last executing test programs:

1m16.909641691s ago: executing program 2 (id=1872):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000040000000100000080"], 0x1b)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000690300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)

1m16.906967306s ago: executing program 2 (id=1875):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
getrandom(&(0x7f0000000200)=""/147, 0x5720c756d74f1ccb, 0x3)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0xfffd, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2b}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x4000000000000, 0x200000000000000}}}, 0xb8}}, 0x2c000010)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x300, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x7fffffff}}}, 0xb8}}, 0x80)

1m16.154302058s ago: executing program 2 (id=1887):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x48)
r0 = io_uring_setup(0x2c4c, &(0x7f00000000c0)={0x0, 0x1, 0x1000, 0xfffffffd, 0x4})
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1)

1m16.083388667s ago: executing program 2 (id=1889):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=default,noadinicb,gid=forget,gid=ignore,nostrict,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c616e63686f723d30303030000088be0900303030303030303030312c7569643d666f726765742c00215e8c2e42462f3ab5e1f7c0527abbb422be9178aa60681964adb069ae876c4a599d560075ac47c0de1a9bb9146af6433efdcdac853a8e8f16d6bad90ecce0a1fab46f48331e6b3c325c08df3c334e4da28067a30b3b1dc64bf692c712fc273bc1702008f563765c6f3e67d97e1369973c2a87f0ecca7320819863179fb85e394a8cf1d62c70d8306633b6958ebf998a0685bc5cdd1f97291328743add4c867115fae1082f8faf482e15eb939968"], 0xfd, 0xc34, &(0x7f0000001080)="$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")
symlink(&(0x7f0000000400)='./bus\x00', &(0x7f00000000c0)='./file0\x00')
creat(&(0x7f0000000300)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101, 0x1, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "806c64c97808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4, 0x400000]})
lstat(&(0x7f0000000280)='./file0\x00', 0x0)

1m15.926031964s ago: executing program 2 (id=1892):
socket(0x26, 0x3, 0x0)

1m15.457484956s ago: executing program 2 (id=1896):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x1]}, 0x8, 0x0)
r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x4, 0x312}, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100})
io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0)
signalfd4(r0, &(0x7f0000000040)={[0x2]}, 0x8, 0x800)

1m15.133286554s ago: executing program 32 (id=1896):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x1]}, 0x8, 0x0)
r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x4, 0x312}, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100})
io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0)
signalfd4(r0, &(0x7f0000000040)={[0x2]}, 0x8, 0x800)

19.391065747s ago: executing program 3 (id=2704):
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000400)='./file0\x00', 0x800000, &(0x7f0000000040)=ANY=[@ANYBLOB="00fbfddc0bd5e8dee8d286b20b62086ce9b81b1660031b9dcba026117a79eba4a32d50e5c7b14c8e3f4d"], 0x1, 0x3ea, &(0x7f0000000c40)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents64(r0, &(0x7f0000000080)=""/34, 0x22)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x9, 0x0, 0x0, @binary="38eac21a"}]}, 0x1c}}, 0x20000000)

18.41057782s ago: executing program 3 (id=2719):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000001c0))

18.135434119s ago: executing program 3 (id=2725):
openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

18.044711325s ago: executing program 3 (id=2726):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1200400, &(0x7f0000000000)=ANY=[], 0xbe, 0x1c0, &(0x7f0000000500)="$eJzs28uO0lAcx/FfKQXE+23jysSFbgRFN+7kAXwBdwQqIRY14gZiYnwU34Q38QUg0d2sppOWQlqmwBkYKJfvJ5mZfzj8zjlteqaniwrAyboX/rZkyQkr3/d/PZX08YOkfMaTA7BVvs59AKfK/pf1DABkY1y3w33A0JL+/v/ZHEU/juH+YVzPTYqSpFi+YJr/bYV/n+SlUSxfjLpcuX/5M8k/VzJ/44rjl+fy5RU5a5afHP+LZ8n8TUm3JN2WdEfSXUnBmb4v6UHK+K258R8bzh/YRHD1VTbNb9BBsHo+dTz3VVqjvTrvRPnX6c2xfyHD1C8UonzNcL6L8m/WzBejfKX51WultOfW7Bcwkct4/dvSmT+//t+b5/PL1z+AJXr9weeG57nfe8HNNixmnywqnLAoRj0s+3Jwd4x9IuMhKDItSilNTuJq2XZR2M2RBrevfTjhhsV01e5yLADHqvqj+63a6w9edrqNttt2v9Tevps+dofP5dWFT+cADlxycw4AAAAAAAAAAAAAAA7RQ0mP1gmavuAHAAAAYG9c7ztDjqTLTVkfIwAAAAAAAAAAAAAAAAAAAHAsLgIAAP//eUA+uA==")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000ac0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

17.763300729s ago: executing program 3 (id=2729):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000340)=@in={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000000c0)="83", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x24000000)
shutdown(r0, 0x1)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in6={{0xa, 0x4e22, 0x7f, @empty, 0x7f}}, 0x6, 0x6}, 0x90)

17.321054264s ago: executing program 3 (id=2731):
r0 = socket$inet6(0xa, 0x80002, 0x0)
capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3})
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0xc0)

17.177649358s ago: executing program 33 (id=2731):
r0 = socket$inet6(0xa, 0x80002, 0x0)
capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3})
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0xc0)

5.836716821s ago: executing program 1 (id=2839):
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000200)={0x7, 0x40200007, 0x0, 0x6, 0x6, 0x7ff})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00'], 0x48)

5.755379571s ago: executing program 1 (id=2840):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000c07850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001140)='ext4_allocate_inode\x00', r0}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x1001, 0x7}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='ext4_allocate_inode\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='ext4_allocate_inode\x00', r4}, 0x10)
close(r1)
close(r5)

5.687390676s ago: executing program 1 (id=2841):
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x3, 0x169, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
signalfd(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
r6 = memfd_create(&(0x7f0000000080), 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_INFO(r7, 0x0, 0x481, &(0x7f0000005fc0), &(0x7f0000006000)=0xc)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
splice(r5, 0x0, r6, 0x0, 0x408cd, 0x0)

4.672436036s ago: executing program 1 (id=2851):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8000, 0x2)

4.558136854s ago: executing program 1 (id=2852):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
mkdir(&(0x7f0000000540)='./file0\x00', 0x108)
chroot(&(0x7f0000000000)='./file0\x00')

4.39032494s ago: executing program 1 (id=2853):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xe, &(0x7f0000000300)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xc0}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.143407703s ago: executing program 34 (id=2853):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xe, &(0x7f0000000300)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xc0}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.689867612s ago: executing program 4 (id=2860):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x84, 0x30, 0xb, 0x0, 0x0, {}, [{0x70, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local}, @TCA_SKBMOD_DMAC={0xa}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0)

1.479587092s ago: executing program 4 (id=2865):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e22, 0x0, @mcast2}, 0x1}, 0x5c)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000400)=0xfe, 0x4)

1.262756227s ago: executing program 4 (id=2866):
syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @empty, @local}}}}, 0x0)

1.158996715s ago: executing program 4 (id=2867):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.158675399s ago: executing program 4 (id=2868):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x0, 0x10, 0x4, 0x3, 0x81, 0x13}, 0xc)

1.15843868s ago: executing program 0 (id=2869):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=0x0], 0x1, 0x552b, &(0x7f0000010800)="$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")

1.060420787s ago: executing program 4 (id=2870):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x8a801, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100))
r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000040)=0x931)

756.437568ms ago: executing program 0 (id=2871):
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
futex(0x0, 0x85, 0x1, 0x0, &(0x7f0000000100)=0x1, 0x0)

753.940789ms ago: executing program 0 (id=2872):
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
io_setup(0x1, &(0x7f0000000b80)=<r0=>0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
io_destroy(r0)
setgid(0x0)

349.934934ms ago: executing program 0 (id=2873):
r0 = socket$kcm(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0)

247.422954ms ago: executing program 0 (id=2874):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x5, &(0x7f0000000040)=0x640, 0x4)
sendmmsg$inet(r0, &(0x7f00000002c0)=[{{&(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @broadcast}}}], 0x20}}], 0x1, 0x14)

0s ago: executing program 0 (id=2875):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x701c, 0x700, 0x1, 0x1ef}, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
r7 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3)
ftruncate(r7, 0xffff)
fcntl$addseals(r7, 0x409, 0x7)
r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000100)={r7, 0x0, 0x0, 0x1000})
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x0, {0x414}, 0x1})
io_uring_enter(r3, 0x3f72, 0x74f1, 0xc00000000000000, 0x0, 0x39)

kernel console output (not intermixed with test programs):

