last executing test programs:

3m12.994639373s ago: executing program 0 (id=113):
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000100)={0x0, 0x0})

3m12.87059578s ago: executing program 0 (id=116):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2c, r1, 0xe7816804f9787cab, 0x70b52a, 0x25dfdc03, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x10)

3m12.758936939s ago: executing program 0 (id=120):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000f7dbdf253a00000008000300", @ANYRES32=r2, @ANYBLOB="04005b00060065"], 0x28}, 0x1, 0x0, 0x0, 0x24000850}, 0x20044004)

3m12.652110506s ago: executing program 0 (id=122):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@noauto_da_alloc}]}, 0x7, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O")
mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x0)
setresuid(r0, r0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')

3m12.468878926s ago: executing program 0 (id=126):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1, &(0x7f00000000c0)={[{@bh}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@minixdf}, {@test_dummy_encryption_v1}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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")

3m10.824691027s ago: executing program 0 (id=146):
syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x503, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1}}}}}}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

3m10.626966262s ago: executing program 32 (id=146):
syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x503, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1}}}}}}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

2m13.395738803s ago: executing program 1 (id=825):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x9d5, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
recvmmsg(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/202, 0xca}, 0x6}], 0x1, 0x0, 0x0)

2m13.33785416s ago: executing program 1 (id=826):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f00000000c0)={'batadv0\x00', 0x1})

2m13.248377822s ago: executing program 1 (id=828):
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=ANY=[], 0x0, 0x0)

2m13.089034206s ago: executing program 1 (id=831):
syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000004480)='./file0\x00', 0x10040, &(0x7f00000000c0)={[{@journal_async_commit}, {@noacl}, {@coherency_full}, {@heartbeat_none}, {@journal_async_commit}, {@user_xattr}]}, 0x1, 0x444c, &(0x7f000000cd40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0xf8, 0xfffffffc, 0x601, 0x0, 0x9})

2m12.549576173s ago: executing program 1 (id=838):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0xff80)

2m12.32919482s ago: executing program 1 (id=839):
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="4015a2000000941339e399fb0d5322214275e2487f41868d71455aa0e63fe29305a5eb72b5e914051a41db7b9a1382cfabd01bb11311ad7b64a18f147e68dea2fbe048e73c578396e08f304687ce29f74da4509a83fc8f0cdca73eb9810591ba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f02b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec530702ee9ddfccec914ce06ca"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0)

2m12.229490432s ago: executing program 33 (id=839):
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="4015a2000000941339e399fb0d5322214275e2487f41868d71455aa0e63fe29305a5eb72b5e914051a41db7b9a1382cfabd01bb11311ad7b64a18f147e68dea2fbe048e73c578396e08f304687ce29f74da4509a83fc8f0cdca73eb9810591ba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f02b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec530702ee9ddfccec914ce06ca"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0)

54.268320793s ago: executing program 3 (id=1766):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000014c0)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001540)="27050200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9d9bf1174bbf47ef74d55a99ad39d207cb572bb63dfc8f6098e3251eb181ebb55a0e82b5aa114e78f51a1e0eec04a10c2897204a66afab94dd8de001923467692f87653809bdac2ecd596160bec5c8869a08ecc5bf1561bb7ebf3468a2a212c7107d3c03418321ff77586b723dbfb3f03212aaf9150914bb989ef324957cea1707943a287afd6aa759a30e50f215292e54eba09b0d2fbc3b255e7af2e0456a3a3506f9a0655022d6170cc1e54d69c694be4e814d7e2ead694fe24a7dbf3de0cfa01fffdebeb4d92c28c86377d3e86008c5de7276700e0e6", 0x10f}, {&(0x7f0000001240)="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", 0x171}], 0x2}, 0x9cdc2384056b48b8)

54.153574109s ago: executing program 3 (id=1768):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0), 0x4)

54.014514806s ago: executing program 3 (id=1770):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "8f"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0)

53.949866079s ago: executing program 3 (id=1772):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

53.833074354s ago: executing program 3 (id=1774):
mkdir(&(0x7f00000001c0)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x400000, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x260)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$eJzs3bFqFFEUBuBjskmWNKYWiwEbq0WtbBeJIA4IK1No5UC0SUSYNKPVPIbP4CP5GKnSjZhZsklcbczm7s58Hyz3wM/Cuc3eLc6d+fDw8/HRl9NP7c/vMR5nMYpo2jbiILZiOzr35uvWRb0bVzUBAGya2aycpu6B1aqqabkTEXt/JMWPJA0BAAAAAAAAAADw35bN/8e5+X8A6DPz//1XVdNyf/7/7Trz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA65217v/3HJ3V/AMDtc/4DwPA4/wFgeJz/ADA8b9+9fz3N88NZlo0jzpq6qItu7fKXr/LDJ9mFg8W3zuq62L7Mn3Z5dj3fif15/mxpvhuPH3X57+zFm/xGvhdHq98+AAAAAAAAAAAAAAAAAAAArIVJdmnp/f7J5G95V115PsCN+/ujeDC6s20AAAAAAAAAAAAAAAAAAADARjv9+u24PDn5WCl6U8TztWjjrouItWijL0XqXyYAAAAAAAAAAAAAAAAAABiexaXf1J0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDqL9/+vroiIpu2k3i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY78CAAD//139ms4=")
ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000000c0))

53.775748774s ago: executing program 3 (id=1775):
openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000340)="4501b3", 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50)
rt_tgsigqueueinfo(0x0, 0x0, 0x1f, &(0x7f00000003c0)={0x26, 0x1, 0x10004})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)

38.423186874s ago: executing program 34 (id=1775):
openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000340)="4501b3", 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50)
rt_tgsigqueueinfo(0x0, 0x0, 0x1f, &(0x7f00000003c0)={0x26, 0x1, 0x10004})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)

3.791783362s ago: executing program 4 (id=2386):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f0000000340)={0x11, 0xc, '\x00', [@generic={0x6, 0x20, "4f2b2103e7a696f692db046512807e537c5d983fdef50395c861f100b5d17d7d"}, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x8, {0x3, 0x0, 0x63, 0x7f}}, @calipso={0x7, 0x20, {0x3, 0x6, 0x4, 0x25b8, [0x20000000000, 0x1095, 0xfffffffffffffffc]}}]}, 0x68)

3.666707421s ago: executing program 4 (id=2389):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@discard}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x448, &(0x7f0000000c40)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0)

3.514073775s ago: executing program 4 (id=2392):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x3, &(0x7f0000000000)=[{0x1, 0x5, 0x8, 0x200}, {0x14, 0xd, 0x2, 0x10}, {0x6, 0xd, 0xbc, 0x4}]})

3.240368742s ago: executing program 4 (id=2395):
r0 = gettid()
timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = userfaultfd(0x80001)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xc}, {}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, 0x0, @in=@multicast1}}, 0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0x0, 0x0, 0x5, 0x0, 0x5}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@mcast2}}, 0xe8)
listen(0xffffffffffffffff, 0x7fffffff)
readv(r1, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
tee(r1, 0xffffffffffffffff, 0x2, 0x4)
syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff)
socketpair(0x1, 0x1, 0x0, 0x0)
r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r2, 0xc0585609, &(0x7f0000000280)={0x0, 0xa, 0x2})
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff)
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000})

2.244358894s ago: executing program 4 (id=2418):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b"], 0x0)

1.867832623s ago: executing program 2 (id=2429):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4)
mount$bind(0x0, 0x0, 0x0, 0x981001, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x100}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @random="cda69ef32ef2", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0xf5, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

1.821078727s ago: executing program 2 (id=2431):
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000001240)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@mb_optimize_scan}, {@orlov}, {@user_xattr}, {@quota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@permit_directio}, {@fsmagic={'fsmagic', 0x3d, 0x10000}}, {@hash}]}, 0x1, 0x55d, &(0x7f0000001880)="$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")

1.670001192s ago: executing program 2 (id=2433):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRESDEC], 0x28}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000001240)=[{{&(0x7f0000007b00)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000180)="e6e0", 0x2}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0000002001100000000000000000000000100000001000000000000001c000000000000000000000008"], 0x50}}], 0x2, 0x4004810)

1.326460664s ago: executing program 2 (id=2434):
r0 = socket$netlink(0x10, 0x3, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000240)="390000001000111867090707a640400f0021ff3f30000000170a0017ffc30000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1)

