last executing test programs:

8m25.610974305s ago: executing program 0 (id=202):
r0 = syz_open_procfs(0x0, &(0x7f0000000640)='coredump_filter\x00')
writev(r0, &(0x7f0000004180)=[{&(0x7f0000000000)='3', 0x1}], 0x1)

8m25.503162199s ago: executing program 0 (id=205):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000040))

8m25.432408526s ago: executing program 0 (id=207):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r0, 0x104, 0x1)
getdents64(r0, 0x0, 0x4f)

8m25.296456578s ago: executing program 0 (id=211):
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020)

8m25.171488416s ago: executing program 0 (id=213):
syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000000100)='./file0\x00', 0x200800, &(0x7f0000000400)={[{@lazytime}, {@uqnoenforce}, {}, {@prjquota}, {@grpquota}, {@allocsize={'allocsize', 0x3d, [0x36, 0x39, 0x6d]}}, {@uqnoenforce}]}, 0x4, 0x9606, &(0x7f0000012cc0)="$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")
r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
ftruncate(r1, 0x2007ffb)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x1000000201005)

8m24.893744984s ago: executing program 0 (id=223):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000400)={[{@force}, {@nodecompose}, {@nobarrier}, {@nls={'nls', 0x3d, 'koi8-u'}}, {@part={'part', 0x3d, 0xff}}, {}, {@nobarrier}, {@nobarrier}]}, 0x3, 0x6b3, &(0x7f0000000780)="$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")
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8f74c177cb5e687b, &(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRES16], 0x0, 0x0, &(0x7f0000000c40))

8m24.726797508s ago: executing program 32 (id=223):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000400)={[{@force}, {@nodecompose}, {@nobarrier}, {@nls={'nls', 0x3d, 'koi8-u'}}, {@part={'part', 0x3d, 0xff}}, {}, {@nobarrier}, {@nobarrier}]}, 0x3, 0x6b3, &(0x7f0000000780)="$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")
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8f74c177cb5e687b, &(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRES16], 0x0, 0x0, &(0x7f0000000c40))

5m35.520899989s ago: executing program 2 (id=1967):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

5m35.37115637s ago: executing program 2 (id=1969):
unshare(0x400)
r0 = socket(0x23, 0x80802, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x3, './file0\x00'}, 0x6e)

5m35.370923997s ago: executing program 2 (id=1970):
socket$nl_sock_diag(0x10, 0x3, 0x4)
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='attr/fscreate\x00')
preadv(r0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)=0xfffffffffffff800, 0x12)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x40880)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000206030000000000000000000000000005000100070000000900020073797a32000000000c00078008001240000000000500050002000000050004000000000013000300686173683a6e65742c696661636500004adb2ef69b71f3c941f718"], 0x58}}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c0d4}, 0xc40)

5m34.414404575s ago: executing program 2 (id=1972):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x28b501e, 0x0)
mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x84000, 0x0)

5m34.414162101s ago: executing program 2 (id=1973):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x30bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1120}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002)

5m34.124096955s ago: executing program 2 (id=1974):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x101101, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080))
mount$9p_fd(0x0, &(0x7f0000000100)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000140), 0x21c804, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37)

5m33.962705079s ago: executing program 33 (id=1974):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x101101, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080))
mount$9p_fd(0x0, &(0x7f0000000100)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000140), 0x21c804, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37)

4m45.726267195s ago: executing program 1 (id=2492):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80)
truncate(&(0x7f0000000000)='./file1\x00', 0x800088c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0x4fed0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000004c0)={0x17c04, 0xffffffffffffffff, 0x81, 0x100000001})

4m45.57395717s ago: executing program 1 (id=2493):
open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0)
mount(&(0x7f0000000200)=@filename='./file0/../file0/../file0\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x1000000, &(0x7f0000000300)='trans=rdma,')

4m45.36571239s ago: executing program 1 (id=2495):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x401, r0, 0x20, 0x100000000000000}, 0x38)

4m45.361638652s ago: executing program 1 (id=2496):
syz_mount_image$minix(&(0x7f0000000a80), &(0x7f0000000080)='./file1\x00', 0x1010088, &(0x7f0000000000)=ANY=[], 0x1, 0x1f1, &(0x7f0000000340)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000380)='./bus\x00', 0x1004080, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

4m45.188726431s ago: executing program 1 (id=2497):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="b40800000000000061106e0000000000060000000000000095000000000000005e04f3e3ed73feee053d9b26fff011213dd8cbde1aaeb4c919cf1d3e2eedc7337b1945b402d7c5d3c447d70ad1fc23928597ea49eba5650db307e7467c159047a6b5b0776ab0b7d1ee8aec32567479a85a9fafd9efe11779ae555d6b9852439860bc43ef813daec229d52b02fe55b20c37360ede966e793fde27adb7c029e3124eaa3b241472b38ccfabe7f8c08aae1285e678652d354f8619680f577b48a8932d93d333ca3acfcdd96830652786bd0eaa"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48)

4m44.997227856s ago: executing program 1 (id=2498):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x0, 0x8, 0x0, 0x5}, 0x10}, 0x94)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x328})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000380)={{&(0x7f0000271000/0x5000)=nil, 0x5000}, 0x1})

4m44.887972887s ago: executing program 34 (id=2498):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x0, 0x8, 0x0, 0x5}, 0x10}, 0x94)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x328})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000380)={{&(0x7f0000271000/0x5000)=nil, 0x5000}, 0x1})

1.769655939s ago: executing program 4 (id=6933):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2f}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)

1.680483468s ago: executing program 4 (id=6935):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x402, 0x0)
ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, 0x0)
mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, 0x11, r0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x1)

1.59786249s ago: executing program 4 (id=6938):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/249, 0xf9}, 0x1}], 0x1, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

900.680717ms ago: executing program 5 (id=6955):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x28108c0, &(0x7f0000006980)=ANY=[@ANYBLOB="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"], 0xfe, 0x61f6, &(0x7f000000cdc0)="$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")
creat(&(0x7f0000000040)='./file1\x00', 0x0)

689.943132ms ago: executing program 4 (id=6956):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0xb)
r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000140)={r0, 0xfff, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5c, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397baba2d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003900000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})

601.394157ms ago: executing program 4 (id=6957):
landlock_create_ruleset(&(0x7f0000000000)={0x1080, 0x1}, 0x18, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_io_uring_setup(0x1244, &(0x7f0000010180)={0x0, 0xd5a5, 0x800, 0x1, 0x98}, &(0x7f0000000900)=<r1=>0x0, &(0x7f0000010200)=<r2=>0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1})
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000300)={0x9, [[0x5, 0x5, 0x51ea9978, 0xe6, 0x3, 0x2, 0xfffff07c, 0x8001], [0x7, 0x18, 0x4, 0xf35, 0xfdff, 0x7, 0xfffff801, 0x7], [0x80000000, 0x7, 0x2, 0x9, 0x7, 0x1, 0x800, 0x5]], '\x00', [{0x8000, 0x3, 0x1, 0x0, 0x1, 0x1}, {0x7, 0x2, 0x1, 0x1, 0x1}, {0xf, 0x8, 0x1, 0x1, 0x1}, {0x0, 0x2, 0x1, 0x1, 0x1}, {0x9, 0x8, 0x1, 0x0, 0x1}, {0x9, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x1, 0x9, 0x1, 0x1, 0x1}, {0x0, 0x5, 0x1, 0x1}, {0x7, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x8f, 0x0, 0x1, 0x1}, {0x3, 0x8, 0x1, 0x1, 0x0, 0x1}, {0xe6, 0x1, 0x0, 0x1}], '\x00', 0x2})
syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0)

601.220907ms ago: executing program 5 (id=6958):
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002680)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
read$sequencer(r0, &(0x7f0000003200)=""/6, 0x6)

541.406809ms ago: executing program 5 (id=6959):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000002180)={@loopback={0xfec0ffff00000000}, @mcast1, @loopback, 0x9, 0x0, 0x0, 0x0, 0x780000000, 0x272001b})

541.134275ms ago: executing program 5 (id=6960):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats})

461.398415ms ago: executing program 5 (id=6961):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50)
r0 = socket$kcm(0xa, 0x5, 0x0)
r1 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64)
setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x10)
r2 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r2})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r2})

410.872676ms ago: executing program 4 (id=6963):
syz_usb_connect(0x3, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000319021508fd070100e56a014203010902240001080a40060904000702a35fc3030905ff03"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0})

410.628531ms ago: executing program 5 (id=6964):
syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000941b6508c410c1ea1d7001020301090212000100000000090401"], 0x0)

410.288062ms ago: executing program 3 (id=6965):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0)
r0 = socket(0x8, 0x3, 0x0)
ioctl$IMGETCOUNT(r0, 0x61d0, 0x0)

269.569265ms ago: executing program 3 (id=6966):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000900)={0x0, 0x2, 0x1, [0xffff, 0x10, 0x1, 0x88, 0x5], [0xffffffffffffff63, 0x8, 0xffffffffffffff4a, 0x80000001, 0x10000, 0x9, 0x2d9, 0xcd9, 0x40008003, 0xc5, 0x8001, 0x9, 0x4, 0x7e, 0x7d, 0x3ae7, 0x8, 0x101, 0x80, 0xffffffffffff8000, 0x3, 0x9, 0x7f, 0x862, 0x1, 0xc, 0x5, 0xff800000000000, 0x400, 0x7fffffff, 0xc333, 0x9, 0x0, 0x8001, 0x1, 0xd5d, 0x8, 0x1, 0x7, 0x5, 0x3, 0x2, 0x9, 0x9, 0x0, 0xffffffff00000001, 0x7fffffffffffffff, 0x2, 0x1000, 0x4cc2, 0xfffffffffffffff7, 0x6, 0x5, 0x3a66, 0x7f, 0x1aac, 0xfff, 0xffffffffffffffff, 0x401, 0x3, 0x706, 0x4002, 0x5b4, 0x4, 0xfffffffffffffffb, 0xb, 0xb88a, 0x6, 0x3, 0x6, 0x2, 0x77, 0x8, 0x346, 0x7, 0xfffffffffffffff9, 0x8, 0xffff800000000000, 0x7, 0x76cf, 0x7, 0xffffffffffffff92, 0x100000001, 0x5, 0xe35, 0x3, 0x9, 0x5, 0x8, 0x6, 0x40000000000000, 0x6, 0x9a, 0x2, 0x401, 0x5, 0x6fc, 0xc90, 0xfff, 0xfffffffffffffeff, 0x200, 0x3, 0x6, 0x6, 0x3, 0x3, 0xc32, 0x100000000, 0x3ff, 0xf5, 0x800, 0x8, 0x8, 0x8001, 0x5, 0x9, 0x1, 0x1ff, 0x2, 0x6b, 0x334]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40408c1)
ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140))

120.181617ms ago: executing program 3 (id=6967):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x15, 0x1, 0x0, 0x21dfdbfe, {0xa, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x0)

59.975726ms ago: executing program 3 (id=6968):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000)

302.73µs ago: executing program 3 (id=6969):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, 0x3e, 0x907, 0xfffffffe, 0xfffffffc, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x10, 0x4, 0x0, 0x1, [@typed={0xc, 0xf, 0x0, 0x0, @u64=0x90}]}, @typed={0x6, 0x20, 0x0, 0x0, @str='\xbd\n'}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c800)

0s ago: executing program 3 (id=6970):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x2, 0x4, 0x0, 0x9, 0xa, 0x0, 0x0, 0x25dfdbfc, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x8, 0x0, 0x9e, 0x2, 0xa0000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @rand_addr=0x64010101}}]}, 0x50}}, 0x0)

kernel console output (not intermixed with test programs):

