1:1.0: skipping garbage
[  272.847598][    T9] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[  272.901402][   T51] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  273.048802][ T5876] usb 1-1: USB disconnect, device number 35
[  273.061338][   T51] usb 5-1: unable to get BOS descriptor or descriptor too short
[  273.067603][   T51] usb 5-1: not running at top speed; connect to a high speed hub
[  273.074407][   T51] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  273.078454][   T51] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  273.082481][   T51] usb 5-1: config 1 has no interface number 1
[  273.084968][   T51] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  273.090094][   T51] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  273.327745][   T51] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  273.330677][   T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.333471][   T51] usb 5-1: Product: syz
[  273.334764][   T51] usb 5-1: Manufacturer: syz
[  273.336210][   T51] usb 5-1: SerialNumber: syz
[  273.548458][   T51] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[  273.574912][   T51] usb 5-1: USB disconnect, device number 20
[  273.595494][ T6067] udevd[6067]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  273.794794][T12441] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  273.963524][T12453] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2451'.
[  273.966306][T12453] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2451'.
[  274.202703][T12473] loop0: detected capacity change from 0 to 64
[  274.712087][T12493] loop0: detected capacity change from 0 to 40427
[  274.716265][T12493] F2FS-fs (loop0): Image doesn't support compression
[  274.718853][T12493] F2FS-fs (loop0): build fault injection rate: 690
[  274.723397][T12493] F2FS-fs (loop0): invalid crc value
[  274.760940][T12493] F2FS-fs (loop0): write access unavailable, skipping recovery
[  274.763658][T12493] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  274.827469][T12506] Invalid source name
[  274.828787][T12506] UBIFS error (pid: 12506): cannot open "./file0", error -22
[  274.869814][T12508] loop4: detected capacity change from 0 to 2048
[  274.883330][T12508] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  274.897560][T12508] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  275.035291][T12515] program syz.0.2474 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  275.371070][T12525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2483'.
[  275.380955][T12525] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2483'.
[  275.384566][T12525] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[  275.400399][T12523] loop4: detected capacity change from 0 to 8192
[  276.206908][T12535] loop4: detected capacity change from 0 to 32768
[  276.221914][T12535] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2488 (12535)
[  276.235240][T12535] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  276.238860][T12535] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  276.244552][T12535] BTRFS info (device loop4): using free-space-tree
[  276.382999][ T9273] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  276.563226][T12582] loop4: detected capacity change from 0 to 2048
[  276.578702][T12582] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  277.048308][T12593] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  277.070679][T12595] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  277.266726][T12610] netlink: 'syz.0.2513': attribute type 298 has an invalid length.
[  277.309704][T12614] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  277.345745][T12618] loop0: detected capacity change from 0 to 256
[  277.744813][ T5876] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  278.088077][ T5876] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  278.094442][ T5876] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  278.098662][ T5876] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  278.102742][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.112757][T12626] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  278.123117][ T5876] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  278.339431][ T5876] usb 1-1: USB disconnect, device number 36
[  278.789640][T12646] loop4: detected capacity change from 0 to 8192
[  278.795150][T12646] msdos: Unknown parameter 'dk'
[  278.967735][T12655] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) !
[  279.081471][ T5876] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  279.171472][    T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  279.231350][ T5876] usb 5-1: Using ep0 maxpacket: 8
[  279.235101][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  279.239225][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  279.243654][ T5876] usb 5-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00
[  279.247038][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.253543][ T5876] usb 5-1: config 0 descriptor??
[  279.331376][    T9] usb 1-1: Using ep0 maxpacket: 32
[  279.338883][    T9] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  279.342662][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.345814][    T9] usb 1-1: Product: syz
[  279.347590][    T9] usb 1-1: Manufacturer: syz
[  279.349505][    T9] usb 1-1: SerialNumber: syz
[  279.358223][    T9] usb 1-1: config 0 descriptor??
[  279.363856][    T9] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  279.671586][ T5876] lenovo 0003:17EF:6009.000C: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.4-1/input0
[  279.871389][   T51] usb 5-1: USB disconnect, device number 21
[  280.486741][T12675] loop4: detected capacity change from 0 to 256
[  280.510082][T12675] FAT-fs (loop4): Directory bread(block 64) failed
[  280.512888][T12675] FAT-fs (loop4): Directory bread(block 65) failed
[  280.515545][T12675] FAT-fs (loop4): Directory bread(block 66) failed
[  280.518120][T12675] FAT-fs (loop4): Directory bread(block 67) failed
[  280.520837][T12675] FAT-fs (loop4): Directory bread(block 68) failed
[  280.526851][T12675] FAT-fs (loop4): Directory bread(block 69) failed
[  280.529540][T12675] FAT-fs (loop4): Directory bread(block 70) failed
[  280.532935][T12675] FAT-fs (loop4): Directory bread(block 71) failed
[  280.535558][T12675] FAT-fs (loop4): Directory bread(block 72) failed
[  280.538211][T12675] FAT-fs (loop4): Directory bread(block 73) failed
[  280.606997][T12677] loop4: detected capacity change from 0 to 256
[  280.620446][T12677] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  280.777113][    T9] gspca_topro: Sensor cx0342
[  280.862344][T12688] netlink: 'syz.4.2547': attribute type 21 has an invalid length.