755746][ T8145] ext4 filesystem being mounted at /281/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  168.790475][ T5858] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  168.840868][ T8149] (unnamed net_device) (uninitialized): up delay (7) is not a multiple of miimon (3), value rounded to 6 ms
[  168.874169][ T8149] 8021q: adding VLAN 0 to HW filter on device bond1
[  169.177178][   T33] audit: type=1800 audit(1759034554.551:26): pid=8160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.896" name="/newroot/286/file0" dev="tmpfs" ino=1522 res=0 errno=0
[  169.302244][ T8166] openvswitch: netlink: Missing key (keys=40, expected=100)
[  169.574606][ T8176] loop1: detected capacity change from 0 to 1764
[  169.824927][ T8183] loop0: detected capacity change from 0 to 4096
[  170.154686][ T8199] loop2: detected capacity change from 0 to 1024
[  170.190608][ T8199] EXT4-fs: Ignoring removed nobh option
[  170.192463][ T8199] EXT4-fs: Ignoring removed bh option
[  170.231144][ T8199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.264941][ T8186] loop1: detected capacity change from 0 to 32768
[  170.265076][ T5865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.281480][ T8186] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  170.360713][ T8186] XFS (loop1): Ending clean mount
[  170.365912][ T8186] XFS (loop1): Quotacheck needed: Please wait.
[  170.375639][ T8217] loop0: detected capacity change from 0 to 512
[  170.415596][ T8186] XFS (loop1): Quotacheck: Done.
[  170.454065][ T5858] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  170.613816][ T8226] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0
[  170.641623][ T8225] IPVS: stopping backup sync thread 8226 ...
[  171.019742][ T8230] loop1: detected capacity change from 0 to 32768
[  171.025444][ T8230] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section replicas_v0: duplicate replicas entry journal: 1/1 [0]
[  171.025444][ T8230] replicas_v0 (size 24):
[  171.025444][ T8230] journal: 1 [0] journal: 1 [0] user: 1 [0]
[  171.025444][ T8230] 
[  171.041480][ T8230] bcachefs: bch2_fs_get_tree() error: invalid_sb_replicas
[  171.546554][ T8242] loop2: detected capacity change from 0 to 2048
[  171.575476][ T8242] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  171.601012][ T8242] NILFS (loop2): too large filesystem blocksize: 2 ^ 347668480 KiB
[  172.345330][ T8269] loop0: detected capacity change from 0 to 8
[  172.565720][ T8259] loop1: detected capacity change from 0 to 32768
[  173.080153][ T8285] loop0: detected capacity change from 0 to 764
[  173.085616][ T8285] rock: directory entry would overflow storage
[  173.089646][ T8285] rock: sig=0x4654, size=5, remaining=4
[  173.799362][   T55] block nbd0: Receive control failed (result -32)
[  174.403225][ T8301] netlink: 277 bytes leftover after parsing attributes in process `syz.0.951'.
[  174.970318][ T8303] loop2: detected capacity change from 0 to 131072
[  174.975052][ T8303] F2FS-fs (loop2): Test dummy encryption mode enabled
[  174.980354][ T8303] F2FS-fs (loop2): invalid crc value
[  175.039243][ T8303] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  175.045614][ T8303] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  175.197631][  T973] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  175.368792][  T973] usb 1-1: Using ep0 maxpacket: 8
[  175.373247][  T973] usb 1-1: config 4 has an invalid interface number: 8 but max is 0
[  175.374565][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.376718][  T973] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[  175.389034][  T973] usb 1-1: config 4 has an invalid interface descriptor of length 2, skipping
[  175.392405][  T973] usb 1-1: config 4 has no interface number 0
[  175.394913][  T973] usb 1-1: config 4 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  175.421784][  T973] usb 1-1: New USB device found, idVendor=1199, idProduct=9091, bcdDevice=31.d6
[  175.425656][  T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.437231][  T973] usb 1-1: Product: syz
[  175.439092][  T973] usb 1-1: Manufacturer: syz
[  175.441056][  T973] usb 1-1: SerialNumber: syz
[  175.677199][  T973] usb 1-1: USB disconnect, device number 25
[  175.786917][ T8326] sp0: Synchronizing with TNC
[  176.096129][ T8331] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  176.545222][ T8340] netlink: 'syz.0.966': attribute type 23 has an invalid length.
[  176.651045][ T8342] loop2: detected capacity change from 0 to 1764
[  176.860762][ T8352] loop2: detected capacity change from 0 to 512
[  176.866234][ T8352] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  176.933186][ T8352] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.972: bg 0: block 104: invalid block bitmap
[  176.952525][ T8352] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  176.975755][ T8352] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.972: invalid indirect mapped block 1 (level 1)
[  177.000748][ T8352] EXT4-fs (loop2): 1 truncate cleaned up
[  177.009634][ T8352] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  177.099437][   T33] audit: type=1800 audit(1759034562.471:27): pid=8352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.972" name="file1" dev="loop2" ino=18 res=0 errno=0
[  177.194063][ T5865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.378000][ T8373] netlink: 20 bytes leftover after parsing attributes in process `syz.1.981'.
[  177.527734][ T8383] netlink: 'syz.2.986': attribute type 1 has an invalid length.
[  177.632307][   T24] IPVS: starting estimator thread 0...
[  177.717243][ T8391] IPVS: using max 59 ests per chain, 141600 per kthread
[  177.790228][ T8392] loop2: detected capacity change from 0 to 32768
[  177.905153][  T973] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  178.050997][   T33] audit: type=1800 audit(1759034563.411:28): pid=8400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.990" name="file1" dev="loop2" ino=8 res=0 errno=0
[  178.139991][  T973] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  178.164082][  T973] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  178.172909][  T973] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  178.179989][  T973] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  178.192001][  T973] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  178.203383][  T973] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  178.211258][  T973] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  178.219820][  T973] usb 2-1: Product: syz
[  178.221682][  T973] usb 2-1: Manufacturer: syz
[  178.236889][  T973] cdc_wdm 2-1:1.0: skipping garbage
[  178.239256][  T973] cdc_wdm 2-1:1.0: skipping garbage
[  178.260162][  T973] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  178.263441][  T973] cdc_wdm 2-1:1.0: Unknown control protocol
[  178.460762][ T8411] loop0: detected capacity change from 0 to 4096
[  178.471499][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  178.474069][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  178.477059][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  178.479757][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  178.483611][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  178.486213][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  178.488696][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  178.490920][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  178.493365][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  178.495636][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  178.498093][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  178.500363][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  178.502766][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  178.504907][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  178.507312][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  178.509652][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  178.512279][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  178.514882][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  178.517586][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  178.519866][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  178.527199][  T973] usb 2-1: USB disconnect, device number 17
[  178.529668][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  178.978425][ T8431] loop0: detected capacity change from 0 to 2048
[  179.406528][ T8450] CUSE: unknown device info "KJH+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF"
[  179.414469][ T8450] CUSE: unknown device info "3ܟ,̘"
[  179.416629][ T8450] CUSE: unknown device info "J2SZ !e/J+-na4D|G$5O~q	
[  179.416629][ T8450] fzXSAxjTǔwxRɐQ(hҏj	pVdY0|M?2JIv^R@"
[  179.424243][ T8450] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌EgJ<@c4TMM|"
[  179.428871][ T8450] CUSE: DEVNAME unspecified
[  179.463634][ T8452] loop0: detected capacity change from 0 to 512
[  179.877235][ T8474] netlink: 'syz.0.1023': attribute type 10 has an invalid length.
[  179.900626][ T8474] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.921787][ T8474] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  179.965993][ T5907] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  180.141909][ T5907] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5
[  180.150636][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.166125][ T5907] usb 2-1: config 0 descriptor??
[  180.352400][ T8484] loop2: detected capacity change from 0 to 4096
[  180.363356][ T8484] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  180.371652][ T8484] ntfs3(loop2): $Volume is corrupted.
[  180.556465][ T8488] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  180.564511][  T973] lo speed is unknown, defaulting to 1000
[  180.591960][ T5907] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  180.596050][ T5907] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  180.602246][ T5907] asix 2-1:0.0: probe with driver asix failed with error -71
[  180.612704][ T5907] usb 2-1: USB disconnect, device number 18
[  180.652090][ T8490] openvswitch: netlink: IP tunnel TTL not specified.
[  181.027874][   T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  181.194689][ T8510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1043'.
[  181.209119][ T8510] bridge0: entered promiscuous mode
[  181.211872][ T8510] macsec1: entered allmulticast mode
[  181.214275][ T8510] bridge0: entered allmulticast mode
[  181.221754][ T8510] bridge0: port 3(macsec1) entered blocking state
[  181.225002][ T8510] bridge0: port 3(macsec1) entered disabled state
[  181.235684][ T8510] bridge0: left allmulticast mode
[  181.242360][ T8510] bridge0: left promiscuous mode
[  182.102878][ T8516] netlink: 750 bytes leftover after parsing attributes in process `syz.0.1045'.
[  182.127494][   T10] usb 3-1: Using ep0 maxpacket: 16
[  182.132883][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  182.136580][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  182.142264][   T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0
[  182.145537][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  182.154459][   T10] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  182.158538][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.161906][   T10] usb 3-1: Product: syz
[  182.163675][   T10] usb 3-1: Manufacturer: syz
[  182.165647][   T10] usb 3-1: SerialNumber: syz
[  182.171407][   T10] usb 3-1: config 0 descriptor??
[  182.179192][   T10] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  182.391196][ T8526] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1050'.
[  182.402516][   T10] usb 3-1: USB disconnect, device number 17
[  182.542852][ T8536] loop1: detected capacity change from 0 to 512
[  182.558311][ T8536] msdos: Unknown parameter 'dot'
[  182.588124][ T8536] loop1: detected capacity change from 0 to 1024
[  182.632935][ T8536] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.838335][ T5858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.115667][ T8567] netlink: 'syz.0.1066': attribute type 3 has an invalid length.
[  184.301586][ T8579] loop0: detected capacity change from 0 to 64
[  184.637530][ T8589] loop1: detected capacity change from 0 to 4096
[  184.739865][ T8589] ntfs3(loop1): ino=5, "/" mi_enum_attr
[  184.778480][ T8592] loop0: detected capacity change from 0 to 16
[  184.807930][ T8592] erofs (device loop0): mounted with root inode @ nid 36.
[  186.073511][ T8602] loop1: detected capacity change from 0 to 131072
[  186.103971][ T8602] F2FS-fs (loop1): QUOTA feature is enabled, so ignore qf_name
[  186.210140][ T8602] F2FS-fs (loop1): Bad quota inode 2:2048
[  186.212766][ T8602] F2FS-fs (loop1): Failed to enable quota tracking (type=2, err=-2). Please run fsck to fix.
[  186.217114][ T8602] F2FS-fs (loop1): Cannot turn on quotas: error -2
[  186.219179][ T8602] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  186.234491][ T8602] F2FS-fs (loop1): Mounted with checkpoint version = 1b41e955
[  188.075322][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1086'.
[  188.130969][ T8619] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1087'.
[  188.134569][ T8619] netlink: 'syz.2.1087': attribute type 7 has an invalid length.
[  188.138490][ T8619] netlink: 'syz.2.1087': attribute type 8 has an invalid length.
[  188.143693][ T8619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1087'.
[  189.034754][ T8649] loop1: detected capacity change from 0 to 128
[  189.050857][ T8649] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  189.098126][ T8649] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  189.797265][   T24] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  189.949519][   T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  189.953750][   T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  189.960848][   T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  189.963978][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.966296][   T24] usb 3-1: Product: syz
[  189.968799][   T24] usb 3-1: Manufacturer: syz
[  189.970618][   T24] usb 3-1: SerialNumber: syz
[  190.187600][   T24] usb 3-1: 0:2 : does not exist
[  190.189619][   T24] usb 3-1: unit 0 not found!
[  190.212824][   T24] usb 3-1: USB disconnect, device number 18
[  190.241345][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  191.267513][   T54] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  191.841496][ T8696] sctp: [Deprecated]: syz.1.1122 (pid 8696) Use of struct sctp_assoc_value in delayed_ack socket option.
[  191.841496][ T8696] Use struct sctp_sack_info instead
[  192.045281][ T8704] raw_sendmsg: syz.2.1126 forgot to set AF_INET. Fix it!
[  192.125745][ T8698] loop1: detected capacity change from 0 to 32768
[  192.289625][ T8698] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  192.289694][ T8698]   allowing incompatible features above 0.0: (unknown version)
[  192.289701][ T8698]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  192.305662][ T8698] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  192.309955][ T8698] bcachefs (loop1): initializing new filesystem
[  192.334888][ T8698] bcachefs (loop1): going read-write
[  192.381343][ T8698] bcachefs (loop1): marking superblocks
[  192.406860][ T8698] bcachefs (loop1): initializing freespace
[  192.412704][ T8698] bcachefs (loop1): done initializing freespace
[  192.419279][ T8698] bcachefs (loop1): reading snapshots table
[  192.421395][ T8698] bcachefs (loop1): reading snapshots done
[  192.486698][ T8698] bcachefs (loop1): done starting filesystem
[  192.511773][ T8724] loop2: detected capacity change from 0 to 1024
[  192.531778][ T8724] EXT4-fs: Ignoring removed bh option
[  192.629557][ T8698] bcachefs (loop1): shutdown by ioctl type 1emergency read only at seq 3
[  192.633975][   T10] bcachefs (loop1): going read-only
[  192.643125][   T10] bcachefs (loop1): finished waiting for writes to stop
[  192.644888][ T8724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  192.650272][ T8698] syz.1.1123 (8698) used greatest stack depth: 17448 bytes left
[  192.755546][   T10] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3
[  192.797934][   T10] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  192.828393][   T10] bcachefs (loop1): unclean shutdown complete, journal seq 3
[  192.890364][   T10] bcachefs (loop1): done going read-only, filesystem not clean
[  192.907892][ T5858] bcachefs (loop1): shutting down
[  193.087546][ T5907] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  193.186289][ T5858] bcachefs (loop1): shutdown complete
[  193.300715][ T5907] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  193.304855][ T5907] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  193.351167][ T5907] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  193.354207][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  193.377275][ T5907] usb 3-1: SerialNumber: syz
[  193.647691][ T5907] usb 3-1: 0:2 : does not exist
