last executing test programs:

10m11.054385212s ago: executing program 0 (id=96):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
close(r0)

10m10.702567851s ago: executing program 0 (id=104):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1}, 0x6e)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x4f)
r2 = socket$netlink(0x10, 0x3, 0x4)
write(r2, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29)

10m10.593757579s ago: executing program 0 (id=107):
r0 = syz_open_dev$vbi(&(0x7f0000000200), 0x1, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000001440)=@multiplanar_overlay={0x6, 0xe, 0x4, 0x2000, 0x0, {}, {0x6, 0x2, 0x9, 0x8, 0x9, 0x6, "dc128bfc"}, 0x0, 0x3, {0x0}, 0x7})

10m10.354779263s ago: executing program 0 (id=112):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1000811, &(0x7f0000000540)=ANY=[@ANYBLOB='keep_last_dots,dmask=00000000000000000000104,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=koi8-u,fmask=00000000000000000000005,discard,allow_utime=00000000000000000000002,iocharset=macceltic,allow_utime=00000000000000000000004,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c857466382c6f626a5f6c6f775f4ad7696d652c666f00"/34, @ANYRESDEC=0x0, @ANYBLOB=',dont_hash,dont_appraise,smackfsroot=fowner<,\x00'], 0x1, 0x1524, &(0x7f0000002280)="$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")
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)

10m10.218674508s ago: executing program 0 (id=118):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0x1, @pix_mp={0xfffffffc, 0x0, 0x34325842, 0x4, 0x2, [{}, {0x277c, 0x4}, {}, {}, {}, {0xd360}, {0x0, 0xfffffffd}, {0x0, 0x80000}], 0x10}})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000002c0)={0x282b, 0x1, 0x0, "eee98fb006178749cb4dfd9300009b6b7bd152f35ed730fc700000cb4f1891e2", 0xf6c1a1f})

10m8.599426981s ago: executing program 0 (id=138):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x200}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000240)={0xa, 0x4e22, 0x2, @loopback={0x60}, 0x7ff}, 0x1c, 0x0}}], 0x2, 0x0)

10m8.379667893s ago: executing program 32 (id=138):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x200}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000240)={0xa, 0x4e22, 0x2, @loopback={0x60}, 0x7ff}, 0x1c, 0x0}}], 0x2, 0x0)

8m46.222580022s ago: executing program 2 (id=1195):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x40, &(0x7f0000000140)={0x11, 0x19, r1, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, 0x14)

8m46.164727117s ago: executing program 2 (id=1197):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local, 0x1})
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000080)={@hyper})

8m46.11444698s ago: executing program 2 (id=1199):
syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x13f, &(0x7f0000000380)="$eJzs2r1Kw1AUB/BTCRS6uDsVErAO+dY6uAuCk09gaHPT4I23JIK0k/gCisP1EVzdRDcfoY+hb+AUSXurNndy0Yj/33IPOZeTEwhnOnYuMp8VNtHWxc3Ry1ousm4/3B0wn0W0cEBE3SqYleWtQ5rjj3yLiLQL5pM6e4k8fGQpjwO9BgAAAAAAAAAAAAAAAAAAAADAP2G+qqAzkuKOpTz2v2SLyfQk4jzOi+UTi9SODjEp9qr74Uq93huRNd/fSeX+ZZX3VvLWstLmSIpW/X3uWTZ2i8nUTrMoiZP4NAjCvrfteTuBO6/l1ita16onmpUPY32fyLpX+0RtIvIc/UJncRgbqbw6r1f//H4E3w6MZrTRlMBoRht6sK5+9qb08yeC+vygYTs0n6v54QwEH/7g/NAmGsAveQ8AAP//QEwwRA==")

8m46.052576057s ago: executing program 2 (id=1201):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x120584c, 0x0)

8m46.050794782s ago: executing program 2 (id=1203):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x167)

8m45.783971139s ago: executing program 2 (id=1207):
syz_usb_connect$cdc_ecm(0x3, 0xac, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a440000000010109029a000101000000090400000302020000052406000005240000000d240f01000000000000feffff042401"], 0x0)