k '../../loop3' '/dev/disk/by-label/rom\x20637cf1fa.tmp-b7:3' failed: Read-only file system
[  355.501517][T13630] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2980'.
[  355.541915][T13632] netlink: 23 bytes leftover after parsing attributes in process `syz.3.2981'.
[  355.716782][T13640] QAT: failed to copy from user cfg_data.
[  355.934001][T13652] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2991'.
[  356.100389][T13658] loop5: detected capacity change from 0 to 4096
[  356.105084][T13658] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  356.109400][T12485] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  356.121017][ T6517] udevd[6517]: symlink '../../loop5' '/dev/disk/by-label/쨙ಘ긓kaller.tmp-b7:5' failed: Read-only file system
[  356.127232][ T6517] udevd[6517]: symlink '../../loop5' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:5' failed: Read-only file system
[  356.130522][T13658] ntfs3(loop5): ino=1a, mi_enum_attr
[  356.134173][T13658] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  356.138655][T13658] ntfs3(loop5): ino=1a, mi_enum_attr
[  356.141256][T13658] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[  356.151950][ T6517] udevd[6517]: symlink '../../loop5' '/dev/disk/by-label/쨙ಘ긓kaller.tmp-b7:5' failed: Read-only file system
[  356.160370][ T6517] udevd[6517]: symlink '../../loop5' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:5' failed: Read-only file system
[  356.277851][T12485] usb 4-1: Using ep0 maxpacket: 16
[  356.282256][T12485] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  356.286543][T12485] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  356.295465][T12485] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  356.300829][T12485] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.304066][T12485] usb 4-1: Product: syz
[  356.305746][T12485] usb 4-1: Manufacturer: syz
[  356.310478][T12485] usb 4-1: SerialNumber: syz
[  356.315717][T12485] usb 4-1: config 0 descriptor??
[  356.321158][T12485] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  356.325820][T12485] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  356.374288][T13662] loop5: detected capacity change from 0 to 32768
[  356.384747][T13662] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section replicas_v0: invalid device 1 in entry user: 1/113 [0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1 1 2 2 4 5 5 5 5 5 6 8 10 108]
[  356.384747][T13662] replicas_v0 (size 24):
[  356.384747][T13662] btree: 1 [0] journal: 1 [0] user: 113 [4 0 0 0 0 0 0 0 108 1 0 0 6 0 0 0 0 0 0 0 0 0 0 0 10 0 0 0 0 0 0 0 1 0 1 0 5 0 0 0 8 0 0 0 0 0 0 0 1 0 2 0 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 1 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 2 5 0 0 0 0 0 0 0 0 0 0 0 1]
[  356.384747][T13662] 
[  356.405138][T13662] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  356.486893][T13664] loop5: detected capacity change from 0 to 512
[  356.493305][T13664] ext4: Unknown parameter 'euid'
[  356.887697][ T5913] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  356.927663][T12485] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  356.930820][T12485] em28xx 4-1:0.0: Config register raw data: 0xfa
[  356.932887][T12485] em28xx 4-1:0.0: I2S Audio (3 sample rate(s))
[  356.935069][T12485] em28xx 4-1:0.0: No AC97 audio processor
[  357.313681][ T5913] usb 6-1: unable to get BOS descriptor or descriptor too short
[  357.316714][ T5913] usb 6-1: not running at top speed; connect to a high speed hub
[  357.320848][ T5913] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  357.324102][ T5913] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4
[  357.328162][ T5913] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  357.335374][ T5913] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  357.339506][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.342105][ T5913] usb 6-1: Product: syz
[  357.343607][ T5913] usb 6-1: Manufacturer: syz
[  357.345166][ T5913] usb 6-1: SerialNumber: syz
[  357.372668][T12485] usb 4-1: USB disconnect, device number 39
[  357.573922][ T5913] usb 6-1: USB disconnect, device number 5
[  357.598345][ T6517] udevd[6517]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  357.946746][T13690] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96
[  358.230096][    T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  358.384159][T13716] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3020'.
[  358.398538][    T9] usb 4-1: Using ep0 maxpacket: 8
[  358.402319][    T9] usb 4-1: config index 0 descriptor too short (expected 30, got 18)
[  358.413809][    T9] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  358.417214][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.430119][    T9] usb 4-1: Product: syz
[  358.431940][    T9] usb 4-1: Manufacturer: syz
[  358.433761][    T9] usb 4-1: SerialNumber: syz
[  358.448762][    T9] usb 4-1: config 0 descriptor??
[  358.468275][    T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  358.471365][    T9] usb 4-1: setting power ON
[  358.475653][    T9] dvb-usb: bulk message failed: -22 (2/0)
[  358.485626][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  358.494436][    T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  358.498656][    T9] usb 4-1: media controller created
[  358.522698][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  358.561296][    T9] usb 4-1: selecting invalid altsetting 6
[  358.567304][    T9] usb 4-1: digital interface selection failed (-22)
[  358.575547][    T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  358.580765][    T9] usb 4-1: setting power OFF
[  358.584671][    T9] dvb-usb: bulk message failed: -22 (2/0)
[  358.597792][    T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  358.604641][    T9] (NULL device *): no alternate interface
[  358.688577][    T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  358.709407][    T9] usb 4-1: USB disconnect, device number 40
[  358.829317][T13738] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3031'.
[  359.180970][T13751] loop5: detected capacity change from 0 to 32768
[  359.193259][T13751] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section downgrade: downgrade entry with mismatched major version (0 != 1)
[  359.193259][T13751] downgrade (size 640):
[  359.193259][T13751] version:	0.0: (unknown version)
[  359.193259][T13751] recovery passes:	
[  359.193259][T13751] errors:	
[  359.193259][T13751] version:	0.0: (unknown version)
[  359.193259][T13751] recovery passes:	
[  359.193259][T13751] errors:	
[  359.193259][T13751] version:	0.35: (unknown version)
[  359.193259][T13751] recovery passes:	
[  359.193259][T13751] errors:	
[  359.193259][T13751] version:	0.0: (unknown version)
[  359.193259][T13751] recovery passes:	
[  359.193259][T13751] errors:	
[  359.193259][T13751] version:	0.47: (unknown version)
[  359.193259][T13751] recovery passes:	
[  359.193259][T13751] errors:	
[  359.193259][T13751] version:	0.0: (unknown version)
[  359.193259][T13751] recovery passes:	fs_freespace_init,bucket_gens_init,check_snapshots,check_subvols
[  359.193259][T13751] errors:	
[  359.193259][T13751] version:	0.11: inode_btree_change
[  359.193259][T13751] recovery passes:	
[  359.193259][T13751] errors:	
[  359.193259][T13751] version:	0.0: (unknown version)
[  359.193259][T13751] recovery passes:	
[  359.193259][T13751] errors:	
[  359.193259][T13751] version:	0.34: (unknown version)
[  359.193259][T13751] recovery passes:	
[  359.193259][T13751] errors:	
[  359.193259][T13751] version:	0.0: (unknown version)
[  359.193259][T13751] recovery passes:	
[  359.193259][T13751] errors:	
[  359.193259][T13751] version:	0.0: (unknown version)
[  359.193259][T13751] recovery passes:	
[  359.193259][T13751] errors:	
[  359.193259][T13751] version:	0.0: (unknown version)
[  359.193259][T13751] recovery passes:	fs_freespace_init,check_snapshot_trees
[  359.193259][T13751] errors:	
[  359.193259][T13751] version:	0.0: (unknown version)
[  359.193259][T13751] recover
[  359.193514][T13751] bcachefs: bch2_fs_get_tree() error: invalid_sb_downgrade
[  359.366267][T13758] Unsupported ieee802154 address type: 0
[  359.429387][T13760] loop5: detected capacity change from 0 to 128
[  359.763098][ T1090] kworker/u9:4: attempt to access beyond end of device
[  359.763098][ T1090] loop5: rw=1, sector=145, nr_sectors = 8 limit=128
[  359.775884][ T1090] kworker/u9:4: attempt to access beyond end of device
[  359.775884][ T1090] loop5: rw=1, sector=161, nr_sectors = 8 limit=128
[  359.796127][ T1090] kworker/u9:4: attempt to access beyond end of device
[  359.796127][ T1090] loop5: rw=1, sector=177, nr_sectors = 8 limit=128
[  359.800882][ T1090] kworker/u9:4: attempt to access beyond end of device
[  359.800882][ T1090] loop5: rw=1, sector=193, nr_sectors = 8 limit=128
[  359.806080][ T1090] kworker/u9:4: attempt to access beyond end of device
[  359.806080][ T1090] loop5: rw=1, sector=209, nr_sectors = 8 limit=128
[  359.817645][ T1090] kworker/u9:4: attempt to access beyond end of device
[  359.817645][ T1090] loop5: rw=1, sector=225, nr_sectors = 8 limit=128
[  359.823166][ T1090] kworker/u9:4: attempt to access beyond end of device
[  359.823166][ T1090] loop5: rw=1, sector=241, nr_sectors = 8 limit=128
[  359.833000][ T1090] kworker/u9:4: attempt to access beyond end of device
[  359.833000][ T1090] loop5: rw=1, sector=257, nr_sectors = 8 limit=128
[  359.837502][ T1090] kworker/u9:4: attempt to access beyond end of device
[  359.837502][ T1090] loop5: rw=1, sector=273, nr_sectors = 8 limit=128
[  359.861810][ T1090] kworker/u9:4: attempt to access beyond end of device
[  359.861810][ T1090] loop5: rw=1, sector=289, nr_sectors = 8 limit=128
[  359.925622][   T33] audit: type=1326 audit(1755250378.563:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13785 comm="syz.5.3049" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525178ebe9 code=0x7ffc0000
[  359.947927][   T33] audit: type=1326 audit(1755250378.563:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13785 comm="syz.5.3049" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525178ebe9 code=0x7ffc0000
[  359.956917][   T33] audit: type=1326 audit(1755250378.573:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13785 comm="syz.5.3049" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f525178ebe9 code=0x7ffc0000
[  359.970417][   T33] audit: type=1326 audit(1755250378.573:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13785 comm="syz.5.3049" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525178ebe9 code=0x7ffc0000
[  359.980691][   T33] audit: type=1326 audit(1755250378.573:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13785 comm="syz.5.3049" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525178ebe9 code=0x7ffc0000
[  359.998281][   T33] audit: type=1326 audit(1755250378.583:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13785 comm="syz.5.3049" exe="/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f525178ebe9 code=0x7ffc0000
[  360.021039][   T33] audit: type=1326 audit(1755250378.583:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13785 comm="syz.5.3049" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525178ebe9 code=0x7ffc0000
[  360.033869][   T33] audit: type=1326 audit(1755250378.583:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13785 comm="syz.5.3049" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525178ebe9 code=0x7ffc0000
[  360.284327][T13805] netlink: 47 bytes leftover after parsing attributes in process `syz.5.3062'.
[  360.592741][   T33] audit: type=1326 audit(1755250379.233:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13817 comm="syz.4.3068" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733018ebe9 code=0x7ffc0000
[  360.611569][   T33] audit: type=1326 audit(1755250379.243:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13817 comm="syz.4.3068" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733018ebe9 code=0x7ffc0000
[  361.187403][T13826] netlink: ct family unspecified
[  361.189662][T13826] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  361.820015][T13836] netlink: 176 bytes leftover after parsing attributes in process `syz.5.3075'.
[  361.849776][T13838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3076'.
[  361.878513][T13838] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  361.902036][T13840] netlink: 'syz.5.3077': attribute type 29 has an invalid length.
[  361.914090][T13840] netlink: 'syz.5.3077': attribute type 29 has an invalid length.
[  362.060355][T13849] netlink: 'syz.3.3080': attribute type 2 has an invalid length.
[  362.063305][T13849] netlink: 'syz.3.3080': attribute type 2 has an invalid length.
[  362.407886][T13865] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  362.417999][T13865] CIFS mount error: No usable UNC path provided in device string!
[  362.417999][T13865] 
[  362.422285][T13865] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  362.834703][T13874] loop3: detected capacity change from 0 to 764
[  362.843740][T13874] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  362.854010][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-label/CDROM.tmp-b7:3' failed: Read-only file system
[  362.863920][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:3' failed: Read-only file system
[  362.884846][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-label/CDROM.tmp-b7:3' failed: Read-only file system
[  362.894258][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:3' failed: Read-only file system
[  362.907636][T13877] loop3: detected capacity change from 0 to 1024
[  362.914467][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system
[  362.921717][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:3' failed: Read-only file system
[  362.937257][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system
[  362.945301][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:3' failed: Read-only file system
[  363.143031][T13886] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3097'.
[  363.387756][T13890] loop3: detected capacity change from 0 to 32768
[  363.396350][T13890] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3099 (13890)
[  363.407204][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:3' failed: Read-only file system
[  363.422177][ T5899] hid-generic 0005:16C0:05DF.0014: item fetching failed at offset 0/1
[  363.426399][ T5899] hid-generic 0005:16C0:05DF.0014: probe with driver hid-generic failed with error -22
[  363.446106][T13890] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  363.460409][T13890] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  363.463896][T13890] BTRFS info (device loop3): using free-space-tree
[  363.680500][ T6483] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  364.483080][T13941] loop5: detected capacity change from 0 to 4096
[  364.554229][ T6517] udevd[6517]: symlink '../../loop5' '/dev/disk/by-uuid/3b59f4fc-a790-4a4c-9011-25a8178ccefa.tmp-b7:5' failed: Read-only file system
[  364.577264][T13944] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  365.062188][T13952] trusted_key: encrypted_key: master key parameter is missing
[  365.504130][T13968] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  365.548975][ T5913] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  365.632383][T13978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3133'.
[  365.710216][T13984] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  365.730637][ T5913] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  365.738643][ T5913] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  365.742539][ T5913] usb 6-1: config 220 has no interface number 2
[  365.744945][ T5913] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  365.765177][ T5913] usb 6-1: config 220 interface 0 has no altsetting 0
[  365.773206][ T5913] usb 6-1: config 220 interface 76 has no altsetting 0
[  365.775074][T13988] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3137'.
[  365.775452][ T5913] usb 6-1: config 220 interface 1 has no altsetting 0
[  365.790423][ T5913] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  365.793880][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.796779][ T5913] usb 6-1: Product: syz
[  365.798383][ T5913] usb 6-1: Manufacturer: syz
[  365.809925][ T5913] usb 6-1: SerialNumber: syz
[  366.031506][ T5913] usb 6-1: selecting invalid altsetting 0
[  366.033756][ T5913] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  366.035778][ T5913] usb 6-1: No valid video chain found.
[  366.043616][ T5913] usb 6-1: selecting invalid altsetting 0
[  366.045589][ T5913] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[  366.053413][ T5913] usb 6-1: USB disconnect, device number 6
[  366.109108][  T794] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  366.270983][  T794] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  366.273907][  T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.286428][  T794] usb 4-1: config 0 descriptor??
[  366.290406][  T794] cp210x 4-1:0.0: cp210x converter detected
[  366.719240][  T794] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  366.817940][T14011] loop5: detected capacity change from 0 to 8192
[  366.825754][T14011] NILFS (loop5): unsupported revision (superblock rev.=0.0, current rev.=2.0). Please check the version of mkfs.nilfs(2).
[  366.962305][  T794] usb 4-1: cp210x converter now attached to ttyUSB0
[  367.166890][T12485] usb 4-1: USB disconnect, device number 41
[  367.182299][T12485] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  367.634545][T14020] fuse: Bad value for 'fd'
[  367.929110][T12485] cp210x 4-1:0.0: device disconnected
[  367.933516][T14022] loop3: detected capacity change from 0 to 2048
[  367.955147][ T5854] udevd[5854]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  367.960646][T14022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  367.990709][   T33] kauditd_printk_skb: 40 callbacks suppressed