[  193.652029][ T5907] usb 3-1: unit 5: unexpected type 0x0a
[  193.669529][ T5907] usb 3-1: USB disconnect, device number 19
[  193.686787][ T8732] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1133'.
[  193.704909][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  193.997352][   T24] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  194.162041][   T24] usb 1-1: config 0 has an invalid interface number: 98 but max is 0
[  194.165386][   T24] usb 1-1: config 0 has no interface number 0
[  194.168013][   T24] usb 1-1: config 0 interface 98 has no altsetting 0
[  194.178899][   T24] usb 1-1: New USB device found, idVendor=0711, idProduct=0230, bcdDevice=76.91
[  194.182777][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.186046][   T24] usb 1-1: Product: syz
[  194.191608][ T5865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  194.193336][   T24] usb 1-1: Manufacturer: syz
[  194.212312][   T24] usb 1-1: SerialNumber: syz
[  194.242960][   T24] usb 1-1: config 0 descriptor??
[  194.251058][   T24] mct_u232 1-1:0.98: MCT U232 converter detected
[  194.254695][   T24] mct_u232 ttyUSB0: expected endpoint missing
[  194.324046][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  194.327856][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  194.461453][ T5907] usb 1-1: USB disconnect, device number 26
[  194.466253][ T5907] mct_u232 1-1:0.98: device disconnected
[  194.865396][ T8746] loop1: detected capacity change from 0 to 32768
[  194.878551][ T8746] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1139 (8746)
[  194.912338][ T8746] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  194.916609][ T8746] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  195.142003][ T8746] BTRFS info (device loop1): enabling ssd optimizations
[  195.145019][ T8746] BTRFS info (device loop1): enabling free space tree
[  195.150362][ T8746] BTRFS info (device loop1): use zstd compression, level 3
[  195.185029][   T33] audit: type=1800 audit(1759034580.561:29): pid=8746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1139" name="file1" dev="loop1" ino=260 res=0 errno=0
[  195.218231][ T5920] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  195.470675][ T5858] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  195.556535][ T5907] usb 1-1: new low-speed USB device number 27 using dummy_hcd
[  195.722657][ T5907] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt
[  195.726402][ T5907] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x3 is Bulk; changing to Interrupt
[  195.730651][ T5920] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  195.734253][ T5920] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  195.747221][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.752512][ T5907] usb 1-1: config 1 interface 0 has no altsetting 0
[  195.760851][ T5920] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  195.823784][ T5907] usb 1-1: string descriptor 0 read error: -22
[  195.826423][ T5907] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  195.830840][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.852314][ T5920] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2
[  195.858555][ T8772] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  195.861954][ T8772] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  195.883018][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  195.883120][ T5907] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[  196.019805][ T5907] usb 3-1: USB disconnect, device number 20
[  196.025528][ T8755] delete_channel: no stack
[  196.102107][   T24] usb 1-1: USB disconnect, device number 27
[  196.208101][ T8784] loop1: detected capacity change from 0 to 4096
[  196.925511][ T8809] input: syz1 as /devices/virtual/input/input8
[  196.997784][ T5920] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  197.147256][ T5920] usb 1-1: Using ep0 maxpacket: 8
[  197.153706][ T5920] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  197.157677][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.160822][ T5920] usb 1-1: Product: syz
[  197.162458][ T5920] usb 1-1: Manufacturer: syz
[  197.164162][ T5920] usb 1-1: SerialNumber: syz
[  197.168143][ T5920] usb 1-1: config 0 descriptor??
[  197.172753][ T5920] gspca_main: se401-2.14.0 probing 047d:5003
[  197.277211][  T976] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  197.590652][  T976] usb 3-1: config 0 has an invalid interface number: 9 but max is 0
[  197.593752][  T976] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  197.600302][  T976] usb 3-1: config 0 has no interface number 0
[  197.602922][  T976] usb 3-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8
[  197.606401][  T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.612362][  T976] usb 3-1: config 0 descriptor??
[  197.620524][  T976] rndis_host 3-1:0.9: More than one union descriptor, skipping ...
[  197.624212][  T976] usb 3-1: bad CDC descriptors
[  197.629921][  T976] cdc_acm 3-1:0.9: More than one union descriptor, skipping ...
[  197.896028][ T5907] usb 3-1: USB disconnect, device number 21
[  198.112778][ T8819] loop0: detected capacity change from 0 to 512
[  198.186870][ T5920] gspca_se401: read req failed req 0x06 error -19
[  198.192818][ T5920] usb 1-1: USB disconnect, device number 28
[  198.451599][ T8826] loop1: detected capacity change from 0 to 4096
[  199.177136][ T5920] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  199.327179][ T5920] usb 3-1: Using ep0 maxpacket: 8
[  199.333551][ T5920] usb 3-1: config index 0 descriptor too short (expected 30, got 18)
[  199.340758][ T5920] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  199.344533][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.350048][ T5920] usb 3-1: Product: syz
[  199.351980][ T5920] usb 3-1: Manufacturer: syz
[  199.353914][ T5920] usb 3-1: SerialNumber: syz
[  199.360005][ T5920] usb 3-1: config 0 descriptor??
[  199.365871][ T5920] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  199.371856][ T5920] usb 3-1: setting power ON
[  199.374511][ T5920] dvb-usb: bulk message failed: -22 (2/0)
[  199.397795][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  199.404457][ T5920] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  199.412025][ T5920] usb 3-1: media controller created
[  199.447221][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  199.468681][ T5920] usb 3-1: selecting invalid altsetting 6
[  199.471017][ T5920] usb 3-1: digital interface selection failed (-22)
[  199.473282][ T5920] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  199.478193][ T5920] usb 3-1: setting power OFF
[  199.480330][ T5920] dvb-usb: bulk message failed: -22 (2/0)
[  199.482751][ T5920] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  199.485828][ T5920] (NULL device *): no alternate interface
[  199.515665][ T5920] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  199.589207][  T973] usb 3-1: USB disconnect, device number 22
[  199.713163][ T8855] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1179'.
[  199.725214][ T8855] ksmbd: Unknown IPC event: 0, ignore.
[  199.779846][ T8861] loop0: detected capacity change from 0 to 128
[  199.964155][ T8868] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1185'.
[  199.970917][ T8868] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1185'.
[  200.068672][ T8872] loop1: detected capacity change from 0 to 128
[  200.156758][ T8876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1189'.
[  200.165160][ T8876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1189'.
[  200.189035][ T8876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1189'.
[  200.192314][ T8876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1189'.
[  200.195952][ T8876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1189'.
[  200.201441][ T8876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1189'.
[  200.218543][   T24] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  200.239109][ T8878] loop2: detected capacity change from 0 to 2048
[  200.271959][ T8878] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  200.281230][ T8878] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  200.395110][   T24] usb 1-1: Using ep0 maxpacket: 16
[  200.406253][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  200.412386][   T24] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00
[  200.415991][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.429600][   T24] usb 1-1: config 0 descriptor??
[  200.855005][   T24] greenasia 0003:0E8F:0012.000B: hidraw0: USB HID v0.05 Device [HID 0e8f:0012] on usb-dummy_hcd.0-1/input0
[  200.866158][   T24] greenasia 0003:0E8F:0012.000B: no inputs found
[  201.048925][   T24] usb 1-1: USB disconnect, device number 29
[  201.404879][   T24] IPVS: starting estimator thread 0...
[  201.532287][ T8929] IPVS: using max 51 ests per chain, 122400 per kthread
[  201.731054][ T8941] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  201.980742][ T8940] loop2: detected capacity change from 0 to 32768
[  202.037208][ T8940] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  202.080489][ T8940] XFS (loop2): Ending clean mount
[  202.084862][ T8940] XFS (loop2): Quotacheck needed: Please wait.
[  202.168336][ T8957] UBIFS error (pid: 8957): cannot open "c:::", error -22
[  202.442510][ T8940] XFS (loop2): Quotacheck: Done.
[  202.491911][ T5865] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  202.639306][ T8963] loop0: detected capacity change from 0 to 128
[  202.994930][ T8968] IPv6: addrconf: prefix option has invalid lifetime
[  203.680613][ T8998] loop0: detected capacity change from 0 to 512
[  204.327544][ T5920] usb 1-1: new full-speed USB device number 30 using dummy_hcd
[  204.481165][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x19, changing to 0x9
[  204.485937][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 197, setting to 64
[  204.490407][ T5920] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a
[  204.493926][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.502673][ T5920] usb 1-1: config 0 descriptor??
[  204.505596][ T9007] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  204.511958][ T5920] pegasus_notetaker 1-1:0.0: probe with driver pegasus_notetaker failed with error -22
[  204.527564][  T976] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  204.684026][  T976] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  204.696587][  T976] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  204.709010][  T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  204.720823][  T976] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  204.743092][  T976] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  204.746744][  T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.756440][  T976] usb 3-1: Product: syz
[  204.758542][  T976] usb 3-1: Manufacturer: syz
[  204.760564][  T976] usb 3-1: SerialNumber: syz
[  204.766530][  T976] usb 3-1: config 0 descriptor??
[  204.786491][  T976] garmin_gps 3-1:0.0: Garmin GPS usb/tty converter detected
[  204.804382][  T976] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  204.811068][  T976] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  205.171214][   T10] usb 3-1: USB disconnect, device number 23
[  205.174335][   T10] garmin_gps 3-1:0.0: device disconnected
[  205.222222][ T9018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.226135][ T9018] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.832471][ T9027] loop2: detected capacity change from 0 to 1024
[  205.870325][ T9027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.875175][ T9027] ext4 filesystem being mounted at /412/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  205.900468][ T9027] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1251: bg 0: block 393: padding at end of block bitmap is not set
[  205.919800][ T9027] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28
[  205.929640][ T9027] EXT4-fs (loop2): This should not happen!! Data will be lost
[  205.929640][ T9027] 
[  205.934478][ T9027] EXT4-fs (loop2): Total free blocks count 0
[  205.940821][ T9027] EXT4-fs (loop2): Free/Dirty block details
[  205.943621][ T9027] EXT4-fs (loop2): free_blocks=0
[  205.946020][ T9027] EXT4-fs (loop2): dirty_blocks=16
[  205.948602][ T9027] EXT4-fs (loop2): Block reservation details
[  205.951315][ T9027] EXT4-fs (loop2): i_reserved_data_blocks=1
[  205.983833][ T5865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.135340][ T9042] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  206.981973][ T9063] netlink: 'syz.1.1265': attribute type 27 has an invalid length.
[  207.015082][   T10] usb 1-1: USB disconnect, device number 30
[  207.267912][ T9075] fuse: Bad value for 'fd'
[  207.515988][ T9071] loop0: detected capacity change from 0 to 32768
[  208.559021][ T9096] loop2: detected capacity change from 0 to 8
[  208.609169][ T9096] SQUASHFS error: zlib decompression failed, data probably corrupt
[  208.627370][ T9096] SQUASHFS error: Failed to read block 0x9b: -5
[  208.629777][ T9096] SQUASHFS error: Unable to read metadata cache entry [99]
[  208.633613][ T9088] loop0: detected capacity change from 0 to 32768
[  208.633859][ T9096] SQUASHFS error: Unable to read inode 0x127
[  208.824164][ T9104] netlink: 'syz.1.1283': attribute type 7 has an invalid length.
[  208.830962][ T9104] netlink: 'syz.1.1283': attribute type 5 has an invalid length.
[  208.835293][ T9104] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1283'.
[  208.996237][ T9117] loop2: detected capacity change from 0 to 512
[  209.008869][ T9117] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  209.093674][ T9117] EXT4-fs (loop2): 1 truncate cleaned up
[  209.096219][ T9117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.046620][ T9112] loop0: detected capacity change from 0 to 131072
[  210.505998][ T5865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.843664][ T9151] netlink: 'syz.0.1305': attribute type 1 has an invalid length.
[  211.207581][   T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  211.437641][   T10] usb 1-1: Using ep0 maxpacket: 16
[  211.486295][   T10] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.501099][   T10] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  211.505656][   T10] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  211.535946][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  211.538841][   T10] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  211.542574][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.553455][   T10] usb 1-1: config 0 descriptor??
[  211.972705][   T10] hid (null): usage index exceeded
[  211.974631][   T10] hid (null): invalid report_size 16762
[  212.185844][   T10] usb 1-1: USB disconnect, device number 31
[  212.262331][ T9187] loop2: detected capacity change from 0 to 1024
[  212.275893][ T9187] hfsplus: bad catalog entry type
[  212.305925][ T1007] hfsplus: b-tree write err: -5, ino 4
[  212.603791][ T9200] ptrace attach of "/syz-executor exec"[9202] was attempted by "/syz-executor exec"[9200]
[  212.680358][ T9208] loop2: detected capacity change from 0 to 2048
[  212.721333][ T9212] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  212.995202][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1336'.
[  214.184534][ T9269] loop0: detected capacity change from 0 to 2048
[  214.569387][ T9271] loop0: detected capacity change from 0 to 128
[  214.751844][ T9265] loop2: detected capacity change from 0 to 32768
[  214.775522][ T9265] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #70: OCFS2_VALID_FL not set
[  214.782298][ T9265] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  214.791034][ T9265] OCFS2: File system is now read-only.
[  214.803334][ T9265] (syz.2.1354,9265,1):ocfs2_read_locked_inode:597 ERROR: status = -30
[  214.806738][ T9265] (syz.2.1354,9265,1):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  214.809906][ T9265] (syz.2.1354,9265,1):ocfs2_init_global_system_inodes:465 ERROR: status = -30
[  214.816829][ T9265] (syz.2.1354,9265,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 3, possibly corrupt fs?
[  214.816891][ T9265] (syz.2.1354,9265,1):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[  214.854011][ T9265] (syz.2.1354,9265,1):ocfs2_initialize_super:2198 ERROR: status = -30
[  214.861495][ T9265] (syz.2.1354,9265,1):ocfs2_fill_super:1177 ERROR: status = -30
[  215.010743][ T9285] loop0: detected capacity change from 0 to 2048
[  215.039345][ T9285] EXT4-fs: Ignoring removed nobh option
[  215.902124][ T9302] loop0: detected capacity change from 0 to 32768
[  215.911792][ T9302] bcachefs (/dev/loop0): error reading superblock: error opening /dev/loop0: EACCES
[  215.934038][ T9302] bcachefs: bch2_fs_get_tree() error: EACCES
[  217.312191][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1389'.
[  217.316230][ T9337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1389'.
