last executing test programs:

3.098726224s ago: executing program 0 (id=407):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg(r3, 0x0, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x11}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x400000000}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, 0x0)

2.168213143s ago: executing program 0 (id=411):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x6, 0x7fffffff}]})
exit(0x0)

1.369399584s ago: executing program 1 (id=422):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [{0x2, 0x0, 0xee01}, {0x2, 0x3}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x4c, 0x3)

1.169660644s ago: executing program 1 (id=425):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt(r0, 0x11b, 0xb, 0x0, 0x0)

1.058871452s ago: executing program 0 (id=427):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x25cfdbfc, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010)

1.058671196s ago: executing program 2 (id=428):
syz_emit_ethernet(0x6a, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x40, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x2, {0x0, 0x4}}}}}}}}, 0x0)

1.058448674s ago: executing program 1 (id=429):
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x31, 0x2, 0x7, "4c49000000faa9b0071c937f7f00402e0c3800c39b80000000000000010100", 0x42303159})

990.431079ms ago: executing program 0 (id=430):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0x80, 0x42}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000340), 0x619, r0}, 0x38)

990.189752ms ago: executing program 1 (id=431):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e21, 0x400d, @remote, 0xb5}, 0x1c)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

909.336584ms ago: executing program 2 (id=432):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = dup(r0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000240)={0x15d7cc7b, 0x9, 0x2f, 0x8, 0x19, "93fc70d6e3945d4c548f4a175855c09c30179a"})
write$UHID_INPUT(r1, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006)

908.915847ms ago: executing program 1 (id=433):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)=@gcm_256={{0x303}, "ab4fc659949ab924", "794cc3819b2325af225bcc55d7711a8f3b1123673f4f98d74ebae07697f22c28", "94dbed0a", "7a3ae7b1c7e44fe9"}, 0x38)

908.66614ms ago: executing program 0 (id=434):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000040), &(0x7f00000001c0)=0x4)

850.98884ms ago: executing program 2 (id=435):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e0000002d008188042f8eeae0b8402e7b6e67d83c00000020000000000003000000002000e9ffffff0000000000", 0x2e}], 0x1}, 0x2004c084)

850.72714ms ago: executing program 2 (id=436):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20)
truncate(&(0x7f0000000000)='./file1\x00', 0x8)

570.401373ms ago: executing program 2 (id=437):
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x2800000, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="40d4823deffdbbeb65eeddb31203a829679a7a18f01faefa691c80df4e49f2c92d0c9708f605177b1f5699eeabb703cc126adf2f9c5167d17178b4e0c590345bad5de906894ef754ec7a8c3b32c7b9d0f74abf43c4dee78decff644fd28d7d874518bd960a098875b53d2005df3fb15a953031adb9887615b59f3caef2de95c9495a7154700055ef1a72", @ANYRESOCT, @ANYRES32=0x0, @ANYRES16], 0xec, 0x5ac4, &(0x7f0000008380)="$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")
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000006140)={0x2020, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, r1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)

79.860953ms ago: executing program 2 (id=438):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x2, @rand_addr=0x64010102}]}, &(0x7f0000000280)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x7d, &(0x7f00000000c0)={r1, @in={{0x2, 0x1000, @empty}}, 0x7fff, 0x0, 0xd78e, 0x0, 0x5a1, 0x0, 0x7}, 0x9c)

278.72µs ago: executing program 1 (id=439):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="0400000098d1db1ba91d3305a782", 0x0, 0x973, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50)