8m45.647479701s ago: executing program 33 (id=1207):
syz_usb_connect$cdc_ecm(0x3, 0xac, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a440000000010109029a000101000000090400000302020000052406000005240000000d240f01000000000000feffff042401"], 0x0)

8m34.071130319s ago: executing program 3 (id=1307):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x700, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x89, 0x4, 0x0, @loopback, @local}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x20, 0x7, 0x7fffffd, 0x6, {{0x5, 0x4, 0x0, 0x16, 0xfffffffffffffe8b, 0xfffc, 0x0, 0x7f, 0x4, 0x0, @empty, @empty}}}})

8m34.014166594s ago: executing program 3 (id=1309):
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00')
fstat(r0, &(0x7f0000000000))

8m33.954551101s ago: executing program 3 (id=1310):
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00')
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, 0x0, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0)
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x234f, 0xb1e6, 0x234f, 0x0, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r4, r4, 0x0, 0x200000)
migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000340)=0x13e)

8m32.921608252s ago: executing program 3 (id=1322):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==")
syz_mount_image$fuse(0x0, &(0x7f0000000c00)='./bus\x00', 0xa00400, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

8m32.78192797s ago: executing program 3 (id=1325):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)

8m32.324444073s ago: executing program 3 (id=1326):
syz_usb_connect(0x0, 0x10e, &(0x7f0000000380)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e01000006240600011005240008000d240f04000000000000a0010606241a0000000c241b000000000000ff01000424020c90"], 0x0)

8m32.211017182s ago: executing program 34 (id=1326):
syz_usb_connect(0x0, 0x10e, &(0x7f0000000380)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e01000006240600011005240008000d240f04000000000000a0010606241a0000000c241b000000000000ff01000424020c90"], 0x0)

7m32.418424867s ago: executing program 5 (id=2077):
syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0)

7m32.299921377s ago: executing program 5 (id=2079):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000600)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0)
close(r0)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0)

7m32.249776976s ago: executing program 5 (id=2082):
r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_enable(r0, 0x0, 0x34)

7m32.19313181s ago: executing program 5 (id=2084):
mkdir(&(0x7f00000002c0)='./file0\x00', 0xad32e1886e33d2fb)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000480)={[{@utf8no}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@tz_utc}, {@uni_xlate}, {@fat=@check_normal}, {@shortname_mixed}, {@fat=@usefree}, {@fat=@discard}, {@shortname_mixed}, {@fat=@quiet}, {@utf8no}]}, 0x0, 0x29f, &(0x7f0000000580)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333c06, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002d40)={0x2020}, 0x2020)

7m32.093883256s ago: executing program 5 (id=2085):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x108}}, 0x0)

7m31.853129644s ago: executing program 5 (id=2089):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x60, 0x140, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {0x0, 0x2}, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa})

7m31.672723021s ago: executing program 35 (id=2089):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x60, 0x140, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {0x0, 0x2}, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa})

5m35.565188943s ago: executing program 4 (id=3429):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES16], 0x2c}, 0x1, 0x0, 0x0, 0x51}, 0x10)
r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd)
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x100)
r4 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f0000000480), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r3, r4}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}})

5m34.558855149s ago: executing program 4 (id=3440):
syz_emit_ethernet(0x5e, &(0x7f0000000340)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev={0xfe, 0x80, '\x00', 0x38}, @dev}}}}}}, 0x0)

5m34.550440824s ago: executing program 4 (id=3441):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_MASTER={0x8, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x44}}, 0x0)

5m34.481232476s ago: executing program 4 (id=3443):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x201000a, &(0x7f00000001c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0x6, 0xc36, &(0x7f0000002540)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000009, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

5m34.374610281s ago: executing program 4 (id=3444):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000200)={0x0, 0xb007}, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'wg2\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b031407e0ff640f0200475412f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

5m33.909019851s ago: executing program 4 (id=3448):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x401}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x9472)

5m33.400676764s ago: executing program 36 (id=3448):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x401}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x9472)

5m5.65054355s ago: executing program 6 (id=3772):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000140)={0x11, 0xc, r2, 0x1, 0x5, 0x6, @local}, 0x14)
bind$packet(r0, &(0x7f0000000180)={0x11, 0xc, r2, 0x1, 0x7, 0x6, @remote}, 0x14)