[  280.866498][T12688] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2547'.
[  280.879397][T12688] netlink: 'syz.4.2547': attribute type 4 has an invalid length.
[  280.882400][T12688] netlink: 'syz.4.2547': attribute type 3 has an invalid length.
[  280.885065][T12688] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2547'.
[  280.978598][    T9] usb 1-1: USB disconnect, device number 37
[  281.057694][T12705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  281.135216][T12709] loop4: detected capacity change from 0 to 4096
[  281.140520][T12709] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  281.385021][T12709] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  281.400100][T12709] ntfs3(loop4): ino=1e, mi_enum_attr
[  281.404748][T12709] ntfs3(loop4): ino=1e, mi_enum_attr
[  281.522991][T12716] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2560'.
[  281.900774][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2571'.
[  282.269207][T12733] loop0: detected capacity change from 0 to 32768
[  282.272278][T12733] XFS: attr2 mount option is deprecated.
[  282.537710][T12757] IPv6: addrconf: prefix option has invalid lifetime
[  282.548250][T12757] IPv6: addrconf: prefix option has invalid lifetime
[  282.578008][T12759] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  282.707026][T12767] loop0: detected capacity change from 0 to 256
[  282.721645][T12767] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x467a0815, utbl_chksum : 0xe619d30d)
[  282.730069][T12767] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  282.739151][T12767] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000006)
[  282.742786][T12765] loop4: detected capacity change from 0 to 4096
[  282.780286][T12765] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  282.807968][T12765] ntfs3(loop4): ino=1e, "file1" attr_set_size
[  282.950887][T12777] loop4: detected capacity change from 0 to 4096
[  283.301457][ T5876] usb 5-1: new full-speed USB device number 22 using dummy_hcd
[  283.475500][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  283.479630][ T5876] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  283.486009][ T5876] usb 5-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00
[  283.490305][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.496229][ T5876] usb 5-1: config 0 descriptor??
[  283.499437][T12782] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  283.521050][T12788] bridge2: entered promiscuous mode
[  283.525125][T12788] bridge2: entered allmulticast mode
[  283.611094][T12792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2597'.
[  283.906910][T12800] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  283.916718][ T5876] elecom 0003:056E:00FB.000D: item fetching failed at offset 2/3
[  283.926723][ T5876] elecom 0003:056E:00FB.000D: probe with driver elecom failed with error -22
[  283.960362][T12802] loop0: detected capacity change from 0 to 4096
[  284.114023][ T5883] usb 5-1: USB disconnect, device number 22
[  284.345828][T12814] kAFS: Can only specify source 'none' with -o dyn
[  284.661450][ T5876] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  284.680200][T12816] loop4: detected capacity change from 0 to 4096
[  284.686492][T12816] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  284.698195][T12816] ntfs3(loop4): Failed to load $Bitmap (-22).
[  284.814736][ T5876] usb 1-1: Using ep0 maxpacket: 8
[  284.819875][ T5876] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23
[  284.824824][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.830385][ T5876] usb 1-1: config 0 descriptor??
[  284.840175][ T5876] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input15
[  285.052000][ T5283] bcm5974 1-1:0.0: could not read from device
[  285.073460][ T5283] bcm5974 1-1:0.0: could not read from device
[  285.076664][ T5876] usb 1-1: USB disconnect, device number 38
[  285.079587][ T5283] bcm5974 1-1:0.0: could not read from device
[  285.090365][ T5283] bcm5974 1-1:0.0: could not read from device
[  285.118089][T12439] udevd[12439]: Error opening device "/dev/input/event3": No such file or directory
[  285.126440][T12439] udevd[12439]: Unable to EVIOCGABS device "/dev/input/event3"
[  285.129667][T12439] udevd[12439]: Unable to EVIOCGABS device "/dev/input/event3"
[  285.134841][T12439] udevd[12439]: Unable to EVIOCGABS device "/dev/input/event3"
[  285.138013][T12439] udevd[12439]: Unable to EVIOCGABS device "/dev/input/event3"
[  285.217202][T12832] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2615'.
