last executing test programs:

4m0.20015714s ago: executing program 0 (id=94):
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000001c0), 0x45)
close(r0)

4m0.081918162s ago: executing program 0 (id=97):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/dev_mcast\x00')
read$msr(r0, &(0x7f0000019440)=""/102400, 0x19000)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/154, 0x9a}], 0x1, 0xffffffff, 0x0)

4m0.03323973s ago: executing program 0 (id=99):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50)
r0 = socket$kcm(0xa, 0x5, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r1})

3m59.956968691s ago: executing program 0 (id=100):
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file1\x00', 0x1008000, &(0x7f0000000400)=ANY=[@ANYRES64=0x0], 0x1, 0x14fe, &(0x7f0000002ac0)="$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")
socketpair$unix(0x1, 0x3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000008c0)={0x0, <r0=>0x0})
ptrace$pokeuser(0x6, r0, 0x9, 0x7fff)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
r2 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000004500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
syz_fuse_handle_req(r1, &(0x7f0000006180)="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", 0x2000, &(0x7f0000001ec0)={&(0x7f00000021c0)={0x50, 0x0, 0x8, {0x7, 0x29, 0x9f53, 0x10000008, 0xc0f7, 0x48e, 0x8, 0x7fff, 0x0, 0x0, 0x80, 0x101}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000000000)="d2c113c29ca1f0329c09333c4e57bb838cfea716579dab7d1cbdce058b04b86cd2573f5a46ec9ad1bb3c276903ebcad8758f3bdb0ea994c5ea01d7771c5b21040018c812e3b3d2c92d14193a28633e7a06c3239d8e97c69f11a821f535082d74ee0c1925c46bfba566d8c9647889a9dde67089b24871471415a695730085f81a0b7c8dc2eae85ccd015b85d7d1fecd2528f2a8369ee0315327ba0d506a583c716ea4fa23575566c8cf1a2a844691717179b82f10998b7d540188e57e864820665ab70db2d483c4fdcb115ea6bbd4a888f9d383f6fea063635b69686590f540c638a77fe8e8cb266cf72667e61871faf1d1810c749c30c5a7b61609d81114f7aa0355967a7513f659d021338ddb687b0f7372386170902b612c56f58dc73a1ccecb389ccd39f926ee91220a5c053dc277919ed4e32b63da14781cb46227a71388f2aeb37e8971d4a554824bb05f7e6861a916c94204feae48f115680a40b7b2da6ec3af295979016cb78ee53d347a2a8de81c26d0468db8b59df449513e109f26ccdff64403180deba17211813b69ef3f0c42f498a6f3d05a4e7f47f99a8b9ff6bb375fcd1cf444a794a7c2a274f2786c8c220b1f80f2d0c1f311960b37357e31198a44f1e25aaa320f6daad7a42c0367de29a2d0d5567098dfc4ac2b0393a7accfaed79afeec5c9d526503e8fbbd3d1f6365c698775999e5109bada3ec51a9d4b884631086bcfa4fe99135a7c482d9e3d2cbd0a58a42f8cd737a812c21185d909bab234d412bd450da975be70eac2a8db479f7030ff5f41817cd798d59a2db9d8d829765459531044ba3bfa6fc89d046c75e707133e5211fd05d20f63d4f493b23bcd966e3f4314a512451b761fb3b3ed815da07c604f71d2a86937142ede6fce427766dbde15f74f2c45d4c3c08e815b507bb05ee97ddf7ed79ea2ddd5c6ef057d455d84c79bdfd6e68ba6f5cd806a6b9dfd5ed65e394554fb59df7aba2676779a547cf8a7c97379abc760e94e01264a2a23c8c63296ec0d9a4e0aa5c9c470fe46beb8db8322372f3649b7d2ad0b8d09e77e4757a2f40835860b56d41382fabc35d891deedd2168ff3b20f3345ec3238ce795fd9b0311fbd7cf10bbefe4e9349bdf7ea5294f3fc3ded1203c01c9a057641ea122eea48e30b942fdebdc4e7263353361dfcf3562eb3f7eb491fe5394ac1e9af734950b3de71b557bd1baf334d39c5dd9e6842a3ef24004eafc5eb85fbdad5c1e49f60f565da146b119f27ec9077774e21300edf2883f34e299ae0465779ab80ba2d097f5d791a72785f35090dbc369864476c33d3279382a49ac45be1706211659d6fac1ae12d772fa270eb3746a69082e67664f4be335f2d172d52f5083a0768e5d4332352be40eb41e3406de4498e740a470141032ea251c144cdb5352d8049281898c72f13a5d3509c9c77308fe45016abfd7d42b1a022a60b9a5bbcece7c0a10bf9f157995465729b38fdcadd0d977574636206982a6b4e8f24bc75e3eb054fb9ae81e878afd24cfa9756f053bb89f0e4a42e195bd2af8a91a6dd5c9fbccd938681a7387ed22a0e3a8284d3182aa7ef1905a267850fc405494d7079f6d0364287cf7b16dc2310b15bc49fb68d1a96075cb5f30f4fc2ec0c51d0b7e806e78f108f4060a55b8c23b3c89a2f2fa321d5138019c417a504d230ec496583933daba2998e20d8f9a2e6798f681e1d4df88fa4e084513d3648ed4f6624d8b894470cf325e837ad177a634bf58d21378fa0d3370bcb724fa88314bbd0749bbe6ff9dd5d7826701891c180278833c3327a8b1500c3e86fbdaacaaba0e0f708052ddecaae4fe142689c812aeccc7211f61159e0787a8f639d1f0a4db373c17317fea5d3ca1c6060fc44a2d02502f0230334acb69861f0cdb82220827f5887a14e7eab133ce4ecd9a414b2a6b31d8c631325319bbb65ad01aaea7e157fea6cbb434c67f4582028c32f5890ceb243dc972e61e122cb36840d5838dff32d4b613ae1909f3970404fb1973f1e80b0e388141b2e24d47276be045880a4ac18fd136c08cf266b35c75e9b796f6210817439833b613195fe4688b22127a978d20f8b32e3df3297e09a565e659857d8052bf69c5006c5870bd25e6c3aeb411553924d06ccb849cdeca659448cb220d259b4ee20d256d44149814b5e13ab365c448369a43553e01874acded99d24da7d1c9c283dae95b0b5311344af85c7c9a8483fb18a5bfd7a4fb4bbade211edfa4c30f3d1b5bc9672a02adb5d638faea66424e2c82540937dc4cf21392fe16e05811f1bcfb83132deb1cf2a522f9b543758b25d6949400af5d2a7a566f4ab0f5fe0b0a8e8379850e3ed78cb823f5b59b3df4de700427b197720ec69b86c76080b2cfdc4a2619e9d2a901e247e591d79dea91257c0d4a3c7ebb86af42de6833aaaa2d69b71e684236705744b79c62079236759def4a37a0b97742dcdc1af8e54385ad496af31cffe7539e4a69d65ae28845439e5e3eea34785e6065c32f3c7b71ef4edfdb16ca9ee9d5d4e066a60f9919461ce932a61c4100276dad7a22447c681bfebac9186f23dd38509090e0c0fd60219d33174d0d1f5a2b3eb194ae1c7003b159dd560e909fcd0b14b803ded8a94f2a61ca59f9015a673c018515b7605512ecdec58b60aafcba88e88b790e6dabc09a6721613d4e60ffd8d01b07ccacc1c7f2415347f5f5aa9eb7e5d27090403a55d0364721bf0363e34bdf9d92c8e83fe39e8d23e0a038717c00f82dd27709ea69a7a857575f0e039b067750b0e226dd01091b6aecae409d563a72e0805c8c101401a9d4356c532ec27cf25ad0ea92eb137e5bb367623155b3e62baa1cb29d86e4765a635d180d26f37f58a24683494cca93547b1f9ff0cc81c085cc4509b746c5327f1f169ca3bd059d324ac91e3c05bb225e5f81655d2f5b5f0cd6389d35be14f63cf76ef856634c5c42f5f6763a457be1745d9ddc4e7a77cbe86398585dd18159eb7dadc2da143cabd5794c4caafab774c5b0ad661f6f9e7bd5163af6f214bbd6351560cfb5e9fe42d3b67912e0bb52926429a43c27aa6c52e904660029285c4b763d6becb5cd4e9a029fb092ae20df18e073627d896a8de5f89474cbc2d2a525edbaa635a9704ec9f30bc0d18dea437a986553da723befb7f91d73a9976a528d2ff2ff80aef0fb80b4c84fca0d810e1f0c3857aef2616c9908aa7dc6a02e28085ccbb88e13c8c8c1acc631e4121e39b453a5897602dfcff5629f88d75ae7375cb9d08969dc6e870870c7aaad3c62f1f39c363d7edfda2d5ce1e9e62b25cf3b31bf4da9b90616a79d3be8f031837844c13fa6ea8af83db6eaa6abcb5158c38abe7fd39b8710c7d8d830ac93d5d3cec1d038c7947861c4ea118b3c205be5c441d35ef856c9a81f970c2850397e735a2fb991fe2dd0f293224ed263963a1041dcefc67b77b25b82d6ab047eb282702ddab528cc4bfb8c82d86352057e893bfd4b41e3396d64d7f1a78f6a0d4cd420d4bf84eb791a513163f837556c1a2e7c4e84ab9bfaa3a23a7114bfd301ea1f6b5e5c94e076e8f42a4da7e05224589005625245672ef85a11d6ac4b379b72660583ccb62b3d6cf00090c9c0ef7f3e3bce7bc6e10baa0498799de647451281afb45cf053c7a57eca0732a8f9e9f02437be51649bc7d1a391aca1561fb6b2d47817394e97e426afda0fb9fdd248579b8eb768ef9e249dbef8b0ebbd0e8dec2f149e2356df3a9f728b5392875ea476b54a1c990040ef4e63373566611c5b555b5d60a0e69f32e05db3f9047ea3e261ee6e3d87516bb0fff783333eef6444c8d9d17f8b23514d6358c62cd34dbf0e9dd60f54f286c533d68f2610c82eaedd9e512884f37211f190a08cd3766c7ca6a5043ee9dbabf5994c48d03a2fa5ccedce7ffbe9cee1e9d54036ca4ca7c4fdc339011448c7aad3d14b639dc179e7a97f03b606b0e47a32b8c9ab82c59fbba5e0ab663538aba9ba71d27216614f59bdccb050cc2512f65f465e8476d36855df64b8bb181907e91f45c6262dba02b35dc238bb32b9cc7070d31f7f95f2193b5fca347874a64041ab629cb5c3a3d77ba999793badacf01c4244ae13c0d77fe01fae16c489fcd58010afc3084ffadb9bf7264f23f1ad0e8d9d762dcc431163c343054181812c9cd1a6ecdc9964caa0a2ba8cd29271e6824891129b89efc1ea2996100f1932940a49a324e8eb688d05ac7d6ba273aade15c2be8cc74ef1eafad9b9ebfdfa36edc5c6d109485a48ac6a8395ccdf23779919953cf3c61c3a635c7e782f84098f3cc6bea7644cf3924c2352c97c76bc7141227dd29f1d47ef209adc3aaefd8cf204fb265e6b262e83736c2f26b22d80870af83095338c23a47a5a86af2ae7decd1aaabd925ae900bfe8e82728e14fd82677769bc9962dbb507a61e206821ac9c0940b12d79ecb7a916b9f6573fa3d9a7ef773f66de8cf8db6536d986a29d7b50a2973d228ec48468c5ebec6253130c578e5ec2848b62e8e1082a3d584e84b86e24211a9546e1abf79e568827af5d9ba98ba7b33b5cd9cb7a81dc873ea11276049d9d6206d2ed0933ada7ef9b6823f24b756ebea834297743ffb146350f320ec9044df55b20df0ff84584c16350f465b5ad7d364f9b166fb534c2a0e65f6bb4d61feeb84463ceb4a4f7853c0c2410955881a60170b0bbc131f6699e2616752851063c7e8b0a82e4357b84e48bad8002610e5770c17ee0cb301f9dfe8d5cbb66c6962b5edcae17b5c5dd42026737ea9e2c79bfb9392d290b44d66ade6eb62e26321ee214a6d15facb7cca610b6209392179a50f3dcba1494d3f302745461f6172d329a12d68405be5ee05ad2a641a7aa3da1d1fd3198671bf1af5b39e2bdeed49df80cf0c6e0edc5c4812350097bda47d3fafb3827d73eeb0b29320c74dae6d4d61d8fc269652835f5a7f98710c644dd50d3af618651b41916bbabb9ea7cc46c8208dd7fb99474be66e1a970c899f17129a9ed17ccce0d93411e71b8f1c7790c787f7a97a50d54acbc6f4eee49a38882c34e3477c97e1c6da0b39a1e9d0d25a3cea9364033bf4f625a02412174d03dafd642526867578f71f2e52920833b8d23713d5ac48165f49545f6c7c75b5b4ef2e0682f8f2e191fdb6c0ba529856f887391f8d5aa3f7dfc5230170b97662611e53a4436bf4e98a5ceaeb16a79bb95f962b2675cb6da9f1cfcdc1ab604ef7749fe87ccb5a3660f463ff5f488b5c544cf847be84dab22d038730a7021cdc7f7ab714c1561c98a39cc92cd6aaf53c82b28665114ac18b2149ee7f1b52f894c28a49eb45d4cf6a0e65df39b3c717039ae41958fe810c1e05ad62ceef2980e0cfd891bfae0db61fb1c8d65b6812ef1bf5d426f955ab4826eae69f531979699685f5312882032a5f47ed8cf2e98e67d9f6c299d2060a04b4aa677500b48a33586b10f71293d57de846d2683621b588630a6ef06a41437bd99366787b787a68c71779132d0ee73aa5f97d5b9ca18a7ae26b7002512df1073e2eccdb4d2f137a15d9604e10547fa465aeb4f2e5899b531adeb5e72fb76c2c1c9d18ceb4a23a5f6174ba86a7119d82e35cb5a5d1c6a093351aaee0094b32b92417dc50c1d3806fffdafd2ec0e3ba176d84bdb7d59755e9083e61ded802e2a089ae9d6746f738b55845bcd4ff0a21888c2c6b972db043973fb323fd1c15e70137aa6a4bce3f60f27c1d1488f3751e5425a5776c7cc3a3c8acbfbd2171407e1a242e8e241e6e9e1287d8995265a8092ec59ad99652e63a41b744f34392017f29c1b1ca4ce7728200743d4497a70cfd2369d0ecf9e0ba6f28da25b2d918a06ad1173091b8d750b8c2120321818a0912bf47b96c9a8962930a843ea8419b24b8618b7b43482291906e151bf39d3634756d9e1ff5a6e787d1fc4be7349c38a3b882e059a5da930a9cb2a01eb8b24b54def2a2949538fc063542921947f1997dbee59842a50a043d431649ea0adde68c43259ab51592107b2618c5f761364d4d3d5d0f4d4ae1b94650cb4b695db5831c6dd789140b87525d9ed46fb8dce8fa75d68f317dfc3858d810928fb3530b7ae8701d622b0e69ab16cbbd46c8165c467850d081292da8147fe07f472776d1e2c75c17bdc0f8bafbc964da953a5efe64af69944f0f8858b2a4dece04428ede8967d0e93827910400af8a859b59579d9628191b291732bae90a3b50f8b2b7728725568a83e006ed21e940d4b7e7291ad6365138aa2d59c0b303cc298f7a70d0c39e4f17a878083631b1f96a65d7b4c5a4403929180694f55b71ba29685bdf472f0e21a1c8b3c2dbfc4892ffbc0f0f23f38ed0b785080c11b0766ffc5a0c2c750080b764df159e42ac8eb82681baec5b0ad7948153679162c223f63bf22545718accf2a30bc4402f6b54996baa00508c6def488975a2e2bf2a8dbcff49293e83f998f8baebe722cdfef96c46ac3d945d56ada194353f7cd03d2b86cb9844f7d63f008fbe553fe0023f6968e8bea9054ed3c567e5c55b283fb2337fbd20510e5e098537f5c1baa6b509f63b1e812840aaf470690894a2725f4460a106a3b0e14b12b47c3fc1a083ae7e8cd2e710b5d428b2063f7bb91105255cc0fcc8ac51398ec3df6416d283c4aba6ed44846e82be02d242c710c973c5f0a9b3b16da8a96f5cd2a164a3fa040075b0cb99944f1b34f7e79ae039d15a6c992cb40aa403de90992c064e1771f2a396734480f43b024dc799b8e242df235dc0d33cfdce41755722907f4533a1480d78e99320412326c27e15434fd3fdb19ed33a07063a8a62b39ce14be2ea1e0adadec65fcf4f19901bd801b87e90fc91f1270b420fb530b71b7aea9ad23c4a4ad28d4b63444bc2fa7b44247d5e9f0ca0209a489035b4521b5e886a419df1f9d0e27b9c5007ee75fd3909d4e0156973bdf2ff8d1a88cad1d534ba93648ecb34a30b1e760f1ee8cfb90c27c36385fd68ee48982e5f0c190e8786b7ef0e1dfd3cb1cc00efc19a92020b509d3e2c74b4265bdc765085bc49c6fc61476aa22cff375a78c59f33394cc6ff460584ebbd8dba2cbfe97feb1c9147068dbc1d3e25631ad8478d826d88c28b2cf967d07d3ff845cbb25699406d106eabd31066e9cf8abbe7598f71cca663a6f63bfb63caa95d3a363e69e9a3bc889d026df28c37e41786bf8c9a1ccc06c3499986a72bb10367f32b1b8a55365c2a5b46061b58b81c5da69ad39db6c468906f1c1225527f1b26a3dbad94b1419f3671086b061117206a634cd08beee1fcdfb4a3a7cc78b3cb1293dc900d0859505018b38033a1cc9a0051968af1f8fa60350865328b6834f9c30bb1734949fcdab62cc6904b285322da3d49f188019648cac314d65a7c57f4e25864f17e346e7ebbe411695a237622356ecc10e66c8ba33e7106a756b8d3abc1a1aababc26413adcfda74a59b9002a7e2e3edb3e7551d32c461c2e40c25cb9de751ffda44d7f353513c5bbbc473594127c09775844dec5dc922caea5532dfa98fe80d80243233a4f0c15520d9dc76da3623aabef3582380ca4d2f9558d6c71b672f259b94f26710aa1d933b3ad79c8755a96c18fcfd62a972ca80ea0d33afbfc80045ba7dab492aa06c73ea3a598b2bc6eb1549627d183c25c3486814960eb1e1b02200a92f51b8642683f88185a9ee91c6dbb576dd8a869e1338b81ec205d979242bd963308af90ec23e01d253a70440edd3ebfac8e489db0a70bb5c887f22e7a5de33918374a9ae5229d419b1948eeb23bdf8dce3c5df3b81d1a3e3b38e095f261cb9e00f5567413a5c13abb469fdf64adc830cc442a099609cf0ebd3ffe936d77d6099d816be2b4cdd31e4fdf5af5904120ec65e81138416462f9e9bbe9ba6d5980c7de01288bd9f4741848802c32f3774678367c70014e531ad7f95b5527d022232ada51148012328f1693b2d08b8eba80dc26d8e9fc369b410331ed720e410ded5bd03ce69942ffb97489a2c5b6e4da93cc73811738a141c3a16d4ff6edf2ad1b3d3ae45a21c5ca2613b92e7871dea89d3cd699b86520c80f6a391cc2911538f8108dc90203b0e74ee43a087e033265e0745a9c991facff49339c40601420bb72ef014bc4b9a51cad1dcde9f1567b4ae9d11b1416ff3d8dee15f4672bdbca4348e7e71f8d75a73851bc0ad539312b7d52c498602a5eda4630296fb40aaa90d8f6122da7fb56d02755f861df193bdc5effd8a0e54c2ef78a284f7543c2b25a81bf545be3a3f549aabe86700bf058877e3fec53813f9992814a2cebf341cedcad346dba70596da899add4d723d98366ab60997cae7e5b9d417252734d9145ab8c5ece5b5b0efdc2f2578838c500ee17b866323a951979c6f1a50da2833bc437bcddd6efaed0244df44e6069daf359289d9c50c073f0fef4be1fb3802be5ea643761ed6347a35a3f537cbde402911c28d7c7c7e6b8612facbe87221f3505ff078d0dbb28ec469fe6eba2efcb4efdcfc5745299c0850e21ee2c9ef77db8070d589c547cc7379b58677d16077093514849869ab5bf8f896fa933ba3edc676dcb73e91386cc48f01782ba635564e0f91988cf98a3a17544abfedcdc1d80540e9499bf98180feb80325194cbc369be3275ed390f8e91b8d75b1364e9fabe50a1e3b9531c3fe1aaf6523e54bb05738bd3a67ca5de01b2e479ef7678a86b13d6b747fb3cb5fe1be8913228705fc232ce422186cb79c3b66c944f6124eb414322806d47978044336221f26d3a09ed8dceb52e3c7e3413535faf1f7868cb47bbbf02c37b4cc877a1d5f4023083d5b36650b673a4e51387c64d44daf58057adaa5610d22a15329804cd51a42f663311c4e5ece9d99b5a813c4025e8e0a98c0f3ec13cf07de0b18d7e1ba7d3eb143f5825f62ae5b5f6d92b167f9dbb2177e84f23322566814296277fc2933956f818f5475b6aa031545e6e2265679d16cbedff96c4f419d5fabe99ee652feac8acf9a90771ab8ade8291b42d25ebbdc03faac02b9599fdb83621f6ae1e2e7f946520f3cff881cd600c17b4a00c08d0996f7d2bb97d35647f72b80ba8ad3b4a16cb71094b2d1193a5fa1456e4671788bc51c0d506f4809ca34620d4a75a62ddfa20ab5c4d347a08eb8784d4c572fcb473b766f5e1ce9d92db70ebee83accd58b8253da36b9542686edce545261f309144a3d64900f796620003b36ee3d44a06cc4d088f73aa45288b90476d2e1e461795d473d59500aa23a6b7724a2f0d6473dc2f0af6ea311a648e193072016e199b920bc8c0830ae18f1c17e33d73badadc0f9d34cd52b54f4d3d480a7ddfe0f140f8de1a382a4c5a722d3e0f875b69054d88b8bab94e9394ba8d28937f1ffd871d1666a377620e7f032633fe58ebc87e533bd6461b537cdde38352ece085378dd7b24fa3fd5a3dc3f5b77492e4fc91238a8bfcc4e20bb396bd3317155981ec593926f2e9f15e5ac1aa533e122441649a681d88142a93386a6ed6b2d5b18d7fb57541e31a69acee17345b08c6667ebbc53a082fbcd980b4751937ba729dd2fd9b43d06091517922dd3ea524db002db7525902a465081843191d2d7ac76adb7724ac2bb88e4cb2f3188dbf0cd47acf5011b4519ec100a44b2ee6a1dacac5aade2cdcdca777c6b5edf596b05691d247f671491f68bf2e113a7e8674309ea98ab794d05c664ade246288796270e10f4a308420a62bf0df1d1636330e88bf4cc78051e5f715c8f97b8a83119b3fb5129ac6d0733256bec96d8cf435fa005e14d88884a0ca24266a4e78e25e2519796ba31971e4d0cb44ea58c5ddf54a15e3b449642e395679fc5ba600cc6bb7f2b004bfb0d621e51f9cf16309e4a02ce4f23f4a2d225aa8c84840bf2d3522a5f7a983cfbbfe4adb62d6ea622ebb784072bc6673878c5eaa865a7657b619f48cf0c51a4b0d47b20f426adc7f8ab68238b97abf68443f0eaac3796bfd99e0bc644e4f6fc43e551eccd615db802dfb031444e09aedcb04846bb894a2cf42dd0a578dc94d727736e502194ae25bf8556373969cb7f27788b6edf5b2bf25a79c7f89289f827ed4be611d65f6bd89698b130aaadd0f2d914819f41a0185dfc73adcea80d2ee592bf32d15010cb32a95ef112bccb2b780b461637ffa1641d34e1b114cdd3dd1ceb365933efef1781f9ec620a73097594c945969c2ea036e36b2380b33599c3e1d4eb2b7f210324aee3bba5a944b71cf0246ceed878897fe00e30d0bd32b3dde08c8805e30efe39cbc9d11b97491d82fbb5d93b1997e5f3128252472ecd256b9f79611175b6f686629ee744d0ba2494607a4476ea5f934c936403509c14bddbc2403ad5d97bfed0da36707b66f39ffdcee7ab39602e740c1ca9761570cdbab5f56b2060db428921457445b15c4c92b9c4b0ebb0746936bc3053836fa884e97c96e44d18a5a52feca033ec4caf950927bf9a281ea1aacb2a8b1a1f74b20de25ad5f3e459ab8b61ba5d00eaedcb6b5467dcd8608cfd48cc8c1a01f2c9f68bc9ef9adf2fd81cb3e28277c52d58f42ea87c8896383c2fa88dd15dba7172990893fe28ad1b50095b2ca20856de64693f3a663be6e34a9ccbb09add5724c5599495d0c95d2b900444651048bf418070b324016678d694b82565931159ffc37d3eefd7b482c41637cdd69b8f7051b6e88cf87a01d26d0689057ca0f66f65a2c3fbca608f7dec52d8e41ea98d21be162eeb38b27e9465d5525e0ffac3bd989adae19bdcf98edc48ff9d9d2a2f0850fa2cac8421ee6e211b1930f9fe9cb7138e8058ae476aa93c0ca49b170eb4ebbbb6fb4020d000eae537b4dd4bdfc63e3fb281848c057b94fc14dc12f8833d5ada50c8f0178137964c3b1524c59eae7ae19066a8003b9f4036b0be91f6f24baf6839f360473907135a8eb777dfe4dcf18d15fb8e16d069c48c5a128f046667f66bb22d36e986c73d2ebaa1a9638a9e8c049d0c766e2008fb19c4aabd96e3443c48377214b01dec0f73538fa5a882553a60664e549030fc9cc21a74a73cf79cfdbbfa3676a474910a295044d804b9f6a30104fc8250da4efcfddc379c3a1b84a2050ee78b18ba84ec5cb4db62540ea7be026b48d2b9294f06aa48e44087dbc494d92fe3e8648792c2b9f5d0d580afac814f8fc74208239b5f8fa6c20fc75c9d73fbe448a4fd1eb1af10165c37e7aa72c83c47dbb92bf3203bc0bea3b3ae261636b9a6b621725aed16de5c33502f152ca3704b1e83a60cfc5807177d9e561b12f43c3ded0951c4ec7af0ab29f55e3745df0f10bedcdcee2d443c0023d7547018c94e2cbb04a5c67a81d33df4dda99f80777b1db00f91bf8abb96ca360353c08b8979d00860ee3af86988171d6739a0f546f64ec34c045afd1be790176228204782836484f6d118d734c8e1b302788aa20e704502da74cd11bc5a22bb717a1d10d5176a4426e88cc132479aa7e8370772b9776ea38d5bd217b08c50f94072acbdf93e732e6ce41f92159b626e59e39925b458465ec3b0191a56d8e1c3a76110200e38380ccfcc1a05f85608bc3ea0bdbbf326bfe003158c8c9e01e90a7ae164cc20de5b23146baa9786111", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002240)={0x20, 0x0, 0x7, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000002300)="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", 0x2000, &(0x7f0000005240)={&(0x7f0000004300)={0x50, 0xffffffffffffffda, 0x8, {0x7, 0x29, 0x1, 0xb069a97334577756, 0xa, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x80, 0xfaa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
fsync(r2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x2003}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x9}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="0500000004000000bf650000400000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x50)
ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000840)={'\x00', 0x2, 0x0, 0x4})
recvmmsg(r3, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