[  217.366655][ T9339] loop0: detected capacity change from 0 to 128
[  217.487134][ T5907] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  217.637108][ T5907] usb 3-1: Using ep0 maxpacket: 32
[  217.649162][ T5907] usb 3-1: unable to get BOS descriptor or descriptor too short
[  217.654302][ T5907] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[  217.661675][ T5907] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  217.670049][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.673351][ T5907] usb 3-1: Product: С
[  217.674978][ T5907] usb 3-1: Manufacturer: 긨탞鿝ﭘ켛괆勰ǿ㵖鼜뤱Ώ㼛䂨⸓삻䓑⏽﻽煌㈃쏛䙴풰୭鷅䅣퇥
[  217.680943][ T9341] loop0: detected capacity change from 0 to 32768
[  217.689643][ T9341] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1391 (9341)
[  217.694973][ T9341] BTRFS error: failed to open device for path /dev/loop0 with flags 0x23: -13
[  217.696132][ T5907] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[  217.705252][ T5907] cdc_ncm 3-1:1.0: bind() failure
[  217.733909][ T5907] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  217.736704][ T5907] cdc_ncm 3-1:1.1: bind() failure
[  217.895747][ T5907] usb 3-1: USB disconnect, device number 24
[  218.425883][ T9360] overlayfs: failed to clone upperpath
[  218.736385][ T9379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1408'.
[  218.746209][ T9377] loop2: detected capacity change from 0 to 4096
[  218.776907][ T9377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.869605][ T5865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.982947][ T9387] loop2: detected capacity change from 0 to 256
[  219.051827][ T9387] FAT-fs (loop2): Directory bread(block 64) failed
[  219.054394][ T9387] FAT-fs (loop2): Directory bread(block 65) failed
[  219.058889][ T9387] FAT-fs (loop2): Directory bread(block 66) failed
[  219.061488][ T9387] FAT-fs (loop2): Directory bread(block 67) failed
[  219.064184][ T9387] FAT-fs (loop2): Directory bread(block 68) failed
[  219.066718][ T9387] FAT-fs (loop2): Directory bread(block 69) failed
[  219.069741][ T9387] FAT-fs (loop2): Directory bread(block 70) failed
[  219.072293][ T9387] FAT-fs (loop2): Directory bread(block 71) failed
[  219.074992][ T9387] FAT-fs (loop2): Directory bread(block 72) failed
[  219.078104][ T9387] FAT-fs (loop2): Directory bread(block 73) failed
[  219.194029][ T9399] loop0: detected capacity change from 0 to 512
[  219.223179][ T9401] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1418'.
[  219.829876][ T9414] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  219.846271][ T9405] loop2: detected capacity change from 0 to 32768
[  219.918947][ T9405] (syz.2.1420,9405,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #66: rec_len is smaller than minimal - offset=88, inode=69, rec_len=8, name_len=8
[  219.930061][ T9405] (syz.2.1420,9405,0):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  219.934418][ T9405] (syz.2.1420,9405,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 2, possibly corrupt fs?
[  219.934451][ T9405] (syz.2.1420,9405,0):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  219.942294][ T9405] (syz.2.1420,9405,0):ocfs2_initialize_super:2198 ERROR: status = -22
[  219.955281][ T9405] (syz.2.1420,9405,0):ocfs2_fill_super:1177 ERROR: status = -22
[  220.618645][ T9428] usb usb1: check_ctrlrecip: process 9428 (syz.2.1426) requesting ep 01 but needs 81
[  220.622384][ T9428] usb usb1: usbfs: process 9428 (syz.2.1426) did not claim interface 0 before use
[  221.010919][ T9436] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1433'.
[  221.014651][ T9436] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1433'.
[  221.887178][  T973] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  222.047067][  T973] usb 3-1: Using ep0 maxpacket: 16
[  222.050758][  T973] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  222.054774][  T973] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  222.063205][  T973] usb 3-1: config 0 interface 0 has no altsetting 0
[  222.065507][  T973] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  222.068776][  T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.076010][  T973] usb 3-1: config 0 descriptor??
[  222.189419][ T9479] tipc: Started in network mode
[  222.191871][ T9479] tipc: Node identity , cluster identity 4711
[  222.194178][ T9479] tipc: Failed to obtain node identity
[  222.195851][ T9479] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[  222.283814][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1456'.
[  222.288244][ T9485] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1456'.
[  222.504554][  T973] hid (null): report_id 3323596431 is invalid
[  222.521026][  T973] hid (null): unknown global tag 0xe
[  222.523625][  T973] hid (null): unknown global tag 0xe
[  222.525667][  T973] hid (null): unknown global tag 0xe
[  222.543576][  T973] hid (null): unknown global tag 0x63
[  222.545912][  T973] hid (null): unknown global tag 0xd
[  222.611217][ T9502] loop0: detected capacity change from 0 to 2048
[  222.673791][ T9502] loop0: detected capacity change from 0 to 16
[  222.685926][ T9502] erofs: Unknown parameter 'O]o>_q?ӵٺgHgkTzwOVtܨlIכ%ؽvskղfcؚ7??ٖ/j^Vꑎ+bV"폽O\Ϝ;N韦[L?ԾlL݁\l5Zi?.\^jfu<M?{;Sgw^yp_xϟ??f'
[  222.706471][ T9502] loop0: detected capacity change from 0 to 256
[  222.708491][  T973] usb 3-1: USB disconnect, device number 25
[  222.720586][ T9502] exfat: Deprecated parameter 'utf8'
[  223.996287][ T9546] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1481'.
[  224.102703][ T9553] netlink: 'syz.0.1484': attribute type 11 has an invalid length.
[  224.224768][ T9564] netlink: 'syz.2.1488': attribute type 1 has an invalid length.
[  224.433271][ T9575] geneve2: entered promiscuous mode
[  225.397150][ T9591] loop8: detected capacity change from 0 to 5
[  225.405770][ T5857] buffer_io_error: 11 callbacks suppressed
[  225.405820][ T5857] Buffer I/O error on dev loop8, logical block 0, async page read
[  225.415214][ T5857] Buffer I/O error on dev loop8, logical block 0, async page read
[  225.419749][ T5857] Buffer I/O error on dev loop8, logical block 0, async page read
[  225.423590][ T5857] Buffer I/O error on dev loop8, logical block 0, async page read
[  225.429368][ T5857] Buffer I/O error on dev loop8, logical block 0, async page read
[  225.432566][ T5857] Buffer I/O error on dev loop8, logical block 0, async page read
[  225.435832][ T5857] Buffer I/O error on dev loop8, logical block 0, async page read
[  225.440217][ T5857] Buffer I/O error on dev loop8, logical block 0, async page read
[  225.443898][ T5857] Buffer I/O error on dev loop8, logical block 0, async page read
[  225.446893][ T5857] Buffer I/O error on dev loop8, logical block 0, async page read
[  225.690426][ T9607] netlink: 'syz.2.1506': attribute type 21 has an invalid length.
[  225.693245][ T9607] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1506'.
[  225.696361][ T9607] netlink: 'syz.2.1506': attribute type 5 has an invalid length.
[  225.702474][ T9607] netlink: 'syz.2.1506': attribute type 6 has an invalid length.
[  225.705259][ T9607] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1506'.
[  226.127179][   T24] usb 3-1: new full-speed USB device number 26 using dummy_hcd
[  226.281450][   T24] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  226.285211][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.290599][   T24] usb 3-1: Product: syz
[  226.292623][   T24] usb 3-1: Manufacturer: syz
[  226.294824][   T24] usb 3-1: SerialNumber: syz
[  226.301119][   T24] usb 3-1: config 0 descriptor??
[  226.387322][  T973] page_pool_release_retry() stalled pool shutdown: id 17, 1 inflight 60 sec
[  226.715122][   T24] airspy 3-1:0.0: Board ID: 00
[  226.718245][   T24] airspy 3-1:0.0: Firmware version: 
[  227.401738][ T9632] overlayfs: failed to clone upperpath
[  227.730909][   T24] airspy 3-1:0.0: Registered as swradio24
[  227.733311][   T24] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  227.928272][   T24] usb 3-1: USB disconnect, device number 26
[  229.426112][ T9695] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  229.429865][ T9695] IPv6: NLM_F_CREATE should be set when creating new route
[  229.432709][ T9695] IPv6: NLM_F_CREATE should be set when creating new route
[  229.513562][ T9698] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1550'.
[  229.516629][ T9698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1550'.
[  229.592146][ T9701] fuse: Bad value for 'fd'
[  230.550668][ T9720] loop2: detected capacity change from 0 to 512
[  230.575135][ T9720] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.1560: corrupted in-inode xattr: invalid ea_ino
[  230.581863][ T9720] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1560: couldn't read orphan inode 15 (err -117)
[  230.590393][ T9720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.622229][ T5865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.173762][ T9734] kernel read not supported for file /file0 (pid: 9734 comm: syz.0.1565)
[  231.181907][   T33] audit: type=1800 audit(1759034616.561:30): pid=9734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1565" name="file0" dev="mqueue" ino=18040 res=0 errno=0
[  231.496675][ T9750] netlink: 'syz.2.1572': attribute type 16 has an invalid length.
[  231.499579][ T9750] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1572'.
[  231.670818][ T9758] loop2: detected capacity change from 0 to 4096
[  231.679190][ T9758] ntfs3: Bad value for 'gid'
[  231.684591][ T9758] ntfs3: Bad value for 'gid'
[  231.785125][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1580'.
[  232.197320][ T9770] loop2: detected capacity change from 0 to 32768
[  232.221923][ T9770] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  232.226139][ T9770] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  232.268700][ T9770] XFS (loop2): Ending clean mount
[  232.286212][ T9770] XFS (loop2): Quotacheck needed: Please wait.
[  232.329078][ T9770] XFS (loop2): Quotacheck: Done.
[  232.360550][ T5865] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  233.326147][ T9829] netlink: 'syz.2.1606': attribute type 6 has an invalid length.
[  233.486447][ T9835] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  233.492992][ T9835] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  233.496246][ T9835] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  233.529291][ T9836] loop2: detected capacity change from 0 to 4096
[  233.545353][ T9836] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  233.566710][ T9836] ntfs3(loop2): ino=19, mi_enum_attr
[  233.569745][ T9836] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  233.585188][ T9836] ntfs3(loop2): failed to convert "c46c" to cp950
[  233.591751][ T9836] ntfs3(loop2): ino=20, mi_enum_attr
[  233.652269][ T9843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1613'.
[  233.656850][ T9844] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1614'.
[  233.663099][ T9844] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1614'.
[  233.671084][ T9844] netlink: 38 bytes leftover after parsing attributes in process `syz.1.1614'.
[  234.031996][ T9865] loop2: detected capacity change from 0 to 128
[  234.054120][ T9865] vxfs: WRONG superblock magic 7b3185b5 at 1
[  234.065568][ T9865] vxfs: WRONG superblock magic 7b318cb5 at 8
[  234.074196][ T9865] vxfs: can't find superblock.
[  234.223334][ T9830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  234.288273][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  234.292502][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  234.297540][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  234.301249][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  234.486498][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1631'.
[  234.561339][  T976] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  234.717779][  T976] usb 3-1: Using ep0 maxpacket: 16
[  234.721574][  T976] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  234.724866][  T976] usb 3-1: config 0 descriptor has 1 excess byte, ignoring
[  234.727999][  T976] usb 3-1: config 0 has no interface number 0
[  234.732658][  T976] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  234.736239][  T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.740139][  T976] usb 3-1: Product: syz
[  234.742797][  T976] usb 3-1: Manufacturer: syz
[  234.744712][  T976] usb 3-1: SerialNumber: syz
[  234.751229][  T976] usb 3-1: config 0 descriptor??
[  234.759484][  T976] usb 3-1: Found UVC 0.00 device syz (046d:08f3)
[  234.762601][  T976] usb 3-1: No valid video chain found.
[  234.801628][ T9887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1635'.
[  234.805394][ T9887] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  234.856388][ T9887] batman_adv: batadv0: Removing interface: batadv_slave_1
[  234.964928][ T5907] usb 3-1: USB disconnect, device number 27
[  235.838458][ T9903] loop2: detected capacity change from 0 to 4096
[  237.995001][ T9951] netlink: 'syz.1.1662': attribute type 1 has an invalid length.
[  238.000198][ T9951] netlink: 'syz.1.1662': attribute type 1 has an invalid length.
[  238.689093][ T9956] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1664'.
[  239.313542][ T9991] batman_adv: batadv0: Adding interface: dummy0
[  239.316202][ T9991] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  239.332542][ T9991] batman_adv: batadv0: Interface activated: dummy0
[  239.359112][ T9991] batadv0: mtu less than device minimum
[  239.362806][ T9991] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  239.368305][ T9991] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  239.373906][ T9991] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  239.379216][ T9991] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  239.384367][ T9991] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  239.389781][ T9991] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  239.394908][ T9991] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  239.400141][ T9991] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  239.405166][ T9991] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  239.417675][ T9996] netlink: 'syz.0.1680': attribute type 10 has an invalid length.
[  239.999895][T10012] loop2: detected capacity change from 0 to 1024
[  240.048582][   T33] audit: type=1326 audit(1759034625.421:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.1.1691" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6212f8ec29 code=0x7ffc0000
[  240.055653][   T33] audit: type=1326 audit(1759034625.421:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.1.1691" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6212f8ec29 code=0x7ffc0000
[  240.069767][T10012] hfsplus: xattr searching failed
[  240.089472][   T33] audit: type=1326 audit(1759034625.441:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.1.1691" exe="/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f6212f8ec29 code=0x7ffc0000
[  240.097388][   T33] audit: type=1326 audit(1759034625.441:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.1.1691" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6212f8ec29 code=0x7ffc0000
[  240.105844][   T33] audit: type=1326 audit(1759034625.441:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.1.1691" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6212f8ec29 code=0x7ffc0000
[  240.128879][   T33] audit: type=1326 audit(1759034625.451:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.1.1691" exe="/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f6212f8ec29 code=0x7ffc0000
[  240.139497][   T33] audit: type=1326 audit(1759034625.451:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.1.1691" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6212f8ec29 code=0x7ffc0000
[  240.157145][   T33] audit: type=1326 audit(1759034625.451:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.1.1691" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6212f8ec29 code=0x7ffc0000
[  240.169105][ T4370] hfsplus: b-tree write err: -5, ino 4
[  240.478396][T10036] ptrace attach of "/syz-executor exec"[5856] was attempted by "       S                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  
[  240.539646][T10039] netlink: 'syz.2.1703': attribute type 1 has an invalid length.
[  240.775504][T10057] netlink: 536 bytes leftover after parsing attributes in process `syz.0.1711'.
[  240.932991][T10051] loop2: detected capacity change from 0 to 32768
[  240.939460][T10051] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1709 (10051)
[  240.976452][T10051] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  240.986884][T10051] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  240.992096][T10051] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  241.030183][T10075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1716'.
[  241.036664][T10075] netlink: 'syz.0.1716': attribute type 3 has an invalid length.
