last executing test programs:

1m34.692845824s ago: executing program 2 (id=1592):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000b00)=0x4, 0x4)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4)
sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000001380)="7201cc576a0c42dc9734b695f6b360bbe06853a4f0703787e506b7a171e18f1a6f2d920a2e56d90e4f", 0x29}], 0x1)

1m34.64383419s ago: executing program 2 (id=1593):
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=")
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)

1m34.572699172s ago: executing program 2 (id=1594):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x80000, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)

1m34.572322613s ago: executing program 2 (id=1595):
syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3000094, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYRESDEC, @ANYRESHEX], 0xec, 0x5a9c, &(0x7f0000006d00)="$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")

1m33.654336042s ago: executing program 2 (id=1605):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5f55, &(0x7f000000efc0)="$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")
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20000, 0x0, 0x0, 0x0, &(0x7f0000000100))
mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0))

1m31.939361768s ago: executing program 2 (id=1623):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
unshare(0x22020400)
fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd})
fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9})
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x62d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

1m16.965642213s ago: executing program 32 (id=1623):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
unshare(0x22020400)
fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd})
fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9})
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x62d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

38.131160663s ago: executing program 1 (id=2426):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000480), 0x8, 0x0)
r1 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0xeffffffd}, &(0x7f0000000240), &(0x7f0000000300))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440)=r0, 0x1)

38.130987261s ago: executing program 1 (id=2427):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x2})
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0xc004)

37.182180199s ago: executing program 1 (id=2437):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101})

37.053399016s ago: executing program 1 (id=2440):
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$eJzs3c9rHGUfAPDvbJKmTfu+yQsvaL0YEDRQmpgaWwWFigcRLBT0bLtstqFmky3ZTWlCQIsIXgQVD4JeevLgj3rz6o+r/hcexFI1LVY8SGQ2s+2m2U03abIbzecDk32emdl8n+/Or2d3hpkA9qzh9E8u4nBEvJtEDGbjk4joq5V6I06uzndreamQDkmsrLz8a1Kb5+byUiEa3pM6mFUejIhv34o4klsft7KwOJ0vlYpzWX2sOnNhrLKwePT8TH6qOFWcPT4+MXHsxJMnjm9frr//sHjo2nsvPPbFyT/ffODqO98lcTIOZdMa89iyZ9dWh2M4+0z60o9wjefvO9juknS7AWxJumn2rG7lcTgGo6dWAgD+zV6PiBUAYI9JHP8BYI+p/w5wc3mpUB+6+4tEZ11/LiL2r+ZfP7+5OqU3O2e3v3YedOBmsubMSBIRQ9sQfzgiPv7q1c/SIbbrPCRAG964HBFnh4bX7/+TddcsbNbjG0zbl70O3zU+je8MNHTG12n/56lm/b/c7f5PNOn/9DfZdrei2fa/ZsSBbQiygeufRDzTcG3brYb8M0M9We0/tT5fX3LufKmY7tv+GxEj0def1sc3iDFy468braY19v9+e/+1T9P46eudOXI/9/avfc9kvpq/n5wbXb8c8VBvs/yT28s/adH/Pd1mjBeffvujVtPS/NN868P6/CO7OmlnrFyJeLTp8r9zRVuy4fWJY7XVYay+UjTx5Y8fDrSK37j80yGNX/8u0Anp8h/YOP+hpPF6zcrmY3x/ZfCbVtPunX/z9X9f8kqtXO9HXMpXq3PjEfuSl9aPP3bnvZfyD2el1fnT/Eceab79b7T+p98Jz7aZf++1Xz7fev47K81/clPLf/OFq7eme1rFb2/5T9RKI9mYdvZ/7Tbwfj47AAAAAAAAAAAAAAAAAAAAAAAAAGhXLiIORZIbvV3O5UZHV5/h/f8YyJXKleqRc+X52cmoPSt7KPpy9VtdDjbcD3U8ux9+vX7srvoTEfG/iPig/0BSv4/iZJdzBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC6gy2e/5/6qb/brQMAdsz+bjcAAOg4x38A2Hsc/wFg72nv+N+z4+0AADrH938A2Hsc/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhhp0+dSoeVP5aXCml98uLC/HT54tHJYmV6dGa+MFooz10YnSqXp0rF0UJ55l7/r1QuX5iI2flLY9VipTpWWVg8M1Oen62eOT+TnyqeKfZ1JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2JzKwuJ0vlQqzilsobCyO5rR/UJPtjrtlvZ0tJDsjmZsc6HLOyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf4i/AwAA//+3ACFj")
creat(&(0x7f0000000300)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r1, 0x0, 0x0)

36.844867036s ago: executing program 1 (id=2446):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, &(0x7f0000000140)={0x0, 0xff, @value=0x101c})

36.577946758s ago: executing program 1 (id=2450):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x7, 0x0, 0x0, 0x55e9313c}, &(0x7f00000002c0)=0x18)

36.376976472s ago: executing program 33 (id=2450):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x7, 0x0, 0x0, 0x55e9313c}, &(0x7f00000002c0)=0x18)

31.241256296s ago: executing program 4 (id=2492):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001114010029bd70000000000008000100f0ffffff07004a"], 0x28}}, 0x24000000)

31.053470334s ago: executing program 4 (id=2493):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = dup(r0)
r2 = syz_io_uring_setup(0x10e, &(0x7f0000001480)={0x0, 0x4008d2dc, 0x800, 0xfffffffd, 0x216}, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0)

30.962866133s ago: executing program 4 (id=2494):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@bridge_dellink={0x2c, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x20000000)

30.898378269s ago: executing program 4 (id=2496):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x3d}}, &(0x7f0000000480)='GPL\x00'}, 0x94)

30.822655483s ago: executing program 4 (id=2498):
syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x2, 0x2}]}}}}}}}}, 0x0)

30.743443919s ago: executing program 4 (id=2499):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={@bcast, @default, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]})
mkdir(&(0x7f0000000000)='./file1\x00', 0xf0a552e37b97b976)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000280)='./file1\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x2, 0x0, 0x2, 0x40000476, 0x4000000000000000, 0xfffffffffffffffc, 0x8, 0x0, 0xfeff})
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000004c0)={&(0x7f00000003c0), 0x0, 0x800})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x13, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x44}}, 0x0)
ioctl$BLKRRPART(r1, 0x125f, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071120b000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2a, '\x00', 0x0, @sk_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)

15.744817125s ago: executing program 34 (id=2499):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={@bcast, @default, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]})
mkdir(&(0x7f0000000000)='./file1\x00', 0xf0a552e37b97b976)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000280)='./file1\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x2, 0x0, 0x2, 0x40000476, 0x4000000000000000, 0xfffffffffffffffc, 0x8, 0x0, 0xfeff})
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000004c0)={&(0x7f00000003c0), 0x0, 0x800})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x13, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x44}}, 0x0)
ioctl$BLKRRPART(r1, 0x125f, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071120b000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2a, '\x00', 0x0, @sk_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)

3.255290686s ago: executing program 5 (id=2804):
syz_emit_ethernet(0x76, &(0x7f0000000680)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c17f07000000000000000000002d56"}}}}}}}, 0x0)

3.193069642s ago: executing program 5 (id=2805):
socket$igmp6(0xa, 0x3, 0x2)
syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52}, 0x28)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f00000002c0)={0x66, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x20080000000006})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140))

3.132848637s ago: executing program 5 (id=2806):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x4, 0x0, 0x0, 'queue0\x00'})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x3}, 0x1000d023})
write$sndseq(r1, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick=0x4, {}, {}, @raw32={[0x0, 0x8]}}], 0x1c)

3.132600205s ago: executing program 5 (id=2807):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

3.073249605s ago: executing program 5 (id=2808):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f00000003c0))

2.871578629s ago: executing program 5 (id=2809):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000400)={@broadcast, @random="05009211d49c", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x88, 0x0, @private=0xa010101, @broadcast}, @address_request={0x11, 0x0, 0x0, 0x7e}}}}}, 0x0)

2.722982126s ago: executing program 35 (id=2809):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000400)={@broadcast, @random="05009211d49c", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x88, 0x0, @private=0xa010101, @broadcast}, @address_request={0x11, 0x0, 0x0, 0x7e}}}}}, 0x0)

1.936463755s ago: executing program 3 (id=2819):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000330000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0)

1.826071573s ago: executing program 3 (id=2820):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
listen(r0, 0x1ff)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\r'], 0x30, 0x41}, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0)

1.758543838s ago: executing program 3 (id=2821):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@mblk_io_submit}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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")
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)

1.649015651s ago: executing program 3 (id=2822):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe160, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.532732325s ago: executing program 3 (id=2823):
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000001040), &(0x7f0000000200)=0x30)

1.532473957s ago: executing program 3 (id=2824):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a2d00000000140000001100", @ANYBLOB='\t'], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a30000000000800034000000004"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0)

1.013105546s ago: executing program 0 (id=2825):
r0 = socket(0x2b, 0x1, 0x0)
listen(r0, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xffffffff}, 0x1c)

876.97285ms ago: executing program 0 (id=2826):
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0xfffffffffffffffd, 0x0)

792.487885ms ago: executing program 0 (id=2827):
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c4b20710200e01015a7a0102030109021b0001000000000904"], 0x0)

210.73639ms ago: executing program 0 (id=2828):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8a}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)

120.19275ms ago: executing program 0 (id=2829):
io_setup(0x2868b0, &(0x7f0000000240))

0s ago: executing program 0 (id=2830):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}]}, 0x70}, 0x1, 0x7}, 0x0)

kernel console output (not intermixed with test programs):