5m5.589600227s ago: executing program 6 (id=3773):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x1513, &(0x7f0000002d00)="$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")
truncate(&(0x7f0000000080)='./file1\x00', 0x637c)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}})

5m5.513461928s ago: executing program 6 (id=3774):
syz_emit_ethernet(0x12, &(0x7f00000024c0)={@broadcast, @empty, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@generic={0x88f7}}}, 0x0)

5m5.513202203s ago: executing program 6 (id=3775):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='mnt\x00')

5m5.349914697s ago: executing program 6 (id=3778):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}}}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0)

5m5.063012812s ago: executing program 6 (id=3784):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)={0xb, {{0xa, 0x0, 0x5, @mcast2, 0xffff}}, 0x1}, 0x90)

5m4.910835827s ago: executing program 37 (id=3784):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)={0xb, {{0xa, 0x0, 0x5, @mcast2, 0xffff}}, 0x1}, 0x90)

3m36.78077739s ago: executing program 8 (id=4864):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)

3m34.818800455s ago: executing program 8 (id=4877):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
pipe2$9p(&(0x7f0000000240), 0x800)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0006}]})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
setrlimit(0x4, &(0x7f0000000180)={0x80, 0xc7})
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
fsmount(0xffffffffffffffff, 0x0, 0x70)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x16, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33fa150835f751070073b4f5d80eb4881a5b98cb9f6d225d602392f8057f00000000000000fd27846feb525c2e8212000000006f00"}, 0xd8)
sendto$inet6(r3, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x208000, 0x0)
add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff)
write$cgroup_int(r4, &(0x7f0000000040)=0x1c9, 0x12)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBTYPE(r6, 0x4b48, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5)

3m33.575774034s ago: executing program 8 (id=4883):
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)

3m33.502643864s ago: executing program 8 (id=4884):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x700)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

3m33.438685084s ago: executing program 8 (id=4885):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0xffffffff, 0x0, 0x5, 0x7}, {0xfffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x40000000000000}]})

3m33.120392417s ago: executing program 8 (id=4888):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000040)={0x14, r1, 0x1, 0x400000}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x0)

3m32.9379726s ago: executing program 38 (id=4888):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000040)={0x14, r1, 0x1, 0x400000}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x0)

1.781731225s ago: executing program 1 (id=7609):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72})
ioctl$MON_IOCX_GETX(r0, 0x80089203, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)

1.779009891s ago: executing program 1 (id=7610):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25ff02000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x20000000)

1.710540416s ago: executing program 1 (id=7612):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x24, 0x3, @multicast2}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

1.646783002s ago: executing program 1 (id=7613):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000010401010000000000000000000004000500010001"], 0x1c}}, 0x0)
close(r0)

1.64599992s ago: executing program 1 (id=7615):
socket$inet6_sctp(0xa, 0x1, 0x84)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400})
syz_emit_vhci(0x0, 0xf8)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$key(0xffffffffffffffff, 0x0, 0x4000040)
bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
r4 = io_uring_setup(0x6001, &(0x7f0000000000)={0x0, 0xeec2, 0x1000, 0x2, 0x10a})
close_range(r4, r4, 0x0)
pipe2$9p(0x0, 0x80800)
vmsplice(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x176)
fcntl$setpipe(r4, 0x407, 0x8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)
socket$nl_generic(0x10, 0x3, 0x10)

1.391860175s ago: executing program 7 (id=7620):
r0 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0)

1.391566207s ago: executing program 7 (id=7621):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}]}], {0x14}}, 0x68}}, 0x600c0)

1.330959504s ago: executing program 7 (id=7622):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0xc00, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, 0x0)

1.327402202s ago: executing program 7 (id=7623):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = dup(r0)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r3=>0x0}, &(0x7f0000000000)=0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x85, &(0x7f0000000380)={r3, 0xfffffe99, "0200000000000000703fcd09bdf0b493a5dd3725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d5998641ff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597ffe6ac116b5f3c936e707dd68092103c268225b716a73e48c8c8f8ec21e15e7a5d6743243dfde8a664"}, &(0x7f00000004c0)=0x90)