[  241.127766][T10051] BTRFS info (device loop2): rebuilding free space tree
[  241.196143][T10051] BTRFS info (device loop2): disabling free space tree
[  241.210278][T10051] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  241.214559][T10051] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  241.261097][T10051] BTRFS info (device loop2): setting nodatasum
[  241.263650][T10051] BTRFS info (device loop2): allowing degraded mounts
[  241.266375][T10051] BTRFS info (device loop2): enabling disk space caching
[  241.287217][T10051] BTRFS info (device loop2): force clearing of disk cache
[  241.290079][T10051] BTRFS info (device loop2): use lzo compression, level 1
[  241.353767][T10096] netlink: 'syz.1.1722': attribute type 5 has an invalid length.
[  241.361749][T10096] netlink: 'syz.1.1722': attribute type 5 has an invalid length.
[  241.369427][T10096] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1722'.
[  241.404831][ T5865] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  243.335549][T10153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1746'.
[  243.339793][T10153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1746'.
[  243.344050][T10153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1746'.
[  243.348618][T10153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1746'.
[  243.518334][ T5907] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  243.747844][ T5907] usb 3-1: config 0 has an invalid interface number: 117 but max is 0
[  243.754481][ T5907] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  243.762208][ T5907] usb 3-1: config 0 has no interface number 0
[  243.764793][ T5907] usb 3-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30
[  243.769606][ T5907] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  243.775294][ T5907] usb 3-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239
[  243.786543][ T5907] usb 3-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46
[  243.791427][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.794702][ T5907] usb 3-1: Product: syz
[  243.796524][ T5907] usb 3-1: Manufacturer: syz
[  243.805499][ T5907] usb 3-1: SerialNumber: syz
[  243.813045][ T5907] usb 3-1: config 0 descriptor??
[  243.825749][ T5907] HFC-S_USB 3-1:0.117: probe with driver HFC-S_USB failed with error -5
[  244.063762][  T976] usb 3-1: USB disconnect, device number 28
[  244.745254][T10185] loop2: detected capacity change from 0 to 1024
[  244.751238][T10185] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  244.783771][T10185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  244.826895][ T5865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.901282][T10193] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1761'.
[  245.027403][T10208] netlink: 'syz.1.1770': attribute type 1 has an invalid length.
[  245.177238][ T5907] usb 3-1: new low-speed USB device number 29 using dummy_hcd
[  245.329298][ T5907] usb 3-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a
[  245.332846][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.340363][ T5907] usb 3-1: config 0 descriptor??
[  245.348239][ T5907] pwc: Logitech QuickCam Notebook Pro USB webcam detected.
[  245.549364][ T5907] pwc: Failed to set LED on/off time (-71)
[  245.554223][ T5907] pwc: send_video_command error -71
[  245.558932][ T5907] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  245.562745][ T5907] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[  245.573783][ T5907] usb 3-1: USB disconnect, device number 29
[  245.912762][T10237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1783'.
[  246.381422][T10247] netlink: 'syz.2.1786': attribute type 1 has an invalid length.
[  246.390938][T10247] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1786'.
[  247.508638][T10263] 8021q: adding VLAN 0 to HW filter on device batadv1
[  247.518460][T10263] batadv1: entered promiscuous mode
[  247.520712][T10263] batadv1: entered allmulticast mode
[  247.523134][T10263] team0: Port device batadv1 added
[  248.435618][T10282] netlink: 'syz.1.1802': attribute type 10 has an invalid length.
[  248.461939][T10282] team0: Port device netdevsim0 added
[  248.522608][T10288] loop2: detected capacity change from 0 to 16
[  248.537750][T10288] erofs (device loop2): rootino(nid 36) is not a directory(i_mode 145700)
[  248.615541][T10294] loop2: detected capacity change from 0 to 512
[  248.621438][T10294] EXT4-fs: Ignoring removed nomblk_io_submit option
[  248.638209][T10294] EXT4-fs: Ignoring removed nomblk_io_submit option
[  248.657704][T10294] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  248.685577][T10294] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  248.691320][T10294] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  248.714316][T10294] EXT4-fs (loop2): 1 truncate cleaned up
[  248.720085][T10294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.753504][T10296] Process accounting resumed
[  248.803350][T10294] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  248.851136][ T5865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.891772][T10306] loop2: detected capacity change from 0 to 164
[  249.094794][T10314] input: syz1 as /devices/virtual/input/input10
[  249.225574][T10320] ptrace attach of "/syz-executor exec"[5858] was attempted by ""[10320]
[  249.296817][T10324] netlink: 'syz.0.1822': attribute type 49 has an invalid length.
[  249.303055][T10324] netlink: 'syz.0.1822': attribute type 49 has an invalid length.
[  249.682935][ T5907] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  249.899578][ T5907] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  249.906012][ T5907] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  249.917480][ T5907] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  249.922408][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  249.928973][ T5907] usb 3-1: SerialNumber: syz
[  250.163758][ T5907] usb 3-1: 0:2 : does not exist
[  250.165820][ T5907] usb 3-1: unit 255 not found!
[  250.179987][T10343] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1831'.
[  250.191520][ T5907] usb 3-1: USB disconnect, device number 30
[  250.249607][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  250.301255][T10351] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  251.448276][T10371] loop2: detected capacity change from 0 to 131072
[  251.526811][T10385] overlayfs: failed to clone lowerpath
[  252.874461][T10410] [U] 
[  253.671002][T10454] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1875'.
[  254.398277][T10489] loop2: detected capacity change from 0 to 2048
[  254.413945][T10489] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  254.419549][T10489] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  254.504692][T10489] loop2: detected capacity change from 2048 to 0
[  254.536700][ T5865] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0
[  254.546400][ T5865] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0
[  255.259160][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.355074][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.460332][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.490955][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1900'.
[  255.542088][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.637511][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  255.644500][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  255.651486][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  255.656756][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  255.666021][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  255.705761][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  255.711237][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  255.719557][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  255.728611][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  255.734058][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  255.753213][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  255.755793][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  255.916132][T10510] lo speed is unknown, defaulting to 1000
[  255.954132][   T13] gretap1: left promiscuous mode
[  255.963336][   T13] bridge0: port 3(gretap1) entered disabled state
[  255.972990][   T13] bridge_slave_1: left allmulticast mode
[  255.974836][   T13] bridge_slave_1: left promiscuous mode
[  255.976902][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.990927][   T13] bridge_slave_0: left allmulticast mode
[  255.993235][   T13] bridge_slave_0: left promiscuous mode
[  255.995629][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.358528][   T13] bridge0 (unregistering): left promiscuous mode
[  256.567862][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  256.576815][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  256.582417][   T13] bond0 (unregistering): Released all slaves
[  256.952066][T10510] chnl_net:caif_netlink_parms(): no params data found
[  257.088003][   T13] team0: left promiscuous mode
[  257.089486][   T13] team_slave_0: left promiscuous mode
[  257.091375][   T13] team_slave_1: left promiscuous mode
[  257.093174][   T13] batadv1: left promiscuous mode
[  257.138384][   T13] hsr_slave_0: left promiscuous mode
[  257.148228][   T13] hsr_slave_1: left promiscuous mode
[  257.163787][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  257.175256][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  257.181429][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  257.184453][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  257.256158][   T13] veth1_macvtap: left promiscuous mode
[  257.267826][   T13] veth0_macvtap: left promiscuous mode
[  257.270210][   T13] veth1_vlan: left promiscuous mode
[  257.284638][   T13] veth0_vlan: left promiscuous mode
[  257.509422][   T13] batadv1 (unregistering): left allmulticast mode
[  257.513143][   T13] team0 (unregistering): Port device batadv1 removed
[  257.538947][   T13] pim6reg (unregistering): left allmulticast mode
[  257.561461][T10568] netlink: 'syz.1.1920': attribute type 37 has an invalid length.
[  257.837200][ T5237] Bluetooth: hci2: command tx timeout
[  258.121951][   T13] team_slave_1 (unregistering): left allmulticast mode
[  258.125209][   T13] team0 (unregistering): Port device team_slave_1 removed
[  258.174626][   T13] team_slave_0 (unregistering): left allmulticast mode
[  258.179250][   T13] team0 (unregistering): Port device team_slave_0 removed
[  258.742856][  T973] lo speed is unknown, defaulting to 1000
[  258.743248][T10570] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  258.745205][  T973] infiniband syz0: ib_query_port failed (-19)
[  258.841123][T10510] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.845167][T10510] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.870305][T10510] bridge_slave_0: entered allmulticast mode
[  258.879373][T10510] bridge_slave_0: entered promiscuous mode
[  258.890745][T10588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1929'.
[  258.894481][T10510] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.902834][T10510] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.905828][T10510] bridge_slave_1: entered allmulticast mode
[  258.911849][T10510] bridge_slave_1: entered promiscuous mode
[  259.033973][T10510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  259.048047][T10510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  259.396385][T10510] team0: Port device team_slave_0 added
[  259.411803][T10510] team0: Port device team_slave_1 added
[  259.477912][T10510] batman_adv: batadv0: Adding interface: batadv_slave_0
[  259.483882][T10510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.494345][T10510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  259.500069][T10510] batman_adv: batadv0: Adding interface: batadv_slave_1
[  259.502863][T10510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.514408][T10510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  259.591280][   T13] IPVS: stop unused estimator thread 0...
[  259.599834][T10510] hsr_slave_0: entered promiscuous mode
[  259.603561][T10510] hsr_slave_1: entered promiscuous mode
[  259.608275][T10510] debugfs: 'hsr0' already exists in 'hsr'
[  259.610868][T10510] Cannot create hsr debugfs directory
[  259.919051][ T5237] Bluetooth: hci2: command tx timeout
[  260.142941][T10629] ip6tnl1: entered promiscuous mode
[  260.144754][T10629] ip6tnl1: entered allmulticast mode
[  260.151194][T10629] team0: Device ip6tnl1 is of different type
[  260.225157][T10510] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  260.262709][T10510] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  260.305119][T10510] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  260.331643][T10510] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  260.478054][T10510] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.506276][T10510] 8021q: adding VLAN 0 to HW filter on device team0
[  260.516820][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.519552][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[  260.540091][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.542935][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[  260.583607][T10510] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  260.594067][T10510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  260.731678][T10510] 8021q: adding VLAN 0 to HW filter on device batadv0
[  260.770762][T10510] veth0_vlan: entered promiscuous mode
[  260.782467][T10510] veth1_vlan: entered promiscuous mode
[  260.813584][T10510] veth0_macvtap: entered promiscuous mode
[  260.820264][T10510] veth1_macvtap: entered promiscuous mode
[  260.835421][T10510] batman_adv: batadv0: Interface activated: batadv_slave_0
[  260.846635][T10510] batman_adv: batadv0: Interface activated: batadv_slave_1
[  260.859205][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  260.862944][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  260.869069][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  260.874511][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  260.979029][ T4370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.982153][ T4370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  261.015997][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.022612][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  261.321780][T10692] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  261.430085][T10678] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  261.578656][T10678] usb 4-1: Using ep0 maxpacket: 32
[  261.583034][T10678] usb 4-1: config 0 interface 0 has no altsetting 0
[  261.591272][T10678] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  261.594900][T10678] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.598940][T10678] usb 4-1: Product: syz
[  261.600823][T10678] usb 4-1: Manufacturer: syz
[  261.602697][T10678] usb 4-1: SerialNumber: syz
[  261.609738][T10678] usb 4-1: config 0 descriptor??
[  261.987197][ T5237] Bluetooth: hci2: command tx timeout
[  262.027055][T10678] gs_usb 4-1:0.0: Configuring for 1 interfaces
[  262.426356][T10678] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO)
[  262.432448][T10678] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71
[  262.435233][T10726] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1977'.
[  262.441752][T10678] usb 4-1: USB disconnect, device number 2
[  262.675190][T10732] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  263.071896][T10741] loop3: detected capacity change from 0 to 8
[  264.077493][ T5237] Bluetooth: hci2: command tx timeout
[  264.280582][T10752] overlayfs: failed to clone upperpath
[  265.461868][T10792] loop3: detected capacity change from 0 to 256
[  265.465969][T10792] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  265.471685][T10792] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  265.480439][T10792] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  265.603955][T10800] usb usb8: usbfs: process 10800 (syz.3.2009) did not claim interface 0 before use
[  266.931842][T10855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2033'.
[  268.778829][T10917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2057'.
[  269.530645][T10928] netlink: 'syz.1.2061': attribute type 3 has an invalid length.
[  269.732417][T10942] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2065'.
[  270.053389][T10959] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  270.794163][T10981] netlink: 'syz.3.2076': attribute type 11 has an invalid length.
[  271.458902][   T33] audit: type=1800 audit(1759034656.811:39): pid=11014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2086" name="file1" dev="tmpfs" ino=245 res=0 errno=0
[  272.282610][T11036] loop3: detected capacity change from 0 to 8
[  272.308928][T11036] SQUASHFS error: lzo decompression failed, data probably corrupt
[  272.327447][T11036] SQUASHFS error: Failed to read block 0x91: -5