 strings: Mfr=1, Product=2, SerialNumber=3
[  170.805243][   T51] usb 3-1: Product: syz
[  170.807030][   T51] usb 3-1: Manufacturer: syz
[  170.808994][   T51] usb 3-1: SerialNumber: syz
[  170.813145][   T51] usb 3-1: config 0 descriptor??
[  171.010411][ T9656] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0
[  171.027036][   T51] usb 3-1: USB disconnect, device number 24
[  171.614356][ T9669] serio: Serial port ptm0
[  171.693232][ T9675] loop2: detected capacity change from 0 to 128
[  171.967459][ T9679] loop2: detected capacity change from 0 to 32768
[  172.207629][ T9679] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4:15,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  172.207642][ T9679]   allowing incompatible features above 0.0: (unknown version)
[  172.207647][ T9679]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  172.262556][   T33] audit: type=1326 audit(1755256337.451:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.0.1603" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcc18ebe9 code=0x7ffc0000
[  172.263116][ T9679] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  172.278788][ T9679] bcachefs (loop2): initializing new filesystem
[  172.286266][   T33] audit: type=1326 audit(1755256337.451:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.0.1603" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcc18ebe9 code=0x7ffc0000
[  172.287850][ T9679] bcachefs (loop2): going read-write
[  172.311599][   T33] audit: type=1326 audit(1755256337.471:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.0.1603" exe="/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f0dcc18ebe9 code=0x7ffc0000
[  172.337844][   T33] audit: type=1326 audit(1755256337.471:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.0.1603" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcc18ebe9 code=0x7ffc0000
[  172.403513][   T33] audit: type=1326 audit(1755256337.471:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.0.1603" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcc18ebe9 code=0x7ffc0000
[  172.465255][ T9679] bcachefs (loop2): marking superblocks
[  172.588338][ T9679] bcachefs (loop2): initializing freespace
[  172.596521][ T9679] bcachefs (loop2): done initializing freespace
[  172.602731][ T9679] bcachefs (loop2): reading snapshots table
[  172.606689][ T9679] bcachefs (loop2): reading snapshots done
[  172.626633][ T9679] bcachefs (loop2): done starting filesystem
[  172.674722][ T5850] bcachefs (loop2): shutting down
[  172.676723][ T5850] bcachefs (loop2): going read-only
[  172.678855][ T5850] bcachefs (loop2): finished waiting for writes to stop
[  172.683699][ T5850] bcachefs (loop2): flushing journal and stopping allocators, journal seq 1
[  172.718117][ T5850] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 2
[  172.723408][ T5850] bcachefs (loop2): clean shutdown complete, journal seq 3
[  172.728375][ T5850] bcachefs (loop2): marking filesystem clean
[  172.752899][ T5850] bcachefs (loop2): shutdown complete
[  174.300965][ T9744] loop2: detected capacity change from 0 to 32768
[  174.320970][ T9744] ERROR: (device loop2): duplicateIXtree: 
[  174.320970][ T9744] 
[  174.327072][ T9744] ERROR: (device loop2): remounting filesystem as read-only
[  174.337458][ T9744] ERROR: (device loop2): dtSearch: stack overrun!
[  174.337458][ T9744] 
[  174.340792][ T9744] ERROR: (device loop2): remounting filesystem as read-only
[  174.343688][ T9744] btstack dump:
[  174.345507][ T9744] bn = 0, index = 0
[  174.347131][ T9744] bn = 2d, index = 0
[  174.348491][ T9744] bn = 0, index = 0
[  174.350017][ T9744] bn = 2d, index = 0
[  174.351710][ T9744] bn = 0, index = 0
[  174.353289][ T9744] bn = 2d, index = 0
[  174.356307][ T9744] bn = 0, index = 0
[  174.358057][ T9744] bn = 0, index = 0
[  174.359698][ T9744] jfs_lookup: dtSearch returned -5
[  175.105833][   T33] audit: type=1326 audit(1755256340.301:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9753 comm="syz.1.1622" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415418ebe9 code=0x7fc00000
[  175.138750][ T9761] loop1: detected capacity change from 0 to 1024
[  175.142851][ T9761] EXT4-fs: Ignoring removed orlov option
[  175.151048][ T9761] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[  175.185622][ T9763] netlink: 'syz.1.1626': attribute type 10 has an invalid length.
[  175.453900][    T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  175.604965][    T9] usb 2-1: Using ep0 maxpacket: 32
[  175.608951][    T9] usb 2-1: config 4 has an invalid interface number: 128 but max is 0
[  175.612151][    T9] usb 2-1: config 4 has no interface number 0
[  175.614737][    T9] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.618967][    T9] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.622774][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  175.626439][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.870736][    T9] hub 2-1:4.128: USB hub found
[  176.073329][    T9] hub 2-1:4.128: 2 ports detected
[  176.075694][    T9] hub 2-1:4.128: Using single TT (err -22)
[  176.478233][    T9] usb 2-1: USB disconnect, device number 27
[  177.521797][ T9801] loop1: detected capacity change from 0 to 4096
[  177.530793][ T9801] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.561957][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.600131][ T9805] netlink: 'syz.1.1644': attribute type 12 has an invalid length.
[  178.984065][   T51] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  179.103639][ T9862] netlink: 'syz.0.1670': attribute type 13 has an invalid length.
[  179.136641][   T51] usb 2-1: Using ep0 maxpacket: 32
[  179.140991][   T51] usb 2-1: unable to get BOS descriptor or descriptor too short
[  179.147983][   T51] usb 2-1: config 6 has an invalid interface number: 115 but max is 0
[  179.153512][   T51] usb 2-1: config 6 has no interface number 0
[  179.157140][   T51] usb 2-1: config 6 interface 115 has no altsetting 0
[  179.160622][   T51] usb 2-1: language id specifier not provided by device, defaulting to English
[  179.167953][   T51] usb 2-1: New USB device found, idVendor=12d1, idProduct=c256, bcdDevice=35.82
[  179.172987][   T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.176751][   T51] usb 2-1: Product: syz
[  179.178568][   T51] usb 2-1: SerialNumber: syz
[  179.389267][   T51] option 2-1:6.115: GSM modem (1-port) converter detected
[  179.395616][   T51] usb 2-1: USB disconnect, device number 28
[  179.398386][   T51] option 2-1:6.115: device disconnected
[  180.874125][ T9895] IPv6: addrconf: prefix option has invalid lifetime
[  180.914160][ T5236] Bluetooth: hci1: command 0x0406 tx timeout
[  181.640145][ T9921] overlayfs: failed to clone upperpath
[  182.071174][ T9929] loop1: detected capacity change from 0 to 32768
[  182.091655][ T9929] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  182.104040][ T9929] XFS (loop1): Ending clean mount
[  182.148322][ T5849] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  183.036477][ T9971] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1715'.
[  183.039702][ T9971] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1715'.
[  183.042837][ T9971] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1715'.
[  183.337884][ T9991] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  183.605571][T10002] loop1: detected capacity change from 0 to 32768
[  183.614936][T10002] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  183.637570][T10002] XFS (loop1): Ending clean mount
[  183.657069][ T5849] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  184.026414][T10026] netlink: 'syz.1.1738': attribute type 2 has an invalid length.
[  184.029611][T10026] netlink: 'syz.1.1738': attribute type 8 has an invalid length.
[  184.032757][T10026] netlink: 1148 bytes leftover after parsing attributes in process `syz.1.1738'.
[  184.096941][   T33] audit: type=1326 audit(1755256349.291:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.0.1723" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcc18ebe9 code=0x7fc00000
[  184.105484][   T33] audit: type=1326 audit(1755256349.291:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.0.1723" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0dcc18ebe9 code=0x7fc00000
[  184.113046][   T33] audit: type=1326 audit(1755256349.291:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.0.1723" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcc18ebe9 code=0x7fc00000
[  184.120921][   T33] audit: type=1326 audit(1755256349.291:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.0.1723" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcc18ebe9 code=0x7fc00000
[  184.131977][   T33] audit: type=1326 audit(1755256349.291:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.0.1723" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcc18ebe9 code=0x7fc00000
[  184.145405][   T33] audit: type=1326 audit(1755256349.291:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.0.1723" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcc18ebe9 code=0x7fc00000
[  184.153911][   T33] audit: type=1326 audit(1755256349.291:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.0.1723" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcc18ebe9 code=0x7fc00000
[  184.164580][   T33] audit: type=1326 audit(1755256349.291:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.0.1723" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcc18ebe9 code=0x7fc00000
[  184.174116][   T33] audit: type=1326 audit(1755256349.291:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.0.1723" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcc18ebe9 code=0x7fc00000
[  184.181128][   T33] audit: type=1326 audit(1755256349.291:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.0.1723" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcc18ebe9 code=0x7fc00000
[  184.218103][T10036] netlink: zone id is out of range
[  184.220000][T10036] netlink: zone id is out of range
[  184.222163][T10036] netlink: zone id is out of range
[  184.225704][T10036] netlink: zone id is out of range
[  184.227786][T10036] netlink: zone id is out of range
[  184.229799][T10036] netlink: zone id is out of range
[  184.231848][T10036] netlink: zone id is out of range
[  184.236755][T10036] netlink: zone id is out of range
[  184.396086][T10038] loop1: detected capacity change from 0 to 32768
[  184.404834][T10038] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1744 (10038)
[  184.416459][T10038] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  184.420454][T10038] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  184.425075][T10038] BTRFS info (device loop1): using free-space-tree
[  184.461760][T10038] kernel write not supported for file /1137/attr/exec (pid: 10038 comm: syz.1.1744)
[  184.476658][ T5849] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  184.927073][T10080] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1756'.
[  184.930558][T10080] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1756'.
[  184.934601][T10080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1756'.
[  185.333559][T10109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1770'.
[  186.138790][T10131] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  186.939078][T10145] fuse: Bad value for 'fd'
[  187.228959][T10149] loop1: detected capacity change from 0 to 32768
[  187.237060][T10149] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  187.263542][T10149] XFS (loop1): Ending clean mount
[  187.283494][T10167] netlink: 'syz.0.1794': attribute type 4 has an invalid length.
[  187.288041][T10167] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1794'.
[  187.293219][ T5849] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  187.932333][T10202] loop9: detected capacity change from 0 to 32768
[  188.665930][   T51] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  188.816045][   T51] usb 2-1: config 0 has an invalid interface number: 156 but max is 0
[  188.819580][   T51] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  188.825692][   T51] usb 2-1: config 0 has no interface number 0
[  188.828212][   T51] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  188.832818][   T51] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  188.837368][   T51] usb 2-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  188.842280][   T51] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  188.845803][   T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.850431][   T51] usb 2-1: config 0 descriptor??
[  188.854651][   T51] gspca_main: spca561-2.14.0 probing abcd:cdee
[  189.059799][   T51] spca561 2-1:0.156: probe with driver spca561 failed with error -22
[  189.063543][   T51] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  189.071501][   T51] usb 2-1: MIDIStreaming interface descriptor not found
[  189.128105][   T51] usb 2-1: USB disconnect, device number 29
[  189.200408][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  189.494233][T10268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1841'.
[  189.587624][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  189.591892][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  189.595560][ T5236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  189.599198][ T5236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  189.603627][ T5236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  189.690743][T10278] 9pnet_virtio: no channels available for device syz
[  189.816369][T10271] chnl_net:caif_netlink_parms(): no params data found
[  189.945764][T10271] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.948668][T10271] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.951736][T10271] bridge_slave_0: entered allmulticast mode
[  189.956656][T10271] bridge_slave_0: entered promiscuous mode
[  189.961699][T10271] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.966100][T10271] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.969016][T10271] bridge_slave_1: entered allmulticast mode
[  189.972459][T10271] bridge_slave_1: entered promiscuous mode
[  190.025350][T10271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  190.037888][T10271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.077506][T10271] team0: Port device team_slave_0 added
[  190.081598][T10271] team0: Port device team_slave_1 added
[  190.086675][T10310] loop1: detected capacity change from 0 to 65
[  190.097798][T10310] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway
[  190.124574][T10271] batman_adv: batadv0: Adding interface: batadv_slave_0
[  190.127309][T10271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.137554][T10271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.143298][T10271] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.148986][T10271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.162473][T10271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.257771][T10271] hsr_slave_0: entered promiscuous mode
[  190.261185][T10271] hsr_slave_1: entered promiscuous mode
[  190.264458][T10271] debugfs: 'hsr0' already exists in 'hsr'
[  190.266722][T10271] Cannot create hsr debugfs directory
[  190.492370][T10271] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  190.514533][T10322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1863'.
[  190.522388][    C1] vcan0: j1939_session_tx_dat: 0xffff88803ee19800: queue data error: -100
[  190.526431][    C1] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found
[  190.529708][    C1] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found
