last executing test programs:

18.200807151s ago: executing program 1 (id=250):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="0f43", 0x2}], 0x1)
close_range(r1, r1, 0x0)

16.438547685s ago: executing program 1 (id=268):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

16.167772409s ago: executing program 1 (id=272):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)

15.990924585s ago: executing program 1 (id=274):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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")
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

15.735746314s ago: executing program 1 (id=275):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3})
ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000000)={0x980900, 0x7, @value=0x2})

15.410992377s ago: executing program 1 (id=278):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000600)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00', 0x6}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000140)="86", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='f', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0x9, 0x0, 0x7ff, 0x2}, &(0x7f00000002c0)=0x10)

15.302356072s ago: executing program 32 (id=278):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000600)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00', 0x6}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000140)="86", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='f', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0x9, 0x0, 0x7ff, 0x2}, &(0x7f00000002c0)=0x10)

7.060898452s ago: executing program 0 (id=347):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x1, @rand_addr=0x64010101}, 0xa, 0x0, 0x800}}, 0x26)
sendmmsg$inet(r2, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040)
close_range(r0, 0xffffffffffffffff, 0x0)

6.965081798s ago: executing program 0 (id=349):
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0xc, 0x3, 0x4, 0x0, &(0x7f0000048000), 0xfffffffe)

6.110116678s ago: executing program 0 (id=365):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}})
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}})

5.948370536s ago: executing program 0 (id=366):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f00000000c0)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@norecovery}, {@nouid32}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
lstat(&(0x7f0000000300)='./file2\x00', 0x0)

5.544611383s ago: executing program 0 (id=368):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0)

2.839590753s ago: executing program 0 (id=400):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x20)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setrlimit(0xd, 0x0)
bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r2, &(0x7f00000024c0)={0xa, 0x7, 0x0, @loopback, 0x8}, 0x20)

2.539148613s ago: executing program 33 (id=400):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x20)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setrlimit(0xd, 0x0)
bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r2, &(0x7f00000024c0)={0xa, 0x7, 0x0, @loopback, 0x8}, 0x20)

1.487718405s ago: executing program 3 (id=409):
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)

1.487508506s ago: executing program 3 (id=410):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000380)={[{@nls={'nls', 0x3d, 'cp1251'}}, {@gid}, {@part={'part', 0x3d, 0xb8}}, {@force}, {@gid}, {@gid}, {@gid}]}, 0x43, 0x71c, &(0x7f0000000440)="$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")
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)

1.370451102s ago: executing program 3 (id=411):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2c, 0x17, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x840)

1.290759143s ago: executing program 3 (id=412):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400030006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)

1.29031225s ago: executing program 3 (id=413):
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f00000003c0)='./file3\x00', 0x8000, &(0x7f00000017c0)=ANY=[], 0x2, 0x5b03, &(0x7f000000bc00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0)
pwrite64(r1, &(0x7f0000000080)="8e", 0x1, 0x709c)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000047c0)=ANY=[@ANYBLOB="0c000000000000000580"])

1.147391376s ago: executing program 2 (id=415):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8040)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094)

1.041203564s ago: executing program 2 (id=416):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x80001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "d2487b822050386f", "4946115b8e1acab11dda0ee7d5239a0ff818a4b776b238dccb81bfd9652cb934", "f728d519", "0cb42238c52f3b48"}, 0x38)
sendfile(r0, r1, &(0x7f0000000100)=0x10, 0x10001)

929.068925ms ago: executing program 2 (id=417):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)={0x44, r1, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac06}]}]}, 0x44}}, 0x8000)

797.210362ms ago: executing program 3 (id=418):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0x7076, 0x400, 0x2, 0x4028a}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000480)={r2, @in6={{0xa, 0x4e22, 0x6, @remote, 0xfff}}}, &(0x7f0000000240)=0x84)

210.967008ms ago: executing program 2 (id=419):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x94, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x80, 0x1, [@m_bpf={0x7c, 0x1, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0xb, 0x2, {0xa4}}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0)

89.987388ms ago: executing program 2 (id=420):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf250a0000000000000800000000080018004e214e24"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)