3m59.00258391s ago: executing program 0 (id=110):
syz_usb_connect(0x3, 0x35, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000b58f55408205d5b9f773000000010902230001000000000904080001fff56a000800000000040e0009050b02"], 0x0)

3m58.638069381s ago: executing program 0 (id=113):
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

3m58.481938817s ago: executing program 32 (id=113):
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

3m40.621304033s ago: executing program 1 (id=241):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x0, 0x300}, @clear_death], 0x0, 0x0, 0x0})

3m40.620871297s ago: executing program 1 (id=242):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x1f, 0x19, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x81}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8020}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r2}, 0xc)

3m40.540395429s ago: executing program 1 (id=243):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f00000034c0)={0x2020}, 0xcac)

3m40.489537491s ago: executing program 1 (id=244):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

3m40.397309912s ago: executing program 1 (id=245):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macvlan1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d40)=@newqdisc={0x38, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8844)

3m39.99138294s ago: executing program 1 (id=249):
r0 = syz_io_uring_setup(0x10b, &(0x7f00000000c0)={0x0, 0x46ad, 0x400, 0x3, 0x108}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = socket$inet6(0x10, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4c, 0x0, r3, 0x0, 0x0, 0x0, 0x40010020})
io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x0, r3, 0x33, {0x27fffffffffffff, 0x800000008}, 0x54}, 0x1)

3m39.741718286s ago: executing program 33 (id=249):
r0 = syz_io_uring_setup(0x10b, &(0x7f00000000c0)={0x0, 0x46ad, 0x400, 0x3, 0x108}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = socket$inet6(0x10, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4c, 0x0, r3, 0x0, 0x0, 0x0, 0x40010020})
io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x0, r3, 0x33, {0x27fffffffffffff, 0x800000008}, 0x54}, 0x1)

3m27.248916135s ago: executing program 2 (id=357):
r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x40000)
ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0xc0844123, 0x0)

3m27.054824466s ago: executing program 2 (id=358):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0)
close(r0)

3m26.916072424s ago: executing program 2 (id=360):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000980)={{0x2000000, 0x2000005}, {0x1, 0xffffffff}, 0x5, 0x6})

3m26.808551903s ago: executing program 2 (id=361):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x2000002, &(0x7f0000001000)=ANY=[@ANYBLOB="766f6c756d653d3030303030303030303036332c696f636861727365743d6d6163677265656b2c696f636861727365743d6b6f69382d72752c7569643d666f726765742c756d61736b3d30303030303030303030303030303030303030303030322c6e6f7672732c6e6f7672732c66696c657365743d30303030303030303030303030303030303030342c646d6f64653d30303030303030303030303030303030303030303131362c007732be3442cd163f564b8a695afa1b16eefc0b9d590fbf9ab8391b97ea4c0cf06c797f1a493380ce6975738b912f61be3a342f9b9ee8b8bee4aa2b525fd11b2212573ec6e7f3235ad950c58d6bf8d5318071bd000000004c67990370b984f0b3bf4b8ee680536ebf6c9386b8e46872d639e0de679325aa384473cb1be572c7320000000000000000"], 0x1, 0xc2d, &(0x7f00000001c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

3m26.338582122s ago: executing program 2 (id=363):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc510, 0xc100}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'team_slave_1\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff0100000025000000560000002500000019000a000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

3m26.05904689s ago: executing program 2 (id=370):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0)
r1 = syz_io_uring_setup(0x2, &(0x7f0000000380)={0x0, 0xe7bb, 0x13500, 0x0, 0xfffffffd, 0x0, r0}, &(0x7f0000000000), &(0x7f0000001880))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440)=r0, 0x1)

3m25.877686566s ago: executing program 34 (id=370):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0)
r1 = syz_io_uring_setup(0x2, &(0x7f0000000380)={0x0, 0xe7bb, 0x13500, 0x0, 0xfffffffd, 0x0, r0}, &(0x7f0000000000), &(0x7f0000001880))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440)=r0, 0x1)

2m3.330964325s ago: executing program 5 (id=1281):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x402, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@gettaction={0x14, 0x32, 0x605, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x4000000)

2m3.25933948s ago: executing program 5 (id=1282):
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000006c0)=0x5e3, 0x4)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = syz_io_uring_setup(0x746, &(0x7f0000000640)={0x0, 0x3855, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r1, 0x847ba, 0x0, 0x2e, 0x0, 0x0)

2m3.111685621s ago: executing program 5 (id=1285):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1073eeda8705da74bc83496ee251e51e6d155c558a4f6dbf7076341df55b7aecaad952f364f05d5e0f", 0x29}, {&(0x7f0000000580)="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", 0x121}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000180)="2001987c5ccf58f5f75061ee", 0xc}, {&(0x7f00000003c0)="8b120728c90b0b4a530fab46abf402095b65870c2a0ac8f0847a8e8ab1d98f34cdd3a1c838f816c52ca57b8a7efbcea529afab803882b9f88c28cab3df58895ebffef931a275cc35f9fefa5bd7a1f580106f3c7defd09032cf42417504eefea81cfa7bfea5032e42cc0858cee1b8e74e133934cc54cd707c5c85d4e5008025c28b72b46d12248babbe0d3f7916a5610416ee255a331398dea59a1a406070cc13e81701447ded270b0c1bce36d2bf06db98dd9c1ed65668eb5c2f4cab0ee3", 0xbe}, {&(0x7f0000000940)="0154cb3eb8695dcc7f253cb0f84f99ca40dada3fa997c3cdeaf5fba62ba9dca2592b2e1f1a3b323346857c2dc8a7feb60cabba8b2bae17b6adbf986484866d0995da61fdd7468d7a890840c77e27f020ceeaac9105570794647e71a0180a96c66f23d8bb7da1bb5d4862d206", 0x6c}], 0x3}}], 0x2, 0x8810)
recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060)

2m3.025598939s ago: executing program 5 (id=1286):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x11, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000001b40)="$eJzs3E1sFFUcAPD/bL/5kIr4AYJW8YOotLR8yMGLRhMPmpjoAeOplkKQQg2tiZBG0QMeDYl349HEu4knvRj1YEy86t2QENML6GnMzM4s23a3n0sX3N8v2e17M7N97z9vXuf1vd0NoGMNZU9JxLaI+CMidlSzCw8Yqv64OT838c/83EQSafrm30l+3I35uYny0PJ1W6uZNI3oy5J9Dcq98k7E+NTU5IUiPzJ77v2RmYuXDp45N3568vTk+bHjx48c3td7bOxovj9dZ3yV4mcW1409H03v3f3q21dfnzhx9d2fv8nqu63YXx/HuqRLazhUPbuLPZo9Pbmhwu4ov2ZP2+s2JN3NDx7ehAqxel0RkTVXT55LoisGavt2xCuftrFqwG2Wpmna6P4cdfftFPifSvRv6FDlvT77/7d8bM7I485w/cWIOFhk5ucmbtbi767NHfQs+v+2lYYi4sTlf7/MHtGKeQgAgBV8n41/nms0/qvEA3XH3VOsoQxGxL0RsTMi7ouIXRFxf0R+7IMR5x5aY/mLV0iWjn8q19YV2Cpl478XirWtmwvGf+XoLwa7itz2PP6e5NSZqclDxTk5ED19WX50mTJ+ePn3z8t0/6J99eO/7JGVX44Fi3pc6140QXdyfHY8T6Rp+vHGwo/rn0Ts6W4UfxLlMk4SEbsjYs86yzjzzNd7m+1bOf5lLLPOtFrpVxFPV9v/8sLx/62mSurXJwciorY+Ofr8sbGjI/0xNXlopLwqlvrltytvNCt/Q/G3QNb+Wxpe/7VV4MGkP2Lm4qWz+XrtzNrLuPLnZ3V9esHqchZ/5duINV//vclbebq32Pbh+OzshdGI3uS1pdvHbr22zJfHZ/Ef2N+4/++sq/HDEZFdxPsi4pFiETdru8ci4vGI2L9M/D+99MR7zfY1b/9ms/Ktdb04Ucu2f9S3/9oTXWd//K5Z+UPFGmQU56Fx+x/JUweKLbW/f8tYbQXXddIAAADgLlPJ3wOfVIZr6UpleLj6Hv5dsaUyNT0z++yp6Q/On6y+V34weirlTNeOuvnQ0WJuuMyPLcofLuaNv+gayPPDE9NTJ9sdPHS4rU36f+avrnbXDrjtWrCOBtyl9H/oXPo/dC79HzqX/g+dq1H/3+gHC4C7g/s/dK68/z91ud3VANrA/R86l/4PHanpZ+MrG/rIf9NE0upf2DBRfnfCZpS1cqL8LopNL31g3S/vX/nURaW9Z7VjEt1L2iK6W1pEX8NdbfyjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0EL/BQAA///5etKr")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000080)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000200)=""/179, 0xb3)

2m2.910493162s ago: executing program 5 (id=1288):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

2m2.548408042s ago: executing program 5 (id=1292):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1)
writev(r0, &(0x7f0000000780)=[{&(0x7f0000000040)='\a', 0xfc19}, {0x0, 0x2}], 0x2)

2m2.447255995s ago: executing program 35 (id=1292):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1)
writev(r0, &(0x7f0000000780)=[{&(0x7f0000000040)='\a', 0xfc19}, {0x0, 0x2}], 0x2)

1.727717078s ago: executing program 4 (id=3317):
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2)
fcntl$setsig(r0, 0xa, 0x13)
fcntl$setlease(r0, 0x400, 0x0)
timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)=<r1=>0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = getpid()
syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3})
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=<r4=>0x0)
fcntl$setown(r0, 0x8, r4)
timer_settime(r1, 0x0, &(0x7f0000000200)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)

1.140121788s ago: executing program 3 (id=3322):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x682, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

992.247148ms ago: executing program 3 (id=3324):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtaction={0x60, 0x30, 0x3f, 0x70bd2d, 0x25dfdbfd, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x2000400, 0xffffffffffffffff, 0x2, 0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x60}}, 0x10)

