last executing test programs:

7m24.186164533s ago: executing program 0 (id=866):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000080)="0f0d640c6665f20f10ad00000fc7af0a000f201bd11fbaf80c66b840cd3c8466efbafc0cb011eeb800068ee00f20d86635080000000f22d866b9950300000f32660f38826bd3", 0x46}], 0x1, 0x8, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x400002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})

7m21.684776833s ago: executing program 0 (id=871):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'ip_vti0\x00'})
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
close(r1)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast})
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r3 = syz_open_dev$media(&(0x7f0000000080), 0x10001, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x1, 0x5001)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc, 0x40000000000}, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x140)

7m12.279047569s ago: executing program 0 (id=889):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000080)="0f0d640c6665f20f10ad00000fc7af0a000f201bd11fbaf80c66b840cd3c8466efbafc0cb011eeb800068ee00f20d86635080000000f22d866b9950300000f32660f38826bd3", 0x46}], 0x1, 0x8, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x400002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)

7m11.195140646s ago: executing program 0 (id=892):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./file0\x00', 0xa00004, &(0x7f0000032780)={[{@adinicb}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@utf8}, {@uid}, {}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@mode={'mode', 0x3d, 0x1000}}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@adinicb}, {@volume={'volume', 0x3d, 0x1}}, {@umask}, {@gid_forget}, {@unhide}]}, 0x1, 0xc4d, &(0x7f0000000f40)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f000000bc40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x6f2, &(0x7f0000000ac0)="$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")
mknod(0x0, 0x1000, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000340)='ext3\x00', &(0x7f0000000bc0)='./file0\x00', 0x20082, &(0x7f0000000040), 0xff, 0xbb9, &(0x7f0000001bc0)="$eJzs3M9rHOUbAPBnJpvf+TbpF1FbBANSFcVt2pQKPbWeRQU9eGxMNiVk+8Mkggk9pPWuHkQ8CNI/QfBuL54ED/Wg9S8QsUjRS9vDyuyPdM1mN2m62THx84E3877zTvZ5nkyy8w7sJID/rMnsSxpxJCLOJxHj9f1pRAxUe0MR67Xj7t+9Opu1JCqVt/9IIomIe3evzjZeK6lvR+uDoYi49VoS//+oNe7y6triTLlcWqqPj69cvHJ8eXXtlYWLMxdKF0qXTk2/emr69PT0jisZ2vaIX6+898UzP77x/PUbH0+9+fmh75M4G2P1ueY6umUyJjd+Js0KETHT7WA56avX01xnUsgxIQAAOkqb1nBPxnj0xcPF23h891OuyQEAAABdUemLqAAAAAAHXOL+HwAAAA64xucA7t29Otto+X4iobfunIuIiVr9jeebazOFWK9uh6I/Ikb+TKL5sdak9m2PbTKL9M0PpazFHj2H3Mn6tYh4eqvzn1Trn6g/V725/jQiproQf3LTeD/Vf7YL8R+t/sEuRASAiJvnahey1utfurH+iS2uf4Utrl27kff1v7H+u9+y/ntYf1+b9d9bO4xx9MFLt9rNNa//3v3kl7ksfrZ9rKIewZ1rEUcLW9WfbNSftKn//I4iDHSczerP6m20XtdfuRFxrLqaa62/Ien0/4mOzy+US1O1r1u8/urpzvGbz3/WsviNe4FeyM7/SOzu/F/ZYYyJp34/0m5u+/rT3waSd6q9xm/ShzMrK0snIgaS11v3n+ycS+OYxmtk9b/4XOe//63qz94T1us/h+y351p9m42vb4o5euzk17uvf29l9c/t8vx/usMYX3375fvt5vKuHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9IY2IsUjS4kY/TYvFiNGIeCJG0vLl5ZWX5y9/cGkum4uYiP50fqFcmoqI8do4ycYnqv2H45ObxtMRcTgiPhsfro6Ls5fLc/15Vw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDDaESMRZIWIyKNiL/G07RYzDsrAAAAoOsm2k0kvc0DAAAA2Dtt7/8BAACAA6Pl/r/wj9FQL3MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgQDr87M3bSUSsnxmutsxAfa4/18yAvZbu7LCRvc4D6L2+vBMAclNo6lcqlUqOqQA95h4fSLaZH2o7M9j1XAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD493rhyM3bSUSsnxmutsxAfa4/18yAvZbmnQCQm75Ok8m2O4B9rJB3AkBu3OMDtZX9g0pN6/xQ2+8cfOyoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOwfY9WWpMWISKv9NC0WI/4XERPRn8wvlEtTEXEoIn4e7x/MxifyThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICuW15dW5wpl0tLOjo6u+4MtuwZjp5FH67/Mbc5ZrD9VIdOzm9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADkYnl1bXGmXC4tLXc6arh3CQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC5WV5dW5wpl0tLe9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzdwAAAP//2NQHgA==")
openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x40000, 0x40)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="01002cbd7010040000000500000092820600a0bc1c0aa048c56d4a504fb1a0198c8c373873378d77118934feac7756abe50064e428c01bc0f1df4001a9b43c04cef9e9809a8600a396ecd7a0a9490fbd6cfac6dd4a1c17852e5f5f8dea1afa51"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new de'], 0x2a, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc0}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90)

7m9.883120651s ago: executing program 0 (id=895):
r0 = gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r1, &(0x7f0000000440)=""/247, 0x26)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x31, @time={0x7, 0x1}, 0x0, {0xfd, 0x8}, 0xfe, 0x0, 0x4})
tkill(r0, 0x7)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000001c0)={{0x86, 0x4d}, 'port1\x00', 0x12, 0x10400, 0x5, 0x9, 0x2, 0x59e, 0x7, 0x0, 0x4})

7m9.353702933s ago: executing program 0 (id=897):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'ip_vti0\x00'})
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
close(r1)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast})
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r3 = syz_open_dev$media(&(0x7f0000000080), 0x10001, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x1, 0x5001)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc, 0x40000000000}, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x140)

6m53.906663483s ago: executing program 32 (id=897):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'ip_vti0\x00'})
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
close(r1)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast})
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r3 = syz_open_dev$media(&(0x7f0000000080), 0x10001, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x1, 0x5001)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc, 0x40000000000}, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x140)

7.730342939s ago: executing program 3 (id=2148):
r0 = syz_io_uring_setup(0x7fbc, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2000000}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0x2}})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x10, 0x2007, @fd, 0x8, 0x0, 0x0, 0x2})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

7.645323906s ago: executing program 4 (id=2149):
syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000005980), 0xfe, 0x98ab, &(0x7f000001c880)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x20)
setreuid(0x0, 0xee00)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0)

7.322965512s ago: executing program 3 (id=2150):
r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x50)
write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69)
close(r0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

6.734946829s ago: executing program 3 (id=2154):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = socket$inet6(0xa, 0x3, 0x3c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, 0x0, 0x40)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)="2e2493", 0x3}], 0x1, 0x0, 0x0, 0x24040000}}], 0x1, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)

6.558773394s ago: executing program 3 (id=2157):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)

5.909524476s ago: executing program 4 (id=2159):
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000580)=ANY=[], 0x1, 0x6c9, &(0x7f0000000b40)="$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")
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = syz_open_dev$usbfs(0x0, 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)

5.531067646s ago: executing program 3 (id=2160):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000100)=0xa)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r6, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r8 = accept(r5, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r7, 0x0, 0x0, 0x4100, 0x0, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
r9 = getpid()
sched_setscheduler(r9, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))

3.311363434s ago: executing program 3 (id=2162):
r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x50)
write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69)
close(r0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

3.160719446s ago: executing program 1 (id=2163):
syz_mount_image$squashfs(&(0x7f0000000080), &(0x7f0000000480)='./file1\x00', 0x80, &(0x7f0000000240)=ANY=[], 0xfb, 0x1a5, &(0x7f0000000600)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x50)

2.586992052s ago: executing program 2 (id=2164):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x95)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x4]}, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', <r2=>0x0})
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4)
sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

2.296327436s ago: executing program 1 (id=2166):
socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x3, 0x5)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x1, 0x100}}, 0x1c}, 0x1, 0x0, 0x0, 0x4009}, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="401553"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_io_uring_setup(0x10d2, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0)

2.24399644s ago: executing program 2 (id=2167):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000000001000000"], 0x18}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
setfsuid(0xee00)
setresuid(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x1b020ba487bfd163, 0x0, 0x0, {{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2b}, {@in6=@private1, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x400}, {0x0, 0x1}, 0x3, 0x3507, 0xa}, [@algo_auth={0x48, 0x1, {{'sha3-224\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x40000}, 0x4004)

2.137058768s ago: executing program 4 (id=2168):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000400)=0x3)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'})
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1.807258405s ago: executing program 4 (id=2169):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x30, r2, 0xe096044a3fc9e6f1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)

1.681181535s ago: executing program 4 (id=2170):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000100)=0xa)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r6, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r8 = accept(r5, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r7, 0x0, 0x0, 0x4100, 0x0, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
r9 = getpid()
sched_setscheduler(r9, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))

1.581236693s ago: executing program 1 (id=2171):
socket$alg(0x26, 0x5, 0x0)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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")
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1ac8420, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040))
sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4000}, 0x80, 0x0}}], 0x1, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa})
epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)

454.072333ms ago: executing program 2 (id=2172):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x19)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
creat(&(0x7f0000000100)='./bus\x00', 0x0)

453.158374ms ago: executing program 4 (id=2173):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

302.907665ms ago: executing program 1 (id=2174):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x95)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x4]}, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4)
sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)

243.00922ms ago: executing program 2 (id=2175):
syz_mount_image$squashfs(&(0x7f0000000080), &(0x7f0000000480)='./file1\x00', 0x80, &(0x7f0000000240)=ANY=[], 0xfb, 0x1a5, &(0x7f0000000600)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x50)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)

197.828884ms ago: executing program 2 (id=2176):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000840)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000380)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x18000}, 0x0)

95.227202ms ago: executing program 1 (id=2177):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x30, r2, 0xe096044a3fc9e6f1, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)

889.52µs ago: executing program 2 (id=2178):
socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x3, 0x5)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x1, 0x100}}, 0x1c}, 0x1, 0x0, 0x0, 0x4009}, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="401553"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_io_uring_setup(0x10d2, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 1 (id=2179):
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x1068, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0])
open(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x10000, 0x20)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x40)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18)
syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
write$FUSE_DIRENTPLUS(r3, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8)
write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x21, 0xffffffff, 0xfffffffff12bd390, 0x2, 0x6, 0x0, 0x6, 0x0, 0x0, 0x1, 0x6}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@posixacl}]}})

kernel console output (not intermixed with test programs):

