last executing test programs:

2.304945119s ago: executing program 2 (id=775):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x24}, 0x2, 0x34005}, 0x0)

2.18596477s ago: executing program 2 (id=776):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.045861949s ago: executing program 0 (id=784):
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$igmp6(0xa, 0x3, 0x2)
r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x8, 0x0, 0x0, 0x0, 0x12345})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)

794.533524ms ago: executing program 0 (id=786):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, <r1=>0x0, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40)
getdents64(r3, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, 0x0)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xb8, 0x0, 0x3, [{{0x2, 0x3, 0x10000, 0x4, 0x5, 0x6, {0x2, 0x7a6, 0xffffffffffffffff, 0x7, 0x5, 0xe, 0x40, 0x1c57, 0x0, 0x0, 0xfffff5f4, 0x0, r2, 0x800, 0x4}}, {0x1, 0x911, 0xa, 0x9, '/dev/fuse\x00'}}]}, 0x0, 0x0, 0x0})

595.084115ms ago: executing program 0 (id=788):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

545.134553ms ago: executing program 2 (id=790):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="5bffd08307d80c79b1cb7b5f0c5b4d719c69c8513f748fbe425a7bc388c9019bef114779f7a10dc03a883d6e16a0a704f74297f381ff1db75098a9b38bb67206a7ff22e6ca46dc760bdad8a79d5951988c55a368dd1132ba7f129c2e65441eaa27492c069488df0881f123ca01ae873f5b36eb0fddb8f07420f5484d81cabde167c87ffbab6a94b24b5537bb1a08d56469f516fd4b7c66e2ac50d5ff4e52c628d0a89e53d0e78582a5ab2a2c714f66", 0xfe7c}], 0x1)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000})
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
fadvise64(r1, 0x9, 0x9, 0x4)

444.716088ms ago: executing program 1 (id=791):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x9, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@map=r0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

444.279315ms ago: executing program 0 (id=792):
syz_mount_image$f2fs(&(0x7f000000e000), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f000000df00)={[{@nodiscard}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@fault_type={'fault_type', 0x3d, 0x7fff}}, {@grpjquota}, {@noflush_merge}, {@nocheckpoint_merge}, {@acl}, {@gc_merge}, {@compress_cache}, {@alloc_mode_def}, {@noinline_xattr}, {@background_gc_off}, {@checkpoint_diasble}]}, 0x4, 0x550c, &(0x7f00000089c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000022c0)='.\x00', 0x2000, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000040)={0xc, 0x10000002000003, 0x1})

345.796225ms ago: executing program 1 (id=793):
io_setup(0x7e, &(0x7f0000000040)=<r0=>0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48)
io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x1, r1, &(0x7f0000000880)='c', 0x1, 0x3}])

295.23594ms ago: executing program 2 (id=794):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)={0x60, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0xc811}, 0x40000)

235.853105ms ago: executing program 2 (id=795):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r1, r0, &(0x7f0000002080)=0x9c, 0x23b)

235.552575ms ago: executing program 2 (id=796):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7e, 0x9e, 0xb4, 0x10, 0x54c, 0x38, 0x16f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xc5, 0x38}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x8, 0x3}, 0x0, 0x0})

166.204616ms ago: executing program 1 (id=797):
r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804)

165.79893ms ago: executing program 1 (id=798):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x128, 0xc8, 0x8, 0x128, 0x5803, 0x1f0, 0x2e8, 0x2e8, 0x1f0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'batadv0\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xd8, 0x0, {0x0, 0x2000000000000}}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xffffffff}}}, {{@ipv6={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xff, 0xffffffff, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xffffff00], 'veth1\x00', 'syz_tun\x00', {}, {0x491d055cb43cf44b}, 0x8, 0x0, 0xf, 0x21}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0)
writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x3f9, 0x4)
recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0)

95.687372ms ago: executing program 1 (id=799):
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}])

1.780759ms ago: executing program 0 (id=800):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0xffffffff, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x3cd, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x1, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0xfffffe57}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x5}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0xe32fa770305bfcda}, 0x0)

365.989µs ago: executing program 1 (id=801):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00')
preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/218, 0xda}, {&(0x7f0000000480)=""/234, 0xea}, {&(0x7f00000002c0)=""/130, 0x82}], 0x3, 0x7, 0x40)