[  285.221812][T12832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2615'.
[  285.271525][ T5883] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  285.424198][ T5883] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  285.427625][ T5883] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  285.441498][ T5883] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  285.445213][ T5883] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  285.449110][ T5883] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  285.457854][ T5883] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  285.460856][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  285.465779][ T5883] usb 5-1: Product: syz
[  285.467627][ T5883] usb 5-1: Manufacturer: syz
[  285.472733][ T5883] cdc_wdm 5-1:1.0: skipping garbage
[  285.474816][ T5883] cdc_wdm 5-1:1.0: skipping garbage
[  285.478774][ T5883] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  285.481062][ T5883] cdc_wdm 5-1:1.0: Unknown control protocol
[  285.739941][T12839] loop0: detected capacity change from 0 to 32768
[  285.747078][T12839] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1281 transid 8 /dev/loop0 (7:0) scanned by syz.0.2618 (12839)
[  285.751695][T12839] BTRFS error: failed to open device for path /dev/loop0 with flags 0x23: -13
[  285.760476][T12842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2619'.
[  286.221523][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -EPIPE
[  286.266433][T12857] loop0: detected capacity change from 0 to 16
[  286.274903][T12857] erofs (device loop0): mounted with root inode @ nid 36.
[  286.295058][T12857] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36
[  286.304059][T12857] erofs (device loop0): failed to decompress -29 in[58, 4038] out[1851]
[  286.306929][T12857] erofs (device loop0): read error -117 @ 43 of nid 36
[  286.429493][T12859] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36
[  286.436719][T12859] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36
[  286.442984][T12859] erofs (device loop0): readahead error at folio 42 @ nid 36
[  286.445531][T12859] erofs (device loop0): bogus lookback distance 774 @ lcn 40 of nid 36
[  286.448235][T12859] erofs (device loop0): readahead error at folio 41 @ nid 36
[  286.454536][T12859] erofs (device loop0): bogus lookback distance 774 @ lcn 40 of nid 36
[  286.457396][T12859] erofs (device loop0): readahead error at folio 40 @ nid 36
[  286.459980][T12859] erofs (device loop0): readahead error at folio 39 @ nid 36
[  286.462781][T12859] erofs (device loop0): readahead error at folio 38 @ nid 36
[  286.465697][T12859] erofs (device loop0): readahead error at folio 36 @ nid 36
[  286.470578][T12859] erofs (device loop0): bogus lookback distance 1468 @ lcn 31 of nid 36
[  286.475393][T12859] erofs (device loop0): readahead error at folio 31 @ nid 36
[  286.479153][T12859] erofs (device loop0): readahead error at folio 25 @ nid 36
[  286.483437][T12859] erofs (device loop0): readahead error at folio 24 @ nid 36
[  286.486052][T12859] erofs (device loop0): readahead error at folio 19 @ nid 36
[  286.489061][T12859] syz.0.2625: attempt to access beyond end of device
[  286.489061][T12859] loop0: rw=524288, sector=784, nr_sectors = 64 limit=16
[  286.503114][T12859] syz.0.2625: attempt to access beyond end of device
[  286.503114][T12859] loop0: rw=524288, sector=13478624080, nr_sectors = 24 limit=16
[  286.509156][ T5876] usb 5-1: USB disconnect, device number 23
[  286.516795][T12859] syz.0.2625: attempt to access beyond end of device
[  286.516795][T12859] loop0: rw=524288, sector=13478624032, nr_sectors = 48 limit=16
[  286.535509][T12859] erofs (device loop0): failed to decompress -29 in[58, 4038] out[2639]
[  286.538568][T12859] erofs (device loop0): bogus lookback distance 1586 @ lcn 46 of nid 36
[  286.542094][T12859] erofs (device loop0): readahead error at folio 47 @ nid 36
[  286.544698][T12859] erofs (device loop0): bogus lookback distance 1586 @ lcn 46 of nid 36
[  286.547423][T12859] erofs (device loop0): readahead error at folio 46 @ nid 36
[  286.549930][T12859] erofs (device loop0): readahead error at folio 45 @ nid 36
[  286.559206][T12859] syz.0.2625: attempt to access beyond end of device
[  286.559206][T12859] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16
[  286.568266][T12859] erofs (device loop0): failed to decompress -29 in[58, 4038] out[3537]
[  287.336907][T12900] netlink: 'syz.0.2638': attribute type 3 has an invalid length.
