last executing test programs:

9.441062209s ago: executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f00000008c0))
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140), 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='veno\x00', 0x5)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @mss, @window, @window, @timestamp, @mss, @mss, @mss], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6)

8.496952534s ago: executing program 1:
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$packet(0x11, 0x2, 0x300)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
close(0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
msgget$private(0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000007fc0), 0x2d, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100), 0x8)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r3, r0, &(0x7f0000002080)=0x3a, 0x23b)

7.836988725s ago: executing program 2:
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg$alg(r0, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)=""/4096, 0x34000}], 0x1}}], 0x1, 0x0, 0x0)

7.775590085s ago: executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f000001be80)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
recvmsg(r1, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000009700)=""/4096, 0x1000}], 0x1}, 0x0)

7.721251173s ago: executing program 2:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
connect$inet(r0, 0x0, 0x0)

7.523936693s ago: executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'})
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
inotify_init()
r1 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000180))
syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(r1, 0xb15, 0x0, 0x0, 0x0, 0x0)

7.406676421s ago: executing program 0:
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = userfaultfd(0x80001)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000001000/0x2000)=nil, 0x2000}, 0x2})

7.276100072s ago: executing program 0:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000440)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)
unshare(0x22020400)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@data_err_abort}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a})
open(&(0x7f0000000080)='./file1\x00', 0x12b842, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/netfilter\x00')
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r6}, 0x10)
fchdir(0xffffffffffffffff)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r5)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$l2tp(0x2, 0x2, 0x73)
sendmmsg$inet(r8, &(0x7f0000000c80)=[{{&(0x7f0000000400)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000440)="99", 0x1}, {0x0}], 0x2}}], 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000ffff0000000c001600080001000600000008000400", @ANYRES32=r9, @ANYBLOB="0600150007000000"], 0x38}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000280))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6}]})
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010e00000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f7c0000000c0a01080105000000000000010000000900020073797a3200000000500003804c000080080003400000000240000b803c0001800a0001006c696d69740000002c00028008000340000000000c00024000010000b30000000c00014000000000000082a808000440000000010900010073797a30"], 0x100}}, 0x0)
recvmmsg(r3, &(0x7f0000000e80)=[{{&(0x7f0000000340)=@generic, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000000480)=""/190, 0xbe}, {&(0x7f0000000600)=""/245, 0xf5}, {&(0x7f0000000700)=""/101, 0x65}], 0x4, &(0x7f0000000540)=""/17, 0x11}}, {{&(0x7f0000000780)=@qipcrtr, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000800)=""/113, 0x71}, {&(0x7f00000008c0)=""/166, 0xa6}, {&(0x7f0000000980)=""/141, 0x8d}, {&(0x7f0000000ac0)=""/246, 0xf6}, {&(0x7f0000000bc0)=""/247, 0xf7}, {&(0x7f0000000cc0)=""/196, 0xc4}, {&(0x7f0000000a40)=""/17, 0x11}], 0x7, &(0x7f0000000e40)=""/41, 0x29}, 0xee}], 0x2, 0x41, &(0x7f0000000f00)={0x0, 0x989680})
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES8=r3], 0x48}}, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000f40)={0x7}, 0x8)

6.989984106s ago: executing program 2:
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040), 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102384, 0x18ff0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000004140)=ANY=[@ANYBLOB="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"], 0x1, 0x1cf, &(0x7f0000000780)="$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")
mount$overlay(0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[], [], 0x2f})
chdir(0x0)
io_setup(0x2, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x20001, 0x0)
io_submit(r2, 0x1, &(0x7f0000001480)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}])
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00'}, 0x10)
r4 = syz_io_uring_setup(0x4b6, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
syz_emit_ethernet(0x4b, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x15, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x15, 0x0, @gue={{0x2}, "30b00afe4e"}}}}}}}, 0x0)
recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000280)=""/4096, 0x9005)

6.340744925s ago: executing program 0:
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg$alg(r0, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)=""/4096, 0x34000}], 0x1}}], 0x1, 0x0, 0x0)

5.417710377s ago: executing program 0:
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2008410, &(0x7f0000000400)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45aca9836c319f437199ff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b525718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c84268030000000000000008886b313bd01a22d576e414011a4f0a897514329f86d4585fa0ea17068f8af349696da4a2b3e24310bb52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515e34ac8c454a30dd54a580ad7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54f3936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb00010000f7a0fa13516c0926d19dd2d58633d97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4ab22052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0", @ANYRES32=0x0, @ANYRESHEX], 0x1, 0x5549, &(0x7f0000003d80)="$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")
fspick(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0))
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
ppoll(0x0, 0x0, &(0x7f0000000080)={0x0, 0x7f}, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f00000000c0), 0x12)
ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}})
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f00009c2000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000300)="ea0f000000f900b8000000000f23c80f21f8350800a0000f23f8650f01fa0fc7720e0f0f0e1dc4c2f99ebf7cc800008fc97891b2040000000f01cbea010000002c00b9300300000f32", 0x49}], 0x1, 0x20, &(0x7f0000000240)=[@cr0={0x0, 0x80000000}], 0x1)

3.891534042s ago: executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1})
sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, 0x0}, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)})

3.784152048s ago: executing program 3:
ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x5608, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0844123, &(0x7f00000018c0)={0x1})

3.768595741s ago: executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000040))
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4, 0x70bd2b}, 0x14}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3.686026344s ago: executing program 2:
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffffffffffff16)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2)
ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x98f900})

3.64128761s ago: executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8)

3.477253455s ago: executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
stat(&(0x7f0000000000)='./file0/bus\x00', 0x0)
lchown(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

3.472745606s ago: executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004600003000"], 0x42)

3.200447138s ago: executing program 1:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
inotify_init()
semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, 0x0)

3.191519009s ago: executing program 4:
prlimit64(0x0, 0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x64142, 0x0)
r1 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0)
sendfile(r0, r1, 0x0, 0x1000000201005)

2.999551099s ago: executing program 1:
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(r0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', <r3=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r1, &(0x7f0000000840)={0x2c, 0x0, r3}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

2.451311783s ago: executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)=""/4096, 0x34000}], 0x1}}], 0x1, 0x0, 0x0)

2.372575345s ago: executing program 4:
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2008410, &(0x7f0000000400)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45aca9836c319f437199ff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b525718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c84268030000000000000008886b313bd01a22d576e414011a4f0a897514329f86d4585fa0ea17068f8af349696da4a2b3e24310bb52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515e34ac8c454a30dd54a580ad7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54f3936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb00010000f7a0fa13516c0926d19dd2d58633d97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4ab22052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0", @ANYRES32=0x0, @ANYRESHEX], 0x1, 0x5549, &(0x7f0000003d80)="$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")
fspick(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0))
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)
ppoll(0x0, 0x0, &(0x7f0000000080)={0x0, 0x7f}, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f00000000c0), 0x12)
ioctl$SIOCSIFHWADDR(r4, 0x4030582b, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)

2.361507027s ago: executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1})
sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, 0x0}, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)})

2.245307215s ago: executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f0000000880)={[], [{@uid_lt}, {@uid_gt}, {@pcr={'pcr', 0x3d, 0x3b}}, {@smackfshat}, {@pcr={'pcr', 0x3d, 0xa}}]}, 0x1, 0x490, &(0x7f0000000f40)="$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")
symlinkat(&(0x7f0000001040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
renameat2(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00', 0x2)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2001095, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000005c0)='./file0\x00', 0x8774, &(0x7f0000000600)={[{@sysvgroups}, {@noblock_validity}, {@quota}, {@noinit_itable}, {@auto_da_alloc}, {@usrjquota}, {@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@data_err_ignore}, {@abort}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@bh}]}, 0xae, 0x46a, &(0x7f0000000d00)="$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")

2.223277818s ago: executing program 3:
ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x5608, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0844123, &(0x7f00000018c0)={0x1})

2.045007656s ago: executing program 3:
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040), 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102384, 0x18ff0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000004140)=ANY=[@ANYBLOB="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"], 0x1, 0x1cf, &(0x7f0000000780)="$eJzKKC4sZmdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdmlN+Z0566motk2VmaPXUlkcWk0vtMXKTXMwjwcwQmnpkUXFlVXZiTk5qUfFChopbyUkVp08wsFy3v6bSLMHp8EeewyFJ00GH6YiPR9aMxhLOSVKaYmxsmQpnz3yQX8emcYTh0QrmjXWeeY11halT89LykqqyqrLmTZy4cWZjZ2Pjyol1UWl+qxhbUlw2NXUyMjlsURPYzGyoPslGe8K79lUPkxxYezz8mk8ZK71OZb5kvLBI6tSKqpkTvijNZjT8znCHp2yFhIaGk8QVCYsGE4YjdbYNriAnpjQwpCmEMSapsYm1bTkzJ4SZn81tgUJL8gmm0KMcS2dKWBwQqjr501LzrUOi24xtTx3YzvAcPs6zpqBP0Oi4BIPTQsH/MiBjEhoayjTWMi21XfClSOOvhNdqY6cMBnd7pmWwAGVpAJEroTxZsJ6E5BUeOpqaRinJCQ2bJBKS3AoMlRm27uFcLdDAgBRtKgwMDNsZYXELAddgjFEwCkbBKBgFo2AUjIJRMApGwSgYBSMCAAIAAP//QJCYyw==")
mount$overlay(0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[], [], 0x2f})
chdir(0x0)
io_setup(0x2, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x20001, 0x0)
io_submit(r2, 0x1, &(0x7f0000001480)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}])
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00'}, 0x10)
r4 = syz_io_uring_setup(0x4b6, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
syz_emit_ethernet(0x4b, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x15, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x15, 0x0, @gue={{0x2}, "30b00afe4e"}}}}}}}, 0x0)
recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000280)=""/4096, 0x9005)

1.577907958s ago: executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8)

1.315999608s ago: executing program 2:
pipe2$watch_queue(0x0, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080))
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
syz_io_uring_setup(0x710a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140))

0s ago: executing program 4:
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000140))
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00')
pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0)

kernel console output (not intermixed with test programs):