0s ago: executing program 0 (id=802):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000440)='./file0\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x553d, &(0x7f00000024c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$FUSE_GETXATTR(r0, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x1}}, 0x18)
pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0, 0x7fdfee00}, {&(0x7f0000000140)="d9", 0x98}], 0x2, 0x3000, 0x0, 0x3)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:59531' (ED25519) to the list of known hosts.
syzkaller login: [   55.745214][ T5778] cgroup: Unknown subsys name 'net'
[   55.882688][ T5778] cgroup: Unknown subsys name 'cpuset'
[   55.886819][ T5778] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.684289][ T5778] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   68.752954][ T5999] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.011827][ T6000] chnl_net:caif_netlink_parms(): no params data found
[   69.232012][ T6000] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.234944][ T6000] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.237878][ T6000] bridge_slave_0: entered allmulticast mode
[   69.243339][ T6000] bridge_slave_0: entered promiscuous mode
[   69.248963][ T6000] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.253219][ T6000] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.256055][ T6000] bridge_slave_1: entered allmulticast mode
[   69.259254][ T6000] bridge_slave_1: entered promiscuous mode
[   69.357339][ T6000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.368883][ T6000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.485196][ T6000] team0: Port device team_slave_0 added
[   69.488559][ T6000] team0: Port device team_slave_1 added
[   69.533893][ T6000] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.536040][ T6000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.545473][ T6000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.550576][ T6000] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.552759][ T6000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.561797][ T6000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.595508][ T6000] hsr_slave_0: entered promiscuous mode
[   69.597891][ T6000] hsr_slave_1: entered promiscuous mode
[   69.701532][ T6000] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   69.707242][ T6000] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   69.712200][ T6000] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   69.716221][ T6000] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   69.734999][ T6000] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.737318][ T6000] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.740027][ T6000] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.742298][ T6000] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.775240][ T6000] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.785916][ T3563] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.788871][ T3563] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.796884][ T6000] 8021q: adding VLAN 0 to HW filter on device team0
[   69.803840][ T3563] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.806094][ T3563] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.812699][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.814944][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.910905][ T6000] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.937312][ T6000] veth0_vlan: entered promiscuous mode
[   69.943763][ T6000] veth1_vlan: entered promiscuous mode
[   69.962770][ T6000] veth0_macvtap: entered promiscuous mode
[   69.966775][ T6000] veth1_macvtap: entered promiscuous mode
[   69.977110][ T6000] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.984266][ T6000] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.992185][ T6026] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.995650][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.999031][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.003816][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.202745][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.204773][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   72.132706][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.430298][ T6047] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   72.436179][ T6047] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   72.441119][ T6047] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   72.446559][ T6047] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   72.452814][ T6047] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   72.471545][ T6053] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   72.472277][ T6050] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   72.477700][ T6050] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   72.481669][ T6053] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   72.481933][ T6050] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   72.486920][ T6053] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   72.487665][ T6050] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   72.492519][ T6053] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   72.492618][ T6050] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   72.499181][ T6050] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   72.775121][ T6045] chnl_net:caif_netlink_parms(): no params data found
[   72.864779][ T6048] chnl_net:caif_netlink_parms(): no params data found
[   72.887093][ T6049] chnl_net:caif_netlink_parms(): no params data found
[   72.954205][ T6045] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.956901][ T6045] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.959183][ T6045] bridge_slave_0: entered allmulticast mode
[   72.963070][ T6045] bridge_slave_0: entered promiscuous mode
[   72.983879][ T6045] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.986901][ T6045] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.992645][ T6045] bridge_slave_1: entered allmulticast mode
[   72.996439][ T6045] bridge_slave_1: entered promiscuous mode
[   73.078274][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.080995][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.083486][ T6048] bridge_slave_0: entered allmulticast mode
[   73.086069][ T6048] bridge_slave_0: entered promiscuous mode
[   73.089263][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.092807][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.095462][ T6048] bridge_slave_1: entered allmulticast mode
[   73.098476][ T6048] bridge_slave_1: entered promiscuous mode
[   73.115758][ T6045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.163486][ T6045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.169034][ T6048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.172983][ T6049] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.175419][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.178092][ T6049] bridge_slave_0: entered allmulticast mode
[   73.185011][ T6049] bridge_slave_0: entered promiscuous mode
[   73.209139][ T6048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.213273][ T6049] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.215876][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.218617][ T6049] bridge_slave_1: entered allmulticast mode
[   73.222119][ T6049] bridge_slave_1: entered promiscuous mode
[   73.274320][ T6045] team0: Port device team_slave_0 added
[   73.277813][ T6048] team0: Port device team_slave_0 added
[   73.283076][ T6048] team0: Port device team_slave_1 added
[   73.287088][ T6049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.294479][ T6049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.299294][ T6045] team0: Port device team_slave_1 added
[   73.353088][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.355742][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.365956][ T6048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.371620][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.373781][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.383493][ T6048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.422420][ T6049] team0: Port device team_slave_0 added
[   73.425291][ T6045] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.427379][ T6045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.436390][ T6045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.444498][ T6049] team0: Port device team_slave_1 added
[   73.448056][ T6045] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.451229][ T6045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.461884][ T6045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.509112][ T6048] hsr_slave_0: entered promiscuous mode
[   73.511709][ T6048] hsr_slave_1: entered promiscuous mode
[   73.513912][ T6048] debugfs: 'hsr0' already exists in 'hsr'
[   73.515736][ T6048] Cannot create hsr debugfs directory
[   73.534070][ T6049] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.536869][ T6049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.547176][ T6049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.563180][ T6049] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.565910][ T6049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.575260][ T6049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.618535][ T6045] hsr_slave_0: entered promiscuous mode
[   73.621100][ T6045] hsr_slave_1: entered promiscuous mode
[   73.623182][ T6045] debugfs: 'hsr0' already exists in 'hsr'
[   73.625153][ T6045] Cannot create hsr debugfs directory
[   73.709239][ T6049] hsr_slave_0: entered promiscuous mode
[   73.714655][ T6049] hsr_slave_1: entered promiscuous mode
[   73.716924][ T6049] debugfs: 'hsr0' already exists in 'hsr'
[   73.718928][ T6049] Cannot create hsr debugfs directory
[   73.750908][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.847085][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.938716][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.068486][ T6048] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   74.075577][ T6048] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   74.104807][ T6048] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   74.134232][ T6048] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   74.163651][   T13] bridge_slave_1: left allmulticast mode
[   74.166310][   T13] bridge_slave_1: left promiscuous mode
[   74.168698][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.180912][   T13] bridge_slave_0: left allmulticast mode
[   74.183002][   T13] bridge_slave_0: left promiscuous mode
[   74.185128][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.468503][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   74.475134][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.479547][   T13] bond0 (unregistering): Released all slaves
[   74.481942][   T55] Bluetooth: hci0: command tx timeout
[   74.544947][ T6045] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   74.563150][   T55] Bluetooth: hci1: command tx timeout
[   74.563227][ T6050] Bluetooth: hci2: command tx timeout
[   74.567071][ T6045] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   74.585052][ T6045] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   74.606654][   T13] hsr_slave_0: left promiscuous mode
[   74.612558][   T13] hsr_slave_1: left promiscuous mode
[   74.615251][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.618173][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.623076][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.625718][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.662935][   T13] veth1_macvtap: left promiscuous mode
[   74.665394][   T13] veth0_macvtap: left promiscuous mode
[   74.667686][   T13] veth1_vlan: left promiscuous mode
[   74.674511][   T13] veth0_vlan: left promiscuous mode
[   75.060685][   T13] team0 (unregistering): Port device team_slave_1 removed
[   75.095970][   T13] team0 (unregistering): Port device team_slave_0 removed
[   75.424421][ T6045] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   75.616508][ T6048] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.657574][ T6048] 8021q: adding VLAN 0 to HW filter on device team0
[   75.676032][  T147] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.678902][  T147] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.712464][  T147] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.715968][  T147] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.802390][ T6045] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.881198][ T6049] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   75.898367][ T6045] 8021q: adding VLAN 0 to HW filter on device team0
[   75.914796][ T6049] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   75.921342][ T6049] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   76.006820][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.009944][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.034163][ T6049] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   76.062491][  T147] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.065397][  T147] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.234278][ T6048] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.372716][ T6049] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.378569][ T6048] veth0_vlan: entered promiscuous mode
[   76.408608][ T6049] 8021q: adding VLAN 0 to HW filter on device team0
[   76.421090][ T6048] veth1_vlan: entered promiscuous mode
[   76.450156][  T147] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.453268][  T147] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.484298][  T147] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.487291][  T147] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.544279][ T6048] veth0_macvtap: entered promiscuous mode
[   76.553767][ T6048] veth1_macvtap: entered promiscuous mode
[   76.560603][ T6050] Bluetooth: hci0: command tx timeout
[   76.581494][ T6045] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.624402][ T6048] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.639894][ T6050] Bluetooth: hci1: command tx timeout
[   76.641556][   T55] Bluetooth: hci2: command tx timeout
[   76.663878][ T6048] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.681848][ T6073] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.685232][ T6073] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.713401][ T6073] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.726493][ T6073] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.828151][ T6045] veth0_vlan: entered promiscuous mode
[   76.864911][ T6045] veth1_vlan: entered promiscuous mode
[   76.937266][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.949889][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.010896][ T6045] veth0_macvtap: entered promiscuous mode
[   77.025773][ T6049] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.033561][ T6045] veth1_macvtap: entered promiscuous mode
[   77.050679][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.053929][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.137353][ T6045] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.151026][ T6045] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.184922][ T6049] veth0_vlan: entered promiscuous mode