[  287.349035][T12899] loop4: detected capacity change from 0 to 2048
[  287.356841][T12899] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  287.800116][T12919] loop4: detected capacity change from 0 to 1024
[  287.846255][ T3935] hfsplus: b-tree write err: -5, ino 4
[  287.988213][ T5239] Bluetooth: hci2: Unknown advertising packet type: 0x7f
[  287.988269][ T5239] Bluetooth: hci2: Unknown advertising packet type: 0x5d
[  288.000983][ T5239] Bluetooth: hci2: Unknown advertising packet type: 0x7f
[  288.004812][ T5239] Bluetooth: hci2: Unknown advertising packet type: 0x7f
[  288.007775][ T5239] Bluetooth: hci2: Malformed LE Event: 0x0d
[  288.601524][ T5876] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  288.751944][ T5876] usb 1-1: Using ep0 maxpacket: 8
[  288.758581][ T5876] usb 1-1: config 0 has an invalid interface number: 122 but max is 0
[  288.762650][ T5876] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  288.766564][ T5876] usb 1-1: config 0 has no interface number 0
[  288.768749][ T5876] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8
[  288.775687][ T5876] usb 1-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8
[  288.784520][ T5876] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[  288.788219][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.792335][ T5876] usb 1-1: Product: syz
[  288.794157][ T5876] usb 1-1: Manufacturer: syz
[  288.795991][ T5876] usb 1-1: SerialNumber: syz
[  288.800485][ T5876] usb 1-1: config 0 descriptor??
[  288.804325][T12951] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  288.991426][    T9] usb 5-1: new full-speed USB device number 24 using dummy_hcd
[  289.013375][ T5876] usb 1-1: NFC: intf ffff8880315e2000 id ffffffff8eb53ba0
[  289.019239][ T5876] usb 1-1: USB disconnect, device number 39
[  289.144425][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  289.148435][    T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[  289.152958][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.158539][    T9] usb 5-1: config 0 descriptor??
[  289.568994][    T9] kye 0003:0458:5013.000E: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  289.587018][    T9] kye 0003:0458:5013.000E: hidraw0: USB HID va9.2b Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0
[  289.590758][    T9] kye 0003:0458:5013.000E: tablet-enabling feature report not found
[  289.597847][    T9] kye 0003:0458:5013.000E: tablet enabling failed
[  289.653782][T12974] loop0: detected capacity change from 0 to 4096
[  289.659145][T12974] ntfs3: Invalid value for fmask.
[  289.770558][ T5876] usb 5-1: USB disconnect, device number 24
[  290.071172][T12989] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2657'.
[  290.326451][T13001] misc userio: Invalid payload size
[  290.338754][T13003] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2664'.
[  290.344991][T13003] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2664'.
[  290.349794][T13003] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2664'.
[  290.362258][T13003] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2664'.
[  290.365737][T13003] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2664'.
[  290.656135][T13019] loop4: detected capacity change from 0 to 8192
[  290.707319][T12439]  loop4: p1 < > p3 p4 < >
[  290.712829][T12439] loop4: p3 size 33554432 extends beyond EOD, truncated
[  290.748357][T13019]  loop4: p1 < > p3 p4 < >
[  290.751070][T13019] loop4: p3 size 33554432 extends beyond EOD, truncated
[  291.010928][T12439] udevd[12439]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  291.013927][ T5847] udevd[5847]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  291.018083][ T6734] udevd[6734]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  291.060116][T12439] udevd[12439]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  291.067548][ T5847] udevd[5847]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  291.071841][ T6734] udevd[6734]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  291.321426][    T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  291.471943][    T9] usb 5-1: Using ep0 maxpacket: 8
[  291.493658][    T9] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  291.497315][    T9] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  291.503429][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  291.509634][    T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  291.514733][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.517975][    T9] usb 5-1: Product: syz
[  291.519611][    T9] usb 5-1: Manufacturer: syz
[  291.524377][    T9] usb 5-1: SerialNumber: syz
[  291.941662][    T9] usb 5-1: 0:2 : does not exist
[  292.148946][    T9] usb 5-1: USB disconnect, device number 25
[  292.321942][T13044] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  292.332325][T13044] CIFS mount error: No usable UNC path provided in device string!