7.761723][ T2988] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  527.864229][   T26] audit: type=1326 audit(1719027639.792:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12304 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f498287d0a9 code=0x0
[  527.918316][T12305] EXT4-fs (loop4): unmounting filesystem.
[  527.919987][T12288] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  527.988055][ T2988] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  528.032220][ T2988] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  528.044072][  T153] usb 4-1: USB disconnect, device number 24
[  528.045775][T12316] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  528.348314][T12214] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  528.363479][T12214] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  528.420534][T12214] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  528.467594][T12214] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  529.044392][T12214] 8021q: adding VLAN 0 to HW filter on device bond0
[  529.060374][ T8872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  529.072832][ T8872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  529.085878][T12214] 8021q: adding VLAN 0 to HW filter on device team0
[  529.119721][T12214] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  529.130723][T12214] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  529.224500][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  529.242801][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  529.251510][ T8871] bridge0: port 1(bridge_slave_0) entered blocking state
[  529.259711][ T8871] bridge0: port 1(bridge_slave_0) entered forwarding state
[  529.268717][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  529.278010][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  529.300243][ T8871] bridge0: port 2(bridge_slave_1) entered blocking state
[  529.307357][ T8871] bridge0: port 2(bridge_slave_1) entered forwarding state
[  529.318183][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  529.334316][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  529.346361][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  529.355220][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  529.364884][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  529.385428][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  529.403223][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  529.420813][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  529.432661][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  529.446875][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  529.520046][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  529.534440][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  529.542133][ T3582] Bluetooth: hci1: command tx timeout
[  529.564200][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  529.699877][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[  530.684440][T11950] device hsr_slave_0 left promiscuous mode
[  530.702482][T11950] device hsr_slave_1 left promiscuous mode
[  530.720190][T11950] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  530.755106][T11950] batman_adv: batadv0: Removing interface: batadv_slave_0
[  530.770723][T12355] loop3: detected capacity change from 0 to 64
[  530.796482][T11950] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  530.804460][T11950] batman_adv: batadv0: Removing interface: batadv_slave_1
[  530.832824][T11950] device bridge_slave_1 left promiscuous mode
[  530.852864][T11950] bridge0: port 2(bridge_slave_1) entered disabled state
[  530.891028][T11950] device bridge_slave_0 left promiscuous mode
[  530.925848][T11950] bridge0: port 1(bridge_slave_0) entered disabled state
[  530.978439][T11950] device veth1_macvtap left promiscuous mode
[  530.997587][T11950] device veth0_macvtap left promiscuous mode
[  531.028040][T11950] device veth1_vlan left promiscuous mode
[  531.058541][T11950] device veth0_vlan left promiscuous mode
[  531.369818][T12363] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  531.524646][T12365] loop3: detected capacity change from 0 to 1024
[  531.570527][T12365] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  531.640086][T11950] team0 (unregistering): Port device team_slave_1 removed
[  531.659082][T11950] team0 (unregistering): Port device team_slave_0 removed
[  531.670962][   T26] audit: type=1326 audit(1719027643.592:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12364 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c8187d0a9 code=0x0
[  531.703301][T11950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  531.718919][T11950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  531.856995][T11950] bond0 (unregistering): Released all slaves
[  531.942921][T12214] 8021q: adding VLAN 0 to HW filter on device batadv0
[  531.977499][T12214] device veth0_vlan entered promiscuous mode
[  532.009294][T12369] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
[  532.052669][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  532.060239][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  532.077492][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  532.090297][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  532.110481][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  532.120194][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  532.136733][T12214] device veth1_vlan entered promiscuous mode
[  532.154891][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  532.161929][ T4502] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  532.168316][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  532.178247][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  532.186613][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  532.218881][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  532.236182][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  532.253939][T12214] device veth0_macvtap entered promiscuous mode
[  532.264265][T12214] device veth1_macvtap entered promiscuous mode
[  532.311585][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  532.332012][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.342358][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  532.353304][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.365928][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  532.377440][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.388241][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  532.398946][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.408816][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  532.419311][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.430036][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  532.431939][ T4502] usb 1-1: Using ep0 maxpacket: 8
[  532.441171][ T8871] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  532.453339][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.467851][T12365] EXT4-fs (loop3): unmounting filesystem.
[  532.492518][T12214] batman_adv: batadv0: Interface activated: batadv_slave_0
[  532.500183][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  532.509700][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  532.518070][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  532.534281][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  532.545608][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  532.565051][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.575857][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  532.587749][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.598057][ T4502] usb 1-1: config 0 has an invalid interface number: 52 but max is 0
[  532.601357][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  532.616870][ T4502] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  532.626280][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.636995][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  532.647990][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.651222][ T4502] usb 1-1: config 0 has no interface number 0
[  532.658676][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  532.675892][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.681820][ T4502] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  532.696247][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  532.712023][ T4502] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  532.722045][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.731833][ T4502] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  532.745021][ T4502] usb 1-1: config 0 interface 52 has no altsetting 0
[  532.755159][ T4502] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  532.760991][T12214] batman_adv: batadv0: Interface activated: batadv_slave_1
[  532.771859][ T4502] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  532.791718][ T4502] usb 1-1: config 0 descriptor??
[  532.800558][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  532.822198][ T8871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  532.835430][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  532.861317][ T8871] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  532.876089][T12214] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  532.891458][ T8871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  532.911158][T12214] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  532.916221][ T8871] usb 5-1: config 0 descriptor??
[  532.936816][T12214] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  532.954332][T12214] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  533.233599][ T4502] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input48
[  533.286576][ T2988] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  533.376625][ T2988] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  533.414840][ T2988] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  533.429671][ T2988] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  533.448886][T12372] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  533.454410][ T8871] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor
[  533.493745][ T8871] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0004/input/input49
[  533.517437][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  533.534948][ T4510] usb 1-1: USB disconnect, device number 29
[  533.553016][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  533.601210][ T8871] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  533.616375][ T8869] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  533.668719][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  533.683953][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  533.729082][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  534.132270][ T3612] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  535.113474][ T3612] usb 3-1: Using ep0 maxpacket: 8
[  535.133161][ T4510] usb 5-1: USB disconnect, device number 31
[  535.145888][T12406] loop0: detected capacity change from 0 to 64
[  535.252909][T12413] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  535.256869][ T3612] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  535.265321][T12408] loop3: detected capacity change from 0 to 4096
[  535.290685][ T3612] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  535.358185][T12408] NILFS (loop3): invalid segment: Checksum error in segment payload
[  535.402293][ T3612] usb 3-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da
[  535.415910][ T3612] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  535.422633][T12408] NILFS (loop3): trying rollback from an earlier position
[  535.437077][ T3612] usb 3-1: Manufacturer: syz
[  535.453180][ T3612] usb 3-1: config 0 descriptor??
[  535.460276][T12408] NILFS (loop3): invalid segment: Checksum error in segment payload
[  535.475008][T12408] NILFS (loop3): error -22 while searching super root
[  535.706259][ T4510] usb 3-1: USB disconnect, device number 24
[  535.737007][T12420] loop0: detected capacity change from 0 to 1024
[  535.793568][T12420] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  535.849335][   T26] audit: type=1326 audit(1719027647.772:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12419 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb71967d0a9 code=0x0
[  535.914824][T12420] EXT4-fs (loop0): unmounting filesystem.
[  535.951571][T12427] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[  536.021452][ T3580] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  536.041148][ T3580] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  536.053605][ T3580] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  536.064293][ T3580] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  536.072296][ T3580] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  536.079929][ T3580] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  536.542808][T12428] chnl_net:caif_netlink_parms(): no params data found
[  536.742041][ T8871] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  536.903005][T12447] loop0: detected capacity change from 0 to 256
[  537.167642][T12428] bridge0: port 1(bridge_slave_0) entered blocking state
[  537.295724][T12428] bridge0: port 1(bridge_slave_0) entered disabled state
[  537.522232][T12428] device bridge_slave_0 entered promiscuous mode
[  537.563447][T12428] bridge0: port 2(bridge_slave_1) entered blocking state
[  537.613622][T12428] bridge0: port 2(bridge_slave_1) entered disabled state
[  537.639056][T12428] device bridge_slave_1 entered promiscuous mode
[  537.702212][ T8871] usb 3-1: Using ep0 maxpacket: 8
[  537.715946][T12428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  537.784887][T12428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  537.797073][T12457] loop1: detected capacity change from 0 to 64
[  537.822380][ T8871] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[  537.830489][ T8871] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  537.874999][T12428] team0: Port device team_slave_0 added
[  537.911879][ T8871] usb 3-1: config 0 has no interface number 0
[  537.926596][T12428] team0: Port device team_slave_1 added
[  537.942432][ T8871] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  538.021274][ T8871] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  538.065415][ T8871] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  538.069673][T12428] batman_adv: batadv0: Adding interface: batadv_slave_0
[  538.102241][ T3582] Bluetooth: hci0: command tx timeout
[  538.132874][ T8871] usb 3-1: config 0 interface 52 has no altsetting 0
[  538.136549][T12428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  538.173730][ T8871] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  538.185786][ T8871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.200683][ T8871] usb 3-1: config 0 descriptor??
[  538.235364][T12428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  538.276932][T12428] batman_adv: batadv0: Adding interface: batadv_slave_1
[  538.295363][T12428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  538.336825][T12428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  538.574157][ T8871] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input50
[  538.609911][ T2988] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  538.649687][T12428] device hsr_slave_0 entered promiscuous mode