1.222080844s ago: executing program 7 (id=7625):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xfcff, &(0x7f00000004c0)="e0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

1.087522949s ago: executing program 7 (id=7628):
syz_usb_connect(0x2, 0xb7, &(0x7f0000000400)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7262f2010203010902a500018104004f0904870609a97a37020a24010a0b06020102092403050703020496062404029cfe09050b00400080000007250181f7090009050d00000464040507250103"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

1.086452631s ago: executing program 9 (id=7629):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$setregs(0xd, r2, 0x2, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r2, 0x200, &(0x7f0000000080)={0x0, 0x30})

768.106792ms ago: executing program 1 (id=7630):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000180)="e7", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x2c, &(0x7f0000000240)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}]}, &(0x7f0000000280)=0x10)

170.550308ms ago: executing program 9 (id=7631):
futex(&(0x7f0000000540)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x2)

170.362729ms ago: executing program 9 (id=7632):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16"], 0x48)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300), &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/219, 0xdb}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

81.520397ms ago: executing program 9 (id=7633):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind(r0, &(0x7f0000000580)=@llc={0x1a, 0xffff, 0x1, 0x4, 0x4, 0x38, @random="cd43612bf6b9"}, 0x80)

81.244719ms ago: executing program 9 (id=7634):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88afa5b4, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x3c}}, 0x0)

0s ago: executing program 9 (id=7635):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180005ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

kernel console output (not intermixed with test programs):