[  367.990722][   T33] audit: type=1800 audit(1755250386.632:181): pid=14022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3151" name="file1" dev="loop3" ino=15 res=0 errno=0
[  368.000371][ T5854] udevd[5854]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  368.006066][T14022] EXT4-fs (loop3): Online defrag not supported with bigalloc
[  368.017017][   T33] audit: type=1800 audit(1755250386.642:182): pid=14022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3151" name="file2" dev="loop3" ino=16 res=0 errno=0
[  368.041383][ T6483] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.151626][T14034] loop5: detected capacity change from 0 to 512
[  368.177461][ T6517] udevd[6517]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  368.182330][T14034] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  368.186205][T14034] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal
[  368.191220][ T6517] udevd[6517]: symlink '../../loop5' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000000007.tmp-b7:5' failed: Read-only file system
[  368.214625][ T6517] udevd[6517]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  368.224239][ T6517] udevd[6517]: symlink '../../loop5' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000000007.tmp-b7:5' failed: Read-only file system
[  368.363209][T14040] sctp: [Deprecated]: syz.4.3158 (pid 14040) Use of int in max_burst socket option.
[  368.363209][T14040] Use struct sctp_assoc_value instead
[  368.499288][ T5899] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  368.649181][ T5899] usb 6-1: Using ep0 maxpacket: 16
[  368.654704][ T5899] usb 6-1: config 1 has an invalid descriptor of length 189, skipping remainder of the config
[  368.658266][ T5899] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  368.670390][ T5899] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=f1.40
[  368.673873][ T5899] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  368.676937][ T5899] usb 6-1: Product: syz
[  368.678416][ T5899] usb 6-1: Manufacturer: syz
[  368.692629][ T5899] cdc_ether 6-1:1.0: skipping garbage
[  368.700248][ T5899] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[  368.906958][T12485] usb 6-1: USB disconnect, device number 7
[  369.272398][ T5899] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  369.421771][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  369.426213][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  369.431766][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  369.439093][ T5899] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  369.442789][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.457348][ T5899] usb 4-1: config 0 descriptor??
[  369.886164][ T5899] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  371.530000][T14124] 9pnet_fd: p9_fd_create_tcp (14124): problem connecting socket to 127.0.0.1
[  372.040407][T14155] loop5: detected capacity change from 0 to 32768
[  372.049203][T14155] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  372.062460][ T6517] udevd[6517]: symlink '../../loop5' '/dev/disk/by-uuid/07000000-0000-0000-b33b-244aab9eb3e9.tmp-b7:5' failed: Read-only file system
[  372.068445][ T5899] usb 4-1: USB disconnect, device number 42
[  372.782867][T14159] loop3: detected capacity change from 0 to 131072
[  372.803577][T14159] F2FS-fs (loop3): Test dummy encryption mode enabled
[  372.816739][T14159] F2FS-fs (loop3): invalid crc value
[  372.846264][T12424] ocfs2: Unmounting device (7,5) on (node local)
[  372.867047][T14159] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  372.883335][T14159] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  372.932199][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-uuid/36fde3fc-a519-493c-8baa-e32931e9a89c.tmp-b7:3' failed: Read-only file system
[  372.955624][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-uuid/36fde3fc-a519-493c-8baa-e32931e9a89c.tmp-b7:3' failed: Read-only file system
[  374.133342][T14200] loop5: detected capacity change from 0 to 256
[  374.162869][T14200] FAT-fs (loop5): Directory bread(block 64) failed
[  374.165426][T14200] FAT-fs (loop5): Directory bread(block 65) failed
[  374.168203][T14200] FAT-fs (loop5): Directory bread(block 66) failed
[  374.171951][T14200] FAT-fs (loop5): Directory bread(block 67) failed
[  374.174601][T14200] FAT-fs (loop5): Directory bread(block 68) failed
[  374.177161][T14200] FAT-fs (loop5): Directory bread(block 69) failed
[  374.181367][T14200] FAT-fs (loop5): Directory bread(block 70) failed
[  374.183837][T14200] FAT-fs (loop5): Directory bread(block 71) failed
[  374.186581][T14200] FAT-fs (loop5): Directory bread(block 72) failed
[  374.189152][T14200] FAT-fs (loop5): Directory bread(block 73) failed
[  374.376313][T14206] loop5: detected capacity change from 0 to 2048
[  374.381641][T14206] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  374.386114][T14206] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  374.388529][T14206] UDF-fs: Scanning with blocksize 512 failed
[  374.398821][T14206] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  374.403046][ T6517] udevd[6517]: symlink '../../loop5' '/dev/disk/by-label/LinuxUDF.tmp-b7:5' failed: Read-only file system
[  374.408601][ T6517] udevd[6517]: symlink '../../loop5' '/dev/disk/by-uuid/1234567812345678.tmp-b7:5' failed: Read-only file system
[  374.441962][ T6517] udevd[6517]: symlink '../../loop5' '/dev/disk/by-label/LinuxUDF.tmp-b7:5' failed: Read-only file system
[  374.467863][ T6517] udevd[6517]: symlink '../../loop5' '/dev/disk/by-uuid/1234567812345678.tmp-b7:5' failed: Read-only file system
[  374.571138][T14212] loop5: detected capacity change from 0 to 8
[  374.580804][T14212] squashfs image failed sanity check
[  375.719143][T14237] loop3: detected capacity change from 0 to 4096
[  375.754637][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  375.776755][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:3' failed: Read-only file system
[  375.816020][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  375.825618][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:3' failed: Read-only file system
[  375.831488][   T33] audit: type=1800 audit(1755250394.471:183): pid=14237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3246" name="bus" dev="loop3" ino=33 res=0 errno=0
[  376.075886][T14254] Bluetooth: hci0: invalid length 0, exp 2 for type 11
[  376.473314][T14262] loop3: detected capacity change from 0 to 32768
[  376.486084][T14262] JBD2: Ignoring recovery information on journal
[  376.517741][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:3' failed: Read-only file system
[  376.542198][T14268] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.3259'.
[  376.555604][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:3' failed: Read-only file system
[  376.567289][T14262] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  376.647579][ T6483] ocfs2: Unmounting device (7,3) on (node local)
[  377.737664][    T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  377.817770][T14308] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  377.904330][    T9] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  377.907868][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.911827][    T9] usb 6-1: Product: syz
[  377.913326][    T9] usb 6-1: Manufacturer: syz
[  377.915186][    T9] usb 6-1: SerialNumber: syz
[  377.920729][    T9] usb 6-1: config 0 descriptor??
[  378.119764][T14310] loop3: detected capacity change from 0 to 40427
[  378.124535][T14310] F2FS-fs (loop3): build fault injection rate: 16
[  378.136649][T14310] F2FS-fs (loop3): build fault injection type: 0x3bfe8e
[  378.139011][    T9] usb 6-1: f81604_read: reg: 105 failed: -EPROTO
[  378.148800][    T9] f81604 6-1:0.0: Setting termination of CH#0 failed: -EPROTO
[  378.153989][    T9] f81604 6-1:0.0: probe with driver f81604 failed with error -71
[  378.161867][    T9] usb 6-1: USB disconnect, device number 8
[  378.181506][T14310] F2FS-fs (loop3): invalid crc value
[  378.183992][    C0] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  378.188941][T14310] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-5)
[  379.100434][ T5913] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  379.254699][ T5913] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  379.259473][ T5913] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  379.268869][ T5913] usb 6-1: config 0 interface 0 has no altsetting 0
[  379.271776][ T5913] usb 6-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  379.275616][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.284542][ T5913] usb 6-1: config 0 descriptor??
[  379.287549][T14328] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  379.716668][ T5913] logitech 0003:046D:C24F.0016: unbalanced collection at end of report description
[  379.721287][ T5913] logitech 0003:046D:C24F.0016: parse failed
[  379.723896][ T5913] logitech 0003:046D:C24F.0016: probe with driver logitech failed with error -22
[  379.753777][T14340] loop3: detected capacity change from 0 to 32768
[  379.757873][T14340] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3291 (14340)
[  379.774416][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-uuid/e417788f-7a09-42b2-9266-8ddc5d5d35d2.tmp-b7:3' failed: Read-only file system
[  379.785564][T14340] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  379.789712][T14340] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  379.793822][T14340] BTRFS info (device loop3): disk space caching is enabled
[  379.796699][T14340] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  379.831703][T14340] BTRFS info (device loop3): rebuilding free space tree
[  379.845744][T14340] BTRFS info (device loop3): disabling free space tree
[  379.848626][T14340] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  379.852782][T14340] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  379.883681][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-uuid/e417788f-7a09-42b2-9266-8ddc5d5d35d2.tmp-b7:3' failed: Read-only file system
[  379.911992][ T6483] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  379.923157][ T5913] usb 6-1: USB disconnect, device number 9
[  380.333901][T14370] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3298'.
[  380.514107][T14380] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3302'.
[  380.680859][T14390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3307'.
[  380.684470][T14390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3307'.
[  380.876337][T14388] loop5: detected capacity change from 0 to 32768
[  380.904462][ T6517] udevd[6517]: symlink '../../loop5' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:5' failed: Read-only file system
[  380.911163][ T5879] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  380.919003][T14388] JBD2: Ignoring recovery information on journal
[  380.926046][ T6517] udevd[6517]: symlink '../../loop5' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:5' failed: Read-only file system
[  380.959838][T14388] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  380.984687][T12424] ocfs2: Unmounting device (7,5) on (node local)
[  381.060639][ T5879] usb 4-1: Using ep0 maxpacket: 16
[  381.063956][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  381.067370][ T5879] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  381.076838][ T5879] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00
[  381.079770][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.099595][ T5879] usb 4-1: config 0 descriptor??
[  381.222755][T14422] loop5: detected capacity change from 0 to 8
[  381.228214][T14422] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  381.614722][T14428] cramfs: Error -3 while decompressing!
[  381.617191][T14428] cramfs: ffffffff99bef628(26)->ffff88804012b000(4096)
[  381.619639][T14428] cramfs: Error -3 while decompressing!
[  381.621457][T14428] cramfs: ffffffff99bef642(26)->ffff88804012a000(4096)
[  381.624252][T14428] cramfs: Error -3 while decompressing!
[  381.626738][T14428] cramfs: ffffffff99bef65c(16)->ffff888040129000(4096)
[  381.629895][T14428] cramfs: Error -3 while decompressing!
[  381.632399][T14428] cramfs: ffffffff99bef628(26)->ffff88804012b000(4096)
[  381.747882][ T5879] input: HID 0955:7214 Haptics as /devices/virtual/input/input23
[  381.777515][T14430] bridge2: entered promiscuous mode
[  381.811522][ T5879] shield 0003:0955:7214.0017: Registered Thunderstrike controller
[  381.815159][ T5879] shield 0003:0955:7214.0017: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0
[  381.947470][ T5314] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  381.955031][ T5314] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  381.961407][    T9] usb 4-1: USB disconnect, device number 43
[  381.969470][ T5314] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  381.974314][ T5314] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  383.231163][T14455] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  383.299204][T14460] loop3: detected capacity change from 0 to 1024
[  383.332193][T14460] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5
[  383.338536][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  383.339272][T14460] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  383.356739][T14460] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3338: Failed to acquire dquot type 0
[  383.363795][T14460] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  383.366212][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  383.378611][T14460] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.3338: corrupted inode contents
[  383.387726][T14460] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #13: comm syz.3.3338: mark_inode_dirty error
[  383.392357][T14460] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.3338: corrupted inode contents
[  383.396838][T14460] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.3338: mark_inode_dirty error
[  383.401090][T14460] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.3338: corrupted inode contents
[  383.405562][T14460] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  383.408445][T14460] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.3338: corrupted inode contents
[  383.412615][T14460] EXT4-fs error (device loop3): ext4_truncate:4666: inode #13: comm syz.3.3338: mark_inode_dirty error
[  383.417151][T14460] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  383.420821][T14460] EXT4-fs (loop3): 1 truncate cleaned up
[  383.423697][T14460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  383.446074][T14460] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  383.450143][T14460] EXT4-fs: Ignoring removed orlov option
[  383.452498][T14460] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  383.455995][T14460] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  383.459343][T14460] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  383.465711][T14460] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  383.484295][ T6483] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.603208][T14458] loop5: detected capacity change from 0 to 32768
[  383.612734][T14458] 
[  383.612734][T14458]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  383.612734][T14458] 
[  383.635130][ T5854] udevd[5854]: symlink '../../loop5' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:5' failed: Read-only file system
[  383.654174][T14458] read_mapping_page failed!
[  383.659697][ T6517] udevd[6517]: symlink '../../loop5' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:5' failed: Read-only file system
[  383.661082][T14458] ERROR: (device loop5): txCommit: 
[  383.661082][T14458] 
[  383.700314][   T26] 
[  383.700314][   T26]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  383.700314][   T26] 
[  383.705478][   T26] 
[  383.705478][   T26]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  383.705478][   T26] 
[  383.709249][T12424] 
[  383.709249][T12424]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  383.709249][T12424] 
[  383.718805][  T116] 
[  383.718805][  T116]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  383.718805][  T116] 
[  383.727830][T12424] 
[  383.727830][T12424]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  383.727830][T12424] 
[  384.608444][T14486] loop3: detected capacity change from 0 to 32768
[  384.770497][T14486] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  384.770521][T14486]   allowing incompatible features above 0.0: (unknown version)
[  384.770531][T14486]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  384.787785][T14486] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  384.791272][T14486] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  384.794603][T14486] bcachefs (loop3): Version upgrade required:
[  384.794603][T14486] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  384.794603][T14486] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  384.794603][T14486]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  384.835490][T14486] bcachefs (loop3): dropping and reconstructing all alloc info
[  384.851340][T14486] bcachefs (loop3): accounting_read... done
[  384.855719][T14486] bcachefs (loop3): alloc_read... done
[  384.858508][T14486] bcachefs (loop3): snapshots_read... done
[  384.861764][T14486] bcachefs (loop3): check_allocations... done
[  384.896642][T14486] bcachefs (loop3): going read-write
[  384.930796][T14486] bcachefs (loop3): done starting filesystem
[  384.966811][T14500] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3350'.
[  385.431002][   T33] audit: type=1800 audit(1755250404.040:184): pid=14486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3348" name="file1" dev="loop3" ino=536870912 res=0 errno=0
[  385.450574][   T40] bcachefs (loop3): bucket incorrectly unset in freespace btree
[  385.450632][   T40]   u64s 5 type deleted 0:30:0 len 0 ver 0, , continuing