[  190.533108][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.536516][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.539871][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.543194][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.546592][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.549774][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.552759][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.556097][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.559522][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.562860][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.566266][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.569509][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.572750][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.576076][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.579352][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.582463][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.585749][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.588941][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.592160][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.595410][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.598823][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.602160][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.605606][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.608879][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.612187][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.615435][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.618657][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.621938][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.625529][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.628680][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.631881][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.635116][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.638560][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.641847][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.645316][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.648604][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.651940][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.655061][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.658317][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.661485][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.664812][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.668081][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.671559][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.674972][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.678336][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.681605][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.685072][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.688430][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.691786][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.695163][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.698235][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.700698][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.704180][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.707298][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.710577][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.713939][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.717215][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.720584][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.724009][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.727187][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.730521][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.733719][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.737099][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.740399][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.743705][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.747039][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.750462][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.753749][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.757335][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.760655][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.764245][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.767549][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.770922][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.774199][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.777579][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.780737][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.784232][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.787608][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.790978][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.794392][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.797660][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.800801][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.804311][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.807495][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.810774][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.814032][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.817426][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.820556][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.823746][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.826589][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.829766][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.832996][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.836444][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.839755][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.842726][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.845227][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.848184][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.851275][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.854733][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.858069][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.861436][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.864682][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.867841][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.871252][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.874725][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.877970][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.880709][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.883693][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.887273][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.890581][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.894080][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.897398][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.900655][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.904031][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.907441][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.910052][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.913289][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.916597][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.919367][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.922195][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.924962][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.927547][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.930106][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.932643][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.935275][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.937835][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.941206][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.944228][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.946706][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.949399][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.952019][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.954767][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.957995][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.961206][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.964482][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.967621][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.970429][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.973388][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.976617][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.978990][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.981835][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.985221][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.988498][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.991575][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  190.994843][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  190.998107][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.001517][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.004877][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.008093][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.011419][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.015034][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.018389][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.021900][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.025076][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.028317][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.031506][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.034933][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.038272][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.041673][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.045072][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.048461][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.051725][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.055185][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.058439][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.061708][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.065278][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.068522][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.071876][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.075347][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.078579][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.081923][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.085260][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.088670][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.091982][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.095439][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.098665][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.102283][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.105541][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.108938][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.112110][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.115580][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.118778][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.122611][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.126155][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.129530][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.133029][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.136984][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.140594][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.144059][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.147459][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.150791][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.154197][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.157655][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.160912][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.164324][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.167483][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.170895][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.174318][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.177711][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.181023][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.184399][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.187610][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.190997][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.194419][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.197733][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.200902][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.204442][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.207761][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.211195][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.214487][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.217664][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.220868][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.224296][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.227468][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.230775][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.234247][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.237698][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.240950][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.244472][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.247863][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.251173][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.254428][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.257680][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.260837][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.264330][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.267470][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.270786][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.274080][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.277381][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.280538][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.283985][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.287386][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.290817][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.294243][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.297611][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.300949][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.304457][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.307459][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.310533][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.313899][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.317645][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.321066][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.324598][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.327959][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.331380][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.334805][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.338356][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.342882][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.346430][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.349646][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.353089][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.356491][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.359834][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  191.363151][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  191.393589][T10271] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  191.407776][T10271] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  191.422942][T10271] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  191.559294][T10271] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.576269][T10271] 8021q: adding VLAN 0 to HW filter on device team0
[  191.584680][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.587732][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.600789][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.603231][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.633975][ T5236] Bluetooth: hci3: command tx timeout
[  191.737209][T10271] 8021q: adding VLAN 0 to HW filter on device batadv0
[  191.773861][T10271] veth0_vlan: entered promiscuous mode
[  191.783065][T10271] veth1_vlan: entered promiscuous mode
[  191.813716][T10271] veth0_macvtap: entered promiscuous mode
[  191.819581][T10271] veth1_macvtap: entered promiscuous mode
[  191.836320][T10271] batman_adv: batadv0: Interface activated: batadv_slave_0
[  191.849715][T10271] batman_adv: batadv0: Interface activated: batadv_slave_1
[  191.860433][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  191.866783][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  191.872668][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  191.878745][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  191.982070][ T3571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.991512][ T3571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.028478][ T3615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.031583][ T3615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.187434][T10375] loop3: detected capacity change from 0 to 512
[  192.200050][T10375] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)!
[  192.205695][T10375] EXT4-fs (loop3): group descriptors corrupted!
[  192.549956][T10404] loop3: detected capacity change from 0 to 128
[  192.563078][T10404] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  192.568995][T10404] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  192.575720][T10404] syz.3.1897 (pid 10404) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  192.582919][T10404] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload
[  192.590538][T10404] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload
[  192.615187][T10271] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  192.661773][T10414] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1901'.
[  192.679501][T10414] bond0: entered promiscuous mode
[  192.681895][T10414] bond_slave_0: entered promiscuous mode
[  192.685383][T10414] bond_slave_1: entered promiscuous mode
[  192.702091][T10414] bond0: left promiscuous mode
[  192.706180][T10414] bond_slave_0: left promiscuous mode
[  192.708665][T10414] bond_slave_1: left promiscuous mode
[  192.774537][   T51] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  192.925677][   T51] usb 2-1: Using ep0 maxpacket: 16
[  192.940077][   T51] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  192.947271][   T51] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  192.953131][   T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.977204][   T51] usb 2-1: config 0 descriptor??
[  193.016300][   T51] pxrc 2-1:0.0: Could not find endpoint
[  193.231039][ T5911] usb 2-1: USB disconnect, device number 30
[  193.250826][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1908'.
[  193.257219][T10431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1908'.
[  193.261582][T10431] netlink: 'syz.0.1908': attribute type 12 has an invalid length.
[  193.725053][ T5236] Bluetooth: hci3: command tx timeout
[  194.197985][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.200125][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.444252][  T792] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  194.457301][T10472] misc userio: No port type given on /dev/userio
[  194.594864][  T792] usb 2-1: Using ep0 maxpacket: 16
[  194.600974][  T792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  194.605548][  T792] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[  194.609315][  T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.621771][  T792] usb 2-1: config 0 descriptor??