[  272.330031][T11036] SQUASHFS error: Unable to read metadata cache entry [8f]
[  272.332934][T11036] SQUASHFS error: Unable to read inode 0x11f
[  272.400487][T11045] rdma_op ffff888034b9a9f0 conn xmit_rdma 0000000000000000
[  272.745439][T11063] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2102'.
[  273.000419][T11079] loop3: detected capacity change from 0 to 256
[  273.044843][T11079] FAT-fs (loop3): Directory bread(block 64) failed
[  273.058296][T11079] FAT-fs (loop3): Directory bread(block 65) failed
[  273.069769][T11079] FAT-fs (loop3): Directory bread(block 66) failed
[  273.077265][T11079] FAT-fs (loop3): Directory bread(block 67) failed
[  273.079380][T11079] FAT-fs (loop3): Directory bread(block 68) failed
[  273.081379][T11079] FAT-fs (loop3): Directory bread(block 69) failed
[  273.105259][T11079] FAT-fs (loop3): Directory bread(block 70) failed
[  273.117053][T11079] FAT-fs (loop3): Directory bread(block 71) failed
[  273.119166][T11079] FAT-fs (loop3): Directory bread(block 72) failed
[  273.121224][T11079] FAT-fs (loop3): Directory bread(block 73) failed
[  273.272460][T11099] loop3: detected capacity change from 0 to 512
[  273.292351][T11099] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  273.295640][T11099] System zones: 0-2, 18-18, 34-35
[  273.303329][T11099] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  273.315350][T11099] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  273.371141][T10510] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.402378][T11122] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2123'.
[  274.553951][T11129] loop3: detected capacity change from 0 to 512
[  274.946896][T11150] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2136'.
[  275.085895][T11161] overlayfs: failed to clone upperpath
[  276.674861][T11202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2161'.
[  276.683687][T11202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2161'.
[  276.784795][T11209] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2165'.
[  277.062496][T11224] loop3: detected capacity change from 0 to 512
[  277.070084][T11224] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  277.089700][T11224] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2171: invalid indirect mapped block 4294967295 (level 1)
[  277.116781][T11224] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2171: invalid indirect mapped block 4294967295 (level 1)
[  277.126667][T11224] EXT4-fs (loop3): 2 truncates cleaned up
[  277.132616][T11224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  277.165537][T10510] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.241674][T11234] loop3: detected capacity change from 0 to 512
[  277.258431][T11234] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  277.273689][T11234] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  277.282926][T11234] EXT4-fs (loop3): 1 truncate cleaned up
[  277.288494][T11234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  278.575244][T11267] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.586045][T10510] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.695410][T11275] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2193'.
[  278.908964][T11293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2201'.
[  278.997798][T11301] capability: warning: `syz.0.2205' uses 32-bit capabilities (legacy support in use)
[  279.054863][T11304] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2207'.
[  279.059665][T11304] netlink: 'syz.0.2207': attribute type 1 has an invalid length.
[  279.206119][T11311] netlink: 'syz.0.2210': attribute type 20 has an invalid length.
[  279.209554][T11311] IPv6: NLM_F_CREATE should be specified when creating new route
[  279.212467][T11311] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  279.214567][T11311] IPv6: NLM_F_CREATE should be set when creating new route
[  280.359032][T11351] fuse: Bad value for 'fd'
[  280.449398][T11361] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  280.449398][T11361] The task syz.3.2228 (11361) triggered the difference, watch for misbehavior.
[  280.453656][T11362] netlink: 'syz.0.2232': attribute type 2 has an invalid length.
[  281.769246][T11394] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2246'.
[  281.772974][T11394] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2246'.
[  282.128315][T11405] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  282.151730][T11405] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  282.274475][T11405] vlan2: left promiscuous mode
[  282.276417][T11405] bond0: left promiscuous mode
[  282.278499][T11405] bond_slave_0: left promiscuous mode
[  282.281160][T11405] bond_slave_1: left promiscuous mode
[  282.332529][ T5919] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  282.339222][ T5919] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  282.342796][ T5919] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  282.348721][ T5919] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  282.352387][ T5919] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  282.355972][ T5919] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  282.363729][ T5919] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  282.368324][ T5919] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  282.625408][T11416] rdma_op ffff88810ad169f0 conn xmit_rdma 0000000000000000
[  282.890463][T11432] netlink: 'syz.3.2263': attribute type 1 has an invalid length.
[  282.897429][T11432] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2263'.
[  282.907139][T11432] netlink: 'syz.3.2263': attribute type 1 has an invalid length.
[  282.913186][T11432] netlink: 'syz.3.2263': attribute type 2 has an invalid length.
[  283.054695][T11443] netlink: 'syz.3.2268': attribute type 13 has an invalid length.
[  284.959199][T11487] net_ratelimit: 10 callbacks suppressed
[  284.959227][T11487] netlink: set zone limit has 4 unknown bytes
[  284.966222][T11487] netlink: del zone limit has 4 unknown bytes
[  285.037592][T11488] overlayfs: failed to clone lowerpath
[  286.747062][ T5921] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  286.907013][ T5921] usb 4-1: Using ep0 maxpacket: 16
[  286.910412][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  286.916636][ T5921] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  286.920432][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.923732][ T5921] usb 4-1: Product: syz
[  286.925184][ T5921] usb 4-1: Manufacturer: syz
[  286.927060][ T5921] usb 4-1: SerialNumber: syz
[  286.932329][ T5921] usb 4-1: config 0 descriptor??
[  286.938493][ T5921] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  286.942158][ T5921] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  287.544548][ T5921] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  287.944478][T11538] netlink: 'syz.1.2308': attribute type 21 has an invalid length.
[  287.950169][T11538] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2308'.
[  287.968404][ T5921] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  287.973263][ T5921] em28xx 4-1:0.0: board has no eeprom
[  288.939790][T11549] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2312'.
[  288.949421][T11549] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2312'.
[  288.995288][T11551] netlink: 'syz.0.2313': attribute type 3 has an invalid length.
[  289.000238][T11551] netlink: 'syz.0.2313': attribute type 3 has an invalid length.
[  289.032068][T11523] em28xx 4-1:0.0: writing to i2c device at 0x8 failed (error=-5)
[  289.054900][T11557] batman_adv: batadv0: Adding interface: dummy0
[  289.056907][T11557] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  289.065055][T11557] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  289.097162][ T5921] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  289.100235][ T5921] em28xx 4-1:0.0: dvb set to bulk mode.
[  289.103611][  T973] em28xx 4-1:0.0: Binding DVB extension
[  289.118647][ T5921] usb 4-1: USB disconnect, device number 3
[  289.121268][ T5921] em28xx 4-1:0.0: Disconnecting em28xx
[  289.143493][  T973] em28xx 4-1:0.0: Registering input extension
[  289.146433][ T5921] em28xx 4-1:0.0: Closing input extension
[  289.184440][ T5921] em28xx 4-1:0.0: Freeing device
[  289.779265][T11576] can0: slcan on ptm0.
[  289.839699][T11575] can0 (unregistered): slcan off ptm0.
[  290.407968][T11600] overlayfs: missing 'workdir'
[  290.470556][T11603] netlink: 'syz.0.2335': attribute type 4 has an invalid length.
[  292.555305][T11648] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2355'.
[  292.627500][ T5921] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  292.788262][ T5921] usb 4-1: Using ep0 maxpacket: 32
[  292.805629][ T5921] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0
[  292.810276][ T5921] usb 4-1: config 0 interface 0 has no altsetting 0
[  292.813249][ T5921] usb 4-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00
[  292.827571][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.837574][ T5921] usb 4-1: config 0 descriptor??
[  293.267904][ T5921] asus 0003:048D:CE50.000E: unknown main item tag 0x0
[  293.277115][ T5921] asus 0003:048D:CE50.000E: unknown main item tag 0x0
[  293.279883][ T5921] asus 0003:048D:CE50.000E: unknown main item tag 0x0
[  293.282612][ T5921] asus 0003:048D:CE50.000E: unknown main item tag 0x0
[  293.285282][ T5921] asus 0003:048D:CE50.000E: unknown main item tag 0x0
[  293.315523][ T5921] asus 0003:048D:CE50.000E: hidraw0: USB HID v80.00 Device [HID 048d:ce50] on usb-dummy_hcd.3-1/input0
[  293.320544][ T5921] asus 0003:048D:CE50.000E: Asus input not registered
[  293.325116][ T5921] asus 0003:048D:CE50.000E: probe with driver asus failed with error -12
[  293.459251][ T5921] usb 4-1: USB disconnect, device number 4
[  294.170682][T11677] netlink: 'syz.3.2369': attribute type 3 has an invalid length.
[  294.300642][T11684] loop3: detected capacity change from 0 to 4096
[  294.337177][T11686] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  294.370251][T11684] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  294.373712][T11684] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=12)
[  294.384543][T11684] Remounting filesystem read-only
[  294.386599][T11684] NILFS (loop3): error -5 truncating bmap (ino=12)
[  294.412413][T10510] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  295.583536][T11738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2397'.
[  296.090083][T11722] cgroup: fork rejected by pids controller in /syz0
[  296.149823][T11787] loop3: detected capacity change from 0 to 256
[  296.189061][T11787] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  296.199072][T11787] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  296.202572][T11787] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  296.206755][   T33] audit: type=1800 audit(1759034681.581:40): pid=11787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2409" name="file1" dev="loop3" ino=1048614 res=0 errno=0
[  296.281995][T11787] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  296.303206][T11787] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  296.314594][T11787] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  296.423554][T11801] loop3: detected capacity change from 0 to 2048
[  296.452167][T11803] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  296.680930][T11817] loop3: detected capacity change from 0 to 4096
[  296.694311][T11817] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  296.763718][T11817] ntfs3(loop3): ino=19, mi_enum_attr
[  296.765908][T11817] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  296.766070][T11823] netlink: 'syz.1.2426': attribute type 9 has an invalid length.
[  296.782022][T11823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2426'.
[  296.883718][T11831] syz.1.2430: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  296.890702][T11831] CPU: 0 UID: 0 PID: 11831 Comm: syz.1.2430 Not tainted syzkaller #0 PREEMPT(full) 
[  296.890721][T11831] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  296.890731][T11831] Call Trace:
[  296.890738][T11831]  <TASK>
[  296.890746][T11831]  dump_stack_lvl+0x189/0x250
[  296.890772][T11831]  ? __pfx_dump_stack_lvl+0x10/0x10
[  296.890791][T11831]  ? __pfx__printk+0x10/0x10
[  296.890813][T11831]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  296.890830][T11831]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  296.890849][T11831]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  296.890869][T11831]  warn_alloc+0x214/0x310
[  296.890893][T11831]  ? stack_depot_save_flags+0x40/0x860
[  296.890920][T11831]  ? __pfx_warn_alloc+0x10/0x10
[  296.890943][T11831]  ? kasan_save_track+0x4f/0x80
[  296.890960][T11831]  ? xskq_create+0x56/0x170
[  296.890974][T11831]  ? xsk_init_queue+0xb0/0x110
[  296.890985][T11831]  ? xsk_setsockopt+0x4dc/0x8d0
[  296.891005][T11831]  ? do_sock_setsockopt+0x17c/0x1b0
[  296.891023][T11831]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  296.891037][T11831]  ? do_syscall_64+0xfa/0x3b0
[  296.891051][T11831]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.891072][T11831]  __vmalloc_node_range_noprof+0x125/0x12f0
[  296.891116][T11831]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  296.891140][T11831]  ? __kasan_kmalloc+0x93/0xb0
[  296.891161][T11831]  vmalloc_user_noprof+0xad/0xf0
[  296.891182][T11831]  ? xskq_create+0xbf/0x170
[  296.891196][T11831]  xskq_create+0xbf/0x170
[  296.891211][T11831]  xsk_init_queue+0xb0/0x110
[  296.891227][T11831]  xsk_setsockopt+0x4dc/0x8d0
[  296.891248][T11831]  ? __pfx_xsk_setsockopt+0x10/0x10
[  296.891268][T11831]  ? __pfx_aa_sk_perm+0x10/0x10
[  296.891293][T11831]  ? aa_sock_opt_perm+0xff/0x1b0
[  296.891308][T11831]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  296.891324][T11831]  ? __pfx_xsk_setsockopt+0x10/0x10
[  296.891346][T11831]  do_sock_setsockopt+0x17c/0x1b0
[  296.891366][T11831]  __x64_sys_setsockopt+0x13f/0x1b0
[  296.891409][T11831]  do_syscall_64+0xfa/0x3b0
[  296.891429][T11831]  ? lockdep_hardirqs_on+0x9c/0x150
[  296.891442][T11831]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.891457][T11831]  ? exc_page_fault+0x9f/0xf0
[  296.891474][T11831]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.891490][T11831] RIP: 0033:0x7f6212f8ec29
[  296.891504][T11831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  296.891515][T11831] RSP: 002b:00007f6213e0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  296.891531][T11831] RAX: ffffffffffffffda RBX: 00007f62131d5fa0 RCX: 00007f6212f8ec29
[  296.891541][T11831] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  296.891550][T11831] RBP: 00007f6213011e41 R08: 0000000000000004 R09: 0000000000000000
[  296.891559][T11831] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000
[  296.891568][T11831] R13: 00007f62131d6038 R14: 00007f62131d5fa0 R15: 00007ffff93f8258
[  296.891617][T11831]  </TASK>
[  296.891625][T11831] Mem-Info:
[  297.018808][T11831] active_anon:10352 inactive_anon:0 isolated_anon:0
[  297.018808][T11831]  active_file:13327 inactive_file:38783 isolated_file:0
[  297.018808][T11831]  unevictable:1768 dirty:288 writeback:0
[  297.018808][T11831]  slab_reclaimable:10455 slab_unreclaimable:54494
[  297.018808][T11831]  mapped:20123 shmem:5580 pagetables:1360
[  297.018808][T11831]  sec_pagetables:0 bounce:0
[  297.018808][T11831]  kernel_misc_reclaimable:0
[  297.018808][T11831]  free:268898 free_pcp:22244 free_cma:0
[  297.036267][T11831] Node 0 active_anon:18356kB inactive_anon:0kB active_file:29540kB inactive_file:93200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24916kB dirty:948kB writeback:0kB shmem:5916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6128kB pagetables:2344kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  297.050424][T11831] Node 1 active_anon:23052kB inactive_anon:0kB active_file:23768kB inactive_file:61932kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:55576kB dirty:204kB writeback:0kB shmem:16404kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6276kB pagetables:2824kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  297.064364][T11831] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  297.073463][T11831] lowmem_reserve[]: 0 811 811 811 811
[  297.075358][T11831] Node 0 DMA32 free:324844kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18424kB inactive_anon:0kB active_file:29540kB inactive_file:93200kB unevictable:3536kB writepending:948kB present:1556484kB managed:830888kB mlocked:0kB bounce:0kB free_pcp:39844kB local_pcp:23036kB free_cma:0kB
[  297.087260][T11831] lowmem_reserve[]: 0 0 0 0 0
[  297.088892][T11831] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  297.099685][T11831] lowmem_reserve[]: 0 0 854 854 854
[  297.101654][T11831] Node 1 Normal free:276896kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23052kB inactive_anon:0kB active_file:23768kB inactive_file:61932kB unevictable:3536kB writepending:204kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:49044kB local_pcp:20860kB free_cma:0kB