er on device batadv0
[  476.785253][T17878] veth0_vlan: entered promiscuous mode
[  476.793876][T17878] veth1_vlan: entered promiscuous mode
[  476.823669][T17878] veth0_macvtap: entered promiscuous mode
[  476.829998][T17878] veth1_macvtap: entered promiscuous mode
[  476.845424][T17878] batman_adv: batadv0: Interface activated: batadv_slave_0
[  476.855940][T17878] batman_adv: batadv0: Interface activated: batadv_slave_1
[  476.864987][ T5952] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  476.872606][T10985] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  476.876246][T10985] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  476.879557][T10985] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  476.971867][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  476.977655][ T5143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  476.991056][ T5143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  477.012032][ T5143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  477.015323][ T5143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  477.423678][T18014] loop9: detected capacity change from 0 to 40427
[  477.444709][T18014] F2FS-fs (loop9): invalid crc value
[  477.497902][T18014] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  477.505982][T18014] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  477.748942][T18030] macvtap1: entered promiscuous mode
[  477.750583][T18030] vlan0: entered promiscuous mode
[  477.753039][T18030] macvtap1: entered allmulticast mode
[  477.754825][T18030] vlan0: entered allmulticast mode
[  477.756380][T18030] veth0_vlan: entered allmulticast mode
[  477.765578][T18030] macvtap2: entered promiscuous mode
[  477.767691][T18030] macvtap2: entered allmulticast mode
[  477.852201][T17970] Bluetooth: hci0: command 0x0406 tx timeout
[  477.854339][T17970] Bluetooth: hci2: command tx timeout
[  478.011798][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  478.021303][T18048] loop9: detected capacity change from 0 to 256
[  478.192319][T18047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  478.384841][T18052] loop9: detected capacity change from 0 to 32768
[  478.433362][T18052] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  478.464419][T18052] XFS (loop9): Ending clean mount
[  478.538173][T17878] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  479.051915][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  479.976825][ T5941] Bluetooth: hci2: command tx timeout
[  480.091861][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  481.131795][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  481.455089][T18150] loop9: detected capacity change from 0 to 2048
[  481.468960][T18150] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  482.023831][   T33] audit: type=1800 audit(1758860852.418:229): pid=18163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4986" name="nullb0" dev="tmpfs" ino=4060 res=0 errno=0
[  482.081243][T18165] loop7: detected capacity change from 0 to 128
[  482.149661][T18169] loop7: detected capacity change from 0 to 256
[  482.172031][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  482.248706][T18173] loop7: detected capacity change from 0 to 164
[  482.374686][T18178] netlink: 176 bytes leftover after parsing attributes in process `syz.7.4993'.
[  482.773924][T18188] loop9: detected capacity change from 0 to 32768
[  482.782620][T18188] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.4997 (18188)
[  482.804779][T18188] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  482.814102][T18188] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm
[  483.054623][T18188] BTRFS info (device loop9): enabling ssd optimizations
[  483.057992][T18188] BTRFS info (device loop9): enabling free space tree
[  483.061147][T18188] BTRFS info (device loop9): use zstd compression, level 3
[  483.194882][T17878] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  483.212184][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  484.251954][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  484.792147][ T5989] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  484.868826][T18250] loop7: detected capacity change from 0 to 32768
[  484.915503][T18250] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  484.947393][T18250] XFS (loop7): Ending clean mount
[  484.974100][ T5989] usb 10-1: config 0 has an invalid interface number: 117 but max is 0
[  484.980296][ T5989] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  484.997025][ T5989] usb 10-1: config 0 has no interface number 0
[  484.999607][ T5989] usb 10-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  485.020635][ T5989] usb 10-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  485.047948][ T5989] usb 10-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  485.066265][ T5989] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.069648][ T5989] usb 10-1: Product: syz
[  485.071517][ T5989] usb 10-1: Manufacturer: syz
[  485.074561][ T5989] usb 10-1: SerialNumber: syz
[  485.088863][ T5989] usb 10-1: config 0 descriptor??
[  485.141111][T14328] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  485.301844][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  485.572601][T18269] loop7: detected capacity change from 0 to 40427
[  485.579266][T18269] F2FS-fs (loop7): invalid crc value
[  485.628457][T18269] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  485.632932][T18269] F2FS-fs (loop7): Start checkpoint disabled!
[  485.639636][T18269] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  485.729038][T18275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5024'.
[  485.789847][  T978] usb 10-1: USB disconnect, device number 2
[  486.331837][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  486.783434][T18296] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5033'.
[  486.853291][T18298] loop7: detected capacity change from 0 to 512
[  486.856173][T18298] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  486.873350][T18298] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  486.901338][T18298] EXT4-fs (loop7): 1 truncate cleaned up
[  486.904456][T18298] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  487.014324][T14328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  487.086673][T18307] netlink: 'syz.7.5036': attribute type 2 has an invalid length.