cal 5287936 mirror 1 wanted 0x31987782e3a542b4b1826f4a60605b79838e23bf27075900db4b92202c72b2fd found 0x40de0d5385bab233876729785d53dcfc8423daa8a61a4fd383291ab23ffba869 level 0
[  361.607169][ T8098] loop2: detected capacity change from 0 to 128
[  361.750241][ T8059] BTRFS info (device loop0: state C): enabling ssd optimizations
[  362.231459][ T8107] loop1: detected capacity change from 0 to 8192
[  362.637975][ T8107]  loop1: p1 p2[DM] p4
[  362.642829][ T8107] loop1: p1 size 196608 extends beyond EOD, truncated
[  362.674307][ T8107] loop1: p2 start 4292936063 is beyond EOD, truncated
[  362.681284][ T8107] loop1: p4 size 50331648 extends beyond EOD, truncated
[  363.075129][ T5788] BTRFS info (device loop0: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  364.183087][ T8110] loop1: detected capacity change from 0 to 1024
[  365.100792][ T5800] udevd[5800]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  365.105602][ T5793] udevd[5793]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  365.438342][ T8129] netlink: 'syz.1.625': attribute type 6 has an invalid length.
[  367.738181][ T8149] loop2: detected capacity change from 0 to 2048
[  367.801223][ T8149] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  367.862436][ T8150] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  368.868808][    C1] Illegal XDP return value 16128 on prog  (id 98) dev lo, expect packet loss!
[  371.215142][ T8167] loop1: detected capacity change from 0 to 32768
[  371.284063][ T8167]  loop1: p9 p11 p16
[  371.891585][ T8162] loop0: detected capacity change from 0 to 40427
[  371.900406][ T8162] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  371.908159][ T8162] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  371.930911][ T8162] F2FS-fs (loop0): build fault injection attr: rate: 18446, type: 0x7ffff
[  371.944060][ T8162] F2FS-fs (loop0): invalid crc value
[  371.977066][ T8162] F2FS-fs (loop0): Found nat_bits in checkpoint
[  372.064598][ T5803] udevd[5803]: inotify_add_watch(7, /dev/loop1p16, 10) failed: No such file or directory
[  372.074083][ T5793] udevd[5793]: inotify_add_watch(7, /dev/loop1p9, 10) failed: No such file or directory
[  372.090628][ T7388] udevd[7388]: inotify_add_watch(7, /dev/loop1p11, 10) failed: No such file or directory
[  372.125532][ T8162] F2FS-fs (loop0): Start checkpoint disabled!
[  372.181452][ T8162] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  372.205721][ T8162] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  374.594288][ T8190] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  375.760202][ T3545] kworker/u4:13: attempt to access beyond end of device
[  375.760202][ T3545] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  375.866937][ T3545] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  375.877089][ T3545] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  375.884703][ T3545] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  376.807336][ T8199] loop1: detected capacity change from 0 to 32768
[  376.941445][ T8199]  loop1: p9 p11 p16
[  377.999369][ T8208] syzkaller0: entered promiscuous mode
[  378.020274][ T8208] syzkaller0: entered allmulticast mode
[  379.631781][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  379.638332][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  380.867262][ T7388] udevd[7388]: inotify_add_watch(7, /dev/loop1p16, 10) failed: No such file or directory
[  380.867869][ T5800] udevd[5800]: inotify_add_watch(7, /dev/loop1p11, 10) failed: No such file or directory
[  380.892317][ T5793] udevd[5793]: inotify_add_watch(7, /dev/loop1p9, 10) failed: No such file or directory
[  386.517282][ T8227] netlink: 'syz.2.655': attribute type 3 has an invalid length.
[  386.525645][ T8227] netlink: 'syz.2.655': attribute type 3 has an invalid length.
[  386.533635][ T8227] netlink: 'syz.2.655': attribute type 3 has an invalid length.
[  386.543075][ T8227] netlink: 'syz.2.655': attribute type 3 has an invalid length.
[  386.567168][ T8227] netlink: 'syz.2.655': attribute type 3 has an invalid length.
[  386.585414][ T8227] netlink: 'syz.2.655': attribute type 3 has an invalid length.
[  386.597708][ T8227] netlink: 'syz.2.655': attribute type 3 has an invalid length.
[  386.607203][ T8227] netlink: 'syz.2.655': attribute type 3 has an invalid length.
[  386.620296][ T8227] netlink: 'syz.2.655': attribute type 3 has an invalid length.
[  386.628399][ T8227] netlink: 'syz.2.655': attribute type 3 has an invalid length.
[  388.418407][ T8285] loop0: detected capacity change from 0 to 512
[  388.453829][ T8285] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.672: corrupted in-inode xattr: invalid ea_ino
[  388.529462][ T8285] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.672: couldn't read orphan inode 15 (err -117)
[  388.575817][ T8285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  388.638427][ T8285] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  388.800158][ T8281] loop2: detected capacity change from 0 to 40427
[  388.828760][ T8281] F2FS-fs (loop2): Image doesn't support compression
[  388.844083][ T8281] F2FS-fs (loop2): invalid crc value
[  388.869191][ T8281] F2FS-fs (loop2): Found nat_bits in checkpoint
[  389.021843][ T8281] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  389.186615][ T8294] syzkaller0: entered promiscuous mode
[  389.192813][ T8294] syzkaller0: entered allmulticast mode
[  390.001956][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  390.027059][ T5794] syz-executor: attempt to access beyond end of device
[  390.027059][ T5794] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  390.211617][ T5794] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  394.033402][ T8323] loop2: detected capacity change from 0 to 512
[  394.124566][ T8323] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.683: corrupted in-inode xattr: invalid ea_ino
[  394.169315][ T8323] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.683: couldn't read orphan inode 15 (err -117)
[  394.231524][ T8323] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  394.332789][ T8323] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  394.893081][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.304026][ T8349] trusted_key: encrypted_key: key user:syz not found
[  398.858956][ T8354] loop0: detected capacity change from 0 to 128
[  403.742367][ T8387] syzkaller0: entered promiscuous mode
[  403.762030][ T8387] syzkaller0: entered allmulticast mode
[  407.983564][ T8404] loop1: detected capacity change from 0 to 65536
[  408.070571][ T8404] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  408.179057][ T8404] XFS (loop1): Ending clean mount
[  409.020764][   T23] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x191/0x250, xfs_agf block 0x1 
[  409.033239][ T8393] loop2: detected capacity change from 0 to 40427
[  409.063634][   T23] XFS (loop1): Unmount and run xfs_repair
[  409.066630][ T8393] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0)
[  409.069472][   T23] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  409.069521][   T23] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  409.108200][ T8393] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  409.119211][   T23] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  409.129800][   T23] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  409.168563][ T8393] F2FS-fs (loop2): invalid crc value
[  409.200716][ T8393] F2FS-fs (loop2): Found nat_bits in checkpoint
[  409.207027][   T23] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  409.270096][   T23] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  409.300097][   T23] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  409.328091][   T23] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  409.358441][   T23] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  409.361758][ T8393] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  409.378083][ T8416] XFS (loop1): metadata I/O error in "xfs_read_agf+0x27e/0x590" at daddr 0x1 len 1 error 74
[  409.407741][ T8393] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  409.416060][ T8416] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8a0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  409.431172][ T8416] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  409.513346][ T5791] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  409.570090][   T28] audit: type=1800 audit(1755286650.876:7): pid=8393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.704" name="file1" dev="loop2" ino=10 res=0 errno=0
[  409.574657][ T8393] syz.2.704: attempt to access beyond end of device
[  409.574657][ T8393] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  409.825649][ T5794] syz-executor: attempt to access beyond end of device
[  409.825649][ T5794] loop2: rw=2049, sector=45136, nr_sectors = 8 limit=40427
[  409.920049][ T5794] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  415.300835][ T8446] loop2: detected capacity change from 0 to 2048
[  415.361831][ T8446] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  416.447747][ T8451] siw: device registration error -23
[  417.852628][ T8453] loop2: detected capacity change from 0 to 65536
[  418.050114][ T8453] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  418.295390][ T8453] XFS (loop2): Ending clean mount
[  418.770674][   T55] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x191/0x250, xfs_agf block 0x1 
[  418.991494][   T55] XFS (loop2): Unmount and run xfs_repair
[  419.028800][   T55] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  419.076596][   T55] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  419.180074][   T55] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  419.223858][   T55] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  419.330171][   T55] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  419.340297][   T55] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  419.349626][   T55] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  419.363529][   T55] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  419.372863][   T55] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  419.382884][ T8472] XFS (loop2): metadata I/O error in "xfs_read_agf+0x27e/0x590" at daddr 0x1 len 1 error 74
[  419.407603][ T8472] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8a0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  419.423318][ T8472] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  419.532145][ T5794] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  420.856640][ T8491] loop0: detected capacity change from 0 to 256
[  420.973144][ T8491] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  420.980365][ T8491] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  421.030657][ T8491] vhci_hcd vhci_hcd.0: Device attached
[  421.242716][ T8499] loop2: detected capacity change from 0 to 64
[  421.290214][ T5858] usb 33-1: new low-speed USB device number 2 using vhci_hcd
[  421.911973][ T8507] overlayfs: failed to resolve './bus': -2
[  422.333598][ T5794] Trying to free block not in datazone
[  422.349436][ T5794] Trying to free block not in datazone
[  422.366391][ T5794] Trying to free block not in datazone
[  422.372764][ T5794] Trying to free block not in datazone
[  422.379003][ T5794] Trying to free block not in datazone
[  422.386394][ T5794] minix_free_block (loop2:6): bit already cleared
[  422.397703][ T5794] Trying to free block not in datazone
[  422.406024][ T5794] Trying to free block not in datazone
[  423.141993][ T8519] siw: device registration error -23
[  424.020572][ T8493] vhci_hcd: connection reset by peer
[  424.105257][ T3545] vhci_hcd: stop threads
[  424.151018][ T3545] vhci_hcd: release socket
[  424.341279][ T3545] vhci_hcd: disconnect device
[  426.551619][ T5858] vhci_hcd: vhci_device speed not set
[  426.983046][ T8538] loop2: detected capacity change from 0 to 2048
[  427.117596][ T8538] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  428.289530][ T8556] loop2: detected capacity change from 0 to 256
[  428.316267][ T8556] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  428.357526][ T8556] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  428.383557][ T8556] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  429.314180][ T8563] netlink: 32 bytes leftover after parsing attributes in process `syz.0.751'.
[  430.845454][ T8583] loop0: detected capacity change from 0 to 512
[  430.961528][ T8583] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.758: corrupted in-inode xattr: invalid ea_ino
[  431.015814][ T8583] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.758: couldn't read orphan inode 15 (err -117)
[  431.129170][ T8583] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  431.277475][ T8583] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  431.728545][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  431.830633][ T8592] netlink: 32 bytes leftover after parsing attributes in process `syz.2.761'.
[  432.347450][ T8598] loop2: detected capacity change from 0 to 512
[  432.688867][ T8598] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.764: corrupted in-inode xattr: invalid ea_ino
[  432.754580][ T8598] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.764: couldn't read orphan inode 15 (err -117)
[  432.851409][ T8598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  432.991242][ T8598] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  433.459506][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  433.503653][ T8594] loop1: detected capacity change from 0 to 40427
[  433.564008][ T8594] F2FS-fs (loop1): Image doesn't support compression
[  433.591449][ T8594] F2FS-fs (loop1): invalid crc value
[  433.637376][ T8594] F2FS-fs (loop1): Found nat_bits in checkpoint
[  433.837363][ T8594] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  434.289609][   T28] audit: type=1804 audit(1755286675.596:8): pid=8620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.763" name="/newroot/184/bus/file0" dev="loop1" ino=10 res=1 errno=0
[  434.322018][ T8620] syz.1.763: attempt to access beyond end of device
[  434.322018][ T8620] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  434.336545][ T8620] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  434.519312][   T28] audit: type=1804 audit(1755286675.626:9): pid=8620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.763" name="/newroot/184/bus/file0" dev="loop1" ino=10 res=1 errno=0
[  435.402608][ T8624] process 'syz.2.772' launched './file2' with NULL argv: empty string added
[  435.622557][ T8627] loop1: detected capacity change from 0 to 512
[  435.735542][ T8627] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.770: corrupted in-inode xattr: invalid ea_ino
[  435.858573][ T8627] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.770: couldn't read orphan inode 15 (err -117)
[  435.919506][ T8627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  436.441866][ T8627] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  436.878132][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  438.191272][ T8652] loop0: detected capacity change from 0 to 2048
[  438.242189][ T8652] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  438.327960][ T8560] Set syz1 is full, maxelem 65536 reached
[  439.128110][ T8663] validate_nla: 44 callbacks suppressed
[  439.128130][ T8663] netlink: 'syz.1.781': attribute type 3 has an invalid length.
[  439.154036][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.781'.
[  439.207889][ T8665] loop2: detected capacity change from 0 to 512
[  439.246787][ T8665] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.783: corrupted in-inode xattr: invalid ea_ino
[  439.293703][ T8665] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.783: couldn't read orphan inode 15 (err -117)
[  439.412134][ T8665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  439.471547][ T8665] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  439.540382][    T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  439.760737][    T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  439.781389][    T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  439.802487][    T9] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  439.816857][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.827300][    T9] usb 1-1: Product: syz
[  439.839842][    T9] usb 1-1: Manufacturer: syz
[  439.857309][    T9] usb 1-1: SerialNumber: syz
[  439.873761][    T9] usb 1-1: config 0 descriptor??