[   77.198345][ T6044] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.210074][ T6044] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.213400][ T6044] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.213722][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.144'.
[   77.216754][ T6044] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.222105][ T6139] netlink: 'syz.1.144': attribute type 19 has an invalid length.
[   77.230577][ T6139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.144'.
[   77.257785][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   77.263355][ T6139] Zero length message leads to an empty skb
[   77.268425][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   77.282415][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   77.286372][ T6049] veth1_vlan: entered promiscuous mode
[   77.296251][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   77.371989][ T6141] loop1: detected capacity change from 0 to 2048
[   77.411752][ T6141] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   77.418651][ T6049] veth0_macvtap: entered promiscuous mode
[   77.436388][ T6049] veth1_macvtap: entered promiscuous mode
[   77.450278][   T33] audit: type=1800 audit(1757665912.349:2): pid=6141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.145" name="file1" dev="loop1" ino=1335 res=0 errno=0
[   77.470192][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.478134][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.487097][ T6049] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.507573][ T6049] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.569358][ T6044] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.576274][ T6044] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.587133][ T6044] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.599276][ T6044] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.627228][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.631752][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.709178][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.718621][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.720624][ T6145] loop1: detected capacity change from 0 to 1764
[   77.772690][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.798494][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.827260][ T6149] syz.1.148 uses obsolete (PF_INET,SOCK_PACKET)
[   77.930564][ T6153] binder: 6151:6153 ioctl c0306201 200000000780 returned -11
[   78.549174][ T6184] qrtr: Invalid version 0
[   78.634402][ T6191] loop0: detected capacity change from 0 to 64
[   78.639914][   T55] Bluetooth: hci0: command tx timeout
[   78.723033][   T55] Bluetooth: hci1: command tx timeout
[   78.725155][   T55] Bluetooth: hci2: command tx timeout
[   78.756549][ T6198] netlink: 28 bytes leftover after parsing attributes in process `syz.0.169'.
[   78.761283][ T6198] netlink: 32 bytes leftover after parsing attributes in process `syz.0.169'.
[   78.853338][ T6204] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   78.890824][ T6201] loop0: detected capacity change from 0 to 512
[   78.952346][ T6201] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.412473][ T6049] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.704008][ T6224] loop2: detected capacity change from 0 to 4096
[   79.710004][ T6224] EXT4-fs (loop2): Test dummy encryption mode enabled
[   79.727200][ T6224] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[   79.747994][ T6224] System zones: 0-5
[   79.765725][ T6224] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.852903][ T6229] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   79.880574][ T6224] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[   79.966340][ T6045] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.085711][ T6239] loop1: detected capacity change from 0 to 1024
[   80.092984][ T6239] =======================================================
[   80.092984][ T6239] WARNING: The mand mount option has been deprecated and
[   80.092984][ T6239]          and is ignored by this kernel. Remove the mand
[   80.092984][ T6239]          option from the mount to silence this warning.
[   80.092984][ T6239] =======================================================
[   80.118596][ T6239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.124614][ T6239] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   80.219859][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   80.260494][ T6048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.320166][ T6130] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   80.345123][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.185'.
[   80.366485][ T6247] team_slave_0: entered promiscuous mode
[   80.368814][ T6247] team_slave_1: entered promiscuous mode
[   80.371780][ T6247] macsec1: entered promiscuous mode
[   80.375950][ T6247] team0: entered promiscuous mode
[   80.382580][    T9] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee
[   80.385718][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.395810][    T9] usb 1-1: config 0 descriptor??
[   80.407176][    T9] usb 1-1: selecting invalid altsetting 1
[   80.482483][ T6130] usb 3-1: config 0 has an invalid interface number: 17 but max is 0
[   80.491335][ T6130] usb 3-1: config 0 has no interface number 0
[   80.500215][ T6130] usb 3-1: config 0 interface 17 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64
[   80.501974][ T6003] udevd[6003]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   80.505969][    T9] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22
[   80.521285][ T6130] usb 3-1: config 0 interface 17 has no altsetting 0
[   80.524533][ T6130] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a21, bcdDevice=e2.be
[   80.531348][ T6130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.537257][ T6130] usb 3-1: config 0 descriptor??
[   80.541373][ T6240] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   80.629145][ T6074] usb 1-1: USB disconnect, device number 2
[   80.730268][ T6050] Bluetooth: hci0: command tx timeout
[   80.760844][ T6028] usb 3-1: USB disconnect, device number 2
[   80.799822][ T6050] Bluetooth: hci2: command tx timeout
[   80.800116][   T55] Bluetooth: hci1: command tx timeout
[   80.991698][    T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   81.149648][    T9] usb 2-1: Using ep0 maxpacket: 32
[   81.155939][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   81.161299][    T9] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[   81.164935][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.173803][    T9] usb 2-1: config 0 descriptor??
[   81.591855][ T6264] loop0: detected capacity change from 0 to 4096
[   81.611266][ T6264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.616148][    T9] belkin 0003:1020:0006.0001: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.1-1/input0
[   81.644530][ T6264] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.193: corrupted inode contents
[   81.653099][ T6264] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #15: comm syz.0.193: mark_inode_dirty error
[   81.657642][ T6264] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.193: corrupted inode contents
[   81.661791][ T6264] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.193: mark_inode_dirty error
[   81.666854][ T6264] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.193: corrupted inode contents
[   81.673177][ T6264] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.193: mark_inode_dirty error
[   81.678419][ T6264] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.193: corrupted inode contents
[   81.686984][ T6264] EXT4-fs error (device loop0): ext4_truncate:4666: inode #15: comm syz.0.193: mark_inode_dirty error
[   81.692945][ T6264] EXT4-fs error (device loop0) in ext4_setattr:6071: Corrupt filesystem
[   81.698056][ T6267] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.193: corrupted inode contents
[   81.747248][ T6264] EXT4-fs (loop0): shut down requested (2)
[   81.798605][    T9] usb 2-1: USB disconnect, device number 2
[   81.845268][ T6049] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.907413][ T6269] loop0: detected capacity change from 0 to 256
[   81.931663][ T6269] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[   81.942859][ T6269] exFAT-fs (loop0): error, data size is invalid(10)
[   81.945791][ T6269] exFAT-fs (loop0): Filesystem has been set read-only
[   82.277142][ T6277] loop2: detected capacity change from 0 to 128
[   82.288403][ T6277] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   82.296224][ T6277] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   82.382897][ T6045] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   82.421502][ T6283] loop1: detected capacity change from 0 to 512
[   82.450288][ T6287] loop2: detected capacity change from 0 to 512
[   82.457998][ T6283] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.465617][ T6287] EXT4-fs: Ignoring removed i_version option
[   82.475539][ T6283] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.494304][ T6287] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 17. Delete some EAs or run e2fsck.
[   82.500729][ T6287] EXT4-fs (loop2): 1 truncate cleaned up
[   82.504311][ T6287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.542973][ T6045] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.554127][ T6048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.695078][ T6297] program syz.2.204 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   83.998640][ T6331] loop1: detected capacity change from 0 to 32768
[   84.005723][ T6331] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.213 (6331)
[   84.031857][ T6331] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   84.035847][ T6331] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[   84.039345][ T6331] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   84.098048][ T6331] BTRFS info (device loop1): rebuilding free space tree
[   84.114716][ T6331] BTRFS info (device loop1): disabling free space tree
[   84.116959][ T6331] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   84.122376][ T6331] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   84.132682][ T6331] BTRFS info (device loop1): setting nodatasum
[   84.134819][ T6331] BTRFS info (device loop1): setting nodatacow
[   84.136935][ T6331] BTRFS info (device loop1): enabling ssd optimizations
[   84.138971][ T6331] BTRFS info (device loop1): turning off barriers
[   84.141480][ T6331] BTRFS info (device loop1): enabling disk space caching
[   84.143872][ T6331] BTRFS info (device loop1): force clearing of disk cache
[   84.145978][ T6331] BTRFS info (device loop1): doing ref verification
[   84.148110][ T6331] BTRFS info (device loop1): max_inline set to 4096
[   84.212673][ T6048] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   84.221401][ T6028] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   84.405032][ T6028] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   84.418249][ T6028] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   84.431923][ T6028] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   84.451288][ T6028] usb 1-1: config 1 has no interface number 1
[   84.453332][ T6028] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   84.458349][ T6028] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[   84.468625][ T6028] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   84.476416][ T6028] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.479404][ T6028] usb 1-1: Product: syz
[   84.481556][ T6028] usb 1-1: Manufacturer: syz
[   84.483151][ T6028] usb 1-1: SerialNumber: syz
[   84.735873][ T6028] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[   84.744514][ T6028] usb 1-1: MIDIStreaming interface descriptor not found
[   84.813838][ T6028] usb 1-1: USB disconnect, device number 3
[   85.034586][ T6355] udevd[6355]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   85.083646][   T33] audit: type=1326 audit(1757665919.979:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.2.216" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8919d8eba9 code=0x7ffc0000
[   85.115649][   T33] audit: type=1326 audit(1757665920.009:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.2.216" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8919d8eba9 code=0x7ffc0000
[   85.141199][   T33] audit: type=1326 audit(1757665920.019:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.2.216" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8919d8eba9 code=0x7ffc0000
[   85.148635][   T33] audit: type=1326 audit(1757665920.019:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.2.216" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8919d8eba9 code=0x7ffc0000
[   85.191833][   T33] audit: type=1326 audit(1757665920.019:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.2.216" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8919d8eba9 code=0x7ffc0000
[   85.207415][   T33] audit: type=1326 audit(1757665920.019:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.2.216" exe="/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8919d8eba9 code=0x7ffc0000
[   85.221887][   T33] audit: type=1326 audit(1757665920.019:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.2.216" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8919d8eba9 code=0x7ffc0000
[   85.241960][   T33] audit: type=1326 audit(1757665920.019:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.2.216" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8919d8eba9 code=0x7ffc0000
[   85.249825][   T33] audit: type=1326 audit(1757665920.039:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.2.216" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8919d8eba9 code=0x7ffc0000
[   85.262680][   T33] audit: type=1326 audit(1757665920.039:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.2.216" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8919d8eba9 code=0x7ffc0000
[   85.508403][ T6362] loop2: detected capacity change from 0 to 128
[   85.530540][ T6362] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   85.534757][ T6362] hpfs: filesystem error: improperly stopped
[   85.536602][ T6362] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   85.538927][ T6362] hpfs: You really don't want any checks? You are crazy...
[   85.591824][ T6362] hpfs: hpfs_map_sector(): read error
[   85.593809][ T6362] hpfs: code page support is disabled
[   85.600711][ T6362] hpfs: hpfs_map_4sectors(): unaligned read
[   85.603375][ T6362] hpfs: hpfs_map_4sectors(): unaligned read
[   85.606180][ T6362] hpfs: filesystem error: unable to find root dir
[   85.618975][ T6364] netlink: 32 bytes leftover after parsing attributes in process `syz.0.219'.
[   85.983317][ T6374] loop1: detected capacity change from 0 to 512
[   86.026632][ T6374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.033727][ T6374] ext4 filesystem being mounted at /31/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.092831][ T6048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.142783][ T6074] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   86.148827][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.226'.
[   86.275472][ T6384] team0 (unregistering): left promiscuous mode
[   86.278071][ T6384] team_slave_0: left promiscuous mode
[   86.283301][ T6384] team_slave_1: left promiscuous mode