0s ago: executing program 2 (id=421):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2d51, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
syz_clone(0x6988b500, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0022050000008ce34a"], 0x0}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:34931' (ED25519) to the list of known hosts.
syzkaller login: [   48.945730][ T5828] cgroup: Unknown subsys name 'net'
[   49.031770][ T5828] cgroup: Unknown subsys name 'cpuset'
[   49.036916][ T5828] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.912042][ T5828] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.197135][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.200899][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.204388][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.208433][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.211778][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.217641][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.225711][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.229355][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.232853][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.236413][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.268506][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.272603][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.276622][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.281310][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.285148][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.568499][ T5858] chnl_net:caif_netlink_parms(): no params data found
[   55.601663][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   55.745585][ T5862] chnl_net:caif_netlink_parms(): no params data found
[   55.752908][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.758321][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.761307][ T5858] bridge_slave_0: entered allmulticast mode
[   55.765100][ T5858] bridge_slave_0: entered promiscuous mode
[   55.785372][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.788047][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.790449][ T5858] bridge_slave_1: entered allmulticast mode
[   55.793958][ T5858] bridge_slave_1: entered promiscuous mode
[   55.851481][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.854646][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.858842][ T5854] bridge_slave_0: entered allmulticast mode
[   55.862369][ T5854] bridge_slave_0: entered promiscuous mode
[   55.889891][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.892675][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.895400][ T5854] bridge_slave_1: entered allmulticast mode
[   55.899411][ T5854] bridge_slave_1: entered promiscuous mode
[   55.905594][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.913104][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.977252][ T5858] team0: Port device team_slave_0 added
[   55.979524][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.982361][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.985148][ T5862] bridge_slave_0: entered allmulticast mode
[   55.989369][ T5862] bridge_slave_0: entered promiscuous mode
[   55.993345][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.996011][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.999461][ T5862] bridge_slave_1: entered allmulticast mode
[   56.002810][ T5862] bridge_slave_1: entered promiscuous mode
[   56.019276][ T5858] team0: Port device team_slave_1 added
[   56.023996][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.030656][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.078104][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.095139][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.097986][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.108457][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.126427][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.142218][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.145068][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.156009][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.163229][ T5854] team0: Port device team_slave_0 added
[   56.185237][ T5854] team0: Port device team_slave_1 added
[   56.212154][ T5862] team0: Port device team_slave_0 added
[   56.215972][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.219127][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.229314][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.235235][ T5862] team0: Port device team_slave_1 added
[   56.251471][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.254209][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.264248][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.311643][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.314367][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.324621][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.334494][ T5858] hsr_slave_0: entered promiscuous mode
[   56.340049][ T5858] hsr_slave_1: entered promiscuous mode
[   56.355538][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.358250][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.368212][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.443122][ T5854] hsr_slave_0: entered promiscuous mode
[   56.446628][ T5854] hsr_slave_1: entered promiscuous mode
[   56.450489][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   56.452953][ T5854] Cannot create hsr debugfs directory
[   56.477725][ T5862] hsr_slave_0: entered promiscuous mode
[   56.480917][ T5862] hsr_slave_1: entered promiscuous mode
[   56.483559][ T5862] debugfs: 'hsr0' already exists in 'hsr'
[   56.485802][ T5862] Cannot create hsr debugfs directory
[   56.773865][ T5858] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.785084][ T5858] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.791388][ T5858] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.804715][ T5858] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.850500][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.862059][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.873283][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.880492][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.952753][ T5862] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.958920][ T5862] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.965916][ T5862] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.980514][ T5862] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.018533][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.053582][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[   57.066390][  T135] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.068894][  T135] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.084028][  T135] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.086574][  T135] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.100636][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.126060][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   57.146021][  T135] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.148635][  T135] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.168067][ T4649] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.170868][ T4649] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.233777][ T5854] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.239766][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.273578][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.289642][ T5235] Bluetooth: hci1: command tx timeout
[   57.292418][ T5859] Bluetooth: hci0: command tx timeout
[   57.295960][ T5862] 8021q: adding VLAN 0 to HW filter on device team0
[   57.301533][ T4649] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.303900][ T4649] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.338264][ T4649] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.340610][ T4649] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.367279][ T5859] Bluetooth: hci2: command tx timeout
[   57.385249][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.430584][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.458945][ T5858] veth0_vlan: entered promiscuous mode
[   57.465433][ T5858] veth1_vlan: entered promiscuous mode
[   57.499079][ T5858] veth0_macvtap: entered promiscuous mode
[   57.508669][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.513467][ T5858] veth1_macvtap: entered promiscuous mode
[   57.552312][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.560901][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.566592][ T5854] veth0_vlan: entered promiscuous mode
[   57.587500][ T5708] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.592257][ T5708] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.596518][ T5862] veth0_vlan: entered promiscuous mode
[   57.610010][ T5708] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.614543][ T5854] veth1_vlan: entered promiscuous mode
[   57.628826][ T5708] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.651766][ T5862] veth1_vlan: entered promiscuous mode
[   57.684154][ T3030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.689734][ T3030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.701440][ T5854] veth0_macvtap: entered promiscuous mode
[   57.715553][ T5854] veth1_macvtap: entered promiscuous mode
[   57.729800][ T5862] veth0_macvtap: entered promiscuous mode
[   57.739567][ T3030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.744764][ T5862] veth1_macvtap: entered promiscuous mode
[   57.747254][ T3030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.763541][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.773636][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.785907][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.797984][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.806634][ T5858] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.815976][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.830639][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.844474][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.851337][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.855476][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.883844][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.890849][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.894616][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.006536][ T4649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.011700][ T4649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.054860][ T3030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.058625][ T3030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.101906][ T4649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.107817][ T4649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.123829][  T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.127614][  T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.282051][ T5922] loop1: detected capacity change from 0 to 32768
[   58.501415][ T5939] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8'.
[   58.630080][ T5925] loop2: detected capacity change from 0 to 40427
[   58.653063][ T5952] loop1: detected capacity change from 0 to 24
[   58.656197][ T5952] =======================================================
[   58.656197][ T5952] WARNING: The mand mount option has been deprecated and
[   58.656197][ T5952]          and is ignored by this kernel. Remove the mand
[   58.656197][ T5952]          option from the mount to silence this warning.
[   58.656197][ T5952] =======================================================
[   58.656278][ T5925] F2FS-fs (loop2): build fault injection rate: 14
[   58.669465][ T5952] MTD: Attempt to mount non-MTD device "/dev/loop1"
[   58.670772][ T5952] romfs: Mounting image 'rom 637cf1fa' through the block layer
[   58.704938][ T5925] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[   58.710624][ T5952] dummy0: entered promiscuous mode
[   58.712387][ T5952] vlan2: entered promiscuous mode
[   58.724852][ T5925] F2FS-fs (loop2): invalid crc value
[   58.738447][    C1] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[   58.750953][    C0] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[   58.805541][ T5925] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   58.817100][ T5925] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[   58.839578][ T5925] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   58.853482][ T5925] F2FS-fs (loop2): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x249/0x1cf0
[   58.870010][ T5925] F2FS-fs (loop2): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098]
[   58.880504][ T5963] netlink: 'syz.0.19': attribute type 1 has an invalid length.
[   58.985961][ T5967] loop0: detected capacity change from 0 to 1024
[   59.025567][   T29] hfsplus: b-tree write err: -5, ino 4
[   59.107005][    T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   59.282198][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   59.289227][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   59.295323][    T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[   59.305117][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.336585][    T9] usb 2-1: config 0 descriptor??
[   59.367313][ T5859] Bluetooth: hci1: command tx timeout
[   59.369913][ T5859] Bluetooth: hci0: command tx timeout
[   59.447328][ T5859] Bluetooth: hci2: command tx timeout