[  292.332325][T13044] 
[  292.336661][T13044] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  293.063025][    T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  293.211815][    T9] usb 5-1: Using ep0 maxpacket: 8
[  293.221242][    T9] usb 5-1: config 0 has an invalid interface number: 193 but max is 1
[  293.226581][    T9] usb 5-1: config 0 has an invalid interface number: 4 but max is 1
[  293.236681][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  293.240561][    T9] usb 5-1: config 0 has no interface number 0
[  293.245066][    T9] usb 5-1: config 0 has no interface number 1
[  293.247674][    T9] usb 5-1: config 0 interface 193 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  293.253133][    T9] usb 5-1: config 0 interface 4 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 11
[  293.468107][   T33] audit: type=1326 audit(1755142672.700:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13051 comm="syz.0.2685" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb9978ebe9 code=0x0
[  293.598234][    T9] usb 5-1: config 0 interface 193 has no altsetting 0
[  293.600769][    T9] usb 5-1: config 0 interface 4 has no altsetting 0
[  293.605822][    T9] usb 5-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=7d.6a
[  293.609347][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.612886][    T9] usb 5-1: Product: syz
[  293.614692][    T9] usb 5-1: Manufacturer: syz
[  293.616556][    T9] usb 5-1: SerialNumber: syz
[  293.620411][    T9] usb 5-1: config 0 descriptor??
[  293.698960][T13061] overlayfs: failed to clone upperpath
[  293.839025][    T9] usb 5-1: unknown interface protocol 0x4f, assuming v1
[  293.843685][    T9] usb 5-1: 193:2 : does not exist
[  293.849454][    T9] usb 5-1: unknown interface protocol 0x5, assuming v1
[  293.853115][    T9] usb 5-1: 4:0 : does not exist
[  293.877319][    T9] usb 5-1: USB disconnect, device number 26
[  294.484491][ T5239] Bluetooth: hci2: unexpected event for opcode 0x2011
[  295.212321][  T971] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  295.515846][  T971] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  295.520113][  T971] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  295.531225][  T971] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  295.535385][  T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  295.541546][  T971] usb 1-1: SerialNumber: syz
[  295.822544][  T971] usb 1-1: 0:2 : does not exist
[  295.855467][  T971] usb 1-1: USB disconnect, device number 40
[  295.925607][T12439] udevd[12439]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  296.123959][   T33] audit: type=1326 audit(1755142675.360:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13101 comm="syz.1.2704" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059538ebe9 code=0x7ffc0000
[  296.157453][   T33] audit: type=1326 audit(1755142675.360:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13101 comm="syz.1.2704" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f059538ebe9 code=0x7ffc0000
[  296.172066][   T33] audit: type=1326 audit(1755142675.370:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13101 comm="syz.1.2704" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059538ebe9 code=0x7ffc0000
[  296.178612][   T33] audit: type=1326 audit(1755142675.370:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13101 comm="syz.1.2704" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059538ebe9 code=0x7ffc0000
[  296.186707][   T33] audit: type=1326 audit(1755142675.370:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13101 comm="syz.1.2704" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f059538ebe9 code=0x7ffc0000
[  296.195206][   T33] audit: type=1326 audit(1755142675.370:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13101 comm="syz.1.2704" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059538ebe9 code=0x7ffc0000
[  296.204180][   T33] audit: type=1326 audit(1755142675.370:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13101 comm="syz.1.2704" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0595385ba7 code=0x7ffc0000
[  296.212126][   T33] audit: type=1326 audit(1755142675.370:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13101 comm="syz.1.2704" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f059532add9 code=0x7ffc0000
[  296.218920][   T33] audit: type=1326 audit(1755142675.370:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13101 comm="syz.1.2704" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0595385ba7 code=0x7ffc0000
[  296.388724][T13119] delete_channel: no stack
[  296.505997][T13131] loop4: detected capacity change from 0 to 4096
[  296.508894][T13131] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  296.522078][T13131] ntfs3(loop4): ino=1a, mi_enum_attr
[  296.523912][T13131] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  296.524372][T13137] loop0: detected capacity change from 0 to 512
[  296.540683][T13131] ntfs3(loop4): ino=1e, "file1" ntfs3_write_inode failed, -22.
[  296.579905][T13143] loop0: detected capacity change from 0 to 256
[  296.596791][T13145] loop4: detected capacity change from 0 to 64
[  297.758483][T13161] loop4: detected capacity change from 0 to 512
[  297.779597][T13161] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2731: casefold flag without casefold feature
[  297.784114][T13161] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2731: couldn't read orphan inode 15 (err -117)
[  297.792077][T13161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  297.794322][T13165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2732'.
[  297.994647][ T9273] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.130455][T13169] loop4: detected capacity change from 0 to 2048
[  298.137517][T13169] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  298.484017][ T5239] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  298.487769][ T5239] Bluetooth: hci2: Injecting HCI hardware error event
[  298.490716][ T5239] Bluetooth: hci2: hardware error 0x00
[  298.502771][ T5876] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  298.656123][ T5876] usb 1-1: Using ep0 maxpacket: 8
[  298.659071][ T5876] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  298.662773][ T5876] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 166, setting to 64
[  298.666228][ T5876] usb 1-1: config 0 interface 0 has no altsetting 0
[  298.670014][ T5876] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  298.673025][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.675604][ T5876] usb 1-1: Product: syz
[  298.676933][ T5876] usb 1-1: Manufacturer: syz
[  298.678647][ T5876] usb 1-1: SerialNumber: syz
[  298.681851][ T5876] usb 1-1: config 0 descriptor??