[   86.291601][ T6074] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[   86.294467][ T6074] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.302995][ T6074] usb 1-1: config 0 descriptor??
[   86.332755][ T6384] team0 (unregistering): Failed to send options change via netlink (err -105)
[   86.345111][ T6384] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105)
[   86.345449][ T6384] team0 (unregistering): Port device team_slave_0 removed
[   86.348959][ T6384] team0 (unregistering): Failed to send options change via netlink (err -105)
[   86.355323][ T6384] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105)
[   86.355708][ T6384] team0 (unregistering): Port device team_slave_1 removed
[   86.512481][ T6074] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor
[   86.564639][   T47] cfg80211: failed to load regulatory.db
[   86.713869][ T6074] [drm:udl_init] *ERROR* Selecting channel failed
[   86.738075][ T6074] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 3
[   86.741284][ T6074] [drm] Initialized udl on minor 3
[   86.747119][ T6074] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[   86.754515][ T6074] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[   86.761615][   T47] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[   86.768637][ T6074] usb 1-1: USB disconnect, device number 4
[   86.771923][   T47] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[   86.955367][ T6389] netlink: 392 bytes leftover after parsing attributes in process `syz.1.229'.
[   86.996726][ T6391] netlink: 176 bytes leftover after parsing attributes in process `syz.1.230'.
[   87.295025][ T6405] loop0: detected capacity change from 0 to 128
[   87.313891][ T6405] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   87.317737][ T6405] hpfs: filesystem error: improperly stopped
[   87.329616][ T6405] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   87.332402][ T6405] hpfs: You really don't want any checks? You are crazy...
[   87.335291][ T6405] hpfs: hpfs_map_sector(): read error
[   87.337193][ T6405] hpfs: code page support is disabled
[   87.341815][ T6405] hpfs: hpfs_map_4sectors(): unaligned read
[   87.343595][ T6405] hpfs: hpfs_map_4sectors(): unaligned read
[   87.345856][ T6405] hpfs: filesystem error: unable to find root dir
[   87.444077][ T6410] loop2: detected capacity change from 0 to 128
[   87.454419][ T6410] qnx6: Unexpected value for 'mmi_fs'
[   87.576875][ T6418] loop2: detected capacity change from 0 to 65
[   87.596281][ T6418] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway
[   87.818692][ T6422] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[   87.818692][ T6422]    program syz.0.241 not setting count and/or reply_len properly
[   88.188984][ T6428] process 'syz.1.246' launched '/dev/fd/3' with NULL argv: empty string added
[   88.949601][   T47] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   89.100349][   T47] usb 3-1: Using ep0 maxpacket: 16
[   89.112982][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   89.117382][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   89.136110][   T47] usb 3-1: New USB device found, idVendor=07c0, idProduct=1525, bcdDevice= 0.00
[   89.140362][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.160198][   T47] usb 3-1: config 0 descriptor??
[   89.225138][ T6447] loop1: detected capacity change from 0 to 256
[   89.323057][ T6451] AppArmor: change_hat: Invalid input '0'
[   89.407594][ T6074] usb 3-1: USB disconnect, device number 3
[   89.901321][ T6130] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   89.986042][ T6482] loop2: detected capacity change from 0 to 256
[   90.020414][ T6482] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[   90.023196][ T6486] netlink: 248 bytes leftover after parsing attributes in process `syz.0.272'.
[   90.024040][ T6482] FAT-fs (loop2): Filesystem has been set read-only
[   90.051145][ T6130] usb 2-1: Using ep0 maxpacket: 8
[   90.056090][ T6130] usb 2-1: unable to get BOS descriptor or descriptor too short
[   90.063203][ T6130] usb 2-1: config 5 has an invalid interface number: 215 but max is 0
[   90.067450][ T6130] usb 2-1: config 5 has no interface number 0
[   90.071289][ T6130] usb 2-1: config 5 interface 215 has no altsetting 0
[   90.083943][ T6130] usb 2-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba
[   90.088038][ T6488] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   90.097801][ T6130] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.114006][ T6130] usb 2-1: Product: syz
[   90.115859][ T6130] usb 2-1: Manufacturer: syz
[   90.117771][ T6130] usb 2-1: SerialNumber: syz
[   90.144245][ T6490] netlink: 68 bytes leftover after parsing attributes in process `syz.0.275'.
[   90.293956][ T6496] loop2: detected capacity change from 0 to 2048
[   90.304053][ T6496] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   90.410131][ T6130] cypress_m8 2-1:5.215: DeLorme Earthmate USB converter detected
[   90.423265][ T6130] usb 2-1: DeLorme Earthmate USB converter now attached to ttyUSB0
[   90.435369][ T6130] usb 2-1: USB disconnect, device number 3
[   90.452812][ T6130] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0
[   90.456181][ T6130] cypress_m8 2-1:5.215: device disconnected
[   90.486108][ T6504] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.281' resets device
[   90.599205][ T6507] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[   91.082595][ T6515] loop1: detected capacity change from 0 to 4096
[   91.139305][ T6516] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   91.156976][   T33] kauditd_printk_skb: 1 callbacks suppressed
[   91.156987][   T33] audit: type=1800 audit(1757665926.059:14): pid=6515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.285" name="file1" dev="loop1" ino=15 res=0 errno=0
[   91.385397][   T57] block nbd0: Receive control failed (result -32)
[   91.502815][ T6524] loop0: detected capacity change from 0 to 2048
[   91.547039][ T6355]  loop0: p1 < > p3 p4 < >
[   91.564849][ T6355] loop0: p3 start 4284289 is beyond EOD, truncated
[   91.585358][ T6524]  loop0: p1 < > p3 p4 < >
[   91.602115][ T6524] loop0: p3 start 4284289 is beyond EOD, truncated
[   91.734564][ T6355] udevd[6355]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   91.742572][ T6354] udevd[6354]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   92.083817][ T6532] evm: overlay not supported
[   92.298233][ T6536] netlink: 36 bytes leftover after parsing attributes in process `syz.1.295'.
[   92.311326][ T6536] netlink: 16 bytes leftover after parsing attributes in process `syz.1.295'.
[   92.314886][ T6536] netlink: 36 bytes leftover after parsing attributes in process `syz.1.295'.
[   92.318544][ T6536] netlink: 36 bytes leftover after parsing attributes in process `syz.1.295'.
[   92.399102][ T6540] sctp: [Deprecated]: syz.0.296 (pid 6540) Use of int in maxseg socket option.
[   92.399102][ T6540] Use struct sctp_assoc_value instead
[   92.451967][ T6542] loop1: detected capacity change from 0 to 128
[   92.454964][ T6542] EXT4-fs: inline encryption not supported
[   92.471704][ T6542] EXT4-fs: Mount option(s) incompatible with ext2
[   93.228986][ T6556] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   94.327645][ T6577] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.317971][ T6598] loop1: detected capacity change from 0 to 4096
[   95.326748][ T6598] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[   95.366539][ T6598] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   95.388293][ T6598] ntfs3(loop1): ino=19, mi_enum_attr
[   95.534929][ T6606] loop2: detected capacity change from 0 to 8
[   95.618637][ T6614] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   95.672155][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.332'.
[   95.770098][ T6130] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   95.776002][ T6626] input: syz1 as /devices/virtual/input/input4
[   95.782984][ T6130] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   95.786026][ T6130] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   95.788622][ T6130] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   95.826501][ T6130] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   95.831130][ T6130] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   95.834621][ T6130] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   95.837960][ T6130] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   95.841662][ T6130] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   95.844268][ T6130] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   95.851797][ T6130] hid-generic 0006:0004:0009.0002: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[   96.033174][ T6638] netlink: 16 bytes leftover after parsing attributes in process `syz.2.340'.
[   96.060048][ T6074] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   96.212314][ T6074] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   96.216430][ T6074] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[   96.224915][ T6074] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[   96.232328][ T6074] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[   96.250690][ T6074] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   96.258666][ T6074] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[   96.262405][ T6074] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[   96.268167][ T6074] usb 2-1: Product: syz
[   96.270179][ T6074] usb 2-1: Manufacturer: syz
[   96.272070][ T6074] usb 2-1: SerialNumber: syz
[   96.276460][ T6074] usb 2-1: config 0 descriptor??
[   96.513355][ T6074] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000
[   96.515331][ T6658] tmpfs: Bad value for 'mpol'
[   96.516122][ T6074] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[   96.710827][ T6074] radio-si470x 2-1:0.0: software version 129, hardware version 102
[   96.714060][ T6074] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[   96.835272][ T6666] Illegal XDP return value 4294967294 on prog  (id 18) dev N/A, expect packet loss!
[   96.884235][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.353'.
[   96.911819][ T6074] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71
[   96.915251][ T6074] radio-si470x 2-1:0.0: submitting int urb failed (-90)
[   96.921706][ T6074] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71
[   96.925444][ T6074] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22
[   96.933986][ T6074] usb 2-1: USB disconnect, device number 4
[   97.104663][ T6676] loop2: detected capacity change from 0 to 2048
[   97.135768][ T6676] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   97.232719][ T6682] tipc: Started in network mode
[   97.235050][ T6682] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711
[   97.243851][ T6682] tipc: Enabled bearer <udp:syz0>, priority 10
[   97.256824][ T6684] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow
[   97.471621][ T6696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'.
[   97.517009][   T10] IPVS: starting estimator thread 0...
[   97.529569][ T5320] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   97.630609][ T6700] IPVS: using max 62 ests per chain, 148800 per kthread
[   97.655342][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.371'.
[   97.719556][ T5320] usb 1-1: Using ep0 maxpacket: 16
[   97.723317][ T5320] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[   97.727053][ T5320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   97.738572][ T5320] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   97.742418][ T5320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.745018][ T5320] usb 1-1: Product: syz
[   97.746429][ T5320] usb 1-1: Manufacturer: syz
[   97.747934][ T5320] usb 1-1: SerialNumber: syz
[   97.759364][ T5320] usb 1-1: config 0 descriptor??
[   98.570281][   T47] tipc: Node number set to 4269801491
[   98.575457][ T5320] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   98.587427][ T5320] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[   98.774576][ T6719] netlink: 76 bytes leftover after parsing attributes in process `syz.1.375'.
[   98.949651][   T55] Bluetooth: Unknown BR/EDR signaling command 0x0e
[   98.952571][   T55] Bluetooth: Wrong link type (-22)
[   99.032128][ T6733] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.382'.
[   99.049876][ T5320] em28xx 1-1:0.0: chip ID is em2710
[   99.154560][ T6741] binder: 6740:6741 unknown command 0
[   99.156902][ T6741] binder: 6740:6741 ioctl c0306201 200000000080 returned -22
[   99.248179][ T6745] input: syz0 as /devices/virtual/input/input5
[   99.253873][ T5320] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[   99.264493][ T5320] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[   99.267471][ T5320] em28xx 1-1:0.0: No AC97 audio processor
[   99.285849][ T5320] usb 1-1: USB disconnect, device number 5
[   99.294188][ T5320] em28xx 1-1:0.0: Disconnecting em28xx
[   99.304744][ T5320] em28xx 1-1:0.0: Freeing device
[   99.364504][ T6130] usb 3-1: new low-speed USB device number 4 using dummy_hcd
[   99.512370][ T6130] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[   99.516031][ T6130] usb 3-1: config 179 has no interface number 0
[   99.519732][ T6130] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[   99.524393][ T6130] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[   99.529619][ T6130] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[   99.534751][ T6130] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8
[   99.549603][ T6130] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   99.555007][ T6130] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   99.560993][ T6130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.571818][ T6738] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   99.579602][ T6130] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   99.599186][ T6130] xpad 3-1:179.65: probe with driver xpad failed with error -90
[   99.797092][ T6130] usb 3-1: USB disconnect, device number 4
[   99.940094][ T6754] netlink: 'syz.0.391': attribute type 20 has an invalid length.
[  100.249733][ T6130] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  100.406119][ T6130] usb 1-1: config 0 has an invalid interface number: 235 but max is 0
[  100.415456][ T6130] usb 1-1: config 0 has no interface number 0
[  100.424573][ T6130] usb 1-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid maxpacket 65535, setting to 64
[  100.435057][ T6130] usb 1-1: config 0 interface 235 has no altsetting 0
[  100.440990][ T6130] usb 1-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18
[  100.444526][ T6130] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.447964][ T6130] usb 1-1: Product: syz
[  100.451755][ T6130] usb 1-1: Manufacturer: syz
[  100.454056][ T6130] usb 1-1: SerialNumber: syz
[  100.460068][ T6130] usb 1-1: config 0 descriptor??
[  100.465970][ T6756] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  100.473735][ T6130] keyspan 1-1:0.235: Keyspan 1 port adapter converter detected
[  100.476933][ T6130] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 87
[  100.491194][ T6130] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 7
[  100.500426][ T6130] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 81
[  100.504007][ T6130] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 1
[  100.507737][ T6130] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 85