[  439.886905][ T8668] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  439.898388][ T8668] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  440.046016][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.144662][ T8668] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  440.168508][ T8668] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  440.616932][ T8692] netlink: 'syz.1.793': attribute type 3 has an invalid length.
[  440.650111][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.793'.
[  440.955609][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  440.964718][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  441.168416][    T9] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[  441.227514][    T9] dm9601 1-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, 6e:00:00:00:00:00
[  441.280327][    T9] usb 1-1: USB disconnect, device number 14
[  441.301607][    T9] dm9601 1-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet
[  441.574107][ T8703] syzkaller0: entered promiscuous mode
[  441.579692][ T8703] syzkaller0: entered allmulticast mode
[  442.169496][ T8708] loop1: detected capacity change from 0 to 512
[  442.245458][ T8708] ext4: Unknown parameter 'nouser_xattr'
[  443.661861][ T8722] netlink: 'syz.0.803': attribute type 3 has an invalid length.
[  443.697604][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.803'.
[  445.071896][ T8737] loop0: detected capacity change from 0 to 64
[  445.223235][ T8740] syz.0.809: attempt to access beyond end of device
[  445.223235][ T8740] loop0: rw=0, sector=16777216, nr_sectors = 2 limit=64
[  445.237645][ T8740] Buffer I/O error on dev loop0, logical block 8388608, async page read
[  445.261109][ T8740] syz.0.809: attempt to access beyond end of device
[  445.261109][ T8740] loop0: rw=0, sector=16777216, nr_sectors = 2 limit=64
[  445.276356][ T8740] Buffer I/O error on dev loop0, logical block 8388608, async page read
[  447.567779][ T8752] netlink: 'syz.3.813': attribute type 3 has an invalid length.
[  447.586257][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.813'.
[  448.911332][ T8762] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  449.052091][ T8768] loop1: detected capacity change from 0 to 512
[  449.074507][ T8768] ext4: Unknown parameter 'nouser_xattr'
[  449.175114][ T8774] loop2: detected capacity change from 0 to 1024
[  449.195866][ T8773] loop0: detected capacity change from 0 to 2048
[  449.211222][ T8774] ext4: Unknown parameter 'fscontext'
[  449.246732][ T8773] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  449.282026][ T8264] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  450.619552][ T8779] loop2: detected capacity change from 0 to 512
[  450.627977][ T8779] ext4: Unknown parameter 'uid<00000000000000000000'
[  451.243740][ T8785] loop2: detected capacity change from 0 to 128
[  451.901408][ T8792] loop0: detected capacity change from 0 to 64
[  452.043841][ T8793] syz.0.827: attempt to access beyond end of device
[  452.043841][ T8793] loop0: rw=0, sector=16777216, nr_sectors = 2 limit=64
[  452.060307][ T8793] Buffer I/O error on dev loop0, logical block 8388608, async page read
[  452.070991][ T8793] syz.0.827: attempt to access beyond end of device
[  452.070991][ T8793] loop0: rw=0, sector=16777216, nr_sectors = 2 limit=64
[  452.085270][ T8793] Buffer I/O error on dev loop0, logical block 8388608, async page read
[  452.368329][    T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  452.753503][    T9] usb 3-1: device descriptor read/64, error -71
[  452.891331][ T8801] loop1: detected capacity change from 0 to 16
[  452.908141][ T8799] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  452.909370][ T8801] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  452.947210][ T8801] erofs: (device loop1): mounted with root inode @ nid 36.
[  453.120121][    T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  453.286110][    T9] usb 3-1: device descriptor read/64, error -71
[  453.303901][ T8806] loop1: detected capacity change from 0 to 2048
[  453.357263][ T8806] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  453.452568][    T9] usb usb3-port1: attempt power cycle
[  453.890093][    T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  453.895073][ T8814] loop0: detected capacity change from 0 to 32768
[  453.932612][    T9] usb 3-1: device descriptor read/8, error -71
[  453.956294][ T8814] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  453.998002][ T8814] XFS (loop0): Ending clean mount
[  454.240101][    T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  454.283348][ T3419] kworker/u4:7: attempt to access beyond end of device
[  454.283348][ T3419] loop2: rw=1, sector=145, nr_sectors = 896 limit=128
[  454.318271][ T5788] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  454.508053][    T9] usb 3-1: device not accepting address 23, error -71
[  454.511746][ T8830] loop2: detected capacity change from 0 to 64
[  454.585401][    T9] usb usb3-port1: unable to enumerate USB device
[  454.881132][ T8832] syz.2.840: attempt to access beyond end of device
[  454.881132][ T8832] loop2: rw=0, sector=16777216, nr_sectors = 2 limit=64
[  454.895335][ T8832] Buffer I/O error on dev loop2, logical block 8388608, async page read
[  454.907260][ T8832] syz.2.840: attempt to access beyond end of device
[  454.907260][ T8832] loop2: rw=0, sector=16777216, nr_sectors = 2 limit=64
[  454.923129][ T8832] Buffer I/O error on dev loop2, logical block 8388608, async page read
[  455.351498][ T8826] syzkaller0: entered promiscuous mode
[  455.385117][ T8826] syzkaller0: entered allmulticast mode
[  456.846938][ T8850] loop2: detected capacity change from 0 to 2048
[  456.892658][ T8850] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  457.414923][ T8853] loop2: detected capacity change from 0 to 512
[  457.497384][ T8853] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.847: corrupted in-inode xattr: invalid ea_ino
[  457.564305][ T8853] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.847: couldn't read orphan inode 15 (err -117)
[  457.647865][ T8853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  457.836268][ T8853] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  457.864861][ T8857] loop0: detected capacity change from 0 to 128
[  458.269441][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  458.306102][   T55] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  458.477789][   T55] usb 1-1: device descriptor read/64, error -71
[  458.877207][   T55] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  459.037967][   T55] usb 1-1: device descriptor read/64, error -71
[  459.176898][   T55] usb usb1-port1: attempt power cycle
[  459.597096][   T55] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  459.652987][   T55] usb 1-1: device descriptor read/8, error -71
[  459.993856][   T55] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  460.074999][   T55] usb 1-1: device descriptor read/8, error -71
[  460.212341][   T55] usb usb1-port1: unable to enumerate USB device
[  460.890385][ T3458] kworker/u4:9: attempt to access beyond end of device
[  460.890385][ T3458] loop0: rw=1, sector=145, nr_sectors = 896 limit=128
[  461.252145][ T8842] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  462.641903][ T8880] loop2: detected capacity change from 0 to 512
[  462.757995][ T8880] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.857: corrupted in-inode xattr: invalid ea_ino
[  462.798193][ T8880] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.857: couldn't read orphan inode 15 (err -117)
[  463.053508][ T8880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  463.747105][ T8880] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  463.792483][ T8892] loop1: detected capacity change from 0 to 128
[  464.092792][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  464.230176][   T55] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  464.375873][ T8895] loop2: detected capacity change from 0 to 2048
[  464.400149][   T55] usb 2-1: device descriptor read/64, error -71
[  464.427840][ T8895] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  464.680021][   T55] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  464.910025][   T55] usb 2-1: device descriptor read/64, error -71
[  465.041446][   T55] usb usb2-port1: attempt power cycle
[  465.521113][   T55] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  465.578233][   T55] usb 2-1: device descriptor read/8, error -71
[  466.560222][   T55] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  466.561245][ T8923] loop2: detected capacity change from 0 to 64
[  466.591566][   T55] usb 2-1: device descriptor read/8, error -71
[  466.810641][   T55] usb usb2-port1: unable to enumerate USB device
[  467.082790][ T7901] kworker/u4:0: attempt to access beyond end of device
[  467.082790][ T7901] loop1: rw=1, sector=145, nr_sectors = 896 limit=128
[  467.200478][ T8925] syz.2.868: attempt to access beyond end of device
[  467.200478][ T8925] loop2: rw=0, sector=16777216, nr_sectors = 2 limit=64
[  467.217194][ T8925] Buffer I/O error on dev loop2, logical block 8388608, async page read
[  467.230525][ T8925] syz.2.868: attempt to access beyond end of device
[  467.230525][ T8925] loop2: rw=0, sector=16777216, nr_sectors = 2 limit=64
[  467.244689][ T8925] Buffer I/O error on dev loop2, logical block 8388608, async page read
[  468.226044][ T8931] syzkaller0: entered promiscuous mode
[  468.248917][ T8931] syzkaller0: entered allmulticast mode
[  469.346580][ T8950] loop1: detected capacity change from 0 to 128
[  469.750065][ T5875] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  469.960508][ T5875] usb 2-1: device descriptor read/64, error -71
[  471.017453][ T5875] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  471.190632][ T5875] usb 2-1: device descriptor read/64, error -71
[  471.334049][ T5875] usb usb2-port1: attempt power cycle
[  471.606961][ T8961] loop2: detected capacity change from 0 to 32768
[  472.130585][ T5875] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  472.602563][ T5875] usb 2-1: device descriptor read/8, error -71
[  472.649128][ T3545] kworker/u4:13: attempt to access beyond end of device
[  472.649128][ T3545] loop1: rw=1, sector=145, nr_sectors = 896 limit=128
[  476.997373][ T8981] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  477.007622][ T8981] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  477.017501][ T8981] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  478.606923][ T8998] loop0: detected capacity change from 0 to 2048
[  478.626265][ T8998] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  478.731126][ T8987] loop1: detected capacity change from 0 to 32768
[  479.537797][ T8987] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  479.952757][ T8987] XFS (loop1): Ending clean mount
[  480.389738][ T5791] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  480.500076][  T788] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  480.530051][ T9036] syzkaller0: entered promiscuous mode
[  480.535602][ T9036] syzkaller0: entered allmulticast mode
[  480.719934][  T788] usb 3-1: Using ep0 maxpacket: 8
[  480.727684][  T788] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  480.985880][  T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  480.997878][  T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  481.008310][  T788] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  481.022329][  T788] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[  481.032376][  T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.044738][  T788] usb 3-1: config 0 descriptor??
[  481.148969][ T9040] loop1: detected capacity change from 0 to 512
[  481.170107][ T9040] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.899: corrupted in-inode xattr: invalid ea_ino
[  481.250957][ T9040] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.899: couldn't read orphan inode 15 (err -117)
[  481.356664][ T9040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  481.426286][ T9040] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  481.526073][  T788] redragon 0003:0C45:760B.0001: unknown main item tag 0x6
[  481.542816][  T788] redragon 0003:0C45:760B.0001: item fetching failed at offset 7/133
[  481.602803][  T788] redragon: probe of 0003:0C45:760B.0001 failed with error -22
[  481.731247][  T788] usb 3-1: USB disconnect, device number 24
[  482.037851][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.461012][ T9055] loop2: detected capacity change from 0 to 512
[  483.592849][ T9053] loop1: detected capacity change from 0 to 128
[  483.601511][ T9055] EXT4-fs: Ignoring removed nobh option
[  483.695714][ T9055] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #3: comm syz.2.903: corrupted inode contents
[  483.835827][ T9055] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #3: comm syz.2.903: mark_inode_dirty error
[  483.869547][ T9055] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #3: comm syz.2.903: corrupted inode contents
[  483.899016][ T9055] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.903: mark_inode_dirty error
[  483.935173][ T9055] Quota error (device loop2): write_blk: dquota write failed
[  483.955176][ T9055] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  484.000021][ T9055] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.903: Failed to acquire dquot type 0
[  484.058653][ T9055] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.903: corrupted inode contents
[  484.060016][   T23] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  484.091239][ T9055] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #16: comm syz.2.903: mark_inode_dirty error
[  484.106103][ T9055] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.903: corrupted inode contents
[  484.126583][ T9055] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.903: mark_inode_dirty error
[  484.152871][ T9055] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.903: corrupted inode contents
[  484.180733][ T9055] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  484.205573][ T9055] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.903: corrupted inode contents
[  484.222464][ T9055] EXT4-fs error (device loop2): ext4_truncate:4288: inode #16: comm syz.2.903: mark_inode_dirty error
[  484.252627][   T23] usb 2-1: device descriptor read/64, error -71
[  484.262501][ T9055] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  484.286841][ T9055] EXT4-fs (loop2): 1 truncate cleaned up
[  484.306268][ T9055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  484.335309][ T9055] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  485.096995][   T23] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  485.214417][ T9072] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  485.371728][   T23] usb 2-1: device descriptor read/64, error -71
[  485.530273][   T23] usb usb2-port1: attempt power cycle
[  485.960076][   T23] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  486.020783][   T23] usb 2-1: device descriptor read/8, error -71
[  486.308008][   T23] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  486.385091][   T23] usb 2-1: device descriptor read/8, error -71
[  486.468642][ T8523] kworker/u4:3: attempt to access beyond end of device
[  486.468642][ T8523] loop1: rw=1, sector=145, nr_sectors = 896 limit=128
[  486.543146][   T23] usb usb2-port1: unable to enumerate USB device
[  486.779659][ T9078] loop1: detected capacity change from 0 to 512
[  486.978422][ T9078] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.910: corrupted in-inode xattr: invalid ea_ino
[  487.066476][ T9082] ptrace attach of "./syz-executor exec"[5789] was attempted by ""[9082]
[  487.467699][ T9078] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.910: couldn't read orphan inode 15 (err -117)
[  487.511989][ T9078] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  487.579172][ T9078] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  487.946638][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  488.276761][ T9094] binder: 9092:9094 ioctl c018620c 200000000280 returned -22
[  488.486961][ T9096] loop1: detected capacity change from 0 to 512
[  488.543372][ T9096] EXT4-fs: Ignoring removed nobh option
[  488.651844][ T9096] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #3: comm syz.1.917: corrupted inode contents
[  488.862947][ T9096] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #3: comm syz.1.917: mark_inode_dirty error
[  489.695164][ T9096] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #3: comm syz.1.917: corrupted inode contents
[  489.708293][ T9096] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.917: mark_inode_dirty error
[  489.978665][ T9096] Quota error (device loop1): write_blk: dquota write failed
[  489.987233][ T9096] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  490.004079][ T9096] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.917: Failed to acquire dquot type 0