898.555155ms ago: executing program 5 (id=2436):
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file7\x00', 0x200008, &(0x7f0000000340)=ANY=[], 0x1, 0x1d3, &(0x7f0000000100)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1ff)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file7/file0\x00', 0x800020, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000003c0)='.\x00', 0x1b4247c, &(0x7f0000008180)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES8=0x0, @ANYRESOCT, @ANYRES16, @ANYRESOCT, @ANYBLOB="3093e121f7523fece90a37d5a927c18dd10d3154456ac66e96749c346fd71173e12fcf6d1160b1a8ed194deb98dc67b07edd64d7e1afef339c828e956edf4068785cb0d7d4a24137cf9c2cac79060c0beb7d1ab2be0fac9a6d6028d2e9d895ec67dec6914528a112adced19a86ad8403eb4e04bc7d51afc6561063bbb696c825a82153efcf06941b3ae039ef7761b7a2bbddc32f3cc39f6ffb5d2a808f3e7ecd9039d8c7895b00ebbf6dc950788fbca296f89178e938440f8e57819e17eb79736882e9699d96b1959c119730542c4baf0af7acac79531d0c4623bb5055768b6228217225ea7782904746898b13fc6dab1c63a2c2d5a724a8bb745da18da54627d618842162c1367e4361737545a8628fb76106c1212ce6152ef12ebda119a33e28f17ba3fbf9eed69447ca88876cbabfce8b2aba2f668f5b91d00d5de2be7bf028b273ec31e63b4fbf87f6cbf1efb41a7e538e4f4a66962d7c7a0b2ff01e86df58b94f1a321aa1297c5a4cc42b656d9acb7a40490ede8099679fb86b4ee7a852aa68358dcea38ad3d2b3b794db5b3caec0228b39709eedd31a55aaf2b49146d0effdc3dfce3ec78e4bb2f65ceb9ca94a2e2fed7efc2b6bcd462955cf911ed5dbb62d6339d001bee46a4989d87cf0578d0f8913ed29d36c31e9b41678ec127f48d40003c0569b6102757c87f00adb7920ab2b78a82bfc115f831ab9abc72a93299c0e1971d17a2b3d376d66e6ddfe3dd86166507f87b6db73fe284aa52db7645601329b6087cab267eefc8bb846cad8ade3e61be692a066d0e6a3f0603d0405d58aa07c406950a69fff78a37cb9e2c9d420bb9394e483252739cabecc7418b142ec8c84e394b42c05c3f116409fc830fac08788bc2b93cb491696a8385d07cd1e19a9de182abeceb435e92d4eda2d2710cb06180c6271e5c1a26edf630ee16848993e3c3ef8804a87407b7e7cdb8d263238cec45424f7dfda3b1a8390e39820ac367c33aafc4edb3223578c108628e6fa84d7805208d796d91e4b83794fdea7fa49ed4c422aed72db2d46df97082b904dd80ed9cb4ab29b4cc1e345d76999971bb7a3bcf191634020eeda9c58c3b2a306921ef7830f672cc1da4905963b0a4aede35913fdf8dbd4e8ba22e39bfba342c6a302f7a03225d021f0e0e357200f7301ce560b065d1431ad16702e035caab022382d6251e88ef861145c1a3121ff099feda4dcf6561a026889ac3f0474d6a868a4f24ea60f7bc95bf7f2afb85a430658eb3b2b84b61a695f90e01f30a417c79caa44640e7eb9195f844346100c551d4fc23ef249f29ec1a5489839d153c3fce79b288d86a48eadc7024cab6f9b626c7eeb87e8f76ec6205c3487deaef65133ec2677c642887de743d1dcc2dbf72f7b9062b9654ff693aa688dd5e05ed48c8d681cd426bde017c08d31d83994284efb804a9beda7091240e7feb740307412e4c64aa422b91dfd31874a43aa2e76988e5933f557c884cd4b960a6321828692975a76f6473cd0650cbd9dd09acfad7aec17c7a6c34e3c9327469d77d1ee32992f1f2c47ff36026f74b4c8d01cf52eefd44d30519f33cc13cb30cf7a43f7305fd76b063d2363ac318e0090d3516cbbd82da99b3f53d570c2e2b85883abf68332f0ea3e0721bd251cea500281405d34aaed523c2684cd5e255919d828bf00f2d62a3d0b56d3d7cd18c5fa6f0764aeea0405e8731f0b223bd19471b8188c4b00cb5c2d057444148a390f36f2ddbf3bb6c46f4c96058ff00057311d2cff2a9c081f3f47967bc5c7c1dc554cd66c39ee403cd426a659131f3e2b9f0109af5414214e81344e0ff0129fe9ec7c01814823c995bf1b437e4f1f07f83055ded75331575d921231b448609f1aa76ae28edc70612e8de047c338712a43413a047c67a2fb3ec7c525a1720d01d8e0e92ae34f3b88c9b4e6c3e938919a4390628f6529dfa8d1f5666c28d4ae9bf8d5a579d5117e027a4cbbc5193a1c3f811a4822746e4c10fe9fd0ac93df86fb41e3d3993cdacb05f633be404a0d7fd256ca01c131859d08e5cd26809f786c5c57866d76f25ae000fc7517e2e74c29f1cf804fa6ae0bd985926daadbc1c61b9e042d8b6367d1e68e3e23476830f8fa2ff4999f17120d64537d601990fa130eaa19b6b660730f37f2256e028689c5b86582819ee5103d8cb23c246f4f34dfb7adebf2a14eb41eef768ecd6dbb37075ed8bf462104e0303f74fd81e69209c0d89cef3b0231a1b24b60d3edf5cb96043ef449823440c2edb1fcee97a9b56e811989ead072123d1090f1f7be126112497c2042bfdea16a14c34d6c90fe8be6a3558ecbcadba53a939f78362a295bc4f0597ce78fdf099a57981099d4c3b10c560b814c3eb719bd441cc7fc1667776fe21b1a2288804a6b2a0c65341660053f800fef460b93d2dd27b38cdc32fd781fd34480278756e8b9ea8a3fd7687b55064bf95b80d01122f81ac7b1b33c08e92f9736dd80bd850f0f5d54197e28624e8aee1e171a449c21576f420f41d09c3f15c8723303338ede1f73020d1d637a59596092d02b7df0a649be2890b825978f5a571b88425cabbadbff56bbd2bcd3e1ff4c9197e7f639fec41ce603e34a18eb21fac02fcd0c68025c3eba6aa01a8470915ec51a499659a179b12deed0153e02c88dbf4429ecd922675132de722b0d225125e8650cbec160ea8dde590d87d37dda05aa4ebf21a9b2f96bebfc0a495cdea3258f732451716ee60bb9c69d7a1c87ea7e804ec2864234805f3f5a8fc13b08ea7de3f3fa0cb3649aa6b2d6191ad9493dd01a5380a89af9fbbdcf8482429e254dce6e3d55cd012cf937ec058c922d9490228a7a75c8f28691452bc65184e89bc9b59278c05356c1e9db634b4c3d69ac5b0ac074e21b06cda6f57727dc67503cb78124c9ba71a98138ff73ff83344562a6835262517b239eb12244bafe6200595576f520b6cec0128cc18e94df1a2404dafa7b8631870d4b0b28706463fcdb12ff30a4dae6836cdb00080000d9a2a00d354ac4489be77b69de05646a12406473e2803bab37ca3a8e4057c8c1acdfe64529affda8ab2dc2a2912901dbdaf31add3db2a1998ac2524a6544cbbeea0015f2e3e219d9f65892345b9707a75e47308a0803076b1f3599804410513619a2224e51669d25b3d9ad1d795df41f6718a6bfec935fe61d5b4ed48c9b3506afac9e6215a64b56cc35d69c84914886da4f443aeb9ba4d7b92de2afcaae0d27dcb9fb587de4cfb501419ec1ecf6409761ac42a92d6bf9067f76eee3f459815459dadf700ffc024c511159626bc33f4b67ff894cada0dfd232639d1cb979d4f7f6064b2ff18c5376dd3bddcf70e0db0cbc4169aff2f81295cbcda865bb4d38b135003bf0db7264a80d74628c4e14a24d4453fbfa6ec81befc58c8dc52806961c90aacfbfcafd097d07e285158e96129b7d7fc1e692bb47e59fe42c86be772ce525f2df3cd7fee26fa6f2c4ae8820af6bd86f71a650a8fc636f50fa0be68986d8bc9c4af917c8483057f85700d177efc36127c5737439ccaae4753a97ab57b701a73a9580c497e11f07c60d47407898404f0b8b4187a51a6fa83ea3bca73d58e601f6d62eb86be9675dfc61620f09099de918c1e5d661d8cac1b4a638689ecc5ab23af6807a48be79af1a6fe9a0c4dd0496f8ff2c3e7e395719523d529a57c8cbde9594196e381a549b24e92f62e53f267bdfa214e5830513ca33fdc6abd42c274926eec5b9b26df5b1d19a4e5a33751419853cf372ff3b1f19b7f69b8cc21325828ab5a27ec12a6c6be92b3fe86cc1947e90032535c01dbf4bc8f511d71c2af2b5a2839be10d41786cac3037af2edc90e10005de6c7cd8c8f212ced643b901880e797ca6f114f1984aebb9d8114af39819200f2d7a52737ffb928798589a399ca3476cee2371e278d7a617cbc0ad3291f4c118d33366316be15a11738b0b36824064fd6e24a17e11c83a72fe54afe4b62d3280df32c0d7089cf67ca673613f223f0b66134c74878ca46fd11f965cbe337258f9e313da2edcd5fdeffc85d6ca8db1355b15d389d4068cefefc1e3e2dea21b22d07fb5120fd4827dd4b3dd6f0c1cdf773820f9b539065569f5e9bdeb6b8dd48cd01b30b3b9ed6b9fb48fa7dc87ceeff8f54cf0744b8c307319615ecb0d7b240cd663425d945cd00906e5b9bd63b89bcac0f4b28837fbfa299866f2b228e7341e517694f4a30c451512eb85e8e011911df0e050d125e63d559f1deae50745dc0a73eb6f0c04b725d8b0e2dfa7668442e9e0da2b83d07b6180a8152e6a35b61b642effaa6a57815d032dd643ed925884d4fdf0d115d5d75ea50999933a770ff1b10b4e172104ee61c2455987db88a053782b97a77af12f01f3f74d1d6224a14a047fda4c181e6b01de067d764d5e666e08d9be7bf5f936a3e3442f741d1619983c77e3bbedf97c4430ac96fe3cc8df98f15188ea9f796dd0e3e0e4bde70cf534a15d0e82d27ffbbafba15d8889451ec8cb0c4a63ef2d6907db89555385e11ec7ef2534ca29cc64df6dc5b3b92697ec11b826449c5db22f81b93868caf8e3df973edfa578b79c012ef8ef433a1eda720e22e30b2901e955dee0646c1efafdf997cd1163e08cf03e9d33f02bdffe0a89cf91acf2ac99796fa05018984ea13ce514460e159b49421c4356928031595dea599f000f0debe2c42e8d3bdd05207e74588ab36a6daaddc8ea2c7c4c5294c385886e58fc6309b94fd91b9b56a37b73a1c163a5a5ea1bfaecc1898c4fe857fec7e9b7f3a24c2f90f61119a9c72aa8df532787db0d25ac60db91b456d03baba0577d96ab9b8439ffc2b7b72e0146e3f2f61118d08449c2a816644c895345fd0a4c019bb4a983095e236a8c1a38b946bdb877c2ae202592cb0266f7d80e2c1d1292532204f9be9f2f5954ce2fa99697c9b20fe138db57ac3134ad556d16d8d615c356d05fd95ab1bef26b23e1ad2ea5abaffede3e14bfe2ee55f593700c49a6c9ecf28d1a01d72b1920b1b7944ef7ed7a2f96a6f5ee4f40f54978a735d155b259d7afd53ac19ed2443d45dcbc84335a419109ab159403b0f828d94079c0c5e5320f91496a043b92901a1e8a4966315ada9f8ffc5ac70868c0df278afe7bfe0affb68aa13ed029bb965b6d6a9ebaba1d0d1a2c17b69d0ca3b0edfa3fefedb5bc0064272577ac22fa84bf819a4eea0ab2ba920888e4c2bc89286184fc10b6dcce84466f3db078fe3af1a90a5b9aa7b66a9e5450807601c2a17460027109908618ac2cc1508029151fc96ee5ab264d2c4236aacfca06c0e6b71b748900652de55f7761a4606a237bd11902178e3a2afde4cc4964b3dfe1abdaad79ed0d80693674c4737a0b17c2e42ba390f98e776a4e758ed98ce8bdeb914b01707602b10fffca3992f1168e7ab3793ad47236351ff7a20ecd50b4edb63e95ed05d6093ead98bbc2dec9dda3ac4b902bd02e4d0eb528653ce3aa313cee066181d7612f40234c1c3aef14fc99b7d9196cd7dab2ffead014170866ba2c27c388ef67de7b351cf40d343059eeda90e45700c36febfde7a07fce384200618548cb76d8017c2053b332507045a914e39b93f927b33396ab82feb532870c4323c2305398867aac393339656bd4b39c5da5d676fa5a233c7c62f8cc9ab4417a658bf9e679d22bb801ab10d855897a75e4b3e523e87e4ea1e17f270830cee4185d62ea0afd170508453ab0f42d3b35292c4e", @ANYBLOB="b13754b80dea7719ef0dc3f550fbdc73cba49d4e7c82016d5769fcbd99ef37581e8a1a59015dac55d80767f6ebd134de7aeb32fb8672e2854f2b1f232b59d913c818bafee229130f2f139c9abd8d6278fd2347233a650ab304a1d02efb4c9c6f4d32e45cad4ade56d6f2966fc3f418c537da6c8a2c1fcf66667f65c4f6794746c9da9c7778c19647890cd400af2cc623f50c755118d05171a980c539cac0576e4b616d0c4027", @ANYRESDEC, @ANYRES64, @ANYRES64, @ANYBLOB="07d78ba5b4b305ffa8003d3ce9ffa739e0663e1417c13e72c5279a4b999c88a472706213954865e31509148053419264d6e4ec3f597efaff912ace951125b3eefd14d39185759d6549fe537e3d3c4d5cca3176840af5baa12c6f9bf000085e9875bf09d5c1b1e68f64b44e689ec52c2df882e0d459003298db32777a378c4ace0a20ae4a3a1b388044d29ef0ffa7adc737b0e171078e04e665b07fb8d05b5ccf37b7c0724193faac2f04266491289d17e88372335d09e151925ff8f7c30ba93bf421dab1b80566c94d8f42330d10a8b53d815ef818852dca140b21658b973a38b98965cf8af56a1be1543a9b5f596880c1911c54fecd5aefde798a5acb8833ad7e20a68b631cd72101baa470ccc24d68bd292b3d37cc4f1c8d103d99360b6b334059b0333f7390ad5959080dfb2e0d59b4ead51540f85b4962365e55c0810ef88297072101e1c8affb8b023d24892888c40da78bf946c60d81cc01f3f4e2a09e2e53f05810508579f8d2b298d0dc464180b160f0084060aeb860184400"/394, @ANYRES64, @ANYRESOCT, @ANYRES16], 0x5, 0x0, &(0x7f0000000000))
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0)

792.042387ms ago: executing program 4 (id=2437):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58)
syz_emit_ethernet(0x35, 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0)
write$cgroup_int(r2, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'hsr0\x00', 0x4}, 0x18)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r7, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="ebe3a0e9796cfd1647", 0x9}], 0x1, 0x0, 0x0, 0x28044854}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/66, 0x42}], 0x1}, 0x151)

791.588393ms ago: executing program 5 (id=2438):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0x9, @mcast2, 0x4}, 0x1c)
connect$netlink(r0, &(0x7f00000000c0)=@unspec, 0xc)
syz_emit_ethernet(0x3e, &(0x7f0000000340)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x8, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], {0x4e1d, 0x4e20, 0x8}}}}}}, 0x0)

611.35802ms ago: executing program 5 (id=2439):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=")
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @b})
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000001b80)={@desc={0x1, 0x0, @desc3}, 0x21, 0x0, '\x00', @c})

504.158472ms ago: executing program 5 (id=2440):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 0000000240 '], 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

343.2901ms ago: executing program 2 (id=2441):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000001000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000200), &(0x7f00000003c0)=r1}, 0x20)

178.1286ms ago: executing program 5 (id=2442):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x1, 0x257})
io_uring_enter(r0, 0x2000000, 0x2, 0xf, &(0x7f0000000000)={[0x4000]}, 0x18)

177.587415ms ago: executing program 2 (id=2443):
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup(0x4685, 0x0)
timer_create(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r4, &(0x7f0000000000)={0x7, 0x0, 0x3}, 0x8)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0xd402, 0x1, 0x0, 0x4d55ba80e15bd3d8, 0xb5a, 0x8}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000072009fb3000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0800010001002000a58886a954d661c4e85c3bd409af9b77444610960f86577adec70a7a1ce19ff1bf805a3dd0b5f2765f7f86398a766ff0"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

0s ago: executing program 5 (id=2444):
socket$inet_tcp(0x2, 0x1, 0x0)
socket(0xb, 0x3, 0xff)
syz_emit_ethernet(0x3e, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x5f2, &(0x7f0000000c80)="$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")
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0x835, 0x3)

kernel console output (not intermixed with test programs):