0s ago: executing program 0 (id=440):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newsa={0x13c, 0x10, 0x713, 0x2, 0x0, {{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x40, 0x6, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x0, 0x33}, @in=@broadcast, {0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x200000000000000}, {0x5, 0xfffffffffffffffd}, {0x0, 0x0, 0x4}, 0x70bd2b, 0x0, 0x2, 0x0, 0x7f, 0x6a}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0xa0}}]}, 0x13c}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:27618' (ED25519) to the list of known hosts.
syzkaller login: [   56.561336][ T5826] cgroup: Unknown subsys name 'net'
[   56.690445][ T5826] cgroup: Unknown subsys name 'cpuset'
[   56.694958][ T5826] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.196992][ T5826] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.974803][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.979227][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.982582][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.986622][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.996336][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.027594][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.031947][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.036430][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.042255][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.047723][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.088759][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.092827][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.096424][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.103881][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.112127][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.408151][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   65.470166][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   65.606899][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   65.658622][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.661979][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.664866][ T5849] bridge_slave_0: entered allmulticast mode
[   65.668973][ T5849] bridge_slave_0: entered promiscuous mode
[   65.672919][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.677364][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.680014][ T5845] bridge_slave_0: entered allmulticast mode
[   65.683430][ T5845] bridge_slave_0: entered promiscuous mode
[   65.695183][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.697645][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.699886][ T5845] bridge_slave_1: entered allmulticast mode
[   65.702606][ T5845] bridge_slave_1: entered promiscuous mode
[   65.706914][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.709092][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.711452][ T5849] bridge_slave_1: entered allmulticast mode
[   65.714139][ T5849] bridge_slave_1: entered promiscuous mode
[   65.778560][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.802753][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.808174][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.818110][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.868766][ T5845] team0: Port device team_slave_0 added
[   65.872856][ T5849] team0: Port device team_slave_0 added
[   65.889894][ T5849] team0: Port device team_slave_1 added
[   65.892340][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.894756][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.897800][ T5852] bridge_slave_0: entered allmulticast mode
[   65.901286][ T5852] bridge_slave_0: entered promiscuous mode
[   65.906539][ T5845] team0: Port device team_slave_1 added
[   65.941046][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.944207][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.947562][ T5852] bridge_slave_1: entered allmulticast mode
[   65.951369][ T5852] bridge_slave_1: entered promiscuous mode
[   65.970676][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.973507][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.983887][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.005020][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.009919][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.020132][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.040318][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.042486][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.051753][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.059475][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.062202][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.072765][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.088771][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.103563][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.197605][ T5849] hsr_slave_0: entered promiscuous mode
[   66.200894][ T5849] hsr_slave_1: entered promiscuous mode
[   66.206509][ T5852] team0: Port device team_slave_0 added
[   66.214064][ T5845] hsr_slave_0: entered promiscuous mode
[   66.219664][ T5845] hsr_slave_1: entered promiscuous mode
[   66.223303][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   66.226365][ T5845] Cannot create hsr debugfs directory
[   66.230944][ T5852] team0: Port device team_slave_1 added
[   66.347418][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.350128][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.361599][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.379072][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.381652][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.390568][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.525091][ T5852] hsr_slave_0: entered promiscuous mode
[   66.529012][ T5852] hsr_slave_1: entered promiscuous mode
[   66.531800][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   66.533565][ T5852] Cannot create hsr debugfs directory
[   66.638338][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.647978][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.661634][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.685269][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.788657][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.797450][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.819656][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.825227][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.863057][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.874462][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.882908][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.897302][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.941206][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.966856][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   66.980033][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.983254][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.990429][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.993522][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.017240][   T54] Bluetooth: hci0: command tx timeout
[   67.050732][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.095834][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   67.096051][   T54] Bluetooth: hci1: command tx timeout
[   67.130429][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.133394][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.150782][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.153734][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.170435][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.186106][   T54] Bluetooth: hci2: command tx timeout
[   67.198258][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   67.214526][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.217351][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.233031][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.245168][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.248216][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.333599][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.393080][ T5849] veth0_vlan: entered promiscuous mode
[   67.410140][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.431559][ T5849] veth1_vlan: entered promiscuous mode
[   67.490103][ T5845] veth0_vlan: entered promiscuous mode
[   67.506706][ T5849] veth0_macvtap: entered promiscuous mode
[   67.512371][ T5845] veth1_vlan: entered promiscuous mode
[   67.516162][ T5849] veth1_macvtap: entered promiscuous mode
[   67.551608][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.566861][ T5845] veth0_macvtap: entered promiscuous mode
[   67.571034][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.588442][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.593131][ T5845] veth1_macvtap: entered promiscuous mode
[   67.606557][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.617705][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.621219][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.643258][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.650445][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.658692][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.702527][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.706891][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.718118][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.732639][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.760847][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.764631][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.789046][ T5852] veth0_vlan: entered promiscuous mode
[   67.836170][ T5852] veth1_vlan: entered promiscuous mode
[   67.855349][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.865026][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.875531][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.878628][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.885694][ T5852] veth0_macvtap: entered promiscuous mode
[   67.892027][ T5852] veth1_macvtap: entered promiscuous mode
[   67.941877][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.948646][ T1198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.951668][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.957510][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.961276][ T1198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.968135][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.971184][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.974277][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.988246][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.081398][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.084241][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.144561][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.150191][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.160818][ T5913] bond_slave_0: entered promiscuous mode