[  195.058707][  T792] gt683r_led 0003:1770:FF00.000C: unknown main item tag 0x0
[  195.062004][  T792] gt683r_led 0003:1770:FF00.000C: item fetching failed at offset 1/5
[  195.068131][  T792] gt683r_led 0003:1770:FF00.000C: hid parsing failed
[  195.071215][  T792] gt683r_led 0003:1770:FF00.000C: probe with driver gt683r_led failed with error -22
[  195.297002][    T9] usb 2-1: USB disconnect, device number 31
[  195.794133][ T5236] Bluetooth: hci3: command tx timeout
[  196.147560][T10509] netlink: 'syz.1.1944': attribute type 8 has an invalid length.
[  196.160251][T10509] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  196.300277][T10520] net_ratelimit: 63 callbacks suppressed
[  196.300289][T10520] netlink: set zone limit has 4 unknown bytes
[  196.819761][T10527] loop1: detected capacity change from 0 to 32768
[  196.829901][T10527] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1951 (10527)
[  196.836417][T10527] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  196.839523][T10527] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  196.842188][T10527] BTRFS info (device loop1): using free-space-tree
[  196.999288][ T5849] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  197.668827][T10574] loop3: detected capacity change from 0 to 8
[  197.687323][T10574] Page size > filesystem block size (0).  This is currently not supported!
[  197.757673][T10573] block device autoloading is deprecated and will be removed.
[  197.771844][T10572] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1964'.
[  197.862045][T10581] loop1: detected capacity change from 0 to 512
[  197.873934][ T5236] Bluetooth: hci3: command tx timeout
[  197.892707][T10581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.898154][T10581] ext4 filesystem being mounted at /574/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  197.942603][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.303300][T10600] loop3: detected capacity change from 0 to 8
[  198.325739][T10600] SQUASHFS error: zlib decompression failed, data probably corrupt
[  198.328902][T10600] SQUASHFS error: Failed to read block 0x9b: -5
[  198.336456][T10600] SQUASHFS error: Unable to read metadata cache entry [99]
[  198.341973][T10600] SQUASHFS error: Unable to read inode 0x127
[  198.751747][ T5912] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  198.923159][ T5912] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  198.931607][ T5912] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  198.937299][ T5912] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  198.941546][ T5912] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  198.949774][ T5912] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  198.961488][ T5912] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  198.969497][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  198.973170][ T5912] usb 4-1: Product: syz
[  198.975277][ T5912] usb 4-1: Manufacturer: syz
[  199.033431][ T5912] cdc_wdm 4-1:1.0: skipping garbage
[  199.047344][ T5912] cdc_wdm 4-1:1.0: skipping garbage
[  199.098634][ T5912] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  199.104113][ T5912] cdc_wdm 4-1:1.0: Unknown control protocol
[  199.129245][    T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  199.230801][T10618] cdc_wdm 4-1:1.0: Error submitting int urb - -90
[  199.236435][  T793] usb 4-1: USB disconnect, device number 2
[  199.328424][    T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  199.332865][    T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  199.337066][    T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  199.341171][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.347769][T10624] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  199.355215][    T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  199.573958][ T5912] usb 2-1: USB disconnect, device number 32
[  200.289427][T10673] syzkaller1: entered promiscuous mode
[  200.291577][T10673] syzkaller1: entered allmulticast mode
[  200.798017][T10668] loop1: detected capacity change from 0 to 131072
[  200.867153][T10668] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  200.880314][T10668] F2FS-fs (loop1): Mounted with checkpoint version = 1b41e955
[  200.904081][  T792] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  201.056428][  T792] usb 4-1: Using ep0 maxpacket: 8
[  201.067434][  T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  201.070905][  T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  201.097027][  T792] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  201.100875][  T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  201.109934][  T792] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  201.113362][  T792] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  201.117463][  T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.125640][  T792] usb 4-1: config 0 descriptor??
[  201.129300][T10688] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  201.342896][ T5852] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  201.346346][ T5852] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  201.349199][ T5852] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  201.351907][ T5852] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  201.355160][ T5852] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  201.357693][ T5852] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  201.359872][ T5852] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  201.544697][ T5236] Bluetooth: hci4: Opcode 0x0c03 failed: -71
[  201.550488][  T792] usb 4-1: USB disconnect, device number 3
[  201.687389][T10721] loop1: detected capacity change from 0 to 512
[  201.801239][T10727] loop1: detected capacity change from 0 to 256
[  201.908173][ T5236] Bluetooth: hci1: unexpected event for opcode 0x0c7a
[  201.987337][T10734] loop1: detected capacity change from 0 to 4096
[  201.991356][T10734] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  202.091126][T10736] input: syz1 as /devices/virtual/input/input14
[  202.229428][T10749] loop3: detected capacity change from 0 to 4096
[  202.244908][T10749] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  202.421047][T10772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2055'.
[  202.425129][T10772] Unsupported xt match
[  202.425137][T10772] unable to load match
[  202.497934][T10779] overlayfs: empty lowerdir
[  202.763894][  T793] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  202.933870][  T793] usb 2-1: Using ep0 maxpacket: 16
[  202.938852][  T793] usb 2-1: config 5 has an invalid interface number: 206 but max is 0
[  202.941885][  T793] usb 2-1: config 5 has no interface number 0
[  202.946890][  T793] usb 2-1: config 5 interface 206 has no altsetting 0
[  202.956010][  T793] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=60.44
[  202.968197][  T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.977157][  T793] usb 2-1: Product: syz
[  202.993534][  T793] usb 2-1: Manufacturer: syz
[  203.003745][  T793] usb 2-1: SerialNumber: syz
[  203.348416][T10811] loop3: detected capacity change from 0 to 512
[  203.397017][T10811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.409487][T10811] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.503375][T10271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.737810][T10830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2077'.
[  205.266175][T10840] overlayfs: failed to get index nlink (file0/file2, err=-61)
[  205.414129][  T793] usb_ehset_test 2-1:5.206: probe with driver usb_ehset_test failed with error -32
[  205.424034][  T793] usb 2-1: USB disconnect, device number 33
[  205.626414][    T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  205.786231][    T9] usb 4-1: config 0 has an invalid interface number: 255 but max is 0
[  205.789586][    T9] usb 4-1: config 0 has no interface number 0
[  205.792850][    T9] usb 4-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  205.799507][    T9] usb 4-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  205.804230][    T9] usb 4-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  205.808870][    T9] usb 4-1: config 0 interface 255 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  205.813295][    T9] usb 4-1: config 0 interface 255 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  205.821555][    T9] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  205.826120][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.829482][    T9] usb 4-1: Product: syz
[  205.831153][    T9] usb 4-1: Manufacturer: syz
[  205.833038][    T9] usb 4-1: SerialNumber: syz
[  205.837649][    T9] usb 4-1: config 0 descriptor??
[  205.840685][T10844] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  205.852427][    T9] iguanair 4-1:0.255: probe with driver iguanair failed with error -12
[  205.922513][T10864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2093'.
[  205.994169][ T5912] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  206.060737][T10872] futex_wake_op: syz.0.2097 tries to shift op by 32; fix this program
[  206.061847][    T9] usb 4-1: USB disconnect, device number 4
[  206.146472][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  206.150996][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  206.156663][ T5912] usb 2-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00
[  206.174217][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.187399][ T5912] usb 2-1: config 0 descriptor??
[  206.705782][ T5912] ortek 0003:1223:3F07.000D: Fixing up logical maximum in report descriptor (Ortek)
[  206.713332][ T5912] ortek 0003:1223:3F07.000D: unknown main item tag 0x6
[  206.718436][ T5912] ortek 0003:1223:3F07.000D: report_id 29495 is invalid
[  206.721354][ T5912] ortek 0003:1223:3F07.000D: item 0 2 1 8 parsing failed
[  206.725070][ T5912] ortek 0003:1223:3F07.000D: probe with driver ortek failed with error -22
[  206.759177][T10882] smc: net device bond0 applied user defined pnetid SYZ0
[  206.867814][ T5912] usb 2-1: USB disconnect, device number 34
[  206.912039][T10888] loop3: detected capacity change from 0 to 4096
[  206.926834][T10888] ntfs3(loop3): ino=3, ntfs_set_state failed, -22.
[  206.929154][T10888] ntfs3(loop3): Failed to initialize $Extend/$ObjId.
[  206.950071][T10888] ntfs3(loop3): ino=1c, mi_enum_attr
[  206.952317][T10888] ntfs3(loop3): ino=1b, "file0" ntfs_readdir
[  206.969853][ T1090] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22.
[  206.974697][T10271] ntfs3(loop3): ino=3, ntfs_set_state failed, -22.
[  206.977265][T10271] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  206.981539][T10271] ntfs3(loop3): ino=3, ntfs_set_state failed, -22.
[  206.985938][ T3644] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22.
[  207.190803][T10902] loop3: detected capacity change from 0 to 4096
[  207.207281][T10902] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  207.304843][T10910] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  207.654360][T10920] overlayfs: failed to clone lowerpath
[  207.721933][T10921] overlayfs: failed to clone upperpath
[  207.909765][T10924] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  208.166770][T10926] loop3: detected capacity change from 0 to 40427
[  208.176587][T10926] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  208.180651][T10926] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  208.184474][T10926] F2FS-fs (loop3): build fault injection rate: 17008
[  208.187446][T10926] F2FS-fs (loop3): build fault injection type: 0x5
[  208.199983][T10926] F2FS-fs (loop3): invalid crc value
[  208.349214][T10926] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  208.358614][T10926] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  208.361666][T10926] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  208.389362][ T3644] kworker/u10:7: attempt to access beyond end of device
[  208.389362][ T3644] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  208.400204][ T3644] CPU: 1 UID: 0 PID: 3644 Comm: kworker/u10:7 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  208.400219][ T3644] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  208.400224][ T3644] Workqueue: writeback wb_workfn (flush-7:3)
[  208.400239][ T3644] Call Trace:
[  208.400243][ T3644]  <TASK>
[  208.400247][ T3644]  dump_stack_lvl+0x189/0x250
[  208.400259][ T3644]  ? __pfx_dump_stack_lvl+0x10/0x10
[  208.400267][ T3644]  ? __pfx_queue_work_on+0x10/0x10
[  208.400274][ T3644]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  208.400283][ T3644]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  208.400296][ T3644]  f2fs_handle_critical_error+0x37c/0x540
[  208.400309][ T3644]  f2fs_write_end_io+0x886/0xb60
[  208.400324][ T3644]  __submit_merged_bio+0x27a/0x6a0
[  208.400336][ T3644]  __submit_merged_write_cond+0x255/0x530
[  208.400348][ T3644]  f2fs_write_data_pages+0x261d/0x3000
[  208.400382][ T3644]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  208.400408][ T3644]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  208.400446][ T3644]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  208.400472][ T3644]  ? trace_f2fs_writepages+0x7f/0x200
[  208.400489][ T3644]  ? f2fs_write_node_pages+0x478/0x6e0
[  208.400508][ T3644]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  208.400534][ T3644]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  208.400550][ T3644]  do_writepages+0x32e/0x550
[  208.400571][ T3644]  ? reacquire_held_locks+0x127/0x1d0
[  208.400582][ T3644]  ? writeback_sb_inodes+0x384/0x1010
[  208.400603][ T3644]  __writeback_single_inode+0x145/0xff0
[  208.400618][ T3644]  ? do_raw_spin_unlock+0x4d/0x240
[  208.400636][ T3644]  writeback_sb_inodes+0x6c7/0x1010
[  208.400674][ T3644]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  208.400726][ T3644]  ? rcu_is_watching+0x15/0xb0
[  208.400747][ T3644]  wb_writeback+0x43b/0xaf0
[  208.400768][ T3644]  ? queue_io+0x3c1/0x590
[  208.400785][ T3644]  ? __pfx_wb_writeback+0x10/0x10
[  208.400805][ T3644]  ? _raw_spin_unlock_irq+0x23/0x50
[  208.400825][ T3644]  wb_workfn+0x409/0xef0
[  208.400877][ T3644]  ? __pfx_wb_workfn+0x10/0x10
[  208.400895][ T3644]  ? __lock_acquire+0xab9/0xd20
[  208.400919][ T3644]  ? process_scheduled_works+0x9ef/0x17b0
[  208.400936][ T3644]  ? _raw_spin_unlock_irq+0x23/0x50
[  208.400950][ T3644]  ? process_scheduled_works+0x9ef/0x17b0
[  208.400960][ T3644]  ? process_scheduled_works+0x9ef/0x17b0
[  208.400971][ T3644]  process_scheduled_works+0xae1/0x17b0
[  208.400992][ T3644]  ? __pfx_process_scheduled_works+0x10/0x10
[  208.401007][ T3644]  worker_thread+0x8a0/0xda0
[  208.401015][ T3644]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  208.401027][ T3644]  ? __kthread_parkme+0x7b/0x200
[  208.401039][ T3644]  kthread+0x711/0x8a0
[  208.401049][ T3644]  ? __pfx_worker_thread+0x10/0x10
[  208.401056][ T3644]  ? __pfx_kthread+0x10/0x10
[  208.401065][ T3644]  ? _raw_spin_unlock_irq+0x23/0x50
[  208.401073][ T3644]  ? lockdep_hardirqs_on+0x9c/0x150
[  208.401081][ T3644]  ? __pfx_kthread+0x10/0x10
[  208.401090][ T3644]  ret_from_fork+0x3fc/0x770
[  208.401099][ T3644]  ? __pfx_ret_from_fork+0x10/0x10
[  208.401109][ T3644]  ? __switch_to_asm+0x39/0x70
[  208.401120][ T3644]  ? __switch_to_asm+0x33/0x70
[  208.401132][ T3644]  ? __pfx_kthread+0x10/0x10
[  208.401145][ T3644]  ret_from_fork_asm+0x1a/0x30
[  208.401171][ T3644]  </TASK>
[  208.401177][ T3644] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  208.529331][T10926] VFS:Filesystem freeze failed
[  208.645671][  T793] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  208.820507][  T793] usb 2-1: Using ep0 maxpacket: 8
[  208.837503][  T793] usb 2-1: New USB device found, idVendor=0cf3, idProduct=e004, bcdDevice=b5.2e
[  208.841122][  T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.844550][  T793] usb 2-1: Product: syz
[  208.846220][  T793] usb 2-1: Manufacturer: syz
[  208.848077][  T793] usb 2-1: SerialNumber: syz
[  208.853726][  T793] usb 2-1: config 0 descriptor??
[  209.065886][ T5912] usb 2-1: USB disconnect, device number 35
[  209.199954][T10951] loop3: detected capacity change from 0 to 32768
[  209.203252][T10951] XFS: noikeep mount option is deprecated.
[  209.215445][T10951] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  209.240819][T10951] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  209.251297][T10951] XFS (loop3): Starting recovery (logdev: internal)
[  209.261346][T10951] XFS (loop3): Ending recovery (logdev: internal)
[  209.269057][T10951] XFS (loop3): Metadata corruption detected at xfs_inobt_verify+0x9e/0x1f0, xfs_finobt block 0x8 
[  209.273923][T10951] XFS (loop3): Unmount and run xfs_repair
[  209.276180][T10951] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  209.278942][T10951] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  209.282199][T10951] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  209.285939][T10951] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  209.289178][T10951] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02  ......1....N....
[  209.292408][T10951] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  209.295729][T10951] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  209.298984][T10951] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  209.302232][T10951] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  209.305826][T10951] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x8 len 8 error 117
[  209.323663][T10271] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  209.328385][T10271] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair.