989.679932ms ago: executing program 3 (id=3325):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
socket$inet6(0xa, 0x80000, 0x10000)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x2, 0xffffffffffffffff, 0xfffffffe})

867.751818ms ago: executing program 4 (id=3327):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0)

866.274486ms ago: executing program 4 (id=3328):
keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0)

776.34559ms ago: executing program 4 (id=3329):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x8, 0x1}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x22, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@can={0xc, {{0x3}, 0x8, 0x3, 0x0, 0x0, "fa2b25fc66189827"}}}}, 0x0)

774.987915ms ago: executing program 4 (id=3330):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/54, 0x328000, 0x1000, 0x10, 0x1}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
recvmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000083, 0x0)

680.012257ms ago: executing program 4 (id=3331):
mmap$IORING_OFF_SQ_RING(&(0x7f000040d000/0x4000)=nil, 0x4000, 0xd, 0x11, 0xffffffffffffffff, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"})
openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$inet6(0xa, 0x3, 0x1)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)

199.124924ms ago: executing program 6 (id=3340):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000fc0)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000580)={0x60, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8, 0x7, 0x300}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f000000cec0)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000004200)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r4 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f00000007c0), 0x10)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
socket$alg(0x26, 0x5, 0x0)

128.527621ms ago: executing program 6 (id=3341):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a000200250ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

128.269178ms ago: executing program 6 (id=3342):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x9, 0x0, 0x3, 0x2, 0x0, 0x70bd2b}, 0x10}}, 0x40)

128.130353ms ago: executing program 6 (id=3343):
syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @mcast2, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0)

127.861272ms ago: executing program 3 (id=3344):
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x4, 0x0, 0x717e387b, 0x40, "1ae34e06a6ffffff7f0000000040794233a5bd", 0x4, 0x2})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xff)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200))
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x7)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x2)

69.508753ms ago: executing program 6 (id=3345):
r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000080)={0x98f908, 0x2, @name="c0f7aedd6697da5ecd0e9370cff4d733c237f49011ae20cf2a337c8d9215f8e9"})

69.353259ms ago: executing program 3 (id=3346):
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="01000100000000000000010001", 0xd, 0xfffffffffffffffd)

59.515283ms ago: executing program 6 (id=3347):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

0s ago: executing program 3 (id=3348):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
close(r0)

kernel console output (not intermixed with test programs):