[  100.526428][ T6130] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  100.620602][ T6785] loop2: detected capacity change from 0 to 1024
[  100.627215][ T6785] EXT4-fs error (device loop2): ext4_quota_enable:7128: inode #3: comm syz.2.402: iget: checksum invalid
[  100.633721][ T6785] EXT4-fs error (device loop2): ext4_quota_enable:7131: comm syz.2.402: Bad quota inode: 3, type: 0
[  100.638024][ T6785] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-74, ino=3). Please run e2fsck to fix.
[  100.651384][ T6785] EXT4-fs (loop2): mount failed
[  100.680233][ T6074] usb 1-1: USB disconnect, device number 6
[  100.694421][ T6074] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  100.713293][ T6074] keyspan 1-1:0.235: device disconnected
[  100.930724][ T6797] loop2: detected capacity change from 0 to 256
[  100.937042][ T6797] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d)
[  101.085056][ T6805] loop2: detected capacity change from 0 to 512
[  101.087930][ T6805] EXT4-fs: Ignoring removed i_version option
[  101.091614][ T6805] EXT4-fs (loop2): Test dummy encryption mode enabled
[  101.096376][ T6805] EXT4-fs error (device loop2): __ext4_iget:5464: inode #11: block 1: comm syz.2.411: invalid block
[  101.100490][ T6805] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.411: couldn't read orphan inode 11 (err -117)
[  101.113441][ T6805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.166573][ T6045] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.265624][ T6814] loop1: detected capacity change from 0 to 1024
[  101.319930][ T6814] syz.1.415: attempt to access beyond end of device
[  101.319930][ T6814] loop1: rw=0, sector=393852, nr_sectors = 2 limit=1024
[  103.561094][ T6834] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.422' sets config #-1
[  104.035717][   T55] Bluetooth: Unexpected continuation frame (len 16)
[  104.052557][ T6074] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  104.137022][ T6856] netlink: 'syz.0.432': attribute type 21 has an invalid length.
[  104.144919][ T6856] netlink: 'syz.0.432': attribute type 1 has an invalid length.
[  104.147302][ T6856] netlink: 100 bytes leftover after parsing attributes in process `syz.0.432'.
[  104.200082][ T6074] usb 2-1: Using ep0 maxpacket: 16
[  104.204634][ T6074] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.208695][ T6074] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.212375][ T6074] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  104.217261][ T6074] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  104.221937][ T6074] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.226780][ T6074] usb 2-1: config 0 descriptor??
[  104.419376][ T6869] netlink: 28 bytes leftover after parsing attributes in process `syz.2.439'.
[  104.666039][ T6074] HID 045e:07da: Invalid code 65791 type 1
[  104.694227][ T6074] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0003/input/input6
[  104.727238][ T6074] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  104.876978][ T6074] usb 2-1: USB disconnect, device number 5
[  106.801268][   T55] Bluetooth: hci2: command tx timeout
[  107.120562][ T6948] loop6: detected capacity change from 0 to 2560
[  107.124105][ T6948] Buffer I/O error on dev loop6, logical block 0, async page read
[  107.127545][ T6948] Buffer I/O error on dev loop6, logical block 0, async page read
[  107.131733][ T6948] Buffer I/O error on dev loop6, logical block 0, async page read
[  107.134799][ T6948] Buffer I/O error on dev loop6, logical block 0, async page read
[  107.138622][ T6948] Buffer I/O error on dev loop6, logical block 0, async page read
[  107.144350][ T6948] Buffer I/O error on dev loop6, logical block 0, async page read
[  107.146991][ T6948] Buffer I/O error on dev loop6, logical block 0, async page read
[  107.151623][ T6948] Buffer I/O error on dev loop6, logical block 0, async page read
[  107.154218][ T6948] ldm_validate_partition_table(): Disk read failed.
[  107.156445][ T6948] Buffer I/O error on dev loop6, logical block 0, async page read
[  107.158953][ T6948] Buffer I/O error on dev loop6, logical block 0, async page read
[  107.161844][ T6948] Dev loop6: unable to read RDB block 0
[  107.164225][ T6948]  loop6: unable to read partition table
[  107.168533][ T6948] loop_reread_partitions: partition scan of loop6 (3) failed (rc=-5)
[  107.222472][ T6948] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1
[  107.226031][ T6948] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1
[  107.236239][ T6948] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1
[  107.240582][ T6948] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1
[  107.244513][ T6948] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 1
[  107.253555][ T6948] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 1
[  107.257427][ T6948] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 67 prio class 1
[  107.261755][ T6948] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 67 prio class 1
[  107.322995][ T6954] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.295155][ T6967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.479'.
[  108.354595][ T6971] netlink: 'syz.0.481': attribute type 1 has an invalid length.
[  108.357187][ T6971] netlink: 'syz.0.481': attribute type 2 has an invalid length.
[  109.534779][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.488'.
[  109.542892][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.488'.
[  109.996228][ T6996] loop8: detected capacity change from 0 to 8
[  110.006072][ T6355] Dev loop8: unable to read RDB block 8
[  110.008250][ T6355]  loop8: unable to read partition table
[  110.014171][ T6355] loop8: partition table beyond EOD, truncated
[  110.020798][ T6996] Dev loop8: unable to read RDB block 8
[  110.023169][ T6996]  loop8: unable to read partition table
[  110.027277][ T6996] loop8: partition table beyond EOD, truncated
[  110.038377][ T6996] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5)
[  110.603308][ T7000] loop2: detected capacity change from 0 to 32768
[  110.635888][ T7000] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  110.671402][ T7000] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  110.726137][ T6045] ocfs2: Unmounting device (7,2) on (node local)
[  110.779180][   T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  110.950294][   T24] usb 2-1: Using ep0 maxpacket: 32
[  110.962093][   T24] usb 2-1: config 64 has an invalid interface number: 110 but max is 0
[  110.970758][   T24] usb 2-1: config 64 has no interface number 0
[  110.973389][   T24] usb 2-1: config 64 interface 110 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  110.977869][   T24] usb 2-1: config 64 interface 110 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  110.983597][   T24] usb 2-1: config 64 interface 110 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024
[  110.992793][   T24] usb 2-1: config 64 interface 110 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  110.997799][   T24] usb 2-1: config 64 interface 110 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  111.008560][   T24] usb 2-1: config 64 interface 110 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  111.014409][   T24] usb 2-1: config 64 interface 110 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  111.026308][   T24] usb 2-1: New USB device found, idVendor=04fc, idProduct=0231, bcdDevice=6f.a9
[  111.030570][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.033925][   T24] usb 2-1: Product: syz
[  111.035684][   T24] usb 2-1: Manufacturer: syz
[  111.037679][   T24] usb 2-1: SerialNumber: syz
[  111.072697][ T7012] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  111.108781][   T24] spcp8x5 2-1:64.110: SPCP8x5 converter detected
[  111.144443][   T24] usb 2-1: SPCP8x5 converter now attached to ttyUSB0
[  111.419082][   T24] usb 2-1: USB disconnect, device number 6
[  111.512204][   T24] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  111.521183][   T24] spcp8x5 2-1:64.110: device disconnected
[  112.392457][ T7035] netlink: 2 bytes leftover after parsing attributes in process `syz.1.507'.
[  112.479059][ T6074] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  112.639045][ T6074] usb 3-1: Using ep0 maxpacket: 8
[  112.644682][ T6074] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  112.651710][ T6074] usb 3-1: config 0 has no interface number 0
[  112.661305][ T6074] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  112.665321][ T7043] kernel profiling enabled (shift: 7)
[  112.673829][ T6074] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 17056, setting to 1024
[  112.688995][ T6074] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  112.698053][ T6074] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  112.710601][ T6074] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  112.722100][ T6074] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  112.732736][ T6074] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.742329][ T6074] usb 3-1: config 0 descriptor??
[  112.770737][ T6074] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  112.842287][   T33] audit: type=1326 audit(1757668525.752:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.0.512" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83398eba9 code=0x7ffc0000
[  112.880823][   T33] audit: type=1326 audit(1757668525.752:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.0.512" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83398eba9 code=0x7ffc0000
[  112.887544][   T33] audit: type=1326 audit(1757668525.752:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.0.512" exe="/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fa83398eba9 code=0x7ffc0000
[  112.894918][   T33] audit: type=1326 audit(1757668525.752:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.0.512" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83398eba9 code=0x7ffc0000
[  112.904732][   T33] audit: type=1326 audit(1757668525.752:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.0.512" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83398eba9 code=0x7ffc0000
[  113.128946][ T6074] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  113.289717][ T6074] usb 1-1: Using ep0 maxpacket: 32
[  113.303395][ T6074] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  113.307724][ T6074] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  113.316778][ T6074] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  113.332930][ T6074] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.355992][ T6074] usb 1-1: config 0 descriptor??
[  113.374702][ T6074] hub 1-1:0.0: USB hub found
[  113.399761][ T7054] loop1: detected capacity change from 0 to 1024
[  113.407051][ T7054] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  113.415735][ T7054] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  113.421341][ T7054] EXT4-fs error (device loop1): ext4_get_journal_inode:5800: inode #32: comm syz.1.515: iget: special inode unallocated
[  113.425723][ T7054] EXT4-fs (loop1): Remounting filesystem read-only
[  113.428410][ T7054] EXT4-fs (loop1): no journal found
[  113.431333][ T7054] EXT4-fs (loop1): can't get journal size
[  113.435463][ T7054] EXT4-fs (loop1): filesystem is read-only
[  113.439549][ T7054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  113.470332][ T6048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.566284][ T6074] hub 1-1:0.0: 1 port detected
[  113.771920][ T6074] hub 1-1:0.0: hub_hub_status failed (err = -71)
[  113.775101][ T6074] hub 1-1:0.0: config failed, can't get hub status (err -71)
[  113.782691][ T6074] usbhid 1-1:0.0: can't add hid device: -71
[  113.785198][ T6074] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  113.821014][ T6074] usb 1-1: USB disconnect, device number 7
[  113.938738][   T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  114.088744][   T24] usb 2-1: Using ep0 maxpacket: 8
[  114.095116][   T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3
[  114.100030][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  114.106896][   T24] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  114.110839][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.114122][   T24] usb 2-1: Product: syz
[  114.116000][   T24] usb 2-1: Manufacturer: syz
[  114.117990][   T24] usb 2-1: SerialNumber: syz
[  114.124401][   T24] usb 2-1: config 0 descriptor??
[  114.130491][   T24] streamzap 2-1:0.0: streamzap_probe: endpoint doesn't match input device 0203
[  114.347714][ T6130] usb 2-1: USB disconnect, device number 7
[  115.345214][ T6074] usb 3-1: USB disconnect, device number 5
[  115.512439][ T6074] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  115.919313][ T6355] udevd[6355]: failed to send result of seq 11829 to main daemon: Connection refused
[  116.253755][ T7128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.545'.
[  117.598692][ T7179] capability: warning: `syz.0.568' uses 32-bit capabilities (legacy support in use)
[  117.725801][ T7172] loop2: detected capacity change from 0 to 32768
[  117.730474][ T7172] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.565 (7172)
[  117.745424][ T7172] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  117.755621][ T7172] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  117.797237][ T7172] BTRFS info (device loop2): enabling ssd optimizations
[  117.799964][ T6130] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  117.804564][ T7172] BTRFS info (device loop2): enabling free space tree
[  117.875242][ T6044] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  117.942531][ T6045] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  117.952771][ T6130] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  117.956161][ T6130] usb 2-1: config 0 has no interface number 0
[  117.966897][ T6130] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  117.972009][ T6130] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.980011][ T6130] usb 2-1: config 0 descriptor??
[  117.992084][ T6130] cp210x 2-1:0.1: cp210x converter detected
[  118.209387][   T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  118.292387][ T7220] loop2: detected capacity change from 0 to 512
[  118.301881][ T7220] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13
[  118.305385][ T7220] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #13: comm syz.2.580: iget: bad i_size value: 12154757448730
[  118.314132][ T7220] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.580: couldn't read orphan inode 13 (err -117)
[  118.320439][ T7220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.333256][ T7220] fscrypt (loop2, inode 2): Error -61 getting encryption context
[  118.363536][ T6045] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.378891][   T24] usb 1-1: config 0 has an invalid interface number: 237 but max is 0
[  118.382195][   T24] usb 1-1: config 0 has no interface number 0
[  118.384976][   T24] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  118.389258][   T24] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  118.392880][   T24] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  118.395060][ T6130] cp210x 2-1:0.1: failed to get vendor val 0x000e size 3: -32
[  118.397067][   T24] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  118.420606][   T24] usb 1-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6
[  118.424143][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.427107][   T24] usb 1-1: Product: syz