[  538.656256][ T2988] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  539.190494][T12428] device hsr_slave_1 entered promiscuous mode
[  539.401883][T12439] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  539.422229][T12428] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  539.433654][ T2988] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  539.448066][ T8871] usb 3-1: USB disconnect, device number 25
[  539.461844][T12428] Cannot create hsr debugfs directory
[  539.475353][T12480] loop1: detected capacity change from 0 to 1024
[  539.537719][T12480] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  539.586795][   T26] audit: type=1326 audit(1719027651.512:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12479 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ce2a7d0a9 code=0x0
[  539.618554][T12480] EXT4-fs (loop1): unmounting filesystem.
[  539.699983][T12428] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  539.736139][T12491] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
[  539.801282][T12428] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  539.841906][    T7] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  539.880915][T12428] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  539.944912][T12428] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  540.182108][ T3582] Bluetooth: hci0: command tx timeout
[  540.212272][    T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  540.223598][    T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  540.521202][T12428] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  540.736959][T12428] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  540.879820][T12428] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  540.913390][T12428] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  540.931151][T12504] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  540.967419][    T7] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[  540.977623][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.000108][    T7] usb 1-1: config 0 descriptor??
[  541.081451][T12428] 8021q: adding VLAN 0 to HW filter on device bond0
[  541.099610][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  541.117182][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  541.129445][T12428] 8021q: adding VLAN 0 to HW filter on device team0
[  541.176117][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  541.183303][T12508] loop3: detected capacity change from 0 to 512
[  541.186498][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  541.200494][T12508] EXT4-fs (loop3): #blocks per group too big: 65536
[  541.202450][ T3618] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.214289][ T3618] bridge0: port 1(bridge_slave_0) entered forwarding state
[  541.241149][ T8869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  541.249535][ T8869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  541.258528][ T8869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  541.267405][ T8869] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.274549][ T8869] bridge0: port 2(bridge_slave_1) entered forwarding state
[  541.298912][ T8869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  541.332848][ T8869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  541.351277][ T8869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  541.369629][ T8869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  541.390563][ T8869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  541.408678][ T8869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  541.419936][ T8869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  541.437876][ T8869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  541.450038][ T8869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  541.488950][ T8869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  541.553294][    T7] belkin 0003:1020:0006.0005: item fetching failed at offset 2/5
[  541.561548][    T7] belkin 0003:1020:0006.0005: parse failed
[  541.571360][T12428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  541.583349][    T7] belkin: probe of 0003:1020:0006.0005 failed with error -22
[  541.842081][ T4510] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  541.887599][ T4507] usb 1-1: USB disconnect, device number 30
[  542.152146][ T4510] usb 2-1: Using ep0 maxpacket: 8
[  542.314820][ T3582] Bluetooth: hci0: command tx timeout
[  542.322378][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  542.415487][ T4510] usb 2-1: config 0 has an invalid interface number: 52 but max is 0
[  542.468004][ T4510] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  542.528204][ T4510] usb 2-1: config 0 has no interface number 0
[  542.612122][T12534] loop3: detected capacity change from 0 to 1024
[  542.671759][T12534] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  542.711841][ T4510] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  542.742181][   T26] audit: type=1326 audit(1719027654.672:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12530 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c8187d0a9 code=0x0
[  542.773991][ T4510] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  542.944481][T12534] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
[  543.004278][ T4510] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  543.183259][ T4510] usb 2-1: config 0 interface 52 has no altsetting 0
[  543.279438][ T4510] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  543.632532][ T4510] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  543.653235][ T4510] usb 2-1: config 0 descriptor??
[  543.672670][T12534] EXT4-fs (loop3): unmounting filesystem.
[  543.718913][T12428] 8021q: adding VLAN 0 to HW filter on device batadv0
[  543.727692][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  543.735721][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  543.765918][T12529] loop2: detected capacity change from 0 to 40427
[  543.788492][T12529] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  543.805475][T12544] loop3: detected capacity change from 0 to 256
[  543.811967][T12529] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  543.955049][T12529] F2FS-fs (loop2): Found nat_bits in checkpoint
[  543.991494][ T4510] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input51
[  544.006490][ T2988] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  544.022354][ T2988] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  544.039853][T12529] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  544.050162][ T2988] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  544.156277][   T26] audit: type=1804 audit(1719027656.072:1537): pid=12556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir424438746/syzkaller.gqn7mB/54/bus/bus" dev="loop3" ino=1049259 res=1 errno=0
[  544.294249][T12521] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  544.341566][T12529] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  544.349148][ T3582] Bluetooth: hci0: command tx timeout
[  544.403023][T12529] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  544.484687][ T2988] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  544.590800][ T4510] usb 2-1: USB disconnect, device number 30
[  544.606153][   T26] audit: type=1800 audit(1719027656.072:1538): pid=12556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1049259 res=0 errno=0
[  545.740423][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  545.755921][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  545.813329][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  545.841247][T12565] syz-executor.2: attempt to access beyond end of device
[  545.841247][T12565] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  545.847577][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  545.891034][T12428] device veth0_vlan entered promiscuous mode
[  545.905828][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  545.916279][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  545.958218][T12428] device veth1_vlan entered promiscuous mode
[  546.044588][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  546.053681][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  546.067475][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  546.079646][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  546.091802][T12428] device veth0_macvtap entered promiscuous mode
[  546.123621][T12428] device veth1_macvtap entered promiscuous mode
[  546.170489][T12428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  546.190686][T12428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.202404][ T3618] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  546.215991][T12428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  546.234250][T12428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.245297][T12428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  546.256348][T12428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.270485][T12428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  546.284553][T12428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.338260][T12428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  546.359114][T12428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.379159][T12428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  546.391877][T12428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.411911][T12428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  546.431840][T12428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.463647][T12428] batman_adv: batadv0: Interface activated: batadv_slave_0
[  546.472381][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  546.482690][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  546.506703][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  546.541567][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  546.565877][T12428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  546.580960][ T3618] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  546.591821][T12428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.591844][T12428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  546.591860][T12428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.591876][T12428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  546.591887][T12428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.591901][T12428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  546.591911][T12428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.591925][T12428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  546.591936][T12428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.591951][T12428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  546.591962][T12428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.591976][T12428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  546.591989][T12428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.595303][T12428] batman_adv: batadv0: Interface activated: batadv_slave_1
[  546.650477][ T3618] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  546.792438][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  546.806950][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  546.844969][T12428] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  546.861959][T12428] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  546.870676][T12428] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  546.882418][ T3618] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[  546.891578][ T3618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  546.901302][ T3618] usb 2-1: config 0 descriptor??
[  546.906345][T12428] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  547.047752][T12214] syz-executor.2: attempt to access beyond end of device
[  547.047752][T12214] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  547.054468][ T3910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  547.081886][ T3910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  547.118208][ T8869] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  547.169849][ T3910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  547.193299][ T3910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  547.235440][ T8869] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  547.403592][ T3618] belkin 0003:1020:0006.0006: item fetching failed at offset 2/5
[  547.413886][ T3618] belkin 0003:1020:0006.0006: parse failed
[  547.419745][ T3618] belkin: probe of 0003:1020:0006.0006 failed with error -22
[  547.551587][T12594] loop2: detected capacity change from 0 to 1024
[  547.637062][T12594] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  547.656803][ T8869] usb 2-1: USB disconnect, device number 31
[  547.740626][   T26] audit: type=1326 audit(1719027659.662:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12593 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f929387d0a9 code=0x0
[  547.773203][T12594] EXT4-fs (loop2): unmounting filesystem.
[  547.835643][T12599] loop0: detected capacity change from 0 to 256
[  547.873977][T12602] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[  547.879650][T12599] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d)
[  548.131935][ T3619] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  548.492464][ T3619] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  548.521622][ T3619] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  548.552002][ T3619] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  548.672115][ T3619] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  548.691628][ T3619] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  548.710217][ T3619] usb 5-1: Manufacturer: syz
[  548.723443][ T3619] usb 5-1: config 0 descriptor??
[  548.730001][ T4507] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  548.773848][ T3619] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  548.940185][T12613] loop0: detected capacity change from 0 to 2048
[  548.964095][T12613] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  548.992574][ T4507] usb 3-1: Using ep0 maxpacket: 8
[  549.012155][T12613] UDF-fs: Scanning with blocksize 512 failed
[  549.027184][T12613] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  549.048115][T12613] UDF-fs: Scanning with blocksize 1024 failed
[  549.072821][T12613] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  549.095159][T12613] UDF-fs: Scanning with blocksize 2048 failed
[  549.112102][ T4507] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[  549.127229][T12613] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  549.134981][ T4507] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  549.145705][T12613] UDF-fs: Scanning with blocksize 4096 failed
[  549.159699][ T4507] usb 3-1: config 0 has no interface number 0
[  549.171521][ T4507] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  549.182744][ T4507] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  549.192680][ T4507] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  549.205886][ T4507] usb 3-1: config 0 interface 52 has no altsetting 0
[  549.212896][ T4507] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  549.249989][ T4507] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  549.278025][ T4507] usb 3-1: config 0 descriptor??