[   59.501597][ T5978] loop2: detected capacity change from 0 to 4096
[   59.513839][ T5978] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   59.610860][ T5978] ntfs3(loop2): ino=19, mi_enum_attr
[   59.962234][    T9] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0
[   59.965260][    T9] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0
[   59.968074][    T9] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0
[   59.970432][    T9] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0
[   59.972692][    T9] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0
[   59.975018][    T9] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0
[   59.977570][    T9] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0
[   59.988988][    T9] pyra 0003:1E7D:2CF6.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0
[   60.276318][ T5984] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.298653][    T9] pyra 0003:1E7D:2CF6.0001: couldn't init struct pyra_device
[   60.305637][    T9] pyra 0003:1E7D:2CF6.0001: couldn't install mouse
[   60.347451][    T9] pyra 0003:1E7D:2CF6.0001: probe with driver pyra failed with error -71
[   60.362417][    T9] usb 2-1: USB disconnect, device number 2
[   60.372036][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29'.
[   60.419944][ T5987] macvtap1: entered promiscuous mode
[   60.422327][ T5987] vlan0: entered promiscuous mode
[   60.424793][ T5987] macvtap1: entered allmulticast mode
[   60.428322][ T5987] vlan0: entered allmulticast mode
[   60.430203][ T5987] veth0_vlan: entered allmulticast mode
[   60.521381][ T5997] loop2: detected capacity change from 0 to 256
[   60.561263][ T5997] capability: warning: `syz.2.33' uses deprecated v2 capabilities in a way that may be insecure
[   60.785683][ T6017] loop0: detected capacity change from 0 to 1024
[   60.944460][   T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   60.976307][ T6031] loop1: detected capacity change from 0 to 1024
[   60.999350][ T6031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.024477][ T5858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.110494][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   61.113745][   T10] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[   61.118201][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.118214][   T10] usb 3-1: Product: syz
[   61.118223][   T10] usb 3-1: Manufacturer: syz
[   61.118230][   T10] usb 3-1: SerialNumber: syz
[   61.124511][   T10] usb 3-1: config 0 descriptor??
[   61.139485][   T10] powermate 3-1:0.0: probe with driver powermate failed with error -22
[   61.352021][   T10] usb 3-1: USB disconnect, device number 2
[   61.446913][ T5235] Bluetooth: hci1: command tx timeout
[   61.449194][ T5859] Bluetooth: hci0: command tx timeout
[   61.537164][ T5859] Bluetooth: hci2: command tx timeout
[   61.744402][ T6043] loop0: detected capacity change from 0 to 1024
[   61.751895][ T6043] hfsplus: bad catalog entry type
[   61.764422][ T4649] hfsplus: b-tree write err: -5, ino 4
[   61.782525][ T6045] netlink: 316 bytes leftover after parsing attributes in process `syz.0.52'.
[   62.169854][ T6061] loop2: detected capacity change from 0 to 16
[   62.184555][ T6061] erofs (device loop2): mounted with root inode @ nid 36.
[   62.477047][ T6060] netlink: 'syz.1.59': attribute type 11 has an invalid length.
[   62.767064][  T791] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   62.940351][  T791] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08
[   62.947284][  T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.952008][  T791] usb 2-1: Product: syz
[   62.953369][  T791] usb 2-1: Manufacturer: syz
[   62.954950][  T791] usb 2-1: SerialNumber: syz
[   62.972954][  T791] usb 2-1: config 0 descriptor??
[   62.983031][  T791] gm12u320 2-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22
[   62.997265][  T791] gm12u320 2-1:0.0: probe with driver gm12u320 failed with error -5
[   63.009486][  T791] usb-storage 2-1:0.0: USB Mass Storage device detected
[   63.016387][  T791] usb-storage 2-1:0.0: device ignored
[   63.112824][ T6096] trusted_key: encrypted_key: insufficient parameters specified
[   63.316260][ T5905] usb 2-1: USB disconnect, device number 3
[   63.536984][ T5859] Bluetooth: hci0: command tx timeout
[   63.537246][ T5235] Bluetooth: hci1: command tx timeout
[   63.607183][ T5235] Bluetooth: hci2: command tx timeout
[   64.059894][ T6107] loop1: detected capacity change from 0 to 256
[   64.186493][ T6109] loop1: detected capacity change from 0 to 2048
[   64.231794][ T6109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.237960][ T6109] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.254975][ T6109] fs-verity (loop1, inode 13): Unknown hash algorithm number: 3
[   64.294435][ T5858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.326882][   T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   65.410737][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'.
[   65.506803][   T10] usb 1-1: Using ep0 maxpacket: 8
[   65.512626][   T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[   65.516882][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.519603][   T10] usb 1-1: Product: syz
[   65.521018][   T10] usb 1-1: Manufacturer: syz
[   65.522639][   T10] usb 1-1: SerialNumber: syz
[   65.530898][ T6133] loop1: detected capacity change from 0 to 764
[   65.548805][   T10] usb 1-1: config 0 descriptor??
[   65.968980][   T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[   66.468528][ T6161] netlink: 72 bytes leftover after parsing attributes in process `syz.2.94'.
[   66.537261][ T5905] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   66.689185][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[   66.693429][ T5905] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[   66.698476][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[   66.702203][ T5905] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[   66.708059][ T5905] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39
[   66.710954][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.714010][ T5905] usb 2-1: Product: syz
[   66.715628][ T5905] usb 2-1: Manufacturer: syz
[   66.718471][ T5905] usb 2-1: SerialNumber: syz
[   66.722580][ T5905] usb 2-1: config 0 descriptor??
[   66.731893][ T5905] usb 2-1: NFC: Unable to get FW version
[   66.734549][ T5905] pn533_usb 2-1:0.0: probe with driver pn533_usb failed with error -90
[   66.797262][   T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[   66.807034][   T10] usb 1-1: USB disconnect, device number 2
[   66.887838][ T5313] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   66.933243][  T791] usb 2-1: USB disconnect, device number 4
[   67.040033][ T5313] usb 3-1: config 3 has an invalid interface number: 61 but max is 0
[   67.043564][ T5313] usb 3-1: config 3 has no interface number 0
[   67.046245][ T5313] usb 3-1: config 3 interface 61 has no altsetting 0
[   67.053138][ T5313] usb 3-1: string descriptor 0 read error: -22
[   67.055935][ T5313] usb 3-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26
[   67.059933][ T5313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.074695][ T5313] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[   67.110014][ T5313] snd-usb-audio 3-1:3.61: probe with driver snd-usb-audio failed with error -2
[   67.281692][ T5313] usb 3-1: USB disconnect, device number 3
[   67.486132][ T6182] syz.1.104 uses obsolete (PF_INET,SOCK_PACKET)
[   67.630525][ T6189] program syz.0.107 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   67.680826][ T6194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.110'.
[   67.684199][ T6194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.110'.
[   67.832831][ T6199] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.654001][ T6208] kernel profiling enabled (shift: 9)
[   68.716031][ T6196] loop0: detected capacity change from 0 to 32768
[   68.777177][ T6220] loop2: detected capacity change from 0 to 256
[   68.781694][ T6220] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   68.786249][ T6220] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[   68.791510][ T6220] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[   68.794502][ T6220] UDF-fs: Scanning with blocksize 512 failed
[   68.798267][ T6220] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   68.802590][ T6220] UDF-fs: warning (device loop2): udf_fill_super: No fileset found
[   68.830277][ T6196] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   68.958182][ T6196] XFS (loop0): Ending clean mount
[   69.227755][ T5854] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   69.358598][ T6226] loop2: detected capacity change from 0 to 40427
[   69.487372][ T6226] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   69.492548][ T6226] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   69.516533][ T6226] syz.2.121: attempt to access beyond end of device
[   69.516533][ T6226] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   69.538163][ T5862] syz-executor: attempt to access beyond end of device
[   69.538163][ T5862] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[   69.544787][ T5862] CPU: 1 UID: 0 PID: 5862 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   69.544801][ T5862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   69.544805][ T5862] Call Trace:
[   69.544809][ T5862]  <TASK>
[   69.544813][ T5862]  dump_stack_lvl+0x189/0x250
[   69.544828][ T5862]  ? __pfx_dump_stack_lvl+0x10/0x10
[   69.544837][ T5862]  ? __pfx_queue_work_on+0x10/0x10
[   69.544845][ T5862]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   69.544855][ T5862]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   69.544868][ T5862]  f2fs_handle_critical_error+0x37c/0x540
[   69.544882][ T5862]  f2fs_write_end_io+0x886/0xb60
[   69.544897][ T5862]  __submit_merged_bio+0x27a/0x6a0
[   69.544933][ T5862]  __submit_merged_write_cond+0x255/0x530
[   69.544946][ T5862]  f2fs_write_data_pages+0x261d/0x3000
[   69.544971][ T5862]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   69.544988][ T5862]  ? is_bpf_text_address+0x26/0x2b0
[   69.545012][ T5862]  ? check_path+0x21/0x40
[   69.545019][ T5862]  ? check_noncircular+0xe0/0x160
[   69.545049][ T5862]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   69.545059][ T5862]  do_writepages+0x32e/0x550
[   69.545074][ T5862]  ? do_raw_spin_unlock+0x4d/0x240
[   69.545107][ T5862]  filemap_fdatawrite+0x199/0x240
[   69.545120][ T5862]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   69.545151][ T5862]  ? do_raw_spin_unlock+0x4d/0x240
[   69.545163][ T5862]  f2fs_sync_dirty_inodes+0x31f/0x830
[   69.545177][ T5862]  f2fs_write_checkpoint+0x95a/0x1df0
[   69.545195][ T5862]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   69.545224][ T5862]  ? kill_f2fs_super+0x298/0x6c0
[   69.545234][ T5862]  kill_f2fs_super+0x2c3/0x6c0
[   69.545244][ T5862]  ? __pfx_kill_f2fs_super+0x10/0x10
[   69.545250][ T5862]  ? radix_tree_delete_item+0x2b6/0x400
[   69.545263][ T5862]  ? shrinker_free+0x2ce/0x3e0
[   69.545272][ T5862]  deactivate_locked_super+0xbc/0x130
[   69.545282][ T5862]  cleanup_mnt+0x425/0x4c0
[   69.545291][ T5862]  ? lockdep_hardirqs_on+0x9c/0x150
[   69.545302][ T5862]  task_work_run+0x1d4/0x260
[   69.545313][ T5862]  ? __pfx_task_work_run+0x10/0x10
[   69.545321][ T5862]  ? __x64_sys_umount+0x122/0x160
[   69.545332][ T5862]  ? exit_to_user_mode_loop+0x40/0x110
[   69.545344][ T5862]  exit_to_user_mode_loop+0xec/0x110
[   69.545353][ T5862]  do_syscall_64+0x2bd/0x3b0
[   69.545363][ T5862]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.545369][ T5862]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   69.545379][ T5862]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.545385][ T5862] RIP: 0033:0x7fb22538ff17
[   69.545393][ T5862] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   69.545400][ T5862] RSP: 002b:00007ffecb9fde88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   69.545413][ T5862] RAX: 0000000000000000 RBX: 00007fb225411c05 RCX: 00007fb22538ff17
[   69.545418][ T5862] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffecb9fdf40
[   69.545422][ T5862] RBP: 00007ffecb9fdf40 R08: 000000000000c088 R09: 0000000000000000
[   69.545426][ T5862] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffecb9fefd0
[   69.545431][ T5862] R13: 00007fb225411c05 R14: 0000000000010ef7 R15: 00007ffecb9ff010
[   69.545443][ T5862]  </TASK>
[   69.546912][ T5862] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   70.152551][ T6258] loop2: detected capacity change from 0 to 512
[   70.158145][ T6258] EXT4-fs: Ignoring removed nobh option
[   70.165375][ T6258] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   70.174726][ T6258] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002]
[   70.179198][ T6258] EXT4-fs (loop2): orphan cleanup on readonly fs
[   70.184483][ T6258] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.131: attempt to clear invalid blocks 1024 len 1
[   70.189670][ T6258] EXT4-fs (loop2): Remounting filesystem read-only
[   70.192564][ T6258] EXT4-fs (loop2): 1 truncate cleaned up
[   70.195245][ T6258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   70.218383][ T6260] loop1: detected capacity change from 0 to 4096
[   70.233752][ T5862] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   70.274898][   T33] audit: type=1804 audit(1755554200.173:2): pid=6260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.132" name="/newroot/40/file0/file0" dev="loop1" ino=0 res=1 errno=0