65.630:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.1.643" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff40af9cdd9 code=0x0
[  129.918656][ T7230] syz.3.631 (7230) used greatest stack depth: 20152 bytes left
[  130.087011][ T7255] mmap: syz.1.649 (7255) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  130.118149][ T7257] binder: 7256:7257 unknown command 0
[  130.128726][ T7257] binder: 7256:7257 ioctl c0306201 2000000001c0 returned -22
[  130.374480][   T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  130.526759][   T10] usb 2-1: Using ep0 maxpacket: 32
[  130.532070][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.536571][   T10] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.540863][   T10] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.548305][   T10] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  130.553109][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  130.556074][   T10] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  130.559963][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.569393][   T10] usb 2-1: config 0 descriptor??
[  130.659812][ T7279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.662'.
[  131.017949][   T10] corsair-cpro 0003:1B1C:0C10.0005: item fetching failed at offset 0/5
[  131.026985][   T10] corsair-cpro 0003:1B1C:0C10.0005: probe with driver corsair-cpro failed with error -22
[  131.199500][   T10] usb 2-1: USB disconnect, device number 7
[  131.504664][ T5424] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  131.674367][ T5424] usb 4-1: Using ep0 maxpacket: 32
[  131.677838][ T5424] usb 4-1: config 0 interface 0 has no altsetting 0
[  131.680201][ T5424] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00
[  131.683103][ T5424] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.687607][ T5424] usb 4-1: config 0 descriptor??
[  131.803823][ T7301] IPVS: lblc: TCP 172.20.20.170:20001 - no destination available
[  132.099267][ T5424] corsair 0003:1B1C:1B34.0006: unknown main item tag 0x0
[  132.101823][ T5424] corsair 0003:1B1C:1B34.0006: unknown main item tag 0x0
[  132.105460][ T5424] corsair 0003:1B1C:1B34.0006: unknown main item tag 0x0
[  132.108493][ T5424] corsair 0003:1B1C:1B34.0006: unknown main item tag 0x0
[  132.111198][ T5424] corsair 0003:1B1C:1B34.0006: unknown main item tag 0x0
[  132.113599][ T5424] corsair 0003:1B1C:1B34.0006: unknown main item tag 0x0
[  132.116366][ T5424] corsair 0003:1B1C:1B34.0006: unknown main item tag 0x0
[  132.119311][ T5424] corsair 0003:1B1C:1B34.0006: unknown main item tag 0x0
[  132.122176][ T5424] corsair 0003:1B1C:1B34.0006: unknown main item tag 0x0
[  132.125424][ T5424] corsair 0003:1B1C:1B34.0006: unknown main item tag 0x0
[  132.135907][ T5424] corsair 0003:1B1C:1B34.0006: hidraw0: USB HID v0.04 Device [HID 1b1c:1b34] on usb-dummy_hcd.3-1/input0
[  132.304761][ T5424] usb 4-1: USB disconnect, device number 9
[  132.677678][ T7308] SET target dimension over the limit!
[  132.679825][ T7306] overlayfs: failed to clone upperpath
[  132.705713][ T7306] overlayfs: failed to clone upperpath
[  132.960075][ T7326] openvswitch: netlink: IP tunnel dst address not specified
[  133.309615][ T7353] vivid-001: =================  START STATUS  =================
[  133.316117][ T7353] vivid-001: Radio HW Seek Mode: Bounded
[  133.341360][ T7353] vivid-001: Radio Programmable HW Seek: false
[  133.355189][ T7353] vivid-001: RDS Rx I/O Mode: Block I/O
[  133.359078][ T7353] vivid-001: Generate RBDS Instead of RDS: false
[  133.370876][ T7353] vivid-001: RDS Reception: true
[  133.373253][   T33] audit: type=1326 audit(1778443669.190:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7357 comm="syz.1.700" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff40af9cdd9 code=0x0
[  133.380900][ T7353] vivid-001: RDS Program Type: 0 inactive
[  133.382891][ T7353] vivid-001: RDS PS Name:  inactive
[  133.387317][ T7353] vivid-001: RDS Radio Text:  inactive
[  133.389575][ T7353] vivid-001: RDS Traffic Announcement: false inactive
[  133.391876][ T7353] vivid-001: RDS Traffic Program: false inactive
[  133.393776][ T7353] vivid-001: RDS Music: false inactive
[  133.396029][ T7353] vivid-001: ==================  END STATUS  ==================
[  133.932382][ T7388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.713'.
[  134.553816][ T7400] overlayfs: failed to clone upperpath
[  134.719043][ T7407] overlay: Unknown parameter 'uid'
[  135.377011][   T56] block nbd0: Receive control failed (result -32)
[  135.506458][ T7425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.727'.
[  135.510055][ T7425] netlink: 'syz.1.727': attribute type 12 has an invalid length.
[  135.611904][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  135.612016][ T7425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.727'.
[  135.616619][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  135.628742][ T7425] netlink: 'syz.1.727': attribute type 12 has an invalid length.
[  135.629656][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  135.648588][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  135.826359][ T7431] loop1: detected capacity change from 0 to 4096
[  135.848569][ T7431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.935943][ T5729] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.691645][ T7463] loop3: detected capacity change from 0 to 4096
[  136.703225][ T7463] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  136.764086][ T7463] ntfs3(loop3): $Secure::$SII is corrupted.
[  136.771034][ T7463] ntfs3(loop3): Failed to initialize $Secure (-22).
[  136.848826][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.744'.
[  137.043795][ T7478] netlink: 'syz.1.749': attribute type 13 has an invalid length.
[  137.046398][ T7478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'.
[  137.050580][ T7478] netlink: 'syz.1.749': attribute type 13 has an invalid length.
[  137.053184][ T7478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'.
[  137.397833][ T7499] loop1: detected capacity change from 0 to 4096
[  137.403266][ T7499] nilfs2: Unknown parameter '01777777777777777777777'
[  138.352449][ T1377] ieee802154 phy0 wpan0: encryption failed: -22
[  138.355986][ T1377] ieee802154 phy1 wpan1: encryption failed: -22
[  138.915572][ T7522] netlink: 'syz.3.766': attribute type 1 has an invalid length.
[  139.804423][    T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  139.954243][    T9] usb 4-1: Using ep0 maxpacket: 32
[  139.958417][    T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  139.961646][    T9] usb 4-1: config 0 has no interface number 0
[  139.964202][    T9] usb 4-1: config 0 interface 184 has no altsetting 0
[  139.969461][    T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  139.973010][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.976125][    T9] usb 4-1: Product: syz
[  139.977741][    T9] usb 4-1: Manufacturer: syz
[  139.979411][    T9] usb 4-1: SerialNumber: syz
[  139.992685][    T9] usb 4-1: config 0 descriptor??
[  140.624876][    T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  140.632018][    T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  141.279355][ T7584] loop1: detected capacity change from 0 to 128
[  141.313963][ T7584] vxfs: WRONG superblock magic 7b3185b5 at 1
[  141.318041][ T7584] vxfs: WRONG superblock magic 7b318cb5 at 8
[  141.320379][ T7584] vxfs: can't find superblock.
[  141.445135][    T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71
[  141.453541][    T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71
[  141.459871][    T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  141.463383][    T9] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[  141.469285][ T7594] loop1: detected capacity change from 0 to 128
[  141.473483][    T9] usb 4-1: USB disconnect, device number 10
[  141.518629][ T7594] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  141.543102][ T7594] ext4 filesystem being mounted at /238/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  141.598031][ T7594] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  141.839643][ T7609] overlayfs: failed to clone upperpath
[  142.555073][ T7637] Bluetooth: hci0: unsupported parameter 256
[  142.558590][ T7637] Bluetooth: hci0: invalid length 0, exp 2 for type 7
[  142.889906][ T7641] loop3: detected capacity change from 0 to 4096
[  143.013634][ T7641] ntfs3(loop3): ino=19, mi_enum_attr
[  143.026561][ T7641] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  143.631546][ T7652] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid
[  144.041397][ T7670] loop3: detected capacity change from 0 to 128
[  144.969561][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  144.987652][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  144.993082][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  145.001866][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  145.010367][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  145.189377][ T7700] loop3: detected capacity change from 0 to 2048
[  145.237053][ T7703] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  145.260665][ T7700] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0
[  145.285419][ T7700] Remounting filesystem read-only
[  145.291247][ T7700] netlink: 44 bytes leftover after parsing attributes in process `syz.3.844'.
[  145.589120][   T33] audit: type=1326 audit(1778443681.410:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7699 comm="syz.3.844" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3188d9cdd9 code=0x0
[  145.885639][ T7688] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.888511][ T7688] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.891416][ T7688] bridge_slave_0: entered allmulticast mode
[  145.895810][ T7688] bridge_slave_0: entered promiscuous mode
[  145.900899][ T7688] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.903743][ T7688] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.906809][ T7688] bridge_slave_1: entered allmulticast mode
[  145.910882][ T7688] bridge_slave_1: entered promiscuous mode
[  145.943296][ T7688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  145.950489][ T7688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  145.981003][ T7688] team0: Port device team_slave_0 added
[  145.986289][ T7688] team0: Port device team_slave_1 added
[  146.020795][ T7688] batman_adv: batadv0: Adding interface: batadv_slave_0
[  146.023662][ T7688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  146.032627][ T7688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  146.039135][ T7688] batman_adv: batadv0: Adding interface: batadv_slave_1
[  146.041768][ T7688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  146.053543][ T7688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  146.124068][ T7688] hsr_slave_0: entered promiscuous mode
[  146.131296][ T7688] hsr_slave_1: entered promiscuous mode
[  146.136539][ T7688] debugfs: 'hsr0' already exists in 'hsr'
[  146.138905][ T7688] Cannot create hsr debugfs directory
[  146.206000][    C1] vcan0: j1939_tp_rxtimer: 0xffff888170293400: rx timeout, send abort
[  146.209509][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888170293400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  146.448274][ T7688] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  146.458730][ T7688] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  146.462012][ T7688] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  146.467914][ T7716] loop3: detected capacity change from 0 to 32768
[  146.469501][ T7688] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  146.475958][ T7688] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  146.490299][ T7688] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  146.494019][ T7688] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  146.510227][ T7688] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  146.522055][ T7716] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.846 (7716)
[  146.586983][ T7716] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  146.597854][ T7716] BTRFS info (device loop3): using crc32c checksum algorithm
[  146.674990][ T7688] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.693513][ T7688] 8021q: adding VLAN 0 to HW filter on device team0
[  146.702813][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.705897][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.719266][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.722138][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.739207][ T7716] BTRFS info (device loop3): setting nodatasum
[  146.748503][ T7716] BTRFS info (device loop3): setting nodatacow
[  146.757577][ T7716] BTRFS info (device loop3): disabling tree log
[  146.763432][ T7716] BTRFS info (device loop3): turning on async discard
[  146.772941][ T7716] BTRFS info (device loop3): enabling free space tree
[  146.780940][ T7716] BTRFS info (device loop3): max_inline set to 0
[  147.118050][ T5732] Bluetooth: hci1: command tx timeout
[  147.221158][ T7688] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.731125][ T7688] veth0_vlan: entered promiscuous mode
[  147.747056][ T7688] veth1_vlan: entered promiscuous mode
[  147.783890][ T7688] veth0_macvtap: entered promiscuous mode
[  147.792180][ T7688] veth1_macvtap: entered promiscuous mode
[  147.823116][ T7688] batman_adv: batadv0: Interface activated: batadv_slave_0
[  147.840992][ T7688] batman_adv: batadv0: Interface activated: batadv_slave_1
[  147.864817][ T5476] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.871081][ T5927] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  147.872133][ T5476] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.913306][ T5476] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  148.050208][ T5476] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.166033][ T2276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.179197][ T2276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.265250][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.268830][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.432694][ T7783] loop3: detected capacity change from 0 to 1024
[  148.499620][ T7783] hfsplus: failed to load extents file
[  148.823214][ T7789] loop3: detected capacity change from 0 to 8192
[  148.829943][ T7789] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  148.848958][ T7789] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  148.851939][ T7789] ntfs3(loop3): Failed to load $Extend (-2).
[  148.856790][ T7789] ntfs3(loop3): Failed to initialize $Extend.
[  149.021875][ T7798] loop4: detected capacity change from 0 to 128
[  149.100248][ T7798] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  149.123282][ T7798] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  149.195023][ T5732] Bluetooth: hci1: command tx timeout
[  149.281671][ T7688] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  149.650882][ T7827] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.877'.
[  150.518711][ T7882] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[  150.523674][ T7882] File: /dev/nullb0 PID: 7882 Comm: syz.4.903
[  150.533673][ T7890] netlink: 277 bytes leftover after parsing attributes in process `syz.2.906'.
[  150.580724][ T7892] netlink: 28 bytes leftover after parsing attributes in process `syz.2.907'.
[  150.853701][ T7904] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  151.267085][ T5732] Bluetooth: hci1: command tx timeout
[  151.504824][ T7928] loop3: detected capacity change from 0 to 2048
[  151.523077][ T7052] udevd[7052]: incorrect nilfs2 checksum on /dev/loop3
[  151.525989][ T7928] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  151.534606][ T7928] NILFS (loop3): mounting unchecked fs
[  151.545429][ T7928] NILFS (loop3): recovery complete
[  151.548874][ T7929] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  151.765692][ T7935] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  151.773685][ T7935] CIFS mount error: No usable UNC path provided in device string!
[  151.773685][ T7935] 
[  151.781244][ T7935] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  152.538994][ T7969] loop4: detected capacity change from 0 to 512
[  152.562969][ T7969] FAT-fs (loop4): bogus logical sector size 0
[  152.573638][ T7969] FAT-fs (loop4): Can't find a valid FAT filesystem
[  153.393933][ T5732] Bluetooth: hci1: command tx timeout
[  153.403954][   T33] audit: type=1800 audit(1778443689.220:25): pid=7994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.954" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  154.545281][    T9] libceph: connect (1)[c::]:6789 error -101
[  154.555315][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  154.571352][    T9] libceph: connect (1)[c::]:6789 error -101
[  154.576534][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  154.625037][ T8019] ceph: No mds server is up or the cluster is laggy
[  154.773625][   T33] audit: type=1326 audit(1778443690.590:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.3.966" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3188d9cdd9 code=0x7ffc0000
[  154.784435][   T33] audit: type=1326 audit(1778443690.590:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.3.966" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3188d9cdd9 code=0x7ffc0000
[  154.794326][   T33] audit: type=1326 audit(1778443690.590:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.3.966" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3188d9cdd9 code=0x7ffc0000
[  154.807374][   T33] audit: type=1326 audit(1778443690.590:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.3.966" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3188d9cdd9 code=0x7ffc0000
[  154.816079][   T33] audit: type=1326 audit(1778443690.590:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.3.966" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3188d9cdd9 code=0x7ffc0000
[  154.823903][   T33] audit: type=1326 audit(1778443690.590:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.3.966" exe="/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f3188d9cdd9 code=0x7ffc0000
[  154.831536][   T33] audit: type=1326 audit(1778443690.590:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.3.966" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3188d9cdd9 code=0x7ffc0000
[  154.840479][   T33] audit: type=1326 audit(1778443690.590:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.3.966" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3188d9cdd9 code=0x7ffc0000
[  154.853610][   T33] audit: type=1326 audit(1778443690.590:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.3.966" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3188d9cdd9 code=0x7ffc0000
[  156.475833][ T8059] loop4: detected capacity change from 0 to 512
[  156.558616][ T8059] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.4.978: corrupted xattr block 95: invalid header
[  156.572603][ T8059] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  156.574754][    C1] EXT4-fs (loop4): initial error at time 1778443692: ext4_expand_extra_isize_ea:2810: inode 11
[  156.581017][    C1] EXT4-fs (loop4): last error at time 1778443692: ext4_expand_extra_isize_ea:2810: inode 11
[  156.590179][ T8059] EXT4-fs (loop4): Remounting filesystem read-only
[  156.595596][ T8059] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -30)