[  549.506394][T12619] loop0: detected capacity change from 0 to 512
[  549.543706][ T4507] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input52
[  549.575769][ T2988] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  549.598037][ T2988] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  549.728928][ T2988] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  549.767996][T12606] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  549.803901][ T2988] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  549.812825][T12619] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  549.830935][ T4507] usb 3-1: USB disconnect, device number 26
[  550.146892][T12619] EXT4-fs error (device loop0): ext4_orphan_get:1422: comm syz-executor.0: bad orphan inode 16
[  550.159052][T12619] ext4_test_bit(bit=15, block=4) = 0
[  550.165256][T12619] EXT4-fs (loop0): 1 orphan inode deleted
[  550.171610][T12619] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  550.285627][T12619] EXT4-fs error (device loop0): ext4_lookup:1855: inode #15: comm syz-executor.0: iget: bad extra_isize 46 (inode size 256)
[  552.609959][ T3618] usb 5-1: USB disconnect, device number 32
[  552.621716][T12623] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  552.740134][ T7819] EXT4-fs (loop0): unmounting filesystem.
[  553.162108][   T27] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  553.371971][   T27] usb 4-1: device descriptor read/64, error -71
[  553.662052][   T27] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  553.963613][   T27] usb 4-1: device descriptor read/64, error -71
[  554.082636][   T27] usb usb4-port1: attempt power cycle
[  554.142066][ T4510] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  554.796018][T12673] loop0: detected capacity change from 0 to 2048
[  554.813674][T12673] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  554.821526][T12673] UDF-fs: Scanning with blocksize 512 failed
[  554.834399][T12673] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  554.853094][T12673] UDF-fs: Scanning with blocksize 1024 failed
[  554.862101][T12673] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  554.869662][T12673] UDF-fs: Scanning with blocksize 2048 failed
[  554.876524][T12673] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  554.885010][T12673] UDF-fs: Scanning with blocksize 4096 failed
[  555.152382][ T4510] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  555.162506][   T27] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  555.185661][ T4510] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  555.230805][ T4510] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  555.283356][   T27] usb 4-1: device descriptor read/8, error -71
[  555.356314][ T4510] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  555.370079][ T4510] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  555.398350][ T4510] usb 2-1: Manufacturer: syz
[  555.417273][ T4510] usb 2-1: config 0 descriptor??
[  555.486835][ T4510] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  555.581891][   T27] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  555.589100][T12678] loop0: detected capacity change from 0 to 512
[  555.608453][T12678] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  555.663773][T12678] EXT4-fs error (device loop0): ext4_orphan_get:1422: comm syz-executor.0: bad orphan inode 16
[  555.675014][T12678] ext4_test_bit(bit=15, block=4) = 0
[  555.680400][T12678] EXT4-fs (loop0): 1 orphan inode deleted
[  555.686723][T12678] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  555.703064][   T27] usb 4-1: device descriptor read/8, error -71
[  555.895757][   T27] usb usb4-port1: unable to enumerate USB device
[  556.594858][T12678] EXT4-fs error (device loop0): ext4_lookup:1855: inode #15: comm syz-executor.0: iget: bad extra_isize 46 (inode size 256)
[  556.858206][ T7819] EXT4-fs (loop0): unmounting filesystem.
[  557.051897][   T27] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  557.472228][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  557.492727][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  557.506091][   T27] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[  557.515369][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  557.527063][   T27] usb 4-1: config 0 descriptor??
[  557.657387][T12718] loop2: detected capacity change from 0 to 8192
[  557.716537][T12718] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  557.731138][T12718] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  557.741140][T12718]  loop2: p2 p3 p4
[  557.745584][T12718] loop2: partition table partially beyond EOD, truncated
[  557.757928][T12718] loop2: p2 start 452985600 is beyond EOD, truncated
[  557.768887][T12718] loop2: p3 size 33554432 extends beyond EOD, truncated
[  558.183283][ T3618] usb 2-1: USB disconnect, device number 32
[  558.192261][T12718] loop2: p4 start 8388607 is beyond EOD, truncated
[  558.231912][ T4510] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  558.415832][   T27] belkin 0003:1020:0006.0007: item fetching failed at offset 2/5
[  558.425248][   T27] belkin 0003:1020:0006.0007: parse failed
[  558.431109][   T27] belkin: probe of 0003:1020:0006.0007 failed with error -22
[  558.438859][ T4510] usb 5-1: device descriptor read/64, error -71
[  558.635115][   T27] usb 4-1: USB disconnect, device number 29
[  558.713544][ T4510] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  559.225323][ T4510] usb 5-1: device descriptor read/64, error -71
[  559.353475][ T4510] usb usb5-port1: attempt power cycle
[  559.782127][ T4510] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  559.872863][ T4510] usb 5-1: device descriptor read/8, error -71
[  560.170292][ T4510] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  560.262511][ T4510] usb 5-1: device descriptor read/8, error -71
[  560.382048][ T4510] usb usb5-port1: unable to enumerate USB device
[  561.291862][ T3619] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  561.662438][ T3619] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  561.678965][ T3619] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  561.706571][ T3619] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[  561.720167][ T3619] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  561.730970][ T3619] usb 5-1: config 0 descriptor??
[  561.778017][T12798] loop3: detected capacity change from 0 to 64
[  562.213156][ T3619] belkin 0003:1020:0006.0008: item fetching failed at offset 2/5
[  562.232023][ T3619] belkin 0003:1020:0006.0008: parse failed
[  562.250400][ T3619] belkin: probe of 0003:1020:0006.0008 failed with error -22
[  562.439784][ T4510] usb 5-1: USB disconnect, device number 37
[  562.760192][ T1256] ieee802154 phy0 wpan0: encryption failed: -22
[  562.978032][T12841] loop3: detected capacity change from 0 to 1024
[  563.013840][T12841] hfsplus: failed to load catalog file
[  563.197943][T12848] loop4: detected capacity change from 0 to 256
[  563.209952][T12848] FAT-fs (loop4): Unrecognized mount option "01777777777777777777777000000000000000000000000xffffffffffffffff" or missing value
[  564.104120][T12851] loop3: detected capacity change from 0 to 64
[  565.481551][T12871] loop0: detected capacity change from 0 to 512
[  565.492266][T12871] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  565.535925][T12871] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended
[  565.563332][T12871] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[  565.591998][T12871] System zones: 0-2, 18-18, 34-34
[  565.612055][T12871] EXT4-fs error (device loop0): ext4_orphan_get:1422: comm syz-executor.0: bad orphan inode 15
[  565.632300][T12871] ext4_test_bit(bit=14, block=18) = 1
[  565.637720][T12871] is_bad_inode(inode)=0
[  565.666654][T12871] NEXT_ORPHAN(inode)=2264924160
[  565.671745][T12871] max_ino=32
[  565.678341][T12871] i_nlink=0
[  565.688165][T12871] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  565.707475][T12882] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  565.712388][T12871] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor.0: bg 0: block 80: padding at end of block bitmap is not set
[  565.744389][T12871] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6173: Corrupt filesystem
[  565.763237][T12871] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  565.809156][T12884] loop3: detected capacity change from 0 to 1024
[  565.833050][ T7819] EXT4-fs (loop0): unmounting filesystem.
[  565.873313][T12884] hfsplus: failed to load catalog file
[  566.952636][T12902] loop0: detected capacity change from 0 to 64
[  568.585386][T12937] nbd2: detected capacity change from 0 to 2199023255576
[  568.616657][   T51] block nbd2: Send control failed (result -89)
[  568.624153][   T51] block nbd2: Request send failed, requeueing
[  568.635199][ T3580] block nbd2: Receive control failed (result -32)
[  568.646481][   T51] block nbd2: Dead connection, failed to find a fallback
[  568.653606][   T51] block nbd2: shutting down sockets
[  568.659331][   T51] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  568.669671][   T51] Buffer I/O error on dev nbd2, logical block 0, async page read
[  568.679105][ T1028] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  568.688447][ T1028] Buffer I/O error on dev nbd2, logical block 0, async page read
[  568.696493][ T1028] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  568.705601][ T1028] Buffer I/O error on dev nbd2, logical block 0, async page read
[  568.713632][ T1028] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  568.722722][ T1028] Buffer I/O error on dev nbd2, logical block 0, async page read
[  568.731445][ T1028] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  568.740635][ T1028] Buffer I/O error on dev nbd2, logical block 0, async page read
[  568.752038][   T51] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  568.761136][   T51] Buffer I/O error on dev nbd2, logical block 0, async page read
[  568.769096][   T51] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  568.778204][   T51] Buffer I/O error on dev nbd2, logical block 0, async page read
[  568.786242][   T51] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  568.795348][   T51] Buffer I/O error on dev nbd2, logical block 0, async page read
[  568.803169][T12937] ldm_validate_partition_table(): Disk read failed.
[  568.812090][ T1028] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  568.821265][ T1028] Buffer I/O error on dev nbd2, logical block 0, async page read
[  568.832194][   T51] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  568.841288][   T51] Buffer I/O error on dev nbd2, logical block 0, async page read
[  568.852258][T12937] Dev nbd2: unable to read RDB block 0
[  568.862377][T12937]  nbd2: unable to read partition table
[  569.133034][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888058be8000: rx timeout, send abort
[  569.303861][   T26] audit: type=1804 audit(1719027681.232:1540): pid=12945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4180068165/syzkaller.LHvDD3/27/bus" dev="sda1" ino=1954 res=1 errno=0
[  569.334024][T12947] overlayfs: failed to create directory ./bus/work (errno: 126); mounting read-only
[  569.338264][T12934] loop3: detected capacity change from 0 to 32768
[  569.371142][T12934] XFS: ikeep mount option is deprecated.
[  569.449618][T12934] XFS (loop3): Mounting V5 Filesystem
[  569.574302][T12934] XFS (loop3): Ending clean mount
[  569.600483][T12934] XFS (loop3): Quotacheck needed: Please wait.
[  569.642117][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888058be8000: abort rx timeout. Force session deactivation
[  569.706376][T12934] XFS (loop3): Quotacheck: Done.
[  569.922148][T11367] XFS (loop3): Unmounting Filesystem
[  570.245502][   T26] audit: type=1804 audit(1719027682.172:1541): pid=12989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2613042003/syzkaller.0RIyTv/28/file1" dev="sda1" ino=1963 res=1 errno=0
[  570.271005][    C1] vkms_vblank_simulate: vblank timer overrun
[  570.315499][T12990] UBIFS error (pid: 12990): cannot open "./file0", error -22
[  570.344756][   T26] audit: type=1804 audit(1719027682.212:1542): pid=12989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2613042003/syzkaller.0RIyTv/28/file1" dev="sda1" ino=1963 res=1 errno=0
[  570.512085][   T26] audit: type=1804 audit(1719027682.222:1543): pid=12989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2613042003/syzkaller.0RIyTv/28/file1" dev="sda1" ino=1963 res=1 errno=0
[  570.537382][    C1] vkms_vblank_simulate: vblank timer overrun
[  570.633794][   T26] audit: type=1326 audit(1719027682.402:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12992 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f929387d0a9 code=0x0
[  571.340048][   T26] audit: type=1326 audit(1719027683.262:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13020 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c8187d0a9 code=0x0
[  571.419805][T13026] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'.
[  572.244394][T13026] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'.
[  572.878788][T13028] loop3: detected capacity change from 0 to 8192
[  573.271906][ T4507] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  573.541929][ T4507] usb 1-1: Using ep0 maxpacket: 8
[  573.702572][ T4507] usb 1-1: config 0 has an invalid interface number: 52 but max is 0
[  573.742857][ T4507] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  573.920923][ T4507] usb 1-1: config 0 has no interface number 0
[  574.080510][ T4507] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  574.121965][ T4507] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  574.169273][ T4507] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  574.225962][ T4507] usb 1-1: config 0 interface 52 has no altsetting 0
[  574.243880][ T4507] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  574.262126][ T4507] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  574.304919][ T4507] usb 1-1: config 0 descriptor??
[  574.566600][ T4507] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input53
[  574.601556][ T2988] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  574.635166][ T2988] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  574.661677][ T2988] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  574.706504][ T2988] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  574.764977][T13043] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  574.795395][T13090] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'.
[  574.830105][T13090] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'.
[  574.846173][ T4507] usb 1-1: USB disconnect, device number 31
[  576.152005][T13126] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0
[  576.784595][T13142] loop3: detected capacity change from 0 to 1024
[  576.795601][T13142] hfsplus: failed to load catalog file
[  576.961934][ T8871] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  577.196902][T13154] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'.
[  577.211887][ T8871] usb 1-1: Using ep0 maxpacket: 8
[  577.214380][T13154] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'.
[  577.333015][ T8871] usb 1-1: config 0 has an invalid interface number: 52 but max is 0
[  577.347424][ T8871] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  577.426640][ T8871] usb 1-1: config 0 has no interface number 0