[  209.449335][T10961] loop3: detected capacity change from 0 to 256
[  209.806996][T10973] loop1: detected capacity change from 0 to 8192
[  209.813723][T10973] msdos: Unknown parameter 'euid'
[  209.926604][T10982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2141'.
[  209.930374][T10982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2141'.
[  209.936260][T10982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2141'.
[  210.054166][ T5882] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  210.204211][ T5882] usb 4-1: Using ep0 maxpacket: 16
[  210.211900][ T5882] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79
[  210.216109][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  210.219315][ T5882] usb 4-1: Manufacturer: syz
[  210.227453][ T5882] usb 4-1: config 0 descriptor??
[  210.439864][ T5882] usb 4-1: Cannot retrieve CPort count: -71
[  210.442693][ T5882] usb 4-1: Cannot retrieve CPort count: -71
[  210.446724][ T5882] es2_ap_driver 4-1:0.0: probe with driver es2_ap_driver failed with error -71
[  210.450603][ T5882] usb 4-1: USB disconnect, device number 5
[  210.610439][T11009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2153'.
[  210.613599][T11009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2153'.
[  210.626142][T11009] netlink: 'syz.1.2153': attribute type 13 has an invalid length.
[  210.627563][T11011] overlayfs: failed to clone upperpath
[  210.815360][T11029] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow
[  210.855765][   T33] kauditd_printk_skb: 57 callbacks suppressed
[  210.855779][   T33] audit: type=1326 audit(1755256632.058:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11032 comm="syz.0.2165" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0dcc18ebe9 code=0x0
[  211.515096][   T51] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  211.675900][   T51] usb 4-1: config 0 has an invalid interface number: 69 but max is 0
[  211.679127][   T51] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  211.683241][   T51] usb 4-1: config 0 has no interface number 0
[  211.685950][   T51] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 255
[  211.690954][   T51] usb 4-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  211.697740][   T51] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  211.700761][   T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.704483][   T51] usb 4-1: Product: syz
[  211.705908][   T51] usb 4-1: Manufacturer: syz
[  211.707415][   T51] usb 4-1: SerialNumber: syz
[  211.710125][   T51] usb 4-1: config 0 descriptor??
[  211.715038][T11047] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  211.718591][   T51] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  211.722249][   T51] cyberjack ttyUSB0: usb_submit_urb(read int) failed
[  211.728185][   T51] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  211.934159][  T793] usb 4-1: USB disconnect, device number 6
[  211.966765][  T793] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  211.971957][  T793] cyberjack 4-1:0.69: device disconnected
[  212.055430][T11056] loop1: detected capacity change from 0 to 8
[  212.089223][T11056] SQUASHFS error: xz decompression failed, data probably corrupt
[  212.092145][T11056] SQUASHFS error: Failed to read block 0x108: -5
[  212.109898][T11056] SQUASHFS error: Unable to read metadata cache entry [106]
[  212.112946][T11056] SQUASHFS error: Unable to read inode 0x11f
[  212.332982][T11060] loop1: detected capacity change from 0 to 4096
[  213.124812][ T5912] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  213.129028][T11074] loop3: detected capacity change from 0 to 128
[  213.190003][T11076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2183'.
[  213.284061][ T5912] usb 2-1: Using ep0 maxpacket: 32
[  213.287832][ T5912] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[  213.293513][ T5912] usb 2-1: config 0 has no interface number 0
[  213.296966][ T5912] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  213.308758][ T5912] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  213.311761][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.319144][ T5912] usb 2-1: Product: syz
[  213.321084][ T5912] usb 2-1: Manufacturer: syz
[  213.323181][ T5912] usb 2-1: SerialNumber: syz
[  213.334873][ T5912] usb 2-1: config 0 descriptor??
[  213.344900][ T5912] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  213.348170][ T5912] em28xx 2-1:0.132: Video interface 132 found:
[  213.930679][ T5912] em28xx 2-1:0.132: unknown em28xx chip ID (0)
[  214.283408][ T5912] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  214.291645][ T5912] em28xx 2-1:0.132: board has no eeprom
[  214.354225][ T5912] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  214.357289][ T5912] em28xx 2-1:0.132: analog set to bulk mode.
[  214.360624][  T792] em28xx 2-1:0.132: Registering V4L2 extension
[  214.387114][ T5912] usb 2-1: USB disconnect, device number 36
[  214.390172][ T5912] em28xx 2-1:0.132: Disconnecting em28xx
[  214.440820][  T792] em28xx 2-1:0.132: Config register raw data: 0xffffffed
[  214.446744][  T792] em28xx 2-1:0.132: AC97 chip type couldn't be determined
[  214.449529][  T792] em28xx 2-1:0.132: No AC97 audio processor
[  214.458886][  T792] usb 2-1: Decoder not found
[  214.460730][  T792] em28xx 2-1:0.132: failed to create media graph
[  214.463226][  T792] em28xx 2-1:0.132: V4L2 device video103 deregistered
[  214.472072][  T792] em28xx 2-1:0.132: Remote control support is not available for this card.
[  214.476244][ T5912] em28xx 2-1:0.132: Closing input extension
[  214.496529][ T5912] em28xx 2-1:0.132: Freeing device
[  214.677398][T11134] netlink: 'syz.3.2208': attribute type 10 has an invalid length.
[  214.687570][T11134] team0: Device veth1_macvtap failed to register rx_handler
[  214.761697][T11141] 9pnet_fd: Insufficient options for proto=fd
[  214.891128][T11149] loop1: detected capacity change from 0 to 1024
[  215.014832][  T793] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  215.199562][  T793] usb 4-1: Using ep0 maxpacket: 32
[  215.203565][  T793] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  215.209170][  T793] usb 4-1: config 0 has no interface number 0
[  215.212412][  T793] usb 4-1: config 0 interface 12 has no altsetting 0
[  215.459360][  T793] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40
[  215.462514][  T793] usb 4-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3
[  215.465415][  T793] usb 4-1: Product: syz
[  215.466834][  T793] usb 4-1: Manufacturer: syz
[  215.468393][  T793] usb 4-1: SerialNumber: syz
[  215.475048][  T793] usb 4-1: config 0 descriptor??
[  215.979080][T11174] program syz.1.2225 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  215.982720][T11174] ata1.00: non-matching transfer count (0/2)
[  216.018544][T11176] input: syz0 as /devices/virtual/input/input16
[  216.446865][T11196] loop1: detected capacity change from 0 to 256
[  216.482427][T11196] FAT-fs (loop1): Directory bread(block 64) failed
[  216.489126][T11196] FAT-fs (loop1): Directory bread(block 65) failed
[  216.502426][T11196] FAT-fs (loop1): Directory bread(block 66) failed
[  216.506350][T11196] FAT-fs (loop1): Directory bread(block 67) failed
[  216.509397][T11196] FAT-fs (loop1): Directory bread(block 68) failed
[  216.512247][T11196] FAT-fs (loop1): Directory bread(block 69) failed
[  216.517363][T11196] FAT-fs (loop1): Directory bread(block 70) failed
[  216.520310][T11196] FAT-fs (loop1): Directory bread(block 71) failed
[  216.523229][T11196] FAT-fs (loop1): Directory bread(block 72) failed
[  216.526933][T11198] 8021q: adding VLAN 0 to HW filter on device bond5
[  216.538282][T11196] FAT-fs (loop1): Directory bread(block 73) failed
[  216.590330][T11198] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  216.646786][ T5875] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  216.671800][T11204] loop1: detected capacity change from 0 to 1024
[  216.785892][   T12] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  216.795034][  T793] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71
[  216.798783][  T793] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  216.801588][  T793] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  216.837962][  T793] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[  216.864804][  T793] usb 4-1: USB disconnect, device number 7
[  217.751428][T11229] bridge0: port 3(syz_tun) entered blocking state
[  217.756858][T11229] bridge0: port 3(syz_tun) entered disabled state
[  217.767606][T11229] syz_tun: entered allmulticast mode
[  217.775204][T11229] syz_tun: entered promiscuous mode
[  217.779459][T11229] bridge0: port 3(syz_tun) entered blocking state
[  217.782148][T11229] bridge0: port 3(syz_tun) entered forwarding state
[  217.799656][T11231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2244'.
[  217.800625][T11229] netlink: 'syz.3.2242': attribute type 10 has an invalid length.
[  217.809425][T11229] bridge0: port 3(syz_tun) entered disabled state
[  217.812250][T11229] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.815679][T11229] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.847061][T11229] bridge0: port 3(syz_tun) entered blocking state
[  217.849994][T11229] bridge0: port 3(syz_tun) entered forwarding state
[  217.853149][T11229] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.856252][T11229] bridge0: port 2(bridge_slave_1) entered forwarding state
[  217.859516][T11229] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.862619][T11229] bridge0: port 1(bridge_slave_0) entered forwarding state
[  217.882295][T11229] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  218.383860][T11245] netlink: 'syz.1.2251': attribute type 21 has an invalid length.
[  218.397116][T11245] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2251'.
[  218.723193][T11266] loop1: detected capacity change from 0 to 4096
[  218.726254][T11266] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  219.083549][T11275] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2265'.
[  219.183591][T11270] loop3: detected capacity change from 0 to 40427
[  219.197294][T11270] F2FS-fs (loop3): build fault injection rate: 14
[  219.207100][T11270] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  219.211324][T11270] F2FS-fs (loop3): invalid crc value
[  219.217722][    C0] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  219.238709][    C0] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  219.350790][T11270] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  219.354012][T11270] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  219.361721][T11270] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  219.397504][T11270] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  219.407963][T11270] F2FS-fs (loop3): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0xab1/0x1cf0
[  219.414397][T11270] F2FS-fs (loop3): inconsistent node block, node_type:0, nid:11, node_footer[nid:11,ino:3,ofs:2041,cpver:0,blkaddr:0]
[  219.477862][T10271] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_grab_meta_folio+0x6a/0x1d0
[  220.268815][T11296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2274'.
[  220.480736][ T5236] Bluetooth: hci3: unexpected Set CIG Parameters response data
[  220.487697][T11309] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1136)
[  220.491349][T11309] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  221.617372][T11352] loop3: detected capacity change from 0 to 32768
[  221.710698][T11360] fuse: Bad value for 'fd'
[  221.818234][T11371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2309'.
[  221.871413][T11375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2311'.
[  221.902784][T11377] xt_socket: unknown flags 0xd0
[  222.098662][T11399] netlink: 'syz.0.2323': attribute type 1 has an invalid length.
[  222.101286][T11399] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  222.132380][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2324'.
[  222.158230][T11403] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2325'.
[  222.264118][ T5882] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  222.417318][ T5882] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  222.438269][ T5882] usb 2-1: Dual-Role OTG device on HNP port
[  222.444712][ T5882] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1
[  222.450421][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.454804][ T5882] usb 2-1: Product: syz
[  222.456668][ T5882] usb 2-1: Manufacturer: syz
[  222.458793][ T5882] usb 2-1: SerialNumber: syz
[  222.468189][ T5882] usb 2-1: config 0 descriptor??
[  222.475138][ T5882] usb_ehset_test 2-1:0.0: probe with driver usb_ehset_test failed with error -32
[  222.626606][ T5912] usb 4-1: new low-speed USB device number 8 using dummy_hcd
[  222.679971][  T793] usb 2-1: USB disconnect, device number 37
[  222.787013][ T5912] usb 4-1: No LPM exit latency info found, disabling LPM.
[  222.791173][ T5912] usb 4-1: config 1 interface 0 altsetting 26 endpoint 0x1 is Bulk; changing to Interrupt
[  222.801886][ T5912] usb 4-1: config 1 interface 0 has no altsetting 0
[  222.808412][ T5912] usb 4-1: string descriptor 0 read error: -22
[  222.811125][ T5912] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  222.816590][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.833540][T11419] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  223.182087][T11470] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  223.185492][T11470] IPv6: NLM_F_CREATE should be set when creating new route
[  223.683542][T11473] loop1: detected capacity change from 0 to 131072
[  223.686738][T11473] f2fs: Unknown parameter ''
[  223.782580][T11486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2362'.
[  224.208674][T11498] loop1: detected capacity change from 0 to 32768
[  224.213310][T11498] XFS (loop1): Invalid device [./file0], error=-15
[  224.515054][ T5236] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  224.518369][ T5236] Bluetooth: hci3: Injecting HCI hardware error event
[  224.521701][ T5236] Bluetooth: hci3: hardware error 0x00
[  225.421087][    T9] usb 4-1: USB disconnect, device number 8
[  225.574893][   T33] audit: type=1400 audit(1755256646.718:100): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=11529 comm="syz.1.2381"
[  226.607897][ T5236] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  227.014446][T11594] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2409'.
[  227.039583][T11598] ptrace attach of "/syz-executor exec"[5844] was attempted by ""[11598]
[  227.151624][T11610] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2417'.
[  227.194253][ T5912] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  227.343908][    T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  227.346207][ T5912] usb 2-1: unable to get BOS descriptor or descriptor too short
[  227.353258][ T5912] usb 2-1: config 16 has an invalid interface number: 229 but max is 0
[  227.357853][ T5912] usb 2-1: config 16 has no interface number 0
[  227.360584][ T5912] usb 2-1: config 16 interface 229 altsetting 4 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  227.367464][ T5912] usb 2-1: config 16 interface 229 has no altsetting 0
[  227.373160][ T5912] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0011, bcdDevice=95.62
[  227.377199][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.380585][ T5912] usb 2-1: Product: syz
[  227.382333][ T5912] usb 2-1: Manufacturer: syz
[  227.385853][ T5912] usb 2-1: SerialNumber: syz
[  227.494081][    T9] usb 4-1: Using ep0 maxpacket: 32
[  227.498179][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  227.503143][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  227.507414][    T9] usb 4-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00
[  227.511208][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.517715][    T9] usb 4-1: config 0 descriptor??
[  227.602510][ T5912] kvaser_usb 2-1:16.229: error -ENODEV: Cannot get usb endpoint(s)
[  227.611755][ T5912] usb 2-1: USB disconnect, device number 38
[  227.684136][ T5850] jfs_flush_journal: synclist not empty
[  227.687022][ T5850] metapage: ffff88810f4668b8: 00001000 00000000 00003938 00000000
[  227.690429][ T5850] metapage: ffff88810f4668c8: 0f466ca8 ffff8881 0a2f1228 ffff8881
[  227.695713][ T5850] metapage: ffff88810f4668d8: 00000004 00000000 00000000 00000000
[  227.699126][ T5850] metapage: ffff88810f4668e8: 271f3000 ffff8881 0000002d 00000000
[  227.702484][ T5850] metapage: ffff88810f4668f8: 00000000 dead4ead ffffffff 00000000
[  227.708242][ T5850] metapage: ffff88810f466908: ffffffff ffffffff 99c03760 ffffffff
[  227.711931][ T5850] metapage: ffff88810f466918: 93521360 ffffffff 00000000 00000000
[  227.716188][ T5850] metapage: ffff88810f466928: 8bc40380 ffffffff 00000300 00000000
[  227.719721][ T5850] metapage: ffff88810f466938: 0f466938 ffff8881 0f466938 ffff8881
[  227.722996][ T5850] metapage: ffff88810f466948: 049c7cc0 ffffea00 076fa000 ffff8881
[  227.726376][ T5850] metapage: ffff88810f466958: 00001000 00003e24 00000000 00000000
[  227.729390][ T5850] metapage: ffff88810f466968: 0a2f1000 ffff8881
[  227.731858][ T5850] page: ffffea00049c7cc0: 057ff2000000403c ffffea00049c7f08
[  227.736234][ T5850] page: ffffea00049c7cd0: ffffea00049c7348 0000000000000000
[  227.739035][ T5850] page: ffffea00049c7ce0: 000000000000002d ffff88810f4668b8
[  227.741935][ T5850] page: ffffea00049c7cf0: 00000001ffffffff ffff88801b6f0d00
[  227.745235][ T5850] metapage: ffff88810f466c98: 00001000 00000000 00003cb0 00000000
[  227.748323][ T5850] metapage: ffff88810f466ca8: 0f4667d0 ffff8881 0f4668c8 ffff8881