[  156.600602][ T8059] EXT4-fs (loop4): 1 orphan inode deleted
[  156.603254][ T8059] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.654387][ T7688] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.894993][ T8085] loop3: detected capacity change from 0 to 256
[  156.912857][ T8085] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d)
[  157.028338][ T8089] exFAT-fs (loop3): start_clu is invalid cluster(0xffffffff)
[  158.290590][ T8105] loop4: detected capacity change from 0 to 1024
[  158.367804][ T8105] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  158.406720][ T8105] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  158.414498][ T8105] EXT4-fs (loop4): orphan cleanup on readonly fs
[  158.419617][ T8105] __quota_error: 8 callbacks suppressed
[  158.419631][ T8105] Quota error (device loop4): v2_read_file_info: Number of blocks too big for quota file size (6144 > 1024).
[  158.463279][ T8105] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  158.476823][ T8105] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  158.503654][ T8105] EXT4-fs (loop4): 1 truncate cleaned up
[  158.517719][ T8105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  158.562946][ T7688] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.566827][ T8112] loop3: detected capacity change from 0 to 1024
[  158.613929][ T8112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.677935][ T8112] EXT4-fs warning (device loop3): ext4_rmdir:3192: inode #11: comm syz.3.1001: empty directory 'file0' has too many links (111)
[  158.720137][ T5927] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.779349][ T8124] overlayfs: conflicting options: nfs_export=on,index=off
[  159.017888][ T8136] loop4: detected capacity change from 0 to 4096
[  159.055161][ T8139] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  159.078951][   T33] audit: type=1800 audit(1778443694.900:43): pid=8136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1012" name="file1" dev="loop4" ino=15 res=0 errno=0
[  159.110681][ T8141] loop3: detected capacity change from 0 to 512
[  159.116940][ T8141] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal
[  159.605319][ T5784] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  159.684576][ T8156] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.688707][ T8156] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.739650][ T8156] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  159.764140][ T5784] usb 5-1: Using ep0 maxpacket: 16
[  159.768881][ T5784] usb 5-1: config index 0 descriptor too short (expected 51443, got 18)
[  159.775605][ T5784] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  159.782940][ T5784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.788893][ T5784] usb 5-1: Product: syz
[  159.792927][ T5784] usb 5-1: Manufacturer: syz
[  159.797689][ T5784] usb 5-1: SerialNumber: syz
[  159.806676][ T5784] r8152-cfgselector 5-1: Unknown version 0x0000
[  159.813251][ T5784] r8152-cfgselector 5-1: config 0 descriptor??
[  160.240698][   T32] r8152-cfgselector 5-1: USB disconnect, device number 2
[  160.465338][ T8175] program syz.3.1030 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  161.116895][ T8196] loop3: detected capacity change from 0 to 1024
[  161.183740][ T8196] EXT4-fs: Mount option(s) incompatible with ext3
[  162.247798][ T8218] syz_tun: entered allmulticast mode
[  162.258141][ T8215] syz_tun: left allmulticast mode
[  163.278908][ T8230] loop4: detected capacity change from 0 to 32768
[  163.297161][ T8230] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1054 (8230)
[  163.325678][ T8230] BTRFS info (device loop4 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  163.329901][ T8230] BTRFS info (device loop4 state S): using crc32c checksum algorithm
[  163.356868][   T27] BTRFS warning (device loop4 state ES): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored
[  163.368083][   T86] BTRFS warning (device loop4 state ES): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x13388982 level 0, ignored
[  163.379526][   T27] BTRFS warning (device loop4 state ES): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x28b693f7 level 0, ignored
[  163.386105][ T8230] BTRFS error (device loop4 state ES): failed to load root free space
[  163.396992][   T86] BTRFS warning (device loop4 state ES): checksum verify failed on logical 5267456 mirror 1 wanted 0x22fa3277 found 0x0d9b21b0 level 0, ignored
[  163.405990][ T8230] BTRFS info (device loop4 state ES): enabling ssd optimizations
[  163.409652][ T8230] BTRFS info (device loop4 state ES): enabling free space tree
[  163.412475][ T8230] BTRFS info (device loop4 state ES): ignoring bad roots
[  163.416568][ T8230] BTRFS info (device loop4 state ES): ignoring meta csums
[  163.419194][ T8230] BTRFS info (device loop4 state ES): force zlib compression, level 3
[  163.454271][ T7688] BTRFS info (device loop4 state ES): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  163.734712][ T8254] loop4: detected capacity change from 0 to 4096
[  163.790275][ T8255] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  164.103984][ T8259] loop4: detected capacity change from 0 to 32768
[  164.109072][ T8259] 
[  164.109072][ T8259]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  164.109072][ T8259] 
[  164.158735][ T8259] ERROR: (device loop4): diWrite: ixpxd invalid
[  164.158735][ T8259] 
[  164.161638][ T8259] ERROR: (device loop4): remounting filesystem as read-only
[  164.164562][ T8259] ERROR: (device loop4): txCommit: 
[  164.164562][ T8259] 
[  164.168256][ T8259] ERROR: (device loop4): dtSearch: stack overrun!
[  164.168256][ T8259] 
[  164.175474][ T8259] btstack dump:
[  164.199036][ T8259] bn = 0, index = 0
[  164.200728][ T8259] bn = 0, index = 0
[  164.201887][ T8259] bn = 0, index = 0
[  164.203330][ T8259] bn = 0, index = 0
[  164.204815][ T8259] bn = 0, index = 0
[  164.206200][ T8259] bn = 0, index = 0
[  164.207614][ T8259] bn = 0, index = 0
[  164.209036][ T8259] bn = 0, index = 0
[  164.210614][ T8259] jfs_lookup: dtSearch returned -5
[  164.705274][ T8279] syz.4.1068 uses obsolete (PF_INET,SOCK_PACKET)
[  164.989419][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1070'.
[  164.999313][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1070'.
[  165.266537][ T8289] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  165.703990][ T5784] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  165.868354][ T5784] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  165.952066][ T5784] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  165.961466][ T5784] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  165.968436][ T5784] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  165.971796][ T5784] usb 4-1: Manufacturer: syz
[  165.976331][ T5784] usb 4-1: config 0 descriptor??
[  165.988307][ T5784] igorplugusb 4-1:0.0: incorrect number of endpoints
[  166.207881][    T9] usb 4-1: USB disconnect, device number 11
[  166.215695][ T8297] loop4: detected capacity change from 0 to 32768
[  166.220106][ T8297] btrfs: Deprecated parameter 'usebackuproot'
[  166.222582][ T8297] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  166.228722][ T8297] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1075 (8297)
[  166.253174][ T8297] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  166.256932][ T8297] BTRFS info (device loop4): using crc32c checksum algorithm
[  166.281696][   T86] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  166.290773][ T8297] BTRFS error (device loop4): failed to load root extent
[  166.296353][ T8297] BTRFS warning (device loop4): try to load backup roots slot 1
[  166.298938][   T27] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  166.304805][ T8297] BTRFS warning (device loop4): couldn't read tree root
[  166.311543][ T8297] BTRFS warning (device loop4): try to load backup roots slot 2
[  166.316404][   T86] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  166.320328][ T8297] BTRFS warning (device loop4): couldn't read tree root
[  166.324059][ T8297] BTRFS warning (device loop4): try to load backup roots slot 3
[  166.340298][ T8297] BTRFS info (device loop4): rebuilding free space tree
[  166.363149][ T8297] BTRFS info (device loop4): checking UUID tree
[  166.369847][ T8297] BTRFS info (device loop4): enabling ssd optimizations
[  166.373127][ T8297] BTRFS info (device loop4): turning on async discard
[  166.376241][ T8297] BTRFS info (device loop4): enabling free space tree
[  166.378319][ T8297] BTRFS info (device loop4): force clearing of disk cache
[  166.380401][ T8297] BTRFS info (device loop4): enabling auto defrag
[  166.382343][ T8297] BTRFS info (device loop4): trying to use backup root at mount time
[  166.388465][ T8297] BTRFS info (device loop4): use zstd compression, level 3
[  166.612419][ T7688] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  167.257097][ T8352] loop3: detected capacity change from 0 to 512
[  167.265733][ T8352] EXT4-fs: Ignoring removed oldalloc option
[  167.269383][ T8352] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal
[  168.469305][ T8373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1102'.
[  168.478096][ T8373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1102'.
[  168.656323][  T922] kernel read not supported for file /comedi4 (pid: 922 comm: kworker/0:2)
[  168.670300][ T8390] CIFS: iocharset name too long
[  168.788122][ T8395] futex_wake_op: syz.3.1112 tries to shift op by 144; fix this program
[  169.914491][ T8407] loop4: detected capacity change from 0 to 32768
[  169.924569][ T8407] btrfs: Deprecated parameter 'usebackuproot'
[  169.935937][ T8407] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  169.969082][ T8407] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1117 (8407)
[  170.006521][ T8421] fuse: Bad value for 'fd'
[  170.018793][ T8407] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  170.034197][ T8407] BTRFS info (device loop4): using crc32c checksum algorithm
[  170.182140][ T8407] BTRFS info (device loop4): rebuilding free space tree
[  170.256483][ T8407] BTRFS info (device loop4): enabling ssd optimizations
[  170.258622][ T8407] BTRFS info (device loop4): using spread ssd allocation scheme
[  170.260899][ T8407] BTRFS info (device loop4): turning on flush-on-commit
[  170.262984][ T8407] BTRFS info (device loop4): enabling free space tree
[  170.266138][ T8407] BTRFS info (device loop4): force clearing of disk cache
[  170.268652][ T8407] BTRFS info (device loop4): trying to use backup root at mount time
[  170.270906][ T8407] BTRFS info (device loop4): force zlib compression, level 3
[  170.288726][   T33] audit: type=1800 audit(1778443706.111:44): pid=8407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1117" name="file1" dev="loop4" ino=260 res=0 errno=0
[  170.590147][ T7688] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  170.849503][ T8462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1131'.
[  170.935184][   T33] audit: type=1326 audit(1778443706.761:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.4.1135" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b00d9cdd9 code=0x7ffc0000
[  170.941301][ T8465] loop4: detected capacity change from 0 to 512
[  170.970191][   T33] audit: type=1326 audit(1778443706.761:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.4.1135" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b00d9cdd9 code=0x7ffc0000
[  170.977845][   T33] audit: type=1326 audit(1778443706.761:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.4.1135" exe="/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f2b00d9cdd9 code=0x7ffc0000
[  170.996887][   T33] audit: type=1326 audit(1778443706.761:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.4.1135" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b00d9cdd9 code=0x7ffc0000
[  171.015149][   T33] audit: type=1326 audit(1778443706.761:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.4.1135" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b00d9cdd9 code=0x7ffc0000
[  171.022205][   T33] audit: type=1326 audit(1778443706.761:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.4.1135" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2b00d9cdd9 code=0x7ffc0000
[  171.065659][ T8467] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1134'.
[  171.093612][   T33] audit: type=1326 audit(1778443706.761:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.4.1135" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b00d9cdd9 code=0x7ffc0000
[  171.114416][   T33] audit: type=1326 audit(1778443706.761:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.4.1135" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b00d9cdd9 code=0x7ffc0000
[  171.170946][   T33] audit: type=1326 audit(1778443706.761:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.4.1135" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2b00d9cdd9 code=0x7ffc0000
[  171.283739][ T8465] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.288670][ T8465] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.339445][ T7688] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.753888][ T5784] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  171.954327][ T5784] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  171.958328][ T5784] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  171.969499][ T5784] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  171.973571][ T5784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  171.976576][ T5784] usb 5-1: SerialNumber: syz
[  172.245334][ T5784] usb 5-1: 0:2 : does not exist
[  172.279716][ T5784] usb 5-1: USB disconnect, device number 3
[  172.305934][ T7052] udevd[7052]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  174.873437][ T8554] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1170'.
[  175.007217][ T8556] loop3: detected capacity change from 0 to 32768
[  175.034045][ T8556] JBD2: Ignoring recovery information on journal
[  175.072410][ T8556] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  175.092293][ T8556] (syz.3.1172,8556,1):ocfs2_check_dir_entry:314 ERROR: directory entry (#65: offset=312) too close to end or out-of-bounds
[  175.135305][ T5927] ocfs2: Unmounting device (7,3) on (node local)
[  175.594374][ T5784] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  175.776200][ T5784] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  175.785025][ T5784] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  175.791409][ T8574] loop4: detected capacity change from 0 to 128
[  175.798420][ T5784] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  175.814349][ T5784] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  175.820940][ T5784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.827518][ T5784] usb 4-1: Product: syz
[  175.829359][ T5784] usb 4-1: Manufacturer: syz
[  175.831289][ T5784] usb 4-1: SerialNumber: syz
[  175.839360][ T5784] usb 4-1: config 0 descriptor??
[  175.840363][ T8574] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  175.842245][ T8562] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  175.849186][ T8562] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  175.868228][ T8574] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  175.872610][ T5784] usb 4-1: ucan: probing device on interface #0
[  175.911719][ T7688] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  176.098752][ T8590] loop4: detected capacity change from 0 to 512
[  176.102428][ T8590] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  176.127754][ T8590] EXT4-fs (loop4): 1 truncate cleaned up
[  176.139471][ T8590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.191455][ T7688] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.262294][ T5784] usb 4-1: ucan: device reported invalid device info
[  176.266303][ T5784] usb 4-1: ucan: probe failed; try to update the device firmware
[  176.341818][ T8601] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1190'.
[  176.464726][  T922] usb 4-1: USB disconnect, device number 12
[  177.140448][ T8614] team0: No ports can be present during mode change
[  177.553912][   T32] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  177.733663][   T32] usb 4-1: Using ep0 maxpacket: 16
[  177.744506][   T32] usb 4-1: config 0 has an invalid interface number: 32 but max is 0
[  177.750803][   T32] usb 4-1: config 0 has no interface number 0
[  177.756599][   T32] usb 4-1: config 0 interface 32 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.766774][   T32] usb 4-1: config 0 interface 32 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  177.777405][   T32] usb 4-1: config 0 interface 32 has no altsetting 0
[  177.782796][   T32] usb 4-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00
[  177.790740][   T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.801630][   T32] usb 4-1: config 0 descriptor??
[  178.081164][ T8632] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1205'.
[  178.239985][   T32] uclogic 0003:5543:0047.0007: interface is invalid, ignoring
[  178.385472][ T8646] xt_l2tp: unknown flags: 10
[  178.429897][ T5731] usb 4-1: USB disconnect, device number 13
[  178.439598][ T8650] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543
[  178.558535][ T8658] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  179.244393][  T922] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  179.393731][  T922] usb 4-1: Using ep0 maxpacket: 16
[  179.401415][  T922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  179.405996][  T922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.409866][  T922] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  179.413361][  T922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.422189][  T922] usb 4-1: config 0 descriptor??
[  179.746121][ T8692] loop4: detected capacity change from 0 to 32768
[  179.755388][ T8692] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1231 (8692)
[  179.771037][ T8692] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  179.775128][ T8692] BTRFS info (device loop4): using sha256 checksum algorithm
[  179.837837][  T922] apple 0003:05AC:024B.0008: unknown global tag 0xe
[  179.846453][  T922] apple 0003:05AC:024B.0008: item 0 1 1 14 parsing failed
[  179.852974][  T922] apple 0003:05AC:024B.0008: parse failed
[  179.859111][  T922] apple 0003:05AC:024B.0008: probe with driver apple failed with error -22
[  179.882209][ T8692] BTRFS info (device loop4): enabling ssd optimizations
[  179.885290][ T8692] BTRFS info (device loop4): turning on async discard
[  179.887741][ T8692] BTRFS info (device loop4): enabling free space tree
[  179.980042][ T7688] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  180.058530][  T922] usb 4-1: USB disconnect, device number 14
[  180.308696][ T8715] xt_hashlimit: size too large, truncated to 1048576
[  180.808888][   T33] kauditd_printk_skb: 21 callbacks suppressed
[  180.808905][   T33] audit: type=1326 audit(1778443716.631:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8721 comm="syz.4.1236" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b00d9cdd9 code=0x7ffc0000
[  180.820501][   T33] audit: type=1326 audit(1778443716.631:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8721 comm="syz.4.1236" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b00d9cdd9 code=0x7ffc0000