[  490.037736][ T9096] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.917: corrupted inode contents
[  490.057251][ T9096] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #16: comm syz.1.917: mark_inode_dirty error
[  490.085691][ T9096] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.917: corrupted inode contents
[  490.098698][ T9096] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.917: mark_inode_dirty error
[  490.115940][ T9096] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.917: corrupted inode contents
[  490.128896][ T9096] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  490.141003][ T9096] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.917: corrupted inode contents
[  490.160430][ T9096] EXT4-fs error (device loop1): ext4_truncate:4288: inode #16: comm syz.1.917: mark_inode_dirty error
[  490.267051][ T9096] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  490.285260][ T9096] EXT4-fs (loop1): 1 truncate cleaned up
[  490.309019][ T9096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  490.340618][ T9096] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  491.238167][ T9115] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  496.561304][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.931'.
[  496.768762][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  496.780837][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  496.792605][ T5802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  496.807931][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  496.826397][ T5802] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  496.834657][ T5802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  497.953712][ T9158] chnl_net:caif_netlink_parms(): no params data found
[  498.887232][ T5796] Bluetooth: hci4: command tx timeout
[  499.298443][ T9158] bridge0: port 1(bridge_slave_0) entered blocking state
[  499.321377][ T9158] bridge0: port 1(bridge_slave_0) entered disabled state
[  499.329429][ T9158] bridge_slave_0: entered allmulticast mode
[  499.513409][ T9158] bridge_slave_0: entered promiscuous mode
[  499.536802][ T9158] bridge0: port 2(bridge_slave_1) entered blocking state
[  499.544875][ T9158] bridge0: port 2(bridge_slave_1) entered disabled state
[  499.552726][ T9158] bridge_slave_1: entered allmulticast mode
[  499.560987][ T9158] bridge_slave_1: entered promiscuous mode
[  499.568139][ T9194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.941'.
[  499.641229][ T9158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  499.664151][ T9158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  499.720231][ T9158] team0: Port device team_slave_0 added
[  499.840654][ T9158] team0: Port device team_slave_1 added
[  499.894430][ T9158] batman_adv: batadv0: Adding interface: batadv_slave_0
[  499.908047][ T9158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  499.942145][ T9158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  500.659605][ T9198] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  500.669236][ T9198] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  500.679102][ T9198] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  500.810379][ T9158] batman_adv: batadv0: Adding interface: batadv_slave_1
[  500.817625][ T9158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  500.845192][ T9158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  500.949487][ T9158] hsr_slave_0: entered promiscuous mode
[  500.955235][ T5796] Bluetooth: hci4: command tx timeout
[  500.989463][ T9158] hsr_slave_1: entered promiscuous mode
[  501.013949][ T9158] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  501.022368][ T9158] Cannot create hsr debugfs directory
[  501.525425][ T9158] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  501.547082][ T9158] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  501.668483][ T9158] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  501.761534][ T9158] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  502.038789][ T9158] 8021q: adding VLAN 0 to HW filter on device bond0
[  502.084823][ T9158] 8021q: adding VLAN 0 to HW filter on device team0
[  502.102205][ T3458] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.109561][ T3458] bridge0: port 1(bridge_slave_0) entered forwarding state
[  502.148585][ T8523] bridge0: port 2(bridge_slave_1) entered blocking state
[  502.155905][ T8523] bridge0: port 2(bridge_slave_1) entered forwarding state
[  502.395990][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  502.409110][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  503.040317][ T5796] Bluetooth: hci4: command tx timeout
[  503.590164][ T9158] 8021q: adding VLAN 0 to HW filter on device batadv0
[  504.355289][ T9158] veth0_vlan: entered promiscuous mode
[  504.400965][ T9158] veth1_vlan: entered promiscuous mode
[  504.466784][ T9158] veth0_macvtap: entered promiscuous mode
[  504.518443][ T9158] veth1_macvtap: entered promiscuous mode
[  504.598584][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  504.616457][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.628150][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  504.736025][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.759023][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  504.788623][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.825522][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  504.859528][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.872251][ T9158] batman_adv: batadv0: Interface activated: batadv_slave_0
[  504.885852][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  504.898265][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.908753][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  504.920292][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.934604][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  504.946114][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.956844][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  505.142495][ T5796] Bluetooth: hci4: command tx timeout
[  505.185528][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.366976][ T9158] batman_adv: batadv0: Interface activated: batadv_slave_1
[  505.856283][ T9158] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  505.881197][ T9158] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  505.911920][ T9158] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  505.940108][ T9158] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  506.290724][ T8523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  506.328328][ T8523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  506.431979][ T3458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  506.484081][ T3458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  507.421355][ T9286] loop4: detected capacity change from 0 to 4096
[  510.064885][ T9322] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  511.372070][ T9330] loop4: detected capacity change from 0 to 32768
[  511.393229][ T9330] XFS: ikeep mount option is deprecated.
[  511.501150][ T9330] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  511.902714][ T9330] XFS (loop4): Ending clean mount
[  511.913564][ T9330] XFS (loop4): Quotacheck needed: Please wait.
[  512.005079][ T9330] XFS (loop4): Quotacheck: Done.
[  512.493985][ T9158] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  515.266568][ T9405] 9pnet_fd: Insufficient options for proto=fd
[  515.285589][ T9405] lo speed is unknown, defaulting to 1000
[  515.292790][ T9405] lo speed is unknown, defaulting to 1000
[  515.311111][ T9405] lo speed is unknown, defaulting to 1000
[  515.408550][ T9405] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98
[  515.654869][ T9405] lo speed is unknown, defaulting to 1000
[  515.675126][ T9405] lo speed is unknown, defaulting to 1000
[  515.722662][ T9405] lo speed is unknown, defaulting to 1000
[  515.739297][ T9405] lo speed is unknown, defaulting to 1000
[  515.754591][ T9405] lo speed is unknown, defaulting to 1000
[  517.721644][ T9423] siw: device registration error -23
[  518.989305][ T9435] netlink: 'syz.3.1019': attribute type 3 has an invalid length.
[  518.998686][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1019'.
[  519.096330][ T3458] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.320381][ T3458] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.682925][ T3458] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.206700][ T3458] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.570812][ T9454] siw: device registration error -23
[  520.731842][ T9458] loop4: detected capacity change from 0 to 2048
[  520.819353][ T9458] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  521.558540][ T9468] netlink: 'syz.2.1029': attribute type 3 has an invalid length.
[  521.629960][ T9468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1029'.
[  521.882109][ T9476] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1032'.
[  521.943836][ T9478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1032'.
[  522.122202][ T9481] loop4: detected capacity change from 0 to 512
[  522.492280][ T9481] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2244: inode #15: comm syz.4.1033: corrupted in-inode xattr: invalid ea_ino
[  522.565810][ T9481] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1033: couldn't read orphan inode 15 (err -117)
[  522.660306][ T9481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  522.869027][ T9481] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  523.559632][ T9158] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  523.923486][ T9508] siw: device registration error -23
[  524.337192][ T9516] netlink: 'syz.2.1040': attribute type 3 has an invalid length.
[  524.381767][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1040'.
[  524.902527][ T9530] loop4: detected capacity change from 0 to 512
[  525.016842][ T9530] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2244: inode #15: comm syz.4.1045: corrupted in-inode xattr: invalid ea_ino
[  525.089629][ T9530] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1045: couldn't read orphan inode 15 (err -117)
[  525.176700][ T9530] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  525.391992][ T9530] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  526.292595][ T9158] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  526.442900][ T9549] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  527.567658][ T3458] hsr_slave_0: left promiscuous mode
[  527.840332][ T3458] hsr_slave_1: left promiscuous mode
[  527.881668][ T3458] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  527.920123][ T3458] batman_adv: batadv0: Removing interface: batadv_slave_0
[  527.972721][ T3458] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  527.990080][ T3458] batman_adv: batadv0: Removing interface: batadv_slave_1
[  528.019029][ T3458] bridge_slave_1: left allmulticast mode
[  528.030069][ T3458] bridge_slave_1: left promiscuous mode
[  528.040688][ T3458] bridge0: port 2(bridge_slave_1) entered disabled state
[  528.080306][ T9565] netlink: 'syz.4.1051': attribute type 3 has an invalid length.
[  528.104773][ T9565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1051'.
[  528.121553][ T3458] bridge_slave_0: left allmulticast mode
[  528.127936][ T3458] bridge_slave_0: left promiscuous mode
[  528.151763][ T3458] bridge0: port 1(bridge_slave_0) entered disabled state
[  528.301726][ T3458] veth1_macvtap: left promiscuous mode
[  528.312797][ T9571] loop4: detected capacity change from 0 to 128
[  528.330353][ T3458] veth0_macvtap: left promiscuous mode
[  528.349587][ T3458] veth1_vlan: left promiscuous mode
[  530.164742][ T3458] veth0_vlan: left promiscuous mode
[  530.450077][ T5875] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  530.642255][ T5875] usb 5-1: device descriptor read/64, error -71
[  530.910108][ T5875] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  530.931111][ T9579] siw: device registration error -23
[  531.086239][ T5875] usb 5-1: device descriptor read/64, error -71
[  531.219109][ T5875] usb usb5-port1: attempt power cycle
[  533.027146][ T3458] team0 (unregistering): Port device team_slave_1 removed
[  533.317060][ T3458] team0 (unregistering): Port device team_slave_0 removed
[  533.503173][ T3458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  533.505281][ T9596] netlink: 'syz.3.1062': attribute type 3 has an invalid length.
[  533.570162][ T9596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1062'.
[  533.684880][ T3458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  533.904785][ T9592] loop4: detected capacity change from 0 to 32768
[  533.955308][ T9592] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.1061 (9592)
[  534.034709][ T9592] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  534.113241][ T9592] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  534.128577][ T9592] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  534.147798][ T9592] BTRFS info (device loop4): use zstd compression, level 3
[  534.155592][ T9592] BTRFS info (device loop4): using free space tree
[  534.349037][ T9592] BTRFS info (device loop4): enabling ssd optimizations
[  534.361749][ T9592] BTRFS info (device loop4): auto enabling async discard
[  534.475456][   T28] audit: type=1800 audit(1755286775.786:10): pid=9592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1061" name="file1" dev="loop4" ino=260 res=0 errno=0
[  535.257210][ T9158] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  536.868032][ T9635] loop4: detected capacity change from 0 to 128
[  538.772431][ T3458] bond0 (unregistering): Released all slaves
[  538.921013][ T5838] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  539.090166][ T5838] usb 5-1: device descriptor read/64, error -71
[  540.257124][ T9662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1074'.
[  541.070462][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1078'.
[  542.053015][ T9679] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  543.034623][ T9699] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  543.058042][ T9699] batadv_slave_0: entered promiscuous mode
[  543.655122][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1088'.
[  543.739179][ T9713] loop4: detected capacity change from 0 to 2048
[  543.787360][ T9713] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  543.824536][ T9716] netlink: 'syz.3.1087': attribute type 11 has an invalid length.
[  543.862053][ T9716] netlink: 'syz.3.1087': attribute type 21 has an invalid length.
[  546.899880][ T9746] ptrace attach of "./syz-executor exec"[5791] was attempted by ""[9746]
[  550.174898][ T9780] loop4: detected capacity change from 0 to 2048
[  550.271765][ T9780] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  551.142126][ T9775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1098'.
[  551.381194][ T9792] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1107'.
[  551.447649][ T9792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1107'.
[  551.679437][ T9801] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  551.686066][ T9801] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  551.772745][ T9804] overlayfs: failed to clone upperpath
[  552.028927][ T9801] vhci_hcd vhci_hcd.0: Device attached
[  552.220480][ T5838] vhci_hcd: vhci_device speed not set
[  552.396752][ T5838] usb 41-1: new full-speed USB device number 2 using vhci_hcd
[  552.538204][ T9801] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(10)
[  552.544980][ T9801] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  552.581788][ T9801] vhci_hcd vhci_hcd.0: Device attached
[  552.620295][ T9809] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  552.666798][ T9801] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(15)
[  552.673771][ T9801] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  552.712353][ T9801] vhci_hcd vhci_hcd.0: Device attached
[  552.726075][ T9809] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(18)
[  552.732779][ T9809] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  552.799978][ T9809] vhci_hcd vhci_hcd.0: Device attached
[  552.861269][ T9801] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(17)
[  552.868349][ T9801] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  552.919958][ T9801] vhci_hcd vhci_hcd.0: Device attached
[  552.953772][ T9801] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  552.987901][ T9801] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  553.011355][ T9801] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  553.110611][ T9826] vhci_hcd: connection closed