[   68.163007][ T5913] bond_slave_1: entered promiscuous mode
[   68.164984][ T5913] macsec1: entered allmulticast mode
[   68.167289][ T5913] bond0: entered allmulticast mode
[   68.169271][ T5913] bond_slave_0: entered allmulticast mode
[   68.171431][ T5913] bond_slave_1: entered allmulticast mode
[   68.177582][ T5913] bond0: left allmulticast mode
[   68.179169][ T5913] bond_slave_0: left allmulticast mode
[   68.181904][ T5913] bond_slave_1: left allmulticast mode
[   68.183693][ T5913] bond_slave_0: left promiscuous mode
[   68.185472][ T5913] bond_slave_1: left promiscuous mode
[   68.789532][ T5936] Driver unsupported XDP return value 0 on prog  (id 4) dev N/A, expect packet loss!
[   68.899804][ T5939] binder: 5937:5939 ioctl c0306201 0 returned -14
[   68.988135][ T5907] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   69.106165][   T54] Bluetooth: hci0: command tx timeout
[   69.120026][ T5942] loop1: detected capacity change from 0 to 256
[   69.187516][   T54] Bluetooth: hci1: command tx timeout
[   69.194569][ T5907] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   69.199188][ T5907] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[   69.202608][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[   69.248108][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[   69.251552][ T5907] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   69.256772][   T54] Bluetooth: hci2: command tx timeout
[   69.291494][ T5907] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[   69.294691][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[   69.300124][ T5907] usb 3-1: Product: syz
[   69.301534][ T5907] usb 3-1: Manufacturer: syz
[   69.303069][ T5907] usb 3-1: SerialNumber: syz
[   69.343945][ T5907] usb 3-1: config 0 descriptor??
[   69.390903][ T5942] FAT-fs (loop1): Directory bread(block 64) failed
[   69.398159][ T5942] FAT-fs (loop1): Directory bread(block 65) failed
[   69.401309][ T5942] FAT-fs (loop1): Directory bread(block 66) failed
[   69.404053][ T5942] FAT-fs (loop1): Directory bread(block 67) failed
[   69.412475][ T5942] FAT-fs (loop1): Directory bread(block 68) failed
[   69.422124][ T5942] FAT-fs (loop1): Directory bread(block 69) failed
[   69.425254][ T5942] FAT-fs (loop1): Directory bread(block 70) failed
[   69.428280][ T5942] FAT-fs (loop1): Directory bread(block 71) failed
[   69.431732][ T5942] FAT-fs (loop1): Directory bread(block 72) failed
[   69.434593][ T5942] FAT-fs (loop1): Directory bread(block 73) failed
[   69.629004][ T5907] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000
[   69.637651][ T5907] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[   69.825018][ T5907] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71
[   69.839568][ T5907] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -71
[   69.843751][ T5907] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5
[   69.909610][ T5907] usb 3-1: USB disconnect, device number 2
[   70.426078][   T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   70.481163][ T5964] capability: warning: `syz.2.26' uses deprecated v2 capabilities in a way that may be insecure
[   70.562177][ T5967] loop2: detected capacity change from 0 to 256
[   70.570336][ T5967] exfat: Deprecated parameter 'utf8'
[   70.582436][ T5967] exfat: Deprecated parameter 'utf8'
[   70.586647][   T24] usb 2-1: Using ep0 maxpacket: 32
[   70.590506][   T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9
[   70.594772][ T5967] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d)
[   70.596589][   T24] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[   70.603959][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.607958][   T24] usb 2-1: Product: syz
[   70.609674][   T24] usb 2-1: Manufacturer: syz
[   70.611259][   T24] usb 2-1: SerialNumber: syz
[   70.615220][   T24] usb 2-1: config 0 descriptor??
[   70.621966][ T5951] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   70.631855][   T24] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input4
[   70.839695][   T47] usb 2-1: USB disconnect, device number 2
[   70.842152][    C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[   71.176188][   T54] Bluetooth: hci0: command tx timeout
[   71.178217][   T33] audit: type=1326 audit(1755610803.376:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5986 comm="syz.2.35" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92adb8ebe9 code=0x7ffc0000
[   71.188336][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   71.190636][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[   71.194901][   T33] audit: type=1326 audit(1755610803.386:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5986 comm="syz.2.35" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92adb8ebe9 code=0x7ffc0000
[   71.203478][ T5485] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   71.215817][   T33] audit: type=1326 audit(1755610803.386:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5986 comm="syz.2.35" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f92adb8d69f code=0x7ffc0000
[   71.233652][   T33] audit: type=1326 audit(1755610803.386:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5986 comm="syz.2.35" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92adb8ebe9 code=0x7ffc0000
[   71.244998][   T33] audit: type=1326 audit(1755610803.386:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5986 comm="syz.2.35" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92adb8ebe9 code=0x7ffc0000
[   71.255968][   T54] Bluetooth: hci1: command tx timeout
[   71.334596][ T5991] loop2: detected capacity change from 0 to 4096
[   71.346043][   T54] Bluetooth: hci2: command tx timeout
[   71.366735][ T5485] usb 1-1: Using ep0 maxpacket: 16
[   71.373314][ T5485] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   71.378153][ T5485] usb 1-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   71.394064][ T5485] usb 1-1: config 0 interface 0 has no altsetting 0
[   71.402661][ T5991] ntfs3(loop2): ino=b, Correct links count -> 1.
[   71.405469][ T5485] usb 1-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00
[   71.411669][ T5485] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.411966][ T5991] ntfs3(loop2): ino=18, mi_enum_attr
[   71.417986][ T5991] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   71.424689][ T5485] usb 1-1: config 0 descriptor??
[   71.459191][   T33] audit: type=1800 audit(1755610803.666:7): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.37" name="file1" dev="loop2" ino=34 res=0 errno=0
[   71.862568][ T5485] cypress 0003:04B4:BCA1.0001: item fetching failed at offset 4/5
[   71.886166][ T5485] cypress 0003:04B4:BCA1.0001: parse failed
[   71.894248][ T5485] cypress 0003:04B4:BCA1.0001: probe with driver cypress failed with error -22
[   72.050706][   T24] usb 1-1: USB disconnect, device number 2
[   72.100101][ T6002] loop1: detected capacity change from 0 to 256
[   72.432179][ T6009] loop2: detected capacity change from 0 to 32768
[   72.445341][ T6009] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.45 (6009)
[   72.472862][ T6009] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   72.477705][ T6009] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   72.480612][ T6009] BTRFS info (device loop2): using free-space-tree
[   72.607303][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.50'.
[   72.670875][ T5849] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   73.265909][   T54] Bluetooth: hci0: command tx timeout
[   73.338731][   T54] Bluetooth: hci1: command tx timeout
[   73.415794][   T54] Bluetooth: hci2: command tx timeout
[   73.672616][ T6071] loop2: detected capacity change from 0 to 1024
[   73.854731][ T6083] Bluetooth: MGMT ver 1.23
[   74.057380][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'.
[   74.060643][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'.
[   74.061866][ T6085] loop1: detected capacity change from 0 to 32768
[   74.082961][ T6082] loop2: detected capacity change from 0 to 40427
[   74.109520][ T6082] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288)
[   74.112806][ T6082] F2FS-fs (loop2): build fault injection rate: 9
[   74.122295][ T6082] F2FS-fs (loop2): invalid crc value
[   74.126440][ T6082] F2FS-fs (loop2): Current segment's next free block offset is inconsistent with bitmap, logtype:2, segno:5, type:0, next_blkoff:0, blkofs:0
[   74.132820][ T6082] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117)
[   74.174040][ T6085] bcachefs (loop1): starting version 1.13: inode_has_child_snapshots opts=metadata_checksum=none,data_checksum=none,compression=lz4
[   74.174054][ T6085]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   74.188922][ T6085] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[   74.191590][ T6085] bcachefs (loop1): recovering from clean shutdown, journal seq 8
[   74.194046][ T6085] bcachefs (loop1): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive
[   74.194046][ T6085]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[   74.231217][ T6085] bcachefs (loop1): error reading btree root btree=accounting level=0: btree_node_read_error, fixing
[   74.235658][ T6085] bcachefs (loop1): check_topology... done
[   74.239001][ T6085] bcachefs (loop1): accounting_read... done
[   74.242959][ T6085] bcachefs (loop1): alloc_read... done
[   74.248312][ T6085] bcachefs (loop1): snapshots_read... done
[   74.250876][ T6085] bcachefs (loop1): check_allocations...
[   74.257708][ T6085] bcachefs (loop1): bucket 0:79 gen 0 has wrong data_type: got btree, should be need_discard, fixing
[   74.264364][ T6085] bcachefs (loop1): bucket 0:79 gen 0 data type need_discard has wrong dirty_sectors: got 64, should be 0, fixing
[   74.275218][ T6085]  done
[   74.285330][ T6085] bcachefs (loop1): going read-write
[   74.300291][ T6085] bcachefs (loop1): journal_replay...
[   74.303604][ T6099] netlink: 84 bytes leftover after parsing attributes in process `syz.0.76'.
[   74.372179][ T6085]  done
[   74.374198][ T6085] bcachefs (loop1): check_lrus... done
[   74.380674][ T6085] bcachefs (loop1): check_backpointers_to_extents... done
[   74.391760][ T6085] bcachefs (loop1): check_extents_to_backpointers... done
[   74.406068][ T6085] bcachefs (loop1): check_inodes... done
[   74.409860][ T6085] bcachefs (loop1): resume_logged_ops... done
[   74.413009][ T6085] bcachefs (loop1): delete_dead_inodes... done
[   74.429936][ T6085] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean
[   74.433525][ T6085] bcachefs (loop1): check_extents_to_backpointers...
[   74.434699][ T6085] bcachefs (loop1): scanning for missing backpointers in 1/512 buckets
[   74.447547][ T6085]  done
[   74.450015][ T6085] bcachefs (loop1): check_inodes... done
[   74.453502][ T6085] bcachefs (loop1): resume_logged_ops... done