[  487.356222][   T33] audit: type=1804 audit(1758860857.748:230): pid=18315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.5041" name="/newroot/46/bus/file0" dev="overlay" ino=264 res=1 errno=0
[  487.371801][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  488.260004][T18342] loop9: detected capacity change from 0 to 32768
[  488.376163][T18342] ocfs2: Mounting device (7,9) on (node local, slot 0) with writeback data mode.
[  488.411836][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  488.559865][T18363] loop7: detected capacity change from 0 to 128
[  488.560076][T17878] ocfs2: Unmounting device (7,9) on (node local)
[  488.568196][T18363] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[  488.579929][T18363] hpfs: filesystem error: improperly stopped
[  488.586765][T18363] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  488.589770][T18363] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[  488.605522][T18363] hpfs: You really don't want any checks? You are crazy...
[  488.613796][T18363] hpfs: hpfs_map_sector(): read error
[  488.632652][T18363] hpfs: code page support is disabled
[  488.637942][T18363] hpfs: hpfs_map_4sectors(): unaligned read
[  488.640501][T18363] hpfs: hpfs_map_4sectors(): unaligned read
[  488.653064][T18363] hpfs: filesystem error: unable to find root dir
[  488.675103][T18363] hpfs: hpfs_map_4sectors(): unaligned read
[  488.817045][T18373] netlink: 45 bytes leftover after parsing attributes in process `syz.9.5058'.
[  488.938514][T18381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5061'.
[  488.942520][T18381] netlink: 'syz.1.5061': attribute type 1 has an invalid length.
[  488.946075][T18381] netlink: 'syz.1.5061': attribute type 2 has an invalid length.
[  489.129949][T18397] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5066'.
[  489.395027][T18412] loop7: detected capacity change from 0 to 128
[  489.412326][T18412] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  489.423157][T18412] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  489.451878][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  489.596269][T18406] loop9: detected capacity change from 0 to 32768
[  489.613448][T18406] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.5070 (18406)
[  489.620434][T18406] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  489.626961][T18406] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm
[  489.711138][T18406] BTRFS info (device loop9): enabling ssd optimizations
[  489.724969][T18406] BTRFS info (device loop9): enabling free space tree
[  489.727351][T18406] BTRFS info (device loop9): use zstd compression, level 3
[  489.754224][T18440] loop7: detected capacity change from 0 to 4096
[  489.778245][T18440] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512).
[  489.910229][T17878] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  490.492202][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  491.410856][T18492] loop7: detected capacity change from 0 to 32768
[  491.414149][T18492] bcachefs (/dev/loop7): error validating superblock: Invalid time precision: 0 (min 1, max 1000000000)
[  491.417902][T18492] bcachefs: bch2_fs_get_tree() error: invalid_sb_time_precision
[  491.531794][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  492.251856][T15179] Bluetooth: hci2: command tx timeout
[  492.571777][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  493.130567][T18541] loop7: detected capacity change from 0 to 8
[  493.154385][T18541] SQUASHFS error: Failed to read block 0x2fc: -5
[  493.156907][T18541] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  493.159757][T18541] SQUASHFS error: Unable to read inode 0x11f
[  493.224858][T18543] loop7: detected capacity change from 0 to 128
[  493.242157][  T794] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[  493.249556][T18543] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  493.259120][T18543] ext4 filesystem being mounted at /395/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  493.287511][T14328] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  493.348496][T18550] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.5128'.
[  493.395974][  T794] usb 10-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77
[  493.407727][  T794] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.411109][  T794] usb 10-1: Product: syz
[  493.422274][  T794] usb 10-1: Manufacturer: syz
[  493.424268][  T794] usb 10-1: SerialNumber: syz
[  493.439244][  T794] usb 10-1: config 0 descriptor??
[  493.486745][T18563] CIFS mount error: No usable UNC path provided in device string!
[  493.486745][T18563] 
[  493.490535][T18563] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  493.611844][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  493.629430][T18569] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5136'.
[  493.654444][  T794] usb 10-1: USB disconnect, device number 3
[  493.975747][T18586] netlink: 6 bytes leftover after parsing attributes in process `syz.7.5143'.
[  493.984180][T18586] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  494.285259][T18597] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5148'.
[  494.335214][T15179] Bluetooth: hci2: command 0x0405 tx timeout
[  494.533919][   T33] audit: type=1804 audit(1758860864.918:231): pid=18600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.5149" name="file0" dev="ramfs" ino=48648 res=1 errno=0
[  494.651819][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  495.691822][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  496.371306][T18634] loop9: detected capacity change from 0 to 8192
[  496.379170][T18634] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  496.618972][T18643] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5169'.
[  496.731828][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  497.187540][T18666] tmpfs: Bad value for 'mpol'
[  497.382341][ T7482] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  497.553527][ T7482] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  497.560357][ T7482] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  497.564543][ T7482] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  497.568023][ T7482] usb 10-1: SerialNumber: syz
[  497.576169][ T7482] usb 10-1: bad CDC descriptors
[  497.771843][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  497.978597][ T7482] usb 10-1: USB disconnect, device number 4