[  553.111480][ T9807] vhci_hcd: connection closed
[  553.116531][ T9802] vhci_hcd: connection reset by peer
[  553.117499][ T9814] vhci_hcd: connection closed
[  553.128706][ T7901] vhci_hcd: stop threads
[  553.149128][ T9819] vhci_hcd: connection closed
[  553.158769][ T7901] vhci_hcd: release socket
[  553.175500][ T7901] vhci_hcd: disconnect device
[  553.190493][ T7901] vhci_hcd: stop threads
[  553.195221][ T7901] vhci_hcd: release socket
[  553.212716][ T7901] vhci_hcd: disconnect device
[  553.235625][ T7901] vhci_hcd: stop threads
[  553.245765][ T7901] vhci_hcd: release socket
[  553.266092][ T7901] vhci_hcd: disconnect device
[  553.340039][ T7901] vhci_hcd: stop threads
[  553.387085][ T7901] vhci_hcd: release socket
[  553.399470][ T7901] vhci_hcd: disconnect device
[  553.407352][ T7901] vhci_hcd: stop threads
[  553.423886][ T7901] vhci_hcd: release socket
[  553.447003][ T7901] vhci_hcd: disconnect device
[  555.016200][ T9869] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1120'.
[  555.059111][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1120'.
[  556.067729][ T9891] loop4: detected capacity change from 0 to 2048
[  556.110934][ T9891] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  558.030020][ T5838] vhci_hcd: vhci_device speed not set
[  558.131765][ T9899] siw: device registration error -23
[  558.363285][ T9903] trusted_key: encrypted_key: insufficient parameters specified
[  558.742680][ T9896] loop4: detected capacity change from 0 to 32768
[  558.796357][ T9896] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  559.793236][ T9896] XFS (loop4): Ending clean mount
[  560.291899][ T9158] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  560.637997][ T9949] siw: device registration error -23
[  562.381957][ T9969] 9pnet_fd: p9_fd_create_unix (9969): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  563.224507][ T9966] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  563.860385][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  563.866950][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  564.065649][ T9997] siw: device registration error -23
[  569.295437][T10060] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1165'.
[  571.481036][ T5875] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  571.697859][ T5875] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  571.710970][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  571.725295][ T5875] usb 5-1: config 0 descriptor??
[  571.743699][ T5875] cp210x 5-1:0.0: cp210x converter detected
[  572.150246][ T5875] usb 5-1: cp210x converter now attached to ttyUSB0
[  572.619379][T10128] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1175'.
[  572.651285][T10128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1175'.
[  572.665336][ T5858] usb 5-1: USB disconnect, device number 7
[  572.702940][ T5858] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  572.746703][ T5858] cp210x 5-1:0.0: device disconnected
[  576.852713][T10164] siw: device registration error -23
[  577.203953][T10172] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1188'.
[  582.162945][T10209] loop4: detected capacity change from 0 to 32768
[  582.190380][T10209] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1195 (10209)
[  582.272537][T10209] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  582.304890][T10209] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  582.330109][T10209] BTRFS info (device loop4): force clearing of disk cache
[  582.351333][T10209] BTRFS info (device loop4): enabling auto defrag
[  582.358139][T10209] BTRFS info (device loop4): max_inline at 0
[  582.393454][T10209] BTRFS info (device loop4): enabling disk space caching
[  582.420021][T10209] BTRFS info (device loop4): disk space caching is enabled
[  582.507040][T10209] BTRFS info (device loop4): enabling ssd optimizations
[  582.563011][T10209] BTRFS info (device loop4): rebuilding free space tree
[  582.978041][T10209] BTRFS info (device loop4): disabling free space tree
[  582.992183][T10209] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  583.011436][T10209] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  584.405545][ T3419] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  584.468240][ T9158] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  586.112418][T10296] loop4: detected capacity change from 0 to 32768
[  588.408577][T10326] siw: device registration error -23
[  589.126889][T10339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1214'.
[  590.874413][T10370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1219'.
[  590.900576][T10370] overlay: Unknown parameter 'fscontext'
[  591.511082][T10381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1221'.
[  593.216377][T10342] syz.1.1213: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[  593.237773][T10387] loop4: detected capacity change from 0 to 32768
[  593.257381][T10387] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1222 (10387)
[  593.283791][T10342] CPU: 0 PID: 10342 Comm: syz.1.1213 Not tainted 6.6.102-syzkaller #0
[  593.292123][T10342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  593.302549][T10342] Call Trace:
[  593.305978][T10342]  <TASK>
[  593.309076][T10342]  dump_stack_lvl+0x16c/0x230
[  593.313906][T10342]  ? show_regs_print_info+0x20/0x20
[  593.319236][T10342]  ? load_image+0x3b0/0x3b0
[  593.323927][T10342]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  593.330489][T10342]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[  593.337366][T10342]  warn_alloc+0x210/0x300
[  593.341814][T10342]  ? zone_watermark_ok_safe+0x230/0x230
[  593.347650][T10342]  ? _raw_spin_unlock+0x28/0x40
[  593.352538][T10342]  __vmalloc_node_range+0x662/0x1320
[  593.358484][T10342]  ? free_vm_area+0x50/0x50
[  593.363042][T10342]  ? _raw_spin_unlock+0x28/0x40
[  593.368231][T10342]  ? __kasan_kmalloc+0x8f/0xa0
[  593.373073][T10342]  __vmalloc_node_range+0x568/0x1320
[  593.378699][T10342]  ? hash_netiface_create+0x361/0xff0
[  593.384441][T10342]  ? __asan_memset+0x22/0x40
[  593.389384][T10342]  ? free_vm_area+0x50/0x50
[  593.394212][T10342]  ? kvmalloc_node+0x70/0x180
[  593.398915][T10342]  ? rcu_is_watching+0x15/0xb0
[  593.403885][T10342]  ? kvmalloc_node+0x70/0x180
[  593.408580][T10342]  ? trace_kmalloc+0x1f/0xa0
[  593.413206][T10342]  kvmalloc_node+0x13f/0x180
[  593.417838][T10342]  ? hash_netiface_create+0x361/0xff0
[  593.423228][T10342]  hash_netiface_create+0x361/0xff0
[  593.428471][T10342]  ? __lock_acquire+0x7c80/0x7c80
[  593.433635][T10342]  ? __nla_parse+0x40/0x50
[  593.438444][T10342]  ? hash_netport6_gc+0x570/0x570
[  593.443534][T10342]  ip_set_create+0xa87/0x18e0
[  593.448343][T10342]  ? ip_set_create+0x4b2/0x18e0
[  593.453270][T10342]  ? ip_set_protocol+0x5d0/0x5d0
[  593.458360][T10342]  ? trace_contention_end+0x39/0xe0
[  593.463959][T10342]  nfnetlink_rcv_msg+0xb49/0x1130
[  593.469265][T10342]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  593.475712][T10342]  ? nfnetlink_rcv_msg+0x20e/0x1130
[  593.480963][T10342]  ? nfnetlink_unbind+0x160/0x160
[  593.486030][T10342]  ? __dev_queue_xmit+0x1a64/0x35a0
[  593.491522][T10342]  ? __netlink_deliver_tap+0x5ab/0x830
[  593.497091][T10342]  ? netlink_deliver_tap+0x19c/0x1b0
[  593.502679][T10342]  ? netlink_unicast+0x72c/0x8d0
[  593.507750][T10342]  ? netlink_sendmsg+0x8c1/0xbe0
[  593.512903][T10342]  ? ____sys_sendmsg+0x5bf/0x950
[  593.518212][T10342]  ? ___sys_sendmsg+0x220/0x290
[  593.523306][T10342]  ? __se_sys_sendmsg+0x1a5/0x270
[  593.528535][T10342]  ? do_syscall_64+0x55/0xb0
[  593.533420][T10342]  netlink_rcv_skb+0x216/0x480
[  593.538396][T10342]  ? nfnetlink_unbind+0x160/0x160
[  593.543607][T10342]  ? netlink_ack+0x1110/0x1110
[  593.548424][T10342]  ? apparmor_capable+0x137/0x1a0
[  593.553557][T10342]  ? bpf_lsm_capable+0x9/0x10
[  593.558393][T10342]  ? security_capable+0x89/0xb0
[  593.563443][T10342]  nfnetlink_rcv+0x274/0x2180
[  593.568259][T10342]  ? __local_bh_enable_ip+0x12e/0x1c0
[  593.573695][T10342]  ? lockdep_hardirqs_on+0x98/0x150
[  593.579272][T10342]  ? __local_bh_enable_ip+0x12e/0x1c0
[  593.584952][T10342]  ? _local_bh_enable+0xa0/0xa0
[  593.589834][T10342]  ? __dev_queue_xmit+0x245/0x35a0
[  593.595242][T10342]  ? nfnetlink_net_exit_batch+0xa0/0xa0
[  593.600989][T10342]  ? __dev_queue_xmit+0x245/0x35a0
[  593.606211][T10342]  ? ref_tracker_free+0x634/0x7d0
[  593.611275][T10342]  ? __copy_skb_header+0xa7/0x550
[  593.616653][T10342]  ? refcount_inc+0x70/0x70
[  593.621259][T10342]  ? __skb_clone+0x63/0x790
[  593.625909][T10342]  ? __skb_clone+0x480/0x790
[  593.630657][T10342]  ? __netlink_deliver_tap+0x7e8/0x830
[  593.636134][T10342]  ? netlink_deliver_tap+0x2e/0x1b0
[  593.641526][T10342]  ? __lock_acquire+0x7c80/0x7c80
[  593.646757][T10342]  ? netlink_deliver_tap+0x2e/0x1b0
[  593.652250][T10342]  netlink_unicast+0x751/0x8d0
[  593.657152][T10342]  netlink_sendmsg+0x8c1/0xbe0
[  593.661941][T10342]  ? netlink_getsockopt+0x580/0x580
[  593.667157][T10342]  ? aa_sock_msg_perm+0x94/0x150
[  593.672203][T10342]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  593.677550][T10342]  ? security_socket_sendmsg+0x80/0xa0
[  593.683117][T10342]  ? netlink_getsockopt+0x580/0x580
[  593.688420][T10342]  ____sys_sendmsg+0x5bf/0x950
[  593.693301][T10342]  ? __asan_memset+0x22/0x40
[  593.697943][T10342]  ? __sys_sendmsg_sock+0x30/0x30
[  593.703169][T10342]  ? __import_iovec+0x5f2/0x860
[  593.708250][T10342]  ? import_iovec+0x73/0xa0
[  593.713042][T10342]  ___sys_sendmsg+0x220/0x290
[  593.718111][T10342]  ? __sys_sendmsg+0x270/0x270
[  593.722938][T10342]  __se_sys_sendmsg+0x1a5/0x270
[  593.728071][T10342]  ? __x64_sys_sendmsg+0x80/0x80
[  593.733043][T10342]  ? lockdep_hardirqs_on+0x98/0x150
[  593.738371][T10342]  do_syscall_64+0x55/0xb0
[  593.742811][T10342]  ? clear_bhb_loop+0x40/0x90
[  593.747773][T10342]  ? clear_bhb_loop+0x40/0x90
[  593.752945][T10342]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  593.759383][T10342] RIP: 0033:0x7fd802d8ebe9
[  593.763939][T10342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  593.783851][T10342] RSP: 002b:00007fd800fd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  593.792374][T10342] RAX: ffffffffffffffda RBX: 00007fd802fb6180 RCX: 00007fd802d8ebe9
[  593.800363][T10342] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006
[  593.808696][T10342] RBP: 00007fd802e11e19 R08: 0000000000000000 R09: 0000000000000000
[  593.817037][T10342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  593.825765][T10342] R13: 00007fd802fb6218 R14: 00007fd802fb6180 R15: 00007ffdad430928
[  593.834160][T10342]  </TASK>
[  593.860079][T10342] Mem-Info:
[  593.863674][T10342] active_anon:13739 inactive_anon:0 isolated_anon:0
[  593.863674][T10342]  active_file:1481 inactive_file:40207 isolated_file:0
[  593.863674][T10342]  unevictable:768 dirty:157 writeback:0
[  593.863674][T10342]  slab_reclaimable:10526 slab_unreclaimable:99302
[  593.863674][T10342]  mapped:29424 shmem:8347 pagetables:645
[  593.863674][T10342]  sec_pagetables:0 bounce:0
[  593.863674][T10342]  kernel_misc_reclaimable:0
[  593.863674][T10342]  free:1307880 free_pcp:11863 free_cma:0
[  593.938132][T10387] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  593.948993][T10342] Node 0 active_anon:54956kB inactive_anon:0kB active_file:5924kB inactive_file:160624kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117696kB dirty:628kB writeback:0kB shmem:31852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11280kB pagetables:2580kB sec_pagetables:0kB all_unreclaimable? no
[  593.992150][T10387] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  594.036521][T10342] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  594.070366][T10342] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  594.106215][T10387] BTRFS info (device loop4): enabling disk space caching
[  594.113944][T10387] BTRFS info (device loop4): allowing degraded mounts
[  594.124864][T10387] BTRFS info (device loop4): force zlib compression, level 3
[  594.132788][T10342] lowmem_reserve[]: 0 2525 2526 2526 2526
[  594.139051][T10387] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  594.157810][T10342] Node 0 DMA32 free:1317620kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:55508kB inactive_anon:0kB active_file:5924kB inactive_file:159512kB unevictable:1536kB writepending:628kB present:3129332kB managed:2589596kB mlocked:0kB bounce:0kB free_pcp:27020kB local_pcp:5848kB free_cma:0kB
[  594.194861][T10387] BTRFS info (device loop4): use zstd compression, level 3
[  594.209976][T10387] BTRFS info (device loop4): force clearing of disk cache
[  594.227844][T10387] BTRFS info (device loop4): max_inline at 0
[  594.242729][T10342] lowmem_reserve[]: 0 0 1 1 1
[  594.247691][T10387] BTRFS info (device loop4): disk space caching is enabled
[  594.259999][T10342] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  594.344866][T10342] lowmem_reserve[]: 0 0 0 0 0
[  594.359389][T10342] Node 1 Normal free:3897516kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20736kB local_pcp:8672kB free_cma:0kB
[  594.470892][T10342] lowmem_reserve[]: 0 0 0 0 0
[  594.476088][T10387] BTRFS info (device loop4): enabling ssd optimizations
[  594.510054][T10342] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  594.575331][T10342] Node 0 DMA32: 36*4kB (ME) 31*8kB (UE) 12*16kB (ME) 50*32kB (UE) 41*64kB (UME) 39*128kB (UME) 26*256kB (UME) 24*512kB (UME) 6*1024kB (UM) 6*2048kB (UM) 312*4096kB (UM) = 1325128kB
[  594.594384][T10387] BTRFS info (device loop4): rebuilding free space tree
[  594.669063][T10387] BTRFS info (device loop4): disabling free space tree
[  594.676374][T10342] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB
[  594.697129][T10387] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  594.709332][T10342] Node 1 Normal: 235*4kB (UE) 52*8kB (UME) 40*16kB (UME) 71*32kB (UME) 20*64kB (UE) 4*128kB (UM) 1*256kB (U) 2*512kB (UM) 1*1024kB (U) 1*2048kB (U) 949*4096kB (ME) = 3897516kB
[  594.739978][T10387] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  594.758818][T10342] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  594.793513][T10342] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  594.820009][T10342] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  594.843764][T10342] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  594.862723][T10342] 53109 total pagecache pages
[  594.870596][T10342] 0 pages in swap cache
[  594.876090][ T9158] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  594.900087][T10342] Free swap  = 124728kB
[  594.914125][T10342] Total swap = 124996kB
[  594.918797][T10342] 2097051 pages RAM
[  594.933239][T10342] 0 pages HighMem/MovableOnly
[  594.938007][T10342] 416138 pages reserved
[  594.952755][T10342] 0 pages cma reserved
[  595.038915][T10355] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop4 scanned by udevd (10355)
[  595.208414][T10427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1225'.
[  602.230033][T10468] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1236'.
[  603.338881][T10462] loop4: detected capacity change from 0 to 32768
[  603.836481][T10479] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1241'.
[  604.071811][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'.
[  604.801041][T10475] loop4: detected capacity change from 0 to 32768
[  604.887564][T10475] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  605.216314][T10475] XFS (loop4): Ending clean mount
[  606.367020][T10514] overlayfs: missing 'lowerdir'
[  606.466354][T10521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1250'.
[  606.807329][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1253'.
[  606.841806][ T9158] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  607.135619][T10527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1255'.
[  607.216900][T10530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1255'.
[  608.660447][T10547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1263'.
[  608.802511][T10553] loop4: detected capacity change from 0 to 128
[  609.420046][T10556] siw: device registration error -23
[  614.500236][T10614] loop4: detected capacity change from 0 to 128
[  617.553418][ T3480] kworker/u4:11: attempt to access beyond end of device
[  617.553418][ T3480] loop4: rw=1, sector=145, nr_sectors = 896 limit=128
[  617.843735][T10630] loop4: detected capacity change from 0 to 256
[  620.852122][T10656] loop4: detected capacity change from 0 to 128
[  622.550020][T10652] Bluetooth: hci4: command 0x0406 tx timeout
[  624.027964][ T3480] kworker/u4:11: attempt to access beyond end of device
[  624.027964][ T3480] loop4: rw=1, sector=145, nr_sectors = 896 limit=128