[   74.456790][ T6085] bcachefs (loop1): delete_dead_inodes... done
[   74.462020][ T6085] bcachefs (loop1): done starting filesystem
[   74.586410][ T6085] syz.1.73 (6085) used greatest stack depth: 14952 bytes left
[   74.645497][ T6117] loop2: detected capacity change from 0 to 32768
[   74.650020][ T6117] =======================================================
[   74.650020][ T6117] WARNING: The mand mount option has been deprecated and
[   74.650020][ T6117]          and is ignored by this kernel. Remove the mand
[   74.650020][ T6117]          option from the mount to silence this warning.
[   74.650020][ T6117] =======================================================
[   74.686110][ T5845] bcachefs (loop1): shutting down
[   74.691483][ T5845] bcachefs (loop1): going read-only
[   74.695884][ T5845] bcachefs (loop1): finished waiting for writes to stop
[   74.700880][ T6117] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   74.711038][ T6117] OCFS2: ERROR (device loop2): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 74
[   74.718021][ T6117] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   74.721703][ T6117] OCFS2: Returning error to the calling process.
[   74.724130][ T6117] (syz.2.81,6117,1):ocfs2_reserve_suballoc_bits:856 ERROR: status = -5
[   74.726970][ T6117] (syz.2.81,6117,1):ocfs2_reserve_new_inode:1097 ERROR: status = -5
[   74.729679][ T6117] (syz.2.81,6117,1):ocfs2_reserve_new_inode:1120 ERROR: status = -5
[   74.732874][ T6117] (syz.2.81,6117,1):ocfs2_mknod:309 ERROR: status = -5
[   74.735305][ T6117] (syz.2.81,6117,1):ocfs2_mknod:505 ERROR: status = -5
[   74.735983][ T5845] bcachefs (loop1): flushing journal and stopping allocators, journal seq 19
[   74.737798][ T6117] (syz.2.81,6117,1):ocfs2_mkdir:661 ERROR: status = -5
[   74.753774][ T5845] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 19
[   74.763140][ T5845] bcachefs (loop1): clean shutdown complete, journal seq 20
[   74.767420][ T5845] bcachefs (loop1): marking filesystem clean
[   74.821731][ T5845] bcachefs (loop1): shutdown complete
[   74.835989][ T5849] ocfs2: Unmounting device (7,2) on (node local)
[   75.457177][   T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   75.629628][   T24] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[   75.634429][   T24] usb 3-1: config 0 has no interface number 0
[   75.637440][   T24] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   75.644972][   T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[   75.649817][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.652975][   T24] usb 3-1: Product: syz
[   75.654805][   T24] usb 3-1: Manufacturer: syz
[   75.657474][   T24] usb 3-1: SerialNumber: syz
[   75.663386][   T24] usb 3-1: config 0 descriptor??
[   75.674731][   T24] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0
[   76.089193][   T24] usb 3-1: USB disconnect, device number 3
[   76.098632][   T24] yurex 3-1:0.50: USB YUREX #0 now disconnected
[   76.476540][ T1273] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   76.523023][   T33] audit: type=1326 audit(1755610808.726:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.0.107" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2dab78ebe9 code=0x0
[   76.599907][ T6175] netlink: 160 bytes leftover after parsing attributes in process `syz.0.108'.
[   76.603175][ T6175] netlink: 'syz.0.108': attribute type 1 has an invalid length.
[   76.608132][ T6175] netlink: 24 bytes leftover after parsing attributes in process `syz.0.108'.
[   76.638634][ T1273] usb 2-1: config 0 has an invalid interface number: 52 but max is 0
[   76.641336][ T1273] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   76.644504][ T1273] usb 2-1: config 0 has no interface number 0
[   76.658759][ T1273] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10
[   76.662325][ T1273] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[   76.666343][ T1273] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   76.671894][ T1273] usb 2-1: config 0 interface 52 has no altsetting 0
[   76.682516][ T1273] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00
[   76.693947][ T1273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35
[   76.705066][ T1273] usb 2-1: SerialNumber: syz
[   76.708605][ T1273] usb 2-1: config 0 descriptor??
[   76.743042][ T6183] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[   76.744347][ T6185] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.113'.
[   76.928305][ T1273] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[   76.931584][ T1273] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -5
[   76.969906][   T33] audit: type=1804 audit(1755610809.176:9): pid=6196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.118" name="/newroot/52/file0" dev="tmpfs" ino=297 res=1 errno=0
[   77.077553][ T6202] netlink: 312 bytes leftover after parsing attributes in process `syz.0.121'.
[   77.138081][ T1273] usb 2-1: USB disconnect, device number 3
[   77.156189][ T5907] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   77.305730][ T5907] usb 3-1: Using ep0 maxpacket: 32
[   77.309956][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   77.314124][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   77.318397][ T5907] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[   77.322042][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.328419][ T5907] usb 3-1: config 0 descriptor??
[   77.505809][ T5485] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   77.667840][ T5485] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   77.682215][ T5485] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   77.698710][ T5485] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   77.702273][ T5485] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.715620][ T5485] usb 1-1: Product: syz
[   77.726908][ T5485] usb 1-1: Manufacturer: syz
[   77.730758][ T5485] usb 1-1: SerialNumber: syz
[   77.743831][ T5907] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0
[   77.755151][ T5907] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0
[   77.759556][ T5907] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0
[   77.763624][ T5907] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0
[   77.766715][ T5907] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0
[   77.774108][ T5907] kone 0003:1E7D:2CED.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.2-1/input0
[   77.941656][ T5907] kone 0003:1E7D:2CED.0002: couldn't init struct kone_device
[   77.944629][ T5907] kone 0003:1E7D:2CED.0002: couldn't install mouse
[   77.952991][ T5907] kone 0003:1E7D:2CED.0002: probe with driver kone failed with error -5
[   77.962803][ T5485] usb 1-1: 0:2 : does not exist
[   77.972600][ T5907] usb 3-1: USB disconnect, device number 4
[   77.977207][ T5485] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[   78.001195][ T5485] usb 1-1: USB disconnect, device number 3
[   78.026871][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   78.760781][ T6225] loop2: detected capacity change from 0 to 32768
[   78.916504][ T6237] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0)
[   79.238340][ T6241] loop2: detected capacity change from 0 to 32768
[   79.247243][ T6241] XFS: noikeep mount option is deprecated.
[   79.274406][ T6241] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   79.321677][ T6241] XFS (loop2): Ending clean mount
[   79.327999][ T6241] XFS (loop2): Quotacheck needed: Please wait.
[   79.349182][ T6241] XFS (loop2): Quotacheck: Done.
[   79.393574][ T5849] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   79.750349][ T6258] loop2: detected capacity change from 0 to 32768
[   80.189345][ T6268] loop2: detected capacity change from 0 to 32768
[   80.194455][ T6268] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.146 (6268)
[   80.207032][ T6268] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   80.211059][ T6268] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   80.226525][ T6268] BTRFS info (device loop2): using free-space-tree
[   80.346676][ T5849] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   80.801840][ T6295] loop2: detected capacity change from 0 to 8
[   80.857788][ T6295] unable to read id index table
[   81.185266][ T6302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.152'.
[   81.225983][ T6304] loop1: detected capacity change from 0 to 1024
[   81.228602][ T6304] EXT4-fs: Ignoring removed oldalloc option
[   81.230926][ T6304] EXT4-fs: Ignoring removed bh option
[   81.249829][ T6304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.352947][ T6311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.154'.
[   81.374525][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.485708][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.156'.
[   81.890251][ T6325] netlink: 44 bytes leftover after parsing attributes in process `syz.2.161'.
[   81.893571][ T6325] netlink: 36 bytes leftover after parsing attributes in process `syz.2.161'.
[   82.175641][ T5485] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   82.292054][ T6334] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.336969][ T5485] usb 3-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87
[   82.339748][ T5485] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.347196][ T5485] usb 3-1: config 0 descriptor??
[   82.356918][ T5485] usb-storage 3-1:0.0: USB Mass Storage device detected
[   82.371665][ T6332] loop1: detected capacity change from 0 to 32768
[   82.373387][ T5485] usb-storage 3-1:0.0: This device (090a,1200,2487 S 01 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[   82.373387][ T5485]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[   82.400024][ T6332] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[   82.446604][ T6332] (syz.1.164,6332,1):ocfs2_change_extent_flag:5216 ERROR: Owner 17058 tried to clear 1 flags on an extent that didn't have them
[   82.451822][ T6332] (syz.1.164,6332,1):ocfs2_mark_extent_written:5280 ERROR: status = -5
[   82.454498][ T6332] (syz.1.164,6332,1):ocfs2_dio_end_io_write:2355 ERROR: status = -5
[   82.496323][ T5845] ocfs2: Unmounting device (7,1) on (node local)
[   82.565765][ T5907] usb 3-1: USB disconnect, device number 5
[   82.827881][ T6361] loop1: detected capacity change from 0 to 40427
[   82.840464][ T6361] F2FS-fs (loop1): invalid crc value
[   82.889265][ T6361] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   82.893775][ T6361] F2FS-fs (loop1): Start checkpoint disabled!
[   82.901468][ T6361] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   82.932942][ T1095] kworker/u9:8: attempt to access beyond end of device
[   82.932942][ T1095] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   82.941321][ T1095] CPU: 0 UID: 0 PID: 1095 Comm: kworker/u9:8 Not tainted syzkaller #0 PREEMPT(full) 