[  227.751392][ T5850] metapage: ffff88810f466cb8: 00000004 00000000 00000000 00000000
[  227.755379][ T5850] metapage: ffff88810f466cc8: 271f9000 ffff8881 00000030 00000000
[  227.758403][ T5850] metapage: ffff88810f466cd8: 00000000 dead4ead ffffffff 00000000
[  227.761490][ T5850] metapage: ffff88810f466ce8: ffffffff ffffffff 99c03760 ffffffff
[  227.764803][ T5850] metapage: ffff88810f466cf8: 93521360 ffffffff 00000000 00000000
[  227.767900][ T5850] metapage: ffff88810f466d08: 8bc40380 ffffffff 00000300 00000000
[  227.770974][ T5850] metapage: ffff88810f466d18: 0f466d18 ffff8881 0f466d18 ffff8881
[  227.774996][ T5850] metapage: ffff88810f466d28: 049c7e40 ffffea00 076fa000 ffff8881
[  227.778085][ T5850] metapage: ffff88810f466d38: 00001000 00003e24 00000000 00000000
[  227.781137][ T5850] metapage: ffff88810f466d48: 0a2f1000 ffff8881
[  227.783603][ T5850] page: ffffea00049c7e40: 057ff2800000403c ffffea00049c7d48
[  227.787254][ T5850] page: ffffea00049c7e50: ffffea00049c7e88 0000000000000000
[  227.790246][ T5850] page: ffffea00049c7e60: 0000000000000030 ffff88810f466c98
[  227.793096][ T5850] page: ffffea00049c7e70: 00000001ffffffff ffff88801b6f0d00
[  227.796433][ T5850] metapage: ffff88810f4667c0: 00001000 00000000 00003d58 00000000
[  227.799496][ T5850] metapage: ffff88810f4667d0: 0a2f1228 ffff8881 0f466ca8 ffff8881
[  227.802678][ T5850] metapage: ffff88810f4667e0: 00000004 00000000 00000000 00000000
[  227.806047][ T5850] metapage: ffff88810f4667f0: 271e1000 ffff8881 0000001c 00000000
[  227.809662][ T5850] metapage: ffff88810f466800: 00000000 dead4ead ffffffff 00000000
[  227.813105][ T5850] metapage: ffff88810f466810: ffffffff ffffffff 99c03760 ffffffff
[  227.816464][ T5850] metapage: ffff88810f466820: 93521360 ffffffff 00000000 00000000
[  227.819529][ T5850] metapage: ffff88810f466830: 8bc40380 ffffffff 00000300 00000000
[  227.822598][ T5850] metapage: ffff88810f466840: 0f466840 ffff8881 0f466840 ffff8881
[  227.826205][ T5850] metapage: ffff88810f466850: 049c7840 ffffea00 076fa000 ffff8881
[  227.829282][ T5850] metapage: ffff88810f466860: 00001000 00003e24 00000000 00000000
[  227.832362][ T5850] metapage: ffff88810f466870: 0a2f1000 ffff8881
[  227.835149][ T5850] page: ffffea00049c7840: 057ff2800000403c ffffea00049c7808
[  227.838004][ T5850] page: ffffea00049c7850: ffffea00049c7d88 0000000000000000
[  227.840875][ T5850] page: ffffea00049c7860: 000000000000001c ffff88810f4667c0
[  227.843756][ T5850] page: ffffea00049c7870: 00000001ffffffff ffff88801b6f0d00
[  227.933123][    T9] saitek 0003:06A3:0621.000E: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.3-1/input0
[  228.007969][   T33] audit: type=1326 audit(1755256649.208:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11615 comm="syz.0.2420" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcc18ebe9 code=0x7ffc0000
[  228.017135][   T33] audit: type=1326 audit(1755256649.208:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11615 comm="syz.0.2420" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcc18ebe9 code=0x7ffc0000
[  228.026809][   T33] audit: type=1326 audit(1755256649.208:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11615 comm="syz.0.2420" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0dcc18d550 code=0x7ffc0000
[  228.035147][   T33] audit: type=1326 audit(1755256649.208:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11615 comm="syz.0.2420" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0dcc18d550 code=0x7ffc0000
[  228.043530][   T33] audit: type=1326 audit(1755256649.208:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11615 comm="syz.0.2420" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcc18ebe9 code=0x7ffc0000
[  228.055587][   T33] audit: type=1326 audit(1755256649.208:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11615 comm="syz.0.2420" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcc18ebe9 code=0x7ffc0000
[  228.064091][   T33] audit: type=1326 audit(1755256649.208:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11615 comm="syz.0.2420" exe="/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f0dcc18ebe9 code=0x7ffc0000
[  228.072267][   T33] audit: type=1326 audit(1755256649.208:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11615 comm="syz.0.2420" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcc18ebe9 code=0x7ffc0000
[  228.136740][ T5911] usb 4-1: USB disconnect, device number 9
[  228.221839][   T33] audit: type=1326 audit(1755256649.418:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.0.2425" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0dcc18ebe9 code=0x0
[  228.482296][T11634] netlink: 'syz.1.2427': attribute type 10 has an invalid length.
[  228.500006][T11634] team0: Device hsr_slave_0 failed to register rx_handler
[  228.969695][T11642] loop3: detected capacity change from 0 to 256
[  228.973198][T11642] exfat: Bad value for 'uid'
[  228.979077][T11642] exfat: Bad value for 'uid'
[  229.352274][T11666] loop1: detected capacity change from 0 to 2048
[  229.391047][T11666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.434698][T11666] loop1: detected capacity change from 2048 to 0
[  229.444293][T11666] syz.1.2440: attempt to access beyond end of device
[  229.444293][T11666] loop1: rw=12288, sector=64, nr_sectors = 4 limit=0
[  229.457884][ T5849] syz-executor: attempt to access beyond end of device
[  229.457884][ T5849] loop1: rw=12288, sector=64, nr_sectors = 4 limit=0
[  229.479838][T11677] 9pnet: p9_errstr2errno: server reported unknown error 
[  229.508912][ T6343] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.521093][ T6343] syz.1.175: attempt to access beyond end of device
[  229.521093][ T6343] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0
[  229.530160][ T6343] Buffer I/O error on dev loop1, logical block 0, lost sync page write
[  229.533471][ T6343] EXT4-fs (loop1): I/O error while writing superblock
[  229.536942][T11667] kmmpd-loop1: attempt to access beyond end of device
[  229.536942][T11667] loop1: rw=14337, sector=256, nr_sectors = 4 limit=0
[  229.542327][T11667] Buffer I/O error on dev loop1, logical block 64, lost sync page write
[  229.654085][   T51] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  229.781405][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.818050][   T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  229.831542][   T51] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  229.840901][   T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  229.845847][   T51] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  229.849131][   T51] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  229.852194][   T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.899348][   T51] usb 4-1: config 0 descriptor??
[  229.933156][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.999879][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.124041][   T51] hdpvr 4-1:0.0: firmware version 0x0 dated 
[  230.126769][   T51] hdpvr 4-1:0.0: untested firmware, the driver might not work.
[  230.136051][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode
[  230.147018][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.308190][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  230.316148][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  230.319601][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  230.323242][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  230.326367][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  230.559356][   T51] hdpvr 4-1:0.0: Could not setup controls
[  230.562279][   T51] hdpvr 4-1:0.0: registering videodev failed
[  230.570362][   T51] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -71
[  230.579571][   T51] usb 4-1: USB disconnect, device number 10
[  230.783288][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  230.790371][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  230.796196][   T12] bond0 (unregistering): Released all slaves
[  230.803004][   T12] bond1 (unregistering): Released all slaves
[  230.895435][   T12] tipc: Disabling bearer <udp:syz2>
[  230.907594][   T12] tipc: Left network mode
[  231.137155][T11701] chnl_net:caif_netlink_parms(): no params data found
[  231.364920][   T12] dummy0: left promiscuous mode
[  231.406960][   T12] hsr_slave_0: left promiscuous mode
[  231.409971][   T12] hsr_slave_1: left promiscuous mode
[  231.412150][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  231.420351][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  231.423264][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  231.426135][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  231.436100][   T12] veth1_macvtap: left promiscuous mode
[  231.438233][   T12] veth0_macvtap: left promiscuous mode
[  231.441135][   T12] veth1_vlan: left promiscuous mode
[  231.443025][   T12] veth0_vlan: left promiscuous mode
[  231.789181][   T12] team0 (unregistering): Port device team_slave_1 removed
[  231.821817][   T12] team0 (unregistering): Port device team_slave_0 removed
[  232.134877][T11701] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.137313][T11701] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.139733][T11701] bridge_slave_0: entered allmulticast mode
[  232.142511][T11701] bridge_slave_0: entered promiscuous mode
[  232.298968][T11701] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.304015][T11701] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.307520][T11701] bridge_slave_1: entered allmulticast mode
[  232.313622][T11701] bridge_slave_1: entered promiscuous mode
[  232.361313][ T5852] Bluetooth: hci1: command tx timeout
[  232.371008][T11701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  232.378394][T11701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  232.429630][T11701] team0: Port device team_slave_0 added
[  232.434939][T11701] team0: Port device team_slave_1 added
[  232.439923][ T5882] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  232.490858][T11701] batman_adv: batadv0: Adding interface: batadv_slave_0
[  232.493938][T11701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.504970][T11701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  232.520833][T11701] batman_adv: batadv0: Adding interface: batadv_slave_1
[  232.523889][T11701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.534765][T11701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  232.577921][T11701] hsr_slave_0: entered promiscuous mode
[  232.581058][T11701] hsr_slave_1: entered promiscuous mode
[  232.584975][T11701] debugfs: 'hsr0' already exists in 'hsr'
[  232.587487][T11701] Cannot create hsr debugfs directory
[  232.593922][ T5882] usb 4-1: Using ep0 maxpacket: 32
[  232.605753][ T5882] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  232.615256][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.630764][ T5882] usb 4-1: config 0 descriptor??
[  232.653458][ T5882] gspca_main: nw80x-2.14.0 probing 055f:d001
[  232.884404][T11701] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  232.900732][T11701] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  232.913384][T11701] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  232.932094][T11701] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  233.120122][T11701] 8021q: adding VLAN 0 to HW filter on device bond0
[  233.168070][T11701] 8021q: adding VLAN 0 to HW filter on device team0
[  233.365430][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.368426][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state
[  233.396289][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.399227][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state
[  233.793943][ T5882] gspca_nw80x: reg_w err -71
[  233.795646][ T5882] nw80x 4-1:0.0: probe with driver nw80x failed with error -71
[  233.816315][ T5882] usb 4-1: USB disconnect, device number 11
[  234.006756][T11701] 8021q: adding VLAN 0 to HW filter on device batadv0
[  234.249011][T11701] veth0_vlan: entered promiscuous mode
[  234.263745][T11701] veth1_vlan: entered promiscuous mode
[  234.318731][T11701] veth0_macvtap: entered promiscuous mode
[  234.343563][T11701] veth1_macvtap: entered promiscuous mode
[  234.366863][T11810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2480'.
[  234.403460][T11701] batman_adv: batadv0: Interface activated: batadv_slave_0
[  234.419518][T11701] batman_adv: batadv0: Interface activated: batadv_slave_1
[  234.439804][ T5852] Bluetooth: hci1: command tx timeout
[  234.442850][ T5857] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  234.454503][ T5857] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  234.478965][ T5857] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  234.486178][T11819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2483'.
[  234.504220][ T5857] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  234.624228][T11825] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  234.631948][T11825] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  234.697155][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.702726][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.722374][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.730223][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.996092][T11836] loop4: detected capacity change from 0 to 32768
[  235.034165][T11836] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  235.067613][T11836] XFS (loop4): Ending clean mount
[  235.073050][T11836] XFS (loop4): Quotacheck needed: Please wait.
[  235.095130][  T793] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  235.101074][T11836] XFS (loop4): Quotacheck: Done.
[  235.127494][T11701] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  235.246922][  T793] usb 4-1: Using ep0 maxpacket: 32
[  235.254088][T11865] netlink: 'syz.4.2492': attribute type 74 has an invalid length.
[  235.256898][  T793] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9
[  235.265493][  T793] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  235.268341][  T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.271596][  T793] usb 4-1: Product: syz
[  235.274932][  T793] usb 4-1: Manufacturer: syz
[  235.276843][  T793] usb 4-1: SerialNumber: syz
[  235.279795][  T793] usb 4-1: config 0 descriptor??
[  235.282315][T11840] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  235.300936][  T793] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input18
[  235.511727][    T9] usb 4-1: USB disconnect, device number 12
[  235.514336][    C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  236.514231][ T5852] Bluetooth: hci1: command tx timeout
[  236.865450][T11907] syzkaller1: entered promiscuous mode
[  236.868147][T11907] syzkaller1: entered allmulticast mode
[  236.982755][   T33] audit: type=1804 audit(1755256658.178:110): pid=11910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2510" name="file0" dev="tmpfs" ino=6159 res=1 errno=0
[  237.317988][T11933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2520'.
[  237.406485][T11937] loop3: detected capacity change from 0 to 1024
[  237.410162][T11937] EXT4-fs: Ignoring removed oldalloc option
[  237.419000][T11937] EXT4-fs: Ignoring removed bh option
[  237.446089][T11937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.463626][T11937] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.2522: Allocating blocks 385-513 which overlap fs metadata
[  237.478546][T11937] EXT4-fs (loop3): pa ffff888103519e80: logic 16, phys. 129, len 24
[  237.481431][T11937] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  237.533637][T10271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.592847][   T51] IPVS: starting estimator thread 0...
[  237.598142][T11944] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  237.628189][T11947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2525'.
[  237.632711][T11947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2525'.
[  237.694284][T11945] IPVS: using max 53 ests per chain, 127200 per kthread
[  237.999906][T11960] loop3: detected capacity change from 0 to 2048
[  238.030663][T11960] NILFS (loop3): bad btree root (ino=6): level = 5, flags = 0xbd, nchildren = 0
[  238.035932][T11960] NILFS (loop3): ifile inode (checkpoint number=2) corrupted
[  238.039744][T11960] NILFS (loop3): error -5 while loading last checkpoint (checkpoint number=2)
[  238.200363][T11972] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  238.252852][T11974] openvswitch: netlink: IPv4 tun info is not correct
[  238.376968][   T51] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  238.540690][   T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  238.553902][   T51] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  238.557557][   T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.576283][   T51] usb 4-1: config 0 descriptor??
[  238.598807][ T5852] Bluetooth: hci1: command tx timeout
[  238.751193][   T33] audit: type=1326 audit(1755256659.948:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11995 comm="syz.0.2549" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcc18ebe9 code=0x7ffc0000
[  238.767993][   T33] audit: type=1326 audit(1755256659.948:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11995 comm="syz.0.2549" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcc18ebe9 code=0x7ffc0000
[  238.776271][   T33] audit: type=1326 audit(1755256659.948:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11995 comm="syz.0.2549" exe="/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0dcc18ebe9 code=0x7ffc0000
[  238.794022][   T33] audit: type=1326 audit(1755256659.948:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11995 comm="syz.0.2549" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcc18ebe9 code=0x7ffc0000