[  385.461188][ T5848] Bluetooth: hci0: command 0x0406 tx timeout
[  385.516676][T14503] loop5: detected capacity change from 0 to 1024
[  385.524741][   T40] bcachefs (loop3): bucket incorrectly unset in freespace btree
[  385.524756][   T40]   u64s 5 type deleted 0:29:0 len 0 ver 0, , continuing
[  385.525283][ T6483] bcachefs (loop3): shutting down
[  385.533673][   T40] bcachefs (loop3): bucket incorrectly unset in freespace btree
[  385.533688][   T40]   u64s 5 type deleted 0:33:0 len 0 ver 0, , continuing
[  385.538955][T14503] EXT4-fs: inline encryption not supported
[  385.545392][ T6483] bcachefs (loop3): going read-only
[  385.545926][T14503] EXT4-fs: Ignoring removed i_version option
[  385.547243][ T6483] bcachefs (loop3): finished waiting for writes to stop
[  385.551642][ T6517] udevd[6517]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  385.561390][ T6483] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11
[  385.565478][T14503] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  385.586209][ T3058] bcachefs (loop3): bucket incorrectly unset in freespace btree
[  385.586221][ T3058]   u64s 5 type deleted 0:43:0 len 0 ver 0, , continuing
[  385.586227][T14503] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  385.610626][ T6483] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 11
[  385.629104][ T6483] bcachefs (loop3): unclean shutdown complete, journal seq 12
[  385.632815][ T6483] bcachefs (loop3): done going read-only, filesystem not clean
[  385.658071][T12424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  385.705377][ T6483] bcachefs (loop3): shutdown complete
[  386.604691][T14518] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2)
[  386.808593][T14537] loop5: detected capacity change from 0 to 256
[  387.124688][T14563] loop5: detected capacity change from 0 to 128
[  387.139827][ T6517] udevd[6517]: symlink '../../loop5' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:5' failed: Read-only file system
[  387.155277][T14563] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  387.160048][T14563] ext4 filesystem being mounted at /296/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  387.197799][T12424] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  387.390840][   T33] audit: type=1326 audit(1755250406.020:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14578 comm="syz.5.3385" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f525178ebe9 code=0x0
[  388.281828][ T5879] usb 4-1: new full-speed USB device number 44 using dummy_hcd
[  388.443759][ T5879] usb 4-1: unable to get BOS descriptor or descriptor too short
[  388.447333][ T5879] usb 4-1: not running at top speed; connect to a high speed hub
[  388.452478][ T5879] usb 4-1: config 8 has an invalid interface number: 24 but max is 0
[  388.455607][ T5879] usb 4-1: config 8 has no interface number 0
[  388.457778][ T5879] usb 4-1: config 8 interface 24 has no altsetting 0
[  388.463768][ T5879] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af
[  388.467272][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.470420][ T5879] usb 4-1: Product: syz
[  388.474586][ T5879] usb 4-1: Manufacturer: syz
[  388.476386][ T5879] usb 4-1: SerialNumber: syz
[  388.553949][T14604] loop5: detected capacity change from 0 to 64
[  388.635767][T14605] bio_check_eod: 102 callbacks suppressed
[  388.635784][T14605] syz.5.3396: attempt to access beyond end of device
[  388.635784][T14605] loop5: rw=0, sector=1310720, nr_sectors = 2 limit=64
[  388.794197][ T5879] vmk80xx 4-1:8.24: driver 'vmk80xx' failed to auto-configure device.
[  388.807077][T14609] loop5: detected capacity change from 0 to 64
[  388.853917][ T5879] usb 4-1: USB disconnect, device number 44
[  390.195530][T14632] loop5: detected capacity change from 0 to 64
[  390.528148][T14650] loop3: detected capacity change from 0 to 8192
[  390.560963][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-label/SYZKALLER.tmp-b7:3' failed: Read-only file system
[  390.578245][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-uuid/1DC8-C73B.tmp-b7:3' failed: Read-only file system
[  390.606342][T14658] loop3: detected capacity change from 0 to 512
[  390.650322][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  390.660202][T14658] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  390.665690][T14658] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  390.678292][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  390.682576][T14658] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  390.687220][T14658] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  390.690623][T14658] System zones: 0-2, 18-18, 34-35
[  390.705364][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  390.716102][T14658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  390.755659][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  390.807112][ T6483] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.011871][ T5913] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  391.141820][  T794] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  391.161793][ T5913] usb 6-1: Using ep0 maxpacket: 32
[  391.165208][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 36096, setting to 64
[  391.181244][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  391.186728][ T5913] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  391.189702][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.192732][ T5913] usb 6-1: Product: syz
[  391.194106][ T5913] usb 6-1: Manufacturer: syz
[  391.195821][ T5913] usb 6-1: SerialNumber: syz
[  391.201061][ T5913] usb 6-1: config 0 descriptor??
[  391.205244][ T5913] usb 6-1: no audio or video endpoints found
[  391.297145][  T794] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  391.310727][  T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.313564][  T794] usb 4-1: Product: syz
[  391.314997][  T794] usb 4-1: Manufacturer: syz
[  391.316524][  T794] usb 4-1: SerialNumber: syz
[  391.319971][  T794] usb 4-1: config 0 descriptor??
[  391.323592][  T794] ch341 4-1:0.0: ch341-uart converter detected
[  391.412365][ T5913] usb 6-1: USB disconnect, device number 10
[  391.527588][  T794] usb 4-1: failed to receive control message: -71
[  391.531960][  T794] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  391.540697][  T794] usb 4-1: USB disconnect, device number 45
[  391.550711][  T794] ch341 4-1:0.0: device disconnected
[  392.087708][T14680] loop5: detected capacity change from 0 to 256
[  392.091209][T14680] exfat: Deprecated parameter 'utf8'
[  392.099978][T14680] exfat: Deprecated parameter 'utf8'
[  392.108306][T14680] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  392.255549][ T5848] Bluetooth: hci0: command 0x0406 tx timeout
[  392.291240][T14691] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  392.475468][T14700] netlink: 'syz.4.3439': attribute type 11 has an invalid length.
[  392.573453][    T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  392.601129][T14704] erspan1: entered promiscuous mode
[  392.603490][T14704] erspan1: entered allmulticast mode
[  392.722084][    T9] usb 4-1: Using ep0 maxpacket: 16
[  392.731732][    T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  392.739261][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.743874][    T9] usb 4-1: Product: syz
[  392.746957][    T9] usb 4-1: Manufacturer: syz
[  392.748481][    T9] usb 4-1: SerialNumber: syz
[  392.772531][    T9] usb 4-1: config 0 descriptor??
[  392.783289][    T9] appledisplay 4-1:0.0: Could not find int-in endpoint
[  392.786845][    T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  394.159789][ T5913] usb 4-1: USB disconnect, device number 46
[  394.162502][  T794] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  394.324577][  T794] usb 6-1: Using ep0 maxpacket: 8
[  394.331959][  T794] usb 6-1: config 7 has an invalid interface number: 190 but max is 0
[  394.337588][  T794] usb 6-1: config 7 has no interface number 0
[  394.340255][  T794] usb 6-1: config 7 interface 190 has no altsetting 0
[  394.348913][  T794] usb 6-1: New USB device found, idVendor=0af0, idProduct=8400, bcdDevice=c0.15
[  394.352709][  T794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.355806][  T794] usb 6-1: Product: syz
[  394.357509][  T794] usb 6-1: Manufacturer: syz
[  394.359354][  T794] usb 6-1: SerialNumber: syz
[  394.580053][  T794] hso 6-1:7.190: Not our interface
[  394.600765][  T794] usb 6-1: USB disconnect, device number 11
[  395.976216][T14794] loop5: detected capacity change from 0 to 512
[  396.000151][T14794] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  396.000535][ T6517] udevd[6517]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  396.031890][ T6517] udevd[6517]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  396.035069][T14794] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3484: bg 0: block 321: padding at end of block bitmap is not set
[  396.209448][T12424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  396.712389][ T5913] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  396.862544][ T5913] usb 4-1: Using ep0 maxpacket: 8
[  396.866060][ T5913] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  396.869677][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.882232][ T5913] pvrusb2: Hardware description: Terratec Grabster AV400
[  396.885164][ T5913] pvrusb2: **********
[  396.886793][ T5913] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  396.890555][ T5913] pvrusb2: Important functionality might not be entirely working.
[  396.894147][ T5913] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  396.898473][ T5913] pvrusb2: **********
[  396.902844][    T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  397.052706][    T9] usb 6-1: Using ep0 maxpacket: 16
[  397.057508][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11
[  397.064237][    T9] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  397.085061][ T2397] pvrusb2: Invalid write control endpoint
[  397.132799][    T9] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  397.136361][    T9] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  397.139753][    T9] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  397.152104][    T9] usb 6-1: config 1 interface 0 has no altsetting 0
[  397.156384][    T9] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  397.159557][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.164723][ T2397] pvrusb2: Invalid write control endpoint
[  397.167758][T14816] netlink: 'syz.4.3492': attribute type 3 has an invalid length.
[  397.171134][    T9] ums-sddr09 6-1:1.0: USB Mass Storage device detected
[  397.182061][ T2397] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  397.200631][ T2397] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  397.210759][ T2397] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  397.215123][ T2397] pvrusb2: Device being rendered inoperable
[  397.222736][ T2397] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  397.228728][ T2397] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  397.239553][ T2397] pvrusb2: Attached sub-driver cx25840
[  397.242048][ T2397] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  397.247467][ T2397] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  397.284489][ T5913] usb 4-1: USB disconnect, device number 47
[  397.387473][    T9] scsi host6: usb-storage 6-1:1.0
[  397.591368][ T5913] usb 6-1: USB disconnect, device number 12
[  397.695506][T14843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3504'.
[  397.698661][T14843] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3504'.
[  397.701808][T14843] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3504'.
[  397.709118][T14843] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3504'.
[  397.892256][T14853] loop3: detected capacity change from 0 to 2048
[  397.910402][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:3' failed: Read-only file system
[  397.918521][T14856] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  397.931232][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:3' failed: Read-only file system
[  397.932360][T14853] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  397.946695][T14853] Remounting filesystem read-only
[  398.061051][T14866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3516'.
[  399.449785][T14899] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  399.496686][T14901] netlink: 'syz.5.3526': attribute type 2 has an invalid length.
[  399.615312][T14905] loop5: detected capacity change from 0 to 8192
[  399.622805][T14905] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  399.635909][ T6517] udevd[6517]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  399.641567][ T6517] udevd[6517]: symlink '../../loop5' '/dev/disk/by-uuid/31697E8B593E9D92.tmp-b7:5' failed: Read-only file system
[  399.660219][T14905] ntfs3(loop5): Failed to initialize $Extend/$ObjId.
[  399.661239][ T6517] udevd[6517]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  399.668667][ T6517] udevd[6517]: symlink '../../loop5' '/dev/disk/by-uuid/31697E8B593E9D92.tmp-b7:5' failed: Read-only file system
[  399.733896][ T5314] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  399.887628][ T5314] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  399.891492][ T5314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.898166][ T5314] usb 4-1: Product: syz
[  399.905300][ T5314] usb 4-1: Manufacturer: syz
[  399.907338][ T5314] usb 4-1: SerialNumber: syz
[  399.921690][ T5314] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  399.967040][ T5314] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  400.373836][   T33] audit: type=1326 audit(1755250419.018:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14927 comm="syz.4.3536" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733018ebe9 code=0x7ffc0000
[  400.394958][   T33] audit: type=1326 audit(1755250419.018:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14927 comm="syz.4.3536" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733018ebe9 code=0x7ffc0000
[  400.417339][   T33] audit: type=1326 audit(1755250419.018:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14927 comm="syz.4.3536" exe="/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f733018ebe9 code=0x7ffc0000
[  400.435238][   T33] audit: type=1326 audit(1755250419.018:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14927 comm="syz.4.3536" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733018ebe9 code=0x7ffc0000
[  400.451585][   T33] audit: type=1326 audit(1755250419.018:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14927 comm="syz.4.3536" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733018ebe9 code=0x7ffc0000
[  400.533118][    T9] usb 4-1: USB disconnect, device number 48
[  401.076589][ T5314] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  401.082097][ T5314] ath9k_htc: Failed to initialize the device
[  401.087152][    T9] usb 4-1: ath9k_htc: USB layer deinitialized
[  401.178606][T14937] loop3: detected capacity change from 0 to 4096
[  401.185418][T14937] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  401.196676][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  401.210339][T14937] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  401.214358][T14937] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  401.216554][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-uuid/02AFA4DB32BB7E65.tmp-b7:3' failed: Read-only file system
[  401.260189][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  401.275547][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-uuid/02AFA4DB32BB7E65.tmp-b7:3' failed: Read-only file system
[  402.333207][ T5858] Bluetooth: hci1: command 0x0405 tx timeout
[  402.729333][T14967] lo: Caught tx_queue_len zero misconfig
[  402.976483][T14973] netlink: 'syz.5.3553': attribute type 1 has an invalid length.
[  403.682418][T14981] loop5: detected capacity change from 0 to 32768
[  403.709888][T14981] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  403.725239][T14981] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  403.741601][ T6517] udevd[6517]: symlink '../../loop5' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:5' failed: Read-only file system
[  403.766382][ T6517] udevd[6517]: symlink '../../loop5' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:5' failed: Read-only file system
[  403.770663][   T33] audit: type=1800 audit(1755250422.408:191): pid=14981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3557" name="file1" dev="loop5" ino=17058 res=0 errno=0
[  403.786039][T14989] loop3: detected capacity change from 0 to 4096
[  403.789209][T14989] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  403.795962][T14989] ntfs3(loop3): ino=2, mi_enum_attr
[  403.803433][T14989] ntfs3(loop3): Failed to load $LogFile (-22).
[  403.807292][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  403.811510][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:3' failed: Read-only file system
[  403.856959][T12424] ocfs2: Unmounting device (7,5) on (node local)
[  403.918479][T14996] loop3: detected capacity change from 0 to 128
[  403.922046][T14996] ufs: You didn't specify the type of your ufs filesystem
[  403.922046][T14996] 
[  403.922046][T14996] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  403.922046][T14996] 
[  403.922046][T14996] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  403.955354][T14996] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  404.072376][T14998] loop3: detected capacity change from 0 to 2048
[  404.118202][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-label/LinuxUDF.tmp-b7:3' failed: Read-only file system
[  404.122525][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-uuid/1234567812345678.tmp-b7:3' failed: Read-only file system