[  180.831337][   T33] audit: type=1326 audit(1778443716.641:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8721 comm="syz.4.1236" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b00d9cdd9 code=0x7ffc0000
[  180.839612][   T33] audit: type=1326 audit(1778443716.641:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8721 comm="syz.4.1236" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b00d9cdd9 code=0x7ffc0000
[  180.851825][   T33] audit: type=1326 audit(1778443716.641:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8721 comm="syz.4.1236" exe="/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f2b00d9cdd9 code=0x7ffc0000
[  180.860895][   T33] audit: type=1326 audit(1778443716.641:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8721 comm="syz.4.1236" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b00d9cdd9 code=0x7ffc0000
[  180.869908][   T33] audit: type=1326 audit(1778443716.641:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8721 comm="syz.4.1236" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2b00d9cdd9 code=0x7ffc0000
[  180.881543][   T33] audit: type=1326 audit(1778443716.641:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8721 comm="syz.4.1236" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2b00d9cdd9 code=0x7ffc0000
[  181.073702][ T8724] loop4: detected capacity change from 0 to 32768
[  181.114436][ T8724] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  181.323814][ T8724] syz.4.1237 (8724) used greatest stack depth: 19064 bytes left
[  181.403033][ T7688] ocfs2: Unmounting device (7,4) on (node local)
[  181.586449][ T8746] loop3: detected capacity change from 0 to 256
[  181.590321][ T8746] exfat: Deprecated parameter 'utf8'
[  181.603895][ T8746] exfat: Deprecated parameter 'namecase'
[  181.611444][ T8746] exfat: Deprecated parameter 'namecase'
[  181.649013][ T8746] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  181.722144][ T8748] netlink: 340 bytes leftover after parsing attributes in process `syz.4.1245'.
[  181.914726][ T2276] Bluetooth: hci3: Frame reassembly failed (-84)
[  182.193895][ T8757] loop3: detected capacity change from 0 to 32768
[  182.199889][ T8757] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1249 (8757)
[  182.215295][ T8757] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  182.223191][ T8757] BTRFS info (device loop3): using sha256 checksum algorithm
[  182.251339][ T8757] BTRFS info (device loop3): enabling ssd optimizations
[  182.255256][ T8757] BTRFS info (device loop3): turning on async discard
[  182.257550][ T8757] BTRFS info (device loop3): enabling free space tree
[  182.277998][ T5927] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  182.389166][ T8782] loop3: detected capacity change from 0 to 512
[  182.423951][ T8782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.428236][ T8782] ext4 filesystem being mounted at /328/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.490999][ T5927] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.706973][ T8791] tipc: Failed to remove unknown binding: 66,0,0/0:3680007308/3680007309
[  182.711939][ T8791] tipc: Failed to remove unknown binding: 66,0,0/0:3680007308/3680007309
[  182.715281][ T8796] tipc: Failed to remove unknown binding: 66,0,0/0:1339309185/1339309187
[  183.173865][  T922] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  183.325170][  T922] usb 4-1: config 0 has an invalid interface number: 50 but max is 0
[  183.328273][  T922] usb 4-1: config 0 has no interface number 0
[  183.330708][  T922] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  183.338592][  T922] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  183.341405][  T922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.344147][  T922] usb 4-1: Product: syz
[  183.347841][  T922] usb 4-1: Manufacturer: syz
[  183.349442][  T922] usb 4-1: SerialNumber: syz
[  183.352841][  T922] usb 4-1: config 0 descriptor??
[  183.364526][  T922] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0
[  183.568326][  T922] usb 4-1: USB disconnect, device number 15
[  183.578605][  T922] yurex 4-1:0.50: USB YUREX #0 now disconnected
[  183.986922][   T54] Bluetooth: hci3: command 0x1003 tx timeout
[  183.986932][ T5732] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  184.189190][ T8839] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  184.445621][ T8851] loop3: detected capacity change from 0 to 256
[  184.453513][ T8851] exfat: Deprecated parameter 'utf8'
[  184.465973][ T8851] exfat: Deprecated parameter 'utf8'
[  184.481494][ T8851] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  184.507023][ T8853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1286'.
[  184.796163][ T8865] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  184.807845][ T8833] loop4: detected capacity change from 0 to 131072
[  184.817237][ T8833] F2FS-fs (loop4): Invalid log sectorsize (67108873)
[  184.820113][ T8833] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  184.823871][ T8833] F2FS-fs (loop4): invalid crc value
[  184.881848][ T8833] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  184.891693][ T8833] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  184.894023][ T8833] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  184.939818][ T8833] fscrypt (loop4, inode 8): Error -61 getting encryption context
[  185.157168][ T8877] loop3: detected capacity change from 0 to 32768
[  185.190259][ T8877] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  185.212934][ T8877] XFS (loop3): Ending clean mount
[  185.333699][ T5927] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  185.605365][ T8899] loop3: detected capacity change from 0 to 256
[  185.636930][ T8899] FAT-fs (loop3): Directory bread(block 64) failed
[  185.639653][ T8899] FAT-fs (loop3): Directory bread(block 65) failed
[  185.641649][ T8899] FAT-fs (loop3): Directory bread(block 66) failed
[  185.643706][ T8899] FAT-fs (loop3): Directory bread(block 67) failed
[  185.645780][ T8899] FAT-fs (loop3): Directory bread(block 68) failed
[  185.647764][ T8899] FAT-fs (loop3): Directory bread(block 69) failed
[  185.649745][ T8899] FAT-fs (loop3): Directory bread(block 70) failed
[  185.651720][ T8899] FAT-fs (loop3): Directory bread(block 71) failed
[  185.654052][ T8899] FAT-fs (loop3): Directory bread(block 72) failed
[  185.656052][ T8899] FAT-fs (loop3): Directory bread(block 73) failed
[  186.337692][ T8915] xt_limit: Overflow, try lower: 268435456/134217728
[  186.758284][ T8937] loop4: detected capacity change from 0 to 2048
[  186.765823][ T8937] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  187.601584][ T8961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1330'.
[  187.611050][ T8961] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1330'.
[  187.909707][ T8979] trusted_key: syz.4.1337 sent an empty control message without MSG_MORE.
[  188.560086][ T8986] loop3: detected capacity change from 0 to 131072
[  188.575998][ T8986] F2FS-fs (loop3): Invalid log sectorsize (67108873)
[  188.578484][ T8986] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  188.582757][ T8986] F2FS-fs (loop3): invalid crc value
[  188.656214][ T8984] loop4: detected capacity change from 0 to 131072
[  188.657737][ T8986] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  188.673211][ T8984] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0)
[  188.675808][ T8984] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  188.682317][ T8984] F2FS-fs (loop4): invalid crc value
[  188.684323][ T8986] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  188.684347][ T8986] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  188.734321][ T8984] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  188.738507][   T33] audit: type=1800 audit(1778443724.531:83): pid=8986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1341" name="file1" dev="loop3" ino=7 res=0 errno=0
[  188.749172][ T8984] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  188.751582][ T8984] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  188.966681][ T9000] netlink: 'syz.2.1346': attribute type 83 has an invalid length.
[  189.755594][ T9039] loop4: detected capacity change from 0 to 512
[  189.843358][ T5424] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  190.006227][ T5424] usb 4-1: config 1 has an invalid interface number: 146 but max is 0
[  190.013690][ T5424] usb 4-1: config 1 has no interface number 0
[  190.017822][ T5424] usb 4-1: config 1 interface 146 has no altsetting 0
[  190.027398][ T5424] usb 4-1: New USB device found, idVendor=413c, idProduct=b097, bcdDevice=52.59
[  190.031690][ T5424] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.036442][ T5424] usb 4-1: Product: syz
[  190.038510][ T5424] usb 4-1: Manufacturer: syz
[  190.040410][ T5424] usb 4-1: SerialNumber: syz
[  190.046950][ T5424] r8152-cfgselector 4-1: Unknown version 0x0000
[  190.260615][ T5424] r8152 4-1:1.146: Expected endpoints are not found
[  190.266418][ T5424] r8152-cfgselector 4-1: USB disconnect, device number 16
[  191.314892][ T9096] loop3: detected capacity change from 0 to 256
[  192.350861][ T9116] loop3: detected capacity change from 0 to 128
[  192.367423][ T9116] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  192.372367][ T9116] ext4 filesystem being mounted at /374/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  192.389685][ T9116] fscrypt (loop3, inode 12): Direct key flag not allowed with different contents and filenames modes
[  192.413461][ T5927] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  192.471904][ T9120] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1390'.
[  192.486382][ T9120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1390'.
[  192.609915][ T9121] loop9: detected capacity change from 0 to 2640
[  192.617171][ T9121] Buffer I/O error on dev loop9, logical block 0, async page read
[  192.620099][ T9121] Buffer I/O error on dev loop9, logical block 0, async page read
[  192.622644][ T9121] Buffer I/O error on dev loop9, logical block 0, async page read
[  192.627630][ T9121] Buffer I/O error on dev loop9, logical block 0, async page read
[  192.630877][ T9121] Buffer I/O error on dev loop9, logical block 0, async page read
[  192.634303][ T9121] Buffer I/O error on dev loop9, logical block 0, async page read
[  192.648186][ T9121] Buffer I/O error on dev loop9, logical block 0, async page read
[  192.656922][ T9121] Buffer I/O error on dev loop9, logical block 0, async page read
[  192.677429][ T9121] ldm_validate_partition_table(): Disk read failed.
[  192.683275][ T9121] Buffer I/O error on dev loop9, logical block 0, async page read
[  192.683359][ T9121] Buffer I/O error on dev loop9, logical block 0, async page read
[  192.683466][ T9121] Dev loop9: unable to read RDB block 0
[  192.683862][ T9121]  loop9: unable to read partition table
[  192.696727][ T9121] loop_reread_partitions: partition scan of loop9 (3) failed (rc=-5)
[  192.984048][ T9129] fuse: Bad value for 'fd'
[  193.031637][ T9131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1394'.
[  193.441488][ T9135] loop3: detected capacity change from 0 to 512
[  193.475652][ T9135] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.1396: inode has both inline data and extents flags
[  193.479647][ T9135] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  193.479904][ T9135] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1396: couldn't read orphan inode 15 (err -117)
[  193.486867][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  193.486885][    C1] EXT4-fs (loop3): initial error at time 1778443729: ext4_orphan_get:1397: inode 15
[  193.486902][    C1] EXT4-fs (loop3): last error at time 1778443729: ext4_orphan_get:1397: inode 15
[  193.495613][ T9135] loop3: lost filesystem error report for type 5 error -117
[  193.499645][ T9135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.540280][ T5927] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.614521][ T9140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1397'.
[  193.860639][ T9152] syz_tun: entered allmulticast mode
[  193.891568][ T9152] pimreg: entered allmulticast mode
[  193.926883][ T9152] pimreg: left allmulticast mode
[  194.433068][ T5424] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  194.516009][ T9183] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  194.587414][ T5424] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  194.593945][ T5424] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39
[  194.598168][ T5424] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.601549][ T5424] usb 5-1: Product: syz
[  194.603450][ T5424] usb 5-1: Manufacturer: syz
[  194.605683][ T5424] usb 5-1: SerialNumber: syz
[  194.610280][ T5424] usb 5-1: config 0 descriptor??
[  194.632092][ T5424] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[  194.839224][ T5424] gspca_pac7302: reg_w() failed i: ff v: 01 error -71
[  194.844373][ T5424] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71
[  194.859036][ T5424] usb 5-1: USB disconnect, device number 4
[  195.313451][ T9194] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1422'.
[  195.479335][ T9200] loop3: detected capacity change from 0 to 2048
[  195.498642][ T9200] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  195.584869][   T33] audit: type=1800 audit(1778443731.411:84): pid=9200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1424" name="file1" dev="loop3" ino=1415 res=0 errno=0
[  195.611721][   T33] audit: type=1800 audit(1778443731.431:85): pid=9211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1424" name="file1" dev="loop3" ino=1415 res=0 errno=0
[  195.626241][ T9213] netlink: 766 bytes leftover after parsing attributes in process `syz.4.1430'.
[  195.739142][ T9218] fuse: Bad value for 'fd'
[  197.016930][ T9237] loop4: detected capacity change from 0 to 4096
[  197.748505][ T9271] netlink: 'syz.2.1454': attribute type 1 has an invalid length.
[  197.780127][ T9271] 8021q: adding VLAN 0 to HW filter on device bond1
[  197.813163][ T9271] bond1: (slave geneve2): making interface the new active one
[  197.818097][ T9271] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  197.821448][ T5476] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  197.823099][ T5424] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  197.827626][ T5476] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  197.831012][ T5476] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  197.840546][ T5476] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  197.983034][ T5424] usb 5-1: Using ep0 maxpacket: 8
[  197.989764][ T5424] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  197.995083][ T5424] usb 5-1: config 0 has no interface number 0
[  197.997254][ T5424] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  198.000739][ T5424] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  198.006894][ T5424] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  198.011239][ T5424] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  198.016365][ T5424] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  198.019787][ T5424] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.024994][ T5424] usb 5-1: config 0 descriptor??
[  198.037292][ T5424] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  198.422680][   T32] usb 5-1: USB disconnect, device number 5
[  198.422702][    C0] ldusb 5-1:0.55: usb_submit_urb failed (-19)
[  198.494103][   T32] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  198.494122][ T9261] ldusb: No device or device unplugged -19
[  198.560098][ T9295] overlayfs: failed to clone upperpath
[  199.369742][ T9323] loop9: detected capacity change from 0 to 524287936
[  199.561629][ T9333] loop3: detected capacity change from 0 to 512
[  199.576968][ T9333] EXT4-fs: Ignoring removed orlov option
[  199.586990][ T9333] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  199.615554][ T9333] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #16: comm syz.3.1478: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0)
[  199.622114][ T9333] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  199.622822][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  199.628692][    C1] EXT4-fs (loop3): initial error at time 1778443735: ext4_ext_check_inode:521: inode 16
[  199.632295][    C1] EXT4-fs (loop3): last error at time 1778443735: ext4_ext_check_inode:521: inode 16
[  199.633052][ T9333] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1478: couldn't read orphan inode 16 (err -117)
[  199.640349][ T9333] loop3: lost filesystem error report for type 5 error -117
[  199.657244][ T9333] EXT4-fs (loop3): 1 orphan inode deleted
[  199.670730][ T9333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.722546][ T5927] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.758804][ T1377] ieee802154 phy0 wpan0: encryption failed: -22
[  199.762268][ T1377] ieee802154 phy1 wpan1: encryption failed: -22
[  200.126541][ T9355] loop4: detected capacity change from 0 to 512
[  200.170896][ T9355] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.194285][ T9355] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  200.208938][ T9355] fs-verity (loop4, inode 15): Unrecognized descriptor size: 0 bytes
[  200.240965][ T7688] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.756902][ T9364] loop4: detected capacity change from 0 to 4096
[  200.836325][   T33] audit: type=1800 audit(1778443736.661:86): pid=9364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1491" name="file1" dev="loop4" ino=0 res=0 errno=0
[  201.091892][ T9374] Driver unsupported XDP return value 0 on prog  (id 73) dev N/A, expect packet loss!
[  201.208723][ T9385] loop3: detected capacity change from 0 to 1024
[  201.212145][ T9385] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  201.218647][ T9385] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  201.221293][ T9385] EXT4-fs (loop3): orphan cleanup on readonly fs
[  201.228493][ T9385] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz.3.1501: Invalid inode table block 0 in block_group 0
[  201.239085][ T9385] loop3: lost filesystem error report for type 5 error -117
[  201.244676][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  201.249834][    C0] EXT4-fs (loop3): initial error at time 1778443737: __ext4_get_inode_loc:4885
[  201.252511][    C0] EXT4-fs (loop3): last error at time 1778443737: __ext4_get_inode_loc:4885
[  201.260599][ T9385] EXT4-fs (loop3): Remounting filesystem read-only
[  201.269852][ T9385] Quota error (device loop3): write_blk: dquota write failed
[  201.273137][ T9385] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  201.276975][ T9385] EXT4-fs (loop3): 1 truncate cleaned up
[  201.284802][ T9385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  201.309340][ T5927] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.599079][ T9399] loop3: detected capacity change from 0 to 512
[  201.619036][ T9399] EXT4-fs error (device loop3): ext4_quota_enable:7225: inode #3: comm syz.3.1506: iget: checksum invalid
[  201.624782][ T9399] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -74
[  201.625195][ T9399] EXT4-fs error (device loop3): ext4_quota_enable:7228: comm syz.3.1506: Bad quota inode: 3, type: 0
[  201.632802][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  201.634861][    C1] EXT4-fs (loop3): initial error at time 1778443737: ext4_quota_enable:7225: inode 3