[  298.687266][ T5876] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found
[  298.884600][ T5876] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected
[  298.888105][ T5876] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  299.074692][  T971] usb 1-1: USB disconnect, device number 41
[  299.296847][   T33] kauditd_printk_skb: 81 callbacks suppressed
[  299.296862][   T33] audit: type=1326 audit(1755143446.583:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.4.2751" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05dcf8ebe9 code=0x0
[  299.884913][T13223] overlay: filesystem on ./bus is read-only
[  300.138532][  T971] usb 1-1: new full-speed USB device number 42 using dummy_hcd
[  300.282887][  T971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  300.286487][  T971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  300.289532][  T971] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  300.296241][  T971] usb 1-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.00
[  300.302503][  T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.306776][  T971] usb 1-1: config 0 descriptor??
[  300.457123][ T5239] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  300.935092][  T971] usb 1-1: USB disconnect, device number 42
[  301.253739][   T33] audit: type=1326 audit(1755143448.655:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13254 comm="syz.4.2771" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05dcf8ebe9 code=0x7ffc0000
[  301.262427][   T33] audit: type=1326 audit(1755143448.655:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13254 comm="syz.4.2771" exe="/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f05dcf8ebe9 code=0x7ffc0000
[  301.272158][   T33] audit: type=1326 audit(1755143448.655:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13254 comm="syz.4.2771" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05dcf8ebe9 code=0x7ffc0000
[  301.292269][   T33] audit: type=1326 audit(1755143448.655:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13254 comm="syz.4.2771" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05dcf8ebe9 code=0x7ffc0000
[  301.575568][T13259] loop4: detected capacity change from 0 to 40427
[  301.580035][T13259] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  301.582883][T13259] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  301.598005][T13259] F2FS-fs (loop4): invalid crc value
[  301.933509][T13259] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  301.944165][T13259] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  301.946688][T13259] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  302.100135][T13288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2783'.
[  302.204905][T13292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2785'.
[  302.215541][T13292] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2785'.
[  302.378791][   T33] audit: type=1326 audit(1755143449.840:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13300 comm="syz.4.2787" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05dcf8ebe9 code=0x0
[  302.483026][T13312] loop0: detected capacity change from 0 to 2048
[  302.488738][T13312] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  302.498675][T13309] loop4: detected capacity change from 0 to 4096
[  302.516621][T13309] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  302.527452][T13309] ntfs3(loop4): ino=19, mi_enum_attr
[  302.529203][T13309] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  302.537361][T13309] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  302.981709][T13325] loop0: detected capacity change from 0 to 32768
[  302.985660][T13325] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2800 (13325)
[  302.990168][T13325] BTRFS error: failed to open device for path /dev/loop0 with flags 0x23: -13
[  304.091527][T13352] loop0: detected capacity change from 0 to 256
[  304.124795][T13354] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  304.127066][T13354] batman_adv: batadv0: Removing interface: batadv_slave_0
[  304.135454][T13354] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  304.137766][T13354] batman_adv: batadv0: Removing interface: batadv_slave_1
[  304.168414][T13359] sctp: [Deprecated]: syz.1.2814 (pid 13359) Use of int in max_burst socket option deprecated.
[  304.168414][T13359] Use struct sctp_assoc_value instead
[  304.305972][T13361] loop4: detected capacity change from 0 to 256
[  304.381925][T13365] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2818'.