[  118.429185][   T24] usb 1-1: Manufacturer: syz
[  118.431082][   T24] usb 1-1: SerialNumber: syz
[  118.441211][   T24] usb 1-1: config 0 descriptor??
[  118.453578][   T24] xpad 1-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  118.459730][   T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.237/input/input7
[  118.606110][ T6130] usb 2-1: cp210x converter now attached to ttyUSB0
[  118.613804][ T7231] capability: warning: `syz.2.584' uses deprecated v2 capabilities in a way that may be insecure
[  118.656341][ T6130] usb 1-1: USB disconnect, device number 8
[  118.806851][   T10] usb 2-1: USB disconnect, device number 8
[  118.815996][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  118.825700][   T10] cp210x 2-1:0.1: device disconnected
[  118.891140][ T7240] loop2: detected capacity change from 0 to 1024
[  118.915962][ T7240] hfsplus: unable to load nls mapping ""
[  119.465958][ T7253] loop1: detected capacity change from 0 to 4096
[  119.470506][ T7253] ntfs3(loop1): ino=0, mi_enum_attr
[  119.472833][ T7253] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  119.477631][ T7253] ntfs3(loop1): mft corrupted
[  119.481750][ T7253] ntfs3(loop1): Failed to load $MFT.
[  121.179734][ T7301] random: crng reseeded on system resumption
[  121.225571][ T7305] loop2: detected capacity change from 0 to 512
[  121.238792][ T7305] EXT4-fs: Ignoring removed nomblk_io_submit option
[  121.256593][ T7305] EXT4-fs: Mount option(s) incompatible with ext3
[  121.271839][ T7305] gfs2: Unexpected value for 'barrier'
[  121.399772][ T7313] orangefs_devreq_write_iter: total:0: must be at least:8240:
[  121.507591][ T7332] loop1: detected capacity change from 0 to 128
[  121.539991][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.629'.
[  121.581440][ T7335] loop2: detected capacity change from 0 to 256
[  121.737921][ T6130] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  122.457685][ T6130] usb 1-1: Using ep0 maxpacket: 8
[  122.589188][ T6130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  122.592752][ T6130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.596328][ T6130] usb 1-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00
[  122.600319][ T6130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.608112][ T6130] usb 1-1: config 0 descriptor??
[  123.225058][ T6130] cherry 0003:046A:0027.0004: fixing up Cherry Cymotion report descriptor
[  123.229626][ T6130] hid_parser_main: 7 callbacks suppressed
[  123.229643][ T6130] cherry 0003:046A:0027.0004: unknown main item tag 0x0
[  123.234800][ T6130] cherry 0003:046A:0027.0004: unknown main item tag 0x0
[  123.237807][ T6130] cherry 0003:046A:0027.0004: unknown main item tag 0x0
[  123.240105][ T6130] cherry 0003:046A:0027.0004: unknown main item tag 0x6
[  123.242734][ T6130] cherry 0003:046A:0027.0004: unknown main item tag 0x5
[  123.245173][ T6130] cherry 0003:046A:0027.0004: unknown main item tag 0x4
[  123.247564][ T6130] cherry 0003:046A:0027.0004: unknown main item tag 0x0
[  123.250335][ T6130] cherry 0003:046A:0027.0004: unknown main item tag 0x0
[  123.255876][ T6130] cherry 0003:046A:0027.0004: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.0-1/input0
[  123.291069][   T24] usb 1-1: USB disconnect, device number 9
[  123.357440][ T7379] loop1: detected capacity change from 0 to 512
[  123.366847][ T7379] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  123.370758][ T7379] EXT4-fs (loop1): orphan cleanup on readonly fs
[  123.373988][ T7379] Quota error (device loop1): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6).
[  123.380798][ T7379] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  123.388659][ T7379] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  123.395334][ T7379] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.649: bg 0: block 40: padding at end of block bitmap is not set
[  123.401952][ T7379] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  123.406091][ T7379] EXT4-fs (loop1): 1 truncate cleaned up
[  123.409803][ T7379] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  123.443328][ T6048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.800764][ T7393] loop2: detected capacity change from 0 to 1024
[  123.804334][ T7393] EXT4-fs: Ignoring removed nobh option
[  123.806576][ T7393] EXT4-fs: Ignoring removed bh option
[  123.829653][ T7393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.855245][   T33] audit: type=1800 audit(1757668536.763:20): pid=7393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.653" name="bus" dev="loop2" ino=18 res=0 errno=0
[  123.862375][ T7393] EXT4-fs (loop2): shut down requested (2)
[  123.933908][ T6045] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.010340][ T7402] loop2: detected capacity change from 0 to 1024
[  124.078852][ T7404] random: crng reseeded on system resumption
[  124.695409][ T7429] loop2: detected capacity change from 0 to 512
[  124.707678][ T7429] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  124.712593][ T7429] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  124.720681][ T7429] EXT4-fs (loop2): 1 truncate cleaned up
[  124.745607][ T7429] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.121575][ T6045] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.725881][ T7444] 9pnet: bogus RWRITE count (2 > 1)
[  126.253697][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.686'.
[  126.579069][ T7487] loop2: detected capacity change from 0 to 32768
[  126.675893][ T7487] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[  126.675908][ T7487]   allowing incompatible features above 0.0: (unknown version)
[  126.675913][ T7487]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  126.694958][ T7487] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  126.697423][ T6028] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  126.698399][ T7487] bcachefs (loop2): initializing new filesystem
[  126.713064][ T7487] bcachefs (loop2): going read-write
[  126.733624][ T7487] bcachefs (loop2): marking superblocks
[  126.765876][ T7487] bcachefs (loop2): initializing freespace
[  126.775639][ T7487] bcachefs (loop2): done initializing freespace
[  126.789210][ T7487] bcachefs (loop2): reading snapshots table
[  126.791104][ T7487] bcachefs (loop2): reading snapshots done
[  126.835869][ T7487] bcachefs (loop2): done starting filesystem
[  126.851790][ T6028] usb 2-1: Using ep0 maxpacket: 8
[  126.862358][ T6028] usb 2-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=31.1f
[  126.866854][ T6028] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.870152][ T6028] usb 2-1: Product: syz
[  126.871889][ T6028] usb 2-1: Manufacturer: syz
[  126.873767][ T6028] usb 2-1: SerialNumber: syz
[  126.878671][ T6028] usb 2-1: config 0 descriptor??
[  126.885561][ T6028]  (null): radio-mr800 - initialization failed
[  126.894680][ T6028] radio-mr800 2-1:0.0: probe with driver radio-mr800 failed with error -22
[  126.903330][ T6028] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  126.906761][ T7487] syz.2.693 (7487) used greatest stack depth: 16200 bytes left
[  126.934409][ T6045] bcachefs (loop2): shutting down
[  126.936778][ T6045] bcachefs (loop2): going read-only
[  126.942127][ T6045] bcachefs (loop2): finished waiting for writes to stop
[  126.951591][ T6045] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[  126.999314][ T6045] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  127.008669][ T6045] bcachefs (loop2): clean shutdown complete, journal seq 4
[  127.012886][ T6045] bcachefs (loop2): marking filesystem clean
[  127.040855][ T6045] bcachefs (loop2): shutdown complete
[  127.087435][   T24] usb 2-1: USB disconnect, device number 9
[  127.090310][ T7521] netlink: 'syz.0.704': attribute type 21 has an invalid length.
[  127.093667][ T7521] netlink: 'syz.0.704': attribute type 4 has an invalid length.
[  127.367105][ T6028] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  127.521472][ T6028] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  127.524686][ T6028] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  127.528401][ T6028] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  127.532010][ T6028] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  127.537951][ T6028] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  127.541829][ T6028] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.544303][ T6028] usb 1-1: Product: syz
[  127.545594][ T6028] usb 1-1: Manufacturer: syz
[  127.547126][ T6028] usb 1-1: SerialNumber: syz
[  127.550656][ T6028] usb 1-1: config 0 descriptor??
[  127.711968][ T7529] loop1: detected capacity change from 0 to 16
[  127.715681][ T7529] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  127.770965][ T6028] adutux 1-1:0.0: ADU208  now attached to /dev/usb/adutux0
[  127.776721][ T6028] usb 1-1: USB disconnect, device number 10
[  127.802380][ T7531] tipc: Started in network mode
[  127.804470][ T7531] tipc: Node identity 7efbbd906e55, cluster identity 4711
[  127.811013][ T7531] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.814394][ T7531] syzkaller0: entered promiscuous mode
[  127.816597][ T7531] syzkaller0: entered allmulticast mode
[  127.839293][ T7531] tipc: Resetting bearer <eth:syzkaller0>
[  127.845472][ T7530] tipc: Resetting bearer <eth:syzkaller0>
[  127.877487][ T7530] tipc: Disabling bearer <eth:syzkaller0>
[  128.274570][ T7544] netlink: 36 bytes leftover after parsing attributes in process `syz.1.714'.
[  128.280227][ T7544] netlink: 16 bytes leftover after parsing attributes in process `syz.1.714'.
[  128.526942][   T47] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  128.749590][   T47] usb 3-1: config 0 has an invalid interface number: 122 but max is 0
[  128.753099][   T47] usb 3-1: config 0 has no interface number 0
[  128.771512][   T47] usb 3-1: config 0 interface 122 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  128.826330][   T47] usb 3-1: New USB device found, idVendor=0f11, idProduct=1020, bcdDevice=90.16
[  128.838313][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.853658][   T47] usb 3-1: Product: syz
[  128.863489][   T47] usb 3-1: Manufacturer: syz
[  128.868355][   T47] usb 3-1: SerialNumber: syz
[  128.876045][   T47] usb 3-1: config 0 descriptor??
[  128.881376][ T7539] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  128.886221][   T47] ldusb 3-1:0.122: Interrupt in endpoint not found
[  129.227598][ T7562] netlink: 20 bytes leftover after parsing attributes in process `syz.2.701'.
[  129.230989][ T7562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.701'.
[  129.908539][ T7569] loop1: detected capacity change from 0 to 32768
[  129.942170][ T7569] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  130.013370][   T33] audit: type=1800 audit(1757668542.924:21): pid=7569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.722" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  130.942434][   T47] usb 3-1: USB disconnect, device number 6
[  131.010203][ T6048] ocfs2: Unmounting device (7,1) on (node local)
[  131.317352][ T7595] netlink: 'syz.1.731': attribute type 21 has an invalid length.
[  131.352798][ T7597] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.385934][ T7599] input: syz0 as /devices/virtual/input/input8
[  131.840664][ T7618] loop2: detected capacity change from 0 to 1024
[  131.873462][   T33] audit: type=1800 audit(1757668544.784:22): pid=7618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.741" name="file1" dev="loop2" ino=20 res=0 errno=0
[  132.452828][ T7626] syz.1.744 (7626): /proc/7625/oom_adj is deprecated, please use /proc/7625/oom_score_adj instead.
[  132.609437][ T7632] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.653744][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.656277][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.706814][ T7635] binder: 7633:7635 ioctl 40046205 0 returned -22
[  133.011375][ T7645] can0: slcan on ptm0.
[  133.077695][ T7644] can0 (unregistered): slcan off ptm0.
[  134.546623][   T47] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  134.925426][   T47] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  135.221226][ T7687] loop2: detected capacity change from 0 to 256
[  135.242100][ T7687] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d)
[  135.306968][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.307277][   T33] audit: type=1800 audit(1757668548.204:23): pid=7687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.770" name="file2" dev="loop2" ino=1048630 res=0 errno=0
[  135.322180][   T47] usb 2-1: config 0 descriptor??
[  135.328629][   T47] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  135.772048][   T47] gp8psk: usb in 137 operation failed.
[  135.774572][   T47] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  135.783075][   T47] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  135.792184][   T47] usb 2-1: USB disconnect, device number 10
[  135.826886][   T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  135.976079][   T24] usb 3-1: Using ep0 maxpacket: 8
[  135.984881][   T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  135.992251][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.000099][   T24] usb 3-1: Product: syz
[  136.003924][   T24] usb 3-1: Manufacturer: syz
[  136.007885][   T24] usb 3-1: SerialNumber: syz
[  136.013752][   T24] usb 3-1: config 0 descriptor??
[  136.237121][   T24] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  136.647552][   T24] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  136.652509][   T24] usb 3-1: USB disconnect, device number 7
[  136.711241][ T7715] loop1: detected capacity change from 0 to 4096
[  136.738827][ T7715] ntfs3(loop1): ino=b, mi_enum_attr
[  136.740666][ T7715] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  136.744326][ T7715] ntfs3(loop1): Failed to load $Extend (-22).
[  136.756229][ T7715] ntfs3(loop1): Failed to initialize $Extend.
[  136.835781][ T7715] ntfs3(loop1): try to read out of volume at offset 0x3fffffc7000
[  136.840110][ T7715] ntfs3(loop1): ino=21, The size of extended attributes must not exceed 64KiB
[  137.014288][ T7721] loop1: detected capacity change from 0 to 1764
[  137.529930][ T7742] syz.2.795 (7742): drop_caches: 4
[  137.748920][ T7753] netlink: 68 bytes leftover after parsing attributes in process `syz.0.800'.
[  137.829965][ T7759] ==================================================================
[  137.833024][ T7759] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  137.836446][ T7759] Read of size 2 at addr ffff888119e10142 by task syz.1.803/7759
[  137.840282][ T7759] 
[  137.841773][ T7759] CPU: 1 UID: 0 PID: 7759 Comm: syz.1.803 Not tainted syzkaller #0 PREEMPT(full) 
[  137.841791][ T7759] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  137.841802][ T7759] Call Trace:
[  137.841842][ T7759]  <TASK>
[  137.841851][ T7759]  dump_stack_lvl+0x189/0x250
[  137.841872][ T7759]  ? __kasan_check_byte+0x12/0x40
[  137.841895][ T7759]  ? __pfx_dump_stack_lvl+0x10/0x10
[  137.841909][ T7759]  ? lock_release+0x4b/0x3e0
[  137.841929][ T7759]  ? __virt_addr_valid+0x4a5/0x5c0
[  137.841944][ T7759]  print_report+0xca/0x240
[  137.841956][ T7759]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  137.841971][ T7759]  kasan_report+0x118/0x150
[  137.841989][ T7759]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  137.842006][ T7759]  __xfrm_state_lookup+0x6ad/0x8d0