[   82.941342][ T1095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   82.941351][ T1095] Workqueue: writeback wb_workfn (flush-7:1)
[   82.941374][ T1095] Call Trace:
[   82.941380][ T1095]  <TASK>
[   82.941407][ T1095]  dump_stack_lvl+0x189/0x250
[   82.941431][ T1095]  ? __pfx_dump_stack_lvl+0x10/0x10
[   82.941445][ T1095]  ? __pfx_queue_work_on+0x10/0x10
[   82.941459][ T1095]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   82.941475][ T1095]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   82.941495][ T1095]  f2fs_handle_critical_error+0x37c/0x540
[   82.941518][ T1095]  f2fs_write_end_io+0x886/0xb60
[   82.941541][ T1095]  __submit_merged_bio+0x27a/0x6a0
[   82.941561][ T1095]  __submit_merged_write_cond+0x255/0x530
[   82.941581][ T1095]  f2fs_write_data_pages+0x261d/0x3000
[   82.941629][ T1095]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   82.941657][ T1095]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   82.941669][ T1095]  ? stack_trace_save+0x9c/0xe0
[   82.941706][ T1095]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   82.941733][ T1095]  ? trace_f2fs_writepages+0x7f/0x200
[   82.941750][ T1095]  ? f2fs_write_node_pages+0x478/0x6e0
[   82.941770][ T1095]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   82.941795][ T1095]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   82.941812][ T1095]  do_writepages+0x32e/0x550
[   82.941831][ T1095]  ? reacquire_held_locks+0x127/0x1d0
[   82.941845][ T1095]  ? writeback_sb_inodes+0x384/0x1010
[   82.941868][ T1095]  __writeback_single_inode+0x145/0xff0
[   82.941882][ T1095]  ? do_raw_spin_unlock+0x4d/0x240
[   82.941899][ T1095]  writeback_sb_inodes+0x6c7/0x1010
[   82.941933][ T1095]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   82.941977][ T1095]  ? rcu_is_watching+0x15/0xb0
[   82.941999][ T1095]  wb_writeback+0x43b/0xaf0
[   82.942019][ T1095]  ? queue_io+0x321/0x590
[   82.942062][ T1095]  ? __pfx_wb_writeback+0x10/0x10
[   82.942083][ T1095]  ? _raw_spin_unlock_irq+0x23/0x50
[   82.942101][ T1095]  wb_workfn+0x409/0xef0
[   82.942124][ T1095]  ? __pfx_wb_workfn+0x10/0x10
[   82.942140][ T1095]  ? __lock_acquire+0xab9/0xd20
[   82.942168][ T1095]  ? process_scheduled_works+0x9ef/0x17b0
[   82.942185][ T1095]  ? _raw_spin_unlock_irq+0x23/0x50
[   82.942198][ T1095]  ? process_scheduled_works+0x9ef/0x17b0
[   82.942207][ T1095]  ? process_scheduled_works+0x9ef/0x17b0
[   82.942218][ T1095]  process_scheduled_works+0xae1/0x17b0
[   82.942248][ T1095]  ? __pfx_process_scheduled_works+0x10/0x10
[   82.942272][ T1095]  worker_thread+0x8a0/0xda0
[   82.942286][ T1095]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   82.942304][ T1095]  ? __kthread_parkme+0x7b/0x200
[   82.942323][ T1095]  kthread+0x711/0x8a0
[   82.942338][ T1095]  ? __pfx_worker_thread+0x10/0x10
[   82.942351][ T1095]  ? __pfx_kthread+0x10/0x10
[   82.942366][ T1095]  ? _raw_spin_unlock_irq+0x23/0x50
[   82.942380][ T1095]  ? lockdep_hardirqs_on+0x9c/0x150
[   82.942395][ T1095]  ? __pfx_kthread+0x10/0x10
[   82.942411][ T1095]  ret_from_fork+0x3fc/0x770
[   82.942426][ T1095]  ? __pfx_ret_from_fork+0x10/0x10
[   82.942442][ T1095]  ? __switch_to_asm+0x39/0x70
[   82.942456][ T1095]  ? __switch_to_asm+0x33/0x70
[   82.942468][ T1095]  ? __pfx_kthread+0x10/0x10
[   82.942482][ T1095]  ret_from_fork_asm+0x1a/0x30
[   82.942507][ T1095]  </TASK>
[   82.942513][ T1095] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   83.117415][ T6366] netlink: 'syz.2.178': attribute type 1 has an invalid length.
[   83.120257][ T6366] netlink: 'syz.2.178': attribute type 3 has an invalid length.
[   83.123368][ T6366] netlink: 224 bytes leftover after parsing attributes in process `syz.2.178'.
[   83.859419][ T6398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.189'.
[   83.862426][ T6398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.189'.
[   83.937132][ T5907] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   84.114473][ T5907] usb 2-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=90.d6
[   84.120902][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.126493][ T5907] usb 2-1: Product: syz
[   84.129474][ T5907] usb 2-1: Manufacturer: syz
[   84.133777][ T5907] usb 2-1: SerialNumber: syz
[   84.138293][ T5907] usb 2-1: config 0 descriptor??
[   84.153072][ T5907] aiptek 2-1:0.0: interface has no int in endpoints, but must have minimum 1
[   84.175256][ T6414] loop2: detected capacity change from 0 to 512
[   84.184105][ T6414] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   84.188827][ T6414] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   84.196381][ T6414] EXT4-fs (loop2): 1 truncate cleaned up
[   84.199164][ T6414] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.227053][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.348194][ T5907] usb 2-1: USB disconnect, device number 4
[   84.895859][ T6433] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   84.909546][ T6433] Zero length message leads to an empty skb
[   85.003024][ T6441] autofs: Bad value for 'fd'
[   85.075276][   T33] audit: type=1326 audit(1755610817.276:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.1.208" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbdf018ebe9 code=0x0
[   85.134069][ T6452] loop2: detected capacity change from 0 to 1024
[   85.988815][ T6463] netlink: 40 bytes leftover after parsing attributes in process `syz.0.214'.
[   86.122993][ T6469] ptrace attach of "/syz-executor exec"[5852] was attempted by "/syz-executor exec"[6469]
[   86.538075][   T10] cfg80211: failed to load regulatory.db
[   86.662143][ T6477] tap0: tun_chr_ioctl cmd 1074025677
[   86.668518][ T6477] tap0: linktype set to 780
[   87.225602][   T47] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[   87.307495][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.228'.
[   87.377548][ T6501] loop1: detected capacity change from 0 to 512
[   87.381808][ T6501] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   87.389691][   T47] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   87.393672][   T47] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   87.397473][ T6501] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   87.401611][ T6501] EXT4-fs (loop1): group descriptors corrupted!
[   87.412192][   T47] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   87.415976][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.421996][   T47] usb 3-1: Product: syz
[   87.423701][   T47] usb 3-1: Manufacturer: syz
[   87.425819][   T47] usb 3-1: SerialNumber: syz
[   87.642044][   T47] usb 3-1: 0:2 : does not exist
[   87.651071][   T47] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[   87.660624][ T6505] loop1: detected capacity change from 0 to 32768
[   87.669097][ T6505] (syz.1.233,6505,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   87.681293][   T47] usb 3-1: USB disconnect, device number 6
[   87.687124][ T6505] (syz.1.233,6505,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   87.703530][ T6505] JBD2: Ignoring recovery information on journal
[   87.723126][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   87.737935][ T6505] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   87.802348][ T5845] ocfs2: Unmounting device (7,1) on (node local)
[   87.988756][ T6510] ubi31: attaching mtd0
[   88.001761][ T6510] ubi31: scanning is finished
[   88.003427][ T6510] ubi31: empty MTD device detected
[   88.159376][ T6510] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[   88.163804][ T6510] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[   88.167696][ T6510] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[   88.172561][ T6510] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[   88.192737][ T6510] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[   88.210366][ T6510] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[   88.229866][ T6510] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3527640006
[   88.244143][ T6510] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[   88.251968][ T6511] ubi31: background thread "ubi_bgt31d" started, PID 6511
[   88.367071][ T6516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.236'.
[   89.372917][ T6540] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   89.538313][ T6546] loop1: detected capacity change from 0 to 1024
[   89.566077][ T6546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.811159][ T6550] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[   89.944932][ T6546] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   90.020125][ T6552] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28
[   90.024287][ T6552] EXT4-fs (loop1): This should not happen!! Data will be lost
[   90.024287][ T6552] 
[   90.029861][ T6552] EXT4-fs (loop1): Total free blocks count 0
[   90.032223][ T6552] EXT4-fs (loop1): Free/Dirty block details
[   90.034592][ T6552] EXT4-fs (loop1): free_blocks=20480
[   90.036796][ T6552] EXT4-fs (loop1): dirty_blocks=3008
[   90.038848][ T6552] EXT4-fs (loop1): Block reservation details
[   90.042273][ T6552] EXT4-fs (loop1): i_reserved_data_blocks=188
[   90.102667][ T6545] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2112 with max blocks 896 with error 28
[   90.284024][ T6563] netlink: 830 bytes leftover after parsing attributes in process `syz.1.256'.
[   90.402693][ T6569] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes
[   91.021382][ T6583] netlink: 24 bytes leftover after parsing attributes in process `syz.0.265'.
[   91.087525][ T6586] loop1: detected capacity change from 0 to 256
[   91.109239][ T6586] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x111babd0)
[   91.128812][ T6586] exFAT-fs (loop1): invalid boot region
[   91.130564][ T6586] exFAT-fs (loop1): failed to recognize exfat type
[   91.320097][ T6590] loop1: detected capacity change from 0 to 256
[   91.370987][ T6590] FAT-fs (loop1): Directory bread(block 64) failed
[   91.375516][ T6590] FAT-fs (loop1): Directory bread(block 65) failed
[   91.380353][ T6590] FAT-fs (loop1): Directory bread(block 66) failed
[   91.382768][ T6590] FAT-fs (loop1): Directory bread(block 67) failed
[   91.385244][ T6590] FAT-fs (loop1): Directory bread(block 68) failed
[   91.390331][ T6590] FAT-fs (loop1): Directory bread(block 69) failed
[   91.392637][ T6590] FAT-fs (loop1): Directory bread(block 70) failed
[   91.395169][ T6590] FAT-fs (loop1): Directory bread(block 71) failed
[   91.398964][ T6590] FAT-fs (loop1): Directory bread(block 72) failed
[   91.401575][ T6590] FAT-fs (loop1): Directory bread(block 73) failed
[   91.688416][ T6601] netlink: 'syz.1.274': attribute type 1 has an invalid length.
[   91.695898][ T6601] netlink: 'syz.1.274': attribute type 11 has an invalid length.
[   91.699072][ T6601] netlink: 224 bytes leftover after parsing attributes in process `syz.1.274'.
[   91.897872][ T6608] loop1: detected capacity change from 0 to 16