[  404.127994][T14998] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  404.146916][T14998] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  404.431885][T15004] loop5: detected capacity change from 0 to 32768
[  404.518360][T15006] loop3: detected capacity change from 0 to 32768
[  404.546762][T15006] JBD2: Ignoring recovery information on journal
[  404.549032][T15006] JBD2: corrupted journal superblock
[  404.550787][T15006] JBD2: error -117 scanning journal
[  404.552462][T15006] (syz.3.3568,15006,1):ocfs2_journal_wipe:1216 ERROR: status = -117
[  404.558215][T15006] (syz.3.3568,15006,1):ocfs2_check_volume:2363 ERROR: status = -117
[  404.562843][T15006] (syz.3.3568,15006,1):ocfs2_check_volume:2432 ERROR: status = -117
[  404.566980][T15006] (syz.3.3568,15006,1):ocfs2_mount_volume:1764 ERROR: status = -117
[  404.570702][T15006] (syz.3.3568,15006,1):ocfs2_fill_super:1177 ERROR: status = -117
[  405.882278][T15041] loop3: detected capacity change from 0 to 1024
[  405.928360][T15041] hfsplus: request for non-existent node 16777216 in B*Tree
[  405.931786][T15041] hfsplus: request for non-existent node 16777216 in B*Tree
[  405.938803][T15041] hfsplus: request for non-existent node 16777216 in B*Tree
[  405.941822][T15041] hfsplus: request for non-existent node 16777216 in B*Tree
[  405.944931][T15041] hfsplus: request for non-existent node 16777216 in B*Tree
[  405.948105][T15041] hfsplus: request for non-existent node 16777216 in B*Tree
[  405.951441][T15041] hfsplus: request for non-existent node 16777216 in B*Tree
[  405.954779][T15041] hfsplus: request for non-existent node 16777216 in B*Tree
[  405.958054][T15041] hfsplus: request for non-existent node 16777216 in B*Tree
[  405.960991][T15041] hfsplus: request for non-existent node 16777216 in B*Tree
[  405.967754][T15041] hfsplus: request for non-existent node 16777216 in B*Tree
[  405.970710][T15041] hfsplus: request for non-existent node 16777216 in B*Tree
[  405.987285][T15044] Invalid source name
[  406.008896][   T33] audit: type=1800 audit(1755250424.648:192): pid=15041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3582" name="file1" dev="loop3" ino=20 res=0 errno=0
[  406.036198][T15046] bond0: option xmit_hash_policy: invalid value (8)
[  406.521089][T15055] loop5: detected capacity change from 0 to 40427
[  406.524650][T15055] F2FS-fs: heap/no_heap options were deprecated
[  406.684267][T15055] F2FS-fs (loop5): invalid crc value
[  406.685960][T15055] F2FS-fs (loop5): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[  406.792813][T15055] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  406.812472][T15055] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  406.871014][ T6517] udevd[6517]: symlink '../../loop5' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:5' failed: Read-only file system
[  406.893999][ T6517] udevd[6517]: symlink '../../loop5' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:5' failed: Read-only file system
[  407.453240][T15069] loop3: detected capacity change from 0 to 32768
[  407.476069][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-uuid/d7dc424e-7990-42cb-9f91-9cb7200a101d.tmp-b7:3' failed: Read-only file system
[  407.479815][T15069] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  407.495487][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-uuid/d7dc424e-7990-42cb-9f91-9cb7200a101d.tmp-b7:3' failed: Read-only file system
[  407.502428][T15069] XFS (loop3): Ending clean mount
[  407.521421][T15069] XFS (loop3): Quotacheck needed: Please wait.
[  407.576929][T15069] XFS (loop3): Quotacheck: Done.
[  407.619968][ T6483] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  408.090595][T15117] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3613'.
[  408.179360][T15123] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3616'.
[  408.197167][T15125] loop3: detected capacity change from 0 to 1024
[  408.211196][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  408.229447][T15125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  408.236304][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  408.251085][T15125] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.3617: missing EA_INODE flag
[  408.258909][T15125] EXT4-fs (loop3): Remounting filesystem read-only
[  408.263909][ T5913] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  408.284349][ T6483] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  408.414606][ T5913] usb 6-1: Using ep0 maxpacket: 16
[  408.417688][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  408.421306][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  408.434259][ T5913] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  408.437001][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  408.447423][ T5913] usb 6-1: config 0 descriptor??
[  408.751211][T15152] netlink: 'syz.5.3611': attribute type 1 has an invalid length.
[  408.810462][   T33] audit: type=1326 audit(1755250427.447:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15155 comm="syz.3.3630" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb17398ebe9 code=0x0
[  409.154664][ T5314] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  409.314083][ T5314] usb 4-1: Using ep0 maxpacket: 32
[  409.339148][ T5314] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  409.343337][ T5314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.364202][ T5314] usb 4-1: config 0 descriptor??
[  409.392862][ T5314] gspca_main: sunplus-2.14.0 probing 041e:400b
[  410.064288][ T5913] usbhid 6-1:0.0: can't add hid device: -71
[  410.066259][ T5913] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  410.071475][ T5913] usb 6-1: USB disconnect, device number 13
[  410.407284][ T5314] gspca_sunplus: reg_w_riv err -71
[  410.409486][ T5314] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  410.423116][ T5314] usb 4-1: USB disconnect, device number 49
[  410.741492][T15182] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3638'.
[  411.228090][T15216] loop3: detected capacity change from 0 to 1024
[  411.238708][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  411.253925][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:3' failed: Read-only file system
[  411.266802][T15216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  411.274242][T15216] ext4 filesystem being mounted at /1056/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  411.304779][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  411.309748][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:3' failed: Read-only file system
[  411.318973][T15216] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.3654: lblock 3 mapped to illegal pblock 3 (length 3)
[  411.340171][T15216] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  411.370037][T15216] EXT4-fs (loop3): This should not happen!! Data will be lost
[  411.370037][T15216] 
[  411.386522][T15226] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.3654: lblock 0 mapped to illegal pblock 0 (length 3)
[  411.400590][T15226] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117
[  411.407103][T15226] EXT4-fs (loop3): This should not happen!! Data will be lost
[  411.407103][T15226] 
[  411.432942][ T3058] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 4: comm kworker/u10:4: lblock 4 mapped to illegal pblock 4 (length 2)
[  411.439785][ T3058] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117
[  411.447787][ T3058] EXT4-fs (loop3): This should not happen!! Data will be lost
[  411.447787][ T3058] 
[  411.453129][ T3058] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  411.463572][ T3058] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 28
[  411.473274][ T3058] EXT4-fs (loop3): This should not happen!! Data will be lost
[  411.473274][ T3058] 
[  411.481547][ T3058] EXT4-fs (loop3): Total free blocks count 0
[  412.139743][ T5899] IPVS: starting estimator thread 0...
[  412.224295][T15249] IPVS: using max 64 ests per chain, 153600 per kthread
[  412.500654][T15254] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3669'.
[  412.837269][T15263] loop3: detected capacity change from 0 to 256
[  412.844164][T15263] FAT-fs (loop3): bogus number of FAT sectors
[  412.857544][T15263] FAT-fs (loop3): Can't find a valid FAT filesystem
[  412.989552][T15267] loop3: detected capacity change from 0 to 256
[  413.013298][T15267] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  413.028321][T15267] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  413.057248][T15267] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  413.068730][   T33] audit: type=1800 audit(1755250431.707:194): pid=15267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3674" name="file1" dev="loop3" ino=1048718 res=0 errno=0
[  413.304354][T15284] IPv6: addrconf: prefix option has invalid lifetime
[  413.465485][T15298] netlink: 'syz.3.3690': attribute type 6 has an invalid length.
[  413.639946][T15308] bond0: Caught tx_queue_len zero misconfig
[  416.533554][T15362] loop3: detected capacity change from 0 to 512
[  416.566697][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-label/\x86\x5b.tmp-b7:3' failed: Read-only file system
[  416.574975][T15362] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  416.578491][T15362] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  416.582772][T15362] EXT4-fs (loop3): 1 truncate cleaned up
[  416.587125][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-label/\x86\x5b.tmp-b7:3' failed: Read-only file system
[  416.587141][T15362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  416.647578][ T6483] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.325215][ T5913] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  417.371654][T15393] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  417.558035][ T5913] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  417.561073][ T5913] usb 4-1: config 0 has no interface number 0
[  417.578151][ T5913] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  417.581751][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.584340][ T5913] usb 4-1: Product: syz
[  417.587657][ T5913] usb 4-1: Manufacturer: syz
[  417.589323][ T5913] usb 4-1: SerialNumber: syz
[  417.593249][ T5913] usb 4-1: config 0 descriptor??
[  417.729555][T15411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3738'.
[  417.733160][T15411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3738'.
[  417.737093][T15411] netlink: 'syz.4.3738': attribute type 14 has an invalid length.
[  417.740008][T15411] netlink: 'syz.4.3738': attribute type 11 has an invalid length.
[  417.800265][ T5913] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  417.807554][ T5913] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  417.812307][ T5913] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  417.818886][ T5913] usb 4-1: media controller created
[  417.845680][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  418.005722][ T5913] i2c i2c-2: ec100: i2c rd failed=-71 reg=33
[  418.052007][ T5913] usb 4-1: USB disconnect, device number 50
[  418.920619][T15461] loop3: detected capacity change from 0 to 256
[  419.204740][T15464] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  419.797257][    T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  419.945213][    T9] usb 4-1: Using ep0 maxpacket: 8
[  419.948977][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  419.952760][    T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  419.964675][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  419.968424][    T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  419.973319][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  419.977034][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  419.979961][    T9] usb 4-1: SerialNumber: syz
[  419.985462][T15487] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  419.994095][T15511] 9pnet_fd: Insufficient options for proto=fd
[  420.003404][    T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  420.006588][    T9] usb-storage 4-1:1.0: USB Mass Storage device detected
[  420.010621][    T9] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  420.020194][    T9] scsi host6: usb-storage 4-1:1.0
[  420.184270][T15526] sctp: [Deprecated]: syz.5.3791 (pid 15526) Use of struct sctp_assoc_value in delayed_ack socket option.
[  420.184270][T15526] Use struct sctp_sack_info instead
[  420.711905][T15551] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (1024)
[  420.721458][T15551] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  420.824523][T15558] netlink: 'syz.5.3806': attribute type 10 has an invalid length.
[  420.827938][T15558] bridge0: port 2(bridge_slave_1) entered disabled state
[  420.831132][T15558] bridge0: port 1(bridge_slave_0) entered disabled state
[  420.850340][T15558] bridge0: port 2(bridge_slave_1) entered blocking state
[  420.852877][T15558] bridge0: port 2(bridge_slave_1) entered forwarding state
[  420.855892][T15558] bridge0: port 1(bridge_slave_0) entered blocking state
[  420.858297][T15558] bridge0: port 1(bridge_slave_0) entered forwarding state
[  420.868415][T15558] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  421.218372][T15516] usb 4-1: reset high-speed USB device number 51 using dummy_hcd
[  422.095601][T15516] usb 4-1: device descriptor read/64, error -71
[  422.350175][T15602] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3827'.
[  422.355889][T15516] usb 4-1: reset high-speed USB device number 51 using dummy_hcd
[  422.359704][T15516] usb 4-1: device reset changed ep0 maxpacket size!
[  422.378957][ T5314] usb 4-1: USB disconnect, device number 51
[  423.059017][ T5314] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  423.107385][T15625] ip6_vti0: Caught tx_queue_len zero misconfig
[  423.207050][ T5314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  423.211977][ T5314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  423.218224][ T5314] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  423.222445][ T5314] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  423.225456][ T5314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.230950][ T5314] usb 4-1: config 0 descriptor??
[  423.532730][T15635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  423.656937][ T5314] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[  423.659967][ T5314] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[  423.662570][T15648] team0: Device gre1 is of different type
[  423.675799][ T5314] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[  423.678799][ T5314] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[  423.681752][ T5314] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[  423.684774][ T5314] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[  423.707472][ T5314] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  423.849455][ T5314] usb 4-1: USB disconnect, device number 52
[  424.218300][T15658] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  425.367851][ T6517] udevd[6517]: inotify_add_watch(7, /dev/loop32, 10) failed: No such file or directory
[  425.432103][T15676] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3859'.
[  425.912237][T15692] loop3: detected capacity change from 0 to 32768
[  425.918083][T15692] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3867 (15692)
[  425.984163][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-uuid/e417788f-7a09-42b2-9266-8ddc5d5d35d2.tmp-b7:3' failed: Read-only file system
[  425.992650][T15692] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  426.000511][T15692] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  426.004007][T15692] BTRFS info (device loop3): disk space caching is enabled
[  426.007738][T15692] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  426.298869][T15692] BTRFS info (device loop3): rebuilding free space tree
[  426.310931][T15692] BTRFS info (device loop3): disabling free space tree
[  426.313290][T15692] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  426.324605][T15692] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  426.394518][T15692] BTRFS info (device loop3): balance: start -f
[  426.411280][T15692] BTRFS info (device loop3): balance: ended with status: 0
[  426.419923][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-uuid/e417788f-7a09-42b2-9266-8ddc5d5d35d2.tmp-b7:3' failed: Read-only file system
[  426.473617][ T6483] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  427.002194][T15735] loop3: detected capacity change from 0 to 128
[  427.054492][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-uuid/8AF2-7630.tmp-b7:3' failed: Read-only file system
[  427.087477][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-uuid/8AF2-7630.tmp-b7:3' failed: Read-only file system
[  427.112221][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-uuid/8AF2-7630.tmp-b7:3' failed: Read-only file system
[  427.129152][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-uuid/8AF2-7630.tmp-b7:3' failed: Read-only file system
[  428.810756][T15807] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3908'.
[  428.820953][T15807] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3908'.
[  428.957259][T15806] loop3: detected capacity change from 0 to 512
[  428.964921][T15806] EXT4-fs (loop3): Test dummy encryption mode enabled
[  428.969552][T15806] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  429.221633][T15806] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.3910: bad orphan inode 131083
[  429.228101][T15806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  429.230639][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  429.273388][ T6517] udevd[6517]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  429.303302][   T33] audit: type=1800 audit(1755250447.935:195): pid=15812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3910" name="file1" dev="loop3" ino=19 res=0 errno=0