[   70.351418][ T6264] loop0: detected capacity change from 0 to 64
[   70.830815][ T6276] evm: overlay not supported
[   71.050059][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.053780][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.220202][ T6293] loop2: detected capacity change from 0 to 32768
[   71.245141][ T6293] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[   71.250983][ T6293] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   71.283469][ T6293] XFS (loop2): Ending clean mount
[   71.291946][ T6293] XFS (loop2): Quotacheck needed: Please wait.
[   71.302185][   T36] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_cntbt block 0x10 
[   71.308834][   T36] XFS (loop2): Unmount and run xfs_repair
[   71.312480][   T36] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   71.314968][   T36] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   71.319220][   T36] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[   71.326974][   T36] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[   71.330282][   T36] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[   71.337296][   T36] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[   71.340382][   T36] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[   71.343422][   T36] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   71.347772][   T36] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   71.351169][   T36] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x10 len 8 error 74
[   71.360782][ T6293] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[   71.407647][ T6293] XFS (loop2): User initiated shutdown received.
[   71.410398][ T6293] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476).  Shutting down filesystem.
[   71.424521][ T6293] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[   71.479170][ T5862] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   72.062784][ T6341] loop1: detected capacity change from 0 to 64
[   72.591026][ T6358] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   72.597663][ T5981] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   72.767844][ T5981] usb 1-1: Using ep0 maxpacket: 32
[   72.773919][ T5981] usb 1-1: config 0 has an invalid interface number: 30 but max is 0
[   72.776649][ T5981] usb 1-1: config 0 has no interface number 0
[   72.785294][ T5981] usb 1-1: New USB device found, idVendor=061d, idProduct=c180, bcdDevice=fc.f0
[   72.791386][ T5981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.795838][ T5981] usb 1-1: Product: syz
[   72.800461][ T5981] usb 1-1: Manufacturer: syz
[   72.805891][ T5981] usb 1-1: SerialNumber: syz
[   72.819020][ T5981] usb 1-1: config 0 descriptor??
[   72.825033][ T5981] quatech2 1-1:0.30: Quatech 2nd gen USB to Serial Driver converter detected
[   73.032814][ T5981] usb 1-1: qt2_attach - failed to power on unit: -71
[   73.035124][ T5981] quatech2 1-1:0.30: probe with driver quatech2 failed with error -71
[   73.044253][ T5981] usb 1-1: USB disconnect, device number 3
[   73.390762][ T6376] loop1: detected capacity change from 0 to 1024
[   73.393847][ T6376] EXT4-fs: Ignoring removed i_version option
[   73.403147][ T6376] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   73.412670][ T6376] EXT4-fs (loop1): group descriptors corrupted!
[   73.420132][ T6378] netlink: 324 bytes leftover after parsing attributes in process `syz.2.182'.
[   73.428384][ T6378] netlink: 36 bytes leftover after parsing attributes in process `syz.2.182'.
[   73.436431][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'.
[   73.663469][ T6395] loop0: detected capacity change from 0 to 512
[   73.672348][ T6395] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.689153][ T6395] EXT4-fs warning (device loop0): ext4_begin_enable_verity:135: inode #13: comm syz.0.191: verity is only allowed on extent-based files
[   73.730958][ T5854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.766761][ T5981] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   73.822975][   T33] audit: type=1800 audit(1755554203.723:3): pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.195" name="/" dev="9p" ino=2 res=0 errno=0
[   73.917425][ T5981] usb 3-1: Using ep0 maxpacket: 16
[   73.922868][ T5981] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[   73.926410][ T5981] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[   73.932301][ T5981] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   73.939391][ T5981] usb 3-1: config 1 interface 0 has no altsetting 0
[   73.945584][ T5981] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   73.949523][ T5981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.952435][ T5981] usb 3-1: Product: syz
[   73.954007][ T5981] usb 3-1: Manufacturer: syz
[   73.955777][ T5981] usb 3-1: SerialNumber: syz
[   74.035984][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'.
[   74.056899][ T5313] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   74.099979][ T6413] loop1: detected capacity change from 0 to 512
[   74.119283][ T6413] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   74.180962][ T5981] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[   74.181918][ T6413] capability: warning: `syz.1.198' uses 32-bit capabilities (legacy support in use)
[   74.226852][ T5313] usb 1-1: Using ep0 maxpacket: 32
[   74.230406][ T5313] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[   74.233651][ T5313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.242916][ T5313] usb 1-1: config 0 descriptor??
[   74.296829][ T5858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.407115][   T10] usb 3-1: USB disconnect, device number 4
[   74.423518][   T10] usblp0: removed
[   74.451734][ T5313] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[   74.609965][ T5313] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   74.642546][ T5313] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[   74.750660][ T5313] usb 1-1: media controller created
[   74.774005][ T5313] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   75.294519][ T6425] program syz.2.200 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   76.186261][ T6435] loop1: detected capacity change from 0 to 1024
[   76.311238][ T6435] hfsplus: bad catalog folder thread
[   76.756863][   T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   76.811295][ T5313] az6027: usb out operation failed. (-110)
[   76.814012][ T5313] az6027: usb out operation failed. (-32)
[   76.816344][ T5313] stb0899_attach: Driver disabled by Kconfig
[   76.818975][ T5313] az6027: no front-end attached
[   76.818975][ T5313] 
[   76.819185][ T6422] Process accounting resumed
[   76.822719][ T5313] az6027: usb out operation failed. (-32)
[   76.825684][ T5313] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[   76.831683][ T5313] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input4
[   76.839931][ T5313] dvb-usb: schedule remote query interval to 400 msecs.
[   76.842570][ T5313] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[   76.848841][ T5313] usb 1-1: USB disconnect, device number 4
[   76.884963][ T6441] warning: `syz.2.208' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   76.907627][   T24] usb 2-1: Using ep0 maxpacket: 32
[   76.925838][ T6444] netlink: 196 bytes leftover after parsing attributes in process `syz.0.209'.
[   76.934526][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64
[   76.948857][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64
[   76.964359][ T6444] netlink: 196 bytes leftover after parsing attributes in process `syz.0.209'.
[   76.972306][ T6444] netlink: 19 bytes leftover after parsing attributes in process `syz.0.209'.
[   76.988852][ T5313] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[   76.999068][   T24] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[   77.002668][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.009745][   T24] usb 2-1: Product: syz
[   77.011415][   T24] usb 2-1: Manufacturer: syz
[   77.013206][   T24] usb 2-1: SerialNumber: syz
[   77.025771][ T6448] loop2: detected capacity change from 0 to 764
[   77.027433][   T24] usb 2-1: config 0 descriptor??
[   77.049622][   T24] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[   77.245186][ T5981] usb 2-1: USB disconnect, device number 5
[   77.253681][ T5708] usb 2-1: Failed to submit usb control message: -71
[   77.256393][ T5708] usb 2-1: unable to send the bmi data to the device: -71
[   77.292159][ T5708] usb 2-1: unable to get target info from device
[   77.294583][ T5708] usb 2-1: could not get target info (-71)
[   77.296935][ T5708] usb 2-1: could not probe fw (-71)
[   77.346849][   T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   77.497073][   T24] usb 3-1: Using ep0 maxpacket: 8
[   77.513860][   T24] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[   77.523691][   T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   77.530623][   T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   77.534759][   T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   77.555464][   T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   77.575277][   T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   77.588283][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.941815][   T24] usb 3-1: GET_CAPABILITIES returned 0
[   77.943972][   T24] usbtmc 3-1:16.0: can't read capabilities
[   78.054575][ T6461] process 'syz.1.214' launched '/dev/fd/5' with NULL argv: empty string added
[   78.284376][   T10] usb 3-1: USB disconnect, device number 5
[   78.953076][ T6473] loop1: detected capacity change from 0 to 512
[   78.956234][ T6473] EXT4-fs: Ignoring removed mblk_io_submit option
[   78.958878][ T6473] EXT4-fs: Ignoring removed bh option
[   78.963247][ T6473] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   78.968251][ T6473] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   78.975739][ T6473] EXT4-fs (loop1): 1 truncate cleaned up
[   78.980414][ T6473] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.112137][ T6477] loop2: detected capacity change from 0 to 32768
[   79.136245][ T6477] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.219 (6477)
[   79.149476][ T5858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.168560][ T6477] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   79.174744][ T6477] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[   79.179973][ T6477] BTRFS info (device loop2): disk space caching is enabled
[   79.190538][ T6477] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   79.275542][ T6477] BTRFS info (device loop2): rebuilding free space tree
[   79.300213][ T6477] BTRFS info (device loop2): disabling free space tree
[   79.302856][ T6477] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   79.308404][ T6477] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   79.392470][ T6477] BTRFS info (device loop2): balance: start -f -sprofiles=data|system|metadata|raid1|dup|raid5|raid1c3,usage=18446744073709551615,usage=4294967295..4294967295,drange=18446744073709551612..8,vrange=288230376151711744..1,limit=51539607559
[   79.405276][ T6477] BTRFS info (device loop2): balance: ended with status: 0
[   79.464847][ T5862] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   79.580421][ T6511] loop0: detected capacity change from 0 to 512
[   79.604266][ T6511] EXT4-fs (loop0): orphan cleanup on readonly fs
[   79.617614][ T6511] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[   79.622048][ T6511] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[   79.625812][ T6511] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.228: Failed to acquire dquot type 1
[   79.640612][ T6511] EXT4-fs (loop0): 1 truncate cleaned up
[   79.647877][ T6511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   79.660064][ T6511] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[   79.665820][ T6511] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 8
[   79.690351][ T5854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.717104][   T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   79.847769][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'.
[   79.869248][ T5981] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   79.898532][   T24] usb 2-1: config 0 has an invalid interface number: 156 but max is 0
[   79.901244][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   79.908304][   T24] usb 2-1: config 0 has no interface number 0
[   79.910894][   T24] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[   79.915404][   T24] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   79.920153][   T24] usb 2-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   79.925598][   T24] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[   79.930776][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.939272][   T24] usb 2-1: config 0 descriptor??
[   79.944364][   T24] gspca_main: spca561-2.14.0 probing abcd:cdee
[   80.037726][ T5981] usb 3-1: Using ep0 maxpacket: 32
[   80.045822][ T5981] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[   80.049801][ T5981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.053292][ T5981] usb 3-1: Product: syz
[   80.055166][ T5981] usb 3-1: Manufacturer: syz
[   80.057294][ T5981] usb 3-1: SerialNumber: syz
[   80.062825][ T5981] usb 3-1: config 0 descriptor??
[   80.068675][ T5981] gspca_main: stk1135-2.14.0 probing 174f:6a31
[   80.116945][   T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   80.148837][   T24] spca561 2-1:0.156: probe with driver spca561 failed with error -22