[  624.696819][T10683] siw: device registration error -23
[  625.289658][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  625.305279][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  625.414108][T10693] loop4: detected capacity change from 0 to 2048
[  625.459249][T10693] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  628.149189][T10699] netlink: 'syz.2.1311': attribute type 4 has an invalid length.
[  629.974407][T10724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1319'.
[  630.723298][T10734] loop4: detected capacity change from 0 to 512
[  630.741237][T10734] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2244: inode #15: comm syz.4.1323: corrupted in-inode xattr: invalid ea_ino
[  630.759140][T10734] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1323: couldn't read orphan inode 15 (err -117)
[  630.777268][T10734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  630.822518][T10734] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  631.253721][T10747] syz.1.1326 uses obsolete (PF_INET,SOCK_PACKET)
[  632.255779][ T9158] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  632.373536][T10754] siw: device registration error -23
[  632.385800][T10756] netlink: 'syz.3.1329': attribute type 4 has an invalid length.
[  633.259718][T10775] loop4: detected capacity change from 0 to 8
[  633.351979][T10775] Major/Minor mismatch, trying to mount newer 4100.0 filesystem
[  633.371406][T10775] Please update your kernel
[  634.458417][T10790] netlink: 'syz.2.1341': attribute type 4 has an invalid length.
[  634.589071][T10793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1343'.
[  634.937008][T10801] loop4: detected capacity change from 0 to 2048
[  634.958427][T10801] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  636.174722][T10807] loop4: detected capacity change from 0 to 2048
[  636.194368][T10807] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  638.096154][T10817] netlink: 'syz.1.1351': attribute type 4 has an invalid length.
[  638.292655][T10822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1352'.
[  638.347899][T10825] gtp0: entered promiscuous mode
[  638.864153][T10833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1356'.
[  640.655643][T10852] netlink: 'syz.1.1361': attribute type 4 has an invalid length.
[  640.809025][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1362'.
[  640.958565][T10856] loop4: detected capacity change from 0 to 4096
[  642.099426][T10856] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  642.302155][T10856] ntfs3: loop4: try to read out of volume at offset 0x3fffffc7000
[  646.495268][T10904] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1374'.
[  648.073429][T10924] loop4: detected capacity change from 0 to 2048
[  648.125436][T10924] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  653.010625][T10957] loop4: detected capacity change from 0 to 2048
[  653.034167][T10957] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  653.079528][T10958] siw: device registration error -23
[  655.383386][T10979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1396'.
[  657.309320][T10982] warn_alloc: 3 callbacks suppressed
[  657.309344][T10982] syz.4.1397: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1
[  657.392763][T10982] CPU: 0 PID: 10982 Comm: syz.4.1397 Not tainted 6.6.102-syzkaller #0
[  657.401067][T10982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  657.411458][T10982] Call Trace:
[  657.414960][T10982]  <TASK>
[  657.418195][T10982]  dump_stack_lvl+0x16c/0x230
[  657.422919][T10982]  ? show_regs_print_info+0x20/0x20
[  657.428162][T10982]  ? load_image+0x3b0/0x3b0
[  657.432936][T10982]  ? __rcu_read_unlock+0x7c/0xd0
[  657.438344][T10982]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  657.444882][T10982]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[  657.451704][T10982]  warn_alloc+0x210/0x300
[  657.456328][T10982]  ? zone_watermark_ok_safe+0x230/0x230
[  657.462425][T10982]  ? _raw_spin_unlock+0x28/0x40
[  657.468013][T10982]  __vmalloc_node_range+0x662/0x1320
[  657.473419][T10982]  ? free_vm_area+0x50/0x50
[  657.477991][T10982]  ? _raw_spin_unlock+0x28/0x40
[  657.483181][T10982]  ? __kasan_kmalloc+0x8f/0xa0
[  657.488184][T10982]  __vmalloc_node_range+0x568/0x1320
[  657.493541][T10982]  ? hash_netiface_create+0x361/0xff0
[  657.498963][T10982]  ? __asan_memset+0x22/0x40
[  657.503706][T10982]  ? free_vm_area+0x50/0x50
[  657.508601][T10982]  ? kvmalloc_node+0x70/0x180
[  657.513404][T10982]  ? rcu_is_watching+0x15/0xb0
[  657.518189][T10982]  ? kvmalloc_node+0x70/0x180
[  657.523245][T10982]  ? trace_kmalloc+0x1f/0xa0
[  657.527965][T10982]  kvmalloc_node+0x13f/0x180
[  657.532766][T10982]  ? hash_netiface_create+0x361/0xff0
[  657.538236][T10982]  hash_netiface_create+0x361/0xff0
[  657.543545][T10982]  ? __lock_acquire+0x7c80/0x7c80
[  657.548608][T10982]  ? __nla_parse+0x40/0x50
[  657.553300][T10982]  ? hash_netport6_gc+0x570/0x570
[  657.558594][T10982]  ip_set_create+0xa87/0x18e0
[  657.563566][T10982]  ? ip_set_create+0x4b2/0x18e0
[  657.568544][T10982]  ? ip_set_protocol+0x5d0/0x5d0
[  657.573564][T10982]  ? trace_contention_end+0x39/0xe0
[  657.578825][T10982]  nfnetlink_rcv_msg+0xb49/0x1130
[  657.583964][T10982]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  657.590220][T10982]  ? nfnetlink_rcv_msg+0x20e/0x1130
[  657.595876][T10982]  ? nfnetlink_unbind+0x160/0x160
[  657.600948][T10982]  ? __dev_queue_xmit+0x1a64/0x35a0
[  657.606289][T10982]  ? __netlink_deliver_tap+0x5ab/0x830
[  657.611933][T10982]  ? netlink_deliver_tap+0x19c/0x1b0
[  657.617613][T10982]  ? netlink_unicast+0x72c/0x8d0
[  657.622596][T10982]  ? netlink_sendmsg+0x8c1/0xbe0
[  657.627735][T10982]  ? ____sys_sendmsg+0x5bf/0x950
[  657.633050][T10982]  ? ___sys_sendmsg+0x220/0x290
[  657.638200][T10982]  ? __se_sys_sendmsg+0x1a5/0x270
[  657.643429][T10982]  ? do_syscall_64+0x55/0xb0
[  657.648071][T10982]  netlink_rcv_skb+0x216/0x480
[  657.652864][T10982]  ? nfnetlink_unbind+0x160/0x160
[  657.658362][T10982]  ? netlink_ack+0x1110/0x1110
[  657.663154][T10982]  ? apparmor_capable+0x137/0x1a0
[  657.668200][T10982]  ? bpf_lsm_capable+0x9/0x10
[  657.672923][T10982]  ? security_capable+0x89/0xb0
[  657.677897][T10982]  nfnetlink_rcv+0x274/0x2180
[  657.682606][T10982]  ? __local_bh_enable_ip+0x12e/0x1c0
[  657.688004][T10982]  ? lockdep_hardirqs_on+0x98/0x150
[  657.693595][T10982]  ? __local_bh_enable_ip+0x12e/0x1c0
[  657.699004][T10982]  ? _local_bh_enable+0xa0/0xa0
[  657.704042][T10982]  ? __dev_queue_xmit+0x245/0x35a0
[  657.709189][T10982]  ? nfnetlink_net_exit_batch+0xa0/0xa0
[  657.714758][T10982]  ? __dev_queue_xmit+0x245/0x35a0
[  657.719902][T10982]  ? ref_tracker_free+0x634/0x7d0
[  657.724981][T10982]  ? __copy_skb_header+0xa7/0x550
[  657.730015][T10982]  ? refcount_inc+0x70/0x70
[  657.734520][T10982]  ? __skb_clone+0x63/0x790
[  657.739103][T10982]  ? __skb_clone+0x480/0x790
[  657.743737][T10982]  ? __netlink_deliver_tap+0x7e8/0x830
[  657.749462][T10982]  ? netlink_deliver_tap+0x2e/0x1b0
[  657.754786][T10982]  ? __lock_acquire+0x7c80/0x7c80
[  657.759952][T10982]  ? netlink_deliver_tap+0x2e/0x1b0
[  657.765534][T10982]  netlink_unicast+0x751/0x8d0
[  657.770427][T10982]  netlink_sendmsg+0x8c1/0xbe0
[  657.775253][T10982]  ? netlink_getsockopt+0x580/0x580
[  657.780565][T10982]  ? aa_sock_msg_perm+0x94/0x150
[  657.785535][T10982]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  657.790829][T10982]  ? security_socket_sendmsg+0x80/0xa0
[  657.796404][T10982]  ? netlink_getsockopt+0x580/0x580
[  657.801702][T10982]  ____sys_sendmsg+0x5bf/0x950
[  657.806831][T10982]  ? __asan_memset+0x22/0x40
[  657.811691][T10982]  ? __sys_sendmsg_sock+0x30/0x30
[  657.816920][T10982]  ? __import_iovec+0x5f2/0x860
[  657.822151][T10982]  ? import_iovec+0x73/0xa0
[  657.826670][T10982]  ___sys_sendmsg+0x220/0x290
[  657.831359][T10982]  ? __sys_sendmsg+0x270/0x270
[  657.836174][T10982]  __se_sys_sendmsg+0x1a5/0x270
[  657.841101][T10982]  ? __x64_sys_sendmsg+0x80/0x80
[  657.846572][T10982]  ? lockdep_hardirqs_on+0x98/0x150
[  657.851813][T10982]  do_syscall_64+0x55/0xb0
[  657.856283][T10982]  ? clear_bhb_loop+0x40/0x90
[  657.861105][T10982]  ? clear_bhb_loop+0x40/0x90
[  657.865923][T10982]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  657.871929][T10982] RIP: 0033:0x7fc88858ebe9
[  657.876392][T10982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  657.896417][T10982] RSP: 002b:00007fc889443038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  657.905071][T10982] RAX: ffffffffffffffda RBX: 00007fc8887b5fa0 RCX: 00007fc88858ebe9
[  657.913207][T10982] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003
[  657.921450][T10982] RBP: 00007fc888611e19 R08: 0000000000000000 R09: 0000000000000000
[  657.929624][T10982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  657.937737][T10982] R13: 00007fc8887b6038 R14: 00007fc8887b5fa0 R15: 00007ffdf7e79998
[  657.945991][T10982]  </TASK>
[  657.964920][T10982] Mem-Info:
[  657.968150][T10982] active_anon:8683 inactive_anon:0 isolated_anon:0
[  657.968150][T10982]  active_file:1481 inactive_file:40108 isolated_file:0
[  657.968150][T10982]  unevictable:768 dirty:141 writeback:0
[  657.968150][T10982]  slab_reclaimable:10515 slab_unreclaimable:95953
[  657.968150][T10982]  mapped:27314 shmem:4252 pagetables:656
[  657.968150][T10982]  sec_pagetables:0 bounce:0
[  657.968150][T10982]  kernel_misc_reclaimable:0
[  657.968150][T10982]  free:1312693 free_pcp:15010 free_cma:0
[  658.042060][T10982] Node 0 active_anon:34832kB inactive_anon:0kB active_file:5924kB inactive_file:160228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:109256kB dirty:564kB writeback:0kB shmem:15472kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11336kB pagetables:2724kB sec_pagetables:0kB all_unreclaimable? no
[  658.129874][T10982] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  658.162636][T10982] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  658.197727][T10982] lowmem_reserve[]: 0 2525 2526 2526 2526
[  658.205200][T10982] Node 0 DMA32 free:1357076kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:34912kB inactive_anon:0kB active_file:5924kB inactive_file:158916kB unevictable:1536kB writepending:572kB present:3129332kB managed:2589596kB mlocked:0kB bounce:0kB free_pcp:19232kB local_pcp:2392kB free_cma:0kB
[  658.242667][T10982] lowmem_reserve[]: 0 0 1 1 1
[  658.247987][T10982] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  658.307887][T10982] lowmem_reserve[]: 0 0 0 0 0
[  658.316596][T10982] Node 1 Normal free:3897516kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20768kB local_pcp:12096kB free_cma:0kB
[  658.351261][T10982] lowmem_reserve[]: 0 0 0 0 0
[  658.356207][T10982] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  658.373700][T10982] Node 0 DMA32: 277*4kB (ME) 379*8kB (UME) 172*16kB (ME) 179*32kB (UME) 68*64kB (UME) 44*128kB (UME) 43*256kB (UME) 25*512kB (UME) 9*1024kB (UM) 11*2048kB (UM) 312*4096kB (UM) = 1356108kB
[  658.403433][T10982] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB
[  658.418441][T10982] Node 1 Normal: 235*4kB (UE) 52*8kB (UME) 40*16kB (UME) 71*32kB (UME) 20*64kB (UE) 4*128kB (UM) 1*256kB (U) 2*512kB (UM) 1*1024kB (U) 1*2048kB (U) 949*4096kB (ME) = 3897516kB
[  658.456258][T10982] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  658.475649][T10982] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  658.487495][T10982] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  658.507070][T10982] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  658.588181][T10982] 45773 total pagecache pages
[  658.599928][T10982] 0 pages in swap cache
[  658.604576][T10982] Free swap  = 124728kB
[  658.610202][T10982] Total swap = 124996kB
[  658.617309][T10982] 2097051 pages RAM
[  658.622732][T10982] 0 pages HighMem/MovableOnly
[  658.628063][T10982] 416138 pages reserved
[  658.632761][T10982] 0 pages cma reserved
[  663.310828][T11053] orangefs_mount: mount request failed with -4
[  663.578987][T11059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1418'.
[  663.807639][T11063] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1419'.
[  663.859888][T11065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1419'.
[  665.963747][ T5858] libceph: connect (1)[c::]:6789 error -101
[  665.973778][ T5858] libceph: mon0 (1)[c::]:6789 connect error
[  665.991086][ T5858] libceph: connect (1)[c::]:6789 error -101
[  665.997785][ T5858] libceph: mon0 (1)[c::]:6789 connect error
[  666.068040][T11077] ceph: No mds server is up or the cluster is laggy
[  666.264229][ T5831] libceph: connect (1)[c::]:6789 error -101
[  666.391652][ T5831] libceph: mon0 (1)[c::]:6789 connect error
[  667.500919][T11101] loop4: detected capacity change from 0 to 2048
[  667.532903][T11101] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  667.552597][T11106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1431'.
[  670.063780][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1436'.
[  672.374697][T11140] loop4: detected capacity change from 0 to 32768
[  672.583582][T11140] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  672.660015][T11140] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  672.846320][T11140] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  672.898628][    T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  672.908172][    T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  673.039974][    T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 131ms
[  673.114512][    T9] gfs2: fsid=syz:syz.0: jid=0: Done
[  673.132546][T11140] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  675.285882][T11212] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1462'.
[  676.616688][T11229] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1472'.
[  676.767651][T11233] loop4: detected capacity change from 0 to 128
[  678.602901][ T5858] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  679.440306][ T5858] usb 5-1: Using ep0 maxpacket: 32
[  680.067415][ T5858] usb 5-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config
[  680.108268][ T5858] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  680.270836][ T5858] usb 5-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[  680.392502][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  680.494836][ T5858] usb 5-1: Product: syz
[  680.570672][ T5858] usb 5-1: Manufacturer: syz
[  680.639501][ T5858] usb 5-1: SerialNumber: syz
[  680.912464][ T5858] usb 5-1: config 0 descriptor??
[  681.790268][  T788] usb 5-1: USB disconnect, device number 8
[  681.862762][ T3458] kworker/u4:9: attempt to access beyond end of device
[  681.862762][ T3458] loop4: rw=1, sector=145, nr_sectors = 896 limit=128
[  682.108162][T11267] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1481'.
[  684.558678][T11296] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1491'.
[  685.173219][T11304] loop4: detected capacity change from 0 to 1024
[  686.704307][T11299] bridge0: port 2(bridge_slave_1) entered disabled state
[  686.712719][T11299] bridge0: port 1(bridge_slave_0) entered disabled state
[  686.738946][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  686.750060][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  686.883385][ T1132] hfsplus: b-tree write err: -5, ino 4
[  688.105028][T11348] loop4: detected capacity change from 0 to 2048
[  688.128739][T11348] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  688.473795][T11299] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  689.116203][T11299] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  689.796365][T11299] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  689.806023][T11299] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  689.815125][T11299] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  689.824429][T11299] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  689.949547][  T788] lo speed is unknown, defaulting to 1000
[  689.990224][T11357] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1505'.
[  689.999839][T11357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1505'.
[  690.034471][T11358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1505'.
[  690.534194][T11367] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  690.705109][T11367] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  690.983397][T11367] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  691.023446][T11380] netlink: 'syz.4.1513': attribute type 4 has an invalid length.
[  691.219601][T11367] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  691.541676][T11367] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  691.626184][T11367] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  691.716128][T11367] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  691.749094][T11367] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  692.252327][T11383] loop4: detected capacity change from 0 to 32768