[  297.112665][T11831] lowmem_reserve[]: 0 0 0 0 0
[  297.114415][T11831] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  297.118853][T11831] Node 0 DMA32: 97*4kB (UME) 521*8kB (UME) 286*16kB (UME) 358*32kB (UM) 150*64kB (UME) 60*128kB (UME) 25*256kB (UM) 22*512kB (UM) 27*1024kB (UME) 10*2048kB (UM) 54*4096kB (UM) = 324844kB
[  297.125807][T11831] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  297.131089][T11831] Node 1 Normal: 1176*4kB (UME) 180*8kB (ME) 212*16kB (UME) 64*32kB (UM) 75*64kB (UME) 23*128kB (UM) 31*256kB (UME) 23*512kB (UME) 12*1024kB (UME) 4*2048kB (UME) 53*4096kB (M) = 276608kB
[  297.136791][T11831] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  297.139830][T11831] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  297.142802][T11831] 57647 total pagecache pages
[  297.144444][T11831] 0 pages in swap cache
[  297.146125][T11831] Free swap  = 124996kB
[  297.152029][T11831] Total swap = 124996kB
[  297.153701][T11831] 786301 pages RAM
[  297.155141][T11831] 0 pages HighMem/MovableOnly
[  297.157113][T11831] 241347 pages reserved
[  297.158828][T11831] 0 pages cma reserved
[  298.027198][ T5905] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  298.161411][T11870] 9pnet_fd: Insufficient options for proto=fd
[  298.219924][ T5905] usb 4-1: config 0 has an invalid interface number: 117 but max is 0
[  298.223066][ T5905] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  298.237547][ T5905] usb 4-1: config 0 has no interface number 0
[  298.239974][ T5905] usb 4-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30
[  298.243911][ T5905] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  298.259788][ T5905] usb 4-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239
[  298.264431][T11874] netlink: 'syz.0.2449': attribute type 1 has an invalid length.
[  298.271009][T11874] nbd: couldn't find a device at index 20
[  298.275584][ T5905] usb 4-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46
[  298.280299][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.287020][ T5905] usb 4-1: Product: syz
[  298.288553][ T5905] usb 4-1: Manufacturer: syz
[  298.293166][ T5905] usb 4-1: SerialNumber: syz
[  298.304788][ T5905] usb 4-1: config 0 descriptor??
[  298.312209][ T5905] HFC-S_USB 4-1:0.117: probe with driver HFC-S_USB failed with error -5
[  298.516614][ T5920] usb 4-1: USB disconnect, device number 5
[  298.563592][T11891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2456'.
[  298.739870][T11903] netdevsim netdevsim1 : renamed from netdevsim0
[  300.639169][T11982] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2498'.
[  300.643275][T11982] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2498'.
[  300.841391][T12000] netlink: 'syz.0.2507': attribute type 13 has an invalid length.
[  300.972814][T11996] loop3: detected capacity change from 0 to 32768
[  301.248134][T11996] XFS: noikeep mount option is deprecated.
[  301.304505][T11996] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  301.318925][T11996] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  301.327689][T11996] XFS (loop3): Starting recovery (logdev: internal)
[  301.337379][T11996] XFS (loop3): Ending recovery (logdev: internal)
[  301.355193][T10510] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  301.528408][T12023] loop3: detected capacity change from 0 to 1024
[  301.534770][T12023] EXT4-fs: Ignoring removed bh option
[  301.564354][T12023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  301.616692][T10510] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.944866][T12034] loop3: detected capacity change from 0 to 32768
[  302.125000][T12062] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  302.361131][T12064] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2533'.
[  302.364848][T12064] bond_slave_0: entered promiscuous mode
[  302.368208][T12064] bond_slave_1: entered promiscuous mode
[  303.036340][T12084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2540'.
[  303.039916][T12084] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  303.694139][T12114] overlayfs: failed to clone upperpath
[  303.742274][T12118] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2553'.
[  303.754260][T12115] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2553'.
[  303.838170][T12108] loop3: detected capacity change from 0 to 32768
[  303.903022][T12108]  loop3: p9 p11 p16
[  304.098627][ T5857] udevd[5857]: inotify_add_watch(7, /dev/loop3p9, 10) failed: No such file or directory
[  304.103526][ T5864] udevd[5864]: inotify_add_watch(7, /dev/loop3p16, 10) failed: No such file or directory
[  304.112024][ T5938] udevd[5938]: inotify_add_watch(7, /dev/loop3p11, 10) failed: No such file or directory
[  304.278997][T12146] loop3: detected capacity change from 0 to 256
[  304.285135][T12146] FAT-fs (loop3): Directory bread(block 1285) failed
[  304.293588][T12146] FAT-fs (loop3): Directory bread(block 1285) failed
[  304.561602][T12163] loop3: detected capacity change from 0 to 4096
[  304.754112][T12175] 9pnet_fd: Insufficient options for proto=fd
[  304.797777][T12180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2582'.
[  304.802139][T12180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2582'.
[  305.406787][T12194] netlink: 'syz.1.2587': attribute type 15 has an invalid length.
[  305.411321][T12194] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2587'.
[  306.632001][T12256] netlink: 'syz.0.2616': attribute type 2 has an invalid length.
[  306.723834][T12242] loop3: detected capacity change from 0 to 32768
[  306.904735][   T33] audit: type=1326 audit(1759034692.281:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12263 comm="syz.0.2621" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff3b3d2ae09 code=0x7ffc0000
[  306.924296][    C0] vkms_vblank_simulate: vblank timer overrun
[  306.933739][   T33] audit: type=1326 audit(1759034692.301:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12263 comm="syz.0.2621" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff3b3d2ae09 code=0x7ffc0000
[  306.944849][   T33] audit: type=1326 audit(1759034692.301:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12263 comm="syz.0.2621" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff3b3d2ae09 code=0x7ffc0000
[  306.959503][   T33] audit: type=1326 audit(1759034692.301:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12263 comm="syz.0.2621" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff3b3d2ae09 code=0x7ffc0000
[  306.968051][   T33] audit: type=1326 audit(1759034692.311:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12263 comm="syz.0.2621" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff3b3d2ae09 code=0x7ffc0000
[  306.976249][   T33] audit: type=1326 audit(1759034692.311:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12263 comm="syz.0.2621" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff3b3d2ae09 code=0x7ffc0000
[  306.985844][   T33] audit: type=1326 audit(1759034692.311:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12263 comm="syz.0.2621" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff3b3d2ae09 code=0x7ffc0000
[  306.995291][   T33] audit: type=1326 audit(1759034692.311:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12263 comm="syz.0.2621" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff3b3d2ae09 code=0x7ffc0000
[  307.005821][   T33] audit: type=1326 audit(1759034692.311:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12263 comm="syz.0.2621" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff3b3d2ae09 code=0x7ffc0000
[  307.014728][   T33] audit: type=1326 audit(1759034692.311:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12263 comm="syz.0.2621" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff3b3d2ae09 code=0x7ffc0000
[  307.228265][T12278] loop3: detected capacity change from 0 to 164
[  307.252327][T12280] netlink: 'syz.0.2627': attribute type 1 has an invalid length.
[  307.255660][T12280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2627'.
[  307.263171][T12278] rock: corrupted directory entry. extent=32, offset=131072, size=237
[  307.355874][T12282] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  308.264595][T12345] ieee802154 phy0 wpan0: encryption failed: -22
[  309.201501][T12375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2671'.
[  309.258949][T12375] bridge1: port 1(veth5) entered blocking state
[  309.261583][T12375] bridge1: port 1(veth5) entered disabled state
[  309.265504][T12375] veth5: entered allmulticast mode
[  309.270681][T12375] veth5: entered promiscuous mode
[  309.403371][T12375] bridge1: port 2(veth0_to_bond) entered blocking state
[  309.406160][T12375] bridge1: port 2(veth0_to_bond) entered disabled state
[  309.410070][T12375] veth0_to_bond: entered allmulticast mode
[  309.414061][T12375] veth0_to_bond: entered promiscuous mode
[  310.046835][T12400] netlink: 'syz.3.2681': attribute type 2 has an invalid length.
[  310.051365][T12400] netlink: 'syz.3.2681': attribute type 8 has an invalid length.
[  310.053866][T12400] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2681'.
[  310.414855][T12426] loop3: detected capacity change from 0 to 2048
[  310.424423][T12426] NILFS (loop3): invalid segment: Inconsistency found
[  310.427368][T12426] NILFS (loop3): trying rollback from an earlier position
[  310.449998][T12426] NILFS (loop3): recovery complete
[  311.096930][T12448] loop3: detected capacity change from 0 to 136
[  311.294471][T12459] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2709'.
[  312.015511][T12478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2717'.
[  312.231924][T12493] erspan0: entered promiscuous mode
[  312.251562][T12493] 8021q: adding VLAN 0 to HW filter on device bond0
[  312.276773][T12493] 8021q: adding VLAN 0 to HW filter on device team0
[  312.279794][T12493] batman_adv: batadv0: Interface activated: dummy0
[  312.281997][T12493] batadv0: mtu less than device minimum
[  312.285149][T12493] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272)
[  312.290553][T12493] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272)
[  312.295429][T12493] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272)
[  312.299806][T12493] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272)
[  312.304240][T12493] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272)
[  312.309114][T12493] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272)
[  312.313717][T12493] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272)
[  312.318395][T12493] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272)
[  312.363153][T12493] net_ratelimit: 11 callbacks suppressed
[  312.363162][T12493] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  312.440989][T12500] loop3: detected capacity change from 0 to 64
[  312.540284][T12502] overlayfs: conflicting options: nfs_export=on,index=off
[  312.560532][T12500] overlayfs: upper fs needs to support d_type.
[  312.581897][T12500] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  312.596881][T12503] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  312.605304][T12500] overlayfs: failed to set xattr on upper
[  312.619792][T12500] overlayfs: ...falling back to redirect_dir=nofollow.
[  312.622705][T12500] overlayfs: ...falling back to index=off.
[  312.625061][T12500] overlayfs: ...falling back to uuid=null.
[  312.751929][T10510] Bad inode number on dev loop3: 4160749571 is out of range
[  312.756627][T10510] Bad inode number on dev loop3: 4160749571 is out of range
[  313.196375][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.305552][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.426795][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.472039][   T33] kauditd_printk_skb: 27 callbacks suppressed
[  313.472056][   T33] audit: type=1326 audit(1759034698.851:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12515 comm="syz.1.2735" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6212f8ec29 code=0x0
[  313.529876][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.608893][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  313.614632][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  313.626325][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  313.635460][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  313.642400][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  313.804192][   T12] bridge_slave_1: left allmulticast mode
[  313.808105][   T12] bridge_slave_1: left promiscuous mode
[  313.810682][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  313.820062][   T12] bridge_slave_0: left allmulticast mode
[  313.822419][   T12] bridge_slave_0: left promiscuous mode
[  313.824924][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  313.843431][   T12] veth0_to_bond: left allmulticast mode
[  313.846416][   T12] veth0_to_bond: left promiscuous mode
[  313.850258][   T12] bridge1: port 2(veth0_to_bond) entered disabled state
[  313.866807][   T12] veth5: left allmulticast mode
[  313.875180][   T12] veth5: left promiscuous mode
[  313.880469][   T12] bridge1: port 1(veth5) entered disabled state
[  314.242167][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  314.248535][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  314.253040][   T12] bond0 (unregistering): Released all slaves
[  314.793198][T12521] chnl_net:caif_netlink_parms(): no params data found
[  315.299151][T12542] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  315.713391][   T12] hsr_slave_0: left promiscuous mode
[  315.719764][   T12] hsr_slave_1: left promiscuous mode
[  315.729458][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  315.732521][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  315.748618][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  315.751679][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  315.758019][ T5237] Bluetooth: hci2: command tx timeout
[  315.798227][   T12] veth1_macvtap: left promiscuous mode
[  315.800477][   T12] veth0_macvtap: left promiscuous mode
[  315.802671][   T12] veth1_vlan: left promiscuous mode
[  315.804770][   T12] veth0_vlan: left promiscuous mode
[  316.692504][   T12] team0 (unregistering): Port device team_slave_1 removed
[  316.729962][   T12] team0 (unregistering): Port device team_slave_0 removed
[  316.953071][   T33] audit: type=1326 audit(1759034702.331:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.0.2756" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b3d8ec29 code=0x7ffc0000
[  316.968411][   T33] audit: type=1326 audit(1759034702.341:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.0.2756" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b3d8ec29 code=0x7ffc0000
[  317.000034][   T33] audit: type=1326 audit(1759034702.341:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.0.2756" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff3b3d8ec29 code=0x7ffc0000
[  317.030729][   T33] audit: type=1326 audit(1759034702.341:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.0.2756" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b3d8ec29 code=0x7ffc0000
[  317.041684][   T33] audit: type=1326 audit(1759034702.341:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.0.2756" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b3d8ec29 code=0x7ffc0000
[  317.051315][   T33] audit: type=1326 audit(1759034702.341:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.0.2756" exe="/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ff3b3d8ec29 code=0x7ffc0000
[  317.062012][   T33] audit: type=1326 audit(1759034702.351:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.0.2756" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b3d8ec29 code=0x7ffc0000
[  317.081653][   T33] audit: type=1326 audit(1759034702.361:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.0.2756" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b3d8ec29 code=0x7ffc0000
[  317.092975][   T33] audit: type=1326 audit(1759034702.361:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.0.2756" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff3b3d8ec29 code=0x7ffc0000
[  317.195782][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  317.199583][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  317.420866][T12521] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.427503][T12521] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.437582][T12521] bridge_slave_0: entered allmulticast mode
[  317.452800][T12521] bridge_slave_0: entered promiscuous mode
[  317.464847][T12521] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.480885][T12521] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.497231][T12521] bridge_slave_1: entered allmulticast mode
[  317.500070][T12521] bridge_slave_1: entered promiscuous mode