89][ T5708] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.128592][ T5708] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.132213][ T5708] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.135312][ T5708] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.150123][ T5708] veth1_macvtap: left promiscuous mode
[  114.152396][ T5708] veth0_macvtap: left promiscuous mode
[  114.156327][ T5708] veth1_vlan: left promiscuous mode
[  114.158686][ T5708] veth0_vlan: left promiscuous mode
[  114.175303][ T6009] usb 5-1: USB disconnect, device number 3
[  114.469745][ T5949] Bluetooth: hci0: command tx timeout
[  114.556827][ T5708] team0 (unregistering): Port device team_slave_1 removed
[  114.595659][ T5708] team0 (unregistering): Port device team_slave_0 removed
[  115.082265][ T7029] chnl_net:caif_netlink_parms(): no params data found
[  115.162601][ T7118] netlink: 'syz.4.395': attribute type 10 has an invalid length.
[  115.191400][ T7118] lo: entered promiscuous mode
[  115.196027][ T7118] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  115.363971][ T7029] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.366345][ T7029] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.379526][ T7029] bridge_slave_0: entered allmulticast mode
[  115.383243][ T7029] bridge_slave_0: entered promiscuous mode
[  115.418711][ T7029] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.432235][ T7029] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.435251][ T7029] bridge_slave_1: entered allmulticast mode
[  115.440804][ T7029] bridge_slave_1: entered promiscuous mode
[  115.519434][ T7029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.536289][ T7029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  116.719885][ T5949] Bluetooth: hci0: command tx timeout
[  116.745272][ T7029] team0: Port device team_slave_0 added
[  116.799686][ T7029] team0: Port device team_slave_1 added
[  116.876075][   T33] audit: type=1326 audit(1755392741.051:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.4.409" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2338ebe9 code=0x7ffc0000
[  116.885921][   T33] audit: type=1326 audit(1755392741.061:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.4.409" exe="/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fba2338ebe9 code=0x7ffc0000
[  116.925502][ T7029] batman_adv: batadv0: Adding interface: batadv_slave_0
[  116.935405][ T7029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.958219][ T7029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  116.971138][ T7029] batman_adv: batadv0: Adding interface: batadv_slave_1
[  116.973579][ T7029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.987497][ T7029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  117.078239][ T7029] hsr_slave_0: entered promiscuous mode
[  117.081460][ T7029] hsr_slave_1: entered promiscuous mode
[  117.240382][ T7029] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  117.253169][ T7029] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  117.272034][ T7029] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  117.281650][ T7029] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  117.420319][ T7029] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.444867][ T7029] 8021q: adding VLAN 0 to HW filter on device team0
[  117.463935][ T1208] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.466900][ T1208] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.479243][ T1208] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.482126][ T1208] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.533223][ T7029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  117.781404][ T7029] 8021q: adding VLAN 0 to HW filter on device batadv0
[  118.005008][ T7217] loop4: detected capacity change from 0 to 1024
[  118.043914][ T6026] udevd[6026]: symlink '../../loop4' '/dev/disk/by-label/untitled.tmp-b7:4' failed: Read-only file system
[  118.060073][   T36] hfsplus: b-tree write err: -5, ino 4
[  118.062424][ T6026] udevd[6026]: symlink '../../loop4' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:4' failed: Read-only file system
[  118.151108][ T7029] veth0_vlan: entered promiscuous mode
[  118.170037][ T7029] veth1_vlan: entered promiscuous mode
[  118.200931][ T7029] veth0_macvtap: entered promiscuous mode
[  118.220357][ T7029] veth1_macvtap: entered promiscuous mode
[  118.260261][ T7029] batman_adv: batadv0: Interface activated: batadv_slave_0
[  118.276623][ T7029] batman_adv: batadv0: Interface activated: batadv_slave_1
[  118.311085][ T5966] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.327563][ T5966] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.342774][ T7226] loop4: detected capacity change from 0 to 2048
[  118.372190][ T5966] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.384922][ T7226] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  118.403960][ T7226] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  118.408878][ T5966] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.430219][ T7226] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field
[  118.583873][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.586816][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.631366][ T1208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.634376][ T1208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.780134][ T5949] Bluetooth: hci0: command tx timeout
[  119.603878][ T7264] loop4: detected capacity change from 0 to 32768
[  119.654331][ T6026] udevd[6026]: symlink '../../loop4' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:4' failed: Read-only file system
[  119.690594][ T6026] udevd[6026]: symlink '../../loop4' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:4' failed: Read-only file system
[  119.764873][ T7289] bridge0: port 3(ipvlan2) entered blocking state
[  119.769292][ T7289] bridge0: port 3(ipvlan2) entered disabled state
[  119.771768][ T7289] ipvlan2: entered allmulticast mode
[  119.773608][ T7289] bridge0: entered allmulticast mode
[  119.776313][ T7289] ipvlan2: left allmulticast mode
[  119.777884][ T7289] bridge0: left allmulticast mode
[  119.999318][ T7306] loop5: detected capacity change from 0 to 8
[  120.155926][ T7306] unable to read xattr id index table
[  120.879435][ T5949] Bluetooth: hci0: command tx timeout
[  120.947549][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.452'.
[  121.464300][ T7339] loop4: detected capacity change from 0 to 32768
[  121.479225][ T7339] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.454 (7339)
[  121.499908][ T7339] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  121.503672][ T7339] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  121.511649][ T6026] udevd[6026]: symlink '../../loop4' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:4' failed: Read-only file system
[  121.520033][ T7339] BTRFS info (device loop4): using free-space-tree
[  121.792983][ T6026] udevd[6026]: symlink '../../loop4' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:4' failed: Read-only file system
[  121.820100][ T6560] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  122.349078][ T7399] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  122.581413][ T7414] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  122.790758][ T7429] netlink: 20 bytes leftover after parsing attributes in process `syz.5.471'.
[  123.115182][ T7441] loop4: detected capacity change from 0 to 40427
[  123.120283][ T7441] F2FS-fs (loop4): invalid crc value
[  123.157555][ T7441] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  123.161201][ T7441] F2FS-fs (loop4): Start checkpoint disabled!
[  123.178874][ T7441] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  123.205861][ T5950] udevd[5950]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system
[  123.254020][ T6026] udevd[6026]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system
[  123.321838][   T33] audit: type=1800 audit(1755392747.491:283): pid=7456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.478" name="file1" dev="loop4" ino=10 res=0 errno=0
[  123.399077][ T7456] syz.4.478: attempt to access beyond end of device
[  123.399077][ T7456] loop4: rw=2049, sector=77824, nr_sectors = 984 limit=40427
[  123.571325][ T7465] netlink: 28 bytes leftover after parsing attributes in process `syz.3.487'.
[  123.581391][ T7465] netlink: 28 bytes leftover after parsing attributes in process `syz.3.487'.
[  123.591118][ T7465] netlink: 40 bytes leftover after parsing attributes in process `syz.3.487'.
[  123.947133][ T1208] kworker/u10:3: attempt to access beyond end of device
[  123.947133][ T1208] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  123.971397][ T1208] CPU: 1 UID: 0 PID: 1208 Comm: kworker/u10:3 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  123.971413][ T1208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  123.971419][ T1208] Workqueue: writeback wb_workfn (flush-7:4)
[  123.971435][ T1208] Call Trace:
[  123.971439][ T1208]  <TASK>
[  123.971444][ T1208]  dump_stack_lvl+0x189/0x250
[  123.971457][ T1208]  ? __pfx_dump_stack_lvl+0x10/0x10
[  123.971466][ T1208]  ? __pfx_queue_work_on+0x10/0x10
[  123.971474][ T1208]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  123.971484][ T1208]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  123.971500][ T1208]  f2fs_handle_critical_error+0x37c/0x540
[  123.971514][ T1208]  f2fs_write_end_io+0x886/0xb60
[  123.971532][ T1208]  __submit_merged_bio+0x27a/0x6a0
[  123.971546][ T1208]  __submit_merged_write_cond+0x255/0x530
[  123.971560][ T1208]  f2fs_write_data_pages+0x261d/0x3000
[  123.971589][ T1208]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  123.971609][ T1208]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  123.971636][ T1208]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  123.971653][ T1208]  ? trace_f2fs_writepages+0x7f/0x200
[  123.971664][ T1208]  ? f2fs_write_node_pages+0x478/0x6e0
[  123.971676][ T1208]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  123.971694][ T1208]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  123.971705][ T1208]  do_writepages+0x32e/0x550
[  123.971719][ T1208]  ? reacquire_held_locks+0x127/0x1d0
[  123.971727][ T1208]  ? writeback_sb_inodes+0x384/0x1010
[  123.971741][ T1208]  __writeback_single_inode+0x145/0xff0
[  123.971751][ T1208]  ? do_raw_spin_unlock+0x4d/0x240
[  123.971763][ T1208]  writeback_sb_inodes+0x6c7/0x1010
[  123.971786][ T1208]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  123.971817][ T1208]  ? rcu_is_watching+0x15/0xb0
[  123.971831][ T1208]  wb_writeback+0x43b/0xaf0
[  123.971851][ T1208]  ? queue_io+0x341/0x590
[  123.971862][ T1208]  ? __pfx_wb_writeback+0x10/0x10
[  123.971876][ T1208]  ? _raw_spin_unlock_irq+0x23/0x50
[  123.971888][ T1208]  wb_workfn+0x409/0xef0
[  123.971904][ T1208]  ? __pfx_wb_workfn+0x10/0x10
[  123.971915][ T1208]  ? __lock_acquire+0xab9/0xd20
[  123.971932][ T1208]  ? process_scheduled_works+0x9ef/0x17b0
[  123.971943][ T1208]  ? _raw_spin_unlock_irq+0x23/0x50
[  123.971951][ T1208]  ? process_scheduled_works+0x9ef/0x17b0
[  123.971958][ T1208]  ? process_scheduled_works+0x9ef/0x17b0
[  123.971967][ T1208]  process_scheduled_works+0xae1/0x17b0
[  123.971990][ T1208]  ? __pfx_process_scheduled_works+0x10/0x10
[  123.972007][ T1208]  worker_thread+0x8a0/0xda0
[  123.972029][ T1208]  kthread+0x711/0x8a0
[  123.972041][ T1208]  ? __pfx_worker_thread+0x10/0x10
[  123.972049][ T1208]  ? __pfx_kthread+0x10/0x10
[  123.972059][ T1208]  ? _raw_spin_unlock_irq+0x23/0x50
[  123.972067][ T1208]  ? lockdep_hardirqs_on+0x9c/0x150
[  123.972076][ T1208]  ? __pfx_kthread+0x10/0x10
[  123.972086][ T1208]  ret_from_fork+0x3fc/0x770
[  123.972096][ T1208]  ? __pfx_ret_from_fork+0x10/0x10
[  123.972107][ T1208]  ? __switch_to_asm+0x39/0x70
[  123.972116][ T1208]  ? __switch_to_asm+0x33/0x70
[  123.972124][ T1208]  ? __pfx_kthread+0x10/0x10
[  123.972134][ T1208]  ret_from_fork_asm+0x1a/0x30
[  123.972177][ T1208]  </TASK>
[  123.972181][ T1208] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  124.039682][ T7469] loop5: detected capacity change from 0 to 32768
[  124.163480][ T6026] udevd[6026]: symlink '../../loop5' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:5' failed: Read-only file system
[  124.170065][ T7469] (syz.5.489,7469,0):ocfs2_check_set_options:1252 ERROR: User quotas were requested, but this filesystem does not have the feature enabled.
[  124.175494][ T6026] udevd[6026]: symlink '../../loop5' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:5' failed: Read-only file system
[  124.189964][ T7469] (syz.5.489,7469,0):ocfs2_fill_super:1177 ERROR: status = -22
[  124.555637][ T7483] loop5: detected capacity change from 0 to 2048
[  124.587257][ T6026] udevd[6026]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  124.606142][ T7483] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.625705][ T6026] udevd[6026]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  124.978416][ T1272] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  125.130817][ T1272] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  125.134162][ T1272] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  125.139994][ T1272] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  125.143716][ T1272] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  125.152073][ T1272] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  125.158095][ T7495] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.495: bg 0: block 234: padding at end of block bitmap is not set
[  125.160747][ T1272] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  125.167163][ T7495] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 2048 with error 117
[  125.167645][ T1272] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  125.174119][ T7495] EXT4-fs (loop5): This should not happen!! Data will be lost
[  125.174119][ T7495] 
[  125.179685][ T1272] usb 5-1: Product: syz
[  125.183395][ T1272] usb 5-1: Manufacturer: syz
[  125.201780][ T1272] cdc_wdm 5-1:1.0: skipping garbage
[  125.204318][ T1272] cdc_wdm 5-1:1.0: skipping garbage
[  125.216524][ T1272] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  125.218048][ T7483] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 2066 with max blocks 2048 with error 28
[  125.224194][ T1272] cdc_wdm 5-1:1.0: Unknown control protocol
[  125.225790][ T7483] EXT4-fs (loop5): This should not happen!! Data will be lost
[  125.225790][ T7483] 
[  125.229845][ T7483] EXT4-fs (loop5): Total free blocks count 0
[  125.231827][ T7483] EXT4-fs (loop5): Free/Dirty block details
[  125.233817][ T7483] EXT4-fs (loop5): free_blocks=0
[  125.235550][ T7483] EXT4-fs (loop5): dirty_blocks=6128
[  125.237438][ T7483] EXT4-fs (loop5): Block reservation details
[  125.420457][ T1272] usb 5-1: USB disconnect, device number 4
[  125.545259][ T7501] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  125.552859][ T6703] vxcan1 speed is unknown, defaulting to 1000
[  126.225499][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.513'.
[  126.302073][ T7531] loop5: detected capacity change from 0 to 512
[  126.329370][ T6026] udevd[6026]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  126.340121][ T7531] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  126.346085][ T6026] udevd[6026]: symlink '../../loop5' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:5' failed: Read-only file system
[  126.358809][ T7531] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  126.593293][ T7029] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  127.696458][ T7587] loop4: detected capacity change from 0 to 2048
[  127.708061][ T7587] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  127.721815][ T6026] udevd[6026]: symlink '../../loop4' '/dev/disk/by-label/LinuxUDF.tmp-b7:4' failed: Read-only file system
[  127.742844][ T6026] udevd[6026]: symlink '../../loop4' '/dev/disk/by-uuid/1234567812345678.tmp-b7:4' failed: Read-only file system
[  127.826917][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.537'.
[  127.871186][ T7593] netlink: 76 bytes leftover after parsing attributes in process `syz.4.538'.
[  127.928238][ T7595] Dead loop on virtual device ipvlan1, fix it urgently!
[  127.957673][ T7595] syz.4.539 (7595) used greatest stack depth: 9736 bytes left
[  128.807820][ T7613] loop5: detected capacity change from 0 to 512
[  128.846909][ T7613] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  128.876937][ T6026] udevd[6026]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  128.913190][ T7613] EXT4-fs (loop5): 1 truncate cleaned up
[  128.926167][ T6026] udevd[6026]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  128.948033][ T7613] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.025131][ T7613] EXT4-fs error (device loop5): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.5.545: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  129.037926][ T7613] EXT4-fs (loop5): Remounting filesystem read-only
[  129.040872][ T7613] EXT4-fs warning (device loop5): ext4_rename_delete:3735: inode #2: comm syz.5.545: Deleting old file: nlink 5, error=-117
[  129.098891][ T7029] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.422133][ T7624] loop5: detected capacity change from 0 to 1764
[  129.446839][ T7624] iso9660: Corrupted directory entry in block 2 of inode 1920
[  129.684238][ T7642] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.059051][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  130.207197][ T7655] loop4: detected capacity change from 0 to 40427
[  130.213418][ T7655] F2FS-fs: heap/no_heap options were deprecated
[  130.225683][ T7655] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  130.230021][ T6026] udevd[6026]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system
[  130.235638][ T7655] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  130.245087][ T7655] F2FS-fs (loop4): build fault injection type: 0x0
[  130.252599][ T7655] F2FS-fs (loop4): invalid crc value
[  130.319311][ T7655] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  130.325655][ T7655] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30
[  130.328659][ T7655] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  130.742699][ T7683] netlink: 20 bytes leftover after parsing attributes in process `syz.3.575'.
[  131.968463][    T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  132.132807][    T9] usb 5-1: config index 0 descriptor too short (expected 3133, got 61)
[  132.137220][    T9] usb 5-1: config 0 has an invalid interface number: 156 but max is 1
[  132.140734][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  132.144589][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  132.150860][    T9] usb 5-1: config 0 has no interface number 0
[  132.153396][    T9] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  132.157538][    T9] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  132.162009][    T9] usb 5-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  132.167145][    T9] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  132.175974][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.182295][    T9] usb 5-1: config 0 descriptor??
[  132.199253][    T9] gspca_main: spca561-2.14.0 probing abcd:cdee
[  132.394970][    T9] spca561 5-1:0.156: probe with driver spca561 failed with error -22
[  132.400228][    T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  132.403317][    T9] usb 5-1: MIDIStreaming interface descriptor not found
[  132.474405][    T9] usb 5-1: USB disconnect, device number 5
[  132.626468][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  132.634645][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  133.073644][ T7741] netlink: 'syz.4.595': attribute type 32 has an invalid length.
[  133.076856][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.595'.
[  133.081924][ T7741] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  133.768605][    T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  133.918305][    T9] usb 5-1: Using ep0 maxpacket: 32
[  133.923838][    T9] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[  133.926780][    T9] usb 5-1: config 0 has no interface number 0
[  133.930753][    T9] usb 5-1: config 0 interface 89 has no altsetting 0
[  133.935667][    T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  133.939056][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.941947][    T9] usb 5-1: Product: syz
[  133.943466][    T9] usb 5-1: Manufacturer: syz
[  133.945195][    T9] usb 5-1: SerialNumber: syz
[  133.949112][    T9] usb 5-1: config 0 descriptor??
[  133.955507][    T9] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  133.960689][    T9] em28xx 5-1:0.89: Video interface 89 found: bulk
[  134.048363][ T6703] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  134.200255][ T6703] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.204806][ T6703] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.210713][ T6703] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  134.214488][ T6703] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.221969][ T6703] usb 6-1: config 0 descriptor??
[  134.558647][    T9] em28xx 5-1:0.89: unknown em28xx chip ID (0)
[  135.179905][    T9] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  135.182796][    T9] em28xx 5-1:0.89: board has no eeprom
[  135.238423][    T9] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67)
[  135.243832][    T9] em28xx 5-1:0.89: analog set to bulk mode.
[  135.254363][    T9] usb 5-1: USB disconnect, device number 6
[  135.257932][    T9] em28xx 5-1:0.89: Disconnecting em28xx
[  135.268336][  T972] em28xx 5-1:0.89: Registering V4L2 extension
[  135.306482][ T6703] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0003/input/input5
[  135.340853][ T6703] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0003/input/input6
[  135.599299][ T6703] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0003/input/input7
[  135.701550][  T972] em28xx 5-1:0.89: Config register raw data: 0xffffffed
[  135.704545][  T972] em28xx 5-1:0.89: AC97 chip type couldn't be determined
[  135.707253][  T972] em28xx 5-1:0.89: No AC97 audio processor
[  135.715108][  T972] usb 5-1: Decoder not found
[  135.716862][  T972] em28xx 5-1:0.89: failed to create media graph
[  135.720909][  T972] em28xx 5-1:0.89: V4L2 device video103 deregistered
[  135.727153][  T972] em28xx 5-1:0.89: Registering snapshot button...
[  135.755902][  T972] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input9
[  135.827084][  T972] em28xx 5-1:0.89: Remote control support is not available for this card.
[  135.839769][    T9] em28xx 5-1:0.89: Closing input extension
[  135.844518][    T9] em28xx 5-1:0.89: Deregistering snapshot button
[  135.873020][ T6703] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0003/input/input8
[  136.054780][ T6703] uclogic 0003:256C:006D.0003: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0
[  136.064559][    T9] em28xx 5-1:0.89: Freeing device
[  136.090822][ T6703] usb 6-1: USB disconnect, device number 2
[  136.378653][ T7820] netlink: 277 bytes leftover after parsing attributes in process `syz.5.610'.
[  136.460465][ T7824] loop4: detected capacity change from 0 to 1024
[  136.469898][ T7824] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  136.473848][ T7799] udevd[7799]: symlink '../../loop4' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:4' failed: Read-only file system
[  136.478665][ T7824] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  136.482819][ T7824] EXT4-fs (loop4): orphan cleanup on readonly fs
[  136.486506][ T7824] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.611: Freeing blocks not in datazone - block = 0, count = 4096
[  136.497157][ T7824] EXT4-fs (loop4): 1 orphan inode deleted
[  136.501772][ T7824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  136.515697][ T7799] udevd[7799]: symlink '../../loop4' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:4' failed: Read-only file system
[  136.556734][ T6560] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.737679][ T7831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  136.755861][ T7831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  136.764463][ T7831] bond0 (unregistering): Released all slaves
[  137.821465][    T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  138.000601][    T9] usb 6-1: unable to get BOS descriptor or descriptor too short
[  138.009638][    T9] usb 6-1: config 6 has an invalid interface number: 200 but max is 0
[  138.012966][    T9] usb 6-1: config 6 has no interface number 0
[  138.015633][    T9] usb 6-1: config 6 interface 200 has no altsetting 0
[  138.034143][    T9] usb 6-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f
[  138.037508][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.044376][    T9] usb 6-1: Product: syz
[  138.046565][    T9] usb 6-1: Manufacturer: syz
[  138.052925][    T9] usb 6-1: SerialNumber: syz
[  138.999264][ T7878] netlink: 88 bytes leftover after parsing attributes in process `syz.4.634'.
[  139.002975][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.634'.