[  238.804223][   T33] audit: type=1326 audit(1755256659.948:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11995 comm="syz.0.2549" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcc18ebe9 code=0x7ffc0000
[  238.812325][   T33] audit: type=1326 audit(1755256659.948:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11995 comm="syz.0.2549" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f0dcc18ebe9 code=0x7ffc0000
[  238.821624][   T33] audit: type=1326 audit(1755256659.978:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11995 comm="syz.0.2549" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcc18ebe9 code=0x7ffc0000
[  238.829720][   T33] audit: type=1326 audit(1755256659.988:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11997 comm="syz.0.2549" exe="/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f0dcc18ebe9 code=0x7ffc0000
[  238.837709][   T33] audit: type=1326 audit(1755256659.998:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11995 comm="syz.0.2549" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcc18ebe9 code=0x7ffc0000
[  239.011746][   T51] nintendo 0003:057E:200E.000F: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.3-1/input0
[  239.084750][   T51] nintendo 0003:057E:200E.000F: Failed charging grip handshake
[  239.089274][   T51] nintendo 0003:057E:200E.000F: Failed to initialize controller; ret=-110
[  239.096187][   T51] nintendo 0003:057E:200E.000F: probe - fail = -110
[  239.099318][   T51] nintendo 0003:057E:200E.000F: probe with driver nintendo failed with error -110
[  239.209571][   T51] usb 4-1: USB disconnect, device number 13
[  239.838502][T12007] veth2: entered promiscuous mode
[  239.840481][T12007] veth2: entered allmulticast mode
[  239.990599][T12011] geneve2: entered promiscuous mode
[  241.609216][T12050] netlink: 'syz.3.2571': attribute type 1 has an invalid length.
[  241.612285][T12050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2571'.
[  241.883932][   T51] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  242.037465][   T51] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  242.042073][   T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.046872][   T51] usb 4-1: config 0 descriptor??
[  242.051788][   T51] cp210x 4-1:0.0: cp210x converter detected
[  242.455211][   T51] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  242.461684][   T51] usb 4-1: cp210x converter now attached to ttyUSB0
[  243.428177][T12075] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2582'.
[  243.607843][   T33] kauditd_printk_skb: 241 callbacks suppressed
[  243.607852][   T33] audit: type=1326 audit(1755256664.808:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12084 comm="syz.0.2587" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0dcc18ebe9 code=0x0
[  244.657048][  T793] usb 4-1: USB disconnect, device number 14
[  244.676002][  T793] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  244.680844][  T793] cp210x 4-1:0.0: device disconnected
[  245.729779][T12127] loop3: detected capacity change from 0 to 2048
[  245.739376][T12127] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  245.981292][T12141] xt_socket: unknown flags 0xe4
[  246.396002][T12189] loop3: detected capacity change from 0 to 256
[  246.404482][T12189] FAT-fs (loop3): Directory bread(block 64) failed
[  246.406865][T12189] FAT-fs (loop3): Directory bread(block 65) failed
[  246.409586][T12189] FAT-fs (loop3): Directory bread(block 66) failed
[  246.412104][T12189] FAT-fs (loop3): Directory bread(block 67) failed
[  246.415639][T12189] FAT-fs (loop3): Directory bread(block 68) failed
[  246.417832][T12189] FAT-fs (loop3): Directory bread(block 69) failed
[  246.420011][T12189] FAT-fs (loop3): Directory bread(block 70) failed
[  246.422399][T12189] FAT-fs (loop3): Directory bread(block 71) failed
[  246.425632][T12189] FAT-fs (loop3): Directory bread(block 72) failed
[  246.428476][T12189] FAT-fs (loop3): Directory bread(block 73) failed
[  248.010581][T12233] loop3: detected capacity change from 0 to 4096
[  248.032253][T12233] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  248.063950][T10271] ntfs3(loop3): ino=9, ntfs_sync_fs failed, -22.
[  248.250607][T12244] loop3: detected capacity change from 0 to 32768
[  248.266172][T12244] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  248.288124][T12244] XFS (loop3): Ending clean mount
[  248.293705][T12244] XFS (loop3): Quotacheck needed: Please wait.
[  248.306889][T12244] XFS (loop3): Quotacheck: Done.
[  248.348372][T10271] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  250.081956][T12284] autofs: Bad value for 'fd'
[  251.046886][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  251.054618][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  251.058225][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  251.065558][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  251.071189][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  251.305274][T12312] loop3: detected capacity change from 0 to 512
[  251.312077][T12312] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.2661: casefold flag without casefold feature
[  251.317791][T12312] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2661: couldn't read orphan inode 15 (err -117)
[  251.323707][T12312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  251.354675][T10271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.366362][T12299] chnl_net:caif_netlink_parms(): no params data found
[  251.461606][T12325] CIFS mount error: No usable UNC path provided in device string!
[  251.461606][T12325] 
[  251.466474][T12325] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  251.497877][T12299] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.500440][T12299] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.502931][T12299] bridge_slave_0: entered allmulticast mode
[  251.509679][T12299] bridge_slave_0: entered promiscuous mode
[  251.513887][T12330] 9pnet_fd: Insufficient options for proto=fd
[  251.516999][T12299] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.519742][T12299] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.522314][T12299] bridge_slave_1: entered allmulticast mode
[  251.546209][T12299] bridge_slave_1: entered promiscuous mode
[  251.589061][T12299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  251.609811][T12299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  251.671268][T12299] team0: Port device team_slave_0 added
[  251.694185][T12299] team0: Port device team_slave_1 added
[  251.716881][T12299] batman_adv: batadv0: Adding interface: batadv_slave_0
[  251.719366][T12299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.732076][T12299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  251.736737][T12299] batman_adv: batadv0: Adding interface: batadv_slave_1
[  251.739336][T12299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.767454][T12299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  251.789119][T12349] loop3: detected capacity change from 0 to 256
[  251.801384][T12349] exfat: Deprecated parameter 'utf8'
[  251.820360][T12349] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  251.830119][T12299] hsr_slave_0: entered promiscuous mode
[  251.832554][T12299] hsr_slave_1: entered promiscuous mode
[  251.840336][T12299] debugfs: 'hsr0' already exists in 'hsr'
[  251.842841][T12299] Cannot create hsr debugfs directory
[  251.996415][T12299] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  252.002782][T12299] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  252.009446][T12299] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  252.017023][T12299] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  252.043015][T12299] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.046151][T12299] bridge0: port 2(bridge_slave_1) entered forwarding state
[  252.049509][T12299] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.052664][T12299] bridge0: port 1(bridge_slave_0) entered forwarding state
[  252.110056][T12353] loop3: detected capacity change from 0 to 32768
[  252.111010][T12299] 8021q: adding VLAN 0 to HW filter on device bond0
[  252.134829][T12353] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  252.140696][ T3644] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.144941][ T3644] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.154678][T12299] 8021q: adding VLAN 0 to HW filter on device team0
[  252.164976][ T3644] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.167502][ T3644] bridge0: port 1(bridge_slave_0) entered forwarding state
[  252.177198][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.180429][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  252.210470][T12353] XFS (loop3): Ending clean mount
[  252.220789][T12353] XFS (loop3): Quotacheck needed: Please wait.
[  252.258393][T12353] XFS (loop3): Quotacheck: Done.
[  252.320278][T10271] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  252.498098][T12383] Process accounting resumed
[  252.521259][T12299] 8021q: adding VLAN 0 to HW filter on device batadv0
[  252.720395][T12299] veth0_vlan: entered promiscuous mode
[  252.726431][T12299] veth1_vlan: entered promiscuous mode
[  252.741947][T12299] veth0_macvtap: entered promiscuous mode
[  252.746543][T12299] veth1_macvtap: entered promiscuous mode
[  252.889946][T12299] batman_adv: batadv0: Interface activated: batadv_slave_0
[  252.955291][T12299] batman_adv: batadv0: Interface activated: batadv_slave_1
[  252.965395][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.972387][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.976425][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  252.981596][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  253.041819][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.056931][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.075717][ T3615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.078570][ T3615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.156019][ T5236] Bluetooth: hci4: command tx timeout
[  253.176674][T12405] loop5: detected capacity change from 0 to 128
[  253.301283][T12411] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2693'.
[  253.527120][T12419] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2697'.
[  253.691045][T12425] overlayfs: failed to clone upperpath
[  253.903905][ T5882] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  254.061057][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  254.066851][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  254.071428][ T5882] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  254.075685][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.087550][ T5882] usb 4-1: config 0 descriptor??
[  254.559026][ T5882] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0
[  254.575799][ T5882] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0
[  254.764969][ T5882] cp2112 0003:10C4:EA90.0010: Part Number: 0x82 Device Version: 0xFE
[  255.233907][ T5236] Bluetooth: hci4: command tx timeout
[  255.239802][T12444] loop5: detected capacity change from 0 to 128
[  255.255391][T12444] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  255.260548][T12444] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  255.285164][T12299] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  255.485481][ T5882] cp2112 0003:10C4:EA90.0010: error reading lock byte: -71
[  255.497712][ T5882] usb 4-1: USB disconnect, device number 15
[  255.685015][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.687526][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  255.872043][T12458] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2712'.
[  255.875263][T12458] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  257.315178][ T5236] Bluetooth: hci4: command tx timeout
[  257.533027][   T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  257.683956][ T5911] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  257.693888][   T10] usb 6-1: Using ep0 maxpacket: 8
[  257.697798][   T10] usb 6-1: config 105 has an invalid interface number: 212 but max is 0
[  257.701436][   T10] usb 6-1: config 105 has no interface number 0
[  257.705093][   T10] usb 6-1: config 105 interface 212 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024
[  257.709945][   T10] usb 6-1: config 105 interface 212 altsetting 0 endpoint 0x5 has invalid maxpacket 431, setting to 64
[  257.719850][   T10] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=72.73
[  257.723570][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.727011][   T10] usb 6-1: Product: syz
[  257.728902][   T10] usb 6-1: Manufacturer: syz
[  257.730802][   T10] usb 6-1: SerialNumber: syz
[  257.740958][T12505] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  257.836874][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  257.841740][ T5911] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[  257.847893][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.857402][ T5911] usb 4-1: config 0 descriptor??
[  257.962392][   T10] port100 6-1:105.212: NFC: Could not find bulk-in or bulk-out endpoint
[  257.974286][   T10] usb 6-1: USB disconnect, device number 2
[  258.270082][ T5911] uclogic 0003:5543:0522.0011: unbalanced delimiter at end of report description
[  258.273741][ T5911] uclogic 0003:5543:0522.0011: parse failed
[  258.277346][ T5911] uclogic 0003:5543:0522.0011: probe with driver uclogic failed with error -22
[  258.575080][ T5911] usb 4-1: USB disconnect, device number 16
[  259.315199][ T5911] IPVS: starting estimator thread 0...
[  259.327683][T12542] loop3: detected capacity change from 0 to 32768
[  259.330692][T12542] Only 4K block size supported!
[  259.332337][T12542] Mount JFS Failure: -22
[  259.333682][T12542] jfs_mount failed w/return code = -22
[  259.394086][ T5236] Bluetooth: hci4: command tx timeout
[  259.413963][T12551] IPVS: using max 81 ests per chain, 194400 per kthread
[  259.471196][   T33] audit: type=1326 audit(1755256680.668:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12562 comm="syz.5.2759" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0f378ebe9 code=0x0
[  260.220861][T12582] loop3: detected capacity change from 0 to 512
[  260.225926][T12582] EXT4-fs: Ignoring removed oldalloc option
[  260.232437][T12582] EXT4-fs (loop3): 1 truncate cleaned up
[  260.237305][T12582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  260.261228][T10271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.485755][ T5932] udevd[5932]: failed to send result of seq 15614 to main daemon: Connection refused
[  260.495177][ T5931] udevd[5931]: failed to send result of seq 15615 to main daemon: Transport endpoint is not connected
[  260.638428][T12614] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2781'.
[  260.641648][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2781'.
[  260.674698][T12616] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  260.744060][ T5912] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  260.771251][T12622] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2785'.
[  260.778477][T12622] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2785'.
[  260.843981][ T5882] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  260.894101][ T5912] usb 6-1: Using ep0 maxpacket: 32
[  260.897909][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  260.901705][ T5912] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  260.908962][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.913937][ T5912] usb 6-1: config 0 descriptor??
[  261.016360][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  261.020608][ T5882] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  261.025276][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  261.031792][ T5882] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  261.040566][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.043913][ T5882] usb 4-1: Product: syz
[  261.045629][ T5882] usb 4-1: Manufacturer: syz
[  261.047545][ T5882] usb 4-1: SerialNumber: syz
[  261.068289][ T5882] usb 4-1: config 0 descriptor??
[  261.073678][T12612] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  261.079992][ T5882] usb 4-1: ucan: probing device on interface #0
[  261.082423][ T5882] usb 4-1: ucan: invalid endpoint configuration
[  261.089932][ T5882] usb 4-1: ucan: probe failed; try to update the device firmware
[  261.458945][ T5912] magicmouse 0003:05AC:0265.0012: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.5-1/input0
[  261.470815][ T5912] usb 4-1: USB disconnect, device number 17
[  261.651100][ T5912] usb 6-1: USB disconnect, device number 3
[  262.175722][   T33] audit: type=1326 audit(1755256683.368:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12653 comm="syz.3.2799" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4018ebe9 code=0x7ffc0000
[  262.193315][   T33] audit: type=1326 audit(1755256683.368:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12653 comm="syz.3.2799" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4018ebe9 code=0x7ffc0000
[  262.214405][   T33] audit: type=1326 audit(1755256683.378:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12653 comm="syz.3.2799" exe="/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f3d4018ebe9 code=0x7ffc0000
[  262.223199][   T33] audit: type=1326 audit(1755256683.378:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12653 comm="syz.3.2799" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4018ebe9 code=0x7ffc0000
[  262.245441][   T33] audit: type=1326 audit(1755256683.378:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12653 comm="syz.3.2799" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4018ebe9 code=0x7ffc0000