[  304.505619][T13381] loop4: detected capacity change from 0 to 256
[  304.510799][T13381] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  304.526387][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.530197][T13381] FAT-fs (loop4): Filesystem has been set read-only
[  304.532552][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.535238][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.537962][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.540602][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.543228][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.546015][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.548725][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.551322][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.553921][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.557463][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.560103][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.562682][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.565770][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.568347][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.570962][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.573508][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.576816][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.579513][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.582161][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.584873][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.587471][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.591620][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.594410][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.597337][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.599966][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.602569][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.605231][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.607829][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.610472][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.613115][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.615729][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.618399][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.620993][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.623701][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.626364][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.628968][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.631556][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.634130][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.636610][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.639152][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.641811][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.644346][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.646902][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.649444][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.652057][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.655354][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.658015][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.660760][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.663368][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.665938][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.668502][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.671591][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.674260][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.676859][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.680414][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.683011][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.685596][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.688220][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.693391][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.696396][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.699227][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.701870][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.704462][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.707910][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.710561][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.713146][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.716085][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.719570][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.722925][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.726253][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.726530][  T971] usb 1-1: new full-speed USB device number 43 using dummy_hcd
[  304.729505][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.729562][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.739194][T13381] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  304.742704][   T33] audit: type=1800 audit(1755143452.345:152): pid=13381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2825" name="file1" dev="loop4" ino=1048687 res=0 errno=0
[  304.880096][  T971] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  304.884441][  T971] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  304.890586][  T971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  304.895473][  T971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  304.899511][  T971] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  304.907426][  T971] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  304.911133][  T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  304.914347][  T971] usb 1-1: Product: syz
[  304.917118][T13384] loop4: detected capacity change from 0 to 2048
[  304.923591][  T971] usb 1-1: Manufacturer: syz
[  304.926414][  T971] usb 1-1: SerialNumber: syz
[  304.929209][T13384] NILFS (loop4): invalid segment: Sequence number mismatch
[  304.931410][  T971] usb 1-1: config 0 descriptor??
[  304.932265][T13384] NILFS (loop4): trying rollback from an earlier position
[  304.953963][T13384] NILFS (loop4): recovery complete
[  304.962343][T13385] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  305.092106][T13394] vlan3: entered promiscuous mode
[  305.094836][T13394] dummy0: entered promiscuous mode
[  305.099373][T13394] vlan3: entered allmulticast mode
[  305.101027][T13394] dummy0: entered allmulticast mode
[  305.127889][  T971] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  305.130564][  T971] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  305.317607][  T971] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71
[  305.320199][  T971] radio-si470x 1-1:0.0: si470x_get_scratch: si470x_get_report returned -71
[  305.323617][  T971] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5
[  305.328899][  T971] usb 1-1: USB disconnect, device number 43
[  305.372708][    T9] IPVS: starting estimator thread 0...
[  305.474830][T13417] IPVS: using max 60 ests per chain, 144000 per kthread
[  305.502561][ T5883] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  305.654946][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  305.658683][ T5883] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00
[  305.661633][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.667314][ T5883] usb 5-1: config 0 descriptor??
[  305.851531][T13442] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2852'.
[  306.064385][ T5883] logitech 0003:046D:C50C.0010: unknown main item tag 0x0
[  306.066679][ T5883] logitech 0003:046D:C50C.0010: unknown main item tag 0x0
[  306.069145][ T5883] logitech 0003:046D:C50C.0010: unknown main item tag 0x0
[  306.071774][ T5883] logitech 0003:046D:C50C.0010: unknown main item tag 0x0
[  306.074032][ T5883] logitech 0003:046D:C50C.0010: unknown main item tag 0x0
[  306.076569][ T5883] logitech 0003:046D:C50C.0010: unknown main item tag 0x0
[  306.079270][ T5883] logitech 0003:046D:C50C.0010: unknown main item tag 0x0
[  306.083256][ T5883] logitech 0003:046D:C50C.0010: hidraw0: USB HID v0.00 Device [HID 046d:c50c] on usb-dummy_hcd.4-1/input0
[  306.249985][T13461] loop0: detected capacity change from 0 to 256
[  306.260759][  T791] usb 5-1: USB disconnect, device number 27
[  306.265428][T13461] exfat: Deprecated parameter 'namecase'
[  306.268936][T13461] exfat: Deprecated parameter 'utf8'
[  306.505095][ T5883] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  306.665901][ T5883] usb 1-1: Using ep0 maxpacket: 32
[  306.670169][ T5883] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 56, changing to 9
[  306.674729][ T5883] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50668, setting to 1024
[  306.681882][ T5883] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  306.686456][ T5883] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  306.689758][ T5883] usb 1-1: Product: syz
[  306.691437][ T5883] usb 1-1: Manufacturer: syz
[  306.699089][T13461] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  306.703638][ T5883] hub 1-1:4.0: USB hub found
[  306.872370][T13465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2864'.
[  306.878349][T13465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2864'.
[  306.930453][ T5883] hub 1-1:4.0: 2 ports detected
[  306.939019][ T5883] hub 1-1:4.0: insufficient power available to use all downstream ports
[  307.445942][ T5883] hub 1-1:4.0: set hub depth failed
[  307.449707][ T5883] usb 1-1: USB disconnect, device number 44
[  307.655925][T13474] loop4: detected capacity change from 0 to 128
[  307.739766][T13478] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  307.917812][T13480] loop4: detected capacity change from 0 to 32768
[  307.920905][T13480] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2870 (13480)
[  307.927339][T13480] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  307.930614][T13480] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  307.933275][T13480] BTRFS info (device loop4): using free-space-tree
[  308.016690][ T9273] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  308.488544][T13516] netlink: 'syz.1.2878': attribute type 10 has an invalid length.