[  139.251993][ T7886] loop4: detected capacity change from 0 to 32768
[  139.255036][ T7886] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.638 (7886)
[  139.263820][ T7886] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  139.273414][ T7886] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  139.277447][ T6026] udevd[6026]: symlink '../../loop4' '/dev/disk/by-uuid/e417788f-7a09-42b2-9266-8ddc5d5d35d2.tmp-b7:4' failed: Read-only file system
[  139.282424][ T7886] BTRFS info (device loop4): disk space caching is enabled
[  139.287690][ T7886] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  139.326447][ T7886] BTRFS info (device loop4): rebuilding free space tree
[  139.336263][ T7886] BTRFS info (device loop4): disabling free space tree
[  139.340622][ T7886] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  139.344590][ T7886] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  139.376921][ T6560] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  139.593464][ T7906] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.640'.
[  139.898739][   T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  140.049113][   T24] usb 5-1: Using ep0 maxpacket: 32
[  140.059598][   T24] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  140.063012][   T24] usb 5-1: config 0 has no interface number 0
[  140.065566][   T24] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  140.080694][   T24] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  140.084410][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.087743][   T24] usb 5-1: Product: syz
[  140.089725][   T24] usb 5-1: Manufacturer: syz
[  140.091707][   T24] usb 5-1: SerialNumber: syz
[  140.101661][   T24] usb 5-1: config 0 descriptor??
[  140.113501][   T24] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  140.117255][   T24] em28xx 5-1:0.132: Video interface 132 found:
[  140.494932][ T7926] overlayfs: failed to clone upperpath
[  140.526356][   T24] em28xx 5-1:0.132: unknown em28xx chip ID (0)
[  140.617458][    T9] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state.
[  140.638586][    T9] dvb-usb: bulk message failed: -71 (3/0)
[  140.650258][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  140.669163][    T9] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T)
[  140.676018][    T9] usb 6-1: media controller created
[  140.714360][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  140.734980][    T9] dvb-usb: bulk message failed: -71 (6/0)
[  140.739808][   T24] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  140.743414][   T24] em28xx 5-1:0.132: board has no eeprom
[  140.744674][    T9] dvb-usb: bulk message failed: -71 (6/0)
[  140.748236][    T9] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T'
[  140.759262][    T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input10
[  140.775713][    T9] dvb-usb: schedule remote query interval to 150 msecs.
[  140.785563][    T9] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected.
[  140.812407][    T9] usb 6-1: USB disconnect, device number 3
[  140.830833][   T24] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  140.847395][   T24] em28xx 5-1:0.132: analog set to bulk mode.
[  140.853975][ T7933] netlink: zone id is out of range
[  140.854104][ T6703] em28xx 5-1:0.132: Registering V4L2 extension
[  140.871557][   T24] usb 5-1: USB disconnect, device number 7
[  140.875020][   T24] em28xx 5-1:0.132: Disconnecting em28xx
[  140.917073][    T9] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected.
[  141.015048][ T6703] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[  141.021948][ T6703] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[  141.024928][ T6703] em28xx 5-1:0.132: No AC97 audio processor
[  141.041818][ T6703] usb 5-1: Decoder not found
[  141.043315][ T6703] em28xx 5-1:0.132: failed to create media graph
[  141.048409][ T6703] em28xx 5-1:0.132: V4L2 device video103 deregistered
[  141.054292][ T6703] em28xx 5-1:0.132: Remote control support is not available for this card.
[  141.057688][   T24] em28xx 5-1:0.132: Closing input extension
[  141.070830][   T24] em28xx 5-1:0.132: Freeing device
[  141.095766][ T7944] syz_tun: entered promiscuous mode
[  141.116925][ T7944] batadv_slave_0: entered promiscuous mode
[  141.127979][ T7944] hsr1: entered allmulticast mode
[  141.134446][ T7944] syz_tun: entered allmulticast mode
[  141.136673][ T7944] batadv_slave_0: entered allmulticast mode
[  141.527070][ T7965] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  141.529684][ T5849] IPVS: starting estimator thread 0...
[  141.624633][   T33] audit: type=1326 audit(1755392765.781:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7973 comm="syz.3.670" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  141.644922][   T33] audit: type=1326 audit(1755392765.781:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7973 comm="syz.3.670" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  141.680097][   T33] audit: type=1326 audit(1755392765.781:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7973 comm="syz.3.670" exe="/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  141.719451][   T33] audit: type=1326 audit(1755392765.781:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7973 comm="syz.3.670" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  141.726143][   T33] audit: type=1326 audit(1755392765.781:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7973 comm="syz.3.670" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  141.736179][   T33] audit: type=1326 audit(1755392765.781:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7973 comm="syz.3.670" exe="/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  141.743298][ T7970] IPVS: using max 64 ests per chain, 153600 per kthread
[  141.749393][   T33] audit: type=1326 audit(1755392765.781:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7973 comm="syz.3.670" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  141.756494][   T33] audit: type=1326 audit(1755392765.781:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7973 comm="syz.3.670" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  142.005503][ T7982] overlayfs: failed to clone upperpath
[  142.186555][ T7996] netlink: 16 bytes leftover after parsing attributes in process `syz.5.680'.
[  142.209765][ T7996] netlink: 16 bytes leftover after parsing attributes in process `syz.5.680'.
[  142.524113][ T8019] loop4: detected capacity change from 0 to 4096
[  142.557073][ T7799] udevd[7799]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  142.572623][ T7799] udevd[7799]: symlink '../../loop4' '/dev/disk/by-uuid/399AA58E54924951.tmp-b7:4' failed: Read-only file system
[  142.596801][ T7799] udevd[7799]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  142.602632][ T7799] udevd[7799]: symlink '../../loop4' '/dev/disk/by-uuid/399AA58E54924951.tmp-b7:4' failed: Read-only file system
[  143.255696][ T8027] loop5: detected capacity change from 0 to 4096
[  143.291598][ T8028] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  143.379657][   T33] audit: type=1800 audit(1755392767.491:292): pid=8027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.691" name="file1" dev="loop5" ino=15 res=0 errno=0
[  143.402359][   T33] audit: type=1800 audit(1755392767.501:293): pid=8027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.691" name="file1" dev="loop5" ino=15 res=0 errno=0
[  143.402652][ T7799] udevd[7799]: symlink '../../loop5' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:5' failed: Read-only file system
[  143.463154][ T7799] udevd[7799]: symlink '../../loop5' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:5' failed: Read-only file system
[  143.676972][ T8034] Dead loop on virtual device ipvlan1, fix it urgently!
[  143.749908][ T8034] syz.4.694 (8034) used greatest stack depth: 9352 bytes left
[  144.174549][ T8056] netlink: 68 bytes leftover after parsing attributes in process `syz.5.702'.
[  144.499739][ T8068] loop4: detected capacity change from 0 to 4096
[  144.503810][ T8068] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  144.508086][ T8068] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096)
[  144.511848][ T8068] NILFS (loop4): mounting unchecked fs
[  144.515539][ T7799] udevd[7799]: symlink '../../loop4' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:4' failed: Read-only file system
[  144.516181][ T8068] NILFS (loop4): invalid segment: Checksum error in segment payload
[  144.523456][ T8068] NILFS (loop4): unable to fall back to spare super block
[  144.529911][ T8068] NILFS (loop4): error -22 while searching super root
[  144.749237][ T8078] loop4: detected capacity change from 0 to 256
[  144.754887][ T8076] netlink: 20 bytes leftover after parsing attributes in process `syz.3.712'.
[  144.760682][ T8078] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  145.179993][ T8085] loop4: detected capacity change from 0 to 4096
[  145.257832][ T7799] udevd[7799]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  145.286647][ T7799] udevd[7799]: symlink '../../loop4' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:4' failed: Read-only file system
[  146.687425][ T8117] bridge1: the hash_elasticity option has been deprecated and is always 16
[  146.794822][ T8121] Bluetooth: MGMT ver 1.23
[  147.716309][ T8127] netlink: 112 bytes leftover after parsing attributes in process `syz.5.733'.
[  147.759175][ T8129] netlink: 'syz.4.734': attribute type 15 has an invalid length.
[  147.864841][ T8136] loop4: detected capacity change from 0 to 128
[  148.858364][ T5949] Bluetooth: hci0: command tx timeout
[  148.915612][ T8149] loop4: detected capacity change from 0 to 1024
[  148.933064][ T8149] hfsplus: bad catalog entry type
[  148.934503][ T7799] udevd[7799]: symlink '../../loop4' '/dev/disk/by-label/untitled.tmp-b7:4' failed: Read-only file system
[  148.943754][ T7799] udevd[7799]: symlink '../../loop4' '/dev/disk/by-uuid/3de3d207-fc4e-3c3b-aa08-7cb07cd064ab.tmp-b7:4' failed: Read-only file system
[  148.958110][ T7799] udevd[7799]: symlink '../../loop4' '/dev/disk/by-label/untitled.tmp-b7:4' failed: Read-only file system
[  148.964352][  T509] hfsplus: b-tree write err: -5, ino 4
[  148.966456][ T7799] udevd[7799]: symlink '../../loop4' '/dev/disk/by-uuid/3de3d207-fc4e-3c3b-aa08-7cb07cd064ab.tmp-b7:4' failed: Read-only file system
[  149.173179][ T8162] loop4: detected capacity change from 0 to 256
[  149.611763][ T8171] loop4: detected capacity change from 0 to 512
[  149.614552][ T8171] EXT4-fs: Ignoring removed bh option
[  149.714575][ T8171] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  149.776359][ T8171] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  149.819908][   T51] libceph: connect (1)[c::]:6789 error -101
[  150.350558][ T7799] udevd[7799]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  150.369016][ T8172] ceph: No mds server is up or the cluster is laggy
[  150.374003][   T51] libceph: mon0 (1)[c::]:6789 connect error
[  150.382837][ T7799] udevd[7799]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  150.392611][ T8171] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  150.395843][ T8171] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  150.490449][ T8171] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.586316][ T6560] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.832818][ T8207] openvswitch: netlink: Message has 4784 unknown bytes.
[  150.835663][ T8207] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.157857][ T5949] Bluetooth: hci0: command tx timeout
[  151.391732][ T8213] loop4: detected capacity change from 0 to 512
[  151.396549][ T8213] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  151.798365][ T5849] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  151.948404][ T5849] usb 5-1: Using ep0 maxpacket: 8
[  151.955375][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  151.962410][ T5849] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  151.966315][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.979322][ T5849] usb 5-1: config 0 descriptor??
[  152.193554][ T5849] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  152.288363][   T51] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  152.468842][   T51] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  152.473277][   T51] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  152.480769][   T51] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  152.484493][   T51] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  152.487765][   T51] usb 6-1: Manufacturer: syz
[  152.489849][   T51] usb 6-1: SerialNumber: syz
[  152.494094][   T51] usb 6-1: config 0 descriptor??
[  152.496862][ T8234] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  152.503656][   T51] usb 6-1: ucan: probing device on interface #0
[  152.506355][   T51] usb 6-1: ucan: invalid endpoint configuration
[  152.509778][   T51] usb 6-1: ucan: probe failed; try to update the device firmware
[  152.706939][ T5849] usb 6-1: USB disconnect, device number 4
[  153.501223][ T8252] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  154.489729][ T8265] vxcan1 speed is unknown, defaulting to 1000
[  154.544115][   T24] usb 5-1: USB disconnect, device number 8
[  154.615285][ T8272] loop4: detected capacity change from 0 to 128
[  154.637199][ T7799] udevd[7799]: symlink '../../loop4' '/dev/disk/by-label/SYZKALLER.tmp-b7:4' failed: Read-only file system
[  154.651755][ T7799] udevd[7799]: symlink '../../loop4' '/dev/disk/by-uuid/1DC8-5927.tmp-b7:4' failed: Read-only file system
[  154.982427][ T8286] loop4: detected capacity change from 0 to 128
[  155.035934][ T7799] udevd[7799]: symlink '../../loop4' '/dev/disk/by-label/SYZKALLER.tmp-b7:4' failed: Read-only file system
[  155.055897][ T7799] udevd[7799]: symlink '../../loop4' '/dev/disk/by-uuid/1DC8-5927.tmp-b7:4' failed: Read-only file system
[  155.739065][ T8302] loop4: detected capacity change from 0 to 256
[  155.760877][ T8302] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  157.178063][ T8331] loop5: detected capacity change from 0 to 4096
[  157.263067][ T7799] udevd[7799]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  157.279274][ T7799] udevd[7799]: symlink '../../loop5' '/dev/disk/by-uuid/399AA58E54924951.tmp-b7:5' failed: Read-only file system
[  157.440046][ T8337] loop5: detected capacity change from 0 to 256
[  157.451220][ T8337] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  157.454969][ T8337] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  157.467456][ T8337] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  157.553549][ T8329] loop4: detected capacity change from 0 to 32768
[  157.559063][ T8338] sctp: [Deprecated]: syz.3.818 (pid 8338) Use of struct sctp_assoc_value in delayed_ack socket option.
[  157.559063][ T8338] Use struct sctp_sack_info instead
[  157.585595][ T6026] udevd[6026]: symlink '../../loop4' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:4' failed: Read-only file system
[  157.585719][ T8329] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  157.635837][ T7799] udevd[7799]: symlink '../../loop4' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:4' failed: Read-only file system
[  157.649968][ T8329] XFS (loop4): Ending clean mount
[  157.662009][ T8329] XFS (loop4): Quotacheck needed: Please wait.
[  157.700532][ T8329] XFS (loop4): Quotacheck: Done.
[  157.751482][ T6560] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  157.988012][ T8363] sp0: Synchronizing with TNC
[  158.366138][ T8361] loop4: detected capacity change from 0 to 32768
[  158.407274][ T7799] udevd[7799]: symlink '../../loop4' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:4' failed: Read-only file system
[  158.581564][ T8382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  158.868673][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  159.480925][ T8406] loop5: detected capacity change from 0 to 512
[  159.497294][ T7799] udevd[7799]: symlink '../../loop5' '/dev/disk/by-uuid/1DDD-580F.tmp-b7:5' failed: Read-only file system
[  159.715183][ T8416] loop5: detected capacity change from 0 to 256
[  159.728126][ T8416] FAT-fs (loop5): Directory bread(block 64) failed
[  159.731060][ T8416] FAT-fs (loop5): Directory bread(block 65) failed
[  159.733520][ T8416] FAT-fs (loop5): Directory bread(block 66) failed
[  159.735596][ T8416] FAT-fs (loop5): Directory bread(block 67) failed
[  159.740941][ T8416] FAT-fs (loop5): Directory bread(block 68) failed
[  159.743002][ T8416] FAT-fs (loop5): Directory bread(block 69) failed
[  159.745165][ T8416] FAT-fs (loop5): Directory bread(block 70) failed
[  159.747562][ T8416] FAT-fs (loop5): Directory bread(block 71) failed
[  159.758651][ T8416] FAT-fs (loop5): Directory bread(block 72) failed
[  159.760721][ T8416] FAT-fs (loop5): Directory bread(block 73) failed
[  160.253102][ T8432] loop4: detected capacity change from 0 to 32768
[  160.257025][ T8432] XFS: attr2 mount option is deprecated.
[  160.274367][ T7799] udevd[7799]: symlink '../../loop4' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:4' failed: Read-only file system
[  160.292557][ T7799] udevd[7799]: symlink '../../loop4' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:4' failed: Read-only file system
[  160.297586][ T8432] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  160.316542][ T8432] XFS (loop4): Ending clean mount
[  160.324753][ T8432] XFS (loop4): Quotacheck needed: Please wait.
[  160.361166][ T8432] XFS (loop4): Quotacheck: Done.
[  160.389205][ T6560] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  160.640838][ T8442] loop5: detected capacity change from 0 to 4096
[  160.661309][ T7799] udevd[7799]: symlink '../../loop5' '/dev/disk/by-label/LinuxUDF.tmp-b7:5' failed: Read-only file system
[  160.676087][ T8442] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  160.680058][ T7799] udevd[7799]: symlink '../../loop5' '/dev/disk/by-uuid/1234567812345678.tmp-b7:5' failed: Read-only file system
[  160.688731][ T8442] UDF-fs: Scanning with blocksize 512 failed
[  160.700702][ T8442] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  160.729389][ T8442] UDF-fs: error (device loop5): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328)
[  160.794083][ T7799] udevd[7799]: symlink '../../loop2' '/dev/disk/by-label/LinuxUDF.tmp-b7:5' failed: Read-only file system
[  160.811592][ T7799] udevd[7799]: symlink '../../loop2' '/dev/disk/by-uuid/1234567812345678.tmp-b7:5' failed: Read-only file system
[  160.978470][ T6703] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  161.062898][ T8459] loop5: detected capacity change from 0 to 512
[  161.079634][ T8459] EXT4-fs: Ignoring removed nomblk_io_submit option
[  161.094263][ T7799] udevd[7799]: symlink '../../loop5' '/dev/disk/by-label/\x86\x5b.tmp-b7:5' failed: Read-only file system
[  161.112722][ T7799] udevd[7799]: symlink '../../loop5' '/dev/disk/by-label/\x86\x5b.tmp-b7:5' failed: Read-only file system
[  161.154288][ T8459] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  161.161542][ T8459] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  161.169303][ T8459] EXT4-fs (loop5): 1 truncate cleaned up
[  161.172847][ T8459] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.183776][ T8459] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #2: block 4: comm syz.5.866: lblock 0 mapped to illegal pblock 4 (length 1)
[  161.194058][ T8459] EXT4-fs (loop5): Remounting filesystem read-only
[  161.213956][ T7029] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.288595][ T6703] usb 5-1: Using ep0 maxpacket: 32
[  161.298919][ T6703] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  161.301991][ T6703] usb 5-1: config 0 has no interface number 0
[  161.304385][ T6703] usb 5-1: config 0 interface 12 has no altsetting 0
[  161.320915][ T6703] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40
[  161.324445][ T6703] usb 5-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3
[  161.331980][ T6703] usb 5-1: Product: syz
[  161.336885][ T6703] usb 5-1: Manufacturer: syz
[  161.340079][ T6703] usb 5-1: SerialNumber: syz
[  161.347896][ T6703] usb 5-1: config 0 descriptor??
[  161.671383][ T8467] Illegal XDP return value 347622570 on prog  (id 80) dev N/A, expect packet loss!
[  162.250825][ T8483] loop5: detected capacity change from 0 to 8
[  162.283251][ T8483] SQUASHFS error: lzo decompression failed, data probably corrupt
[  162.318483][ T8483] SQUASHFS error: Failed to read block 0x91: -5
[  162.321302][ T8483] SQUASHFS error: Unable to read metadata cache entry [8f]
[  162.324235][ T8483] SQUASHFS error: Unable to read inode 0x11f
[  162.500370][ T8487] geneve2: entered promiscuous mode
[  162.805707][ T8499] netlink: 64 bytes leftover after parsing attributes in process `syz.3.883'.
[  162.971029][ T8489] loop5: detected capacity change from 0 to 32768
[  163.020792][ T6026] udevd[6026]: symlink '../../loop5' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:5' failed: Read-only file system
[  163.155211][ T8511] netlink: 'syz.3.890': attribute type 6 has an invalid length.
[  163.439436][ T6703] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32
[  163.442754][ T6703] f81534 5-1:0.12: f81534_find_config_idx: read failed: -32
[  163.445595][ T6703] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -32
[  163.448778][ T6703] f81534 5-1:0.12: probe with driver f81534 failed with error -32
[  163.796127][ T5849] usb 5-1: USB disconnect, device number 9
[  163.885835][   T33] kauditd_printk_skb: 4 callbacks suppressed
[  163.885850][   T33] audit: type=1326 audit(1755392788.061:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.4.894" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2338ebe9 code=0x7ffc0000
[  163.903160][   T33] audit: type=1326 audit(1755392788.061:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.4.894" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2338ebe9 code=0x7ffc0000
[  163.912576][   T33] audit: type=1326 audit(1755392788.081:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.4.894" exe="/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fba2338ebe9 code=0x7ffc0000
[  163.923374][   T33] audit: type=1326 audit(1755392788.081:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.4.894" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2338ebe9 code=0x7ffc0000
[  163.933048][   T33] audit: type=1326 audit(1755392788.081:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.4.894" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2338ebe9 code=0x7ffc0000
[  163.944560][   T33] audit: type=1326 audit(1755392788.081:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.4.894" exe="/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7fba2338ebe9 code=0x7ffc0000
[  163.953146][   T33] audit: type=1326 audit(1755392788.081:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.4.894" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2338ebe9 code=0x7ffc0000
[  163.964148][   T33] audit: type=1326 audit(1755392788.081:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.4.894" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2338ebe9 code=0x7ffc0000
[  163.973340][ T8517] loop5: detected capacity change from 0 to 32768
[  163.977566][ T8517] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.892 (8517)
[  163.996814][ T8523] netlink: 24 bytes leftover after parsing attributes in process `syz.4.895'.
[  164.000019][ T7799] udevd[7799]: symlink '../../loop5' '/dev/disk/by-uuid/5e4b7888-5e56-43f0-8345-635ad0fd87c6.tmp-b7:5' failed: Read-only file system
[  164.000595][ T8517] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  164.019970][ T8517] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  164.023475][ T8517] BTRFS info (device loop5): using free-space-tree
[  164.210579][ T8547] batadv0: entered allmulticast mode
[  164.319020][ T8549] loop4: detected capacity change from 0 to 64
[  164.325701][ T8549] minix: Unknown parameter './file1/file3'
[  164.721525][ T7029] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  164.872646][ T8564] overlayfs: missing 'lowerdir'
[  166.600886][ T8584] loop4: detected capacity change from 0 to 32768
[  166.669906][ T8584] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  166.704790][ T7799] udevd[7799]: symlink '../../loop4' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:4' failed: Read-only file system
[  166.715710][ T8602] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.918'.
[  166.747269][ T8584] XFS (loop4): Ending clean mount
[  166.776920][ T7799] udevd[7799]: symlink '../../loop4' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:4' failed: Read-only file system
[  166.866155][ T6560] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  166.963903][ T8610] netlink: 16 bytes leftover after parsing attributes in process `syz.3.922'.
[  167.406246][  T972] usb 5-1: new low-speed USB device number 10 using dummy_hcd
[  167.611713][  T972] usb 5-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a
[  167.615238][  T972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.623105][  T972] usb 5-1: config 0 descriptor??
[  167.633190][  T972] pwc: Logitech QuickCam Notebook Pro USB webcam detected.