[  577.454351][ T8871] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  577.616144][ T8871] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  578.327686][ T8871] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  578.340671][ T8871] usb 1-1: config 0 interface 52 has no altsetting 0
[  578.347628][ T8871] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  578.422203][ T8871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  578.446764][ T8871] usb 1-1: config 0 descriptor??
[  578.712847][ T8871] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input54
[  578.790119][ T2988] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  578.827055][ T2988] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  578.925173][T13140] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  578.944966][ T2988] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  578.990297][ T8871] usb 1-1: USB disconnect, device number 32
[  579.394582][ T1028] block nbd1: Attempted send on invalid socket
[  579.400823][ T1028] blk_print_req_error: 6 callbacks suppressed
[  579.400836][ T1028] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  580.074010][   T26] audit: type=1800 audit(1719027691.412:1546): pid=13185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".log" dev="sda1" ino=1965 res=0 errno=0
[  580.341998][T13197] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:0
[  580.371889][ T3618] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  580.621918][ T3618] usb 1-1: Using ep0 maxpacket: 8
[  580.752138][ T3618] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  580.779078][ T3618] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  580.932105][ T3618] usb 1-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da
[  580.961522][ T3618] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  581.052700][ T3618] usb 1-1: Manufacturer: syz
[  581.093966][ T3618] usb 1-1: config 0 descriptor??
[  581.194559][   T51] block nbd3: Attempted send on invalid socket
[  581.200799][   T51] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  581.292206][   T26] audit: type=1326 audit(1719027693.222:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13222 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c8187d0a9 code=0x0
[  581.335048][ T8871] usb 1-1: USB disconnect, device number 33
[  581.433012][ T3618] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  581.477577][T13224] loop3: detected capacity change from 0 to 8192
[  581.533350][T13224] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  581.547724][T13224] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  581.559813][T13224]  loop3: p2 p3 p4
[  581.565805][T13224] loop3: partition table partially beyond EOD, truncated
[  581.578407][T13224] loop3: p2 start 452985600 is beyond EOD, truncated
[  581.590514][T13224] loop3: p3 size 33554432 extends beyond EOD, truncated
[  581.604039][T13224] loop3: p4 start 8388607 is beyond EOD, truncated
[  581.681850][ T3618] usb 2-1: Using ep0 maxpacket: 8
[  581.815290][ T3618] usb 2-1: config 0 has an invalid interface number: 52 but max is 0
[  581.818901][ T3618] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  581.819844][ T3618] usb 2-1: config 0 has no interface number 0
[  581.822263][ T3618] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  581.823630][ T3618] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  581.823929][ T3618] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  581.824693][ T3618] usb 2-1: config 0 interface 52 has no altsetting 0
[  581.825595][ T3618] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  581.827367][ T3618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  581.877380][ T3618] usb 2-1: config 0 descriptor??
[  582.263711][ T3618] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input55
[  582.264705][ T2988] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  582.290140][ T2988] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  582.312416][ T2988] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  582.467931][T13217] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  582.469043][ T2988] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  582.482545][ T3618] usb 2-1: USB disconnect, device number 33
[  582.692101][   T26] audit: type=1800 audit(1719027694.492:1548): pid=13236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=".log" dev="sda1" ino=1966 res=0 errno=0
[  583.497607][ T3910] smc: removing net device ip6tnl0 with user defined pnetid SYZ2
[  583.991976][ T8869] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  584.100607][T13270] (syz-executor.4,13270,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options
[  584.114724][T13270] (syz-executor.4,13270,1):ocfs2_fill_super:1176 ERROR: status = -22
[  584.242118][ T8869] usb 4-1: Using ep0 maxpacket: 8
[  584.279654][ T3910] device hsr_slave_0 left promiscuous mode
[  584.287265][   T26] audit: type=1326 audit(1719027696.212:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13277 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb71967d0a9 code=0x0
[  584.310853][ T3910] device hsr_slave_1 left promiscuous mode
[  584.319369][ T3910] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  584.334345][ T3910] batman_adv: batadv0: Removing interface: batadv_slave_0
[  584.355082][ T3910] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  584.362042][ T8869] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  584.369003][ T3910] batman_adv: batadv0: Removing interface: batadv_slave_1
[  584.383059][ T8869] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  584.404168][ T3910] device bridge_slave_1 left promiscuous mode
[  584.419960][ T3910] bridge0: port 2(bridge_slave_1) entered disabled state
[  584.444810][ T3910] device bridge_slave_0 left promiscuous mode
[  584.456534][ T3910] bridge0: port 1(bridge_slave_0) entered disabled state
[  584.487728][ T3910] device veth1_macvtap left promiscuous mode
[  584.503611][ T8869] usb 4-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da
[  584.512976][ T3910] device veth0_macvtap left promiscuous mode
[  584.539799][ T8869] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  584.557486][ T3910] device veth1_vlan left promiscuous mode
[  584.572478][ T3910] device veth0_vlan left promiscuous mode
[  584.578578][ T8869] usb 4-1: Manufacturer: syz
[  584.581286][T13281] loop0: detected capacity change from 0 to 8192
[  584.591021][ T8869] usb 4-1: config 0 descriptor??
[  584.662780][T13281] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  584.693865][T13281] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  584.712008][T13281]  loop0: p2 p3 p4
[  584.715777][T13281] loop0: partition table partially beyond EOD, truncated
[  584.731948][T13281] loop0: p2 start 452985600 is beyond EOD, truncated
[  584.749942][T13281] loop0: p3 size 33554432 extends beyond EOD, truncated
[  584.814305][T13281] loop0: p4 start 8388607 is beyond EOD, truncated
[  584.912459][ T4502] usb 4-1: USB disconnect, device number 30
[  585.312448][ T3580] Bluetooth: hci7: command 0x0406 tx timeout
[  585.827740][ T3910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  585.863187][ T3910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  585.995571][ T3910] bond0 (unregistering): Released all slaves
[  586.317777][T13307] loop1: detected capacity change from 0 to 128
[  586.451022][T13307] loop1: detected capacity change from 0 to 2048
[  586.471465][T13307] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  586.505849][T13307] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  586.604786][T13322] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  586.686190][   T26] audit: type=1326 audit(1719027698.612:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13306 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce2a7d0a9 code=0x7fc00000
[  586.765618][   T26] audit: type=1326 audit(1719027698.632:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13306 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1ce2a7d0a9 code=0x7fc00000
[  586.993946][T13339] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0
[  587.036038][   T26] audit: type=1326 audit(1719027698.962:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13340 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d0d47d0a9 code=0x0
[  587.113870][   T26] audit: type=1326 audit(1719027699.032:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13306 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce2a7d0a9 code=0x7fc00000
[  587.325398][T13342] loop4: detected capacity change from 0 to 8192
[  587.383006][T13342] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  587.409757][T13342] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  587.432130][T13342]  loop4: p2 p3 p4
[  587.441654][T13342] loop4: partition table partially beyond EOD, truncated
[  587.453931][T13342] loop4: p2 start 452985600 is beyond EOD, truncated
[  587.464864][T13342] loop4: p3 size 33554432 extends beyond EOD, truncated
[  588.017775][T13342] loop4: p4 start 8388607 is beyond EOD, truncated
[  588.389624][T13361] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  589.592144][T13382] loop1: detected capacity change from 0 to 128
[  590.483783][T13382] loop1: detected capacity change from 0 to 2048
[  590.525023][T13382] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  590.568671][T13382] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  590.700981][   T26] audit: type=1326 audit(1719027702.622:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13381 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce2a7d0a9 code=0x7fc00000
[  590.750652][   T26] audit: type=1326 audit(1719027702.652:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13381 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1ce2a7d0a9 code=0x7fc00000
[  590.879862][   T26] audit: type=1326 audit(1719027702.802:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13381 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce2a7d0a9 code=0x7fc00000
[  591.035391][T13409] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  592.972980][T13435] loop1: detected capacity change from 0 to 128
[  593.128956][T13435] loop1: detected capacity change from 0 to 2048
[  593.162289][T13435] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  593.200898][T13441] loop4: detected capacity change from 0 to 4096
[  593.214203][T13435] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  593.254558][T13441] NILFS (loop4): invalid segment: Checksum error in segment payload
[  593.264395][T13441] NILFS (loop4): trying rollback from an earlier position
[  593.272218][T13441] NILFS (loop4): invalid segment: Checksum error in segment payload
[  593.281049][T13441] NILFS (loop4): error -22 while searching super root
[  593.360922][   T26] audit: type=1326 audit(1719027705.282:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13434 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce2a7d0a9 code=0x7fc00000
[  593.390516][   T26] audit: type=1326 audit(1719027705.312:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13434 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1ce2a7d0a9 code=0x7fc00000
[  593.951919][   T26] audit: type=1326 audit(1719027705.792:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13434 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce2a7d0a9 code=0x7fc00000
[  595.281941][T13473] loop4: detected capacity change from 0 to 16
[  595.301712][T13473] erofs: (device loop4): erofs_read_inode: unsupported chunk format 7fff of nid 36
[  595.375583][T13482] loop1: detected capacity change from 0 to 4096
[  595.398657][T13482] NILFS (loop1): invalid segment: Checksum error in segment payload
[  595.407035][T13482] NILFS (loop1): trying rollback from an earlier position
[  595.414773][T13482] NILFS (loop1): invalid segment: Checksum error in segment payload
[  595.423815][T13482] NILFS (loop1): error -22 while searching super root
[  595.851934][ T8869] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  596.282140][ T8869] usb 3-1: Using ep0 maxpacket: 8
[  596.862293][ T8869] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  596.892475][ T8869] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  596.926577][ T8869] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  597.105184][ T8869] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  597.124082][ T8869] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  598.035586][T13528] loop3: detected capacity change from 0 to 4096
[  598.062096][ T8869] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  598.077236][ T8869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.091841][ T8869] usb 3-1: Product: syz
[  598.098771][T13528] NILFS (loop3): invalid segment: Checksum error in segment payload
[  598.103126][ T8869] usb 3-1: Manufacturer: syz
[  598.110966][T13528] NILFS (loop3): trying rollback from an earlier position
[  598.118175][ T8869] usb 3-1: SerialNumber: syz
[  598.128178][T13528] NILFS (loop3): invalid segment: Checksum error in segment payload
[  598.140401][T13528] NILFS (loop3): error -22 while searching super root
[  598.252275][T13532] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0
[  598.416301][ T8869] cdc_ncm 3-1:1.0: bind() failure
[  598.430743][ T8869] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  598.444414][ T8869] cdc_ncm 3-1:1.1: bind() failure
[  598.454044][ T8869] usb 3-1: USB disconnect, device number 27
[  603.788313][T13710] loop0: detected capacity change from 0 to 16
[  603.939545][T13710] erofs: (device loop0): erofs_read_inode: unsupported chunk format 7fff of nid 36
[  607.204476][T13772] loop1: detected capacity change from 0 to 128
[  608.760142][T13802] loop4: detected capacity change from 0 to 256
[  608.803055][T13802] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  608.853272][T13802] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  609.133332][T13818] device gretap0 entered promiscuous mode
[  609.215340][T13823] overlayfs: unrecognized mount option "uid=00000000000000000000" or missing value
[  609.542327][ T4502] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  609.738170][T13845] loop4: detected capacity change from 0 to 1024
[  609.750245][T13845] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  609.767434][   T26] audit: type=1326 audit(1719027721.692:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13844 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d0d47d0a9 code=0x0
[  609.801210][T13845] EXT4-fs (loop4): unmounting filesystem.
[  609.870126][T13855] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  609.944942][ T4502] usb 2-1: config 0 has no interfaces?
[  609.950453][ T4502] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00
[  609.960035][ T4502] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  609.970177][ T4502] usb 2-1: config 0 descriptor??
[  610.226223][ T8869] usb 2-1: USB disconnect, device number 34
[  611.195953][T13909] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'.
[  611.223672][T13909] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'.
[  612.753625][   T26] audit: type=1326 audit(1719027724.682:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13945 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c8187d0a9 code=0x0
[  612.956157][T13953] loop3: detected capacity change from 0 to 8192