[   80.152385][   T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[   80.155136][   T24] usb 2-1: MIDIStreaming interface descriptor not found
[   80.198590][   T24] usb 2-1: USB disconnect, device number 6
[   80.271095][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[   80.277540][   T10] usb 1-1: config 255 has an invalid interface number: 171 but max is 0
[   80.281390][   T10] usb 1-1: config 255 has no interface number 0
[   80.283983][   T10] usb 1-1: config 255 interface 171 has no altsetting 0
[   80.289627][   T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=6240, bcdDevice=35.eb
[   80.294646][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.298449][   T10] usb 1-1: Product: syz
[   80.300226][   T10] usb 1-1: Manufacturer: syz
[   80.302149][   T10] usb 1-1: SerialNumber: syz
[   80.529327][   T10] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6240
[   80.533980][   T10] gspca_sn9c20x: Write register 1000 failed -71
[   80.536569][   T10] gspca_sn9c20x: Device initialization failed
[   80.539298][   T10] gspca_sn9c20x 1-1:255.171: probe with driver gspca_sn9c20x failed with error -71
[   80.545096][   T10] usb 1-1: USB disconnect, device number 5
[   81.515211][ T5981] gspca_stk1135: reg_w 0xd err -71
[   81.519446][   T47] cfg80211: failed to load regulatory.db
[   81.524202][ T5981] gspca_stk1135: serial bus timeout: status=0x00
[   81.526318][ T5981] gspca_stk1135: Sensor write failed
[   81.538363][ T5981] gspca_stk1135: serial bus timeout: status=0x00
[   81.540701][ T5981] gspca_stk1135: Sensor write failed
[   81.542497][ T5981] gspca_stk1135: serial bus timeout: status=0x00
[   81.544592][ T5981] gspca_stk1135: Sensor read failed
[   81.546559][ T5981] gspca_stk1135: serial bus timeout: status=0x00
[   81.549382][ T5981] gspca_stk1135: Sensor read failed
[   81.551290][ T5981] gspca_stk1135: Detected sensor type unknown (0x0)
[   81.553756][ T5981] gspca_stk1135: serial bus timeout: status=0x00
[   81.556166][ T5981] gspca_stk1135: Sensor read failed
[   81.566761][ T5981] gspca_stk1135: serial bus timeout: status=0x00
[   81.569219][ T5981] gspca_stk1135: Sensor read failed
[   81.571032][ T5981] gspca_stk1135: serial bus timeout: status=0x00
[   81.573224][ T5981] gspca_stk1135: Sensor write failed
[   81.575427][ T5981] gspca_stk1135: serial bus timeout: status=0x00
[   81.577908][ T5981] gspca_stk1135: Sensor write failed
[   81.580050][ T5981] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71
[   81.588477][ T5981] usb 3-1: USB disconnect, device number 6
[   82.084809][ T6546] loop1: detected capacity change from 0 to 32768
[   82.092092][ T6546] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.241 (6546)
[   82.110272][ T6546] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   82.114238][ T6546] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   82.119924][ T6546] BTRFS info (device loop1): using free-space-tree
[   82.194905][ T6572] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[   82.194905][ T6572] The task syz.0.245 (6572) triggered the difference, watch for misbehavior.
[   82.246866][ T5708] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[   82.291503][ T5858] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   82.319982][ T5981] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   82.586813][ T5981] usb 3-1: Using ep0 maxpacket: 32
[   82.591159][ T5981] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[   82.594569][ T5981] usb 3-1: config 0 has no interface number 0
[   82.597319][ T5981] usb 3-1: config 0 interface 85 has no altsetting 0
[   82.602844][ T5981] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[   82.606551][ T5981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.610101][ T5981] usb 3-1: Product: syz
[   82.612047][ T5981] usb 3-1: Manufacturer: syz
[   82.613923][ T5981] usb 3-1: SerialNumber: syz
[   82.619396][ T5981] usb 3-1: config 0 descriptor??
[   82.624566][ T5981] appletouch 3-1:0.85: Could not find int-in endpoint
[   82.627663][ T5981] appletouch 3-1:0.85: probe with driver appletouch failed with error -5
[   82.631575][ T5981] usbhid 3-1:0.85: couldn't find an input interrupt endpoint
[   82.993390][ T5903] usb 3-1: USB disconnect, device number 7
[   83.226803][ T5981] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   83.446914][ T5981] usb 1-1: Using ep0 maxpacket: 16
[   83.451067][ T5981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.455576][ T5981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.459795][ T5981] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   83.465215][ T5981] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   83.469702][ T5981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.475744][ T5981] usb 1-1: config 0 descriptor??
[   83.612108][   T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   83.650018][ T6590] loop2: detected capacity change from 0 to 256
[   83.672753][ T6590] FAT-fs (loop2): Directory bread(block 64) failed
[   83.675933][ T6590] FAT-fs (loop2): Directory bread(block 65) failed
[   83.682495][ T6590] FAT-fs (loop2): Directory bread(block 66) failed
[   83.685704][ T6590] FAT-fs (loop2): Directory bread(block 67) failed
[   83.689196][ T6590] FAT-fs (loop2): Directory bread(block 68) failed
[   83.692124][ T6590] FAT-fs (loop2): Directory bread(block 69) failed
[   83.695014][ T6590] FAT-fs (loop2): Directory bread(block 70) failed
[   83.699686][ T6590] FAT-fs (loop2): Directory bread(block 71) failed
[   83.702588][ T6590] FAT-fs (loop2): Directory bread(block 72) failed
[   83.705402][ T6590] FAT-fs (loop2): Directory bread(block 73) failed
[   83.769300][   T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   83.774478][   T10] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   83.792907][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[   83.798793][   T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[   83.803360][   T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[   83.823580][   T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   83.826525][   T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   83.832073][   T10] usb 2-1: Product: syz
[   83.833844][   T10] usb 2-1: Manufacturer: syz
[   83.847928][   T10] cdc_wdm 2-1:1.0: skipping garbage
[   83.849663][   T10] cdc_wdm 2-1:1.0: skipping garbage
[   83.854595][   T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[   83.858838][   T10] cdc_wdm 2-1:1.0: Unknown control protocol
[   83.896154][ T5981] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[   83.901131][ T5981] microsoft 0003:045E:07DA.0002: no inputs found
[   83.903897][ T5981] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway
[   84.099159][   T10] usb 1-1: USB disconnect, device number 6
[   84.335856][ T6609] loop2: detected capacity change from 0 to 128
[   84.440026][ T6612] netlink: 'syz.2.259': attribute type 7 has an invalid length.
[   84.443561][ T6612] netlink: 'syz.2.259': attribute type 3 has an invalid length.
[   84.447213][ T6612] netlink: 224 bytes leftover after parsing attributes in process `syz.2.259'.
[   84.613321][   T10] usb 2-1: USB disconnect, device number 7
[   84.754617][ T6620] loop0: detected capacity change from 0 to 256
[   84.765617][ T6620] exfat: Deprecated parameter 'utf8'
[   84.774123][ T6620] exfat: Deprecated parameter 'namecase'
[   84.776526][ T6620] exfat: Deprecated parameter 'utf8'
[   84.790103][ T6620] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[   84.806314][ T6620] Invalid source name
[   85.169154][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.268'.
[   85.172848][ T6630] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.175948][ T6630] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.181152][ T6630] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.183885][ T6630] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.516135][ T6641] comedi: valid board names for 8255 driver are:
[   85.520825][ T6641]  8255
[   85.522053][ T6641] comedi: valid board names for vmk80xx driver are:
[   85.524834][ T6641]  vmk80xx
[   85.526128][ T6641] comedi: valid board names for usbduxsigma driver are:
[   85.542791][ T6641]  usbduxsigma
[   85.544470][ T6641] comedi: valid board names for usbduxfast driver are:
[   85.552932][ T6641]  usbduxfast
[   85.554446][ T6641] comedi: valid board names for usbdux driver are:
[   85.561829][ T6641]  usbdux
[   85.564262][ T6641] comedi: valid board names for ni6501 driver are:
[   85.576904][ T6641]  ni6501
[   85.582910][ T6641] comedi: valid board names for dt9812 driver are:
[   85.595340][ T6641]  dt9812
[   85.600028][ T6641] comedi: valid board names for ni_labpc_cs driver are:
[   85.605508][ T6641]  ni_labpc_cs
[   85.612792][ T6641] comedi: valid board names for ni_daq_700 driver are:
[   85.618565][ T6641]  ni_daq_700
[   85.626004][ T6641] comedi: valid board names for labpc_pci driver are:
[   85.629358][ T6641]  labpc_pci
[   85.636137][ T6641] comedi: valid board names for adl_pci9118 driver are:
[   85.640963][ T6641]  pci9118dg
[   85.646273][ T6641]  pci9118hg
[   85.648199][ T6641]  pci9118hr
[   85.649964][ T6641] comedi: valid board names for 8255_pci driver are:
[   85.653894][ T6616] loop2: detected capacity change from 0 to 262144
[   85.658303][ T6616] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.261 (6616)
[   85.663150][ T6641]  8255_pci
[   85.666650][ T6616] BTRFS info (device loop2): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   85.668010][ T6641] comedi: valid board names for s526 driver are:
[   85.670416][ T6616] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[   85.676070][ T6616] BTRFS info (device loop2): using free-space-tree
[   85.680540][ T6641]  s526
[   85.684647][ T6641] comedi: valid board names for multiq3 driver are:
[   85.697720][ T6643] loop1: detected capacity change from 0 to 4096
[   85.701230][ T6641]  multiq3
[   85.712397][ T6641] comedi: valid board names for pcmuio driver are:
[   85.721411][ T6643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.726840][ T6641]  pcmuio48
[   85.730618][ T6641]  pcmuio96
[   85.734082][ T6641] comedi: valid board names for pcmmio driver are:
[   85.742822][ T6641]  pcmmio
[   85.746515][ T6641] comedi: valid board names for pcmda12 driver are:
[   85.752870][ T6643] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   85.757466][ T6641]  pcmda12
[   85.761706][ T6641] comedi: valid board names for pcmad driver are:
[   85.768856][ T6641]  pcmad12
[   85.770287][ T6641]  pcmad16
[   85.772670][ T6641] comedi: valid board names for ni_labpc driver are:
[   85.777913][ T6641]  lab-pc-1200
[   85.782836][ T6641]  lab-pc-1200ai
[   85.784382][ T6641]  lab-pc+
[   85.787383][ T6641] comedi: valid board names for atmio16 driver are:
[   85.793359][ T6641]  atmio16
[   85.795656][ T6641]  atmio16d
[   85.801632][ T6641] comedi: valid board names for ni_at_ao driver are:
[   85.805816][   T36] BTRFS warning (device loop2): checksum verify failed on logical 22036480 mirror 1 wanted 0x23e101be1e001a29 found 0x09049c5cc74d15fb level 0
[   85.811709][ T6643] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   85.815730][ T6641]  at-ao-6
[   85.817095][ T6641]  at-ao-10
[   85.822134][ T6641] comedi: valid board names for ni_at_a2150 driver are:
[   85.827545][ T6616] BTRFS info (device loop2): read error corrected: ino 0 off 22036480 (dev /dev/loop2 sector 43040)
[   85.831369][ T6616] BTRFS info (device loop2): read error corrected: ino 0 off 22040576 (dev /dev/loop2 sector 43048)
[   85.834956][ T6616] BTRFS info (device loop2): read error corrected: ino 0 off 22044672 (dev /dev/loop2 sector 43056)
[   85.836647][ T6641]  ni_at_a2150
[   85.839075][ T6616] BTRFS info (device loop2): read error corrected: ino 0 off 22048768 (dev /dev/loop2 sector 43064)
[   85.841123][ T6641] comedi: valid board names for adq12b driver are:
[   85.846876][ T6641]  adq12b
[   85.848044][ T6641] comedi: valid board names for mpc624 driver are:
[   85.859653][ T6641]  mpc624
[   85.860908][ T6641] comedi: valid board names for c6xdigio driver are:
[   85.863268][ T6641]  c6xdigio
[   85.865716][ T5858] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109
[   85.867186][ T6641] comedi: valid board names for aio_iiro_16 driver are:
[   85.873759][ T5858] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109
[   85.886353][ T6641]  aio_iiro_16
[   85.893265][ T6641] comedi: valid board names for aio_aio12_8 driver are:
[   85.895615][ T6641]  aio_aio12_8
[   85.897926][ T6641]  aio_ai12_8
[   85.899087][ T6641]  aio_ao12_4
[   85.900219][ T6641] comedi: valid board names for fl512 driver are:
[   85.902341][ T6641]  fl512
[   85.913374][ T6641] comedi: valid board names for dmm32at driver are:
[   85.915738][ T6641]  dmm32at
[   85.918643][ T6641] comedi: valid board names for dt282x driver are:
[   85.920826][ T6641]  dt2821
[   85.921827][ T6641]  dt2821-f
[   85.922904][ T6641]  dt2821-g
[   85.924495][ T6641]  dt2823
[   85.925752][ T6641]  dt2824-pgh
[   85.933310][ T6641]  dt2824-pgl
[   85.934583][ T6641]  dt2825
[   85.935574][ T6641]  dt2827
[   85.936628][ T6641]  dt2828
[   85.938233][ T6641]  dt2829
[   85.939661][ T6641]  dt21-ez
[   85.944730][ T6641]  dt23-ez
[   85.945818][ T6641]  dt24-ez
[   85.948593][ T6641]  dt24-ez-pgl
[   85.949818][ T6641] comedi: valid board names for dt2817 driver are:
[   85.952560][ T5862] BTRFS info (device loop2): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   85.956009][ T6641]  dt2817
[   85.957085][ T6641] comedi: valid board names for dt2815 driver are:
[   85.970366][ T6641]  dt2815
[   85.971592][ T6641] comedi: valid board names for dt2814 driver are:
[   85.974450][ T6641]  dt2814
[   85.975737][ T6641] comedi: valid board names for dt2811 driver are:
[   85.981420][ T6641]  dt2811-pgh
[   85.982900][ T6641]  dt2811-pgl
[   85.984435][ T6641] comedi: valid board names for dt2801 driver are:
[   85.992009][ T6641]  dt2801
[   85.993187][ T6641] comedi: valid board names for das6402 driver are:
[   85.998771][ T6641]  das6402-12
[   85.999907][ T6641]  das6402-16
[   86.001034][ T6641] comedi: valid board names for das1800 driver are:
[   86.006029][ T6641]  das-1701st
[   86.013735][ T6641]  das-1701st-da
[   86.020895][ T6641]  das-1702st
[   86.022078][ T6641]  das-1702st-da
[   86.023294][ T6641]  das-1702hr
[   86.024364][ T6641]  das-1702hr-da
[   86.037679][ T6641]  das-1701ao
[   86.038827][ T6641]  das-1702ao
[   86.040112][ T6641]  das-1801st
[   86.041330][ T6641]  das-1801st-da
[   86.042545][ T6641]  das-1802st
[   86.043696][ T6641]  das-1802st-da
[   86.044890][ T6641]  das-1802hr
[   86.045957][ T6641]  das-1802hr-da
[   86.064723][ T6641]  das-1801hc
[   86.065935][ T6641]  das-1802hc
[   86.070837][ T6641]  das-1801ao
[   86.072112][ T6641]  das-1802ao
[   86.077648][ T6641] comedi: valid board names for das800 driver are:
[   86.080290][ T6641]  das-800
[   86.084294][ T6641]  cio-das800
[   86.085408][ T6641]  das-801
[   86.086400][ T6641]  cio-das801
[   86.088326][ T6641]  das-802
[   86.089350][ T6641]  cio-das802
[   86.090446][ T6641]  cio-das802/16
[   86.091687][ T6641] comedi: valid board names for isa-das08 driver are:
[   86.094216][ T6641]  isa-das08
[   86.110348][ T6641]  das08-pgm
[   86.111595][ T6641]  das08-pgh
[   86.112700][ T6641]  das08-pgl
[   86.114071][ T6641]  das08-aoh
[   86.115400][ T6641]  das08-aol
[   86.116548][ T6641]  das08-aom
[   86.118485][ T6641]  das08/jr-ao
[   86.123226][ T6641]  das08jr-16-ao
[   86.124770][ T6641]  pc104-das08
[   86.125937][ T6641]  das08jr/16
[   86.127614][ T6641] comedi: valid board names for das16m1 driver are:
[   86.131805][ T6641]  das16m1
[   86.133040][ T6641] comedi: valid board names for dac02 driver are:
[   86.135748][ T6641]  dac02
[   86.137404][ T6641] comedi: valid board names for rti802 driver are:
[   86.140025][ T6641]  rti802
[   86.140859][ T5858] syz-executor (5858) used greatest stack depth: 20024 bytes left
[   86.146859][ T6641] comedi: valid board names for rti800 driver are:
[   86.157672][ T6641]  rti800
[   86.158870][ T6641]  rti815
[   86.160051][ T6641] comedi: valid board names for pcm3724 driver are:
[   86.162509][ T6641]  pcm3724
[   86.167827][ T6641] comedi: valid board names for pcl818 driver are:
[   86.170097][ T6641]  pcl818l
[   86.171316][ T6641]  pcl818h
[   86.172318][ T6641]  pcl818hd
[   86.173590][ T6641]  pcl818hg
[   86.193399][ T6641]  pcl818
[   86.200823][ T6641]  pcl718
[   86.201849][ T6641]  pcm3718
[   86.209169][ T5708] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.215578][ T6641] comedi: valid board names for pcl816 driver are:
[   86.226758][ T6641]  pcl816
[   86.227772][ T6641]  pcl814b
[   86.228817][ T6641] comedi: valid board names for pcl812 driver are:
[   86.231401][ T6641]  pcl812
[   86.232398][ T6641]  pcl812pg
[   86.233627][ T6641]  acl8112pg
[   86.235048][ T6641]  acl8112dg
[   86.236460][ T6641]  acl8112hg
[   86.247033][ T6641]  a821pgl
[   86.248486][ T6641]  a821pglnda
[   86.252131][ T6641]  a821pgh
[   86.256858][ T6641]  a822pgl
[   86.267493][ T6641]  a822pgh
[   86.273680][ T6641]  a823pgl
[   86.279895][ T6641]  a823pgh
[   86.289420][ T6641]  pcl813
[   86.290546][ T6641]  pcl813b
[   86.294814][ T6641]  acl8113
[   86.295881][ T6641]  iso813
[   86.308117][ T6641]  acl8216
[   86.309227][ T6641]  a826pg
[   86.310235][ T6641] comedi: valid board names for pcl730 driver are:
[   86.312361][ T6641]  pcl730
[   86.313363][ T6641]  iso730
[   86.314330][ T6641]  acl7130
[   86.315345][ T6641]  pcm3730
[   86.316562][ T6641]  pcl725
[   86.333229][ T6641]  p8r8dio
[   86.334319][ T6641]  acl7225b
[   86.335384][ T6641]  p16r16dio
[   86.357782][ T5708] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.377003][ T6641]  pcl733
[   86.378060][ T6641]  pcl734
[   86.379060][ T6641]  opmm-1616-xt
[   86.380231][ T6641]  pearl-mm-p
[   86.381373][ T6641]  ir104-pbf
[   86.382481][ T6641] comedi: valid board names for pcl726 driver are:
[   86.384668][ T6641]  pcl726
[   86.385698][ T6641]  pcl727
[   86.406749][ T6641]  pcl728
[   86.408658][ T6641]  acl6126
[   86.409730][ T6641]  acl6128
[   86.410786][ T6641] comedi: valid board names for pcl724 driver are:
[   86.412956][ T6641]  pcl724
[   86.413964][ T6641]  pcl722
[   86.426892][ T6641]  pcl731
[   86.428284][ T6641]  acl7122
[   86.429795][ T6641]  acl7124
[   86.431116][ T6641]  pet48dio
[   86.432438][ T6641]  pcmio48
[   86.433801][ T6641]  onyx-mm-dio
[   86.439904][ T6641] comedi: valid board names for pcl711 driver are:
[   86.445502][ T6641]  pcl711
[   86.450090][ T6641]  pcl711b
[   86.451402][ T6641]  acl8112hg
[   86.455665][ T6641]  acl8112dg
[   86.459299][ T5708] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.460241][ T6641] comedi: valid board names for amplc_pc263 driver are:
[   86.470405][ T6641]  pc263
[   86.471692][ T6641] comedi: valid board names for amplc_pc236 driver are:
[   86.474631][ T6641]  pc36at
[   86.475928][ T6641] comedi: valid board names for amplc_dio200 driver are:
[   86.489467][ T6641]  pc212e
[   86.492077][ T6641]  pc214e
[   86.494572][ T6641]  pc215e
[   86.498405][ T6641]  pc218e
[   86.500944][ T6641]  pc272e
[   86.503831][ T6641] comedi: valid board names for comedi_parport driver are:
[   86.508624][ T5708] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.515248][ T6641]  comedi_parport
[   86.519014][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   86.519444][ T6641] comedi: valid board names for comedi_test driver are:
[   86.525357][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   86.525396][ T6641]  comedi_test
[   86.530065][ T6641] comedi: valid board names for comedi_bond driver are:
[   86.533093][ T6641]  comedi_bond
[   86.535359][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   86.541262][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   86.544102][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   86.832187][ T5708] bridge_slave_1: left allmulticast mode
[   86.836543][ T5708] bridge_slave_1: left promiscuous mode
[   86.842991][ T5708] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.862525][ T5708] bridge_slave_0: left allmulticast mode
[   86.864825][ T5708] bridge_slave_0: left promiscuous mode
[   86.869256][ T5708] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.257540][ T6686] Zero length message leads to an empty skb
[   87.426381][ T5708] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   87.433748][ T5708] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   87.438262][ T5708] bond0 (unregistering): Released all slaves
[   87.451180][ T5708] bond1 (unregistering): Released all slaves
[   87.480128][ T6688] netlink: 16 bytes leftover after parsing attributes in process `syz.2.286'.
[   87.642894][ T6672] chnl_net:caif_netlink_parms(): no params data found
[   87.747936][ T6672] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.762681][ T6672] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.775854][ T6672] bridge_slave_0: entered allmulticast mode
[   87.795601][ T6672] bridge_slave_0: entered promiscuous mode
[   87.818324][ T6672] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.829289][ T6672] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.837850][ T6672] bridge_slave_1: entered allmulticast mode
[   87.850712][ T6672] bridge_slave_1: entered promiscuous mode
[   88.003438][ T6714] pimreg: entered allmulticast mode
[   88.044874][ T6714] pimreg: left allmulticast mode
[   88.078345][ T5708] hsr_slave_0: left promiscuous mode
[   88.085453][ T5708] hsr_slave_1: left promiscuous mode
[   88.099772][ T5708] veth1_macvtap: left promiscuous mode
[   88.102435][ T5708] veth0_macvtap: left promiscuous mode
[   88.106628][ T5708] veth1_vlan: left promiscuous mode
[   88.109822][ T5708] veth0_vlan: left promiscuous mode
[   88.541369][ T5708] team0 (unregistering): Port device team_slave_1 removed
[   88.577264][ T5235] Bluetooth: hci1: command tx timeout
[   88.593666][ T5708] team0 (unregistering): Port device team_slave_0 removed
[   88.941631][ T6672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.031217][ T6672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.158507][ T6672] team0: Port device team_slave_0 added
[   89.167160][ T6672] team0: Port device team_slave_1 added
[   89.241105][ T6672] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.243929][ T6672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.276788][ T6672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.284151][ T6672] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.286555][ T6672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.312724][ T6672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.422601][ T6672] hsr_slave_0: entered promiscuous mode
[   89.424924][ T6672] hsr_slave_1: entered promiscuous mode
[   89.474206][ T6752] loop0: detected capacity change from 0 to 40427
[   89.485754][ T6752] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   89.489555][ T6752] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   89.500197][ T6752] F2FS-fs (loop0): invalid crc value
[   89.539703][ T6770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.571043][ T6752] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   89.579701][ T6752] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   89.582619][ T6752] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   89.596146][ T6763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.610451][ T6752] syz.0.305: attempt to access beyond end of device
[   89.610451][ T6752] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   89.656464][ T6763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.661739][ T5854] syz-executor: attempt to access beyond end of device
[   89.661739][ T5854] loop0: rw=2051, sector=45096, nr_sectors = 8 limit=40427
[   89.681724][ T5854] F2FS-fs (loop0): Issue discard(5637, 5637, 1) failed, ret: -5
[   89.758492][ T6672] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   89.777210][ T6672] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   89.790998][ T6672] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   89.810934][ T6672] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   89.905691][ T6672] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.940591][ T6672] 8021q: adding VLAN 0 to HW filter on device team0
[   89.952189][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.955124][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.974208][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.977420][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.023170][ T6672] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   90.029830][ T6672] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   90.181054][ T6672] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.217535][ T6672] veth0_vlan: entered promiscuous mode
[   90.228173][ T6672] veth1_vlan: entered promiscuous mode
[   90.258914][ T6672] veth0_macvtap: entered promiscuous mode
[   90.263632][ T6672] veth1_macvtap: entered promiscuous mode
[   90.275125][ T6672] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.285695][ T6672] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.302217][ T5708] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.327903][ T5708] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.335630][ T5708] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.339659][ T5708] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.366143][ T6786] loop0: detected capacity change from 0 to 32768
[   90.391894][ T6786] 
[   90.391894][ T6786]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   90.391894][ T6786] 
[   90.423200][ T4649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.425818][ T4649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.460641][ T6809] netlink: 'syz.2.312': attribute type 21 has an invalid length.
[   90.465610][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.468538][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.472020][ T6809] netlink: 152 bytes leftover after parsing attributes in process `syz.2.312'.
[   90.497264][ T6786] blkno = 0, nblocks = 40
[   90.499061][ T6786] ERROR: (device loop0): dbFree: block to be freed is outside the map
[   90.499061][ T6786] 
[   90.547305][ T5854] 
[   90.547305][ T5854]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   90.547305][ T5854] 
[   90.557542][ T5854] 
[   90.557542][ T5854]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   90.557542][ T5854] 
[   90.656918][ T5235] Bluetooth: hci1: command tx timeout
[   90.659374][ T6826] syz_tun: entered allmulticast mode
[   90.851610][ T6833] loop0: detected capacity change from 0 to 4096
[   90.871817][ T6833] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[   90.930890][ T6833] ntfs3(loop0): ino=1a, mi_enum_attr
[   90.933410][ T6833] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   90.959656][ T6833] ntfs3(loop0): ino=1a, mi_enum_attr