[  167.841380][  T972] pwc: Failed to set LED on/off time (-71)
[  167.845949][  T972] pwc: send_video_command error -71
[  167.855099][  T972] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  167.857988][  T972] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71
[  167.867578][ T8629] Invalid ELF header type: 0 != 1
[  167.877835][  T972] usb 5-1: USB disconnect, device number 10
[  167.987368][ T8635] loop5: detected capacity change from 0 to 2048
[  167.999727][ T8635] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  168.004541][ T7799] udevd[7799]: symlink '../../loop5' '/dev/disk/by-uuid/8d5b9604-d7b7-4ece-ae00-6b765044cdb8.tmp-b7:5' failed: Read-only file system
[  168.010587][ T8635] syz.5.932: attempt to access beyond end of device
[  168.010587][ T8635] loop5: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  168.015692][ T8638] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  168.060344][ T8640] fuse: Bad value for 'fd'
[  168.430670][ T8654] netlink: 148 bytes leftover after parsing attributes in process `syz.5.938'.
[  168.636043][ T8658] loop4: detected capacity change from 0 to 128
[  168.706186][ T8660] loop4: detected capacity change from 0 to 256
[  168.723948][ T8660] FAT-fs (loop4): Directory bread(block 64) failed
[  168.726670][ T8660] FAT-fs (loop4): Directory bread(block 65) failed
[  168.729519][ T8660] FAT-fs (loop4): Directory bread(block 66) failed
[  168.732520][ T8660] FAT-fs (loop4): Directory bread(block 67) failed
[  168.735157][ T8660] FAT-fs (loop4): Directory bread(block 68) failed
[  168.737995][ T8660] FAT-fs (loop4): Directory bread(block 69) failed
[  168.741504][ T8660] FAT-fs (loop4): Directory bread(block 70) failed
[  168.744016][ T8660] FAT-fs (loop4): Directory bread(block 71) failed
[  168.747070][ T8660] FAT-fs (loop4): Directory bread(block 72) failed
[  168.750441][ T8660] FAT-fs (loop4): Directory bread(block 73) failed
[  169.562985][ T8679] loop5: detected capacity change from 0 to 512
[  169.582193][ T7799] udevd[7799]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  169.587434][ T8679] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  169.601778][ T7799] udevd[7799]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  169.610524][ T8679] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.617323][ T8679] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  169.636509][ T8679] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  169.645099][ T8679] Quota error (device loop5): write_blk: dquota write failed
[  169.648788][ T8679] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota
[  169.652669][ T8679] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.951: Failed to acquire dquot type 0
[  169.689811][ T7029] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.973429][   T33] audit: type=1326 audit(1755392794.151:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.3.959" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  169.981646][   T33] audit: type=1326 audit(1755392794.151:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.3.959" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  169.993490][   T33] audit: type=1326 audit(1755392794.161:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.3.959" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  170.002796][   T33] audit: type=1326 audit(1755392794.161:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.3.959" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  170.010874][   T33] audit: type=1326 audit(1755392794.161:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.3.959" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  170.019388][   T33] audit: type=1326 audit(1755392794.161:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.3.959" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  170.027897][   T33] audit: type=1326 audit(1755392794.161:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.3.959" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  170.040020][   T33] audit: type=1326 audit(1755392794.161:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.3.959" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  170.659662][ T8735] loop5: detected capacity change from 0 to 256
[  170.697813][ T8737] netlink: 20 bytes leftover after parsing attributes in process `syz.4.974'.
[  170.712565][ T8737] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  171.663395][ T8758] loop5: detected capacity change from 0 to 4096
[  171.694252][ T7799] udevd[7799]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  171.701419][ T7799] udevd[7799]: symlink '../../loop5' '/dev/disk/by-uuid/275C1089492DF3B0.tmp-b7:5' failed: Read-only file system
[  171.704266][ T8758] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  171.714515][ T8758] ntfs3(loop5): Failed to load $Extend (-22).
[  171.715872][ T7799] udevd[7799]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  171.717307][ T8758] ntfs3(loop5): Failed to initialize $Extend.
[  171.725403][ T7799] udevd[7799]: symlink '../../loop5' '/dev/disk/by-uuid/275C1089492DF3B0.tmp-b7:5' failed: Read-only file system
[  172.574332][ T8781] netlink: 24 bytes leftover after parsing attributes in process `syz.5.993'.
[  174.207617][ T8846] loop5: detected capacity change from 0 to 4096
[  174.214449][ T8846] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  174.235278][ T7799] udevd[7799]: symlink '../../loop5' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:5' failed: Read-only file system
[  174.252360][ T7799] udevd[7799]: symlink '../../loop5' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:5' failed: Read-only file system
[  174.942752][ T8859] loop5: detected capacity change from 0 to 1024
[  174.964552][ T7799] udevd[7799]: symlink '../../loop5' '/dev/disk/by-label/untitled.tmp-b7:5' failed: Read-only file system
[  174.976044][ T7799] udevd[7799]: symlink '../../loop5' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:5' failed: Read-only file system
[  174.986410][ T8859] hfsplus: bad catalog folder thread
[  174.996264][ T7799] udevd[7799]: symlink '../../loop5' '/dev/disk/by-label/untitled.tmp-b7:5' failed: Read-only file system
[  175.002444][ T7799] udevd[7799]: symlink '../../loop5' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:5' failed: Read-only file system
[  175.154550][ T8863] loop5: detected capacity change from 0 to 16
[  175.168611][ T8863] erofs (device loop5): mounted with root inode @ nid 36.
[  175.171822][ T8863] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36
[  175.174727][ T8863] erofs (device loop5): failed to decompress -43 in[46, 4050] out[1851]
[  175.177580][ T8863] erofs (device loop5): read error -117 @ 43 of nid 36
[  175.187289][ T7799] udevd[7799]: symlink '../../loop5' '/dev/disk/by-uuid/dc990305-0000-0000-0000-00c46e0e7dba.tmp-b7:5' failed: Read-only file system
[  175.211638][ T7799] udevd[7799]: symlink '../../loop5' '/dev/disk/by-uuid/dc990305-0000-0000-0000-00c46e0e7dba.tmp-b7:5' failed: Read-only file system
[  175.846731][ T8892] loop4: detected capacity change from 0 to 1024
[  175.924248][ T8892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.041523][ T6560] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.728265][   T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  176.946452][ T8933] openvswitch: netlink: Unknown key attributes 2
[  176.994426][ T8935] netlink: 'syz.4.1062': attribute type 12 has an invalid length.
[  176.997838][ T8935] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1062'.
[  177.010791][   T24] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.015095][   T24] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  177.019435][   T24] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  177.026696][   T24] usb 6-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00
[  177.030603][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.612660][   T24] megaworld 0003:07B5:0312.0004: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.5-1/input0
[  177.617081][   T24] megaworld 0003:07B5:0312.0004: no inputs found
[  177.715243][ T8942] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  177.884078][   T24] usb 6-1: USB disconnect, device number 5
[  178.820483][ T8948] loop5: detected capacity change from 0 to 32768
[  178.827907][ T8948] bcachefs (/dev/loop5): error validating superblock: Invalid superblock: optional field with size 0 (type 1)
[  178.834996][ T8948] bcachefs: bch2_fs_get_tree() error: invalid_sb_field_size
[  178.860350][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1069'.
[  179.198483][ T5949] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  179.203680][ T5949] Bluetooth: hci1: Injecting HCI hardware error event
[  179.207853][ T5949] Bluetooth: hci1: hardware error 0x00
[  179.211602][ T8962] loop5: detected capacity change from 0 to 32768
[  179.216567][ T8962] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1073 (8962)
[  179.229934][ T8962] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  179.234057][ T8962] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  179.237846][ T8962] BTRFS info (device loop5): using free-space-tree
[  179.290383][ T7799] udevd[7799]: symlink '../../loop5' '/dev/disk/by-uuid/5e4b7888-5e56-43f0-8345-635ad0fd87c6.tmp-b7:5' failed: Read-only file system
[  179.462085][ T7029] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  179.701397][ T8988] loop5: detected capacity change from 0 to 4096
[  179.738698][ T8988] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.754178][ T8988] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1078'.
[  179.791300][ T7029] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.794401][ T7799] udevd[7799]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  179.971765][ T9000] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1083'.
[  180.022002][ T9004] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1086'.
[  180.100420][ T9010] binder: 9009:9010 ioctl 40046210 0 returned -14
[  180.100950][ T5948] Bluetooth: hci2: unexpected event 0x14 length: 20 > 6
[  180.306756][ T9016] loop5: detected capacity change from 0 to 16384
[  180.414380][ T9016] bcachefs (loop5): starting version 1.13: inode_has_child_snapshots
[  180.414398][ T9016]   features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  180.424251][ T9016] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  180.427517][ T9016] bcachefs (loop5): recovering from clean shutdown, journal seq 18
[  180.432760][ T9016] bcachefs (loop5): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive
[  180.432760][ T9016]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  180.491137][ T9016] bcachefs (loop5): error reading btree root btree=accounting level=0: btree_node_read_error, fixing
[  180.495999][ T9016] bcachefs (loop5): check_topology... done
[  180.512065][ T9016] bcachefs (loop5): accounting_read... done
[  180.517899][ T9016] bcachefs (loop5): alloc_read... done
[  180.523827][ T9016] bcachefs (loop5): snapshots_read... done
[  180.527454][ T9016] bcachefs (loop5): check_allocations...
[  180.560872][ T9016] bcachefs (loop5): bucket 0:173 gen 0 has wrong data_type: got btree, should be need_discard, fixing
[  180.581988][ T9016] bcachefs (loop5): bucket 0:173 gen 0 data type need_discard has wrong dirty_sectors: got 32, should be 0, fixing
[  180.615733][ T9016]  done
[  180.662012][ T9016] bcachefs (loop5): going read-write
[  180.762742][ T9016] bcachefs (loop5): journal_replay...
[  181.259130][ T5949] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  181.275720][ T9016]  done
[  181.303412][ T9016] bcachefs (loop5): check_lrus... done
[  181.494126][ T9016] bcachefs (loop5): check_backpointers_to_extents... done
[  181.515441][ T9016] bcachefs (loop5): check_extents_to_backpointers...
[  181.520606][ T9016] bcachefs (loop5): scanning for missing backpointers in 2/512 buckets
[  181.528377][ T9016]  done
[  181.530887][ T9016] bcachefs (loop5): check_inodes... done
[  181.536365][ T9016] bcachefs (loop5): resume_logged_ops... done
[  181.540231][ T9016] bcachefs (loop5): delete_dead_inodes... done
[  181.560527][ T9016] bcachefs (loop5): Fixed errors, running fsck a second time to verify fs is clean
[  181.564082][ T9016] bcachefs (loop5): check_extents_to_backpointers... done
[  181.574344][ T9016] bcachefs (loop5): check_inodes... done
[  181.578746][ T9016] bcachefs (loop5): resume_logged_ops... done
[  181.581939][ T9016] bcachefs (loop5): delete_dead_inodes... done
[  181.586780][ T9016] bcachefs (loop5): done starting filesystem
[  181.839036][ T7029] bcachefs (loop5): shutting down
[  181.841404][ T7029] bcachefs (loop5): going read-only
[  181.849380][ T7029] bcachefs (loop5): finished waiting for writes to stop
[  181.857254][ T7029] bcachefs (loop5): flushing journal and stopping allocators, journal seq 35
[  181.904555][ T7029] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 35
[  181.927988][ T7029] bcachefs (loop5): clean shutdown complete, journal seq 36
[  181.932289][ T7029] bcachefs (loop5): marking filesystem clean
[  181.980485][ T7029] bcachefs (loop5): shutdown complete
[  183.787564][ T9109] loop5: detected capacity change from 0 to 512
[  183.793134][ T9109] EXT4-fs: Ignoring removed bh option
[  183.796963][ T9109] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  183.805404][ T9109] EXT4-fs (loop5): 1 truncate cleaned up
[  183.815091][ T9109] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.818692][ T7799] udevd[7799]: symlink '../../loop5' '/dev/disk/by-label/\x86\x5b.tmp-b7:5' failed: Read-only file system
[  183.844898][ T9109] EXT4-fs warning (device loop5): ext4_group_add:1736: No reserved GDT blocks, can't resize
[  183.911584][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1126'.
[  183.915214][ T9114] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1126'.
[  183.923172][ T7029] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.094798][ T9122] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1131'.
[  184.457752][ T9136] 9pnet: Could not find request transport: tצUunix
[  184.525057][ T9124] loop5: detected capacity change from 0 to 32768
[  184.570630][ T7799] udevd[7799]: symlink '../../loop5' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:5' failed: Read-only file system
[  184.599221][ T7799] udevd[7799]: symlink '../../loop5' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:5' failed: Read-only file system
[  184.602841][ T9124] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  184.629508][ T9124] XFS (loop5): Ending clean mount
[  184.633445][ T9124] XFS (loop5): Quotacheck needed: Please wait.
[  184.679352][ T9124] XFS (loop5): Quotacheck: Done.
[  184.716463][ T7029] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  185.119765][ T9174] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.748771][ T6703] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  185.900012][ T6703] usb 6-1: Using ep0 maxpacket: 8
[  185.905491][ T6703] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  185.909174][ T6703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.914655][ T6703] usb 6-1: Product: syz
[  185.916381][ T6703] usb 6-1: Manufacturer: syz
[  185.920068][ T6703] usb 6-1: SerialNumber: syz
[  185.926619][ T6703] usb 6-1: config 0 descriptor??
[  185.935265][ T6703] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  186.875496][ T9250] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1186'.
[  186.888451][ T9250] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1186'.
[  187.042615][ T9260] gretap0: entered promiscuous mode
[  187.751276][   T33] kauditd_printk_skb: 12 callbacks suppressed
[  187.751475][   T33] audit: type=1326 audit(1755392811.831:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9274 comm="syz.4.1199" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba2338ebe9 code=0x0
[  189.234598][ T9308] tmpfs: Bad value for 'grpquota_inode_hardlimit'
[  189.594167][ T9328] trusted_key: syz.3.1219 sent an empty control message without MSG_MORE.
[  189.960471][ T6703] gspca_sonixj: reg_w1 err -71
[  189.962470][ T6703] sonixj 6-1:0.0: probe with driver sonixj failed with error -71
[  189.975241][ T6703] usb 6-1: USB disconnect, device number 6
[  191.350156][    T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  191.525853][    T9] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  191.531517][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.534595][    T9] usb 6-1: Product: syz
[  191.536192][    T9] usb 6-1: Manufacturer: syz
[  191.538037][    T9] usb 6-1: SerialNumber: syz
[  191.558399][    T9] usb 6-1: config 0 descriptor??
[  191.771811][    T9] usb-storage 6-1:0.0: USB Mass Storage device detected
[  191.803249][ T9380] vxcan1 speed is unknown, defaulting to 1000
[  191.827506][ T9388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  191.834624][ T9388] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.901846][ T9447] vxcan1 speed is unknown, defaulting to 1000
[  193.826616][  T972] usb 6-1: USB disconnect, device number 7
[  194.061640][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  194.064007][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  194.457542][ T9468] tc_dump_action: action bad kind
[  194.633672][ T9474] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  194.734191][ T9478] loop5: detected capacity change from 0 to 512
[  194.743387][ T9478] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  194.766987][ T7799] udevd[7799]: symlink '../../loop5' '/dev/disk/by-label/\x86\x5b.tmp-b7:5' failed: Read-only file system
[  194.774844][ T9478] EXT4-fs (loop5): invalid journal inode
[  194.777085][ T9478] EXT4-fs (loop5): can't get journal size
[  194.786007][ T9478] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002]
[  194.791292][ T9478] System zones: 1-12, 13-13
[  194.793365][ T9478] EXT4-fs (loop5): orphan cleanup on readonly fs
[  194.797343][ T9478] EXT4-fs (loop5): 1 truncate cleaned up
[  194.802625][ T9478] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  194.811298][ T7799] udevd[7799]: symlink '../../loop5' '/dev/disk/by-label/\x86\x5b.tmp-b7:5' failed: Read-only file system
[  194.840717][ T7029] EXT4-fs error (device loop5): __ext4_iget:5464: inode #11: block 1828716567: comm syz-executor: invalid block
[  194.850447][ T7029] EXT4-fs error (device loop5): __ext4_iget:5464: inode #11: block 1828716567: comm syz-executor: invalid block
[  194.965990][ T9172] syz_tun (unregistering): left promiscuous mode
[  195.136449][ T9172] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.207557][ T5956] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.334547][ T5956] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.417017][ T5956] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.489384][ T5956] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.659493][ T5948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  195.665222][ T5948] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  195.669804][ T5948] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  195.689850][ T5948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  195.690652][ T5956] bridge_slave_1: left allmulticast mode
[  195.695985][ T5948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  195.708098][ T5956] bridge_slave_1: left promiscuous mode
[  195.727512][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.759346][ T5956] bridge_slave_0: left allmulticast mode
[  195.761600][ T5956] bridge_slave_0: left promiscuous mode
[  195.765270][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.264917][ T9500] vxcan1 speed is unknown, defaulting to 1000
[  196.400415][ T9527] netlink: 340 bytes leftover after parsing attributes in process `syz.3.1307'.
[  196.412263][ T9527] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1307'.
[  196.866492][ T9500] chnl_net:caif_netlink_parms(): no params data found
[  197.319189][ T5956] batadv_slave_0: left promiscuous mode
[  197.335707][ T5956] hsr_slave_0: left promiscuous mode
[  197.342919][ T5956] hsr_slave_1: left promiscuous mode
[  197.345708][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  197.358592][ T5956] batman_adv: batadv0: Removing interface: batadv_slave_0
[  197.362560][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  197.366374][ T5956] batman_adv: batadv0: Removing interface: batadv_slave_1
[  197.388753][ T5956] veth1_macvtap: left promiscuous mode
[  197.391082][ T5956] veth0_macvtap: left promiscuous mode
[  197.393419][ T5956] veth1_vlan: left promiscuous mode
[  197.395686][ T5956] veth0_vlan: left promiscuous mode
[  197.749739][ T5948] Bluetooth: hci0: command tx timeout
[  197.936614][ T5956] team0 (unregistering): Port device team_slave_1 removed
[  197.971677][ T5956] team0 (unregistering): Port device team_slave_0 removed
[  198.504734][ T9500] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.507620][ T9500] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.511234][ T9500] bridge_slave_0: entered allmulticast mode
[  198.515655][ T9500] bridge_slave_0: entered promiscuous mode
[  198.524197][ T9500] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.527423][ T9500] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.541918][ T9500] bridge_slave_1: entered allmulticast mode
[  198.550466][ T9500] bridge_slave_1: entered promiscuous mode
[  198.822659][ T9500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  198.852083][ T9500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.354443][ T9500] team0: Port device team_slave_0 added
[  199.359884][ T9500] team0: Port device team_slave_1 added
[  199.421753][ T9500] batman_adv: batadv0: Adding interface: batadv_slave_0
[  199.430156][ T9500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.458228][ T9500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  199.543628][ T9500] batman_adv: batadv0: Adding interface: batadv_slave_1
[  199.546440][ T9500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.556369][ T9500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  199.711626][ T9500] hsr_slave_0: entered promiscuous mode
[  199.714580][ T9500] hsr_slave_1: entered promiscuous mode
[  199.818492][ T5948] Bluetooth: hci0: command tx timeout
[  200.080082][ T9600] netlink: 'syz.4.1325': attribute type 4 has an invalid length.
[  200.094493][ T9500] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  200.120237][ T9500] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  200.136902][ T9500] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  200.151827][ T9500] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  200.263604][ T9613] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1327'.
[  200.267123][ T9613] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1327'.
[  200.278287][ T9613] netlink: 'syz.4.1327': attribute type 6 has an invalid length.
[  200.351982][ T9500] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.372109][ T9500] 8021q: adding VLAN 0 to HW filter on device team0
[  200.390536][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.393014][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.400104][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.402384][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.506915][ T9624] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  200.516788][ T9624] team0: Device ipvlan2 is already an upper device of the team interface
[  200.552594][ T9628] tipc: Started in network mode
[  200.554292][ T9628] tipc: Node identity 010000000000000001, cluster identity 4711
[  200.621808][ T9500] 8021q: adding VLAN 0 to HW filter on device batadv0
[  200.782560][ T9500] veth0_vlan: entered promiscuous mode
[  200.788031][ T9500] veth1_vlan: entered promiscuous mode
[  200.812717][ T9500] veth0_macvtap: entered promiscuous mode
[  200.817004][ T9500] veth1_macvtap: entered promiscuous mode
[  200.832885][ T9500] batman_adv: batadv0: Interface activated: batadv_slave_0
[  200.844149][ T9500] batman_adv: batadv0: Interface activated: batadv_slave_1
[  200.853253][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  200.858053][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  200.864810][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  200.867546][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  200.958794][ T8176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.967555][ T8176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.001506][ T8176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.004615][ T8176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.972251][ T5948] Bluetooth: hci0: command tx timeout
[  202.084057][ T9681] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  202.154846][ T9686] capability: warning: `syz.4.1342' uses 32-bit capabilities (legacy support in use)
[  202.785136][   T33] audit: type=1800 audit(1755392826.961:327): pid=9706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1350" name="nullb0" dev="tmpfs" ino=2583 res=0 errno=0
[  203.048943][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1356'.
[  203.070355][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1356'.