[  308.497730][T13516] veth1_vlan: entered allmulticast mode
[  308.518036][T13516] team0: Device veth1_vlan failed to register rx_handler
[  308.675409][T13521] loop4: detected capacity change from 0 to 256
[  308.679617][T13521] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  308.690058][T13521] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  308.705813][T13521] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  309.139176][  T971] psmouse serio3: Failed to reset mouse on : -5
[  309.269371][T13536] loop0: detected capacity change from 0 to 1024
[  310.201616][T13566] Invalid source name
[  310.203346][T13566] UBIFS error (pid: 13566): cannot open "./file0", error -22
[  310.351963][T13578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2909'.
[  310.539666][T13574] loop0: detected capacity change from 0 to 32768
[  310.543617][T13574] bcachefs (/dev/loop0): error reading superblock: error opening /dev/loop0: EACCES
[  310.551339][T13574] bcachefs: bch2_fs_get_tree() error: EACCES
[  310.910748][T13593] loop0: detected capacity change from 0 to 1024
[  310.914354][T13593] EXT4-fs: Ignoring removed nobh option
[  310.918718][T13593] EXT4-fs: Ignoring removed nobh option
[  310.921053][T13593] EXT4-fs: Ignoring removed orlov option
[  310.925141][T13593] journal_path: Lookup failure for './file0'
[  310.927765][T13593] EXT4-fs: error: could not find journal device path
[  312.045329][ T7986] unregister_netdevice: waiting for lo to become free. Usage count = 2
[  312.057765][ T7986] ref_tracker: netdev@ffff888037890610 has 1/1 users at
[  312.057765][ T7986]      dst_init+0xd9/0x450
[  312.057765][ T7986]      dst_alloc+0x12a/0x170
[  312.057765][ T7986]      rt_dst_clone+0x52/0x680
[  312.057765][ T7986]      ip_mc_finish_output+0xec/0x250
[  312.057765][ T7986]      ip_mc_output+0x25c/0x590
[  312.057765][ T7986]      ip_send_skb+0x74/0x100
[  312.057765][ T7986]      udp_send_skb+0xaf1/0x14c0
[  312.057765][ T7986]      udp_sendmsg+0x6db/0x2170
[  312.057765][ T7986]      __sock_sendmsg+0x19c/0x270
[  312.057765][ T7986]      __sys_sendto+0x3bd/0x520
[  312.057765][ T7986]      __x64_sys_sendto+0xde/0x100
[  312.057765][ T7986]      do_syscall_64+0xfa/0x3b0
[  312.057765][ T7986]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.057765][ T7986] 
[  312.100519][T13627] loop0: detected capacity change from 0 to 64
[  313.018454][  T971] misc userio: Buffer overflowed, userio client isn't keeping up
[  314.025575][  T971] input: PS/2 Generic Mouse as /devices/serio3/input/input17
[  314.230227][  T971] psmouse serio3: Failed to enable mouse on 
[  315.825732][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  315.828619][ T1363] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
03:38:11  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000001 RCX=17f9e16c269ffb00 RDX=00000000000a7d15
RSI=ffffffff8be333e0 RDI=ffffffff8be333a0 RBP=dffffc0000000000 RSP=ffffc9000311ecb8
R8 =0000000000000000 R9 =ffffffff8172c195 R10=ffffc9000311edd8 R11=ffffffff81ac3870
R12=ffffffff8b794605 R13=ffffffff9109e9b4 R14=ffffc9000311ed88 R15=00000000000a7946
RIP=ffffffff8172c304 RFL=00000a07 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f03caf3e800 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000563a61f0d000 CR3=000000010cdc4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff93b26178 RBX=0000000000057a4a RCX=0000000000040000 RDX=0000000000000000
RSI=ffff88810ee2e1a8 RDI=ffff88810ee2d640 RBP=0000000000000000 RSP=ffffc900001e0538
R8 =0000000000000000 R9 =ffffffff85523f2a R10=ffffc900001e0900 R11=fffff5200003c128
R12=0000000000000000 R13=ffff88810ee2e130 R14=ffff88810ee2e1a8 R15=25548707c4e06641
RIP=ffffffff819da234 RFL=00000802 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558da1f500 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0595385453 CR3=0000000107bb4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f0595412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