[  201.637658][    C1] EXT4-fs (loop3): last error at time 1778443737: ext4_quota_enable:7225: inode 3
[  201.673558][ T9399] loop3: lost filesystem error report for type 5 error -117
[  201.697152][ T9399] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-74, ino=3). Please run e2fsck to fix.
[  201.826299][ T5732] Bluetooth: hci2: command 0x0406 tx timeout
[  201.863219][ T9399] EXT4-fs (loop3): mount failed
[  202.199705][ T9417] loop3: detected capacity change from 0 to 4096
[  202.220378][ T9417] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  202.647573][ T9442] netlink: 'syz.3.1527': attribute type 15 has an invalid length.
[  202.801395][ T9451] loop3: detected capacity change from 0 to 128
[  202.866309][   T33] audit: type=1800 audit(1778443738.692:87): pid=9451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1531" name="file1" dev="loop3" ino=1048643 res=0 errno=0
[  202.875453][ T9451] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  202.882468][ T9451] FAT-fs (loop3): Filesystem has been set read-only
[  203.152536][   T54] Bluetooth: hci2: unexpected cc 0x0c7b length: 1 < 5
[  203.159512][   T54] Bluetooth: hci2: unexpected event for opcode 0x0c7b
[  203.219697][ T9468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1538'.
[  203.431586][ T9474] netlink: 'syz.2.1540': attribute type 3 has an invalid length.
[  203.602993][ T9476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1541'.
[  205.012108][ T9498] overlayfs: failed to clone upperpath
[  205.247773][ T9503] loop4: detected capacity change from 0 to 1024
[  205.289891][ T9503] hfsplus: invalid file type 0174377 for inode 21
[  205.370853][ T9508] loop4: detected capacity change from 0 to 128
[  205.418998][ T9508] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  205.425745][ T9508] ext4 filesystem being mounted at /197/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  205.469050][ T7688] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  205.771081][ T9524] netlink: 'syz.2.1562': attribute type 1 has an invalid length.
[  205.798167][ T9524] 8021q: adding VLAN 0 to HW filter on device bond2
[  205.853645][ T9524] bond2: (slave geneve3): making interface the new active one
[  205.859524][ T9524] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  206.784104][ T5424] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  206.942719][ T5424] usb 4-1: Using ep0 maxpacket: 32
[  206.952355][ T5424] usb 4-1: config 0 has no interfaces?
[  206.956181][ T5424] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  206.956200][ T5424] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.956210][ T5424] usb 4-1: Product: syz
[  206.956217][ T5424] usb 4-1: Manufacturer: syz
[  206.956249][ T5424] usb 4-1: SerialNumber: syz
[  206.958126][ T5424] usb 4-1: config 0 descriptor??
[  207.058358][ T9565] loop4: detected capacity change from 0 to 1024
[  207.076386][ T9565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.188916][   T54] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  207.193053][   T54] Bluetooth: hci2: Injecting HCI hardware error event
[  207.206567][   T54] Bluetooth: hci2: hardware error 0x00
[  207.366832][ T9548] tipc: Subscription rejected, illegal request
[  207.396403][   T10] usb 4-1: USB disconnect, device number 17
[  208.174186][ T9588] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1587'.
[  208.376467][ T7688] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.648119][ T9606] loop3: detected capacity change from 0 to 128
[  208.667035][ T9606] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  208.672171][ T9606] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  208.842623][   T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  208.992608][   T10] usb 5-1: Using ep0 maxpacket: 32
[  208.997805][   T10] usb 5-1: too many configurations: 17, using maximum allowed: 8
[  209.003520][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  209.009075][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  209.343068][   T54] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  209.732914][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  209.841819][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  209.847264][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  209.856497][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  209.862207][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  209.867406][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  209.875471][   T10] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  209.880987][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.885055][   T10] usb 5-1: Product: syz
[  209.886318][   T10] usb 5-1: Manufacturer: syz
[  209.892527][   T10] usb 5-1: SerialNumber: syz
[  209.902889][   T10] usb 5-1: config 0 descriptor??
[  209.907999][   T10] etas_es58x 5-1:0.0: Starting syz syz (Serial Number syz)
[  209.922325][ T9634] loop3: detected capacity change from 0 to 512
[  209.952275][ T9634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.956047][ T9634] ext4 filesystem being mounted at /442/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  210.068819][ T5927] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.223179][  T922] usb 5-1: USB disconnect, device number 6
[  211.246557][ T9654] loop4: detected capacity change from 0 to 512
[  211.323016][ T9654] EXT4-fs (loop4): orphan cleanup on readonly fs
[  211.348359][ T9654] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  211.444145][ T9654] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1615: invalid indirect mapped block 2683928664 (level 1)
[  211.512910][ T9654] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  211.522439][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  211.528259][    C0] EXT4-fs (loop4): initial error at time 1778443747: ext4_free_branches:1023: inode 13
[  211.531782][    C0] EXT4-fs (loop4): last error at time 1778443747: ext4_free_branches:1023: inode 13
[  211.558555][ T9654] EXT4-fs (loop4): Remounting filesystem read-only
[  211.577080][ T9654] EXT4-fs (loop4): 1 truncate cleaned up
[  211.590484][ T9654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  211.707826][ T9663] Invalid option length (0) for dns_resolver key
[  211.726386][ T7688] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.883240][ T9669] loop4: detected capacity change from 0 to 256
[  211.912132][ T9669] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[  212.020938][ T9678] sctp: [Deprecated]: syz.2.1624 (pid 9678) Use of struct sctp_assoc_value in delayed_ack socket option.
[  212.020938][ T9678] Use struct sctp_sack_info instead
[  212.078700][ T9680] loop4: detected capacity change from 0 to 128
[  212.592675][   T32] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  212.622547][ T9698] loop3: detected capacity change from 0 to 8
[  212.625833][ T9698] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  212.661354][ T9698] cramfs: Error -5 while decompressing!
[  212.668967][ T9698] cramfs: ffffffff9a57d3e8(26)->ffff8881a3128000(4096)
[  212.673398][ T9698] cramfs: Error -3 while decompressing!
[  212.675447][ T9698] cramfs: ffffffff9a57d402(26)->ffff8881a316c000(4096)
[  212.678004][ T9698] cramfs: Error -3 while decompressing!
[  212.679654][ T9698] cramfs: ffffffff9a57d41c(16)->ffff8881a3161000(4096)
[  212.681929][ T9698] cramfs: Error -5 while decompressing!
[  212.686838][ T9698] cramfs: ffffffff9a57d3e8(26)->ffff8881a3128000(4096)
[  212.756853][   T32] usb 5-1: unable to get BOS descriptor or descriptor too short
[  212.761572][   T32] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  212.768148][   T32] usb 5-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.40
[  212.771935][   T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.776117][   T32] usb 5-1: Product: syz
[  212.777837][   T32] usb 5-1: Manufacturer: syz
[  212.779586][   T32] usb 5-1: SerialNumber: syz
[  212.999810][   T32] usbhid 5-1:1.0: couldn't find an input interrupt endpoint
[  213.002949][ T5835] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  213.010849][   T32] usb 5-1: USB disconnect, device number 7
[  213.186717][ T5835] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  213.199167][ T5835] usb 4-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[  213.202945][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.205948][ T5835] usb 4-1: Product: syz
[  213.207608][ T5835] usb 4-1: Manufacturer: syz
[  213.209347][ T5835] usb 4-1: SerialNumber: syz
[  213.214068][ T5835] usb 4-1: config 0 descriptor??
[  213.229464][ T9711] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1640'.
[  213.328968][ T9715] xt_ipcomp: unknown flags 1D
[  213.425278][ T5835] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state.
[  213.440510][ T5835] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  213.444670][ T5835] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  213.448496][ T5835] usb 4-1: media controller created
[  213.454100][ T5835] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  213.498724][ T5835] DVB: Unable to find symbol dib7000p_attach()
[  213.501177][ T5835] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  213.504653][ T5835] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  213.508573][ T5835] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  213.518150][ T5835] usb 4-1: media controller created
[  213.536308][ T5835] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  213.572138][ T5835] dib0700: the master dib7090 has to be initialized first
[  213.585824][ T5835] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  213.675937][ T5835] rc_core: IR keymap rc-dib0700-rc5 not found
[  213.678424][ T5835] Registered IR keymap rc-empty
[  213.684747][ T5835] dvb-usb: could not initialize remote control.
[  213.692392][ T5835] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected.
[  213.730819][ T9731] netlink: 'syz.2.1649': attribute type 15 has an invalid length.
[  213.744103][ T9731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1649'.
[  213.949716][ T5835] usb 4-1: USB disconnect, device number 18
[  214.012089][ T5835] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected.
[  214.072466][ T9749] loop4: detected capacity change from 0 to 128
[  214.081404][ T9749] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  214.109093][ T9749] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8)
[  214.112110][ T9749] FAT-fs (loop4): Filesystem has been set read-only
[  214.115919][ T9749] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522)
[  215.194001][ T9774] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1667'.
[  215.305495][ T9780] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.1670'.
[  215.486949][ T9791] tipc: Started in network mode
[  215.488710][ T9791] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  215.493064][ T9791] tipc: Enabled bearer <eth:ipvlan0>, priority 31
[  216.539082][ T5835] tipc: Node number set to 10136234
[  217.563614][ T9852] netlink: 4108 bytes leftover after parsing attributes in process `syz.3.1704'.
[  217.730445][ T9864] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1709'.
[  217.793970][ T9864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  217.809225][ T9864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  217.825902][ T9864] bond0 (unregistering): Released all slaves
[  218.131454][ T9891] loop3: detected capacity change from 0 to 256
[  218.634367][ T9905] netlink: 'syz.4.1728': attribute type 4 has an invalid length.
[  218.713764][ T9907] netlink: 'syz.4.1728': attribute type 4 has an invalid length.
[  219.919933][ T9925] loop3: detected capacity change from 0 to 32768
[  220.121410][ T9933] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000'
[  220.216795][ T9936] overlayfs: failed to resolve '/00000000000000000000': -2
[  220.379170][ T9936] netlink: 'syz.4.1739': attribute type 10 has an invalid length.
[  220.464983][ T9936] 8021q: adding VLAN 0 to HW filter on device team0
[  220.574849][ T9936] bond0: (slave team0): Enslaving as an active interface with an up link
[  221.092569][ T5784] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  221.285052][ T5784] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  221.288845][ T5784] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  221.294780][ T5784] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[  221.301083][ T5784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.324971][ T5784] usb 4-1: config 0 descriptor??
[  221.556118][ T5784] ath6kl: Failed to submit usb control message: -71
[  221.574518][ T5784] ath6kl: unable to send the bmi data to the device: -71
[  221.577142][ T5784] ath6kl: Unable to send get target info: -71
[  221.580628][ T5784] ath6kl: Failed to init ath6kl core: -71
[  221.583577][ T5784] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[  221.591711][ T5784] usb 4-1: USB disconnect, device number 19
[  221.908360][ T9974] loop4: detected capacity change from 0 to 128
[  222.444344][ T9984] loop3: detected capacity change from 0 to 32768
[  222.451535][ T9984] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1762 (9984)
[  222.490767][ T9984] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  222.494957][ T9984] BTRFS info (device loop3): using sha256 checksum algorithm
[  222.512516][ T9112] BTRFS warning (device loop3): checksum verify failed on logical 5328896 mirror 1 wanted 0x899d431ca0f4d422df9fdf55c401a251eb5273badba587053c40c4f8d72f4d8d found 0x9c99a657473dbfe6a94feb371346ad3db5fb72db9e9555af0095f5cada81ee62 level 0
[  222.527837][ T9984] BTRFS warning (device loop3): failed to read root (objectid=4): -5
[  222.572921][ T9984] BTRFS error (device loop3): open_ctree failed: -5
[  223.211327][T10023] loop3: detected capacity change from 0 to 512
[  224.335210][T10044] batadv_slave_0: entered promiscuous mode
[  224.358510][T10044] macvlan2: entered promiscuous mode
[  224.361384][T10044] batadv_slave_0: left promiscuous mode
[  224.748227][T10068] loop4: detected capacity change from 0 to 1024
[  224.758320][T10068] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  224.783522][T10068] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.1795: lblock 2 mapped to illegal pblock 2 (length 1)
[  224.787929][T10068] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  224.788521][T10068] Quota error (device loop4): qtree_write_dquot: dquota write failed
[  224.794131][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  224.794146][    C0] EXT4-fs (loop4): initial error at time 1778443760: ext4_map_blocks:791: inode 3: block 2
[  224.794164][    C0] EXT4-fs (loop4): last error at time 1778443760: ext4_map_blocks:791: inode 3: block 2
[  224.803262][T10068] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 48: comm syz.4.1795: lblock 0 mapped to illegal pblock 48 (length 1)
[  224.809014][T10068] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  224.809222][T10068] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  224.819511][T10068] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.1795: Failed to acquire dquot type 0
[  224.824768][T10068] loop4: lost filesystem error report for type 5 error -117
[  224.825359][T10068] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem
[  224.836185][T10068] loop4: lost filesystem error report for type 5 error -117
[  224.836522][T10068] EXT4-fs error (device loop4): ext4_evict_inode:267: inode #11: comm syz.4.1795: mark_inode_dirty error
[  224.852188][T10068] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  224.852489][T10068] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -117)
[  224.858512][T10068] EXT4-fs (loop4): 1 orphan inode deleted
[  224.861351][T10068] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.872329][ T5882] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u9:4: lblock 1 mapped to illegal pblock 1 (length 1)
[  224.895214][ T5882] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  224.908078][ T5882] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u9:4: Failed to release dquot type 0
[  224.946646][ T7688] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.982128][ T6245] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u9:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  224.995153][ T6245] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  224.995419][ T6245] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  225.001441][ T6245] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u9:5: Failed to release dquot type 0
[  225.004828][ T6245] loop4: lost filesystem error report for type 5 error -117
[  225.011298][ T7688] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0
[  225.022407][ T7688] loop4: lost filesystem error report for type 5 error -117
[  225.027758][ T7688] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem
[  225.033615][ T7688] loop4: lost filesystem error report for type 5 error -117
[  225.034036][ T7688] EXT4-fs error (device loop4): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error
[  225.039526][ T7688] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  225.791259][T10123] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1821'.
[  226.002146][ T5784] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  226.152145][ T5784] usb 5-1: Using ep0 maxpacket: 32
[  226.157531][ T5784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[  226.162388][ T5784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  226.168142][ T5784] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99
[  226.172495][ T5784] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  226.175704][ T5784] usb 5-1: Product: syz
[  226.177450][ T5784] usb 5-1: SerialNumber: syz
[  226.184127][ T5784] usb 5-1: config 0 descriptor??
[  226.397546][ T5424] usb 5-1: USB disconnect, device number 8
[  226.630691][   T33] audit: type=1326 audit(1778443762.452:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.2.1832" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dad9cdd9 code=0x7ffc0000
[  226.640757][   T33] audit: type=1326 audit(1778443762.452:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.2.1832" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dad9cdd9 code=0x7ffc0000
[  226.649887][   T33] audit: type=1326 audit(1778443762.462:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.2.1832" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dad9cdd9 code=0x7ffc0000
[  226.658007][   T33] audit: type=1326 audit(1778443762.462:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.2.1832" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dad9cdd9 code=0x7ffc0000
[  226.666914][   T33] audit: type=1326 audit(1778443762.462:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.2.1832" exe="/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f94dad9cdd9 code=0x7ffc0000
[  226.675788][   T33] audit: type=1326 audit(1778443762.462:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.2.1832" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dad9cdd9 code=0x7ffc0000
[  228.170174][T10182] netlink: 'syz.2.1846': attribute type 1 has an invalid length.
[  228.195314][T10182] 8021q: adding VLAN 0 to HW filter on device bond3
[  228.227411][T10182] bond3: (slave geneve4): making interface the new active one
[  228.233037][T10182] bond3: (slave geneve4): Enslaving as an active interface with an up link
[  228.394544][T10183] loop4: detected capacity change from 0 to 32768