[  137.842024][ T7759]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  137.842041][ T7759]  ? xfrm_state_lookup+0x45/0x1e0
[  137.842058][ T7759]  xfrm_state_lookup+0x11e/0x1e0
[  137.842079][ T7759]  vti6_err+0x2f7/0x520
[  137.842099][ T7759]  xfrm6_ipcomp_err+0xc1/0x210
[  137.842117][ T7759]  icmpv6_notify+0x391/0x7e0
[  137.842134][ T7759]  ? __pfx_xfrm6_ipcomp_err+0x10/0x10
[  137.842151][ T7759]  ? __pfx_icmpv6_notify+0x10/0x10
[  137.842169][ T7759]  icmpv6_rcv+0x1352/0x1c80
[  137.842186][ T7759]  ? ipv6_chk_mcast_addr+0x77f/0x860
[  137.842205][ T7759]  ? __pfx_icmpv6_rcv+0x10/0x10
[  137.842220][ T7759]  ip6_protocol_deliver_rcu+0xe0b/0x15c0
[  137.842241][ T7759]  ip6_input_finish+0x191/0x370
[  137.842256][ T7759]  NF_HOOK+0x30c/0x3a0
[  137.842269][ T7759]  ? __pfx_ip6_input_finish+0x10/0x10
[  137.842282][ T7759]  ? NF_HOOK+0x9a/0x3a0
[  137.842293][ T7759]  ? __pfx_NF_HOOK+0x10/0x10
[  137.842305][ T7759]  ? __pfx_ip6_input_finish+0x10/0x10
[  137.842318][ T7759]  ip6_input+0x16a/0x270
[  137.842328][ T7759]  ? ip6_input+0x23/0x270
[  137.842338][ T7759]  ip6_mc_input+0x5c8/0xaf0
[  137.842352][ T7759]  ? __pfx_ip6_mc_input+0x10/0x10
[  137.842365][ T7759]  ? skb_dst+0x71/0xd0
[  137.842390][ T7759]  ? ip6_rcv_finish+0x29e/0x2e0
[  137.842405][ T7759]  NF_HOOK+0x30c/0x3a0
[  137.842417][ T7759]  ? skb_orphan+0x4f/0xd0
[  137.842430][ T7759]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  137.842443][ T7759]  ? NF_HOOK+0x9a/0x3a0
[  137.842453][ T7759]  ? __pfx_NF_HOOK+0x10/0x10
[  137.842467][ T7759]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  137.842482][ T7759]  __netif_receive_skb+0xd3/0x380
[  137.842504][ T7759]  ? netif_receive_skb+0x115/0x790
[  137.842522][ T7759]  netif_receive_skb+0x1cb/0x790
[  137.842540][ T7759]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  137.842555][ T7759]  ? __pfx_netif_receive_skb+0x10/0x10
[  137.842575][ T7759]  ? tun_rx_batched+0x160/0x730
[  137.842589][ T7759]  tun_rx_batched+0x1b9/0x730
[  137.842603][ T7759]  ? __lock_acquire+0xab9/0xd20
[  137.842623][ T7759]  ? __pfx_tun_rx_batched+0x10/0x10
[  137.842640][ T7759]  ? tun_get_user+0x266c/0x3e20
[  137.842661][ T7759]  tun_get_user+0x2aa2/0x3e20
[  137.842680][ T7759]  ? tun_get_user+0x6f6/0x3e20
[  137.842694][ T7759]  ? tun_get_user+0x266c/0x3e20
[  137.842708][ T7759]  ? aa_file_perm+0x44d/0x1550
[  137.842722][ T7759]  ? __pfx_tun_get_user+0x10/0x10
[  137.842740][ T7759]  ? page_table_check_set+0x18d/0x730
[  137.842762][ T7759]  ? ref_tracker_alloc+0x318/0x460
[  137.842773][ T7759]  ? __lock_acquire+0xab9/0xd20
[  137.842799][ T7759]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  137.842851][ T7759]  ? tun_get+0x1c/0x2f0
[  137.842868][ T7759]  ? tun_get+0x1c/0x2f0
[  137.842882][ T7759]  ? tun_get+0x1c/0x2f0
[  137.842898][ T7759]  tun_chr_write_iter+0x113/0x200
[  137.842913][ T7759]  vfs_write+0x5c9/0xb30
[  137.842933][ T7759]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  137.842947][ T7759]  ? __pfx_vfs_write+0x10/0x10
[  137.842965][ T7759]  ? __fget_files+0x2a/0x420
[  137.842980][ T7759]  ksys_write+0x145/0x250
[  137.842998][ T7759]  ? __pfx_ksys_write+0x10/0x10
[  137.843017][ T7759]  ? do_syscall_64+0xbe/0x3b0
[  137.843033][ T7759]  do_syscall_64+0xfa/0x3b0
[  137.843046][ T7759]  ? lockdep_hardirqs_on+0x9c/0x150
[  137.843059][ T7759]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.843074][ T7759]  ? exc_page_fault+0x9f/0xf0
[  137.843087][ T7759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.843099][ T7759] RIP: 0033:0x7efc48f8d65f
[  137.843113][ T7759] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  137.843126][ T7759] RSP: 002b:00007efc49d49000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  137.843143][ T7759] RAX: ffffffffffffffda RBX: 00007efc491d5fa0 RCX: 00007efc48f8d65f
[  137.843154][ T7759] RDX: 000000000000006e RSI: 0000200000001440 RDI: 00000000000000c8
[  137.843163][ T7759] RBP: 00007efc49011e19 R08: 0000000000000000 R09: 0000000000000000
[  137.843171][ T7759] R10: 000000000000006e R11: 0000000000000293 R12: 0000000000000000
[  137.843179][ T7759] R13: 00007efc491d6038 R14: 00007efc491d5fa0 R15: 00007ffc9b06d8d8
[  137.843195][ T7759]  </TASK>
[  137.843200][ T7759] 
[  138.012867][   T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  138.015231][ T7759] Allocated by task 6389:
[  138.034243][ T7759]  kasan_save_track+0x3e/0x80
[  138.036124][ T7759]  __kasan_slab_alloc+0x6c/0x80
[  138.038129][ T7759]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  138.040276][ T7759]  xfrm_state_alloc+0x24/0x2f0
[  138.042135][ T7759]  __find_acq_core+0x8a7/0x1c00
[  138.044059][ T7759]  xfrm_find_acq+0x78/0xa0
[  138.045842][ T7759]  xfrm_alloc_userspi+0x6b3/0xc90
[  138.047818][ T7759]  xfrm_user_rcv_msg+0x7a3/0xab0
[  138.049758][ T7759]  netlink_rcv_skb+0x208/0x470
[  138.051655][ T7759]  xfrm_netlink_rcv+0x79/0x90
[  138.053546][ T7759]  netlink_unicast+0x82f/0x9e0
[  138.055466][ T7759]  netlink_sendmsg+0x805/0xb30
[  138.057356][ T7759]  __sock_sendmsg+0x21c/0x270
[  138.059247][ T7759]  ____sys_sendmsg+0x505/0x830
[  138.061079][ T7759]  ___sys_sendmsg+0x21f/0x2a0
[  138.063036][ T7759]  __x64_sys_sendmsg+0x19b/0x260
[  138.065190][ T7759]  do_syscall_64+0xfa/0x3b0
[  138.066962][ T7759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.069193][ T7759] 
[  138.070137][ T7759] Freed by task 24:
[  138.071591][ T7759]  kasan_save_track+0x3e/0x80
[  138.073441][ T7759]  kasan_save_free_info+0x46/0x50
[  138.075437][ T7759]  __kasan_slab_free+0x5b/0x80
[  138.077380][ T7759]  kmem_cache_free+0x18f/0x400
[  138.079079][ T7759]  xfrm_state_gc_task+0x52d/0x6b0
[  138.080992][ T7759]  process_scheduled_works+0xae1/0x17b0
[  138.083202][ T7759]  worker_thread+0x8a0/0xda0
[  138.085036][ T7759]  kthread+0x711/0x8a0
[  138.086668][ T7759]  ret_from_fork+0x3fc/0x770
[  138.088360][ T7759]  ret_from_fork_asm+0x1a/0x30
[  138.090062][ T7759] 
[  138.091018][ T7759] The buggy address belongs to the object at ffff888119e10000
[  138.091018][ T7759]  which belongs to the cache xfrm_state of size 928
[  138.096338][ T7759] The buggy address is located 322 bytes inside of
[  138.096338][ T7759]  freed 928-byte region [ffff888119e10000, ffff888119e103a0)
[  138.101600][ T7759] 
[  138.102581][ T7759] The buggy address belongs to the physical page:
[  138.105184][ T7759] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888119e11200 pfn:0x119e10
[  138.109201][ T7759] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  138.112607][ T7759] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  138.115538][ T7759] page_type: f5(slab)
[  138.117124][ T7759] raw: 057ff00000000040 ffff88801dba83c0 dead000000000122 0000000000000000
[  138.120267][ T7759] raw: ffff888119e11200 00000000800e0009 00000000f5000000 0000000000000000
[  138.123393][ T7759] head: 057ff00000000040 ffff88801dba83c0 dead000000000122 0000000000000000
[  138.126320][ T7759] head: ffff888119e11200 00000000800e0009 00000000f5000000 0000000000000000
[  138.129292][ T7759] head: 057ff00000000002 ffffea0004678401 00000000ffffffff 00000000ffffffff
[  138.132714][ T7759] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  138.136081][ T7759] page dumped because: kasan: bad access detected
[  138.137993][ T7759] page_owner tracks the page as allocated
[  138.139614][ T7759] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6389, tgid 6388 (syz.1.229), ts 86959083044, free_ts 86791683291
[  138.145863][ T7759]  post_alloc_hook+0x240/0x2a0
[  138.147716][ T7759]  get_page_from_freelist+0x21e4/0x22c0
[  138.149744][ T7759]  __alloc_frozen_pages_noprof+0x181/0x370
[  138.151848][ T7759]  alloc_pages_mpol+0x232/0x4a0
[  138.153448][ T7759]  allocate_slab+0x8a/0x370
[  138.155163][ T7759]  ___slab_alloc+0xbeb/0x1420
[  138.157013][ T7759]  kmem_cache_alloc_noprof+0x283/0x3c0
[  138.159113][ T7759]  xfrm_state_alloc+0x24/0x2f0
[  138.161024][ T7759]  __find_acq_core+0x8a7/0x1c00
[  138.162972][ T7759]  xfrm_find_acq+0x78/0xa0
[  138.164710][ T7759]  xfrm_alloc_userspi+0x6b3/0xc90
[  138.166696][ T7759]  xfrm_user_rcv_msg+0x7a3/0xab0
[  138.168667][ T7759]  netlink_rcv_skb+0x208/0x470
[  138.170369][ T7759]  xfrm_netlink_rcv+0x79/0x90
[  138.172022][ T7759]  netlink_unicast+0x82f/0x9e0
[  138.173712][ T7759]  netlink_sendmsg+0x805/0xb30
[  138.175294][ T7759] page last free pid 6074 tgid 6074 stack trace:
[  138.177326][ T7759]  __free_frozen_pages+0xbc4/0xd30
[  138.179109][ T7759]  free_large_kmalloc+0x13a/0x1f0
[  138.180998][ T7759]  devres_release_all+0x1a2/0x230
[  138.182909][ T7759]  device_release_driver_internal+0x55b/0x800
[  138.185106][ T7759]  bus_remove_device+0x34d/0x410
[  138.186880][ T7759]  device_del+0x511/0x8e0
[  138.188403][ T7759]  usb_disable_device+0x3e9/0x8a0
[  138.190271][ T7759]  usb_disconnect+0x330/0x950
[  138.192072][ T7759]  hub_event+0x1cf5/0x4a20
[  138.193794][ T7759]  process_scheduled_works+0xae1/0x17b0
[  138.195998][ T7759]  worker_thread+0x8a0/0xda0
[  138.197797][ T7759]  kthread+0x711/0x8a0
[  138.199382][ T7759]  ret_from_fork+0x3fc/0x770
[  138.201217][ T7759]  ret_from_fork_asm+0x1a/0x30
[  138.203120][ T7759] 
[  138.204052][ T7759] Memory state around the buggy address:
[  138.206253][ T7759]  ffff888119e10000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  138.209207][ T7759]  ffff888119e10080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  138.212116][ T7759] >ffff888119e10100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  138.214677][ T7759]                                            ^
[  138.216714][ T7759]  ffff888119e10180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  138.219808][ T7759]  ffff888119e10200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  138.222995][ T7759] ==================================================================
[  138.225905][ T7759] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  138.228206][ T7759] CPU: 1 UID: 0 PID: 7759 Comm: syz.1.803 Not tainted syzkaller #0 PREEMPT(full) 
[  138.230893][ T7759] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  138.234258][ T7759] Call Trace:
[  138.235434][ T7759]  <TASK>
[  138.236535][ T7759]  dump_stack_lvl+0x99/0x250
[  138.238116][ T7759]  ? __asan_memcpy+0x40/0x70
[  138.239736][ T7759]  ? __pfx_dump_stack_lvl+0x10/0x10
[  138.241627][ T7759]  ? __pfx__printk+0x10/0x10
[  138.243237][ T7759]  vpanic+0x281/0x750
[  138.244555][ T7759]  ? __pfx_vpanic+0x10/0x10
[  138.246157][ T7759]  ? irqentry_exit+0x74/0x90
[  138.247919][ T7759]  panic+0xb9/0xc0
[  138.249419][ T7759]  ? __pfx_panic+0x10/0x10
[  138.250911][ T7759]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  138.253048][ T7759]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  138.255315][ T7759]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  138.257303][ T7759]  check_panic_on_warn+0x89/0xb0
[  138.258938][ T7759]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  138.260871][ T7759]  end_report+0x78/0x160
[  138.262175][ T7759]  kasan_report+0x129/0x150
[  138.263592][ T7759]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  138.265609][ T7759]  __xfrm_state_lookup+0x6ad/0x8d0
[  138.267357][ T7759]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  138.269231][ T7759]  ? xfrm_state_lookup+0x45/0x1e0
[  138.270843][ T7759]  xfrm_state_lookup+0x11e/0x1e0
[  138.272366][ T7759]  vti6_err+0x2f7/0x520
[  138.273853][ T7759]  xfrm6_ipcomp_err+0xc1/0x210
[  138.275707][ T7759]  icmpv6_notify+0x391/0x7e0
[  138.277197][ T7759]  ? __pfx_xfrm6_ipcomp_err+0x10/0x10
[  138.278887][ T7759]  ? __pfx_icmpv6_notify+0x10/0x10
[  138.280461][ T7759]  icmpv6_rcv+0x1352/0x1c80
[  138.281843][ T7759]  ? ipv6_chk_mcast_addr+0x77f/0x860
[  138.283374][ T7759]  ? __pfx_icmpv6_rcv+0x10/0x10
[  138.284899][ T7759]  ip6_protocol_deliver_rcu+0xe0b/0x15c0
[  138.286628][ T7759]  ip6_input_finish+0x191/0x370
[  138.288165][ T7759]  NF_HOOK+0x30c/0x3a0
[  138.289489][ T7759]  ? __pfx_ip6_input_finish+0x10/0x10
[  138.291520][ T7759]  ? NF_HOOK+0x9a/0x3a0
[  138.293030][ T7759]  ? __pfx_NF_HOOK+0x10/0x10
[  138.294903][ T7759]  ? __pfx_ip6_input_finish+0x10/0x10
[  138.296968][ T7759]  ip6_input+0x16a/0x270
[  138.298382][ T7759]  ? ip6_input+0x23/0x270
[  138.299827][ T7759]  ip6_mc_input+0x5c8/0xaf0
[  138.301342][ T7759]  ? __pfx_ip6_mc_input+0x10/0x10
[  138.302988][ T7759]  ? skb_dst+0x71/0xd0
[  138.304425][ T7759]  ? ip6_rcv_finish+0x29e/0x2e0
[  138.306013][ T7759]  NF_HOOK+0x30c/0x3a0
[  138.307308][ T7759]  ? skb_orphan+0x4f/0xd0
[  138.309013][ T7759]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  138.311180][ T7759]  ? NF_HOOK+0x9a/0x3a0
[  138.312872][ T7759]  ? __pfx_NF_HOOK+0x10/0x10
[  138.314739][ T7759]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  138.316811][ T7759]  __netif_receive_skb+0xd3/0x380
[  138.318815][ T7759]  ? netif_receive_skb+0x115/0x790
[  138.320818][ T7759]  netif_receive_skb+0x1cb/0x790
[  138.322459][ T7759]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  138.324597][ T7759]  ? __pfx_netif_receive_skb+0x10/0x10
[  138.326738][ T7759]  ? tun_rx_batched+0x160/0x730
[  138.328709][ T7759]  tun_rx_batched+0x1b9/0x730
[  138.330634][ T7759]  ? __lock_acquire+0xab9/0xd20
[  138.332596][ T7759]  ? __pfx_tun_rx_batched+0x10/0x10
[  138.334647][ T7759]  ? tun_get_user+0x266c/0x3e20
[  138.336551][ T7759]  tun_get_user+0x2aa2/0x3e20
[  138.338401][ T7759]  ? tun_get_user+0x6f6/0x3e20
[  138.340202][ T7759]  ? tun_get_user+0x266c/0x3e20
[  138.342061][ T7759]  ? aa_file_perm+0x44d/0x1550
[  138.343900][ T7759]  ? __pfx_tun_get_user+0x10/0x10
[  138.345661][ T7759]  ? page_table_check_set+0x18d/0x730
[  138.347456][ T7759]  ? ref_tracker_alloc+0x318/0x460
[  138.349018][ T7759]  ? __lock_acquire+0xab9/0xd20
[  138.350559][ T7759]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  138.352425][ T7759]  ? tun_get+0x1c/0x2f0
[  138.353668][ T7759]  ? tun_get+0x1c/0x2f0
[  138.355194][ T7759]  ? tun_get+0x1c/0x2f0
[  138.356780][ T7759]  tun_chr_write_iter+0x113/0x200
[  138.358705][ T7759]  vfs_write+0x5c9/0xb30
[  138.360426][ T7759]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  138.362632][ T7759]  ? __pfx_vfs_write+0x10/0x10
[  138.364503][ T7759]  ? __fget_files+0x2a/0x420
[  138.366330][ T7759]  ksys_write+0x145/0x250
[  138.367955][ T7759]  ? __pfx_ksys_write+0x10/0x10
[  138.369838][ T7759]  ? do_syscall_64+0xbe/0x3b0
[  138.371434][ T7759]  do_syscall_64+0xfa/0x3b0
[  138.373036][ T7759]  ? lockdep_hardirqs_on+0x9c/0x150
[  138.375103][ T7759]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.377391][ T7759]  ? exc_page_fault+0x9f/0xf0
[  138.379207][ T7759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.381403][ T7759] RIP: 0033:0x7efc48f8d65f
[  138.382811][ T7759] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  138.388992][ T7759] RSP: 002b:00007efc49d49000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  138.391478][ T7759] RAX: ffffffffffffffda RBX: 00007efc491d5fa0 RCX: 00007efc48f8d65f
[  138.393934][ T7759] RDX: 000000000000006e RSI: 0000200000001440 RDI: 00000000000000c8
[  138.396417][ T7759] RBP: 00007efc49011e19 R08: 0000000000000000 R09: 0000000000000000
[  138.399371][ T7759] R10: 000000000000006e R11: 0000000000000293 R12: 0000000000000000
[  138.402131][ T7759] R13: 00007efc491d6038 R14: 00007efc491d5fa0 R15: 00007ffc9b06d8d8
[  138.404626][ T7759]  </TASK>
[  138.406308][ T7759] Kernel Offset: disabled
[  138.407664][ T7759] Rebooting in 86400 seconds..