[  613.002413][T13953] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  613.023431][T13953] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  613.030205][T13953]  loop3: p2 p3 p4
[  613.034179][T13953] loop3: partition table partially beyond EOD, truncated
[  613.056038][T13958] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'.
[  613.076096][T13953] loop3: p2 start 452985600 is beyond EOD, truncated
[  613.086232][T13953] loop3: p3 size 33554432 extends beyond EOD, truncated
[  613.094229][T13958] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'.
[  613.112905][T13953] loop3: p4 start 8388607 is beyond EOD, truncated
[  615.531981][ T3619] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  615.741977][ T3619] usb 3-1: device descriptor read/64, error -71
[  616.012154][ T3619] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  616.276792][ T3619] usb 3-1: device descriptor read/64, error -71
[  616.413384][ T3619] usb usb3-port1: attempt power cycle
[  617.477121][T14037] loop0: detected capacity change from 0 to 16
[  617.504662][T14037] erofs: (device loop0): erofs_read_inode: unsupported chunk format 7fff of nid 36
[  617.571883][ T3619] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  617.580992][T14044] loop4: detected capacity change from 0 to 4096
[  617.590863][T14044] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  617.669043][T14044] ntfs3: loop4: failed to convert "0030" to iso8859-6
[  617.672012][ T3619] usb 3-1: device descriptor read/8, error -71
[  617.717545][T14044] ntfs3: loop4: failed to convert "0031" to iso8859-6
[  617.737491][T14044] ntfs3: loop4: failed to convert "0032" to iso8859-6
[  617.747492][T14044] ntfs3: loop4: failed to convert "0033" to iso8859-6
[  617.827700][   T26] audit: type=1326 audit(1719027729.752:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14050 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d0d47d0a9 code=0x0
[  617.951918][ T3619] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  618.011392][T14056] loop4: detected capacity change from 0 to 8192
[  618.052047][ T3619] usb 3-1: device descriptor read/8, error -71
[  618.072706][T14056] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  618.083925][T14056] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  618.090681][T14056]  loop4: p2 p3 p4
[  618.094889][T14056] loop4: partition table partially beyond EOD, truncated
[  618.110497][T14056] loop4: p2 start 452985600 is beyond EOD, truncated
[  618.121984][T14056] loop4: p3 size 33554432 extends beyond EOD, truncated
[  618.129994][T14056] loop4: p4 start 8388607 is beyond EOD, truncated
[  618.174870][ T3619] usb usb3-port1: unable to enumerate USB device
[  618.942264][T14062] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0
[  618.967395][T14077] loop2: detected capacity change from 0 to 128
[  619.885437][T14087] loop4: detected capacity change from 0 to 16
[  619.893184][T14076] loop2: detected capacity change from 0 to 2048
[  619.953387][T14076] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  619.982077][T14087] erofs: (device loop4): erofs_read_inode: unsupported chunk format 7fff of nid 36
[  620.014136][T14076] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  620.207801][   T26] audit: type=1326 audit(1719027732.132:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14075 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929387d0a9 code=0x7fc00000
[  620.240451][   T26] audit: type=1326 audit(1719027732.142:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14075 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f929387d0a9 code=0x7fc00000
[  620.272184][   T26] audit: type=1326 audit(1719027732.192:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14075 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929387d0a9 code=0x7fc00000
[  620.322024][   T26] audit: type=1326 audit(1719027732.192:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14075 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929387d0a9 code=0x7fc00000
[  620.365514][   T26] audit: type=1326 audit(1719027732.192:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14075 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929387d0a9 code=0x7fc00000
[  620.398954][   T26] audit: type=1326 audit(1719027732.192:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14075 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929387d0a9 code=0x7fc00000
[  620.448679][   T26] audit: type=1326 audit(1719027732.192:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14075 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929387d0a9 code=0x7fc00000
[  620.506913][   T26] audit: type=1326 audit(1719027732.192:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14075 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929387d0a9 code=0x7fc00000
[  620.521933][ T3618] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  620.544410][   T26] audit: type=1326 audit(1719027732.192:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14075 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929387d0a9 code=0x7fc00000
[  620.703986][T14109] loop2: detected capacity change from 0 to 64
[  620.795045][ T3618] usb 5-1: device descriptor read/64, error -71
[  620.843531][ T1028] block nbd1: Attempted send on invalid socket
[  620.850805][ T1028] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  620.860134][T14111] hfs: can't find a HFS filesystem on dev nbd1
[  621.081864][ T3618] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  621.192491][T14120] loop2: detected capacity change from 0 to 8192
[  621.252554][T14120] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  621.284865][T14120] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  621.291566][T14120]  loop2: p2 p3 p4
[  621.295616][ T3618] usb 5-1: device descriptor read/64, error -71
[  621.311166][T14120] loop2: partition table partially beyond EOD, truncated
[  621.320187][T14120] loop2: p2 start 452985600 is beyond EOD, truncated
[  621.334670][T14120] loop2: p3 size 33554432 extends beyond EOD, truncated
[  621.422034][ T3618] usb usb5-port1: attempt power cycle
[  621.435927][T14120] loop2: p4 start 8388607 is beyond EOD, truncated
[  621.852030][ T3618] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  622.222076][ T3618] usb 5-1: device descriptor read/8, error -71
[  622.511994][ T3618] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  623.015398][ T3618] usb 5-1: device descriptor read/8, error -71
[  623.152048][ T3618] usb usb5-port1: unable to enumerate USB device
[  623.493054][T14155] syz-executor.2[14155] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  623.493189][T14155] syz-executor.2[14155] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  624.115642][   T26] kauditd_printk_skb: 50 callbacks suppressed
[  624.115657][   T26] audit: type=1326 audit(1719027736.042:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14171 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb71967d0a9 code=0x0
[  624.197026][ T1256] ieee802154 phy0 wpan0: encryption failed: -22
[  624.392058][ T4507] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  624.413743][T14178] loop0: detected capacity change from 0 to 8192
[  624.472603][T14178] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  624.502617][T14178] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  624.523438][T14178]  loop0: p2 p3 p4
[  624.528444][T14178] loop0: partition table partially beyond EOD, truncated
[  624.545037][T14178] loop0: p2 start 452985600 is beyond EOD, truncated
[  624.559124][T14178] loop0: p3 size 33554432 extends beyond EOD, truncated
[  624.611849][ T4507] usb 2-1: device descriptor read/64, error -71
[  624.718556][T14178] loop0: p4 start 8388607 is beyond EOD, truncated
[  624.914616][ T4507] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  625.152273][ T4507] usb 2-1: device descriptor read/64, error -71
[  625.272024][ T4507] usb usb2-port1: attempt power cycle
[  625.701896][ T4507] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  625.761434][T14197] ptrace attach of "/root/syz-executor.4 exec"[12428] was attempted by "/root/syz-executor.4 exec"[14197]
[  625.813344][ T4507] usb 2-1: device descriptor read/8, error -71
[  626.043468][T14214] loop0: detected capacity change from 0 to 64
[  626.112224][ T4507] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  626.242452][ T4507] usb 2-1: device descriptor read/8, error -71
[  626.249216][T14220] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
[  626.372956][ T4507] usb usb2-port1: unable to enumerate USB device
[  627.635826][T14272] loop0: detected capacity change from 0 to 64
[  627.792677][T14276] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
[  628.492960][   T26] audit: type=1804 audit(1719027740.422:1623): pid=14305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir424438746/syzkaller.gqn7mB/172/file1" dev="sda1" ino=1960 res=1 errno=0
[  628.575640][   T26] audit: type=1804 audit(1719027740.422:1624): pid=14305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir424438746/syzkaller.gqn7mB/172/file1" dev="sda1" ino=1960 res=1 errno=0
[  629.841278][T14335] loop4: detected capacity change from 0 to 16
[  629.867293][T14335] erofs: (device loop4): erofs_read_inode: unsupported chunk format 7fff of nid 36
[  630.249593][   T26] audit: type=1326 audit(1719027742.172:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14350 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb71967d0a9 code=0x0
[  630.519955][T14354] loop0: detected capacity change from 0 to 8192
[  630.602525][T14354] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  630.623257][T14354] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  630.639611][T14354]  loop0: p2 p3 p4
[  630.647166][T14354] loop0: partition table partially beyond EOD, truncated
[  630.658478][T14354] loop0: p2 start 452985600 is beyond EOD, truncated
[  630.667660][T14354] loop0: p3 size 33554432 extends beyond EOD, truncated
[  630.721976][T14354] loop0: p4 start 8388607 is beyond EOD, truncated
[  631.491990][T14367] loop3: detected capacity change from 0 to 512
[  631.531502][T14367] EXT4-fs: Mount option(s) incompatible with ext2
[  631.596900][T14365] loop2: detected capacity change from 0 to 8192
[  631.665971][   T26] audit: type=1804 audit(1719027743.592:1626): pid=14369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1284834441/syzkaller.tI0BOW/447/file1" dev="sda1" ino=1965 res=1 errno=0
[  631.747264][   T26] audit: type=1804 audit(1719027743.592:1627): pid=14369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1284834441/syzkaller.tI0BOW/447/file1" dev="sda1" ino=1965 res=1 errno=0
[  631.783800][T14373] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  631.802153][T14373] FAT-fs (loop2): Filesystem has been set read-only
[  631.826249][T14371] loop3: detected capacity change from 0 to 16
[  631.874862][T14371] erofs: (device loop3): erofs_read_inode: unsupported chunk format 7fff of nid 36
[  634.182087][T14396] device vlan0 entered promiscuous mode
[  634.219568][T14396] device team0 entered promiscuous mode
[  634.249986][T14396] device team_slave_0 entered promiscuous mode
[  634.259866][T14396] device team_slave_1 entered promiscuous mode
[  634.294756][T14396] team0: Device vlan0 is already an upper device of the team interface
[  634.339817][T14396] device team0 left promiscuous mode
[  634.360905][T14396] device team_slave_0 left promiscuous mode
[  634.387663][T14396] device team_slave_1 left promiscuous mode
[  634.520330][T14402] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  634.539559][T14402] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  634.601417][T14402] device netdevsim0 entered promiscuous mode
[  634.631411][T14402] device batadv_slave_0 entered promiscuous mode
[  634.656432][T14402] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  634.659793][T14404] loop0: detected capacity change from 0 to 16
[  634.684832][T14404] erofs: (device loop0): erofs_read_inode: unsupported chunk format 7fff of nid 36
[  634.695642][T14402] Cannot create hsr debugfs directory
[  634.728196][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  634.952411][T14407] loop0: detected capacity change from 0 to 4096
[  634.994374][T14407] NILFS (loop0): invalid segment: Checksum error in segment payload
[  635.018242][T14407] NILFS (loop0): trying rollback from an earlier position
[  635.048503][T14407] NILFS (loop0): invalid segment: Checksum error in segment payload
[  635.085993][T14407] NILFS (loop0): error -22 while searching super root
[  635.493983][   T26] audit: type=1804 audit(1719027747.422:1628): pid=14419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir318043007/syzkaller.8LMs3T/646/file1" dev="sda1" ino=1965 res=1 errno=0
[  635.607716][   T26] audit: type=1804 audit(1719027747.422:1629): pid=14419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir318043007/syzkaller.8LMs3T/646/file1" dev="sda1" ino=1965 res=1 errno=0
[  636.463256][T14430] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  636.736490][T14433] loop0: detected capacity change from 0 to 16
[  636.785095][T14433] erofs: (device loop0): erofs_read_inode: unsupported chunk format 7fff of nid 36
[  637.072769][T14435] loop0: detected capacity change from 0 to 1024
[  637.142593][T14435] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  637.205265][   T26] audit: type=1326 audit(1719027749.132:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14434 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb71967d0a9 code=0x0
[  637.240182][T14435] EXT4-fs (loop0): unmounting filesystem.
[  637.311600][T14447] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[  637.580508][T14455] bridge0: port 1(bridge_slave_0) entered disabled state
[  637.598798][T14455] bridge0: port 2(bridge_slave_1) entered disabled state
[  637.973519][T14465] loop4: detected capacity change from 0 to 16
[  637.992769][T14465] erofs: Unknown parameter '����'
[  638.280481][T14481] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  638.395371][T14487] loop4: detected capacity change from 0 to 1024
[  638.444295][T14487] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  638.478225][   T26] audit: type=1326 audit(1719027750.402:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14483 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d0d47d0a9 code=0x0
[  638.500792][    C0] vkms_vblank_simulate: vblank timer overrun
[  638.514075][T14487] EXT4-fs (loop4): unmounting filesystem.
[  638.579418][T14498] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  638.706051][T14500] loop1: detected capacity change from 0 to 16
[  638.721499][T14500] erofs: Unknown parameter '����'
[  640.025177][T14537] loop3: detected capacity change from 0 to 16
[  640.048540][T14537] erofs: Unknown parameter '����'
[  640.218822][T14548] loop0: detected capacity change from 0 to 1024
[  640.239978][T14548] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  640.396895][   T26] audit: type=1326 audit(1719027752.322:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14546 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb71967d0a9 code=0x0
[  640.403890][T14548] EXT4-fs (loop0): unmounting filesystem.
[  640.419422][    C0] vkms_vblank_simulate: vblank timer overrun
[  640.676759][T14561] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[  641.448142][T14567] netlink: 892 bytes leftover after parsing attributes in process `syz-executor.1'.