[  228.406371][T10183] JBD2: Ignoring recovery information on journal
[  228.413087][T10183] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75
[  228.423563][T10183] JBD2: bad block at offset 32
[  228.434179][T10183] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  228.500388][ T7688] ocfs2: Unmounting device (7,4) on (node local)
[  230.179844][T10238] loop4: detected capacity change from 0 to 128
[  230.184278][T10238] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  230.189421][T10238] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  230.230516][T10240] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma?
[  230.285791][T10244] loop4: detected capacity change from 0 to 8
[  230.549164][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1878'.
[  230.561859][T10254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1878'.
[  230.564613][T10254] netlink: 'syz.4.1878': attribute type 14 has an invalid length.
[  230.847706][T10262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1881'.
[  231.017652][T10272] netlink: 'syz.2.1887': attribute type 1 has an invalid length.
[  231.042827][T10272] bond4: entered promiscuous mode
[  231.045334][T10272] 8021q: adding VLAN 0 to HW filter on device bond4
[  231.102860][T10272] bond4: (slave bridge1): making interface the new active one
[  231.105823][T10272] bridge1: entered promiscuous mode
[  231.109255][T10272] bond4: (slave bridge1): Enslaving as an active interface with an up link
[  231.282927][T10284] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.1892'.
[  231.340188][T10287] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1894'.
[  232.099577][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1908'.
[  232.511875][   T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  232.685987][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e
[  232.690394][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.704380][   T10] pwc: Logitech/Cisco VT Camera webcam detected.
[  235.299684][   T10] pwc: send_video_command error -71
[  235.304084][   T10] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  235.326670][   T10] Philips webcam 5-1:127.0: probe with driver Philips webcam failed with error -71
[  235.338662][   T10] usb 5-1: USB disconnect, device number 9
[  235.446858][T10355] usb usb8: selecting invalid altsetting 56942
[  235.507309][T10361] vcan0: tx drop: invalid da for name 0xfffffffffffffffd
[  235.568500][T10365] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1926'.
[  236.012557][T10393] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1941'.
[  236.016325][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1941'.
[  236.035561][T10395] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  236.483995][T10407] binder: 10406:10407 ioctl c0306201 2000000003c0 returned -14
[  236.487385][T10407] binder: 10406:10407 ioctl c0306201 2000000003c0 returned -14
[  236.537691][T10409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1948'.
[  236.871272][T10431] tipc: Failed to remove unknown binding: 66,0,0/0:3136043406/3136043408
[  236.877888][T10431] tipc: Failed to remove unknown binding: 66,0,0/0:3136043406/3136043407
[  236.882933][T10431] tipc: Failed to remove unknown binding: 66,0,0/0:3136043406/3136043408
[  236.886549][T10431] tipc: Failed to remove unknown binding: 66,0,0/0:3136043406/3136043407
[  237.703122][T10452] sock: sock_set_timeout: `syz.2.1964' (pid 10452) tries to set negative timeout
[  237.788312][T10456] netlink: 'syz.2.1966': attribute type 3 has an invalid length.
[  238.860021][ T5732] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  238.875816][ T5732] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  238.882700][ T5732] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  238.886041][ T5732] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  238.894827][ T5732] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  239.126633][T10486] loop4: detected capacity change from 0 to 512
[  239.167816][T10486] EXT4-fs (loop4): Test dummy encryption mode enabled
[  239.177852][T10486] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  239.205638][T10486] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.1977: bad orphan inode 131083
[  239.216582][T10486] loop4: lost filesystem error report for type 5 error -117
[  239.218484][T10486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  239.329839][ T9547] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.331153][T10486] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))"
[  239.458020][ T7688] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.486632][ T9547] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.660329][ T9547] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.667674][T10521] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1988'.
[  239.748063][T10528] loop4: detected capacity change from 0 to 16
[  239.766931][T10528] erofs (device loop4): mounted with root inode @ nid 36.
[  239.819974][ T9547] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.580473][T10473] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.583687][T10473] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.586410][T10473] bridge_slave_0: entered allmulticast mode
[  240.589140][T10473] bridge_slave_0: entered promiscuous mode
[  240.605887][T10473] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.610256][T10473] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.616422][T10473] bridge_slave_1: entered allmulticast mode
[  240.621982][T10473] bridge_slave_1: entered promiscuous mode
[  240.727196][ T9547] bridge_slave_1: left allmulticast mode
[  240.730065][ T9547] bridge_slave_1: left promiscuous mode
[  240.735204][ T9547] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.746801][ T9547] bridge_slave_0: left allmulticast mode
[  240.755427][ T9547] bridge_slave_0: left promiscuous mode
[  240.757826][ T9547] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.943175][   T54] Bluetooth: hci3: command tx timeout
[  241.127262][ T9547] bond2 (unregistering): (slave gretap1): Releasing active interface
[  241.206701][ T9547] bond1 (unregistering): Released all slaves
[  241.223192][ T9547] bond2 (unregistering): Released all slaves
[  241.252754][T10473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  241.258907][ T5353] 8021q: adding VLAN 0 to HW filter on device eth5
[  241.268338][T10473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  241.309466][T10473] team0: Port device team_slave_0 added
[  241.319549][T10473] team0: Port device team_slave_1 added
[  241.389868][ T9547] tipc: Disabling bearer <eth:ipvlan0>
[  241.398267][ T9547] tipc: Left network mode
[  241.398705][T10473] batman_adv: batadv0: Adding interface: batadv_slave_0
[  241.431573][T10473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  241.441218][T10473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  241.448937][T10473] batman_adv: batadv0: Adding interface: batadv_slave_1
[  241.451561][T10580] overlayfs: upper fs does not support file handles, falling back to index=off.
[  241.463112][T10473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  241.485164][T10473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  241.606843][ T5353] 8021q: adding VLAN 0 to HW filter on device eth6
[  241.666548][T10473] hsr_slave_0: entered promiscuous mode
[  241.673437][T10473] hsr_slave_1: entered promiscuous mode
[  241.679800][T10473] debugfs: 'hsr0' already exists in 'hsr'
[  241.687530][T10473] Cannot create hsr debugfs directory
[  241.868518][ T9547] hsr_slave_0: left promiscuous mode
[  241.870987][ T9547] hsr_slave_1: left promiscuous mode
[  241.876461][ T9547] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  241.879274][ T9547] batman_adv: batadv0: Removing interface: batadv_slave_0
[  241.885465][ T9547] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  241.893887][ T9547] batman_adv: batadv0: Removing interface: batadv_slave_1
[  241.914833][ T9547] veth1_vlan: left promiscuous mode
[  241.916506][ T9547] veth0_vlan: left promiscuous mode
[  242.098632][ T9547] team0 (unregistering): Port device team_slave_1 removed
[  242.115614][ T9547] team0 (unregistering): Port device team_slave_0 removed
[  242.221155][ T5353] 8021q: adding VLAN 0 to HW filter on device eth7
[  242.753274][ T5353] 8021q: adding VLAN 0 to HW filter on device eth8
[  242.972615][T10473] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  242.980325][T10473] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  242.986273][T10473] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  242.993532][T10473] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  242.997957][T10473] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  243.013726][T10473] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  243.017431][T10473] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  243.022241][   T54] Bluetooth: hci3: command tx timeout
[  243.035248][T10473] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  243.056340][ T9547] IPVS: stop unused estimator thread 0...
[  243.283407][T10473] 8021q: adding VLAN 0 to HW filter on device bond0
[  243.310651][T10473] 8021q: adding VLAN 0 to HW filter on device team0
[  243.337066][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.339881][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state
[  243.365091][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.367887][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state
[  243.840082][T10473] 8021q: adding VLAN 0 to HW filter on device batadv0
[  244.043412][T10668] xt_HMARK: spi-set and port-set can't be combined
[  244.133406][  T922] libceph: connect (1)[c::]:6789 error -101
[  244.149973][  T922] libceph: mon0 (1)[c::]:6789 connect error
[  244.155598][T10473] veth0_vlan: entered promiscuous mode
[  244.166809][T10473] veth1_vlan: entered promiscuous mode
[  244.207791][T10473] veth0_macvtap: entered promiscuous mode
[  244.221963][T10473] veth1_macvtap: entered promiscuous mode
[  244.228086][T10672] ceph: No mds server is up or the cluster is laggy
[  244.263942][T10473] batman_adv: batadv0: Interface activated: batadv_slave_0
[  244.292736][T10473] batman_adv: batadv0: Interface activated: batadv_slave_1
[  244.336186][ T9547] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  244.345301][ T9547] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  244.353832][ T9547] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  244.372002][ T9547] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  244.646443][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.660170][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.740979][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.746143][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.033045][T10708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2043'.
[  245.086273][T10710] syzkaller1: entered promiscuous mode
[  245.088551][T10710] syzkaller1: entered allmulticast mode
[  245.102075][   T54] Bluetooth: hci3: command tx timeout
[  246.648167][T10747] IPv6: Can't replace route, no match found
[  246.803625][T10756] loop5: detected capacity change from 0 to 1024
[  247.198649][   T54] Bluetooth: hci3: command tx timeout
[  247.286993][   T32] IPVS: starting estimator thread 0...
[  247.385168][T10760] IPVS: using max 53 ests per chain, 127200 per kthread
[  248.902273][ T5731] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  249.306930][ T5731] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  249.312942][ T5731] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  249.317269][ T5731] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  249.324110][ T5731] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.14
[  249.327966][ T5731] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.331545][ T5731] usb 6-1: Product: syz
[  249.333825][ T5731] usb 6-1: Manufacturer: syz
[  249.335552][ T5731] usb 6-1: SerialNumber: syz
[  249.346428][ T5731] usb 6-1: config 0 descriptor??
[  249.351600][T10792] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  249.354524][T10792] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  249.397306][T10811] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2084'.
[  249.565743][ T5731] dm9601 6-1:0.0: probe with driver dm9601 failed with error -71
[  249.581679][ T5731] usb 6-1: USB disconnect, device number 2
[  250.315083][T10851] overlayfs: failed to clone upperpath
[  250.749411][T10857] netlink: 'syz.5.2104': attribute type 21 has an invalid length.
[  250.753364][T10857] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2104'.
[  250.757702][T10857] netlink: 'syz.5.2104': attribute type 5 has an invalid length.
[  250.760153][T10857] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2104'.
[  250.990869][T10868] loop5: detected capacity change from 0 to 512
[  251.010228][T10868] EXT4-fs: Ignoring removed oldalloc option
[  251.039569][T10868] EXT4-fs (loop5): 1 truncate cleaned up
[  251.044120][T10868] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  251.205321][T10884] overlayfs: missing 'lowerdir'
[  251.248194][T10881] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  251.250807][T10881] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  251.304974][T10881] vhci_hcd vhci_hcd.0: Device attached
[  251.385812][T10881] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0)
[  251.572288][ T5784] usb 43-1: new low-speed USB device number 2 using vhci_hcd
[  252.007637][T10883] vhci_hcd: connection reset by peer
[  252.022273][ T9547] vhci_hcd vhci_hcd.5: stop threads
[  252.025321][ T9547] vhci_hcd vhci_hcd.5: release socket
[  252.032768][ T9547] vhci_hcd vhci_hcd.5: disconnect device
[  252.360850][T10909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2126'.
[  252.379726][ T9547] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  252.385939][ T9547] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  252.389500][T10909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2126'.
[  252.401333][ T9547] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  252.406431][ T9547] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  252.558279][T10473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.640688][T10920] m1Ie5n: entered promiscuous mode
[  253.506234][T10942] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  253.542499][T10942] Error validating options; rc = [-22]
[  253.904409][T10962] loop5: detected capacity change from 0 to 2048
[  253.909553][T10962] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  255.983855][T11021] 9pnet: p9_errstr2errno: server reported unknown error 0x000000
[  256.109106][T11030] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2167'.
[  256.565791][T11040] sg_read: process 94 (syz.5.2172) changed security contexts after opening file descriptor, this is not allowed.
[  256.653549][T11053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2177'.
[  256.693291][ T5784] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  257.612486][   T33] kauditd_printk_skb: 3 callbacks suppressed
[  257.612497][   T33] audit: type=1326 audit(1778443793.443:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11086 comm="syz.2.2193" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94dad9cdd9 code=0x0
[  257.746932][T11092] openvswitch: netlink: IP tunnel dst address not specified
[  257.799118][T11096] netlink: 'syz.4.2197': attribute type 1 has an invalid length.
[  257.829299][T11098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2198'.
[  258.127434][T11108] loop4: detected capacity change from 0 to 164
[  258.369970][T11117] loop5: detected capacity change from 0 to 512
[  258.374973][T11117] EXT4-fs: Ignoring removed bh option
[  258.379992][T11117] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  258.386038][T11117] EXT4-fs (loop5): 1 truncate cleaned up
[  258.396003][T11117] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  258.413547][T11117] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2205: bg 0: block 465: padding at end of block bitmap is not set
[  258.423485][T11117] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28
[  258.428426][T11117] EXT4-fs (loop5): This should not happen!! Data will be lost
[  258.428426][T11117] 
[  258.432371][T11117] EXT4-fs (loop5): Total free blocks count 0
[  258.434265][T11117] EXT4-fs (loop5): Free/Dirty block details
[  258.436148][T11117] EXT4-fs (loop5): free_blocks=0
[  258.437707][T11117] EXT4-fs (loop5): dirty_blocks=2
[  258.439223][T11117] EXT4-fs (loop5): Block reservation details
[  258.441210][T11117] EXT4-fs (loop5): i_reserved_data_blocks=2
[  258.465486][ T5882] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  258.473553][T10473] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  258.640650][T11133] loop5: detected capacity change from 0 to 256
[  258.913779][T11146] loop5: detected capacity change from 0 to 256
[  258.968692][T11148] fuse: fd is not a fuse device
[  259.097878][   T54] Bluetooth: hci1: unexpected event for opcode 0x2031
[  259.225724][T11161] loop5: detected capacity change from 0 to 1024
[  259.369192][T11163] netlink: 'syz.5.2224': attribute type 1 has an invalid length.
[  259.387232][T11158] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  259.441845][T11158] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  259.860100][T11158] bond4: left promiscuous mode
[  259.866208][T11158] bridge1: left promiscuous mode
[  259.891260][ T5763] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  259.904607][ T5763] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.915459][ T5763] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  259.929574][ T5763] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  259.938797][ T5763] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.954454][ T5763] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  259.959069][T11174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2229'.
[  259.965112][ T5763] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  259.973814][ T5763] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.978360][ T5763] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  259.990941][ T5763] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  259.993912][ T5763] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.997114][ T5763] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  260.045857][T11178] fuse: Unknown parameter 'grout_idmHHf'
[  260.155765][T11184] fuse: Unknown parameter 'r'
[  261.067021][T11207] loop4: detected capacity change from 0 to 32768
[  261.078346][T11207] JBD2: Ignoring recovery information on journal
[  261.134459][T11207] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  261.187207][ T1377] ieee802154 phy0 wpan0: encryption failed: -22
[  261.189695][ T1377] ieee802154 phy1 wpan1: encryption failed: -22
[  261.252155][T11218] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2248'.
[  261.292970][ T7688] ocfs2: Unmounting device (7,4) on (node local)
[  261.433426][T11222] loop4: detected capacity change from 0 to 2048
[  261.479138][T11222]  loop4: p1 < > p4
[  261.484459][T11222] loop4: p4 start 42180 is beyond EOD, truncated
[  261.611987][ T7052] udevd[7052]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  261.642156][T11224] loop4: detected capacity change from 0 to 2048