VM DIAGNOSIS:
08:32:52  Registers:
info registers vcpu 0

CPU#0
RAX=00000000ffffff01 RBX=ffff88803593e3f8 RCX=ffffffff819e02a2 RDX=0000000000000001
RSI=0000000000000004 RDI=ffffc90006a27680 RBP=ffffc90006a276f8 RSP=ffffc90006a27640
R8 =ffff88803593e3fb R9 =1ffff11006b27c7f R10=dffffc0000000000 R11=ffffed1006b27c80
R12=ffff88803593e408 R13=ffff88803593e400 R14=1ffff11006b27c81 R15=1ffff11006b27c80
RIP=ffffffff819e02ac RFL=00000256 [---ZAP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa8348936c0 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa82a9bd000 CR3=000000003606a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=00007fa8348925a0 00007fa834892580
XMM02=00007fa8348926e0 00007fa834892560 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00007fa8348925a0 XMM05=0000000000000000 00007fa8348926e0
XMM06=00007fa8348926e0 00007fa834892560 XMM07=00007fa8348925a0 00007fa834892580
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fa833a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000005b RBX=000000000000005b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001741 RDI=0000000000001742 RBP=00000000000003f8 RSP=ffffc90006986750
R8 =ffff888020768237 R9 =1ffff110040ed046 R10=dffffc0000000000 R11=ffffffff854f6e40
R12=dffffc0000000000 R13=ffffffff99b008c1 R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f6ebc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007efc49d496c0 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007efc49d48fc8 CR3=0000000110650000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007efc491a7498 00007efc491a7470 XMM03=00007efc491a74a8 00007efc491a74a0
XMM04=00007efc49d0d100 00007efc491a7460 XMM05=00007efc491a7478 00007efc491a74c0
XMM06=00007efc491a74b8 00007efc491a74b0 XMM07=00007efc491a74a8 00007efc491a74a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007efc49012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