[  429.686380][  T794] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  429.909679][  T794] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  429.922712][  T794] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  429.951390][  T794] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  429.989539][  T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  430.278885][  T794] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  430.749545][ T6517] udevd[6517]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  430.755417][  T794] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2
[  431.774399][ T5913] usb 4-1: USB disconnect, device number 53
[  431.815093][ T6483] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  432.707926][ T5879] usb 4-1: new full-speed USB device number 54 using dummy_hcd
[  432.895138][ T5879] usb 4-1: config 0 has an invalid interface number: 147 but max is 0
[  432.899556][ T5879] usb 4-1: config 0 has no interface number 0
[  432.901955][ T5879] usb 4-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  432.918860][ T5879] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03
[  432.922828][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.925551][ T5879] usb 4-1: Product: syz
[  432.927141][ T5879] usb 4-1: Manufacturer: syz
[  432.928719][ T5879] usb 4-1: SerialNumber: syz
[  432.933368][ T5879] usb 4-1: config 0 descriptor??
[  432.937654][T15878] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  432.957825][ T5879] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  432.992900][T15904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3952'.
[  432.995896][T15904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3952'.
[  433.000453][T15904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3952'.
[  433.003920][T15904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3952'.
[  433.009890][T15904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3952'.
[  433.150440][ T5715] usb 4-1: Failed to submit usb control message: -71
[  433.154574][ T5879] usb 4-1: USB disconnect, device number 54
[  433.158141][ T5715] usb 4-1: unable to send the bmi data to the device: -71
[  433.160870][ T5715] usb 4-1: unable to get target info from device
[  433.163355][ T5715] usb 4-1: could not get target info (-71)
[  433.166062][ T5715] usb 4-1: could not probe fw (-71)
[  433.910912][T15935] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3965'.
[  434.043493][T15939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3967'.
[  434.320841][T15956] netlink: 'syz.4.3975': attribute type 10 has an invalid length.
[  434.352425][T15956] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  436.035106][T16001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3995'.
[  436.039031][T16001] tipc: Started in network mode
[  436.041166][T16001] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711
[  436.046442][T16001] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  436.292410][T16014] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4000'.
[  436.295993][T16014] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  437.022227][T16006] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  437.631363][T16091] nftables ruleset with unbound chain
[  438.845553][T16153] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4066'.
[  438.924501][T16155] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  439.392391][T16181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4080'.
[  439.458876][T16070] Bluetooth: hci0: command 0x0406 tx timeout
[  439.530775][ T5858] Bluetooth: hci1: unexpected event for opcode 0x1004
[  440.897854][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  441.123692][T16254] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4111'.
[  441.247023][T16254] team0: Port device team_slave_0 removed
[  441.441012][T16264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4116'.
[  441.447639][T16264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4116'.
[  442.123410][T16287] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4127'.
[  442.127415][T16286] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4127'.
[  442.134237][T16287] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4127'.
[  443.538353][ T5858] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  443.542016][ T5858] Bluetooth: hci1: Injecting HCI hardware error event
[  443.548852][ T5858] Bluetooth: hci1: hardware error 0x00
[  443.963682][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4163'.
[  443.969270][T16365] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  443.972334][T16365] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  444.016844][T16367] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4164'.
[  444.734518][T16397] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4179'.
[  445.043409][T16410] overlayfs: failed to clone upperpath
[  445.262213][T16424] netlink: 'syz.5.4188': attribute type 11 has an invalid length.
[  445.513608][T16434] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4195'.
[  445.628839][ T5858] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  446.923061][   T33] audit: type=1326 audit(1755250465.553:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16479 comm="syz.3.4215" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb17398ebe9 code=0x0
[  448.312819][T16532] overlayfs: failed to clone upperpath
[  448.382379][   T33] audit: type=1326 audit(1755250723.019:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16534 comm="syz.3.4240" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17398ebe9 code=0x7fc00000
[  448.395382][   T33] audit: type=1326 audit(1755250723.019:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16534 comm="syz.3.4240" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17398ebe9 code=0x7fc00000
[  448.408199][   T33] audit: type=1326 audit(1755250723.019:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16534 comm="syz.3.4240" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17398ebe9 code=0x7fc00000
[  448.421602][   T33] audit: type=1326 audit(1755250723.019:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16534 comm="syz.3.4240" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17398ebe9 code=0x7fc00000
[  448.429765][   T33] audit: type=1326 audit(1755250723.019:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16534 comm="syz.3.4240" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17398ebe9 code=0x7fc00000
[  448.458033][   T33] audit: type=1326 audit(1755250723.019:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16534 comm="syz.3.4240" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17398ebe9 code=0x7fc00000
[  448.470911][   T33] audit: type=1326 audit(1755250723.019:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16534 comm="syz.3.4240" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17398ebe9 code=0x7fc00000
[  448.486710][   T33] audit: type=1326 audit(1755250723.019:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16534 comm="syz.3.4240" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17398ebe9 code=0x7fc00000
[  448.496285][   T33] audit: type=1326 audit(1755250723.029:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16534 comm="syz.3.4240" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17398ebe9 code=0x7fc00000
[  448.658638][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  449.934139][T16602] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4267'.
[  450.598815][T16625] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4280'.
[  451.207034][T16650] 9pnet_fd: Insufficient options for proto=fd
[  451.950645][   T33] kauditd_printk_skb: 94 callbacks suppressed
[  451.950883][   T33] audit: type=1326 audit(1755250726.539:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16687 comm="syz.3.4312" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17398ebe9 code=0x7ffc0000
[  452.022498][   T33] audit: type=1326 audit(1755250726.539:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16687 comm="syz.3.4312" exe="/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fb17398ebe9 code=0x7ffc0000
[  452.061880][   T33] audit: type=1326 audit(1755250726.539:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16687 comm="syz.3.4312" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17398ebe9 code=0x7ffc0000
[  452.081615][   T33] audit: type=1326 audit(1755250726.539:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16687 comm="syz.3.4312" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb17398ebe9 code=0x7ffc0000
[  452.093819][   T33] audit: type=1326 audit(1755250726.539:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16687 comm="syz.3.4312" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17398ebe9 code=0x7ffc0000
[  452.107223][   T33] audit: type=1326 audit(1755250726.539:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16687 comm="syz.3.4312" exe="/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fb17398ebe9 code=0x7ffc0000
[  452.121873][   T33] audit: type=1326 audit(1755250726.559:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16687 comm="syz.3.4312" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17398ebe9 code=0x7ffc0000
[  452.131212][   T33] audit: type=1326 audit(1755250726.559:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16687 comm="syz.3.4312" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb17398ebe9 code=0x7ffc0000
[  452.145372][   T33] audit: type=1326 audit(1755250726.559:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16687 comm="syz.3.4312" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17398ebe9 code=0x7ffc0000
[  452.154670][   T33] audit: type=1326 audit(1755250726.559:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16687 comm="syz.3.4312" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb17398d550 code=0x7ffc0000
[  452.216092][T16693] netlink: del zone limit has 4 unknown bytes
[  453.874287][T16731] overlayfs: failed to clone upperpath
[  454.797012][T16752] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  454.921670][T16762] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long
[  455.000644][T16770] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4349'.
[  455.991444][T16819] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4373'.
[  455.998942][T16819] unsupported nlmsg_type 40
[  457.809690][T16899] netlink: 165 bytes leftover after parsing attributes in process `syz.3.4409'.
[  459.146865][T16946] netlink: 'syz.5.4429': attribute type 10 has an invalid length.
[  459.157402][T16946] openvswitch: netlink: Flow key attr not present in new flow.
[  459.345713][T16964] fuse: Bad value for 'fd'
[  460.481745][T16999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4451'.
[  461.280259][  T794] libceph: connect (1)[c::]:6789 error -101
[  461.287905][  T794] libceph: mon0 (1)[c::]:6789 connect error
[  461.337714][T17039] ceph: No mds server is up or the cluster is laggy
[  461.352207][T17043] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4466'.
[  461.355692][T17043] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4466'.
[  462.305824][T17076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4484'.
[  462.325530][T17076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4484'.
[  462.884946][T17109] overlayfs: failed to clone upperpath
[  463.434285][T17124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4507'.
[  463.458416][T17124] netlink: 'syz.4.4507': attribute type 21 has an invalid length.
[  464.026769][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  464.797370][T17166] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  464.800820][ T5879] IPVS: starting estimator thread 0...
[  464.886975][T17170] IPVS: using max 63 ests per chain, 151200 per kthread
[  465.093592][T17178] geneve3: entered promiscuous mode
[  465.095250][T17178] geneve3: entered allmulticast mode
[  465.453355][T17209] sock: sock_set_timeout: `syz.5.4547' (pid 17209) tries to set negative timeout
[  465.761037][T17239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4562'.
[  465.764790][T17239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4562'.
[  466.233516][T17260] Invalid ELF header len 8
[  466.668171][T17270] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  466.749869][T17274] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  466.831902][T17280] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4581'.
[  467.251857][T17314] netlink: 340 bytes leftover after parsing attributes in process `syz.5.4599'.
[  467.539797][T17329] netlink: 'syz.5.4606': attribute type 2 has an invalid length.
[  467.546299][T17329] netlink: 'syz.5.4606': attribute type 1 has an invalid length.
[  467.822710][T17339] bridge3: entered allmulticast mode
[  468.104911][T17353] netlink: 212296 bytes leftover after parsing attributes in process `syz.5.4617'.
[  468.998752][T17423] overlayfs: failed to resolve './file0': -2
[  469.882409][T17458] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4666'.
[  470.839212][T17473] ptrace attach of "/syz-executor exec"[6483] was attempted by "/syz-executor exec"[17473]
[  470.848633][ T5715] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode
[  470.896698][ T5715] team0: Port device netdevsim0 removed
[  471.160452][ T5715] batadv0: left promiscuous mode
[  471.164673][ T5715] bridge0: port 3(batadv0) entered disabled state
[  471.193892][ T5715] bridge_slave_1: left promiscuous mode
[  471.199692][ T5715] bridge0: port 2(bridge_slave_1) entered disabled state
[  471.208925][ T5715] bridge_slave_0: left promiscuous mode
[  471.211047][ T5715] bridge0: port 1(bridge_slave_0) entered disabled state
[  472.021411][ T5715] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  472.029870][ T5715] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  472.033336][ T5715] bond0 (unregistering): Released all slaves
[  472.992744][ T5715] hsr_slave_0: left promiscuous mode
[  472.996006][ T5715] hsr_slave_1: left promiscuous mode
[  472.998698][ T5715] batman_adv: batadv0: Removing interface: batadv_slave_0
[  473.003564][ T5715] batman_adv: batadv0: Removing interface: batadv_slave_1
[  473.019520][T17550] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4699'.
[  473.086851][T17555] overlayfs: failed to clone upperpath
[  473.677550][ T5715] team0 (unregistering): Port device team_slave_1 removed
[  473.732963][ T5715] team0 (unregistering): Port device team_slave_0 removed
[  474.078355][T17578] netlink: 'syz.3.4711': attribute type 10 has an invalid length.
[  474.408094][T17578] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  474.681025][ T5715] IPVS: stop unused estimator thread 0...
[  476.252107][T17651] fuse: Bad value for 'fd'
[  476.862037][T17674] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4741'.
[  476.865666][T17674] bridge_slave_1: left allmulticast mode
[  476.867879][T17674] bridge_slave_1: left promiscuous mode
[  476.870279][T17674] bridge0: port 2(bridge_slave_1) entered disabled state
[  476.876287][T17674] bridge_slave_0: left allmulticast mode
[  476.878572][T17674] bridge_slave_0: left promiscuous mode
[  476.880825][T17674] bridge0: port 1(bridge_slave_0) entered disabled state
[  476.933474][T17674] bond0: (slave bridge0): Releasing backup interface
[  477.010412][T17683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4743'.
[  478.666239][T17773] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  478.699018][T17775] overlayfs: failed to clone upperpath
[  478.840358][T17785] netlink: zone id is out of range
[  478.841986][T17785] netlink: zone id is out of range
[  478.843523][T17785] netlink: zone id is out of range
[  478.846258][T17785] netlink: zone id is out of range
[  478.848161][T17785] netlink: zone id is out of range
[  478.849836][T17785] netlink: zone id is out of range
[  478.851393][T17785] netlink: zone id is out of range
[  478.852960][T17785] netlink: zone id is out of range
[  478.854484][T17785] netlink: zone id is out of range
[  479.064426][T17795] batadv0: entered allmulticast mode
[  479.216766][T17807] geneve3: entered promiscuous mode
[  479.218466][T17807] geneve3: entered allmulticast mode
[  479.299908][T17810] syz.5.4798 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  480.032564][T17838] 8021q: adding VLAN 0 to HW filter on device bond3
[  480.039652][T17838] bond0: (slave bond3): Enslaving as an active interface with an up link
[  480.463094][T17861] 9pnet_fd: Insufficient options for proto=fd
[  480.839589][T17876] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4829'.
[  481.167401][T17883] netlink: 495 bytes leftover after parsing attributes in process `syz.4.4832'.
[  481.410999][T17893] No source specified
[  481.453565][T17895] overlayfs: conflicting options: nfs_export=on,index=off
[  481.738254][T17909] netlink: 'syz.3.4843': attribute type 2 has an invalid length.
[  484.632004][T17998] overlayfs: missing 'lowerdir'
[  484.751927][T18003] net_ratelimit: 13 callbacks suppressed
[  484.751945][T18003] IPv4: Oversized IP packet from 127.202.26.0
[  484.867639][T18011] CIFS: VFS: Malformed UNC in devname
[  486.218982][T18071] TCP: TCP_TX_DELAY enabled
[  486.569176][T18082] CIFS mount error: No usable UNC path provided in device string!
[  486.569176][T18082] 
[  486.572979][T18082] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  488.380059][T18167] ref_ctr increment failed for inode: 0x1755 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888122f60ac0
[  488.819313][T18189] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4945'.
[  489.031781][T18206] netlink: 'syz.3.4951': attribute type 11 has an invalid length.
[  489.300362][T18233] syz_tun: entered allmulticast mode
[  489.314523][T18232] syz_tun: left allmulticast mode
[  489.351735][T18240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4965'.
[  491.141342][T18348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5009'.
[  491.197923][T18348] 8021q: adding VLAN 0 to HW filter on device bond4
[  491.231667][T18355] 8021q: adding VLAN 0 to HW filter on device bond4