[  692.510977][T11383] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1514 (11383)
[  693.097194][T11383] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  693.120226][T11383] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  693.150069][T11383] BTRFS info (device loop4): enabling auto defrag
[  693.172992][T11383] BTRFS info (device loop4): doing ref verification
[  693.196097][T11383] BTRFS info (device loop4): use no compression
[  693.218912][T11383] BTRFS info (device loop4): force clearing of disk cache
[  693.234550][T11383] BTRFS info (device loop4): use zlib compression, level 3
[  693.250061][T11383] BTRFS info (device loop4): max_inline at 4096
[  693.264888][T11383] BTRFS info (device loop4): disabling free space tree
[  693.335713][T11383] BTRFS info (device loop4): enabling ssd optimizations
[  693.350086][T11383] BTRFS info (device loop4): auto enabling async discard
[  693.372200][T11383] BTRFS info (device loop4): rebuilding free space tree
[  693.455264][T11383] BTRFS info (device loop4): disabling free space tree
[  693.477599][T11383] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  693.501863][T11383] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  693.603670][T11422] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1520'.
[  693.641660][T11422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1520'.
[  694.591368][T11430] BTRFS info (device loop4): balance: start -d -m
[  694.859539][T11430] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata
[  695.631123][T11430] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata
[  695.900317][T11430] BTRFS info (device loop4): balance: canceled
[  696.490593][ T9158] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  703.047034][T10652] Bluetooth: hci4: command 0x0406 tx timeout
[  703.545997][T11507] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  703.554260][T11507] IPv6: NLM_F_CREATE should be set when creating new route
[  703.760442][T11510] loop4: detected capacity change from 0 to 2048
[  703.798353][T11510] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  707.053519][T11531] loop4: detected capacity change from 0 to 1024
[  708.078956][   T59] hfsplus: b-tree write err: -5, ino 4
[  708.209320][T11541] netlink: 'syz.4.1550': attribute type 4 has an invalid length.
[  709.259049][T11545] loop4: detected capacity change from 0 to 2048
[  709.308141][T11545] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  711.253434][T11563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1556'.
[  711.426000][T11569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1556'.
[  712.685244][T11579] netlink: 'syz.3.1560': attribute type 4 has an invalid length.
[  712.984935][T11334] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  713.152157][T11591] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  713.203980][T11585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1564'.
[  713.213890][T11334] usb 5-1: Using ep0 maxpacket: 32
[  713.227464][T11334] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  713.237690][T11334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  713.283823][T11334] usb 5-1: config 0 descriptor??
[  713.325833][T11334] gspca_main: nw80x-2.14.0 probing 055f:d001
[  713.861212][T11334] gspca_nw80x: reg_w err -110
[  713.930118][T11334] nw80x: probe of 5-1:0.0 failed with error -110
[  714.327351][T11611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1570'.
[  714.412521][T11613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1570'.
[  715.140917][T11618] netlink: 'syz.1.1571': attribute type 4 has an invalid length.
[  715.697228][T11334] usb 5-1: USB disconnect, device number 9
[  718.681348][T11651] netlink: 'syz.4.1581': attribute type 4 has an invalid length.
[  719.007506][T11650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1582'.
[  719.104802][T11653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1582'.
[  720.418684][T11661] loop4: detected capacity change from 0 to 8192
[  721.613811][T11689] netlink: 'syz.4.1592': attribute type 4 has an invalid length.
[  723.081289][T11706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1597'.
[  727.389366][T11744] loop4: detected capacity change from 0 to 32768
[  727.491783][T11744] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  728.500753][   T28] audit: type=1800 audit(1755286969.756:11): pid=11765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1608" name="file1" dev="loop4" ino=17059 res=0 errno=0
[  728.994045][ T9158] ocfs2: Unmounting device (7,4) on (node local)
[  729.429010][T11772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1613'.
[  729.614369][T11778] netlink: 'syz.1.1618': attribute type 4 has an invalid length.
[  730.046781][T11786] siw: device registration error -23
[  731.170150][T11803] netlink: 'syz.4.1628': attribute type 4 has an invalid length.
[  732.291358][T11813] siw: device registration error -23
[  734.711363][T11334] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  734.911518][T11334] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  734.926712][T11334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  735.170378][T11334] usb 5-1: config 0 descriptor??
[  735.184370][T11334] cp210x 5-1:0.0: cp210x converter detected
[  735.520026][T11334] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -32
[  735.528532][T11334] cp210x 5-1:0.0: querying part number failed
[  735.546440][T11334] usb 5-1: cp210x converter now attached to ttyUSB0
[  737.397286][   T27] usb 5-1: USB disconnect, device number 10
[  737.418855][   T27] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  737.450085][   T27] cp210x 5-1:0.0: device disconnected
[  738.713130][T11888] loop4: detected capacity change from 0 to 8192
[  738.852174][T11888]  loop4: p1 p2[DM] p4
[  738.856739][T11888] loop4: p1 size 196608 extends beyond EOD, truncated
[  738.866014][T11888] loop4: p2 start 4292936063 is beyond EOD, truncated
[  738.874129][T11888] loop4: p4 size 50331648 extends beyond EOD, truncated
[  739.786744][T11555] udevd[11555]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  739.800304][T11493] udevd[11493]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  740.919512][T11908] loop4: detected capacity change from 0 to 2048
[  740.964491][T11908] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  743.137824][T11925] loop4: detected capacity change from 0 to 2048
[  743.442873][T11925] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  745.463595][T11944] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1670'.
[  745.507248][T11944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1670'.
[  745.587190][T11948] netlink: 'syz.4.1672': attribute type 4 has an invalid length.
[  746.092710][T11954] loop4: detected capacity change from 0 to 2048
[  746.164152][T11954] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  747.140796][T11958] siw: device registration error -23
[  748.277139][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  748.283836][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  748.840265][T11979] loop4: detected capacity change from 0 to 8192
[  748.887335][T11980] netlink: 'syz.1.1681': attribute type 4 has an invalid length.
[  748.932416][T11979]  loop4: p1 p2[DM] p4
[  748.936882][T11979] loop4: p1 size 196608 extends beyond EOD, truncated
[  748.948516][T11979] loop4: p2 start 4292936063 is beyond EOD, truncated
[  748.956901][T11979] loop4: p4 size 50331648 extends beyond EOD, truncated
[  749.616251][ T9158] __loop_clr_fd: partition scan of loop4 failed (rc=-16)
[  749.765252][T11493] I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  749.797390][T11493] I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  749.797903][T11555] I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  749.809890][T11493] Buffer I/O error on dev loop4p1, logical block 1008, async page read
[  749.841953][T11555] I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  749.865357][T11555] Buffer I/O error on dev loop4p4, logical block 1008, async page read
[  749.905038][T11994] siw: device registration error -23
[  750.014611][T11555] udevd[11555]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  750.065302][T11493] udevd[11493]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  750.163536][T11996] loop4: detected capacity change from 0 to 2048
[  750.212642][T11996] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  753.997446][T12024] loop4: detected capacity change from 0 to 1024
[  754.969217][ T3419] hfsplus: b-tree write err: -5, ino 4
[  760.986450][T12087] loop4: detected capacity change from 0 to 2048
[  761.034250][T12087] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  762.799311][T12102] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  762.858470][T12105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1719'.
[  762.955057][T12107] loop4: detected capacity change from 0 to 1024
[  764.059082][ T1132] hfsplus: b-tree write err: -5, ino 4
[  764.603902][  T788] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  764.624301][T12130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1727'.
[  764.812711][  T788] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  764.845990][  T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  764.879690][  T788] usb 5-1: config 0 descriptor??
[  764.893650][  T788] cp210x 5-1:0.0: cp210x converter detected
[  765.108964][  T788] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121
[  765.127758][  T788] cp210x 5-1:0.0: querying part number failed
[  765.156825][  T788] usb 5-1: cp210x converter now attached to ttyUSB0
[  765.550888][T12144] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  765.563271][T12147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1731'.
[  767.376423][T11319] usb 5-1: USB disconnect, device number 11
[  767.412971][T11319] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  767.459924][T11319] cp210x 5-1:0.0: device disconnected
[  767.545889][T12170] loop4: detected capacity change from 0 to 2048
[  767.608713][T12170] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  767.753566][T12174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1741'.
[  768.515359][T12182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1743'.
[  768.615682][T12186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1744'.
[  769.750793][T12185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  771.223786][T12217] loop4: detected capacity change from 0 to 2048
[  771.265876][T12217] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  774.113638][T12235] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  774.183433][T12237] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1758'.
[  774.225602][T12239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1758'.
[  777.001736][T12274] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1769'.
[  777.071002][T12274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1769'.
[  777.910622][T12280] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  779.955782][T12306] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1780'.
[  779.980897][T12306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1780'.
[  780.547564][T12320] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  782.345909][T12335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1790'.
[  782.535389][T12343] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1791'.
[  782.560927][T12343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1791'.
[  782.980432][T12350] loop4: detected capacity change from 0 to 2048
[  783.009341][T12350] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  784.818820][T12362] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  785.037043][T12371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1802'.
[  785.250270][T12380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1804'.
[  785.344233][T12384] loop4: detected capacity change from 0 to 128
[  786.894829][T12406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  787.209516][T12419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1818'.
[  787.576489][T12427] netlink: 'syz.1.1821': attribute type 10 has an invalid length.
[  787.590286][T12427] syz_tun: entered promiscuous mode
[  790.116437][T12453] loop4: detected capacity change from 0 to 32768
[  790.174747][T12454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1827'.
[  790.188780][T12453]  loop4: p9 p11 p16
[  790.610631][T12464] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  790.942319][T12322] udevd[12322]: inotify_add_watch(7, /dev/loop4p9, 10) failed: No such file or directory
[  791.024541][T12474] udevd[12474]: inotify_add_watch(7, /dev/loop4p11, 10) failed: No such file or directory
[  791.070785][T12475] udevd[12475]: inotify_add_watch(7, /dev/loop4p16, 10) failed: No such file or directory
[  793.638031][T12483] loop4: detected capacity change from 0 to 2048
[  793.918959][T12483] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  796.224818][T12513] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  797.324037][T12522] loop4: detected capacity change from 0 to 32768
[  797.371962][T12522]  loop4: p9 p11 p16
[  797.781819][T12527] loop4: detected capacity change from 0 to 2048
[  798.292480][T12527] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  799.636043][T12475] udevd[12475]: inotify_add_watch(7, /dev/loop4p16, 10) failed: No such file or directory
[  799.654140][T12474] udevd[12474]: inotify_add_watch(7, /dev/loop4p11, 10) failed: No such file or directory
[  799.697184][T12322] udevd[12322]: inotify_add_watch(7, /dev/loop4p9, 10) failed: No such file or directory
[  799.750363][T12545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  800.255772][T12555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1859'.
[  802.147887][T12548] loop4: detected capacity change from 0 to 40427
[  802.186905][T12548] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  802.205607][T12548] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  802.239425][T12548] F2FS-fs (loop4): invalid crc value
[  802.253736][T12548] F2FS-fs (loop4): Found nat_bits in checkpoint
[  802.405753][T12548] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  802.419880][T12548] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  802.877311][T12585] syz_tun: left promiscuous mode
[  802.942197][T12585] 8021q: adding VLAN 0 to HW filter on device bond0
[  803.032392][T12585] 8021q: adding VLAN 0 to HW filter on device team0
[  803.087089][T12585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  803.184748][T11336] lo speed is unknown, defaulting to 1000
[  803.678580][T12596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1870'.
[  803.978575][T12599] siw: device registration error -23
[  804.239541][T12608] loop4: detected capacity change from 0 to 2048
[  804.453923][T12608] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  807.182424][T12623] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  807.402969][T12630] siw: device registration error -23
[  807.608863][T12634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1884'.
[  807.860156][T12628] loop4: detected capacity change from 0 to 32768
[  808.056666][T12628] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  808.538242][   T28] audit: type=1800 audit(1755287305.847:12): pid=12628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1882" name="file1" dev="loop4" ino=17059 res=0 errno=0
[  808.741848][ T9158] ocfs2: Unmounting device (7,4) on (node local)
[  809.603455][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  809.610354][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  809.709490][T12660] siw: device registration error -23
[  811.137410][T12670] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  811.199396][T12673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1894'.
[  811.401855][T12684] loop4: detected capacity change from 0 to 128
[  811.471392][T12684] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  811.569121][T12684] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  811.919543][ T9158] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  812.816932][T12699] loop4: detected capacity change from 0 to 2048
[  813.346596][T12699] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  814.796106][T12714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1906'.
[  815.203704][T12727] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  817.637891][T12744] loop4: detected capacity change from 0 to 2048