[   90.961998][ T6833] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[   91.017467][   T33] audit: type=1800 audit(1755554220.883:4): pid=6833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.318" name="file1" dev="loop0" ino=24 res=0 errno=0
[   91.113915][   T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   91.310761][   T24] usb 3-1: Using ep0 maxpacket: 32
[   91.315589][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   91.319686][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   91.322982][   T24] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[   91.326054][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.339131][   T24] usb 3-1: config 0 descriptor??
[   91.575580][   T24] usbhid 3-1:0.0: can't add hid device: -71
[   91.579676][   T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   91.590095][   T24] usb 3-1: USB disconnect, device number 8
[   91.707528][ T5981] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   91.860955][ T5981] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[   91.865255][ T5981] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   91.871830][ T5981] usb 4-1: config 220 has no interface number 2
[   91.874817][ T5981] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   91.881253][ T5981] usb 4-1: config 220 interface 0 has no altsetting 0
[   91.884362][ T5981] usb 4-1: config 220 interface 76 has no altsetting 0
[   91.889099][ T5981] usb 4-1: config 220 interface 1 has no altsetting 0
[   91.894545][ T5981] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   91.899182][ T5981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.902841][ T5981] usb 4-1: Product: syz
[   91.904826][ T5981] usb 4-1: Manufacturer: syz
[   91.908368][ T5981] usb 4-1: SerialNumber: syz
[   92.298040][ T6869] loop2: detected capacity change from 0 to 32768
[   92.365627][ T6869] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[   92.365640][ T6869]   allowing incompatible features above 0.0: (unknown version)
[   92.365644][ T6869]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   92.387045][ T6869] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[   92.389870][ T6869] bcachefs (loop2): initializing new filesystem
[   92.396383][ T6869] bcachefs (loop2): going read-write
[   92.405015][ T6869] bcachefs (loop2): marking superblocks
[   92.448716][ T6869] bcachefs (loop2): initializing freespace
[   92.459724][ T6869] bcachefs (loop2): done initializing freespace
[   92.473553][ T6869] bcachefs (loop2): reading snapshots table
[   92.476288][ T6869] bcachefs (loop2): reading snapshots done
[   92.537639][ T6869] bcachefs (loop2): done starting filesystem
[   92.643757][ T6869] syz.2.325 (6869) used greatest stack depth: 15960 bytes left
[   92.668586][ T5862] bcachefs (loop2): shutting down
[   92.671004][ T5862] bcachefs (loop2): going read-only
[   92.673483][ T5862] bcachefs (loop2): finished waiting for writes to stop
[   92.678239][ T5862] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[   92.715673][ T5862] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[   92.722355][ T5862] bcachefs (loop2): clean shutdown complete, journal seq 4
[   92.727345][ T5862] bcachefs (loop2): marking filesystem clean
[   92.727479][ T5235] Bluetooth: hci1: command tx timeout
[   92.755955][ T5862] bcachefs (loop2): shutdown complete
[   93.544046][ T5981] usb 4-1: selecting invalid altsetting 0
[   93.554121][ T5981] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[   93.556815][ T5981] usb 4-1: No valid video chain found.
[   93.563766][ T5981] usb 4-1: selecting invalid altsetting 0
[   93.565862][ T5981] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[   93.574114][ T5981] usb 4-1: USB disconnect, device number 2
[   93.786422][ T5882] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x4a
[   93.893340][ T6912] loop2: detected capacity change from 0 to 24
[   94.164999][ T6927] loop0: detected capacity change from 0 to 256
[   94.171786][ T6927] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   94.176450][ T6927] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[   94.189796][ T6927] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   94.808771][ T5235] Bluetooth: hci1: command tx timeout
[   94.963020][ T6956] loop2: detected capacity change from 0 to 4096
[   94.979165][ T6956] ntfs3(loop2): try to read out of volume at offset 0x200800
[   94.982399][ T6956] ntfs3(loop2): Failed to load $Volume (-5).
[   95.094199][ T6960] loop2: detected capacity change from 0 to 1024
[   95.109580][   T33] audit: type=1800 audit(1755554225.003:5): pid=6960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.356" name="bus" dev="loop2" ino=25 res=0 errno=0
[   95.893405][ T6984] loop0: detected capacity change from 0 to 512
[   95.897934][ T6984] EXT4-fs: Ignoring removed nomblk_io_submit option
[   95.906179][ T6984] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   95.911109][ T6984] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e128, mo2=0002]
[   95.915280][ T6984] EXT4-fs (loop0): orphan cleanup on readonly fs
[   95.920766][ T6984] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0
[   95.933697][ T6984] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   95.948847][ T6984] EXT4-fs (loop0): Cannot turn on quotas: error -22
[   95.956511][ T6984] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.366: bg 0: block 40: padding at end of block bitmap is not set
[   95.968859][ T6984] EXT4-fs (loop0): Remounting filesystem read-only
[   95.971276][ T6984] EXT4-fs (loop0): 1 truncate cleaned up
[   95.975148][ T6984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   96.693571][ T7006] loop2: detected capacity change from 0 to 4096
[   96.725408][ T7006] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[   96.728767][ T7006] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[   96.763963][ T3608] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22.
[   96.769619][ T5862] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[   96.772110][ T5862] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   96.774643][ T5862] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[   96.779383][  T135] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22.
[   97.237018][ T7025] netlink: 'syz.2.381': attribute type 11 has an invalid length.
[   97.570494][ T7039] loop3: detected capacity change from 0 to 2048
[   97.614740][ T5855] udevd[5855]: incorrect nilfs2 checksum on /dev/loop3
[   97.616830][ T7039] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[   97.631268][ T5855] udevd[5855]: incorrect nilfs2 checksum on /dev/loop3
[   97.648648][ T7044] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   97.654565][ T7045] loop2: detected capacity change from 0 to 128
[   97.666972][ T7045] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   97.673624][ T7045] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   97.719691][ T7047] ubi0: attaching mtd0
[   97.722051][ T7047] ubi0 error: ubi_attach_mtd_dev: bad VID header (37978) or data offsets (38042)
[   97.795217][ T7051] Falling back ldisc for ptm0.
[   97.860666][ T5854] syz_tun (unregistering): left allmulticast mode
[   98.430797][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.533224][ T5854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.539284][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.621688][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.729331][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.074493][   T12] bridge_slave_1: left allmulticast mode
[   99.082797][   T12] bridge_slave_1: left promiscuous mode
[   99.087346][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.098493][   T12] bridge_slave_0: left allmulticast mode
[   99.100761][   T12] bridge_slave_0: left promiscuous mode
[   99.105660][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.323844][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   99.332276][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   99.336098][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   99.354952][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   99.358495][ T5903] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   99.361872][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   99.406362][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   99.414085][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   99.419838][   T12] bond0 (unregistering): Released all slaves
[   99.521435][ T5903] usb 3-1: Using ep0 maxpacket: 16
[   99.526096][ T5903] usb 3-1: config 0 has no interfaces?
[   99.534962][ T5903] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[   99.539420][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[   99.560749][ T5903] usb 3-1: Product: syz
[   99.561468][ T7087] tipc: Started in network mode
[   99.562667][ T5903] usb 3-1: SerialNumber: syz
[   99.564615][ T7087] tipc: Node identity ac14140f, cluster identity 4711
[   99.564869][ T7087] tipc: New replicast peer: 255.255.255.255
[   99.573757][ T7087] tipc: Enabled bearer <udp:syz2>, priority 10
[   99.598340][ T5903] usb 3-1: config 0 descriptor??
[   99.660090][ T7078] chnl_net:caif_netlink_parms(): no params data found
[   99.742724][ T7096] bridge0: entered allmulticast mode
[   99.751728][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.407'.
[   99.814457][    T9] usb 3-1: USB disconnect, device number 9
[   99.843683][ T7096] bridge_slave_1: left allmulticast mode
[   99.846293][ T7096] bridge_slave_1: left promiscuous mode
[   99.851421][ T7096] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.859125][ T7096] bridge_slave_0: left allmulticast mode
[   99.861490][ T7096] bridge_slave_0: left promiscuous mode
[   99.863978][ T7096] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.881687][ T7096] bridge0 (unregistering): left allmulticast mode
[   99.964615][   T12] hsr_slave_0: left promiscuous mode
[   99.967423][   T12] hsr_slave_1: left promiscuous mode
[   99.970042][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.973181][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.976564][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.979910][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.998239][   T12] vlan0: left allmulticast mode
[  100.000315][   T12] veth0_vlan: left allmulticast mode
[  100.002079][   T12] vlan0: left promiscuous mode
[  100.004291][   T12] veth1_macvtap: left promiscuous mode
[  100.006576][   T12] veth0_macvtap: left promiscuous mode
[  100.010188][   T12] veth1_vlan: left promiscuous mode
[  100.012420][   T12] veth0_vlan: left promiscuous mode
[  100.125847][ T7106] loop3: detected capacity change from 0 to 1024
[  100.201211][  T135] hfsplus: b-tree write err: -5, ino 4
[  100.280252][ T7110] netlink: 'syz.3.412': attribute type 20 has an invalid length.
[  100.454276][ T7112] loop3: detected capacity change from 0 to 32768
[  100.534216][ T7112] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 255,nocow
[  100.534233][ T7112]   allowing incompatible features above 0.0: (unknown version)
[  100.534240][ T7112]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  100.551569][ T7112] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  100.555097][ T7112] bcachefs (loop3): initializing new filesystem
[  100.563146][ T7112] bcachefs (loop3): going read-write
[  100.568041][   T24] tipc: Node number set to 2886997007
[  100.572370][ T7112] bcachefs (loop3): marking superblocks
[  100.585078][ T7112] bcachefs (loop3): initializing freespace
[  100.596441][ T7112] bcachefs (loop3): done initializing freespace
[  100.607598][ T7112] bcachefs (loop3): reading snapshots table
[  100.610293][ T7112] bcachefs (loop3): reading snapshots done
[  100.648550][ T7112] bcachefs (loop3):  loop3: Superblock write was silently dropped! (seq 0 expected 42)
[  100.652352][ T7112] bcachefs (loop3): done starting filesystem
[  100.760755][ T6672] bcachefs (loop3): shutting down
[  100.763102][ T6672] bcachefs (loop3): going read-only
[  100.765474][ T6672] bcachefs (loop3): finished waiting for writes to stop
[  100.772082][ T6672] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3
[  100.836435][ T6672] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 4
[  100.856386][ T6672] bcachefs (loop3): clean shutdown complete, journal seq 5
[  100.862537][ T6672] bcachefs (loop3): marking filesystem clean
[  100.909158][ T6672] bcachefs (loop3): shutdown complete
[  100.951120][   T12] team0 (unregistering): Port device team_slave_1 removed
[  100.981271][   T12] team0 (unregistering): Port device team_slave_0 removed
[  101.332404][ T7078] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.335466][ T7078] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.339452][ T7078] bridge_slave_0: entered allmulticast mode
[  101.347689][ T7078] bridge_slave_0: entered promiscuous mode
[  101.366951][ T5859] Bluetooth: hci0: command tx timeout
[  101.371480][ T7078] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.375166][ T7078] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.384086][ T7078] bridge_slave_1: entered allmulticast mode
[  101.401571][ T7078] bridge_slave_1: entered promiscuous mode
[  101.460488][ T7078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.475797][ T7078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  101.489212][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.420'.
[  101.532685][ T7078] team0: Port device team_slave_0 added