[   91.937883][ T6608] erofs (device loop1): rootino(nid 36) is not a directory(i_mode 26000)
[   92.285957][ T1273] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   92.375659][ T5907] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   92.456180][ T1273] usb 2-1: Using ep0 maxpacket: 8
[   92.459775][ T1273] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   92.463329][ T1273] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[   92.467909][ T1273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[   92.471596][ T1273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[   92.475144][ T1273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   92.479302][ T1273] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   92.487498][ T1273] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[   92.490484][ T1273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.492953][ T1273] usb 2-1: Product: syz
[   92.494425][ T1273] usb 2-1: Manufacturer: syz
[   92.496436][ T1273] usb 2-1: SerialNumber: syz
[   92.499499][ T1273] usb 2-1: config 0 descriptor??
[   92.503992][ T6611] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   92.535671][ T5907] usb 1-1: Using ep0 maxpacket: 32
[   92.540028][ T5907] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   92.544343][ T5907] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[   92.548442][ T5907] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   92.552277][ T5907] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[   92.556300][ T5907] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26
[   92.562800][ T5907] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   92.565502][   T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   92.567570][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   92.572035][ T5907] usb 1-1: SerialNumber: syz
[   92.590929][ T6614] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   92.725494][   T24] usb 3-1: Using ep0 maxpacket: 8
[   92.729331][   T24] usb 3-1: config 8 has an invalid interface number: 49 but max is 0
[   92.732021][   T24] usb 3-1: config 8 has no interface number 0
[   92.734449][   T24] usb 3-1: config 8 interface 49 has no altsetting 0
[   92.740745][   T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=d551, bcdDevice=df.20
[   92.743762][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.746903][   T24] usb 3-1: Product: syz
[   92.748390][   T24] usb 3-1: Manufacturer: syz
[   92.750096][   T24] usb 3-1: SerialNumber: syz
[   92.811555][ T5907] usb 1-1: USB disconnect, device number 4
[   92.963142][   T24] ipheth 3-1:8.49: Unable to find alternate settings interface
[   92.974676][   T24] usb 3-1: USB disconnect, device number 7
[   94.008253][ T1273] rc_core: IR keymap rc-snapstream-firefly not found
[   94.016635][ T1273] Registered IR keymap rc-empty
[   94.025767][ T1273] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[   94.036387][ T1273] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7
[   94.056167][ T1273] input: syz syz mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8
[   94.088344][    C1] ati_remote 2-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19
[   94.091632][ T1273] usb 2-1: USB disconnect, device number 5
[   94.748712][ T6674] netlink: 'syz.0.306': attribute type 1 has an invalid length.
[   94.751706][ T6674] netlink: 128 bytes leftover after parsing attributes in process `syz.0.306'.
[   94.755172][ T6674] netlink: 'syz.0.306': attribute type 2 has an invalid length.
[   94.785480][ T6674] netlink: 'syz.0.306': attribute type 1 has an invalid length.
[   94.881180][ T6661] loop2: detected capacity change from 0 to 40427
[   94.888905][ T6661] F2FS-fs (loop2): Invalid log blocks per segment (4278190089)
[   94.891560][ T6661] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   94.905067][ T6661] F2FS-fs (loop2): invalid crc value
[   94.963437][ T6661] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   94.973468][ T6661] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   94.980791][ T6661] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   94.993991][ T6661] F2FS-fs (loop2): Corrupted max_depth of 3: 255
[   94.999028][ T6661] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   95.006642][ T6661] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   95.211118][ T6688] loop2: detected capacity change from 0 to 256
[   95.217913][ T6688] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e06c6e, utbl_chksum : 0xe619d30d)
[   95.293301][ T6690] loop2: detected capacity change from 0 to 128
[   95.325699][ T6690] vxfs: unsupported VxFS version (2066843062)
[   95.677307][   T47] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[   95.842260][   T47] usb 3-1: config 0 has an invalid interface number: 56 but max is 0
[   95.849495][   T47] usb 3-1: config 0 has no interface number 0
[   95.858117][   T47] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76
[   95.861422][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.875090][   T47] usb 3-1: Product: syz
[   95.877026][   T47] usb 3-1: Manufacturer: syz
[   95.878747][   T47] usb 3-1: SerialNumber: syz
[   95.902605][   T47] usb 3-1: config 0 descriptor??
[   96.259262][   T47] peak_usb 3-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels)
[   96.384792][   T47] peak_usb 3-1:0.56 can0: sending command failure: -8
[   96.388323][   T47] peak_usb 3-1:0.56 can0: sending command failure: -8
[   96.390471][   T47] peak_usb 3-1:0.56 can0: sending command failure: -8
[   96.437295][   T47] peak_usb 3-1:0.56: probe with driver peak_usb failed with error -8
[   96.592916][   T47] usb 3-1: USB disconnect, device number 8
[   97.061159][ T6726] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9
[   97.275510][ T6730] netlink: 'syz.2.327': attribute type 2 has an invalid length.
[   98.184060][ T6744] loop2: detected capacity change from 0 to 1764
[   98.370843][   T24] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   98.397255][   T24] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   98.433906][ T6752] netlink: 'syz.0.338': attribute type 15 has an invalid length.
[   98.441682][ T6752] netlink: 24 bytes leftover after parsing attributes in process `syz.0.338'.
[   98.483707][ T6756] openvswitch: netlink: Key type 40 is out of range max 32
[   98.532781][ T6758] loop2: detected capacity change from 0 to 512
[   98.548495][ T6758] EXT4-fs: Ignoring removed mblk_io_submit option
[   98.574310][ T6758] EXT4-fs: Ignoring removed bh option
[   98.585076][ T6758] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   98.609901][ T6758] EXT4-fs (loop2): 1 truncate cleaned up
[   98.613709][ T6758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.655906][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.055844][ T5907] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   99.115532][   T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   99.205757][ T5907] usb 2-1: Using ep0 maxpacket: 8
[   99.216844][ T5907] usb 2-1: config 127 has an invalid interface number: 171 but max is 1
[   99.220060][ T5907] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config
[   99.224184][ T5907] usb 2-1: config 127 has no interface number 1
[   99.235601][ T5907] usb 2-1: config 127 interface 171 has no altsetting 0
[   99.239952][ T5907] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[   99.243292][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.248237][ T5907] usb 2-1: Product: syz
[   99.249789][ T5907] usb 2-1: Manufacturer: syz
[   99.251349][ T5907] usb 2-1: SerialNumber: syz
[   99.283088][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[   99.286688][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[   99.291848][   T24] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[   99.310437][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.323915][   T24] usb 3-1: config 0 descriptor??
[   99.334611][   T24] smsusb:smsusb_probe: board id=8, interface number 0
[   99.362423][   T24] smsusb:smsusb_probe: Device initialized with return code -19
[   99.490613][ T5907] xr_serial 2-1:127.171: xr_serial converter detected
[   99.495192][ T5907] xr_serial ttyUSB0: Failed to set reg 0x1a: -71
[   99.497855][ T5907] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[   99.508836][ T5907] usb 2-1: USB disconnect, device number 6
[   99.512685][ T5907] xr_serial 2-1:127.171: device disconnected
[   99.537046][   T24] usb 3-1: USB disconnect, device number 9
[   99.730889][ T6796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.358'.
[  100.078674][ T6806] loop1: detected capacity change from 0 to 2048
[  100.092227][ T6810] loop2: detected capacity change from 0 to 512
[  100.099142][ T5851] udevd[5851]: incorrect nilfs2 checksum on /dev/loop1
[  100.107685][ T6806] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  100.118737][ T5851] udevd[5851]: incorrect nilfs2 checksum on /dev/loop1
[  100.129406][ T6810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  100.135054][ T6813] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  100.141306][ T6810] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.291557][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  100.904444][ T6842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.377'.
[  100.915534][ T6842] netlink: 'syz.0.377': attribute type 20 has an invalid length.
[  100.926315][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  100.926369][ T6842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.377'.
[  100.931513][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  100.934908][ T6842] netlink: 'syz.0.377': attribute type 20 has an invalid length.
[  100.936276][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  100.940655][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  100.944197][ T6839] tipc: Started in network mode
[  100.951514][ T6839] tipc: Node identity 32499dee1d77, cluster identity 4711
[  100.954396][ T6839] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.972406][ T6836] tipc: Resetting bearer <eth:syzkaller0>
[  101.247022][ T6848] loop1: detected capacity change from 0 to 64
[  101.685501][ T5896] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  101.857213][ T5896] usb 2-1: Using ep0 maxpacket: 32
[  101.870429][ T5896] usb 2-1: config 5 has an invalid interface number: 190 but max is 2
[  101.874198][ T5896] usb 2-1: config 5 has an invalid interface number: 49 but max is 2
[  101.877528][ T5896] usb 2-1: config 5 has no interface number 0
[  101.879993][ T5896] usb 2-1: config 5 has no interface number 2
[  101.882401][ T5896] usb 2-1: config 5 interface 190 has no altsetting 0
[  101.885229][ T5896] usb 2-1: config 5 interface 1 has no altsetting 0
[  101.890520][ T5896] usb 2-1: config 5 interface 49 has no altsetting 0
[  101.897947][ T5896] usb 2-1: New USB device found, idVendor=1410, idProduct=a001, bcdDevice=f2.82