[  641.499114][T14571] delete_channel: no stack
[  641.584857][T14581] loop4: detected capacity change from 0 to 16
[  641.592403][T14581] erofs: Unknown parameter '����'
[  642.013361][T14596] loop4: detected capacity change from 0 to 4096
[  642.035123][T14596] NILFS (loop4): invalid segment: Checksum error in segment payload
[  642.049875][T14596] NILFS (loop4): trying rollback from an earlier position
[  642.057890][T14596] NILFS (loop4): invalid segment: Checksum error in segment payload
[  642.141964][T14596] NILFS (loop4): error -22 while searching super root
[  643.369801][T14624] loop3: detected capacity change from 0 to 256
[  643.390535][T14624] FAT-fs (loop3): Unrecognized mount option "iochabset=default" or missing value
[  643.433579][T14626] loop2: detected capacity change from 0 to 16
[  643.459518][T14626] erofs: Unknown parameter '����'
[  644.325159][T14640] binder: 14637:14640 ioctl 4018620d 0 returned -22
[  645.655813][T14624] loop3: detected capacity change from 0 to 32768
[  645.679149][T14624] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (14624)
[  645.707308][T14624] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  645.718638][T14624] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  645.727621][T14624] BTRFS info (device loop3): force clearing of disk cache
[  645.735793][T14624] BTRFS info (device loop3): using free space tree
[  646.056581][T14664] loop4: detected capacity change from 0 to 4096
[  646.085998][T14664] NILFS (loop4): invalid segment: Checksum error in segment payload
[  646.122172][T14664] NILFS (loop4): trying rollback from an earlier position
[  646.160384][T14664] NILFS (loop4): invalid segment: Checksum error in segment payload
[  646.170523][T14664] NILFS (loop4): error -22 while searching super root
[  646.206959][T14681] loop2: detected capacity change from 0 to 128
[  646.392743][T14681] loop2: detected capacity change from 0 to 2048
[  646.411578][T14624] BTRFS error (device loop3): open_ctree failed
[  646.429906][T14681] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  646.484464][T14681] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  646.670850][   T26] audit: type=1326 audit(1719027758.592:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929387d0a9 code=0x7fc00000
[  646.991874][   T26] audit: type=1326 audit(1719027758.912:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f929387d0a9 code=0x7fc00000
[  647.062326][ T3582] Bluetooth: hci1: command 0x0406 tx timeout
[  647.065241][   T26] audit: type=1326 audit(1719027758.912:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929387d0a9 code=0x7fc00000
[  647.243660][   T26] audit: type=1326 audit(1719027758.912:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929387d0a9 code=0x7fc00000
[  647.353579][   T26] audit: type=1326 audit(1719027758.912:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929387d0a9 code=0x7fc00000
[  647.398445][   T26] audit: type=1326 audit(1719027758.912:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929387d0a9 code=0x7fc00000
[  647.540595][   T26] audit: type=1326 audit(1719027758.912:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929387d0a9 code=0x7fc00000
[  647.585736][T14718] loop3: detected capacity change from 0 to 256
[  647.597304][   T26] audit: type=1326 audit(1719027758.912:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929387d0a9 code=0x7fc00000
[  647.631126][T14718] FAT-fs (loop3): Unrecognized mount option "iochabset=default" or missing value
[  647.644087][   T26] audit: type=1326 audit(1719027758.912:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929387d0a9 code=0x7fc00000
[  647.697154][   T26] audit: type=1326 audit(1719027758.912:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929387d0a9 code=0x7fc00000
[  648.323399][T14736] loop1: detected capacity change from 0 to 1024
[  648.409207][T14736] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  648.539446][T14736] EXT4-fs (loop1): unmounting filesystem.
[  648.641452][T14749] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
[  649.027197][T14718] loop3: detected capacity change from 0 to 32768
[  649.039837][T14718] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (14718)
[  649.060790][T14718] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  649.072356][T14718] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  649.081124][T14718] BTRFS info (device loop3): force clearing of disk cache
[  649.088425][T14718] BTRFS info (device loop3): using free space tree
[  649.191067][T14718] BTRFS info (device loop3): enabling ssd optimizations
[  649.199374][T14718] BTRFS info (device loop3): rebuilding free space tree
[  649.307862][T14775] loop4: detected capacity change from 0 to 1024
[  649.353831][T14775] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  649.653119][T12428] EXT4-fs (loop4): unmounting filesystem.
[  649.830492][T14752] loop2: detected capacity change from 0 to 32768
[  649.896324][T14752] XFS (loop2): Mounting V5 Filesystem
[  650.006312][T14752] XFS (loop2): Ending clean mount
[  650.101655][T14752] kAFS: unable to lookup cell '/yz@)29�k��k��hwِ`ʲa��m.���U���a���ܡ�wX��NɑL w���4���K�.ö��/?�ru-8�"�����QofDo���Bث����F����{��M���'
[  650.151429][T14752] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  650.184019][T12214] XFS (loop2): Unmounting Filesystem
[  650.256354][T11367] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  650.596788][T14817] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  650.691097][T14820] loop4: detected capacity change from 0 to 1024
[  650.719816][T14820] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  650.764253][T14820] EXT4-fs (loop4): unmounting filesystem.
[  650.857945][T14829] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  650.887434][T14831] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'.
[  650.912189][T14831] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'.
[  650.932895][T14834] loop0: detected capacity change from 0 to 1024
[  650.945863][T14834] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  651.044934][ T7819] EXT4-fs (loop0): unmounting filesystem.
[  652.147735][T14845] loop2: detected capacity change from 0 to 32768
[  652.167182][T14859] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  652.180285][T14845] XFS (loop2): Mounting V5 Filesystem
[  652.249485][T14845] XFS (loop2): Ending clean mount
[  652.298638][T14845] kAFS: unable to lookup cell '/yz@)29�k��k��hwِ`ʲa��m.���U���a���ܡ�wX��NɑL w���4���K�.ö��/?�ru-8�"�����QofDo���Bث����F����{��M���'
[  652.330405][T14845] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  652.364221][T14875] loop3: detected capacity change from 0 to 1024
[  652.388686][T12214] XFS (loop2): Unmounting Filesystem
[  652.392056][T14875] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  652.514753][T11367] EXT4-fs (loop3): unmounting filesystem.
[  653.194367][T14902] binder: 14898:14902 ioctl 4018620d 0 returned -22
[  653.953660][T14907] loop0: detected capacity change from 0 to 16
[  653.962931][T14907] erofs: Unknown parameter '����'
[  654.299521][T14919] loop0: detected capacity change from 0 to 1024
[  654.534595][T14919] loop0: detected capacity change from 0 to 1764
[  654.737529][   T26] kauditd_printk_skb: 19 callbacks suppressed
[  654.737543][   T26] audit: type=1326 audit(1719027766.662:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14914 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb71967d0a9 code=0x0
[  655.042660][T14925] loop3: detected capacity change from 0 to 1764
[  655.076161][T14911] loop2: detected capacity change from 0 to 32768
[  655.118821][T14911] XFS (loop2): Mounting V5 Filesystem
[  655.211583][T14911] XFS (loop2): Ending clean mount
[  655.268558][T14911] kAFS: unable to lookup cell '/yz@)29�k��k��hwِ`ʲa��m.���U���a���ܡ�wX��NɑL w���4���K�.ö��/?�ru-8�"�����QofDo���Bث����F����{��M���'
[  655.344379][T14911] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  655.420131][T12214] XFS (loop2): Unmounting Filesystem
[  655.660390][T14925] loop3: detected capacity change from 0 to 32768
[  655.683413][T14925] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (14925)
[  655.718881][T14925] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  655.741901][T14925] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  655.757885][T14925] BTRFS info (device loop3): enabling auto defrag
[  655.764493][T14925] BTRFS info (device loop3): doing ref verification
[  655.774741][T14925] BTRFS info (device loop3): max_inline at 0
[  655.781035][T14925] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  655.792277][T14925] BTRFS info (device loop3): trying to use backup root at mount time
[  655.800679][T14925] BTRFS info (device loop3): turning on sync discard
[  655.814273][T14925] BTRFS info (device loop3): disabling tree log
[  655.820617][T14925] BTRFS info (device loop3): disabling free space tree
[  655.829438][T14925] BTRFS error (device loop3): cannot disable free space tree
[  655.852024][T14925] BTRFS error (device loop3): open_ctree failed
[  656.054968][T14956] loop0: detected capacity change from 0 to 16
[  656.066352][T14956] erofs: Unknown parameter '����'
[  656.675230][T14968] binder: 14962:14968 ioctl 4018620d 0 returned -22
[  657.511666][T14976] loop2: detected capacity change from 0 to 64
[  657.586375][   T26] audit: type=1800 audit(1719027769.512:1663): pid=14976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=21 res=0 errno=0
[  657.637428][T14982] loop3: detected capacity change from 0 to 1024
[  657.682203][T14985] loop1: detected capacity change from 0 to 16
[  657.690775][T14985] erofs: Unknown parameter '����'
[  657.808183][T14982] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  658.094108][T11367] EXT4-fs (loop3): unmounting filesystem.
[  658.146132][T14998] loop0: detected capacity change from 0 to 256
[  658.170003][T14998] FAT-fs (loop0): Unrecognized mount option "iochabset=default" or missing value
[  658.181038][T15000] binder: 14999:15000 ioctl ae41 2 returned -22
[  658.769618][T15009] loop2: detected capacity change from 0 to 256
[  658.778631][T15009] FAT-fs (loop2): Unrecognized mount option "iochabset=default" or missing value
[  658.852347][T14998] loop0: detected capacity change from 0 to 32768
[  658.866472][T14998] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (14998)
[  658.886958][T14998] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  658.897336][T14998] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  658.906219][T14998] BTRFS info (device loop0): force clearing of disk cache
[  658.920184][T14998] BTRFS info (device loop0): using free space tree
[  659.076815][T14998] BTRFS info (device loop0): enabling ssd optimizations
[  659.234872][T14998] BTRFS info (device loop0): rebuilding free space tree
[  659.600855][T15035] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  659.912194][T15038] loop1: detected capacity change from 0 to 512
[  660.063122][T15040] loop3: detected capacity change from 0 to 64
[  660.091417][   T26] audit: type=1800 audit(1719027772.012:1664): pid=15040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=21 res=0 errno=0
[  660.201272][T15009] loop2: detected capacity change from 0 to 32768
[  660.244785][T15009] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor.2 (15009)
[  660.687902][ T7819] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  661.159878][T15009] loop2: detected capacity change from 0 to 1764
[  661.788491][T15071] netlink: 'syz-executor.4': attribute type 16 has an invalid length.
[  661.817876][T15071] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  661.848087][T15071] netlink: 64066 bytes leftover after parsing attributes in process `syz-executor.4'.
[  661.986309][   T26] audit: type=1800 audit(1719027773.912:1665): pid=15072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1964 res=0 errno=0
[  662.205360][ T3582] Bluetooth: hci0: command 0x0406 tx timeout
[  663.137491][T15060] loop0: detected capacity change from 0 to 65536
[  663.162785][T15060] XFS (loop0): Mounting V5 Filesystem
[  663.238404][T15060] XFS (loop0): Ending clean mount
[  663.270037][T15060] XFS (loop0): Quotacheck needed: Please wait.
[  663.331706][T15060] XFS (loop0): Quotacheck: Done.
[  663.386635][   T26] audit: type=1800 audit(1719027775.312:1666): pid=15060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=42 res=0 errno=0
[  663.446982][T15112] loop1: detected capacity change from 0 to 256
[  663.469438][T15112] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  663.543225][   T26] audit: type=1804 audit(1719027775.472:1667): pid=15060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1284834441/syzkaller.tI0BOW/487/file0/bus" dev="loop0" ino=42 res=1 errno=0
[  663.587053][ T7819] XFS (loop0): Unmounting Filesystem
[  663.859690][T15120] device dummy0 entered promiscuous mode
[  664.148432][T15127] binder: 15117:15127 ioctl 4018620d 0 returned -22
[  665.149066][T15142] loop0: detected capacity change from 0 to 64
[  665.199364][   T26] audit: type=1800 audit(1719027777.122:1668): pid=15142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=21 res=0 errno=0
[  666.827762][   T26] audit: type=1326 audit(1719027778.752:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15173 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb71967d0a9 code=0x0
[  666.920722][T15176] loop3: detected capacity change from 0 to 16
[  666.952758][T15176] erofs: Unknown parameter '����'
[  666.965803][T15144] loop4: detected capacity change from 0 to 65536
[  667.017433][T15144] XFS (loop4): Mounting V5 Filesystem
[  667.081390][T15144] XFS (loop4): Ending clean mount
[  667.137156][T15144] XFS (loop4): Quotacheck needed: Please wait.
[  667.218719][T15144] XFS (loop4): Quotacheck: Done.
[  667.255928][   T26] audit: type=1800 audit(1719027779.182:1670): pid=15144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=42 res=0 errno=0
[  667.340980][   T26] audit: type=1804 audit(1719027779.262:1671): pid=15144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2613042003/syzkaller.0RIyTv/178/file0/bus" dev="loop4" ino=42 res=1 errno=0
[  667.380346][T15191] loop3: detected capacity change from 0 to 32768
[  667.388491][T15191] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (15191)
[  667.420143][T12428] XFS (loop4): Unmounting Filesystem
[  667.433100][T15191] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  667.446941][T15191] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  667.479965][T15191] BTRFS info (device loop3): turning on flush-on-commit
[  667.495727][T15191] BTRFS info (device loop3): turning off barriers
[  667.505027][T15191] BTRFS info (device loop3): doing ref verification
[  667.511818][T15191] BTRFS info (device loop3): enabling disk space caching
[  667.538674][T15191] BTRFS info (device loop3): turning on barriers
[  667.560998][T15191] BTRFS info (device loop3): using default commit interval 30s
[  667.568822][T15191] BTRFS error (device loop3): unrecognized mount option 'fowner>00000000000000000000'
[  667.588706][T15191] BTRFS error (device loop3): cannot disable free space tree
[  667.615119][T15191] BTRFS error (device loop3): open_ctree failed
[  668.833242][T15191] can: request_module (can-proto-0) failed.