[  261.659552][T11224] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  261.688909][T11224] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  261.714815][ T7688] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.808693][T11230] loop4: detected capacity change from 0 to 512
[  261.828568][T11230] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  261.843150][T11230] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  261.855596][T11230] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended
[  261.859289][T11230] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2252: inode #15: comm syz.4.2252: iget: illegal inode #
[  261.863592][T11230] loop4: lost filesystem error report for type 5 error -117
[  261.866295][T11230] EXT4-fs (loop4): Remounting filesystem read-only
[  261.874723][T11230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  261.908903][ T7688] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.427471][   T32] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  262.448201][   T33] audit: type=1326 audit(1778443798.273:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11242 comm="syz.5.2257" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07e99cdd9 code=0x7ffc0000
[  262.522202][   T33] audit: type=1326 audit(1778443798.283:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11242 comm="syz.5.2257" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07e99cdd9 code=0x7ffc0000
[  262.548654][   T33] audit: type=1326 audit(1778443798.283:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11242 comm="syz.5.2257" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07e99cdd9 code=0x7ffc0000
[  262.587336][   T33] audit: type=1326 audit(1778443798.283:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11242 comm="syz.5.2257" exe="/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fc07e99cdd9 code=0x7ffc0000
[  262.609979][   T33] audit: type=1326 audit(1778443798.283:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11242 comm="syz.5.2257" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07e99cdd9 code=0x7ffc0000
[  262.621983][   T32] usb 5-1: Using ep0 maxpacket: 32
[  262.627457][   T32] usb 5-1: unable to get BOS descriptor or descriptor too short
[  262.629041][   T33] audit: type=1326 audit(1778443798.283:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11242 comm="syz.5.2257" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07e99cdd9 code=0x7ffc0000
[  262.632987][   T32] usb 5-1: config 229 has an invalid interface number: 237 but max is 0
[  262.646644][   T32] usb 5-1: config 229 has no interface number 0
[  262.649100][   T33] audit: type=1326 audit(1778443798.283:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11242 comm="syz.5.2257" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07e99cdd9 code=0x7ffc0000
[  262.653419][   T32] usb 5-1: config 229 interface 237 has no altsetting 0
[  262.667843][   T33] audit: type=1326 audit(1778443798.283:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11242 comm="syz.5.2257" exe="/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc07e99cdd9 code=0x7ffc0000
[  262.678204][   T32] usb 5-1: New USB device found, idVendor=1de1, idProduct=f105, bcdDevice=59.12
[  262.681536][   T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.684666][   T32] usb 5-1: Product: syz
[  262.687635][   T32] usb 5-1: Manufacturer: syz
[  262.690646][   T32] usb 5-1: SerialNumber: syz
[  262.698371][   T33] audit: type=1326 audit(1778443798.283:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11242 comm="syz.5.2257" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07e99cdd9 code=0x7ffc0000
[  262.728202][   T33] audit: type=1326 audit(1778443798.283:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11242 comm="syz.5.2257" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07e99cdd9 code=0x7ffc0000
[  262.745456][   T33] audit: type=1326 audit(1778443798.283:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11242 comm="syz.5.2257" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc07e99cdd9 code=0x7ffc0000
[  262.769288][   T33] audit: type=1326 audit(1778443798.283:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11242 comm="syz.5.2257" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc07e99cdd9 code=0x7ffc0000
[  262.921203][   T32] uvcvideo 5-1:229.237: Found UVC 0.00 device syz (1de1:f105)
[  262.923841][   T32] uvcvideo 5-1:229.237: No valid video chain found.
[  262.933747][   T32] usb 5-1: USB disconnect, device number 10
[  262.938808][T11259] loop5: detected capacity change from 0 to 128
[  263.101614][   T54] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  263.110808][   T54] Bluetooth: hci1: Injecting HCI hardware error event
[  263.115183][   T54] Bluetooth: hci1: hardware error 0x00
[  263.312267][T11269] tmpfs: Unknown parameter 'fsuuid'
[  263.368984][T11271] geneve2: entered promiscuous mode
[  263.374264][T11271] geneve2: entered allmulticast mode
[  263.542001][T11283] loop4: detected capacity change from 0 to 128
[  263.558968][T11283] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[  263.700931][ T7779] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  263.972906][ T7779] usb 6-1: Using ep0 maxpacket: 8
[  264.005382][ T7779] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  264.039860][ T7779] usb 6-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c
[  264.052365][ T7779] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.060429][ T7779] usb 6-1: Product: syz
[  264.073234][ T7779] usb 6-1: Manufacturer: syz
[  264.091564][ T7779] usb 6-1: SerialNumber: syz
[  264.114159][ T7779] usb 6-1: config 0 descriptor??
[  264.122515][ T7779] cdc_ether 6-1:0.0: skipping garbage
[  264.127041][ T7779] cdc_ether 6-1:0.0: bad CDC descriptors
[  264.131624][ T7779] usb 6-1: unsupported MDLM descriptors
[  264.134545][ T7779] cdc_acm 6-1:0.0: skipping garbage
[  264.172666][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2281'.
[  264.331687][ T7779] usb 6-1: USB disconnect, device number 3
[  264.816493][T11302] loop4: detected capacity change from 0 to 256
[  264.822753][T11302] exfat: Deprecated parameter 'utf8'
[  264.827970][T11302] exfat: Deprecated parameter 'namecase'
[  264.834318][T11302] exfat: Deprecated parameter 'namecase'
[  264.838607][T11302] exfat: Deprecated parameter 'utf8'
[  264.859761][T11302] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d)
[  264.868672][T11302] exFAT-fs (loop4): failed to test first cluster bit of root dir(5)
[  265.183937][   T54] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  266.830382][T11335] comedi comedi3: mpc624: I/O port conflict (0x100,16)
[  266.966220][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2304'.
[  266.973339][T11346] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2304'.
[  267.344097][T11368] xt_hashlimit: invalid rate
[  268.039703][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2323'.
[  268.070772][T11388] bond5 (unregistering): Released all slaves
[  268.460263][T11403] loop4: detected capacity change from 0 to 256
[  268.468448][T11403] exfat: Deprecated parameter 'namecase'
[  268.484089][T11403] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5cb490d, utbl_chksum : 0xe619d30d)
[  269.326411][T11449] netlink: 'syz.5.2351': attribute type 1 has an invalid length.
[  269.329704][T11449] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2351'.
[  269.851095][T11458] ubi16: attaching mtd0
[  270.368661][T11458] ubi16: scanning is finished
[  270.392210][T11458] ubi16: empty MTD device detected
[  271.240247][T11458] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB)
[  271.243161][T11458] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  271.245787][T11458] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1
[  271.253980][T11458] ubi16: VID header offset: 64 (aligned 64), data offset: 128
[  271.259709][T11458] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  271.266598][T11458] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23
[  271.272325][T11458] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3230937786
[  271.284111][T11458] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  271.291184][T11482] ubi16: background thread "ubi_bgt16d" started, PID 11482
[  271.316408][T11483] loop4: detected capacity change from 0 to 512
[  271.355147][T11483] EXT4-fs: Ignoring removed nobh option
[  271.375298][T11483] EXT4-fs (loop4): bad s_min_extra_isize: 1024
[  271.687782][T11502] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2372'.
[  271.692227][ T5784] kernel write not supported for file /amidi2 (pid: 5784 comm: kworker/1:4)
[  271.759162][   T33] audit: type=1326 audit(1778443807.584:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11505 comm="syz.2.2375" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94dad9cdd9 code=0x0
[  272.196096][T11511] loop4: detected capacity change from 0 to 32768
[  272.217918][T11511] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  272.250903][T11511] XFS (loop4): Ending clean mount
[  272.429624][ T7688] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  272.442596][T11515] loop5: detected capacity change from 0 to 32768
[  272.454556][T11515] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2379 (11515)
[  272.847662][T11515] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  272.859090][T11515] BTRFS info (device loop5): using sha256 checksum algorithm
[  272.864559][T11515] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  272.933887][T11536] loop4: detected capacity change from 0 to 2048
[  272.981580][T11536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  273.015555][T11536] ext4 filesystem being mounted at /469/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  273.034334][T11515] BTRFS info (device loop5): rebuilding free space tree
[  273.160161][T11536] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2383: bg 0: block 345: padding at end of block bitmap is not set
[  273.219923][T11515] BTRFS info (device loop5): disabling free space tree
[  273.226014][T11515] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  273.243771][T11515] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  273.266620][ T7688] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.291787][T11515] BTRFS info (device loop5): enabling ssd optimizations
[  273.297779][T11515] BTRFS info (device loop5): enabling disk space caching
[  273.309736][T11515] BTRFS info (device loop5): force clearing of disk cache
[  273.314954][T11515] BTRFS info (device loop5): enabling auto defrag
[  273.317971][T11515] BTRFS info (device loop5): max_inline set to 0
[  273.379721][T10473] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  273.385313][T11564] loop4: detected capacity change from 0 to 512
[  273.390052][T11564] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  273.401579][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2388'.
[  273.413482][T11564] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2389: invalid indirect mapped block 3120562176 (level 1)
[  273.441166][T11564] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  273.449949][T11564] EXT4-fs (loop4): Remounting filesystem read-only
[  273.453556][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  273.453573][    C1] EXT4-fs (loop4): initial error at time 1778443809: ext4_free_branches:1023: inode 11
[  273.453588][    C1] EXT4-fs (loop4): last error at time 1778443809: ext4_free_branches:1023: inode 11
[  273.489981][T11564] EXT4-fs (loop4): 1 truncate cleaned up
[  273.493249][T11564] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  273.556612][ T7688] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.717609][   T33] audit: type=1326 audit(1778443809.544:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11568 comm="syz.4.2392" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b00d9cdd9 code=0x0
[  273.827593][T11576] tmpfs: User quota block hardlimit too large.
[  274.115928][T11588] ipvlan2: entered allmulticast mode
[  274.386258][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2406'.
[  274.823999][T11628] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2419'.
[  274.925099][T11636] loop5: detected capacity change from 0 to 16
[  274.929887][T11636] erofs (device loop5): mounted with root inode @ nid 36.
[  274.945321][T11636] erofs (device loop5): readahead error at folio 3 @ nid 89
[  274.949475][T11636] erofs (device loop5): readahead error at folio 2 @ nid 89
[  274.953637][T11636] erofs (device loop5): readahead error at folio 1 @ nid 89
[  274.966932][T11636] erofs (device loop5): readahead error at folio 0 @ nid 89
[  274.970663][T11636] erofs (device loop5): read error -117 @ 0 of nid 89
[  274.973751][   T33] audit: type=1800 audit(1778443810.804:112): pid=11636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2422" name="file2" dev="loop5" ino=89 res=0 errno=0
[  274.982893][T11636] erofs (device loop5): read error -117 @ 0 of nid 89
[  275.091557][ T5804] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  275.242619][ T5804] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  275.247417][ T5804] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  275.251825][ T5804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.267776][ T5804] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1
[  275.681546][ T5804] usb 5-1: USB disconnect, device number 11
[  275.807702][T11664] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2434'.
[  275.811099][T11664] 0: renamed from hsr0
[  275.818451][T11664] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  275.822118][T11664] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  275.825484][T11664] 0: entered allmulticast mode
[  275.827446][T11664] hsr_slave_0: entered allmulticast mode
[  275.829551][T11664] hsr_slave_1: entered allmulticast mode
[  275.833913][T11664] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  276.139823][T11668] loop5: detected capacity change from 0 to 256
[  276.396998][T11679] loop5: detected capacity change from 0 to 128
[  276.467423][T11679] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  276.488461][T11679] ext4 filesystem being mounted at /141/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  276.554726][T10473] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  276.603072][T11685] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0
[  276.757421][T11687] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false
[  277.043862][T11696] loop5: detected capacity change from 0 to 1024
[  277.352532][T11699] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI
[  277.356858][T11699] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
[  277.358440][T11696] loop5: detected capacity change from 1024 to 64
[  277.360186][T11699] CPU: 0 UID: 0 PID: 11699 Comm: syz.5.2444 Not tainted syzkaller #0 PREEMPT(full) 
[  277.360215][T11699] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  277.360233][T11699] RIP: 0010:__hfsplus_setxattr+0x1c68/0x2860
[  277.360258][T11699] Code: 8b 36 49 83 c6 30 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 e6 87 81 ff 4d 8b 36 49 83 c6 08 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 c9 87 81 ff 4d 8b 36 49 8d 7e 90
[  277.360274][T11699] RSP: 0018:ffffc9000941f420 EFLAGS: 00010202
[  277.381045][T11699] RAX: 0000000000000001 RBX: fffff52001283ea4 RCX: 0000000000080000
[  277.384024][T11699] RDX: ffffc9002a82e000 RSI: 0000000000001942 RDI: 0000000000001943
[  277.387052][T11699] RBP: ffffc9000941f8f8 R08: ffffea0004807637 R09: 1ffffd4000900ec6
[  277.389903][T11699] R10: dffffc0000000000 R11: fffff94000900ec7 R12: dffffc0000000000
[  277.392853][T11699] R13: ffff888109172f28 R14: 0000000000000008 R15: ffff8881091755b8
[  277.395816][T11699] FS:  00007fc07f8786c0(0000) GS:ffff88818dc90000(0000) knlGS:0000000000000000
[  277.399113][T11699] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  277.401578][T11699] CR2: 00007f337c1c6c8f CR3: 0000000112e22000 CR4: 00000000000006f0
[  277.404572][T11699] Call Trace:
[  277.405879][T11699]  <TASK>
[  277.407035][T11699]  ? __pfx___hfsplus_setxattr+0x10/0x10
[  277.409118][T11699]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  277.411328][T11699]  ? rcu_is_watching+0x15/0xb0
[  277.413143][T11699]  ? __kasan_kmalloc+0x93/0xb0
[  277.414966][T11699]  ? __kmalloc_cache_noprof+0x31c/0x660
[  277.417046][T11699]  ? hfsplus_setxattr+0x10b/0x340
[  277.418975][T11699]  hfsplus_setxattr+0x124/0x340
[  277.420808][T11699]  hfsplus_trusted_setxattr+0x40/0x60
[  277.422832][T11699]  ? __pfx_hfsplus_trusted_setxattr+0x10/0x10
[  277.425104][T11699]  __vfs_setxattr+0x43c/0x480
[  277.426904][T11699]  __vfs_setxattr_noperm+0x12d/0x660
[  277.428904][T11699]  vfs_setxattr+0x163/0x360
[  277.430607][T11699]  ? __pfx_vfs_setxattr+0x10/0x10
[  277.432510][T11699]  filename_setxattr+0x296/0x630
[  277.434408][T11699]  ? __pfx_filename_setxattr+0x10/0x10
[  277.436464][T11699]  ? do_getname+0x151/0x250
[  277.438166][T11699]  path_setxattrat+0x3eb/0x440
[  277.439983][T11699]  ? __pfx_path_setxattrat+0x10/0x10
[  277.441995][T11699]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.444288][T11699]  __x64_sys_setxattr+0xbc/0xe0
[  277.446086][T11699]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.448283][T11699]  do_syscall_64+0x15f/0xf80
[  277.449973][T11699]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.452118][T11699] RIP: 0033:0x7fc07e99cdd9
[  277.453725][T11699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  277.460736][T11699] RSP: 002b:00007fc07f878028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  277.463826][T11699] RAX: ffffffffffffffda RBX: 00007fc07ec16090 RCX: 00007fc07e99cdd9
[  277.466758][T11699] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000200000000000
[  277.469661][T11699] RBP: 00007fc07ea32d69 R08: 0000000000000003 R09: 0000000000000000
[  277.472531][T11699] R10: 0000000000000835 R11: 0000000000000246 R12: 0000000000000000
[  277.475420][T11699] R13: 00007fc07ec16128 R14: 00007fc07ec16090 R15: 00007ffd766300b8
[  277.478329][T11699]  </TASK>
[  277.479468][T11699] Modules linked in:
[  277.481725][T11699] ---[ end trace 0000000000000000 ]---
[  277.510185][T11699] RIP: 0010:__hfsplus_setxattr+0x1c68/0x2860
[  277.517395][T11699] Code: 8b 36 49 83 c6 30 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 e6 87 81 ff 4d 8b 36 49 83 c6 08 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 c9 87 81 ff 4d 8b 36 49 8d 7e 90
[  277.534475][T11699] RSP: 0018:ffffc9000941f420 EFLAGS: 00010202
[  277.548878][T11699] RAX: 0000000000000001 RBX: fffff52001283ea4 RCX: 0000000000080000
[  277.552543][T11699] RDX: ffffc9002a82e000 RSI: 0000000000001942 RDI: 0000000000001943
[  277.555607][T11699] RBP: ffffc9000941f8f8 R08: ffffea0004807637 R09: 1ffffd4000900ec6
[  277.558692][T11699] R10: dffffc0000000000 R11: fffff94000900ec7 R12: dffffc0000000000
[  277.562027][T11699] R13: ffff888109172f28 R14: 0000000000000008 R15: ffff8881091755b8
[  277.565211][T11699] FS:  00007fc07f8786c0(0000) GS:ffff8882a9290000(0000) knlGS:0000000000000000
[  277.568603][T11699] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  277.571289][T11699] CR2: 000000110c397f73 CR3: 0000000112e22000 CR4: 00000000000006f0
[  277.574398][T11699] Kernel panic - not syncing: Fatal exception
[  277.577467][T11699] Kernel Offset: disabled
[  277.579196][T11699] Rebooting in 86400 seconds..