[  101.901620][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.904825][ T5896] usb 2-1: Product: syz
[  101.908008][ T5896] usb 2-1: Manufacturer: syz
[  101.910027][ T5896] usb 2-1: SerialNumber: syz
[  101.947560][ T5907] tipc: Node number set to 792632814
[  102.172751][ T5896] usb 2-1: USB disconnect, device number 7
[  102.298520][ T6836] tipc: Disabling bearer <eth:syzkaller0>
[  102.531943][ T6865] evm: overlay not supported
[  102.753350][ T6871] netlink: 'syz.1.391': attribute type 5 has an invalid length.
[  102.865538][   T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  103.016328][   T10] usb 3-1: Using ep0 maxpacket: 8
[  103.019561][   T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  103.022517][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.030849][   T10] pvrusb2: Hardware description: Terratec Grabster AV400
[  103.044242][   T10] pvrusb2: **********
[  103.048055][   T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  103.053820][   T10] pvrusb2: Important functionality might not be entirely working.
[  103.062077][   T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  103.070480][   T10] pvrusb2: **********
[  103.488689][ T2398] pvrusb2: Invalid write control endpoint
[  103.510592][ T1273] usb 3-1: USB disconnect, device number 10
[  103.519791][ T2398] pvrusb2: Invalid write control endpoint
[  103.521786][ T2398] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  103.525234][ T2398] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  103.529111][ T2398] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  103.532168][ T2398] pvrusb2: Device being rendered inoperable
[  103.536721][ T2398] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  103.539124][ T2398] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  103.550043][ T2398] pvrusb2: Attached sub-driver cx25840
[  103.552710][ T2398] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  103.557071][ T2398] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  104.356150][ T6899] loop2: detected capacity change from 0 to 32768
[  104.373474][ T6899] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.400 (6899)
[  104.396484][ T6899] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  104.399789][ T6899] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  104.402777][ T6899] BTRFS info (device loop2): using free-space-tree
[  104.491777][ T5849] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  104.896562][ T6920] loop1: detected capacity change from 0 to 2048
[  104.920123][ T6920] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  104.944026][ T6920] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  105.075346][ T6922] syz.1.403 uses obsolete (PF_INET,SOCK_PACKET)
[  105.151727][ T6918] loop2: detected capacity change from 0 to 131072
[  105.155170][ T6918] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0)
[  105.157777][ T6918] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  105.168337][ T6918] F2FS-fs (loop2): invalid crc value
[  105.206723][ T6918] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  105.211679][ T6918] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  105.213915][ T6918] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  105.262157][ T6933] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  106.483095][ T7011] loop2: detected capacity change from 0 to 1024
[  106.543619][ T7011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.602779][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.628321][ T7008] loop1: detected capacity change from 0 to 32768
[  106.646639][ T7008] bcachefs (/dev/loop1): error validating superblock: Bad number of member devices 0 (max 64)
[  106.667557][ T7008] bcachefs: bch2_fs_get_tree() error: invalid_sb_too_many_members
[  106.791032][ T7020] vlan0: entered promiscuous mode
[  107.012063][ T7030] loop2: detected capacity change from 0 to 256
[  107.028668][ T7030] overlayfs: failed lookup in lower (/, name='file1', err=-40): overlapping layers
[  107.030964][ T7032] loop1: detected capacity change from 0 to 512
[  107.050993][ T7032] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  107.102266][ T7032] EXT4-fs (loop1): 1 truncate cleaned up
[  107.108802][ T7032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.172614][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.496357][ T7059] netlink: 10 bytes leftover after parsing attributes in process `syz.2.435'.
[  108.017064][ T7066] loop2: detected capacity change from 0 to 32768
[  108.071863][ T7066] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  108.071879][ T7066]   allowing incompatible features above 0.0: (unknown version)
[  108.071884][ T7066]   features: 
[  108.083654][ T7066] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  108.086384][ T7066] bcachefs (loop2): initializing new filesystem
[  108.096906][ T7066] bcachefs (loop2): going read-write
[  108.103974][ T7066] bcachefs (loop2): marking superblocks
[  108.123114][ T7066] bcachefs (loop2): initializing freespace
[  108.130856][ T7066] bcachefs (loop2): done initializing freespace
[  108.139166][ T7066] bcachefs (loop2): reading snapshots table
[  108.141372][ T7066] bcachefs (loop2): reading snapshots done
[  108.160704][ T7066] bcachefs (loop2): done starting filesystem
[  108.242184][ T5849] bcachefs (loop2): shutting down
[  108.245349][ T5849] bcachefs (loop2): going read-only
[  108.247369][ T5849] bcachefs (loop2): finished waiting for writes to stop
[  108.250637][ T5849] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[  108.279534][ T5849] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  108.283073][ T5849] bcachefs (loop2): clean shutdown complete, journal seq 4
[  108.288188][ T5849] bcachefs (loop2): marking filesystem clean
[  108.354126][ T5849] bcachefs (loop2): shutdown complete
[  108.381047][ T7081] ==================================================================
[  108.384183][ T7081] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  108.387322][ T7081] Read of size 2 at addr ffff8881225205c2 by task syz.0.440/7081
[  108.391299][ T7081] 
[  108.392243][ T7081] CPU: 1 UID: 0 PID: 7081 Comm: syz.0.440 Not tainted syzkaller #0 PREEMPT(full) 
[  108.392294][ T7081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  108.392306][ T7081] Call Trace:
[  108.392314][ T7081]  <TASK>
[  108.392323][ T7081]  dump_stack_lvl+0x189/0x250
[  108.392345][ T7081]  ? __kasan_check_byte+0x12/0x40
[  108.392368][ T7081]  ? __pfx_dump_stack_lvl+0x10/0x10
[  108.392383][ T7081]  ? lock_release+0x4b/0x3e0
[  108.392404][ T7081]  ? __virt_addr_valid+0x4a5/0x5c0
[  108.392422][ T7081]  print_report+0xca/0x240
[  108.392435][ T7081]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  108.392457][ T7081]  kasan_report+0x118/0x150
[  108.392479][ T7081]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  108.392504][ T7081]  __xfrm_state_lookup+0x6ad/0x8d0
[  108.392531][ T7081]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  108.392558][ T7081]  xfrm_state_add+0x27d/0xc40
[  108.392576][ T7081]  xfrm_add_sa+0x35a1/0x4070
[  108.392595][ T7081]  ? __pfx_xfrm_add_sa+0x10/0x10
[  108.392609][ T7081]  ? apparmor_capable+0x137/0x1b0
[  108.392655][ T7081]  ? __nla_parse+0x40/0x60
[  108.392680][ T7081]  xfrm_user_rcv_msg+0x7a3/0xab0
[  108.392699][ T7081]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  108.392728][ T7081]  ? __pfx___mutex_trylock_common+0x10/0x10
[  108.392746][ T7081]  ? rcu_is_watching+0x15/0xb0
[  108.392760][ T7081]  ? trace_contention_end+0x39/0x120
[  108.392775][ T7081]  ? __mutex_lock+0x335/0x1360
[  108.392797][ T7081]  netlink_rcv_skb+0x208/0x470
[  108.392819][ T7081]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  108.392835][ T7081]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  108.392860][ T7081]  ? netlink_deliver_tap+0x2e/0x1b0
[  108.392879][ T7081]  ? netlink_deliver_tap+0x2e/0x1b0
[  108.392899][ T7081]  xfrm_netlink_rcv+0x79/0x90
[  108.392915][ T7081]  netlink_unicast+0x82f/0x9e0
[  108.392936][ T7081]  ? __pfx_netlink_unicast+0x10/0x10
[  108.392955][ T7081]  ? netlink_sendmsg+0x642/0xb30
[  108.392974][ T7081]  ? skb_put+0x11b/0x210
[  108.392996][ T7081]  netlink_sendmsg+0x805/0xb30
[  108.393020][ T7081]  ? __pfx_netlink_sendmsg+0x10/0x10
[  108.393041][ T7081]  ? aa_sock_msg_perm+0xf1/0x1d0
[  108.393071][ T7081]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  108.393087][ T7081]  ? __pfx_netlink_sendmsg+0x10/0x10
[  108.393108][ T7081]  __sock_sendmsg+0x21c/0x270
[  108.393127][ T7081]  ____sys_sendmsg+0x505/0x830
[  108.393144][ T7081]  ? __pfx_____sys_sendmsg+0x10/0x10
[  108.393161][ T7081]  ? import_iovec+0x74/0xa0
[  108.393178][ T7081]  ___sys_sendmsg+0x21f/0x2a0
[  108.393193][ T7081]  ? __pfx____sys_sendmsg+0x10/0x10
[  108.393221][ T7081]  ? __fget_files+0x2a/0x420
[  108.393243][ T7081]  ? __fget_files+0x3a0/0x420
[  108.393303][ T7081]  __x64_sys_sendmsg+0x19b/0x260
[  108.393321][ T7081]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  108.393339][ T7081]  ? rcu_is_watching+0x15/0xb0
[  108.393356][ T7081]  ? do_syscall_64+0xbe/0x3b0
[  108.393378][ T7081]  do_syscall_64+0xfa/0x3b0
[  108.393399][ T7081]  ? lockdep_hardirqs_on+0x9c/0x150
[  108.393417][ T7081]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.393431][ T7081]  ? exc_page_fault+0x9f/0xf0
[  108.393450][ T7081]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.393464][ T7081] RIP: 0033:0x7f2dab78ebe9
[  108.393478][ T7081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  108.393491][ T7081] RSP: 002b:00007f2dac514038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  108.393506][ T7081] RAX: ffffffffffffffda RBX: 00007f2dab9b5fa0 RCX: 00007f2dab78ebe9
[  108.393518][ T7081] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  108.393528][ T7081] RBP: 00007f2dab811e19 R08: 0000000000000000 R09: 0000000000000000
[  108.393537][ T7081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  108.393546][ T7081] R13: 00007f2dab9b6038 R14: 00007f2dab9b5fa0 R15: 00007ffdaa85ebc8
[  108.393565][ T7081]  </TASK>
[  108.393570][ T7081] 
[  108.537589][ T7081] Allocated by task 5916:
[  108.539230][ T7081]  kasan_save_track+0x3e/0x80
[  108.541071][ T7081]  __kasan_slab_alloc+0x6c/0x80
[  108.542976][ T7081]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  108.545058][ T7081]  xfrm_state_alloc+0x24/0x2f0
[  108.546913][ T7081]  __find_acq_core+0x8a7/0x1c00
[  108.548850][ T7081]  xfrm_find_acq+0x78/0xa0
[  108.550586][ T7081]  xfrm_alloc_userspi+0x6b3/0xc90
[  108.552593][ T7081]  xfrm_user_rcv_msg+0x7a3/0xab0
[  108.554538][ T7081]  netlink_rcv_skb+0x208/0x470
[  108.556358][ T7081]  xfrm_netlink_rcv+0x79/0x90
[  108.558169][ T7081]  netlink_unicast+0x82f/0x9e0
[  108.560020][ T7081]  netlink_sendmsg+0x805/0xb30
[  108.561850][ T7081]  __sock_sendmsg+0x21c/0x270
[  108.563728][ T7081]  ____sys_sendmsg+0x505/0x830