[  669.439632][   T26] audit: type=1326 audit(1719027781.362:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15239 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c8187d0a9 code=0x0
[  669.648178][T15244] loop1: detected capacity change from 0 to 256
[  669.657014][T15244] FAT-fs (loop1): Unrecognized mount option "iochabset=default" or missing value
[  670.109416][T15251] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  670.284522][T15253] loop2: detected capacity change from 0 to 1024
[  670.512286][T15228] loop0: detected capacity change from 0 to 65536
[  670.543472][T15262] loop4: detected capacity change from 0 to 64
[  670.570006][   T26] audit: type=1800 audit(1719027782.492:1673): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=21 res=0 errno=0
[  670.595275][T15253] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  670.618072][T15228] XFS (loop0): Mounting V5 Filesystem
[  670.642793][   T26] audit: type=1800 audit(1719027782.492:1674): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=21 res=0 errno=0
[  670.717448][T15228] XFS (loop0): Ending clean mount
[  670.722608][   T26] audit: type=1326 audit(1719027782.642:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15252 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f929387d0a9 code=0x0
[  670.759553][T15228] XFS (loop0): Quotacheck needed: Please wait.
[  670.769907][T15253] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[  670.823671][T15228] XFS (loop0): Quotacheck: Done.
[  670.863756][T15253] EXT4-fs (loop2): unmounting filesystem.
[  670.939977][   T26] audit: type=1800 audit(1719027782.862:1676): pid=15228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=42 res=0 errno=0
[  671.030704][T15275] loop2: detected capacity change from 0 to 2048
[  671.041180][   T26] audit: type=1804 audit(1719027782.962:1677): pid=15228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1284834441/syzkaller.tI0BOW/494/file0/bus" dev="loop0" ino=42 res=1 errno=0
[  671.098800][ T7819] XFS (loop0): Unmounting Filesystem
[  671.109083][T15275] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  671.167808][T15275] UDF-fs: Scanning with blocksize 512 failed
[  671.194613][T15275] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  671.231918][T15275] UDF-fs: Scanning with blocksize 1024 failed
[  671.265785][T15275] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  671.306985][T15267] loop3: detected capacity change from 0 to 32768
[  671.308182][T15275] UDF-fs: Scanning with blocksize 2048 failed
[  671.325162][T15267] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (15267)
[  671.352128][T15275] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  671.372036][T15275] UDF-fs: Scanning with blocksize 4096 failed
[  671.399356][T15267] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  671.442841][T15267] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  671.472053][T15267] BTRFS info (device loop3): turning on flush-on-commit
[  671.479105][T15267] BTRFS info (device loop3): turning off barriers
[  671.513385][T15244] loop1: detected capacity change from 0 to 32768
[  671.543269][T15267] BTRFS info (device loop3): doing ref verification
[  671.550940][T15267] BTRFS info (device loop3): enabling disk space caching
[  671.567661][T15267] BTRFS info (device loop3): turning on barriers
[  671.584542][T15244] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (15244)
[  671.584611][T15267] BTRFS info (device loop3): using default commit interval 30s
[  671.623960][T15276] loop2: detected capacity change from 0 to 512
[  671.633872][T15244] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  671.645690][T15244] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  671.657882][T15244] BTRFS info (device loop1): force clearing of disk cache
[  671.665307][T15244] BTRFS info (device loop1): using free space tree
[  671.682386][T15267] BTRFS error (device loop3): unrecognized mount option 'fowner>00000000000000000000'
[  671.692449][T15276] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  671.731333][T15267] BTRFS error (device loop3): cannot disable free space tree
[  671.809831][T15267] BTRFS error (device loop3): open_ctree failed
[  671.831445][T15276] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz-executor.2: bad orphan inode 16
[  671.860926][T15276] ext4_test_bit(bit=15, block=4) = 0
[  671.866768][T15276] EXT4-fs (loop2): 1 orphan inode deleted
[  671.874629][T15276] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  672.048836][T15244] BTRFS info (device loop1): enabling ssd optimizations
[  672.059462][T15244] BTRFS info (device loop1): rebuilding free space tree
[  672.099345][T15276] EXT4-fs error (device loop2): ext4_lookup:1855: inode #15: comm syz-executor.2: iget: bad extra_isize 46 (inode size 256)
[  672.144922][T15273] loop4: detected capacity change from 0 to 40427
[  672.180058][T15273] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  672.207412][T15273] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  672.294243][T15273] F2FS-fs (loop4): Found nat_bits in checkpoint
[  672.428907][T15273] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  672.470476][T15267] can: request_module (can-proto-0) failed.
[  672.591066][T15273] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  672.641883][T15273] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  673.687972][T12214] EXT4-fs (loop2): unmounting filesystem.
[  673.740058][ T4549] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  674.372142][T15329] loop4: detected capacity change from 0 to 64
[  674.416382][   T26] audit: type=1800 audit(1719027786.342:1678): pid=15329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=21 res=0 errno=0
[  674.492674][   T26] audit: type=1800 audit(1719027786.372:1679): pid=15329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=21 res=0 errno=0
[  674.504385][T15331] loop3: detected capacity change from 0 to 1024
[  674.583115][T15331] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  674.625665][   T26] audit: type=1326 audit(1719027786.552:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15330 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c8187d0a9 code=0x0
[  674.651607][T15331] EXT4-fs (loop3): unmounting filesystem.
[  674.729070][T15343] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
[  674.754073][   T26] audit: type=1326 audit(1719027786.692:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15342 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0d47d0a9 code=0x7ffc0000
[  674.830669][   T26] audit: type=1326 audit(1719027786.702:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15342 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3d0d47d0a9 code=0x7ffc0000
[  675.049115][T15352] loop4: detected capacity change from 0 to 2048
[  675.074576][T15352] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  675.090740][T15352] UDF-fs: Scanning with blocksize 512 failed
[  675.105937][T15352] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  675.117843][T15352] UDF-fs: Scanning with blocksize 1024 failed
[  675.144368][T15352] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  675.169088][T15352] UDF-fs: Scanning with blocksize 2048 failed
[  675.190788][T15352] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  675.208077][T15352] UDF-fs: Scanning with blocksize 4096 failed
[  675.230646][T15341] loop0: detected capacity change from 0 to 40427
[  675.238288][T15341] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  675.246505][T15341] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  675.274982][T15341] F2FS-fs (loop0): Found nat_bits in checkpoint
[  675.342067][T15341] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  675.357284][T15365] loop3: detected capacity change from 0 to 64
[  675.402636][T15341] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  675.405451][T15363] loop4: detected capacity change from 0 to 512
[  675.425690][T15341] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  675.441479][T15363] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  675.479465][T15363] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz-executor.4: bad orphan inode 16
[  675.805180][   T26] kauditd_printk_skb: 3 callbacks suppressed
[  675.805196][   T26] audit: type=1326 audit(1719027787.732:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15371 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f929387d0a9 code=0x0
[  675.955596][T15363] ext4_test_bit(bit=15, block=4) = 0
[  675.961448][T15363] EXT4-fs (loop4): 1 orphan inode deleted
[  675.967483][T15363] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  676.624792][T15363] EXT4-fs error (device loop4): ext4_lookup:1855: inode #15: comm syz-executor.4: iget: bad extra_isize 46 (inode size 256)
[  676.839108][T15386] loop1: detected capacity change from 0 to 128
[  677.025084][   T26] audit: type=1800 audit(1719027788.952:1687): pid=15386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1049321 res=0 errno=0
[  677.617746][T15397] loop3: detected capacity change from 0 to 1024
[  677.715527][T15335] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  677.734910][T15397] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  677.952268][   T26] audit: type=1326 audit(1719027789.882:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15396 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c8187d0a9 code=0x0
[  677.986103][T15397] EXT4-fs (loop3): unmounting filesystem.
[  678.065691][T15401] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
[  678.954720][   T26] audit: type=1326 audit(1719027790.882:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15408 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c8187d0a9 code=0x0
[  679.196397][T15410] loop3: detected capacity change from 0 to 8192
[  679.269380][T12428] EXT4-fs (loop4): unmounting filesystem.
[  679.282697][T15410] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  679.298872][T15410] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  679.330466][T15410]  loop3: p2 p3 p4
[  679.357177][T15410] loop3: partition table partially beyond EOD, truncated
[  679.390162][T15410] loop3: p2 start 452985600 is beyond EOD, truncated
[  679.397518][T15410] loop3: p3 size 33554432 extends beyond EOD, truncated
[  679.773342][T15410] loop3: p4 start 8388607 is beyond EOD, truncated
[  680.618330][T15416] loop4: detected capacity change from 0 to 40427
[  680.649887][T15416] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  680.666987][T15416] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  680.716627][T15416] F2FS-fs (loop4): Found nat_bits in checkpoint
[  680.795385][T15416] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  680.855474][T15416] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  680.862657][T15416] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  683.419471][T15462] device macsec1 entered promiscuous mode
[  683.426238][T15462] device macvlan1 entered promiscuous mode
[  683.436839][T15462] device macvlan1 left promiscuous mode
[  683.590006][T15465] loop2: detected capacity change from 0 to 64
[  683.756401][T15469] netlink: 'syz-executor.2': attribute type 5 has an invalid length.
[  684.244921][T15474] loop0: detected capacity change from 0 to 7
[  684.317646][T15474] Dev loop0: unable to read RDB block 7
[  684.331511][T15474]  loop0: unable to read partition table
[  684.345670][T15474] loop0: partition table beyond EOD, truncated
[  684.352434][T15474] loop_reread_partitions: partition scan of loop0 (�被x������ڬ��dƤ����ݡ�����
[  684.352434][T15474] 
) failed (rc=-5)
[  684.783855][   T26] audit: type=1800 audit(1719027796.712:1690): pid=15485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1958 res=0 errno=0
[  685.082498][T15492] loop0: detected capacity change from 0 to 1024
[  685.266356][T15492] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  685.334665][   T26] audit: type=1326 audit(1719027797.262:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15490 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb71967d0a9 code=0x0
[  685.474153][T15492] EXT4-fs (loop0): unmounting filesystem.
[  685.483486][T15504] loop2: detected capacity change from 0 to 8
[  685.535303][T15506] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[  685.548389][T15508] loop3: detected capacity change from 0 to 64
[  685.630035][ T1256] ieee802154 phy0 wpan0: encryption failed: -22
[  685.762580][T15512] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
[  686.136155][T15519] netlink: 212 bytes leftover after parsing attributes in process `syz-executor.4'.
[  686.146291][T15519] unsupported nlmsg_type 40
[  687.931086][T15541] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  687.965280][T15543] loop3: detected capacity change from 0 to 64
[  688.043766][   T26] audit: type=1800 audit(1719027799.972:1692): pid=15543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=21 res=0 errno=0
[  688.168656][   T26] audit: type=1800 audit(1719027799.972:1693): pid=15543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=21 res=0 errno=0
[  688.484040][T15521] loop0: detected capacity change from 0 to 40427
[  688.501338][T15521] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  688.511433][T15521] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  688.608066][T15555] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  688.648418][T15521] F2FS-fs (loop0): Found nat_bits in checkpoint
[  688.831133][T15521] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  688.898211][T15521] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  688.950282][T15521] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  688.999277][T15471] syz-executor.1 (15471): drop_caches: 1
[  689.193274][   T26] audit: type=1800 audit(1719027801.122:1694): pid=15574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1962 res=0 errno=0
[  689.214159][    C1] vkms_vblank_simulate: vblank timer overrun
[  689.817651][   T26] audit: type=1800 audit(1719027801.122:1695): pid=15574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1962 res=0 errno=0
[  690.075950][T15586] loop1: detected capacity change from 0 to 512
[  690.123023][T15586] ext4: Unknown parameter 'uid<00000000000000000000'
[  690.181421][T15586] loop1: detected capacity change from 0 to 512
[  690.254889][T15586] EXT4-fs: Ignoring removed bh option
[  690.357312][T15591] loop3: detected capacity change from 0 to 8
[  690.390949][T15586] EXT4-fs error (device sda1): __ext4_remount:6425: comm syz-executor.1: Abort forced by user
[  690.472255][T15586] Aborting journal on device sda1-8.
[  690.509528][T15586] EXT4-fs (sda1): Remounting filesystem read-only
[  690.521304][ T7819] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor.0: Detected aborted journal
[  690.563886][T15591] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor.3: Detected aborted journal
[  690.588211][ T7819] EXT4-fs (sda1): Remounting filesystem read-only
[  691.052210][T15583] loop4: detected capacity change from 0 to 40427
[  691.346010][    T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  691.561031][    T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  691.666548][    T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  692.260945][    T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2024/06/22 03:43:24 SYZFATAL: executor 0 failed 11 times: failed to create temp dir: mkdir ./syzkaller-testdir1953880083: read-only file system