[  203.165853][ T9730] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  203.318516][ T6015] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  203.468532][ T6015] usb 7-1: Using ep0 maxpacket: 16
[  203.475031][ T6015] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  203.484297][ T6015] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  203.487796][ T6015] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.493259][ T6015] usb 7-1: Product: syz
[  203.494977][ T6015] usb 7-1: Manufacturer: syz
[  203.496803][ T6015] usb 7-1: SerialNumber: syz
[  203.502211][ T6015] usb 7-1: config 0 descriptor??
[  203.507536][ T6015] dm9601 7-1:0.0: probe with driver dm9601 failed with error -22
[  203.515677][ T6015] sr9700 7-1:0.0: probe with driver sr9700 failed with error -22
[  203.718969][   T24] usb 7-1: USB disconnect, device number 2
[  203.763310][ T9743] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1366'.
[  204.059199][ T5948] Bluetooth: hci0: command tx timeout
[  204.326943][ T9767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.077453][   T33] audit: type=1326 audit(1755392829.241:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.3.1383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  205.086921][   T33] audit: type=1326 audit(1755392829.241:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.3.1383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  205.103326][   T33] audit: type=1326 audit(1755392829.241:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.3.1383" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  205.121290][   T33] audit: type=1326 audit(1755392829.241:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.3.1383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  205.142071][   T33] audit: type=1326 audit(1755392829.241:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.3.1383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  205.155630][   T33] audit: type=1326 audit(1755392829.241:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.3.1383" exe="/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  205.164224][   T33] audit: type=1326 audit(1755392829.241:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.3.1383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  205.236868][   T33] audit: type=1326 audit(1755392829.241:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.3.1383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  206.708391][ T5949] Bluetooth: hci2: command 0x0406 tx timeout
[  207.565771][ T9840] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1406'.
[  207.740293][ T9848] netlink: 'syz.6.1409': attribute type 10 has an invalid length.
[  207.765267][ T9848] 8021q: adding VLAN 0 to HW filter on device team0
[  207.780270][ T9848] bond0: (slave team0): Enslaving as an active interface with an up link
[  208.335162][ T9876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1421'.
[  208.615249][ T9866] pvfs2: Unexpected value for 'acl'
[  208.679723][ T9890] vxcan1 speed is unknown, defaulting to 1000
[  209.257812][ T9919] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1441'.
[  209.406905][ T9932] loop6: detected capacity change from 0 to 256
[  210.977693][ T9980] IPv6: Can't replace route, no match found
[  211.122543][ T9989] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1467'.
[  211.126200][ T9989] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  211.914230][   T33] audit: type=1326 audit(1755392836.091:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10023 comm="syz.3.1474" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  211.932457][   T33] audit: type=1326 audit(1755392836.091:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10023 comm="syz.3.1474" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  211.953073][   T33] audit: type=1326 audit(1755392836.091:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10023 comm="syz.3.1474" exe="/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  211.961316][   T33] audit: type=1326 audit(1755392836.091:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10023 comm="syz.3.1474" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  211.968001][   T33] audit: type=1326 audit(1755392836.091:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10023 comm="syz.3.1474" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  214.250420][T10131] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1507'.
[  214.267639][ T6703] IPVS: starting estimator thread 0...
[  214.399143][T10133] IPVS: using max 37 ests per chain, 88800 per kthread
[  214.528355][ T6015] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  214.682185][ T6015] usb 7-1: config 0 has an invalid interface number: 120 but max is 0
[  214.685713][ T6015] usb 7-1: config 0 has no interface number 0
[  214.688527][ T6015] usb 7-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  214.695887][ T6015] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 52, changing to 9
[  214.704776][ T6015] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 8241, setting to 1024
[  214.711705][ T6015] usb 7-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  214.715337][ T6015] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.723231][ T6015] usb 7-1: config 0 descriptor??
[  214.741884][ T6015] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.120/input/input11
[  214.942081][ T6015] usb 7-1: USB disconnect, device number 3
[  215.722418][T10168] loop6: detected capacity change from 0 to 32768
[  215.824789][T10168] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[  215.824815][T10168]   allowing incompatible features above 0.0: (unknown version)
[  215.824824][T10168]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  215.847720][T10168] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0
[  215.851103][T10168] bcachefs (loop6): initializing new filesystem
[  215.866019][T10168] bcachefs (loop6): going read-write
[  215.877612][T10168] bcachefs (loop6): marking superblocks
[  215.926465][T10168] bcachefs (loop6): initializing freespace
[  215.940360][T10168] bcachefs (loop6): done initializing freespace
[  215.956577][T10168] bcachefs (loop6): reading snapshots table
[  215.960331][T10168] bcachefs (loop6): reading snapshots done
[  215.997812][T10168] bcachefs (loop6): done starting filesystem
[  216.120653][ T9500] bcachefs (loop6): shutting down
[  216.124660][ T9500] bcachefs (loop6): going read-only
[  216.127095][ T9500] bcachefs (loop6): finished waiting for writes to stop
[  216.137200][ T9500] bcachefs (loop6): flushing journal and stopping allocators, journal seq 2
[  216.154937][ T5948] Bluetooth: hci2: unexpected event 0x2f length: 1017 > 260
[  216.174052][ T9500] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 3
[  216.182848][ T9500] bcachefs (loop6): clean shutdown complete, journal seq 4
[  216.186435][ T9500] bcachefs (loop6): marking filesystem clean
[  216.222946][ T9500] bcachefs (loop6): shutdown complete
[  216.633453][T10211] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  217.085121][T10248] wireguard: wg1: Could not create IPv4 socket
[  217.143982][T10254] Dead loop on virtual device ip6_vti0, fix it urgently!
[  217.299527][T10262] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  217.628786][ T6015] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  217.778401][ T6015] usb 7-1: Using ep0 maxpacket: 32
[  217.783301][ T6015] usb 7-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config
[  217.791688][ T6015] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  217.802098][ T6015] usb 7-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0
[  217.806383][ T6015] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.810134][ T6015] usb 7-1: Product: syz
[  217.811746][ T6015] usb 7-1: Manufacturer: syz
[  217.813663][ T6015] usb 7-1: SerialNumber: syz
[  217.824701][ T6015] usb 7-1: config 0 descriptor??
[  217.832479][ T6015] qmi_wwan 7-1:0.0: bogus CDC Union: master=2, slave=183
[  217.838422][ T6015] qmi_wwan 7-1:0.0: probe with driver qmi_wwan failed with error -22
[  218.044544][ T6009] usb 7-1: USB disconnect, device number 4
[  218.270551][T10311] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1586'.
[  218.274066][T10311] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1586'.
[  218.733446][T10331] vxcan1 speed is unknown, defaulting to 1000
[  219.658983][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  220.046822][T10372] vlan2: entered promiscuous mode
[  220.051401][T10372] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  220.648524][T10392] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  222.353327][T10477] netlink: 'syz.3.1663': attribute type 1 has an invalid length.
[  222.400085][T10477] bond1: (slave bridge1): making interface the new active one
[  222.404881][T10477] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  224.630822][T10496] Dead loop on virtual device ipvlan1, fix it urgently!
[  224.751402][T10501] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1671'.
[  225.433310][T10508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1674'.
[  226.344753][T10524] MPI: mpi too large (16392 bits)
[  226.603413][ T5296] printk: udevd: 6 output lines suppressed due to ratelimiting
[  226.613716][T10533] vxcan1 speed is unknown, defaulting to 1000
[  228.637781][T10574] team_slave_1: mtu greater than device maximum
[  228.643237][T10574] team0: Device team_slave_1 failed to change mtu
[  229.742108][T10626] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  230.037483][T10644] IPv6: NLM_F_CREATE should be specified when creating new route
[  230.041507][T10644] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  230.043751][T10644] IPv6: NLM_F_CREATE should be set when creating new route
[  230.463035][T10674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1746'.
[  230.485869][T10676] IPVS: Error joining to the multicast group
[  230.743678][T10690] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.1753'.
[  230.747687][T10690] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.1753'.
[  231.586390][T10711] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  231.590378][T10711] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  231.804125][T10719] netlink: 'syz.4.1765': attribute type 21 has an invalid length.
[  231.807273][T10719] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1765'.
[  233.015967][T10763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1785'.
[  233.567216][T10776] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  233.892006][T10800] overlayfs: failed to clone upperpath
[  234.089236][T10811] sctp: [Deprecated]: syz.4.1808 (pid 10811) Use of int in max_burst socket option deprecated.
[  234.089236][T10811] Use struct sctp_assoc_value instead
[  234.196194][T10819] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1812'.
[  234.877131][   T33] audit: type=1326 audit(1755392859.051:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10869 comm="syz.4.1832" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2338ebe9 code=0x7ffc0000
[  234.889139][   T33] audit: type=1326 audit(1755392859.051:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10869 comm="syz.4.1832" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2338ebe9 code=0x7ffc0000
[  234.898126][   T33] audit: type=1326 audit(1755392859.071:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10869 comm="syz.4.1832" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fba23390b07 code=0x7ffc0000
[  234.907788][   T33] audit: type=1326 audit(1755392859.071:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10869 comm="syz.4.1832" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2338ebe9 code=0x7ffc0000
[  234.916956][   T33] audit: type=1326 audit(1755392859.071:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10869 comm="syz.4.1832" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2338ebe9 code=0x7ffc0000
[  234.926193][   T33] audit: type=1326 audit(1755392859.081:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10869 comm="syz.4.1832" exe="/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fba2338ebe9 code=0x7ffc0000
[  234.935408][   T33] audit: type=1326 audit(1755392859.081:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10869 comm="syz.4.1832" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2338ebe9 code=0x7ffc0000
[  234.951552][   T33] audit: type=1326 audit(1755392859.081:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10869 comm="syz.4.1832" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2338ebe9 code=0x7ffc0000
[  234.965687][T10872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1833'.
[  235.275667][T10895] IPv6: addrconf: prefix option has invalid lifetime
[  235.278718][T10895] IPv6: addrconf: prefix option has invalid lifetime
[  235.379454][T10903] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1847'.
[  235.383970][T10903] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1847'.
[  235.390452][T10903] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1847'.
[  235.557599][   T33] audit: type=1326 audit(1755392859.731:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10914 comm="syz.3.1853" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  235.580380][   T33] audit: type=1326 audit(1755392859.731:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10914 comm="syz.3.1853" exe="/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  236.226050][T10938] overlayfs: failed to clone upperpath
[  236.379412][T10952] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  236.384007][T10952] Error validating options; rc = [-22]
[  237.701516][T11031] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1902'.
[  238.586515][T11060] netlink: 'syz.4.1915': attribute type 24 has an invalid length.
[  238.701812][T11065] batman_adv: batadv0: Adding interface: dummy0
[  238.704244][T11065] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.716608][T11065] batman_adv: batadv0: Interface activated: dummy0
[  238.759291][T11068] ..: renamed from ipvlan0
[  241.899475][T11205] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1982'.
[  243.213902][T11230] overlayfs: failed to clone upperpath
[  243.470123][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  243.470138][   T33] audit: type=1326 audit(1755392867.651:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.3.1999" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  243.484451][   T33] audit: type=1326 audit(1755392867.661:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.3.1999" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  243.567659][T11250] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  243.680513][   T33] audit: type=1326 audit(1755392867.861:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11259 comm="syz.3.2007" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f686798ebe9 code=0x0
[  243.866605][T11281] 9pnet_fd: Insufficient options for proto=fd
[  245.149291][T11318] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2033'.
[  245.506125][T11344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2045'.
[  245.624963][T11354] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[  245.749807][T11360] netlink: 'syz.6.2053': attribute type 1 has an invalid length.
[  245.909693][ T5948] Bluetooth: hci0: Malformed LE Event: 0x0d
[  246.006851][T11370] netlink: 'syz.4.2058': attribute type 40 has an invalid length.
[  246.571175][T11390] netlink: 'syz.6.2068': attribute type 1 has an invalid length.
[  246.573661][T11390] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2068'.
[  246.697608][T11398] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  246.862842][T11412] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  247.490684][T11432] overlayfs: failed to clone upperpath
[  249.204991][T11496] veth1_macvtap: left promiscuous mode
[  249.207108][T11496] macsec0: entered promiscuous mode
[  249.542952][T11510] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  249.822305][T11523] 9pnet: p9_errstr2errno: server reported unknown error 184467
[  250.544510][T11541] smc: removing ib device syz2
[  251.354888][   T33] audit: type=1800 audit(1755392875.531:359): pid=11554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2143" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  251.406173][T11557] lo speed is unknown, defaulting to 1000
[  251.408397][T11557] lo speed is unknown, defaulting to 1000
[  251.411019][T11557] lo speed is unknown, defaulting to 1000
[  251.416884][T11557] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  251.433870][T11557] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  251.458089][T11557] lo speed is unknown, defaulting to 1000
[  251.461849][T11557] lo speed is unknown, defaulting to 1000
[  251.464637][T11557] lo speed is unknown, defaulting to 1000
[  252.182608][   T33] audit: type=1800 audit(1755392876.361:360): pid=11602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.6.2164" name="/" dev="tmpfs" ino=1217 res=0 errno=0
[  252.650124][T11621] netlink: 'syz.6.2173': attribute type 10 has an invalid length.
[  252.653274][T11621] batman_adv: batadv0: Interface deactivated: dummy0
[  252.665317][T11621] batman_adv: batadv0: Removing interface: dummy0
[  252.671470][T11621] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  254.593920][T11683] bpf: Bad value for 'uid'
[  255.503122][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  255.505649][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  256.354059][T11709] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2212'.
[  256.358018][T11709] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2212'.
[  256.527387][T11723] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  258.430905][T11786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2250'.
[  258.545745][T11797] 9pnet_fd: p9_fd_create_unix (11797): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  259.354274][T11817] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma?
[  260.299649][T11846] ptrace attach of "/syz-executor exec"[9500] was attempted by "ߖ鷴)Qo  \x0dvҢ9T{-92\x0ap_3j nޭOa)bkߟ.\x0aK~򜛱تKOkF^3B3){\x5crHBd,X\x09\x0b3c\x22&W\x22\x1bTL'\x09!_Nhٹ=n>a (G6茷A+&ϋЈUߍa{@{\x0b[ɸYacAzÂGl:d<]u~v!9,?Ŵ>\x22ar\x1blKڬY*VS8ȁ6]kK.=`#\x07x!gMDR*OLK\x0c}oKbA>{@aMdnQj̖5)];r,L\x0c=\x0dWAE n`>Ɵs-3`yfeH^/$L1&NP\x0d1D<\x07cPd(EdtaE!ҭ \x09@ݞHG~H<D$\x0crX`-ͪ/IFEtI;{*W\x0c\x0a:ÈV'\x0c8sejke~ɫRLB*\x0b-r@\x07VMšv%OymWGܕ|ʤ=tU?hK0uӣٜ0G 'b,\x22ߊ;2Ո'G/޳7Wd\x5c!w%xg\x22x[4!NlQ(\x0a@[+ ؐǬ[[zN sB&X>%3{- ^Qǚ4e3\x0b>sF̗H]+\x0
[  261.905952][T11858] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2280'.
[  261.910107][T11854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2278'.
[  261.939877][    C0] vkms_vblank_simulate: vblank timer overrun
[  261.966725][T11858] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2280'.
[  262.046652][   T33] audit: type=1326 audit(1755392886.221:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11863 comm="syz.3.2283" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  262.055569][   T33] audit: type=1326 audit(1755392886.221:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11863 comm="syz.3.2283" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  262.067421][   T33] audit: type=1326 audit(1755392886.241:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11863 comm="syz.3.2283" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  262.079746][   T33] audit: type=1326 audit(1755392886.241:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11863 comm="syz.3.2283" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  262.090855][   T33] audit: type=1326 audit(1755392886.241:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11863 comm="syz.3.2283" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  262.098107][   T33] audit: type=1326 audit(1755392886.241:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11863 comm="syz.3.2283" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  262.106712][   T33] audit: type=1326 audit(1755392886.251:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11863 comm="syz.3.2283" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  262.114212][   T33] audit: type=1326 audit(1755392886.251:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11863 comm="syz.3.2283" exe="/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  262.123302][   T33] audit: type=1326 audit(1755392886.251:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11863 comm="syz.3.2283" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  262.129996][   T33] audit: type=1326 audit(1755392886.251:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11863 comm="syz.3.2283" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686798ebe9 code=0x7ffc0000
[  262.238138][T11884] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2293'.
[  262.244227][T11884] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2293'.
[  262.431354][T11898] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2300'.
[  262.484561][T11902] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2302'.
[  262.710945][T11929] 9pnet_fd: Insufficient options for proto=fd
[  264.090818][T11967] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2328'.
[  265.677245][T11988] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2336'.
[  266.776991][T12021] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2351'.
[  268.150391][T12051] __nla_validate_parse: 1 callbacks suppressed
[  268.150401][T12051] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2364'.
[  268.272603][T12055] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  268.522739][ T5948] Bluetooth: hci2: unexpected event for opcode 0x0c25
[  269.074430][T12093] nftables ruleset with unbound chain
[  269.609765][T12107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2388'.
[  269.613098][T12107] netlink: 'syz.4.2388': attribute type 15 has an invalid length.
[  269.617750][T12107] netlink: 'syz.4.2388': attribute type 18 has an invalid length.
[  269.631488][T12107] vxlan0: entered promiscuous mode
[  269.639177][ T5966] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  269.642577][ T5966] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  269.645674][ T5966] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  269.649785][ T5966] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  269.819611][T12118] overlayfs: failed to clone upperpath
[  269.854685][T12120] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2395'.
[  270.339198][T12154] : entered promiscuous mode
[  270.377840][T12158] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  270.543245][T12171] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2419'.
[  270.546465][T12171] 0: renamed from hsr0 (while UP)
[  270.554299][T12171] 0: entered allmulticast mode
[  270.555846][T12171] hsr_slave_0: entered allmulticast mode
[  270.557566][T12171] hsr_slave_1: entered allmulticast mode
[  270.560303][T12171] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  270.611653][T12178] netlink: 'syz.4.2423': attribute type 3 has an invalid length.
[  270.614350][T12178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2423'.
[  271.202412][T12184] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2425'.
[  272.042976][T12230] netlink: 'syz.3.2447': attribute type 21 has an invalid length.
[  272.045365][T12230] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2447'.
[  272.051240][T12230] netlink: 'syz.3.2447': attribute type 4 has an invalid length.
[  272.055387][T12230] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2447'.
[  272.443915][T12251] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2456'.
[  272.740259][T12271] fuse: Unknown parameter 'fd0x0000000000000004'
[  273.413226][T12291] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  273.574113][T12307] netlink: 'syz.4.2480': attribute type 34 has an invalid length.
[  273.629478][   T51] kernel write not supported for file bpf-prog (pid: 51 comm: kworker/1:1)
[  274.585171][T12329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2491'.
[  275.213632][T12360] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2505'.
[  275.903322][T12408] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:6401:0100
[  275.910104][T12408] tipc: Enabled bearer <udp:syz2>, priority 10
[  276.364895][T12429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2537'.
[  276.384805][T12429] vlan3: entered allmulticast mode
[  276.387014][T12429] bridge0: entered allmulticast mode
[  276.391442][T12429] bridge4: port 1(vlan3) entered blocking state
[  276.394122][T12429] bridge4: port 1(vlan3) entered disabled state
[  276.397365][T12429] vlan3: entered promiscuous mode
[  276.399171][T12429] bridge0: entered promiscuous mode
[  277.005291][T12458] netlink: 208 bytes leftover after parsing attributes in process `syz.6.2552'.
[  277.020168][   T51] tipc: Node number set to 16777216
[  277.846656][   T33] audit: type=1326 audit(1755392902.021:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.6.2566" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac4d8ebe9 code=0x7ffc0000
[  277.876648][   T33] audit: type=1326 audit(1755392902.021:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.6.2566" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac4d8ebe9 code=0x7ffc0000