[  817.683754][T12744] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  819.082623][T12756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  819.955373][T12770] loop4: detected capacity change from 0 to 1024
[  822.008096][ T3419] hfsplus: b-tree write err: -5, ino 4
[  822.563283][T12794] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  823.200875][T12799] lo speed is unknown, defaulting to 1000
[  827.811025][T12843] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  828.368328][T12854] loop4: detected capacity change from 0 to 1024
[  828.754467][T12858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1954'.
[  829.739238][ T3419] hfsplus: b-tree write err: -5, ino 4
[  830.094782][T12880] loop4: detected capacity change from 0 to 2048
[  830.133143][T12880] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  831.760827][T12901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1968'.
[  831.844548][T12904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1968'.
[  832.358429][T12915] loop4: detected capacity change from 0 to 2048
[  832.383851][T12915] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  833.516782][T12927] loop4: detected capacity change from 0 to 2048
[  833.570239][T12927] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  834.988586][T12946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1986'.
[  835.088291][T12948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1986'.
[  836.723086][T12977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1997'.
[  836.785927][T12978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1997'.
[  836.829832][T11334] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  837.033795][T11334] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  837.063124][T11334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  837.078198][T11334] usb 5-1: config 0 descriptor??
[  837.098825][T11334] cp210x 5-1:0.0: cp210x converter detected
[  837.506962][T11334] cp210x 5-1:0.0: failed to get vendor val 0x370c size 13: -32
[  837.515233][T11334] cp210x 5-1:0.0: GPIO initialisation failed: -32
[  837.532883][T11334] usb 5-1: cp210x converter now attached to ttyUSB0
[  837.788325][   T55] usb 5-1: USB disconnect, device number 12
[  837.818440][   T55] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  837.832162][   T55] cp210x 5-1:0.0: device disconnected
[  839.149073][T13003] loop4: detected capacity change from 0 to 2048
[  839.251706][T13003] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  839.613608][T13007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2008'.
[  839.808191][T13007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2008'.
[  841.994671][T13031] loop4: detected capacity change from 0 to 2048
[  842.022288][T13031] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  842.107996][T13036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2021'.
[  843.041571][T13039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2021'.
[  845.944255][T13066] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2030'.
[  845.976792][T13065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2031'.
[  852.056816][T13106] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  852.408730][T13117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2046'.
[  852.472256][T13121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2046'.
[  852.475680][T13115] loop4: detected capacity change from 0 to 8
[  852.500423][T13115] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  852.573324][T13104] udevd[13104]: incorrect cramfs checksum on /dev/loop4
[  852.601506][T13104] udevd[13104]: incorrect cramfs checksum on /dev/loop4
[  852.632780][T13115] cramfs: Error -5 while decompressing!
[  852.638846][T13115] cramfs: ffffffff96fd82c8(26)->ffff88805840e000(4096)
[  852.646411][T13115] cramfs: Error -3 while decompressing!
[  852.652192][T13115] cramfs: ffffffff96fd82e2(26)->ffff88805b5dd000(4096)
[  852.659335][T13115] cramfs: Error -3 while decompressing!
[  852.664913][T13115] cramfs: ffffffff96fd82fc(16)->ffff888057ed9000(4096)
[  852.672030][T13115] cramfs: Error -5 while decompressing!
[  852.677610][T13115] cramfs: ffffffff96fd82c8(26)->ffff88805840e000(4096)
[  855.710300][T13151] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  855.993902][T13159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2061'.
[  857.300295][T13175] loop4: detected capacity change from 0 to 8192
[  858.837178][T13175]  loop4: p1 p2[DM] p4
[  858.841813][T13175] loop4: p1 size 196608 extends beyond EOD, truncated
[  858.850724][T13175] loop4: p2 start 4292936063 is beyond EOD, truncated
[  858.858041][T13175] loop4: p4 size 50331648 extends beyond EOD, truncated
[  859.611249][T10652] Bluetooth: hci2: unexpected event for opcode 0x1005
[  859.718186][T13104] udevd[13104]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  859.734310][T13183] udevd[13183]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  860.667003][T13203] loop4: detected capacity change from 0 to 8192
[  870.813254][T13210] loop4: detected capacity change from 0 to 4096
[  871.034211][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  871.242608][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  879.158646][T13243] loop4: detected capacity change from 0 to 2048
[  879.200517][T13243] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  882.357292][T13262] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  885.202488][T13267] ceph: No mds server is up or the cluster is laggy
[  885.213056][   T55] libceph: connect (1)[c::]:6789 error -101
[  885.240694][   T55] libceph: mon0 (1)[c::]:6789 connect error
[  885.370512][T13266] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  885.381215][T13266] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  885.465279][T13266] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  885.471839][T13266] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  887.484920][T10652] Bluetooth: hci2: command 0x0406 tx timeout
[  887.509967][T10652] Bluetooth: hci4: command 0x0406 tx timeout
[  887.780670][T13304] loop4: detected capacity change from 0 to 4096
[  887.852776][T13304] ntfs3: loop4: Primary boot: invalid record size -117.
[  887.915033][T13304] ntfs3: loop4: try to read out of volume at offset 0x1ffe00
[  888.833820][   T28] audit: type=1326 audit(1755287386.137:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13323 comm="syz.4.2116" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc88858ebe9 code=0x0
[  888.866483][T13326] tmpfs: Bad value for 'grpquota_block_hardlimit'
[  888.974772][T13328] tmpfs: Unknown parameter 'grPquota'
[  889.773609][T10652] Bluetooth: hci2: command 0x0406 tx timeout
[  889.779930][T10652] Bluetooth: hci4: command 0x0406 tx timeout
[  889.942632][T13332] siw: device registration error -23
[  894.410901][T13371] siw: device registration error -23
[  895.090287][T13357] loop4: detected capacity change from 0 to 4096
[  895.680654][T13385] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  895.859908][   T28] audit: type=1800 audit(1755287393.167:14): pid=13357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2126" name="file1" dev="loop4" ino=15 res=0 errno=0
[  895.950449][   T28] audit: type=1800 audit(1755287393.237:15): pid=13357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2126" name="file1" dev="loop4" ino=15 res=0 errno=0
[  895.977322][T13387] 9pnet_fd: p9_fd_create_tcp (13387): problem binding to privport
[  896.853760][T13396] batman_adv: batadv0: Adding interface: dummy0
[  896.865883][T13396] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  896.900184][T13396] batman_adv: batadv0: Interface activated: dummy0
[  900.429577][T13413] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2142'.
[  900.578098][T13413] bridge_slave_0 (unregistering): left allmulticast mode
[  900.585584][T13413] bridge_slave_0 (unregistering): left promiscuous mode
[  900.594903][T13413] bridge0: port 1(bridge_slave_0) entered disabled state
[  900.743600][T13417] loop4: detected capacity change from 0 to 512
[  900.943298][T13417] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2244: inode #15: comm syz.4.2145: corrupted in-inode xattr: invalid ea_ino
[  901.225413][T13417] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2145: couldn't read orphan inode 15 (err -117)
[  901.274499][T13417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  901.434862][T13417] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  902.150892][ T9158] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  903.161811][T13442] loop4: detected capacity change from 0 to 32768
[  903.208877][T13442] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  903.298850][T13442] XFS (loop4): Ending clean mount
[  903.554188][ T9158] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  905.123934][T13479] loop4: detected capacity change from 0 to 1024
[  907.122695][T13489] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  907.179570][T13489] hfsplus: xattr searching failed
[  907.415873][ T8523] hfsplus: b-tree write err: -5, ino 4
[  908.166268][T10652] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  908.186916][T10652] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  908.198908][T10652] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  908.215049][T10652] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  908.272582][T10652] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  908.280811][T10652] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  909.232768][T13519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2173'.
[  909.286828][T13505] lo speed is unknown, defaulting to 1000
[  909.339073][ T3419] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  909.370735][T13524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2173'.
[  909.445272][ T3419] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  909.538141][ T3419] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  909.610950][ T3419] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  909.681444][T13531] ------------[ cut here ]------------
[  909.688092][T13531] WARNING: CPU: 0 PID: 13531 at mm/page_alloc.c:4433 __alloc_pages+0x2de/0x460
[  909.697884][T13531] Modules linked in:
[  909.702068][T13531] CPU: 0 PID: 13531 Comm: syz.1.2179 Not tainted 6.6.102-syzkaller #0
[  909.710447][T13531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  909.720911][T13531] RIP: 0010:__alloc_pages+0x2de/0x460
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  909.726355][T13531] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 75 33 64 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff
[  909.746493][T13531] RSP: 0018:ffffc90003457a80 EFLAGS: 00010246
[  909.753039][T13531] RAX: ffffc90003457a00 RBX: 1ffff9200068af54 RCX: 0000000000000000
[  909.761458][T13531] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003457ae8
[  909.769572][T13531] RBP: ffffc90003457b80 R08: ffffc90003457ae7 R09: 0000000000000000
[  909.777821][T13531] R10: ffffc90003457ac0 R11: fffff5200068af5d R12: 000000000000002a
[  909.786330][T13531] R13: 0000000000000000 R14: 0000000000040d40 R15: dffffc0000000000
[  909.794707][T13531] FS:  00007fd803b2d6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  909.804046][T13531] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  909.810786][T13531] CR2: 00007fa639436f98 CR3: 0000000054bf2000 CR4: 00000000003506f0
[  909.819114][T13531] Call Trace:
[  909.822531][T13531]  <TASK>
[  909.825533][T13531]  ? zone_statistics+0x170/0x170
[  909.830779][T13531]  ? v9fs_fid_find+0x270/0x270
[  909.835619][T13531]  __kmalloc_large_node+0x8c/0x1e0
[  909.840988][T13531]  ? v9fs_fid_get_acl+0x4f/0xf0
[  909.846035][T13531]  __kmalloc+0x111/0x240
[  909.850515][T13531]  v9fs_fid_get_acl+0x4f/0xf0
[  909.855349][T13531]  v9fs_get_acl+0x9a/0x350
[  909.860263][T13531]  v9fs_mount+0x862/0xb40
[  909.864750][T13531]  ? xfs_fs_commit_blocks+0x6c0/0x6c0
[  909.870387][T13531]  legacy_get_tree+0xea/0x180
[  909.875213][T13531]  ? xfs_fs_commit_blocks+0x6c0/0x6c0
[  909.880739][T13531]  vfs_get_tree+0x8c/0x280
[  909.885216][T13531]  do_new_mount+0x24b/0xa40
[  909.890400][T13531]  __se_sys_mount+0x2da/0x3c0
[  909.895503][T13531]  ? __x64_sys_mount+0xc0/0xc0
[  909.900694][T13531]  ? __x64_sys_mount+0x20/0xc0
[  909.905520][T13531]  do_syscall_64+0x55/0xb0
[  909.910179][T13531]  ? clear_bhb_loop+0x40/0x90
[  909.914905][T13531]  ? clear_bhb_loop+0x40/0x90
[  909.919648][T13531]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  909.925833][T13531] RIP: 0033:0x7fd802d8ebe9
[  909.930489][T13531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  909.950439][T13531] RSP: 002b:00007fd803b2d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  909.959226][T13531] RAX: ffffffffffffffda RBX: 00007fd802fb5fa0 RCX: 00007fd802d8ebe9
[  909.967366][T13531] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000
[  909.975494][T13531] RBP: 00007fd802e11e19 R08: 0000200000000500 R09: 0000000000000000
[  909.983979][T13531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  909.992663][T13531] R13: 00007fd802fb6038 R14: 00007fd802fb5fa0 R15: 00007ffdad430928
[  910.001043][T13531]  </TASK>
[  910.004231][T13531] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  910.012118][T13531] CPU: 0 PID: 13531 Comm: syz.1.2179 Not tainted 6.6.102-syzkaller #0
[  910.020374][T13531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  910.030611][T13531] Call Trace:
[  910.033987][T13531]  <TASK>
[  910.036930][T13531]  dump_stack_lvl+0x16c/0x230
[  910.041717][T13531]  ? show_regs_print_info+0x20/0x20
[  910.047037][T13531]  ? load_image+0x3b0/0x3b0
[  910.051670][T13531]  panic+0x2c0/0x710
[  910.055588][T13531]  ? bpf_jit_dump+0xd0/0xd0
[  910.060384][T13531]  __warn+0x2e0/0x470
[  910.064383][T13531]  ? __alloc_pages+0x2de/0x460
[  910.069302][T13531]  ? __alloc_pages+0x2de/0x460
[  910.074188][T13531]  report_bug+0x2be/0x4f0
[  910.078971][T13531]  ? __alloc_pages+0x2de/0x460
[  910.083774][T13531]  ? __alloc_pages+0x2de/0x460
[  910.088687][T13531]  ? __alloc_pages+0x2e0/0x460
[  910.093653][T13531]  handle_bug+0xcf/0x120
[  910.098093][T13531]  exc_invalid_op+0x1a/0x50
[  910.102706][T13531]  asm_exc_invalid_op+0x1a/0x20
[  910.107578][T13531] RIP: 0010:__alloc_pages+0x2de/0x460
[  910.113191][T13531] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 75 33 64 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff
[  910.132902][T13531] RSP: 0018:ffffc90003457a80 EFLAGS: 00010246
[  910.139083][T13531] RAX: ffffc90003457a00 RBX: 1ffff9200068af54 RCX: 0000000000000000
[  910.147071][T13531] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003457ae8
[  910.155056][T13531] RBP: ffffc90003457b80 R08: ffffc90003457ae7 R09: 0000000000000000
[  910.163217][T13531] R10: ffffc90003457ac0 R11: fffff5200068af5d R12: 000000000000002a
[  910.171206][T13531] R13: 0000000000000000 R14: 0000000000040d40 R15: dffffc0000000000
[  910.179229][T13531]  ? zone_statistics+0x170/0x170
[  910.184219][T13531]  ? v9fs_fid_find+0x270/0x270
[  910.189112][T13531]  __kmalloc_large_node+0x8c/0x1e0
[  910.194421][T13531]  ? v9fs_fid_get_acl+0x4f/0xf0
[  910.199292][T13531]  __kmalloc+0x111/0x240
[  910.203574][T13531]  v9fs_fid_get_acl+0x4f/0xf0
[  910.208274][T13531]  v9fs_get_acl+0x9a/0x350
[  910.212800][T13531]  v9fs_mount+0x862/0xb40
[  910.217732][T13531]  ? xfs_fs_commit_blocks+0x6c0/0x6c0
[  910.223432][T13531]  legacy_get_tree+0xea/0x180
[  910.228224][T13531]  ? xfs_fs_commit_blocks+0x6c0/0x6c0
[  910.233769][T13531]  vfs_get_tree+0x8c/0x280
[  910.238539][T13531]  do_new_mount+0x24b/0xa40
[  910.243288][T13531]  __se_sys_mount+0x2da/0x3c0
[  910.248012][T13531]  ? __x64_sys_mount+0xc0/0xc0
[  910.252801][T13531]  ? __x64_sys_mount+0x20/0xc0
[  910.257690][T13531]  do_syscall_64+0x55/0xb0
[  910.262127][T13531]  ? clear_bhb_loop+0x40/0x90
[  910.266901][T13531]  ? clear_bhb_loop+0x40/0x90
[  910.271682][T13531]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  910.277971][T13531] RIP: 0033:0x7fd802d8ebe9
[  910.282405][T13531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  910.302747][T13531] RSP: 002b:00007fd803b2d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  910.311382][T13531] RAX: ffffffffffffffda RBX: 00007fd802fb5fa0 RCX: 00007fd802d8ebe9
[  910.319646][T13531] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000
[  910.327821][T13531] RBP: 00007fd802e11e19 R08: 0000200000000500 R09: 0000000000000000
[  910.336002][T13531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  910.344160][T13531] R13: 00007fd802fb6038 R14: 00007fd802fb5fa0 R15: 00007ffdad430928
[  910.352771][T13531]  </TASK>
[  910.356469][T13531] Kernel Offset: disabled
[  910.360956][T13531] Rebooting in 86400 seconds..