[  101.537692][ T7078] team0: Port device team_slave_1 added
[  101.594576][ T7078] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.602661][ T7078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.616482][ T7078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.622526][ T7078] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.625226][ T7078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.637016][ T7078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.702529][ T7078] hsr_slave_0: entered promiscuous mode
[  101.705352][ T7078] hsr_slave_1: entered promiscuous mode
[  101.709420][ T7078] debugfs: 'hsr0' already exists in 'hsr'
[  101.711617][ T7078] Cannot create hsr debugfs directory
[  101.740231][   T12] ==================================================================
[  101.743262][   T12] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  101.746370][   T12] Write of size 8 at addr ffff888110ee4030 by task kworker/u8:0/12
[  101.750285][   T12] 
[  101.751200][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  101.751212][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  101.751219][   T12] Workqueue: netns cleanup_net
[  101.751238][   T12] Call Trace:
[  101.751243][   T12]  <TASK>
[  101.751248][   T12]  dump_stack_lvl+0x189/0x250
[  101.751262][   T12]  ? __virt_addr_valid+0x1c8/0x5c0
[  101.751275][   T12]  ? rcu_is_watching+0x15/0xb0
[  101.751285][   T12]  ? __kasan_check_byte+0x12/0x40
[  101.751299][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[  101.751309][   T12]  ? rcu_is_watching+0x15/0xb0
[  101.751318][   T12]  ? lock_release+0x4b/0x3e0
[  101.751332][   T12]  ? __virt_addr_valid+0x1c8/0x5c0
[  101.751344][   T12]  ? __virt_addr_valid+0x4a5/0x5c0
[  101.751355][   T12]  print_report+0xca/0x240
[  101.751365][   T12]  ? __xfrm_state_delete+0x696/0xca0
[  101.751378][   T12]  kasan_report+0x118/0x150
[  101.751391][   T12]  ? __xfrm_state_delete+0x696/0xca0
[  101.751405][   T12]  __xfrm_state_delete+0x696/0xca0
[  101.751421][   T12]  xfrm_state_flush+0x45f/0x770
[  101.751437][   T12]  xfrm6_tunnel_net_exit+0x3f/0x100
[  101.751448][   T12]  ops_undo_list+0x49a/0x990
[  101.751462][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  101.751475][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  101.751488][   T12]  cleanup_net+0x4c5/0x800
[  101.751501][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  101.751514][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  101.751526][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  101.751536][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  101.751545][   T12]  process_scheduled_works+0xae1/0x17b0
[  101.751560][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  101.751573][   T12]  worker_thread+0x8a0/0xda0
[  101.751588][   T12]  kthread+0x711/0x8a0
[  101.751599][   T12]  ? __pfx_worker_thread+0x10/0x10
[  101.751608][   T12]  ? __pfx_kthread+0x10/0x10
[  101.751619][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  101.751630][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  101.751642][   T12]  ? __pfx_kthread+0x10/0x10
[  101.751653][   T12]  ret_from_fork+0x3fc/0x770
[  101.751664][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  101.751674][   T12]  ? __switch_to_asm+0x39/0x70
[  101.751685][   T12]  ? __switch_to_asm+0x33/0x70
[  101.751696][   T12]  ? __pfx_kthread+0x10/0x10
[  101.751707][   T12]  ret_from_fork_asm+0x1a/0x30
[  101.751722][   T12]  </TASK>
[  101.751726][   T12] 
[  101.839892][   T12] Allocated by task 6045:
[  101.841530][   T12]  kasan_save_track+0x3e/0x80
[  101.843341][   T12]  __kasan_slab_alloc+0x6c/0x80
[  101.845194][   T12]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  101.847305][   T12]  xfrm_state_alloc+0x24/0x2f0
[  101.849175][   T12]  __find_acq_core+0x8a7/0x1c00
[  101.851079][   T12]  xfrm_find_acq+0x78/0xa0
[  101.852821][   T12]  xfrm_alloc_userspi+0x6b3/0xc90
[  101.854760][   T12]  xfrm_user_rcv_msg+0x7a3/0xab0
[  101.856645][   T12]  netlink_rcv_skb+0x208/0x470
[  101.858501][   T12]  xfrm_netlink_rcv+0x79/0x90
[  101.860330][   T12]  netlink_unicast+0x82f/0x9e0
[  101.862195][   T12]  netlink_sendmsg+0x805/0xb30
[  101.864071][   T12]  __sock_sendmsg+0x21c/0x270
[  101.865912][   T12]  ____sys_sendmsg+0x505/0x830
[  101.867787][   T12]  ___sys_sendmsg+0x21f/0x2a0
[  101.869641][   T12]  __x64_sys_sendmsg+0x19b/0x260
[  101.871570][   T12]  do_syscall_64+0xfa/0x3b0
[  101.873350][   T12]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.875624][   T12] 
[  101.876545][   T12] Freed by task 24:
[  101.878021][   T12]  kasan_save_track+0x3e/0x80
[  101.879844][   T12]  kasan_save_free_info+0x46/0x50
[  101.881829][   T12]  __kasan_slab_free+0x5b/0x80
[  101.883642][   T12]  kmem_cache_free+0x18f/0x400
[  101.885411][   T12]  xfrm_state_gc_task+0x52d/0x6b0
[  101.887301][   T12]  process_scheduled_works+0xae1/0x17b0
[  101.889377][   T12]  worker_thread+0x8a0/0xda0
[  101.891129][   T12]  kthread+0x711/0x8a0
[  101.892721][   T12]  ret_from_fork+0x3fc/0x770
[  101.894529][   T12]  ret_from_fork_asm+0x1a/0x30
[  101.896359][   T12] 
[  101.897298][   T12] The buggy address belongs to the object at ffff888110ee4000
[  101.897298][   T12]  which belongs to the cache xfrm_state of size 928
[  101.902502][   T12] The buggy address is located 48 bytes inside of
[  101.902502][   T12]  freed 928-byte region [ffff888110ee4000, ffff888110ee43a0)
[  101.907428][   T12] 
[  101.908362][   T12] The buggy address belongs to the physical page:
[  101.910732][   T12] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110ee4
[  101.914051][   T12] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  101.917248][   T12] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  101.920152][   T12] page_type: f5(slab)
[  101.921618][   T12] raw: 057ff00000000040 ffff88801e292140 dead000000000122 0000000000000000
[  101.924767][   T12] raw: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  101.927880][   T12] head: 057ff00000000040 ffff88801e292140 dead000000000122 0000000000000000
[  101.930992][   T12] head: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  101.934224][   T12] head: 057ff00000000002 ffffea000443b901 00000000ffffffff 00000000ffffffff
[  101.937333][   T12] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  101.940472][   T12] page dumped because: kasan: bad access detected
[  101.942786][   T12] page_owner tracks the page as allocated
[  101.944856][   T12] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6045, tgid 6044 (syz.0.52), ts 61786030785, free_ts 61308744886
[  101.951754][   T12]  post_alloc_hook+0x240/0x2a0
[  101.953516][   T12]  get_page_from_freelist+0x21e4/0x22c0
[  101.955600][   T12]  __alloc_frozen_pages_noprof+0x181/0x370
[  101.957751][   T12]  alloc_pages_mpol+0x232/0x4a0
[  101.959529][   T12]  allocate_slab+0x8a/0x370
[  101.961268][   T12]  ___slab_alloc+0xbeb/0x1410
[  101.963050][   T12]  kmem_cache_alloc_noprof+0x283/0x3c0
[  101.965103][   T12]  xfrm_state_alloc+0x24/0x2f0
[  101.966917][   T12]  __find_acq_core+0x8a7/0x1c00
[  101.968799][   T12]  xfrm_find_acq+0x78/0xa0
[  101.970549][   T12]  xfrm_alloc_userspi+0x6b3/0xc90
[  101.972433][   T12]  xfrm_user_rcv_msg+0x7a3/0xab0
[  101.974327][   T12]  netlink_rcv_skb+0x208/0x470
[  101.976162][   T12]  xfrm_netlink_rcv+0x79/0x90
[  101.977995][   T12]  netlink_unicast+0x82f/0x9e0
[  101.979843][   T12]  netlink_sendmsg+0x805/0xb30
[  101.981697][   T12] page last free pid 6037 tgid 6037 stack trace:
[  101.984064][   T12]  __free_frozen_pages+0xbc4/0xd30
[  101.985968][   T12]  __slab_free+0x303/0x3c0
[  101.987655][   T12]  qlist_free_all+0x97/0x140
[  101.989420][   T12]  kasan_quarantine_reduce+0x148/0x160
[  101.991463][   T12]  __kasan_slab_alloc+0x22/0x80
[  101.993376][   T12]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  101.995484][   T12]  vm_area_dup+0x2b/0x680
[  101.997203][   T12]  __split_vma+0x1a9/0xa00
[  101.998961][   T12]  vma_modify+0x12c3/0x1970
[  102.000670][   T12]  vma_modify_flags+0x1e8/0x230
[  102.002502][   T12]  mprotect_fixup+0x407/0x9c0
[  102.004292][   T12]  do_mprotect_pkey+0x8cd/0xce0
[  102.006115][   T12]  __x64_sys_mprotect+0x80/0x90
[  102.007962][   T12]  do_syscall_64+0xfa/0x3b0
[  102.009725][   T12]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.012018][   T12] 
[  102.012967][   T12] Memory state around the buggy address:
[  102.015112][   T12]  ffff888110ee3f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  102.018041][   T12]  ffff888110ee3f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  102.020984][   T12] >ffff888110ee4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  102.024030][   T12]                                      ^
[  102.026199][   T12]  ffff888110ee4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  102.029283][   T12]  ffff888110ee4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  102.032352][   T12] ==================================================================
[  102.035825][   T12] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  102.038628][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  102.043369][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  102.047274][   T12] Workqueue: netns cleanup_net
[  102.049145][   T12] Call Trace:
[  102.050470][   T12]  <TASK>
[  102.051625][   T12]  dump_stack_lvl+0x99/0x250
[  102.053449][   T12]  ? __asan_memcpy+0x40/0x70
[  102.055256][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[  102.057268][   T12]  ? __pfx__printk+0x10/0x10
[  102.059066][   T12]  vpanic+0x281/0x750
[  102.060547][   T12]  ? __pfx_print_hex_dump+0x10/0x10
[  102.062557][   T12]  ? __pfx_vpanic+0x10/0x10
[  102.064361][   T12]  ? irqentry_exit+0x74/0x90
[  102.066168][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  102.068181][   T12]  panic+0xb9/0xc0
[  102.069646][   T12]  ? __pfx_panic+0x10/0x10
[  102.071391][   T12]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  102.073667][   T12]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  102.076077][   T12]  ? __xfrm_state_delete+0x696/0xca0
[  102.078104][   T12]  check_panic_on_warn+0x89/0xb0
[  102.079968][   T12]  ? __xfrm_state_delete+0x696/0xca0
[  102.082012][   T12]  end_report+0x78/0x160
[  102.083653][   T12]  kasan_report+0x129/0x150
[  102.085446][   T12]  ? __xfrm_state_delete+0x696/0xca0
[  102.087500][   T12]  __xfrm_state_delete+0x696/0xca0
[  102.089498][   T12]  xfrm_state_flush+0x45f/0x770
[  102.091441][   T12]  xfrm6_tunnel_net_exit+0x3f/0x100
[  102.093467][   T12]  ops_undo_list+0x49a/0x990
[  102.095282][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  102.097272][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  102.099255][   T12]  cleanup_net+0x4c5/0x800
[  102.100990][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  102.102910][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  102.104815][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  102.107017][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  102.109205][   T12]  process_scheduled_works+0xae1/0x17b0
[  102.111560][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  102.113853][   T12]  worker_thread+0x8a0/0xda0
[  102.115526][   T12]  kthread+0x711/0x8a0
[  102.117024][   T12]  ? __pfx_worker_thread+0x10/0x10
[  102.119013][   T12]  ? __pfx_kthread+0x10/0x10
[  102.120825][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  102.122845][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  102.124833][   T12]  ? __pfx_kthread+0x10/0x10
[  102.126584][   T12]  ret_from_fork+0x3fc/0x770
[  102.128356][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  102.130310][   T12]  ? __switch_to_asm+0x39/0x70
[  102.132126][   T12]  ? __switch_to_asm+0x33/0x70
[  102.133959][   T12]  ? __pfx_kthread+0x10/0x10
[  102.135760][   T12]  ret_from_fork_asm+0x1a/0x30
[  102.137621][   T12]  </TASK>
[  102.139523][   T12] Kernel Offset: disabled
[  102.141216][   T12] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:57:11  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff1b7bda2 RBX=0000000000000000 RCX=7dd137139f8e5400 RDX=0000000000000000
RSI=ffffffff8be333e0 RDI=ffffffff8be333a0 RBP=ffffffff8172c195 RSP=ffffc9000346f018
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc9000346f1f8 R11=ffffffff81ac3870
R12=0000000000000002 R13=ffffffff8e139ee0 R14=ffffffff8dbded10 R15=dffffc0000000000
RIP=ffffffff81a65dc4 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055cb275f7950 CR3=0000000028502000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff000000000000 0000000000ff0000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000077 RBX=0000000000000077 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000f7090
R8 =ffff888106030237 R9 =1ffff11020c06046 R10=dffffc0000000000 R11=ffffffff854eff30
R12=dffffc0000000000 R13=ffffffff99af990a R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854effac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4039842b10 CR3=000000010ec72000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00696669775f7472 69765f3168746576 XMM01=00696669775f7472 69765f3168746576
XMM02=6c7663616d003069 6669775f74726976 XMM03=0000000000000000 0000000000000000
XMM04=ff00000000000000 0000000000000000 XMM05=0000000000000000 00007f6921012e53
XMM06=0000000000000000 00007f6921012e4d XMM07=0000000000000000 00007f6921012e61
XMM08=0000000000000000 00007f6921012ee7 XMM09=0000000000000000 00007f6921012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