[  277.898420][   T33] audit: type=1326 audit(1755392902.031:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.6.2566" exe="/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fcac4d8ebe9 code=0x7ffc0000
[  277.905407][   T33] audit: type=1326 audit(1755392902.031:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.6.2566" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac4d8ebe9 code=0x7ffc0000
[  277.921446][T12494] team0: Device ip6gretap1 is up. Set it down before adding it as a team port
[  277.924907][   T33] audit: type=1326 audit(1755392902.031:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.6.2566" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac4d8ebe9 code=0x7ffc0000
[  278.208729][T12496] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2568'.
[  279.107652][T12526] Device name cannot be null; rc = [-22]
[  279.832993][T12552] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2591'.
[  279.882626][T12557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2594'.
[  279.889563][T12557] netlink: 'syz.3.2594': attribute type 14 has an invalid length.
[  279.899296][   T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  279.899338][T12557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2594'.
[  279.905501][T12557] netlink: 'syz.3.2594': attribute type 14 has an invalid length.
[  279.906126][   T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  279.918083][   T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  279.922150][   T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  280.283783][T12576] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2602'.
[  280.300986][T12576] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2602'.
[  280.304019][T12576] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2602'.
[  280.873560][T12602] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2614'.
[  280.935677][T12604] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2615'.
[  282.026217][T12634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2628'.
[  282.037123][T12634] erspan0: entered promiscuous mode
[  282.042783][T12634] macvtap1: entered promiscuous mode
[  282.045216][T12634] macvtap1: entered allmulticast mode
[  282.047741][T12634] erspan0: entered allmulticast mode
[  282.065920][T12634] erspan0: left allmulticast mode
[  282.069094][T12634] erspan0: left promiscuous mode
[  282.224554][T12649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2635'.
[  282.503353][T12672] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  282.506636][T12672] batman_adv: batadv0: Removing interface: batadv_slave_0
[  282.516953][T12672] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  282.520142][T12672] batman_adv: batadv0: Removing interface: batadv_slave_1
[  283.801352][T12743] netlink: 'syz.3.2676': attribute type 9 has an invalid length.
[  283.806365][T12743] netlink: 'syz.3.2676': attribute type 6 has an invalid length.
[  284.805682][T12807] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  284.877182][T12811] UBIFS error (pid: 12811): cannot open "c:::", error -22
[  285.556191][T12834] batadv_slave_0: entered allmulticast mode
[  285.566748][T12833] batadv_slave_0: left allmulticast mode
[  286.528696][T12877] __nla_validate_parse: 4 callbacks suppressed
[  286.528737][T12877] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2734'.
[  286.853241][T12891] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2740'.
[  286.856684][T12891] netlink: 35 bytes leftover after parsing attributes in process `syz.4.2740'.
[  286.900135][T12893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2741'.
[  289.806884][T13015] netlink: 14528 bytes leftover after parsing attributes in process `syz.6.2791'.
[  290.860653][ T5948] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  290.865814][ T5948] Bluetooth: hci0: Injecting HCI hardware error event
[  290.869833][ T5948] Bluetooth: hci0: hardware error 0x00
[  290.919322][T13051] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2808'.
[  290.961740][T13054] netlink: 'syz.6.2809': attribute type 10 has an invalid length.
[  290.965020][T13054] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2809'.
[  290.983952][T13054] team0: Port device geneve0 added
[  291.275586][T13070] netlink: 'syz.6.2817': attribute type 5 has an invalid length.
[  292.082848][T13117] tipc: Started in network mode
[  292.085253][T13117] tipc: Node identity 2, cluster identity 4711
[  292.087464][T13117] tipc: Node number set to 2
[  292.091147][T13117] tipc: Cannot configure node identity twice
[  292.939854][ T5948] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  292.993368][T13164] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2861'.
[  293.591563][T13190] No control pipe specified
[  293.745392][T13203] 9pnet: Unknown protocol version 9p20\++}
[  295.316254][T13246] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2897'.
[  297.141602][T13317] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2928'.
[  298.098947][T13350] netlink: 'syz.4.2943': attribute type 1 has an invalid length.
[  298.446107][T13379] netlink: 'syz.4.2956': attribute type 1 has an invalid length.
[  298.881306][T13411] dummy0: entered promiscuous mode
[  298.883099][T13411] dummy0: entered allmulticast mode
[  299.246889][T13424] netlink: 'syz.6.2975': attribute type 1 has an invalid length.
[  299.601354][T13449] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.071799][T13485] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3006'.
[  300.501373][T13521] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  300.681047][T13525] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3025'.
[  302.131576][T13574] netlink: 'syz.6.3046': attribute type 1 has an invalid length.
[  302.211713][T13578] tipc: Failed to remove unknown binding: 66,1,1/0:3753770663/3753770665
[  302.315149][T13584] lo speed is unknown, defaulting to 1000
[  302.344847][T13591] Dead loop on virtual device ipvlan1, fix it urgently!
[  302.495343][T13610] vxcan1: tx address claim with dlc 0
[  302.610913][T13618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3067'.
[  302.697273][T13622] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  303.456750][T13644] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3079'.
[  303.462086][T13644] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3079'.
[  303.465692][T13644] netlink: 'syz.6.3079': attribute type 13 has an invalid length.
[  303.470489][T13644] netlink: 'syz.6.3079': attribute type 11 has an invalid length.
[  304.316750][T13663] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3087'.
[  304.322222][T13663] bridge_slave_1: left allmulticast mode
[  304.324704][T13663] bridge_slave_1: left promiscuous mode
[  304.327327][T13663] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.336421][T13663] bridge_slave_0: left allmulticast mode
[  304.338690][T13663] bridge_slave_0: left promiscuous mode
[  304.340882][T13663] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.820943][T13753] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3130'.
[  306.549777][T13798] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3152'.
[  306.553504][T13798] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3152'.
[  306.582356][T13800] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.3153'.
[  306.689970][T13806] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  306.692397][T13806] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  306.694894][T13806] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  306.804850][   T33] audit: type=1800 audit(1755392930.981:376): pid=13816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3161" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=30264 res=0 errno=0
[  307.097063][T13834] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  307.101171][T13834] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  308.676443][T13882] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  309.324218][T13921] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3208'.
[  311.127684][T13957] netlink: 'syz.6.3223': attribute type 3 has an invalid length.
[  311.165113][T13961] netlink: 'syz.6.3225': attribute type 4 has an invalid length.
[  311.175118][T13961] netlink: 'syz.6.3225': attribute type 4 has an invalid length.
[  311.186096][T13963] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8)
[  312.504060][T14029] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3256'.
[  312.957273][T14038] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3260'.
[  314.491347][T14075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3276'.
[  314.494951][T14075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3276'.
[  316.377206][T14162] lo speed is unknown, defaulting to 1000
[  316.443593][T14167] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  316.540065][T14172] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3320'.
[  316.942552][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  316.944614][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  317.456193][T14209] sctp: [Deprecated]: syz.6.3337 (pid 14209) Use of int in max_burst socket option deprecated.
[  317.456193][T14209] Use struct sctp_assoc_value instead
[  317.594973][T14217] netlink: 64985 bytes leftover after parsing attributes in process `syz.6.3341'.
[  317.751912][ T5849] libceph: connect (1)[c::]:6789 error -101
[  317.754161][ T5849] libceph: mon0 (1)[c::]:6789 connect error
[  317.791843][T14235] ==================================================================
[  317.795070][T14235] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  317.798104][T14235] Read of size 4 at addr ffff8880344ac0c4 by task syz.3.3349/14235
[  317.802240][T14235] 
[  317.803546][T14235] CPU: 0 UID: 0 PID: 14235 Comm: syz.3.3349 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  317.803566][T14235] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  317.803575][T14235] Call Trace:
[  317.803582][T14235]  <TASK>
[  317.803590][T14235]  dump_stack_lvl+0x189/0x250
[  317.803611][T14235]  ? __kasan_check_byte+0x12/0x40
[  317.803632][T14235]  ? __pfx_dump_stack_lvl+0x10/0x10
[  317.803649][T14235]  ? lock_release+0x4b/0x3e0
[  317.803671][T14235]  ? __virt_addr_valid+0x4a5/0x5c0
[  317.803689][T14235]  print_report+0xca/0x240
[  317.803702][T14235]  ? xfrm_alloc_spi+0x570/0xf30
[  317.803716][T14235]  kasan_report+0x118/0x150
[  317.803736][T14235]  ? xfrm_alloc_spi+0x570/0xf30
[  317.803752][T14235]  xfrm_alloc_spi+0x570/0xf30
[  317.803765][T14235]  ? xfrm_alloc_spi+0x2a0/0xf30
[  317.803784][T14235]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  317.803797][T14235]  ? xfrm_find_acq+0x87/0xa0
[  317.803813][T14235]  xfrm_alloc_userspi+0x70b/0xc90
[  317.803833][T14235]  ? apparmor_capable+0x137/0x1b0
[  317.803848][T14235]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  317.803865][T14235]  ? __nla_parse+0x40/0x60
[  317.803886][T14235]  xfrm_user_rcv_msg+0x7a3/0xab0
[  317.803904][T14235]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  317.803930][T14235]  ? __pfx___mutex_trylock_common+0x10/0x10
[  317.803946][T14235]  ? rcu_is_watching+0x15/0xb0
[  317.803960][T14235]  ? trace_contention_end+0x39/0x120
[  317.803974][T14235]  ? __mutex_lock+0x335/0x1360
[  317.803995][T14235]  netlink_rcv_skb+0x208/0x470
[  317.804023][T14235]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  317.804039][T14235]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  317.804064][T14235]  ? netlink_deliver_tap+0x2e/0x1b0
[  317.804083][T14235]  ? netlink_deliver_tap+0x2e/0x1b0
[  317.804103][T14235]  xfrm_netlink_rcv+0x79/0x90
[  317.804119][T14235]  netlink_unicast+0x82f/0x9e0
[  317.804139][T14235]  ? __pfx_netlink_unicast+0x10/0x10
[  317.804156][T14235]  ? netlink_sendmsg+0x642/0xb30
[  317.804174][T14235]  ? skb_put+0x11b/0x210
[  317.804187][T14235]  netlink_sendmsg+0x805/0xb30
[  317.804209][T14235]  ? __pfx_netlink_sendmsg+0x10/0x10
[  317.804229][T14235]  ? aa_sock_msg_perm+0xf1/0x1d0
[  317.804250][T14235]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  317.804265][T14235]  ? __pfx_netlink_sendmsg+0x10/0x10
[  317.804321][T14235]  __sock_sendmsg+0x21c/0x270
[  317.804340][T14235]  ____sys_sendmsg+0x505/0x830
[  317.804356][T14235]  ? __pfx_____sys_sendmsg+0x10/0x10
[  317.804373][T14235]  ? import_iovec+0x74/0xa0
[  317.804393][T14235]  ___sys_sendmsg+0x21f/0x2a0
[  317.804408][T14235]  ? __pfx____sys_sendmsg+0x10/0x10
[  317.804437][T14235]  ? __fget_files+0x2a/0x420
[  317.804449][T14235]  ? __fget_files+0x3a0/0x420
[  317.804464][T14235]  __x64_sys_sendmsg+0x19b/0x260
[  317.804479][T14235]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  317.804496][T14235]  ? rcu_is_watching+0x15/0xb0
[  317.804512][T14235]  ? do_syscall_64+0xbe/0x3b0
[  317.804532][T14235]  do_syscall_64+0xfa/0x3b0
[  317.804550][T14235]  ? lockdep_hardirqs_on+0x9c/0x150
[  317.804568][T14235]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.804582][T14235]  ? exc_page_fault+0x9f/0xf0
[  317.804599][T14235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.804613][T14235] RIP: 0033:0x7f686798ebe9
[  317.804626][T14235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  317.804639][T14235] RSP: 002b:00007f6868891038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  317.804654][T14235] RAX: ffffffffffffffda RBX: 00007f6867bb5fa0 RCX: 00007f686798ebe9
[  317.804665][T14235] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003
[  317.804674][T14235] RBP: 00007f6867a11e19 R08: 0000000000000000 R09: 0000000000000000
[  317.804683][T14235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  317.804692][T14235] R13: 00007f6867bb6038 R14: 00007f6867bb5fa0 R15: 00007ffe14440248
[  317.804708][T14235]  </TASK>
[  317.804713][T14235] 
[  317.951074][T14235] Allocated by task 9971:
[  317.952817][T14235]  kasan_save_track+0x3e/0x80
[  317.954776][T14235]  __kasan_slab_alloc+0x6c/0x80
[  317.956713][T14235]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  317.958878][T14235]  xfrm_state_alloc+0x24/0x2f0
[  317.960753][T14235]  __find_acq_core+0x8a7/0x1c00
[  317.962642][T14235]  xfrm_find_acq+0x78/0xa0
[  317.964440][T14235]  xfrm_alloc_userspi+0x6b3/0xc90
[  317.966471][T14235]  xfrm_user_rcv_msg+0x7a3/0xab0
[  317.968429][T14235]  netlink_rcv_skb+0x208/0x470
[  317.970353][T14235]  xfrm_netlink_rcv+0x79/0x90
[  317.972241][T14235]  netlink_unicast+0x82f/0x9e0
[  317.974173][T14235]  netlink_sendmsg+0x805/0xb30
[  317.976003][T14235]  __sock_sendmsg+0x21c/0x270
[  317.977756][T14235]  ____sys_sendmsg+0x505/0x830
[  317.979677][T14235]  ___sys_sendmsg+0x21f/0x2a0
[  317.981432][T14235]  __x64_sys_sendmsg+0x19b/0x260
[  317.983304][T14235]  do_syscall_64+0xfa/0x3b0
[  317.985052][T14235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.987327][T14235] 
[  317.988279][T14235] Freed by task 5994:
[  317.989818][T14235]  kasan_save_track+0x3e/0x80
[  317.991635][T14235]  kasan_save_free_info+0x46/0x50
[  317.993655][T14235]  __kasan_slab_free+0x5b/0x80
[  317.995586][T14235]  kmem_cache_free+0x18f/0x400
[  317.997474][T14235]  xfrm_state_gc_task+0x52d/0x6b0
[  317.999500][T14235]  process_scheduled_works+0xae1/0x17b0
[  318.001683][T14235]  worker_thread+0x8a0/0xda0
[  318.003496][T14235]  kthread+0x711/0x8a0
[  318.005073][T14235]  ret_from_fork+0x3fc/0x770
[  318.006893][T14235]  ret_from_fork_asm+0x1a/0x30
[  318.008829][T14235] 
[  318.009780][T14235] The buggy address belongs to the object at ffff8880344ac000
[  318.009780][T14235]  which belongs to the cache xfrm_state of size 928
[  318.015148][T14235] The buggy address is located 196 bytes inside of
[  318.015148][T14235]  freed 928-byte region [ffff8880344ac000, ffff8880344ac3a0)
[  318.020459][T14235] 
[  318.021410][T14235] The buggy address belongs to the physical page:
[  318.023965][T14235] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880344ad200 pfn:0x344ac
[  318.027763][T14235] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  318.030930][T14235] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  318.033762][T14235] page_type: f5(slab)
[  318.035290][T14235] raw: 00fff00000000040 ffff888104bc0c80 dead000000000122 0000000000000000
[  318.038594][T14235] raw: ffff8880344ad200 00000000800e0009 00000000f5000000 0000000000000000
[  318.041942][T14235] head: 00fff00000000040 ffff888104bc0c80 dead000000000122 0000000000000000
[  318.045277][T14235] head: ffff8880344ad200 00000000800e0009 00000000f5000000 0000000000000000
[  318.048604][T14235] head: 00fff00000000002 ffffea0000d12b01 00000000ffffffff 00000000ffffffff
[  318.051827][T14235] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  318.055096][T14235] page dumped because: kasan: bad access detected
[  318.057460][T14235] page_owner tracks the page as allocated
[  318.059558][T14235] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8733, tgid 8732 (syz.5.972), ts 170627741171, free_ts 170613083467
[  318.066560][T14235]  post_alloc_hook+0x240/0x2a0
[  318.068432][T14235]  get_page_from_freelist+0x21e4/0x22c0
[  318.070572][T14235]  __alloc_frozen_pages_noprof+0x181/0x370
[  318.072771][T14235]  alloc_pages_mpol+0x232/0x4a0
[  318.074655][T14235]  allocate_slab+0x8a/0x370
[  318.076396][T14235]  ___slab_alloc+0xbeb/0x1410
[  318.078179][T14235]  kmem_cache_alloc_noprof+0x283/0x3c0
[  318.080209][T14235]  xfrm_state_alloc+0x24/0x2f0
[  318.082028][T14235]  xfrm_add_sa+0x17d1/0x4070
[  318.083753][T14235]  xfrm_user_rcv_msg+0x7a3/0xab0
[  318.085614][T14235]  netlink_rcv_skb+0x208/0x470
[  318.087459][T14235]  xfrm_netlink_rcv+0x79/0x90
[  318.089350][T14235]  netlink_unicast+0x82f/0x9e0
[  318.091224][T14235]  netlink_sendmsg+0x805/0xb30
[  318.093054][T14235]  __sock_sendmsg+0x21c/0x270
[  318.094931][T14235]  ____sys_sendmsg+0x505/0x830
[  318.096781][T14235] page last free pid 5296 tgid 5296 stack trace:
[  318.099196][T14235]  __free_frozen_pages+0xbc4/0xd30
[  318.101173][T14235]  __slab_free+0x303/0x3c0
[  318.102922][T14235]  qlist_free_all+0x97/0x140
[  318.104774][T14235]  kasan_quarantine_reduce+0x148/0x160
[  318.106932][T14235]  __kasan_slab_alloc+0x22/0x80
[  318.108785][T14235]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  318.110967][T14235]  getname_flags+0xb8/0x540
[  318.112806][T14235]  do_sys_openat2+0xbc/0x1c0
[  318.114689][T14235]  __x64_sys_openat+0x138/0x170
[  318.116654][T14235]  do_syscall_64+0xfa/0x3b0
[  318.118496][T14235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.120863][T14235] 
[  318.121868][T14235] Memory state around the buggy address:
[  318.124108][T14235]  ffff8880344abf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  318.127280][T14235]  ffff8880344ac000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  318.130463][T14235] >ffff8880344ac080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  318.133643][T14235]                                            ^
[  318.136087][T14235]  ffff8880344ac100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  318.139275][T14235]  ffff8880344ac180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  318.142392][T14235] ==================================================================
[  318.145701][    C0] vkms_vblank_simulate: vblank timer overrun
[  318.148142][T14235] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  318.151015][T14235] CPU: 0 UID: 0 PID: 14235 Comm: syz.3.3349 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  318.155935][T14235] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  318.159743][T14235] Call Trace:
[  318.161049][T14235]  <TASK>
[  318.162258][T14235]  dump_stack_lvl+0x99/0x250
[  318.164135][T14235]  ? __asan_memcpy+0x40/0x70
[  318.166003][T14235]  ? __pfx_dump_stack_lvl+0x10/0x10
[  318.168099][T14235]  ? __pfx__printk+0x10/0x10
[  318.169922][T14235]  vpanic+0x281/0x750
[  318.171500][T14235]  ? __pfx_vpanic+0x10/0x10
[  318.173264][T14235]  ? irqentry_exit+0x74/0x90
[  318.175024][T14235]  panic+0xb9/0xc0
[  318.176477][T14235]  ? __pfx_panic+0x10/0x10
[  318.178213][T14235]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  318.180468][T14235]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  318.182805][T14235]  ? xfrm_alloc_spi+0x570/0xf30
[  318.184713][T14235]  check_panic_on_warn+0x89/0xb0
[  318.186634][T14235]  ? xfrm_alloc_spi+0x570/0xf30
[  318.188601][T14235]  end_report+0x78/0x160
[  318.190305][T14235]  kasan_report+0x129/0x150
[  318.192043][T14235]  ? xfrm_alloc_spi+0x570/0xf30
[  318.193988][T14235]  xfrm_alloc_spi+0x570/0xf30
[  318.195753][T14235]  ? xfrm_alloc_spi+0x2a0/0xf30
[  318.197600][T14235]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  318.199612][T14235]  ? xfrm_find_acq+0x87/0xa0
[  318.201392][T14235]  xfrm_alloc_userspi+0x70b/0xc90
[  318.203342][T14235]  ? apparmor_capable+0x137/0x1b0
[  318.205361][T14235]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  318.207506][T14235]  ? __nla_parse+0x40/0x60
[  318.209196][T14235]  xfrm_user_rcv_msg+0x7a3/0xab0
[  318.211068][T14235]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  318.213120][T14235]  ? __pfx___mutex_trylock_common+0x10/0x10
[  318.215389][T14235]  ? rcu_is_watching+0x15/0xb0
[  318.217218][T14235]  ? trace_contention_end+0x39/0x120
[  318.219300][T14235]  ? __mutex_lock+0x335/0x1360
[  318.221177][T14235]  netlink_rcv_skb+0x208/0x470
[  318.223000][T14235]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  318.225042][T14235]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  318.227116][T14235]  ? netlink_deliver_tap+0x2e/0x1b0
[  318.229198][T14235]  ? netlink_deliver_tap+0x2e/0x1b0
[  318.231164][T14235]  xfrm_netlink_rcv+0x79/0x90
[  318.233009][T14235]  netlink_unicast+0x82f/0x9e0
[  318.234861][T14235]  ? __pfx_netlink_unicast+0x10/0x10
[  318.236981][T14235]  ? netlink_sendmsg+0x642/0xb30
[  318.238957][T14235]  ? skb_put+0x11b/0x210
[  318.240636][T14235]  netlink_sendmsg+0x805/0xb30
[  318.242482][T14235]  ? __pfx_netlink_sendmsg+0x10/0x10
[  318.244606][T14235]  ? aa_sock_msg_perm+0xf1/0x1d0
[  318.246601][T14235]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  318.248733][T14235]  ? __pfx_netlink_sendmsg+0x10/0x10
[  318.250865][T14235]  __sock_sendmsg+0x21c/0x270
[  318.252773][T14235]  ____sys_sendmsg+0x505/0x830
[  318.254720][T14235]  ? __pfx_____sys_sendmsg+0x10/0x10
[  318.256848][T14235]  ? import_iovec+0x74/0xa0
[  318.258688][T14235]  ___sys_sendmsg+0x21f/0x2a0
[  318.260580][T14235]  ? __pfx____sys_sendmsg+0x10/0x10
[  318.262672][T14235]  ? __fget_files+0x2a/0x420
[  318.264502][T14235]  ? __fget_files+0x3a0/0x420
[  318.266297][T14235]  __x64_sys_sendmsg+0x19b/0x260
[  318.268302][T14235]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  318.270498][T14235]  ? rcu_is_watching+0x15/0xb0
[  318.272434][T14235]  ? do_syscall_64+0xbe/0x3b0
[  318.274388][T14235]  do_syscall_64+0xfa/0x3b0
[  318.276244][T14235]  ? lockdep_hardirqs_on+0x9c/0x150
[  318.278345][T14235]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.280601][T14235]  ? exc_page_fault+0x9f/0xf0
[  318.282510][T14235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.284890][T14235] RIP: 0033:0x7f686798ebe9
[  318.286728][T14235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  318.294191][T14235] RSP: 002b:00007f6868891038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  318.297472][T14235] RAX: ffffffffffffffda RBX: 00007f6867bb5fa0 RCX: 00007f686798ebe9
[  318.300515][T14235] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003
[  318.303618][T14235] RBP: 00007f6867a11e19 R08: 0000000000000000 R09: 0000000000000000
[  318.306732][T14235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  318.309849][T14235] R13: 00007f6867bb6038 R14: 00007f6867bb5fa0 R15: 00007ffe14440248
[  318.313011][T14235]  </TASK>
[  318.315014][T14235] Kernel Offset: disabled
[  318.316777][T14235] Rebooting in 86400 seconds..

VM DIAGNOSIS:
01:09:02  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bdc60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000001136 RDI=0000000000001137 RBP=ffffffff99dee630 RSP=ffffc900079f6990
R8 =ffff888021780237 R9 =1ffff110042f0046 R10=dffffc0000000000 R11=ffffffff854f0a60
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f0ad7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f68688916c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6868890fc8 CR3=000000003b8f0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f6867b87498 00007f6867b87470 XMM03=00007f6867b874a8 00007f6867b874a0
XMM04=00007f68686ed100 00007f6867b87460 XMM05=00007f6867b87478 00007f6867b874c0
XMM06=00007f6867b874b8 00007f6867b874b0 XMM07=00007f6867b874a8 00007f6867b874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f6867a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=82cc03dac2535d00 RBX=ffffffff81968308 RCX=82cc03dac2535d00 RDX=0000000000000001
RSI=ffffffff8d9b6dc6 RDI=ffffffff8be33400 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37e30 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b7943f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000556f34931000 CR3=000000010e352000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fba23412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