[  317.566711][T12521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  317.590741][T12521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  317.719584][T12521] team0: Port device team_slave_0 added
[  317.736363][T12521] team0: Port device team_slave_1 added
[  317.790479][T12521] batman_adv: batadv0: Adding interface: batadv_slave_0
[  317.792481][T12521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.805147][T12521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  317.828163][ T5237] Bluetooth: hci2: command tx timeout
[  317.844173][T12521] batman_adv: batadv0: Adding interface: batadv_slave_1
[  317.846783][T12521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.862082][T12521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  318.041529][T12521] hsr_slave_0: entered promiscuous mode
[  318.055902][T12521] hsr_slave_1: entered promiscuous mode
[  318.069803][T12521] debugfs: 'hsr0' already exists in 'hsr'
[  318.071674][T12521] Cannot create hsr debugfs directory
[  318.736088][T12521] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  318.742705][T12521] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  318.749323][T12521] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  318.769579][T12521] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  318.875320][T12521] 8021q: adding VLAN 0 to HW filter on device bond0
[  318.893077][T12521] 8021q: adding VLAN 0 to HW filter on device team0
[  318.906325][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.908561][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  318.917787][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.919936][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  319.060089][T12521] 8021q: adding VLAN 0 to HW filter on device batadv0
[  319.086594][T12657] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2774'.
[  319.284435][T12521] veth0_vlan: entered promiscuous mode
[  319.295008][T12521] veth1_vlan: entered promiscuous mode
[  319.326372][T12521] veth0_macvtap: entered promiscuous mode
[  319.339298][T12521] veth1_macvtap: entered promiscuous mode
[  319.368696][T12521] batman_adv: batadv0: Interface activated: batadv_slave_0
[  319.377908][T12521] batman_adv: batadv0: Interface activated: batadv_slave_1
[  319.399275][ T5919] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  319.403024][ T5919] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  319.406480][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  319.434922][ T5919] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  319.510909][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  319.513306][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  319.545522][ T4370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  319.549137][ T4370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  319.927761][ T5237] Bluetooth: hci2: command tx timeout
[  320.425829][T12712] fuse: Unknown parameter '00000000000000000000'
[  320.541365][T12704] loop4: detected capacity change from 0 to 32768
[  320.563660][T12718] overlayfs: failed to clone upperpath
[  320.585251][T12704] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  320.614346][T12704] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  320.634132][T12704] XFS (loop4): Starting recovery (logdev: internal)
[  320.652841][T12704] XFS (loop4): Ending recovery (logdev: internal)
[  320.719406][T12521] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  321.987844][ T5237] Bluetooth: hci2: command tx timeout
[  322.193918][T12774] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  322.951642][T12786] loop4: detected capacity change from 0 to 16
[  322.955584][T12786] erofs (device loop4): mounted with root inode @ nid 36.
[  324.394639][T12806] netlink: 'syz.1.2832': attribute type 5 has an invalid length.
[  324.429526][T12808] tipc: Started in network mode
[  324.431519][T12808] tipc: Node identity ac1414aa, cluster identity 4711
[  324.445967][T12808] tipc: Enabled bearer <udp:syz2>, priority 10
[  324.472105][T12810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2833'.
[  324.934277][T12815] loop4: detected capacity change from 0 to 32768
[  324.992320][ T5857]  loop4: p1 p2 p3 < p5 p6 >
[  324.996824][ T5857] loop4: p1 size 242222080 extends beyond EOD, truncated
[  325.003142][ T5857] loop4: p2 start 4294967295 is beyond EOD, truncated
[  325.036824][T12815]  loop4: p1 p2 p3 < p5 p6 >
[  325.040057][T12815] loop4: p1 size 242222080 extends beyond EOD, truncated
[  325.046583][T12815] loop4: p2 start 4294967295 is beyond EOD, truncated
[  325.115877][T12841] vxcan0: tx address claim with different name
[  325.177594][T12843] loop4: detected capacity change from 0 to 164
[  325.291439][ T5864] udevd[5864]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory
[  325.301597][ T6402] udevd[6402]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory
[  325.308711][ T5938] udevd[5938]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  325.324806][ T5857] udevd[5857]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  325.690866][ T5920] tipc: Node number set to 2886997162
[  325.697570][ T5857] udevd[5857]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  325.699221][ T5938] udevd[5938]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  325.703931][ T6402] udevd[6402]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory
[  325.714206][ T5864] udevd[5864]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory
[  325.721020][T12849] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  326.244774][T12852] loop4: detected capacity change from 0 to 40427
[  326.250170][T12852] F2FS-fs: heap/no_heap options were deprecated
[  326.253551][T12852] F2FS-fs (loop4): build fault injection rate: 23
[  326.256211][T12852] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  326.261279][T12852] F2FS-fs (loop4): invalid crc value
[  326.308857][T12852] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  326.400696][ T5919] team0: Port device  removed
[  326.410193][T12852] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  326.430060][T12852] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  326.450770][T12852] F2FS-fs (loop4): inject slab alloc in f2fs_alloc_inode of alloc_inode+0x6a/0x1b0
[  326.977197][ T5919] bridge_slave_1: left allmulticast mode
[  326.979503][ T5919] bridge_slave_1: left promiscuous mode
[  326.986414][ T5919] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.007950][ T5919] bridge_slave_0: left allmulticast mode
[  327.010354][ T5919] bridge_slave_0: left promiscuous mode
[  327.012854][ T5919] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.416867][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  327.652587][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  327.659782][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  327.665304][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  327.668844][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  328.195008][ T5919] dvmrp0 (unregistering): left allmulticast mode
[  328.737637][ T5919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  328.742695][ T5919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  328.746820][ T5919] bond0 (unregistering): Released all slaves
[  328.897288][ T5919] bond1 (unregistering): Released all slaves
[  329.346590][ T5919] hsr_slave_0: left promiscuous mode
[  329.354125][ T5919] hsr_slave_1: left promiscuous mode
[  329.358156][ T5919] batman_adv: batadv0: Removing interface: batadv_slave_0
[  329.361655][ T5919] batman_adv: batadv0: Removing interface: batadv_slave_1
[  329.364820][ T5919] batman_adv: batadv0: Interface deactivated: dummy0
[  329.374085][ T5919] batman_adv: batadv0: Removing interface: dummy0
[  329.750082][   T54] Bluetooth: hci1: command tx timeout
[  329.818195][ T5919] team0 (unregistering): Port device team_slave_1 removed
[  329.861039][ T5919] team0 (unregistering): Port device team_slave_0 removed
[  330.295395][T12874] chnl_net:caif_netlink_parms(): no params data found
[  330.458324][T12874] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.461340][T12874] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.468578][T12874] bridge_slave_0: entered allmulticast mode
[  330.485941][T12874] bridge_slave_0: entered promiscuous mode
[  330.496761][T12874] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.508822][T12874] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.511295][T12874] bridge_slave_1: entered allmulticast mode
[  330.514271][T12874] bridge_slave_1: entered promiscuous mode
[  330.598939][T12874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  330.605104][T12874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  330.975728][ T5919] ------------[ cut here ]------------
[  330.978459][ T5919] WARNING: CPU: 0 PID: 5919 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x7e/0x100
[  330.982489][ T5919] Modules linked in:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  330.984614][ T5919] CPU: 0 UID: 0 PID: 5919 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  330.989459][ T5919] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  330.993260][ T5919] Workqueue: netns cleanup_net
[  330.995062][ T5919] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  330.997546][ T5919] Code: 78 ab de f7 4b 83 3c 2c 00 75 19 e8 fc 2d 7b f7 49 81 fd f8 07 00 00 74 1d e8 ee 2d 7b f7 49 83 c5 08 eb c9 e8 e3 2d 7b f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  331.005073][ T5919] RSP: 0018:ffffc900045278b0 EFLAGS: 00010293
[  331.007509][ T5919] RAX: ffffffff8a447fad RBX: ffff88810b32c000 RCX: ffff888020e45640
[  331.010599][ T5919] RDX: 0000000000000000 RSI: ffffffff8d9ba307 RDI: ffff88810b32c000
[  331.013694][ T5919] RBP: ffffc900045279b0 R08: ffffffff8fa3a737 R09: 1ffffffff1f474e6
[  331.016741][ T5919] R10: dffffc0000000000 R11: fffffbfff1f474e7 R12: ffff88810b32c000
[  331.019950][ T5919] R13: 0000000000000000 R14: ffff88810b5e0000 R15: dffffc0000000000
[  331.023020][ T5919] FS:  0000000000000000(0000) GS:ffff8880b8613000(0000) knlGS:0000000000000000
[  331.026853][ T5919] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  331.029538][ T5919] CR2: 0000001b32f1fff8 CR3: 000000010f34a000 CR4: 00000000000006f0
[  331.032609][ T5919] Call Trace:
[  331.033940][ T5919]  <TASK>
[  331.035170][ T5919]  ops_undo_list+0x49a/0x990
[  331.037118][ T5919]  ? __pfx_ops_undo_list+0x10/0x10
[  331.039276][ T5919]  ? do_raw_spin_unlock+0x4d/0x240
[  331.041339][ T5919]  cleanup_net+0x4c5/0x800
[  331.043053][ T5919]  ? __pfx_cleanup_net+0x10/0x10
[  331.044984][ T5919]  ? _raw_spin_unlock_irq+0x23/0x50
[  331.047138][ T5919]  ? process_scheduled_works+0x9ef/0x17b0
[  331.049456][ T5919]  ? process_scheduled_works+0x9ef/0x17b0
[  331.051724][ T5919]  process_scheduled_works+0xae1/0x17b0
[  331.053991][ T5919]  ? __pfx_process_scheduled_works+0x10/0x10
[  331.056457][ T5919]  worker_thread+0x8a0/0xda0
[  331.058654][ T5919]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  331.061248][ T5919]  ? __kthread_parkme+0x7b/0x200
[  331.063288][ T5919]  kthread+0x711/0x8a0
[  331.064912][ T5919]  ? __pfx_worker_thread+0x10/0x10
[  331.067093][ T5919]  ? __pfx_kthread+0x10/0x10
[  331.068989][ T5919]  ? _raw_spin_unlock_irq+0x23/0x50
[  331.071217][ T5919]  ? lockdep_hardirqs_on+0x9c/0x150
[  331.073343][ T5919]  ? __pfx_kthread+0x10/0x10
[  331.075229][ T5919]  ret_from_fork+0x439/0x7d0
[  331.077345][ T5919]  ? __pfx_ret_from_fork+0x10/0x10
[  331.079449][ T5919]  ? __switch_to_asm+0x39/0x70
[  331.081398][ T5919]  ? __switch_to_asm+0x33/0x70
[  331.083281][ T5919]  ? __pfx_kthread+0x10/0x10
[  331.085483][ T5919]  ret_from_fork_asm+0x1a/0x30
[  331.087485][ T5919]  </TASK>
[  331.088782][ T5919] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  331.091572][ T5919] CPU: 0 UID: 0 PID: 5919 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  331.095209][ T5919] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  331.099114][ T5919] Workqueue: netns cleanup_net
[  331.101091][ T5919] Call Trace:
[  331.102462][ T5919]  <TASK>
[  331.103654][ T5919]  dump_stack_lvl+0x99/0x250
[  331.105524][ T5919]  ? __asan_memcpy+0x40/0x70
[  331.107350][ T5919]  ? __pfx_dump_stack_lvl+0x10/0x10
[  331.109446][ T5919]  ? __pfx__printk+0x10/0x10
[  331.111269][ T5919]  vpanic+0x281/0x750
[  331.112865][ T5919]  ? __pfx__printk+0x10/0x10
[  331.114698][ T5919]  ? __pfx_vpanic+0x10/0x10
[  331.116550][ T5919]  ? is_bpf_text_address+0x292/0x2b0
[  331.118643][ T5919]  panic+0xb9/0xc0
[  331.119920][ T5919]  ? __pfx_panic+0x10/0x10
[  331.121442][ T5919]  __warn+0x31b/0x4b0
[  331.122782][ T5919]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  331.124558][ T5919]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  331.126381][ T5919]  report_bug+0x2be/0x4f0
[  331.127914][ T5919]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  331.130101][ T5919]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  331.132222][ T5919]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  331.134357][ T5919]  handle_bug+0x84/0x160
[  331.135985][ T5919]  exc_invalid_op+0x1a/0x50
[  331.137730][ T5919]  asm_exc_invalid_op+0x1a/0x20
[  331.139667][ T5919] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  331.141954][ T5919] Code: 78 ab de f7 4b 83 3c 2c 00 75 19 e8 fc 2d 7b f7 49 81 fd f8 07 00 00 74 1d e8 ee 2d 7b f7 49 83 c5 08 eb c9 e8 e3 2d 7b f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  331.149364][ T5919] RSP: 0018:ffffc900045278b0 EFLAGS: 00010293
[  331.151719][ T5919] RAX: ffffffff8a447fad RBX: ffff88810b32c000 RCX: ffff888020e45640
[  331.154733][ T5919] RDX: 0000000000000000 RSI: ffffffff8d9ba307 RDI: ffff88810b32c000
[  331.157813][ T5919] RBP: ffffc900045279b0 R08: ffffffff8fa3a737 R09: 1ffffffff1f474e6
[  331.160875][ T5919] R10: dffffc0000000000 R11: fffffbfff1f474e7 R12: ffff88810b32c000
[  331.163928][ T5919] R13: 0000000000000000 R14: ffff88810b5e0000 R15: dffffc0000000000
[  331.167030][ T5919]  ? xfrm6_tunnel_net_exit+0x7d/0x100
[  331.169166][ T5919]  ops_undo_list+0x49a/0x990
[  331.170996][ T5919]  ? __pfx_ops_undo_list+0x10/0x10
[  331.173022][ T5919]  ? do_raw_spin_unlock+0x4d/0x240
[  331.175074][ T5919]  cleanup_net+0x4c5/0x800
[  331.176878][ T5919]  ? __pfx_cleanup_net+0x10/0x10
[  331.178868][ T5919]  ? _raw_spin_unlock_irq+0x23/0x50
[  331.180935][ T5919]  ? process_scheduled_works+0x9ef/0x17b0
[  331.183198][ T5919]  ? process_scheduled_works+0x9ef/0x17b0
[  331.185426][ T5919]  process_scheduled_works+0xae1/0x17b0
[  331.187676][ T5919]  ? __pfx_process_scheduled_works+0x10/0x10
[  331.190123][ T5919]  worker_thread+0x8a0/0xda0
[  331.191981][ T5919]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  331.194485][ T5919]  ? __kthread_parkme+0x7b/0x200
[  331.196486][ T5919]  kthread+0x711/0x8a0
[  331.198169][ T5919]  ? __pfx_worker_thread+0x10/0x10
[  331.200238][ T5919]  ? __pfx_kthread+0x10/0x10
[  331.202106][ T5919]  ? _raw_spin_unlock_irq+0x23/0x50
[  331.204233][ T5919]  ? lockdep_hardirqs_on+0x9c/0x150
[  331.206309][ T5919]  ? __pfx_kthread+0x10/0x10
[  331.208200][ T5919]  ret_from_fork+0x439/0x7d0
[  331.210071][ T5919]  ? __pfx_ret_from_fork+0x10/0x10
[  331.212162][ T5919]  ? __switch_to_asm+0x39/0x70
[  331.214092][ T5919]  ? __switch_to_asm+0x33/0x70
[  331.216041][ T5919]  ? __pfx_kthread+0x10/0x10
[  331.217913][ T5919]  ret_from_fork_asm+0x1a/0x30
[  331.219877][ T5919]  </TASK>
[  331.221851][ T5919] Kernel Offset: disabled
[  331.223641][ T5919] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:45:16  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90004527050
R8 =ffff88801eea8237 R9 =1ffff11003dd5046 R10=dffffc0000000000 R11=ffffffff854fada0
R12=dffffc0000000000 R13=ffffffff99b028ff R14=ffffffff99df7460 R15=0000000000000000
RIP=ffffffff854fae1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32f1fff8 CR3=000000010f34a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ff00ff0000000000 0000000000000000 XMM05=0000000000000000 00007fdc74812e7b
XMM06=0000000000000000 00007fdc74812e75 XMM07=0000000000000000 00007fdc74812e89
XMM08=0000000000000000 00007fdc74812f0f XMM09=0000000000000000 00007fdc74812fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000201 RCX=0000000000000001 RDX=0000000000000000
RSI=0000000000000201 RDI=ffffffff871774e7 RBP=ffffc90006c37980 RSP=ffffc90006c37900
R8 =ffff8880345925db R9 =1ffff110068b24bb R10=dffffc0000000000 R11=ffffed10068b24bc
R12=dffffc0000000000 R13=ffff88810b2e5c80 R14=dffffc0000000000 R15=1ffff92000d86f20
RIP=ffffffff8184e781 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4ce1707d60 CR3=0000000125ba0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff816798bb ffffffff816798bb
XMM02=ffffffff823c8bc4 ffffffff816798bb XMM03=ffffffff823c95ad ffffffff823c8c4c
XMM04=ffffffff823c9714 ffffffff823c95ad XMM05=ffffffff823c8c4c ffffffff823c8bc4
XMM06=ffffffff823c8902 ffffffff823c88ae XMM07=ffffffff82393185 ffffffff82393138
XMM08=3baf97ab7b696a60 555f8d4464d64a06 XMM09=0000000000000000 00007ff3b3e12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