[  491.236222][T18355] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  491.241996][T18355] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  491.383441][T18373] autofs: Bad value for 'fd'
[  491.561020][T18391] syz.5.5029 (18391): attempted to duplicate a private mapping with mremap.  This is not supported.
[  492.449938][T18430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5048'.
[  492.661434][T18441] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5052'.
[  492.794572][T18444] overlayfs: failed to clone upperpath
[  492.813816][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  494.011261][T18483] netlink: 'syz.4.5072': attribute type 13 has an invalid length.
[  495.448172][T18553] overlayfs: failed to clone lowerpath
[  495.465462][   T33] kauditd_printk_skb: 2 callbacks suppressed
[  495.465474][   T33] audit: type=1326 audit(1755250769.795:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18544 comm="syz.4.5102" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733018ebe9 code=0x7ffc0000
[  495.485080][T18553] overlayfs: failed to clone upperpath
[  495.487451][   T33] audit: type=1326 audit(1755250769.795:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18544 comm="syz.4.5102" exe="/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f733018ebe9 code=0x7ffc0000
[  495.512861][   T33] audit: type=1326 audit(1755250769.795:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18544 comm="syz.4.5102" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733018ebe9 code=0x7ffc0000
[  495.533254][   T33] audit: type=1326 audit(1755250769.795:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18544 comm="syz.4.5102" exe="/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f733018ebe9 code=0x7ffc0000
[  495.561642][   T33] audit: type=1326 audit(1755250769.795:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18544 comm="syz.4.5102" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733018ebe9 code=0x7ffc0000
[  495.589154][   T33] audit: type=1326 audit(1755250769.795:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18544 comm="syz.4.5102" exe="/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f733018ebe9 code=0x7ffc0000
[  495.612428][   T33] audit: type=1326 audit(1755250769.795:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18544 comm="syz.4.5102" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733018ebe9 code=0x7ffc0000
[  495.631061][   T33] audit: type=1326 audit(1755250769.795:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18544 comm="syz.4.5102" exe="/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f733018ebe9 code=0x7ffc0000
[  495.648622][   T33] audit: type=1326 audit(1755250769.805:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18544 comm="syz.4.5102" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733018ebe9 code=0x7ffc0000
[  495.670429][   T33] audit: type=1326 audit(1755250769.805:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18544 comm="syz.4.5102" exe="/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f733018ebe9 code=0x7ffc0000
[  496.518396][T18583] netem: incorrect gi model size
[  496.520822][T18583] netem: change failed
[  497.115170][T18631] netlink: 'syz.5.5142': attribute type 2 has an invalid length.
[  497.137958][T18631] k*]: entered promiscuous mode
[  498.794714][T18661] cgroup: noprefix used incorrectly
[  498.851844][T18665] vlan2: entered promiscuous mode
[  498.853588][T18665] bridge0: entered promiscuous mode
[  498.855421][T18665] vlan2: entered allmulticast mode
[  498.857028][T18665] bridge0: entered allmulticast mode
[  498.873180][T18665] bridge_slave_0: left allmulticast mode
[  498.875000][T18665] bridge_slave_0: left promiscuous mode
[  498.877092][T18665] bridge0: port 1(bridge_slave_0) entered disabled state
[  498.881767][T18665] bridge_slave_1: left allmulticast mode
[  498.886622][T18665] bridge_slave_1: left promiscuous mode
[  498.888655][T18665] bridge0: port 2(bridge_slave_1) entered disabled state
[  498.900179][T18665] bond0: (slave bond_slave_0): Releasing backup interface
[  498.907923][T18665] bond0: (slave bond_slave_1): Releasing backup interface
[  498.915916][T18665] team0: Port device team_slave_0 removed
[  498.921649][T18665] team0: Port device team_slave_1 removed
[  498.930825][T18665] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  498.935528][T18665] batman_adv: batadv0: Removing interface: batadv_slave_0
[  498.939920][T18665] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  498.945936][T18665] batman_adv: batadv0: Removing interface: batadv_slave_1
[  498.956739][T18665] bond0: (slave wlan1): Releasing backup interface
[  498.991494][T18665] batadv1: left allmulticast mode
[  498.996449][T18665] batadv1: left promiscuous mode
[  498.998841][T18665] bridge0: port 3(batadv1) entered disabled state
[  499.449856][T18686] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5164'.
[  499.525802][T18690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5166'.
[  500.587092][ T5898] libceph: connect (1)[c::]:6789 error -101
[  500.589441][ T5898] libceph: mon0 (1)[c::]:6789 connect error
[  500.858643][ T5898] libceph: connect (1)[c::]:6789 error -101
[  500.861399][ T5898] libceph: mon0 (1)[c::]:6789 connect error
[  501.374580][ T5913] libceph: connect (1)[c::]:6789 error -101
[  501.377676][ T5913] libceph: mon0 (1)[c::]:6789 connect error
[  501.393692][T18741] ceph: No mds server is up or the cluster is laggy
[  502.438317][T18825] overlayfs: failed to clone upperpath
[  502.546234][ T5858] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  503.680072][T18874] IPv6: NLM_F_REPLACE set, but no existing node found!
[  505.525658][T18937] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5276'.
[  505.736281][T18949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5281'.
[  506.144438][T18966] netlink: 'syz.3.5289': attribute type 5 has an invalid length.
[  506.154371][T18966] batman_adv: batadv0: Adding interface: vxlan0
[  506.156352][T18966] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  506.167492][T18966] batman_adv: batadv0: Interface activated: vxlan0
[  506.965767][T19013] overlayfs: failed to clone upperpath
[  507.074631][T19017] netlink: 'syz.4.5313': attribute type 30 has an invalid length.
[  507.077797][T19017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5313'.
[  507.094908][T19017] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  508.642295][T19083] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5344'.
[  509.747887][T19133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5366'.
[  510.454839][T19166] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5380'.
[  512.322557][T19265] netlink: 'syz.5.5427': attribute type 29 has an invalid length.
[  512.326615][T19265] netlink: 'syz.5.5427': attribute type 29 has an invalid length.
[  514.563486][T19327] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  515.269815][T19367] netlink: 'syz.5.5470': attribute type 11 has an invalid length.
[  515.346462][T19377] overlayfs: failed to clone upperpath
[  515.424578][T19385] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5480'.
[  515.614372][T19396] netlink: 'syz.5.5485': attribute type 4 has an invalid length.
[  515.617281][T19396] netlink: 244 bytes leftover after parsing attributes in process `syz.5.5485'.
[  516.992545][T19457] openvswitch: netlink: ct_state flags 0000ffff unsupported
[  518.794798][T19506] netlink: 'syz.3.5534': attribute type 10 has an invalid length.
[  518.802255][T19506] bond0: (slave bond_slave_0): Releasing backup interface
[  519.508000][T19527] overlayfs: failed to clone upperpath
[  520.218500][T19554] overlayfs: failed to resolve './cgroup': -2
[  520.607210][ T5858] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  521.182298][T19581] IPVS: stopping master sync thread 14691 ...
[  521.195899][T19582] IPv6: sit1: Disabled Multicast RS
[  521.532000][T19597] netlink: 384 bytes leftover after parsing attributes in process `syz.3.5571'.
[  521.536125][T19597] netlink: 'syz.3.5571': attribute type 2 has an invalid length.
[  522.757643][T19636] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  522.767438][T19636] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  523.512999][T19673] futex_wake_op: syz.4.5611 tries to shift op by -1; fix this program
[  523.592073][T19680] delete_channel: no stack
[  523.707550][T19686] veth0_to_bond: entered allmulticast mode
[  523.712951][T19686] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  523.944505][T19698] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5623'.
[  523.948056][T19698] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5623'.
[  523.952734][T19698] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5623'.
[  524.216488][T19708] netlink: 'syz.4.5628': attribute type 1 has an invalid length.
[  524.229504][T19708] netlink: 'syz.4.5628': attribute type 2 has an invalid length.
[  524.242217][T19708] netlink: 'syz.4.5628': attribute type 1 has an invalid length.
[  524.254035][T19708] netlink: 'syz.4.5628': attribute type 2 has an invalid length.
[  524.316102][T19712] netlink: 'syz.4.5630': attribute type 4 has an invalid length.
[  525.107096][T19746] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5647'.
[  525.114998][T19746] tc_dump_action: action bad kind
[  526.354314][T19824] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5682'.
[  526.357905][T19824] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5682'.
[  526.405895][T19826] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5683'.
[  526.475834][   T33] kauditd_printk_skb: 23 callbacks suppressed
[  526.475849][   T33] audit: type=1326 audit(1755250801.119:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19788 comm="syz.4.5666" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733018ebe9 code=0x7fc00000
[  526.496042][   T33] audit: type=1326 audit(1755250801.119:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19788 comm="syz.4.5666" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f733018ebe9 code=0x7fc00000
[  526.509284][   T33] audit: type=1326 audit(1755250801.119:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19788 comm="syz.4.5666" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733018ebe9 code=0x7fc00000
[  526.528373][   T33] audit: type=1326 audit(1755250801.119:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19788 comm="syz.4.5666" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733018ebe9 code=0x7fc00000
[  526.756245][T19842] IPVS: ip_vs_add_dest(): server weight less than zero
[  527.143255][T19880] hsr0: entered promiscuous mode
[  527.146115][T19880] macsec1: entered allmulticast mode
[  527.148244][T19880] hsr0: entered allmulticast mode
[  527.154258][T19880] hsr_slave_0: entered allmulticast mode
[  527.157992][T19880] hsr_slave_1: entered allmulticast mode
[  527.165216][T19880] hsr0: left allmulticast mode
[  527.167147][T19880] hsr_slave_0: left allmulticast mode
[  527.172211][T19880] hsr_slave_1: left allmulticast mode
[  527.582823][T19908] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.5720'.
[  527.895587][T19942] netlink: 'syz.4.5736': attribute type 10 has an invalid length.
[  527.898812][T19942] team0: Device dummy0 is up. Set it down before adding it as a team port
[  529.367205][T20010] overlayfs: failed to clone upperpath
[  529.474900][   T33] audit: type=1800 audit(1755250804.119:349): pid=20014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5771" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  529.894905][T20048] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  530.482886][T20069] netlink: 'syz.4.5796': attribute type 7 has an invalid length.
[  530.788933][T20095] tipc: Failed to remove unknown binding: 66,1,1/10922666:2913006373/2913006375
[  531.920356][T20137] overlayfs: failed to clone upperpath
[  534.707000][T20226] netlink: 'syz.4.5869': attribute type 1 has an invalid length.
[  535.453852][T20248] fuse: Bad value for 'user_id'
[  535.455508][T20248] fuse: Bad value for 'user_id'
[  535.935491][T20275] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5892'.
[  536.639735][T20307] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5907'.
[  537.227070][T20302] orangefs_mount: mount request failed with -4
[  537.324682][T20328] overlayfs: failed to clone upperpath
[  537.609954][T20347] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  537.728982][T20357] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5930'.
[  537.739661][T20357] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5930'.
[  538.921488][ T5858] Bluetooth: hci0: unexpected event for opcode 0x0407
[  539.591062][T20421] Invalid option length (0) for dns_resolver key
[  542.650931][T20518] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5996'.
[  543.546435][T20562] syz_tun: entered promiscuous mode
[  543.569403][T20562] syz_tun: left promiscuous mode
[  544.011416][T20591] ip6tnl0: Caught tx_queue_len zero misconfig
[  544.075820][T20597] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6031'.
[  544.170486][T20606] bridge_slave_0: default FDB implementation only supports local addresses
[  544.906505][T20658] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6063'.
[  545.087708][   T33] audit: type=1326 audit(1755251075.728:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20671 comm="syz.4.6069" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733018ebe9 code=0x7ffc0000
[  545.097361][   T33] audit: type=1326 audit(1755251075.738:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20671 comm="syz.4.6069" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733018ebe9 code=0x7ffc0000
[  545.116095][   T33] audit: type=1326 audit(1755251075.738:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20671 comm="syz.4.6069" exe="/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f733018ebe9 code=0x7ffc0000
[  545.125697][   T33] audit: type=1326 audit(1755251075.738:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20671 comm="syz.4.6069" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733018ebe9 code=0x7ffc0000
[  545.135442][   T33] audit: type=1326 audit(1755251075.738:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20671 comm="syz.4.6069" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733018ebe9 code=0x7ffc0000
[  545.142880][   T33] audit: type=1326 audit(1755251075.738:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20671 comm="syz.4.6069" exe="/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f733018ebe9 code=0x7ffc0000
[  545.154619][   T33] audit: type=1326 audit(1755251075.738:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20671 comm="syz.4.6069" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733018ebe9 code=0x7ffc0000
[  545.162079][   T33] audit: type=1326 audit(1755251075.738:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20671 comm="syz.4.6069" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733018ebe9 code=0x7ffc0000
[  545.973453][T20724] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095
[  546.835013][T20759] smc: removing net device bond0 with user defined pnetid SYZ2
[  546.858952][T20759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  546.865443][T20759] bond0 (unregistering): (slave syz_tun): Releasing backup interface
[  546.872135][T20759] bond0 (unregistering): (slave bond3): Releasing backup interface
[  546.877792][T20759] bond0 (unregistering): Released all slaves
[  547.082795][T20769] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  547.088507][T20769] netlink: 'syz.4.6109': attribute type 10 has an invalid length.
[  547.113078][T20769] bond0: (slave bridge0): Enslaving as an active interface with a down link
[  547.251943][T20775] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6112'.
[  548.154786][T20818] overlayfs: failed to clone lowerpath
[  549.027618][T20883] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20000
[  550.795333][T20921] pvfs2: Unexpected value for 'acl'
[  551.403514][T20963] netlink: 'syz.5.6201': attribute type 29 has an invalid length.
[  551.408129][T20963] netlink: 'syz.5.6201': attribute type 29 has an invalid length.
[  551.412751][T20963] netlink: 500 bytes leftover after parsing attributes in process `syz.5.6201'.
[  552.328716][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  552.370887][T21014] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6225'.
[  553.519292][T21037] netlink: 'syz.4.6235': attribute type 2 has an invalid length.
[  553.521680][T21037] netlink: 1192 bytes leftover after parsing attributes in process `syz.4.6235'.
[  554.425414][T21053] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.584318][T21063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6245'.
[  555.527110][T21092] fuse: Bad value for 'fd'
[  555.884378][T21112] veth0_to_bridge: entered promiscuous mode
[  555.886993][T21111] veth0_to_bridge: left promiscuous mode
[  557.905343][T21255] netlink: 276 bytes leftover after parsing attributes in process `syz.4.6337'.
[  557.909025][T21255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6337'.
[  557.913991][T21255] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6337'.
[  558.233590][T21273] sctp: [Deprecated]: syz.5.6346 (pid 21273) Use of struct sctp_assoc_value in delayed_ack socket option.
[  558.233590][T21273] Use struct sctp_sack_info instead
[  559.855751][T21349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6380'.
[  559.858505][T21349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6380'.
[  560.191222][T21368] netlink: 'syz.5.6388': attribute type 21 has an invalid length.
[  560.253879][T21368] netlink: 144 bytes leftover after parsing attributes in process `syz.5.6388'.
[  560.835765][T21407] PKCS8: Unsupported PKCS#8 version
[  560.920005][ T5879] libceph: connect (1)[c::]:6789 error -101
[  560.928036][ T5879] libceph: mon0 (1)[c::]:6789 connect error
[  560.988761][T21411] ceph: No mds server is up or the cluster is laggy