[  108.565626][ T7081]  ___sys_sendmsg+0x21f/0x2a0
[  108.567537][ T7081]  __x64_sys_sendmsg+0x19b/0x260
[  108.569552][ T7081]  do_syscall_64+0xfa/0x3b0
[  108.571440][ T7081]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.573805][ T7081] 
[  108.574794][ T7081] Freed by task 24:
[  108.576302][ T7081]  kasan_save_track+0x3e/0x80
[  108.578160][ T7081]  kasan_save_free_info+0x46/0x50
[  108.580122][ T7081]  __kasan_slab_free+0x5b/0x80
[  108.582026][ T7081]  kmem_cache_free+0x18f/0x400
[  108.583895][ T7081]  xfrm_state_gc_task+0x52d/0x6b0
[  108.585903][ T7081]  process_scheduled_works+0xae1/0x17b0
[  108.588105][ T7081]  worker_thread+0x8a0/0xda0
[  108.589972][ T7081]  kthread+0x711/0x8a0
[  108.591666][ T7081]  ret_from_fork+0x3fc/0x770
[  108.593553][ T7081]  ret_from_fork_asm+0x1a/0x30
[  108.595463][ T7081] 
[  108.596394][ T7081] The buggy address belongs to the object at ffff888122520480
[  108.596394][ T7081]  which belongs to the cache xfrm_state of size 928
[  108.601793][ T7081] The buggy address is located 322 bytes inside of
[  108.601793][ T7081]  freed 928-byte region [ffff888122520480, ffff888122520820)
[  108.606932][ T7081] 
[  108.607981][ T7081] The buggy address belongs to the physical page:
[  108.610546][ T7081] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x122520
[  108.614051][ T7081] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  108.617445][ T7081] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  108.620485][ T7081] page_type: f5(slab)
[  108.622044][ T7081] raw: 057ff00000000040 ffff888104ed2640 dead000000000122 0000000000000000
[  108.625334][ T7081] raw: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  108.628539][ T7081] head: 057ff00000000040 ffff888104ed2640 dead000000000122 0000000000000000
[  108.631805][ T7081] head: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  108.635020][ T7081] head: 057ff00000000002 ffffea0004894801 00000000ffffffff 00000000ffffffff
[  108.638369][ T7081] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  108.641642][ T7081] page dumped because: kasan: bad access detected
[  108.644072][ T7081] page_owner tracks the page as allocated
[  108.646274][ T7081] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5916, tgid 5915 (syz.0.1), ts 68303104498, free_ts 68256269208
[  108.653451][ T7081]  post_alloc_hook+0x240/0x2a0
[  108.655388][ T7081]  get_page_from_freelist+0x21e4/0x22c0
[  108.657533][ T7081]  __alloc_frozen_pages_noprof+0x181/0x370
[  108.659901][ T7081]  alloc_pages_mpol+0x232/0x4a0
[  108.661963][ T7081]  allocate_slab+0x8a/0x370
[  108.663771][ T7081]  ___slab_alloc+0xbeb/0x1410
[  108.665622][ T7081]  kmem_cache_alloc_noprof+0x283/0x3c0
[  108.668003][ T7081]  xfrm_state_alloc+0x24/0x2f0
[  108.670094][ T7081]  xfrm_state_find+0x37d4/0x5400
[  108.672313][ T7081]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  108.674833][ T7081]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  108.676983][ T7081]  xfrm_lookup_route+0x3c/0x1c0
[  108.678956][ T7081]  ip6_datagram_dst_update+0x75c/0xcb0
[  108.681078][ T7081]  __ip6_datagram_connect+0xbd1/0x1150
[  108.683193][ T7081]  ip6_datagram_connect_v6_only+0x63/0xa0
[  108.685497][ T7081]  __sys_connect+0x316/0x440
[  108.687390][ T7081] page last free pid 5852 tgid 5852 stack trace:
[  108.689940][ T7081]  __free_frozen_pages+0xbc4/0xd30
[  108.692004][ T7081]  __slab_free+0x303/0x3c0
[  108.693794][ T7081]  qlist_free_all+0x97/0x140
[  108.695669][ T7081]  kasan_quarantine_reduce+0x148/0x160
[  108.697832][ T7081]  __kasan_slab_alloc+0x22/0x80
[  108.699791][ T7081]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  108.701994][ T7081]  ptlock_alloc+0x20/0x70
[  108.703731][ T7081]  pte_alloc_one+0x7d/0x170
[  108.705555][ T7081]  __handle_mm_fault+0x2795/0x5440
[  108.707582][ T7081]  handle_mm_fault+0x40a/0x8e0
[  108.709529][ T7081]  do_user_addr_fault+0x764/0x1390
[  108.711579][ T7081]  exc_page_fault+0x76/0xf0
[  108.713378][ T7081]  asm_exc_page_fault+0x26/0x30
[  108.715294][ T7081] 
[  108.716301][ T7081] Memory state around the buggy address:
[  108.718685][ T7081]  ffff888122520480: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  108.721898][ T7081]  ffff888122520500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  108.725054][ T7081] >ffff888122520580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  108.728219][ T7081]                                            ^
[  108.730721][ T7081]  ffff888122520600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  108.733944][ T7081]  ffff888122520680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  108.737225][ T7081] ==================================================================
[  108.740868][ T7081] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  108.743797][ T7081] CPU: 1 UID: 0 PID: 7081 Comm: syz.0.440 Not tainted syzkaller #0 PREEMPT(full) 
[  108.747501][ T7081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  108.751403][ T7081] Call Trace:
[  108.752746][ T7081]  <TASK>
[  108.753943][ T7081]  dump_stack_lvl+0x99/0x250
[  108.755778][ T7081]  ? __asan_memcpy+0x40/0x70
[  108.757633][ T7081]  ? __pfx_dump_stack_lvl+0x10/0x10
[  108.759663][ T7081]  ? __pfx__printk+0x10/0x10
[  108.761526][ T7081]  vpanic+0x281/0x750
[  108.763195][ T7081]  ? __pfx_vpanic+0x10/0x10
[  108.765046][ T7081]  ? irqentry_exit+0x74/0x90
[  108.766933][ T7081]  panic+0xb9/0xc0
[  108.768474][ T7081]  ? __pfx_panic+0x10/0x10
[  108.770329][ T7081]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  108.772745][ T7081]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  108.775150][ T7081]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  108.777343][ T7081]  check_panic_on_warn+0x89/0xb0
[  108.779385][ T7081]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  108.781546][ T7081]  end_report+0x78/0x160
[  108.783295][ T7081]  kasan_report+0x129/0x150
[  108.785150][ T7081]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  108.787364][ T7081]  __xfrm_state_lookup+0x6ad/0x8d0
[  108.789504][ T7081]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  108.791800][ T7081]  xfrm_state_add+0x27d/0xc40
[  108.793691][ T7081]  xfrm_add_sa+0x35a1/0x4070
[  108.795521][ T7081]  ? __pfx_xfrm_add_sa+0x10/0x10
[  108.797493][ T7081]  ? apparmor_capable+0x137/0x1b0
[  108.799466][ T7081]  ? __nla_parse+0x40/0x60
[  108.801152][ T7081]  xfrm_user_rcv_msg+0x7a3/0xab0
[  108.803075][ T7081]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  108.805278][ T7081]  ? __pfx___mutex_trylock_common+0x10/0x10
[  108.807697][ T7081]  ? rcu_is_watching+0x15/0xb0
[  108.809760][ T7081]  ? trace_contention_end+0x39/0x120
[  108.811931][ T7081]  ? __mutex_lock+0x335/0x1360
[  108.813755][ T7081]  netlink_rcv_skb+0x208/0x470
[  108.815819][ T7081]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  108.817930][ T7081]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  108.820095][ T7081]  ? netlink_deliver_tap+0x2e/0x1b0
[  108.822171][ T7081]  ? netlink_deliver_tap+0x2e/0x1b0
[  108.824339][ T7081]  xfrm_netlink_rcv+0x79/0x90
[  108.826194][ T7081]  netlink_unicast+0x82f/0x9e0
[  108.828144][ T7081]  ? __pfx_netlink_unicast+0x10/0x10
[  108.830291][ T7081]  ? netlink_sendmsg+0x642/0xb30
[  108.832288][ T7081]  ? skb_put+0x11b/0x210
[  108.833967][ T7081]  netlink_sendmsg+0x805/0xb30
[  108.835892][ T7081]  ? __pfx_netlink_sendmsg+0x10/0x10
[  108.837995][ T7081]  ? aa_sock_msg_perm+0xf1/0x1d0
[  108.839957][ T7081]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  108.841974][ T7081]  ? __pfx_netlink_sendmsg+0x10/0x10
[  108.844005][ T7081]  __sock_sendmsg+0x21c/0x270
[  108.845832][ T7081]  ____sys_sendmsg+0x505/0x830
[  108.847816][ T7081]  ? __pfx_____sys_sendmsg+0x10/0x10
[  108.849950][ T7081]  ? import_iovec+0x74/0xa0
[  108.851801][ T7081]  ___sys_sendmsg+0x21f/0x2a0
[  108.853681][ T7081]  ? __pfx____sys_sendmsg+0x10/0x10
[  108.855787][ T7081]  ? __fget_files+0x2a/0x420
[  108.857578][ T7081]  ? __fget_files+0x3a0/0x420
[  108.859438][ T7081]  __x64_sys_sendmsg+0x19b/0x260
[  108.861310][ T7081]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  108.863397][ T7081]  ? rcu_is_watching+0x15/0xb0
[  108.865275][ T7081]  ? do_syscall_64+0xbe/0x3b0
[  108.867094][ T7081]  do_syscall_64+0xfa/0x3b0
[  108.868896][ T7081]  ? lockdep_hardirqs_on+0x9c/0x150
[  108.870865][ T7081]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.873291][ T7081]  ? exc_page_fault+0x9f/0xf0
[  108.875086][ T7081]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.877339][ T7081] RIP: 0033:0x7f2dab78ebe9
[  108.879058][ T7081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  108.886262][ T7081] RSP: 002b:00007f2dac514038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  108.889563][ T7081] RAX: ffffffffffffffda RBX: 00007f2dab9b5fa0 RCX: 00007f2dab78ebe9
[  108.892641][ T7081] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  108.895696][ T7081] RBP: 00007f2dab811e19 R08: 0000000000000000 R09: 0000000000000000
[  108.898744][ T7081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  108.901828][ T7081] R13: 00007f2dab9b6038 R14: 00007f2dab9b5fa0 R15: 00007ffdaa85ebc8
[  108.904961][ T7081]  </TASK>
[  108.906797][ T7081] Kernel Offset: disabled
[  108.908493][ T7081] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:40:40  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b4371f RBX=ffffc9000320faa8 RCX=ffff88810919d640 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000320fb48 RSP=ffffc9000320fa60
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=ffffffff81705100
R12=1ffff92000641f55 R13=dffffc0000000000 R14=1ffff92000641f50 R15=1ffff92000641f50
RIP=ffffffff81b43709 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555575baf500 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbdf0ee56c0 CR3=000000010decc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ffff0000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 ffff0000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000000a RBX=000000000000000a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001688 RDI=0000000000001689 RBP=00000000000003f8 RSP=ffffc9000426e9d0
R8 =ffff888107058237 R9 =1ffff11020e0b046 R10=dffffc0000000000 R11=ffffffff854eff70
R12=dffffc0000000000 R13=ffffffff99af9916 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854effec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f2dac5146c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000180 CR3=000000010f004000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f2dab987498 00007f2dab987470 XMM03=00007f2dab9874a8 00007f2dab9874a0
XMM04=00007f2dac4ed100 00007f2dab987460 XMM05=00007f2dab987478 00007f2dab9874c0
XMM06=00007f2dab9874b8 00007f2dab9874b0 XMM07=00007f2dab9874a8 00007f2dab9874a0
XMM08=0000000000000000 00007f2dab812ee7 XMM09=0000000000000000 00007f2dab812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