[  262.512048][T12658] loop3: detected capacity change from 0 to 32768
[  262.559291][T12658] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  262.588189][T12670] vxcan1: entered allmulticast mode
[  262.626899][T12658] XFS (loop3): Ending clean mount
[  262.632743][T12658] XFS (loop3): Quotacheck needed: Please wait.
[  262.669712][T12658] XFS (loop3): Quotacheck: Done.
[  262.719121][T10271] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  262.841635][ T5852] Bluetooth: hci2: command 0x0405 tx timeout
[  263.562723][   T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.648581][   T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.712901][   T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.801482][   T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.870745][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  263.881565][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  263.887051][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  263.898774][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  263.906058][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  263.963554][   T12] bridge_slave_1: left allmulticast mode
[  263.967238][   T12] bridge_slave_1: left promiscuous mode
[  263.971448][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.980737][   T12] bridge_slave_0: left allmulticast mode
[  263.983080][   T12] bridge_slave_0: left promiscuous mode
[  263.986815][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.350307][T12699] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  264.353629][T12699] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  264.440606][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  264.449360][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  264.454656][   T12] bond0 (unregistering): Released all slaves
[  264.590735][T12708] loop3: detected capacity change from 0 to 1024
[  264.596348][T12708] EXT4-fs: Ignoring removed orlov option
[  264.598731][T12708] EXT4-fs: Ignoring removed mblk_io_submit option
[  264.604495][T12708] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  264.619687][T12708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.679683][T10271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.772031][T12686] chnl_net:caif_netlink_parms(): no params data found
[  264.799208][   T12] hsr_slave_0: left promiscuous mode
[  264.802313][   T12] hsr_slave_1: left promiscuous mode
[  264.805722][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  264.808872][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  264.812717][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  264.818864][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  264.865131][   T12] veth1_macvtap: left promiscuous mode
[  264.867659][   T12] veth0_macvtap: left promiscuous mode
[  264.870537][   T12] veth1_vlan: left promiscuous mode
[  264.873341][   T12] veth0_vlan: left promiscuous mode
[  264.877977][T12720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2824'.
[  265.596280][   T12] team0 (unregistering): Port device team_slave_1 removed
[  265.640853][   T12] team0 (unregistering): Port device team_slave_0 removed
[  265.954549][ T5236] Bluetooth: hci4: command tx timeout
[  266.361704][T12686] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.371372][T12686] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.373952][T12686] bridge_slave_0: entered allmulticast mode
[  266.376868][T12735] ==================================================================
[  266.377334][T12686] bridge_slave_0: entered promiscuous mode
[  266.380161][T12735] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  266.383455][T12686] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.385475][T12735] Read of size 2 at addr ffff88811421cec2 by task syz.0.2830/12735
[  266.385492][T12735] 
[  266.385499][T12735] CPU: 1 UID: 0 PID: 12735 Comm: syz.0.2830 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  266.385516][T12735] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  266.385524][T12735] Call Trace:
[  266.385530][T12735]  <TASK>
[  266.385535][T12735]  dump_stack_lvl+0x189/0x250
[  266.385554][T12735]  ? __kasan_check_byte+0x12/0x40
[  266.385572][T12735]  ? __pfx_dump_stack_lvl+0x10/0x10
[  266.385587][T12735]  ? lock_release+0x4b/0x3e0
[  266.385627][T12735]  ? __virt_addr_valid+0x4a5/0x5c0
[  266.385644][T12735]  print_report+0xca/0x240
[  266.385657][T12735]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  266.385674][T12735]  kasan_report+0x118/0x150
[  266.385692][T12735]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  266.385711][T12735]  __xfrm_state_lookup+0x6ad/0x8d0
[  266.385730][T12735]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  266.385748][T12735]  ? xfrm_state_lookup+0x45/0x1e0
[  266.385759][T12735]  xfrm_state_lookup+0x11e/0x1e0
[  266.385773][T12735]  pfkey_get+0x2ae/0x880
[  266.385792][T12735]  pfkey_sendmsg+0xbfe/0x1090
[  266.385808][T12735]  ? trace_sched_exit_tp+0x36/0x110
[  266.385826][T12735]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  266.385849][T12735]  ? aa_sock_msg_perm+0xf1/0x1d0
[  266.385866][T12735]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  266.385879][T12735]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  266.385895][T12735]  __sock_sendmsg+0x21c/0x270
[  266.385911][T12735]  ____sys_sendmsg+0x505/0x830
[  266.385924][T12735]  ? __pfx_____sys_sendmsg+0x10/0x10
[  266.385970][T12735]  ? import_iovec+0x74/0xa0
[  266.385987][T12735]  ___sys_sendmsg+0x21f/0x2a0
[  266.386000][T12735]  ? __pfx____sys_sendmsg+0x10/0x10
[  266.386021][T12735]  ? __fget_files+0x2a/0x420
[  266.386031][T12735]  ? __fget_files+0x3a0/0x420
[  266.386043][T12735]  __x64_sys_sendmsg+0x19b/0x260
[  266.386056][T12735]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  266.386072][T12735]  ? do_syscall_64+0xbe/0x3b0
[  266.386090][T12735]  do_syscall_64+0xfa/0x3b0
[  266.386106][T12735]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.386117][T12735]  ? asm_sysvec_call_function_single+0x1a/0x20
[  266.386130][T12735]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.386142][T12735] RIP: 0033:0x7f0dcc18ebe9
[  266.386153][T12735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  266.386165][T12735] RSP: 002b:00007f0dccf3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  266.386178][T12735] RAX: ffffffffffffffda RBX: 00007f0dcc3b5fa0 RCX: 00007f0dcc18ebe9
[  266.386186][T12735] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  266.386195][T12735] RBP: 00007f0dcc211e19 R08: 0000000000000000 R09: 0000000000000000
[  266.386202][T12735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  266.386209][T12735] R13: 00007f0dcc3b6038 R14: 00007f0dcc3b5fa0 R15: 00007ffefe8abc78
[  266.386223][T12735]  </TASK>
[  266.386228][T12735] 
[  266.388787][T12686] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.392235][T12735] Allocated by task 11551:
[  266.392249][T12735]  kasan_save_track+0x3e/0x80
[  266.392268][T12735]  __kasan_slab_alloc+0x6c/0x80
[  266.393208][T12686] bridge_slave_1: entered allmulticast mode
[  266.398075][T12735]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  266.398100][T12735]  xfrm_state_alloc+0x24/0x2f0
[  266.398116][T12735]  pfkey_add+0x6e4/0x2e00
[  266.398131][T12735]  pfkey_sendmsg+0xbfe/0x1090
[  266.398146][T12735]  __sock_sendmsg+0x21c/0x270
[  266.398159][T12735]  ____sys_sendmsg+0x505/0x830
[  266.398169][T12735]  ___sys_sendmsg+0x21f/0x2a0
[  266.398178][T12735]  __x64_sys_sendmsg+0x19b/0x260
[  266.398187][T12735]  do_syscall_64+0xfa/0x3b0
[  266.398203][T12735]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.398214][T12735] 
[  266.398218][T12735] Freed by task 5911:
[  266.402717][T12686] bridge_slave_1: entered promiscuous mode
[  266.402912][T12735]  kasan_save_track+0x3e/0x80
[  266.547498][T12735]  kasan_save_free_info+0x46/0x50
[  266.549165][T12735]  __kasan_slab_free+0x5b/0x80
[  266.550892][T12735]  kmem_cache_free+0x18f/0x400
[  266.553004][T12735]  xfrm_state_gc_task+0x52d/0x6b0
[  266.555175][T12735]  process_scheduled_works+0xae1/0x17b0
[  266.557518][T12735]  worker_thread+0x8a0/0xda0
[  266.559509][T12735]  kthread+0x711/0x8a0
[  266.561296][T12735]  ret_from_fork+0x3fc/0x770
[  266.563299][T12735]  ret_from_fork_asm+0x1a/0x30
[  266.565396][T12735] 
[  266.566465][T12735] The buggy address belongs to the object at ffff88811421cd80
[  266.566465][T12735]  which belongs to the cache xfrm_state of size 928
[  266.572337][T12735] The buggy address is located 322 bytes inside of
[  266.572337][T12735]  freed 928-byte region [ffff88811421cd80, ffff88811421d120)
[  266.578052][T12735] 
[  266.579097][T12735] The buggy address belongs to the physical page:
[  266.581821][T12735] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88811421d680 pfn:0x11421c
[  266.586133][T12735] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  266.589720][T12735] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  266.592902][T12735] page_type: f5(slab)
[  266.594268][T12735] raw: 057ff00000000040 ffff88801c743b40 dead000000000122 0000000000000000
[  266.597621][T12735] raw: ffff88811421d680 00000000800e000a 00000000f5000000 0000000000000000
[  266.601252][T12735] head: 057ff00000000040 ffff88801c743b40 dead000000000122 0000000000000000
[  266.604960][T12735] head: ffff88811421d680 00000000800e000a 00000000f5000000 0000000000000000
[  266.608666][T12735] head: 057ff00000000002 ffffea0004508701 00000000ffffffff 00000000ffffffff
[  266.612366][T12735] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  266.616068][T12735] page dumped because: kasan: bad access detected
[  266.618794][T12735] page_owner tracks the page as allocated
[  266.621244][T12735] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6561, tgid 6560 (syz.0.268), ts 78863178314, free_ts 78835522966
[  266.628783][T12735]  post_alloc_hook+0x240/0x2a0
[  266.630470][T12735]  get_page_from_freelist+0x21e4/0x22c0
[  266.632823][T12735]  __alloc_frozen_pages_noprof+0x181/0x370
[  266.635245][T12735]  alloc_pages_mpol+0x232/0x4a0
[  266.637341][T12735]  allocate_slab+0x8a/0x370
[  266.639283][T12735]  ___slab_alloc+0xbeb/0x1410
[  266.641316][T12735]  kmem_cache_alloc_noprof+0x283/0x3c0
[  266.643609][T12735]  xfrm_state_alloc+0x24/0x2f0
[  266.645629][T12735]  xfrm_add_sa+0x17d1/0x4070
[  266.647618][T12735]  xfrm_user_rcv_msg+0x7a3/0xab0
[  266.649766][T12735]  netlink_rcv_skb+0x208/0x470
[  266.651810][T12735]  xfrm_netlink_rcv+0x79/0x90
[  266.653825][T12735]  netlink_unicast+0x82f/0x9e0
[  266.655860][T12735]  netlink_sendmsg+0x805/0xb30
[  266.657855][T12735]  __sock_sendmsg+0x21c/0x270
[  266.659836][T12735]  ____sys_sendmsg+0x505/0x830
[  266.661907][T12735] page last free pid 6557 tgid 6556 stack trace:
[  266.664620][T12735]  __free_frozen_pages+0xbc4/0xd30
[  266.666754][T12735]  stack_depot_save_flags+0x436/0x860
[  266.669047][T12735]  ref_tracker_free+0xfe/0x7d0
[  266.671132][T12735]  rx_queue_release+0x119/0x190
[  266.673234][T12735]  kobject_put+0x22b/0x480
[  266.675165][T12735]  net_rx_queue_update_kobjects+0x695/0x740
[  266.677697][T12735]  netdev_unregister_kobject+0x113/0x450
[  266.680100][T12735]  unregister_netdevice_many_notify+0x1a6b/0x1ff0
[  266.682829][T12735]  mroute_clean_tables+0x3a4/0xaa0
[  266.684904][T12735]  ip_mroute_setsockopt+0xaa3/0xf60
[  266.687055][T12735]  do_ip_setsockopt+0xf11/0x2d00
[  266.689112][T12735]  ip_setsockopt+0x66/0x110
[  266.691090][T12735]  do_sock_setsockopt+0x17c/0x1b0
[  266.693259][T12735]  __x64_sys_setsockopt+0x13f/0x1b0
[  266.695502][T12735]  do_syscall_64+0xfa/0x3b0
[  266.697493][T12735]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.700063][T12735] 
[  266.701117][T12735] Memory state around the buggy address:
[  266.703513][T12735]  ffff88811421cd80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  266.706842][T12735]  ffff88811421ce00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  266.710226][T12735] >ffff88811421ce80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  266.713516][T12735]                                            ^
[  266.716167][T12735]  ffff88811421cf00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  266.719335][T12735]  ffff88811421cf80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  266.721874][T12735] ==================================================================
[  266.728154][T12735] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  266.730653][T12735] CPU: 0 UID: 0 PID: 12735 Comm: syz.0.2830 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  266.734777][T12735] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  266.738133][T12735] Call Trace:
[  266.739271][T12735]  <TASK>
[  266.740278][T12735]  dump_stack_lvl+0x99/0x250
[  266.741845][T12735]  ? __asan_memcpy+0x40/0x70
[  266.743562][T12735]  ? __pfx_dump_stack_lvl+0x10/0x10
[  266.745318][T12735]  ? __pfx__printk+0x10/0x10
[  266.746881][T12735]  vpanic+0x281/0x750
[  266.748238][T12735]  ? preempt_schedule+0xae/0xc0
[  266.749847][T12735]  ? __pfx_vpanic+0x10/0x10
[  266.751402][T12735]  ? preempt_schedule_common+0x83/0xd0
[  266.753247][T12735]  ? preempt_schedule+0xae/0xc0
[  266.754889][T12735]  ? __pfx_preempt_schedule+0x10/0x10
[  266.756659][T12735]  panic+0xb9/0xc0
[  266.757943][T12735]  ? __pfx_panic+0x10/0x10
[  266.759440][T12735]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  266.761420][T12735]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  266.763185][T12735]  check_panic_on_warn+0x89/0xb0
[  266.764862][T12735]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  266.766641][T12735]  end_report+0x78/0x160
[  266.768082][T12735]  kasan_report+0x129/0x150
[  266.769608][T12735]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  266.771402][T12735]  __xfrm_state_lookup+0x6ad/0x8d0
[  266.773135][T12735]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  266.775036][T12735]  ? xfrm_state_lookup+0x45/0x1e0
[  266.776718][T12735]  xfrm_state_lookup+0x11e/0x1e0
[  266.778386][T12735]  pfkey_get+0x2ae/0x880
[  266.779814][T12735]  pfkey_sendmsg+0xbfe/0x1090
[  266.781397][T12735]  ? trace_sched_exit_tp+0x36/0x110
[  266.783144][T12735]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  266.784857][T12735]  ? aa_sock_msg_perm+0xf1/0x1d0
[  266.786526][T12735]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  266.788298][T12735]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  266.790032][T12735]  __sock_sendmsg+0x21c/0x270
[  266.791615][T12735]  ____sys_sendmsg+0x505/0x830
[  266.793220][T12735]  ? __pfx_____sys_sendmsg+0x10/0x10
[  266.794983][T12735]  ? import_iovec+0x74/0xa0
[  266.796502][T12735]  ___sys_sendmsg+0x21f/0x2a0
[  266.798095][T12735]  ? __pfx____sys_sendmsg+0x10/0x10
[  266.799837][T12735]  ? __fget_files+0x2a/0x420
[  266.801445][T12735]  ? __fget_files+0x3a0/0x420
[  266.803070][T12735]  __x64_sys_sendmsg+0x19b/0x260
[  266.804742][T12735]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  266.806590][T12735]  ? do_syscall_64+0xbe/0x3b0
[  266.808231][T12735]  do_syscall_64+0xfa/0x3b0
[  266.809852][T12735]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.811971][T12735]  ? asm_sysvec_call_function_single+0x1a/0x20
[  266.814119][T12735]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.816189][T12735] RIP: 0033:0x7f0dcc18ebe9
[  266.817739][T12735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  266.824143][T12735] RSP: 002b:00007f0dccf3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  266.826945][T12735] RAX: ffffffffffffffda RBX: 00007f0dcc3b5fa0 RCX: 00007f0dcc18ebe9
[  266.829459][T12735] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  266.832099][T12735] RBP: 00007f0dcc211e19 R08: 0000000000000000 R09: 0000000000000000
[  266.834748][T12735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  266.837419][T12735] R13: 00007f0dcc3b6038 R14: 00007f0dcc3b5fa0 R15: 00007ffefe8abc78
[  266.840058][T12735]  </TASK>
[  266.841740][T12735] Kernel Offset: disabled
[  266.843209][T12735] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:13:51  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000074 RBX=0000000000000074 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002ae65b0
R8 =ffff888108338237 R9 =1ffff11021067046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af990a R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556773d500 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0dccee56c0 CR3=00000000006e0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0030656764697262
XMM02=00000000000003ff 00007ffc16b70c90 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ff00000000000000 XMM05=0000000000000000 00007f77d0012e53
XMM06=0000000000000000 00007f77d0012e4d XMM07=0000000000000000 00007f77d0012e61
XMM08=0000000000000000 00007f77d0012ee7 XMM09=0000000000000000 00007f77d0012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000033 RBX=0000000000000033 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000003800e RDI=000000000003800f RBP=00000000000003f8 RSP=ffffc900062feed0
R8 =ffff888108338237 R9 =1ffff11021067046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af98c8 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0dccf3f6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000000 CR3=0000000026caa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f0dcc387498 00007f0dcc387470 XMM03=00007f0dcc3874a8 00007f0dcc3874a0
XMM04=00007f0dcceed100 00007f0dcc387460 XMM05=00007f0dcc387478 00007f0dcc3874c0
XMM06=00007f0dcc3874b8 00007f0dcc3874b0 XMM07=00007f0dcc3874a8 00007f0dcc3874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f0dcc212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