[  562.728483][T21464] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6433'.
[  565.885985][T21556] overlayfs: failed to clone upperpath
[  566.207269][T21568] hsr0: left promiscuous mode
[  566.294470][T16006] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  566.297909][T16006] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  566.306358][T16006] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  566.309838][T16006] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  567.043619][T21602] overlayfs: failed to clone upperpath
[  572.301401][T21735] veth4: entered promiscuous mode
[  572.303749][T21735] veth4: entered allmulticast mode
[  572.526000][T21747] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6557'.
[  572.538886][T21747] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  573.709810][T21798] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6581'.
[  575.647308][T21865] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6611'.
[  575.683578][T21865] macvtap1: entered promiscuous mode
[  575.685911][T21865] vlan0: entered promiscuous mode
[  575.690684][T21865] macvtap1: entered allmulticast mode
[  575.692321][T21865] vlan0: entered allmulticast mode
[  575.697894][T21865] veth0_vlan: entered allmulticast mode
[  576.116670][T21892] veth0: entered promiscuous mode
[  576.134296][T21892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6623'.
[  576.232981][T21892] veth0 (unregistering): left promiscuous mode
[  576.358176][T21898] netlink: 'syz.4.6627': attribute type 32 has an invalid length.
[  576.535309][T21915] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6636'.
[  577.576370][T21980] overlayfs: failed to clone upperpath
[  577.973410][T22008] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6679'.
[  577.977079][T22008] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  577.980229][T22008] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  578.954774][T22038] netlink: 'syz.4.6693': attribute type 30 has an invalid length.
[  580.962015][T22120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6729'.
[  580.965942][T22120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6729'.
[  580.992119][T22124] sch_fq: defrate 4294967295 ignored.
[  581.154038][T22136] netlink: 'syz.5.6737': attribute type 1 has an invalid length.
[  582.253502][T22183] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6760'.
[  583.315821][T22205] netlink: 'syz.5.6770': attribute type 11 has an invalid length.
[  583.319398][T22205] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.6770'.
[  583.362816][T22209] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6772'.
[  583.366500][T22209] netlink: 'syz.5.6772': attribute type 6 has an invalid length.
[  583.373391][T22209] netlink: 'syz.5.6772': attribute type 5 has an invalid length.
[  583.378204][T22209] netlink: 'syz.5.6772': attribute type 4 has an invalid length.
[  584.246514][T22243] overlayfs: failed to clone lowerpath
[  584.343162][T22249] netlink: 'syz.5.6792': attribute type 83 has an invalid length.
[  584.536120][T22251] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6793'.
[  584.628193][T22262] syz_tun: entered allmulticast mode
[  584.635313][T22261] syz_tun: left allmulticast mode
[  584.741603][T22265] netlink: 'syz.3.6800': attribute type 10 has an invalid length.
[  585.271199][ T5858] Bluetooth: hci0: unexpected event for opcode 0x0c13
[  586.105960][T22344] sctp: [Deprecated]: syz.4.6837 (pid 22344) Use of int in max_burst socket option.
[  586.105960][T22344] Use struct sctp_assoc_value instead
[  586.454847][T22378] netlink: 'syz.3.6854': attribute type 3 has an invalid length.
[  586.885009][T22402] netlink: 'syz.3.6866': attribute type 298 has an invalid length.
[  587.470347][T22420] Dead loop on virtual device ip6_vti0, fix it urgently!
[  588.365725][T22459] netlink: 'syz.3.6891': attribute type 21 has an invalid length.
[  588.485757][T22467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6895'.
[  590.106933][T22522] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6921'.
[  590.114908][T22522] netlink: 'syz.5.6921': attribute type 20 has an invalid length.
[  590.117861][T22522] netlink: 'syz.5.6921': attribute type 21 has an invalid length.
[  591.830296][T22616] overlayfs: failed to clone upperpath
[  592.113446][T22625] ==================================================================
[  592.116277][T22625] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  592.119252][T22625] Read of size 2 at addr ffff888033b4b2c2 by task syz.3.6970/22625
[  592.122996][T22625] 
[  592.124338][T22625] CPU: 1 UID: 0 PID: 22625 Comm: syz.3.6970 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  592.124361][T22625] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  592.124371][T22625] Call Trace:
[  592.124380][T22625]  <TASK>
[  592.124388][T22625]  dump_stack_lvl+0x189/0x250
[  592.124409][T22625]  ? __kasan_check_byte+0x12/0x40
[  592.124432][T22625]  ? __pfx_dump_stack_lvl+0x10/0x10
[  592.124449][T22625]  ? lock_release+0x4b/0x3e0
[  592.124472][T22625]  ? __virt_addr_valid+0x4a5/0x5c0
[  592.124491][T22625]  print_report+0xca/0x240
[  592.124505][T22625]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  592.124526][T22625]  kasan_report+0x118/0x150
[  592.124547][T22625]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  592.124572][T22625]  __xfrm_state_lookup+0x6ad/0x8d0
[  592.124597][T22625]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  592.124648][T22625]  ? xfrm_state_lookup+0x45/0x1e0
[  592.124664][T22625]  xfrm_state_lookup+0x11e/0x1e0
[  592.124682][T22625]  pfkey_delete+0x357/0x6d0
[  592.124706][T22625]  ? __pfx_pfkey_delete+0x10/0x10
[  592.124725][T22625]  ? kmem_cache_free+0x18f/0x400
[  592.124749][T22625]  pfkey_sendmsg+0xbfe/0x1090
[  592.124775][T22625]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  592.124804][T22625]  ? aa_sock_msg_perm+0xf1/0x1d0
[  592.124826][T22625]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  592.124842][T22625]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  592.124862][T22625]  __sock_sendmsg+0x21c/0x270
[  592.124881][T22625]  ____sys_sendmsg+0x505/0x830
[  592.124904][T22625]  ? __pfx_____sys_sendmsg+0x10/0x10
[  592.124921][T22625]  ? import_iovec+0x74/0xa0
[  592.124939][T22625]  ___sys_sendmsg+0x21f/0x2a0
[  592.124955][T22625]  ? __pfx____sys_sendmsg+0x10/0x10
[  592.124983][T22625]  ? __fget_files+0x2a/0x420
[  592.124995][T22625]  ? __fget_files+0x3a0/0x420
[  592.125012][T22625]  __x64_sys_sendmsg+0x19b/0x260
[  592.125027][T22625]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  592.125044][T22625]  ? rcu_is_watching+0x15/0xb0
[  592.125060][T22625]  ? do_syscall_64+0xbe/0x3b0
[  592.125082][T22625]  do_syscall_64+0xfa/0x3b0
[  592.125100][T22625]  ? lockdep_hardirqs_on+0x9c/0x150
[  592.125118][T22625]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.125133][T22625]  ? exc_page_fault+0x9f/0xf0
[  592.125150][T22625]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.125165][T22625] RIP: 0033:0x7fb17398ebe9
[  592.125179][T22625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  592.125192][T22625] RSP: 002b:00007fb17471b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  592.125208][T22625] RAX: ffffffffffffffda RBX: 00007fb173bb5fa0 RCX: 00007fb17398ebe9
[  592.125220][T22625] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  592.125230][T22625] RBP: 00007fb173a11e19 R08: 0000000000000000 R09: 0000000000000000
[  592.125239][T22625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  592.125249][T22625] R13: 00007fb173bb6038 R14: 00007fb173bb5fa0 R15: 00007ffcba810688
[  592.125266][T22625]  </TASK>
[  592.125271][T22625] 
[  592.229184][T22625] Allocated by task 19292:
[  592.230860][T22625]  kasan_save_track+0x3e/0x80
[  592.232725][T22625]  __kasan_slab_alloc+0x6c/0x80
[  592.234624][T22625]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  592.236737][T22625]  xfrm_state_alloc+0x24/0x2f0
[  592.238576][T22625]  __find_acq_core+0x8a7/0x1c00
[  592.240508][T22625]  xfrm_find_acq+0x78/0xa0
[  592.242250][T22625]  xfrm_alloc_userspi+0x6b3/0xc90
[  592.244266][T22625]  xfrm_user_rcv_msg+0x7a3/0xab0
[  592.246192][T22625]  netlink_rcv_skb+0x208/0x470
[  592.248058][T22625]  xfrm_netlink_rcv+0x79/0x90
[  592.249895][T22625]  netlink_unicast+0x82f/0x9e0
[  592.251760][T22625]  netlink_sendmsg+0x805/0xb30
[  592.253567][T22625]  __sock_sendmsg+0x21c/0x270
[  592.255405][T22625]  ____sys_sendmsg+0x505/0x830
[  592.257229][T22625]  ___sys_sendmsg+0x21f/0x2a0
[  592.259097][T22625]  __x64_sys_sendmsg+0x19b/0x260
[  592.260988][T22625]  do_syscall_64+0xfa/0x3b0
[  592.262737][T22625]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.265073][T22625] 
[  592.266041][T22625] Freed by task 5314:
[  592.267625][T22625]  kasan_save_track+0x3e/0x80
[  592.269505][T22625]  kasan_save_free_info+0x46/0x50
[  592.271501][T22625]  __kasan_slab_free+0x5b/0x80
[  592.273390][T22625]  kmem_cache_free+0x18f/0x400
[  592.274917][T22625]  xfrm_state_gc_task+0x52d/0x6b0
[  592.276384][T22625]  process_scheduled_works+0xae1/0x17b0
[  592.278369][T22625]  worker_thread+0x8a0/0xda0
[  592.280063][T22625]  kthread+0x711/0x8a0
[  592.281437][T22625]  ret_from_fork+0x3fc/0x770
[  592.283156][T22625]  ret_from_fork_asm+0x1a/0x30
[  592.285058][T22625] 
[  592.285989][T22625] The buggy address belongs to the object at ffff888033b4b180
[  592.285989][T22625]  which belongs to the cache xfrm_state of size 928
[  592.291146][T22625] The buggy address is located 322 bytes inside of
[  592.291146][T22625]  freed 928-byte region [ffff888033b4b180, ffff888033b4b520)
[  592.296209][T22625] 
[  592.297130][T22625] The buggy address belongs to the physical page:
[  592.299575][T22625] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888033b49b00 pfn:0x33b48
[  592.303044][T22625] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  592.306176][T22625] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  592.309071][T22625] page_type: f5(slab)
[  592.310455][T22625] raw: 00fff00000000040 ffff888104d47640 dead000000000122 0000000000000000
[  592.313109][T22625] raw: ffff888033b49b00 00000000800e000a 00000000f5000000 0000000000000000
[  592.315850][T22625] head: 00fff00000000040 ffff888104d47640 dead000000000122 0000000000000000
[  592.318939][T22625] head: ffff888033b49b00 00000000800e000a 00000000f5000000 0000000000000000
[  592.321973][T22625] head: 00fff00000000002 ffffea0000ced201 00000000ffffffff 00000000ffffffff
[  592.325023][T22625] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  592.328079][T22625] page dumped because: kasan: bad access detected
[  592.330314][T22625] page_owner tracks the page as allocated
[  592.332216][T22625] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8517, tgid 8516 (syz.3.959), ts 158127368042, free_ts 157574273963
[  592.338362][T22625]  post_alloc_hook+0x240/0x2a0
[  592.340151][T22625]  get_page_from_freelist+0x21e4/0x22c0
[  592.342106][T22625]  __alloc_frozen_pages_noprof+0x181/0x370
[  592.344090][T22625]  alloc_pages_mpol+0x232/0x4a0
[  592.345859][T22625]  allocate_slab+0x8a/0x370
[  592.347437][T22625]  ___slab_alloc+0xbeb/0x1410
[  592.349343][T22625]  kmem_cache_alloc_noprof+0x283/0x3c0
[  592.351429][T22625]  xfrm_state_alloc+0x24/0x2f0
[  592.352984][T22625]  xfrm_add_sa+0x17d1/0x4070
[  592.354482][T22625]  xfrm_user_rcv_msg+0x7a3/0xab0
[  592.355883][T22625]  netlink_rcv_skb+0x208/0x470
[  592.357325][T22625]  xfrm_netlink_rcv+0x79/0x90
[  592.358781][T22625]  netlink_unicast+0x82f/0x9e0
[  592.360419][T22625]  netlink_sendmsg+0x805/0xb30
[  592.362029][T22625]  __sock_sendmsg+0x21c/0x270
[  592.363864][T22625]  ____sys_sendmsg+0x505/0x830
[  592.365728][T22625] page last free pid 8493 tgid 8493 stack trace:
[  592.367996][T22625]  __free_frozen_pages+0xbc4/0xd30
[  592.369456][T22625]  free_large_kmalloc+0x13a/0x1f0
[  592.371238][T22625]  bch2_trans_put+0xb8b/0x1220
[  592.372861][T22625]  bch2_moving_ctxt_exit+0x27f/0x340
[  592.374885][T22625]  bch2_copygc_thread+0xd58/0xe00
[  592.376789][T22625]  kthread+0x711/0x8a0
[  592.378383][T22625]  ret_from_fork+0x3fc/0x770
[  592.379887][T22625]  ret_from_fork_asm+0x1a/0x30
[  592.381377][T22625] 
[  592.382144][T22625] Memory state around the buggy address:
[  592.383884][T22625]  ffff888033b4b180: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  592.386351][T22625]  ffff888033b4b200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  592.389402][T22625] >ffff888033b4b280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  592.392192][T22625]                                            ^
[  592.394571][T22625]  ffff888033b4b300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  592.397675][T22625]  ffff888033b4b380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  592.400751][T22625] ==================================================================
[  592.419927][T22625] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  592.422457][T22625] CPU: 1 UID: 0 PID: 22625 Comm: syz.3.6970 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  592.427249][T22625] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  592.431118][T22625] Call Trace:
[  592.432243][T22625]  <TASK>
[  592.433186][T22625]  dump_stack_lvl+0x99/0x250
[  592.434655][T22625]  ? __asan_memcpy+0x40/0x70
[  592.436075][T22625]  ? __pfx_dump_stack_lvl+0x10/0x10
[  592.438084][T22625]  ? __pfx__printk+0x10/0x10
[  592.439933][T22625]  vpanic+0x281/0x750
[  592.441514][T22625]  ? preempt_schedule+0xae/0xc0
[  592.443405][T22625]  ? __pfx_vpanic+0x10/0x10
[  592.445173][T22625]  ? preempt_schedule_common+0x83/0xd0
[  592.447297][T22625]  ? preempt_schedule+0xae/0xc0
[  592.449161][T22625]  ? __pfx_preempt_schedule+0x10/0x10
[  592.451012][T22625]  panic+0xb9/0xc0
[  592.452379][T22625]  ? __pfx_panic+0x10/0x10
[  592.454114][T22625]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  592.456403][T22625]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  592.458271][T22625]  check_panic_on_warn+0x89/0xb0
[  592.459826][T22625]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  592.461431][T22625]  end_report+0x78/0x160
[  592.462749][T22625]  kasan_report+0x129/0x150
[  592.464465][T22625]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  592.466520][T22625]  __xfrm_state_lookup+0x6ad/0x8d0
[  592.468332][T22625]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  592.470464][T22625]  ? xfrm_state_lookup+0x45/0x1e0
[  592.472203][T22625]  xfrm_state_lookup+0x11e/0x1e0
[  592.473723][T22625]  pfkey_delete+0x357/0x6d0
[  592.475187][T22625]  ? __pfx_pfkey_delete+0x10/0x10
[  592.477201][T22625]  ? kmem_cache_free+0x18f/0x400
[  592.479176][T22625]  pfkey_sendmsg+0xbfe/0x1090
[  592.480998][T22625]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  592.482889][T22625]  ? aa_sock_msg_perm+0xf1/0x1d0
[  592.484438][T22625]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  592.486145][T22625]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  592.487974][T22625]  __sock_sendmsg+0x21c/0x270
[  592.489775][T22625]  ____sys_sendmsg+0x505/0x830
[  592.491569][T22625]  ? __pfx_____sys_sendmsg+0x10/0x10
[  592.493648][T22625]  ? import_iovec+0x74/0xa0
[  592.495382][T22625]  ___sys_sendmsg+0x21f/0x2a0
[  592.497149][T22625]  ? __pfx____sys_sendmsg+0x10/0x10
[  592.499070][T22625]  ? __fget_files+0x2a/0x420
[  592.500831][T22625]  ? __fget_files+0x3a0/0x420
[  592.502334][T22625]  __x64_sys_sendmsg+0x19b/0x260
[  592.503910][T22625]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  592.505660][T22625]  ? rcu_is_watching+0x15/0xb0
[  592.507221][T22625]  ? do_syscall_64+0xbe/0x3b0
[  592.508843][T22625]  do_syscall_64+0xfa/0x3b0
[  592.510382][T22625]  ? lockdep_hardirqs_on+0x9c/0x150
[  592.512448][T22625]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.514884][T22625]  ? exc_page_fault+0x9f/0xf0
[  592.516708][T22625]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.518652][T22625] RIP: 0033:0x7fb17398ebe9
[  592.520417][T22625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  592.527243][T22625] RSP: 002b:00007fb17471b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  592.529897][T22625] RAX: ffffffffffffffda RBX: 00007fb173bb5fa0 RCX: 00007fb17398ebe9
[  592.532612][T22625] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  592.535419][T22625] RBP: 00007fb173a11e19 R08: 0000000000000000 R09: 0000000000000000
[  592.538103][T22625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  592.540793][T22625] R13: 00007fb173bb6038 R14: 00007fb173bb5fa0 R15: 00007ffcba810688
[  592.543212][T22625]  </TASK>
[  592.544820][T22625] Kernel Offset: disabled
[  592.546392][T22625] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:19:46  Registers:
info registers vcpu 0

CPU#0
RAX=512734b57de3dd00 RBX=ffffffff81968308 RCX=512734b57de3dd00 RDX=0000000000000001
RSI=ffffffff8d9b6dc6 RDI=ffffffff8be33400 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa37e30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7943f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555597a8808 CR3=000000003df7c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f5251812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000054 RBX=0000000000000054 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000015bf RDI=00000000000015c0 RBP=00000000000003f8 RSP=ffffc90003d4ee30
R8 =ffff888107810237 R9 =1ffff11020f02046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af98d0 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb17471b6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000000 CR3=00000001124ca000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fb173b87498 00007fb173b87470 XMM03=00007fb173b874a8 00007fb173b874a0
XMM04=00007fb1746ed100 00007fb173b87460 XMM05=00007fb173b87478 00007fb173b874c0
XMM06=00007fb173b874b8 00007fb173b874b0 XMM07=00007fb173b874a8 00007fb173b874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fb173a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