[  498.812020][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  498.822077][T18706] block nbd1: server does not support multiple connections per device.
[  498.829173][T18706] block nbd1: shutting down sockets
[  498.858707][T18708] netlink: 'syz.9.5199': attribute type 1 has an invalid length.
[  498.862779][T18708] netlink: 'syz.9.5199': attribute type 1 has an invalid length.
[  498.907931][T18710] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5200'.
[  499.462532][T18720] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5204'.
[  499.861764][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  499.916187][T18734] loop9: detected capacity change from 0 to 764
[  499.995216][T18735] Symlink component flag not implemented
[  499.997582][T18735] Symlink component flag not implemented (116)
[  500.901837][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  501.275713][T18755] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  501.384442][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  501.519013][T18761] loop9: detected capacity change from 0 to 32768
[  501.536034][T18761] ERROR: (device loop9): dbAlloc: the hint is outside the map
[  501.536034][T18761] 
[  501.543423][T18761] ERROR: (device loop9): remounting filesystem as read-only
[  501.645016][T18765] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  501.931741][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  502.971782][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  503.024806][T18798] loop9: detected capacity change from 0 to 2364
[  504.012107][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  504.398158][T18834] kAFS: unable to lookup cell '/'
[  504.834871][T18845] openvswitch: netlink: Geneve opt len 206 is not a multiple of 4.
[  505.061765][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  505.414231][T18873] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5274'.
[  505.777476][T18897] netlink: 68 bytes leftover after parsing attributes in process `syz.9.5286'.
[  506.101784][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  506.735173][T18935] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5302'.
[  506.842927][T18946] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5309'.
[  506.977185][T18952] loop7: detected capacity change from 0 to 256
[  506.994834][T18952] exfat: Deprecated parameter 'utf8'
[  506.997048][T18952] exfat: Deprecated parameter 'utf8'
[  506.999247][T18952] exfat: Deprecated parameter 'utf8'
[  507.017348][T18952] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x743489c8, utbl_chksum : 0xe619d30d)
[  507.130808][T18954] loop7: detected capacity change from 0 to 128
[  507.142279][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  507.146393][T18954] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  507.165373][T18954] hpfs: filesystem error: improperly stopped
[  507.168004][T18954] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  507.192357][T18954] hpfs: You really don't want any checks? You are crazy...
[  507.202707][T18954] hpfs: hpfs_map_sector(): read error
[  507.205009][T18954] hpfs: code page support is disabled
[  507.216363][T18954] hpfs: hpfs_map_4sectors(): unaligned read
[  507.242576][T18954] hpfs: hpfs_map_4sectors(): unaligned read
[  507.245200][T18954] hpfs: filesystem error: unable to find root dir
[  507.348366][T18964] netlink: 'syz.9.5318': attribute type 4 has an invalid length.
[  507.404860][T18968] dvmrp1: left allmulticast mode
[  508.081841][T18976] loop7: detected capacity change from 0 to 32768
[  508.098910][T18976] bcachefs (/dev/loop7): error validating superblock: Not a bcachefs superblock layout
[  508.111401][T18976] bcachefs: bch2_fs_get_tree() error: invalid_sb_layout
[  508.171863][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  508.314365][T19000] netlink: 1 bytes leftover after parsing attributes in process `syz.7.5335'.
[  509.211813][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  510.250951][T19061] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  510.250951][T19061] The task syz.7.5361 (19061) triggered the difference, watch for misbehavior.
[  510.251759][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  510.427248][T19069] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5365'.
[  510.464824][T19073] netlink: 'syz.9.5367': attribute type 32 has an invalid length.
[  510.467453][T19073] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5367'.
[  510.470499][T19073] (unnamed net_device) (uninitialized): option coupled_control: invalid value (80)
[  510.506881][T19078] overlayfs: failed to clone upperpath
[  511.291858][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  511.432684][T19106] loop2: detected capacity change from 0 to 7
[  511.436519][T19106] Dev loop2: unable to read RDB block 7
[  511.438586][T19106]  loop2: unable to read partition table
[  511.440662][T19106] loop2: partition table beyond EOD, truncated
[  511.446129][T19106] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5)
[  511.685229][T19126] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5390'.
[  511.688789][T19126] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5390'.
[  511.700397][T19126] netlink: 'syz.7.5390': attribute type 1 has an invalid length.
[  511.789773][T19135] syzkaller1: entered promiscuous mode
[  511.792457][T19135] syzkaller1: entered allmulticast mode
[  512.341809][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  512.493011][  T794] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  512.656395][  T794] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  512.660991][  T794] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  512.666577][  T794] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  512.670737][  T794] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  512.677651][  T794] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  512.681433][  T794] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  512.686290][  T794] usb 10-1: Manufacturer: syz
[  512.690356][  T794] usb 10-1: config 0 descriptor??
[  513.106259][  T794] appleir 0003:05AC:8243.0010: unknown main item tag 0x0
[  513.115221][  T794] appleir 0003:05AC:8243.0010: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0
[  513.365690][  T976] usb 10-1: USB disconnect, device number 5
[  513.372969][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  513.982187][T19216] Bluetooth: MGMT ver 1.23
[  514.225686][T19232] bridge0: port 2(bridge_slave_1) entered disabled state
[  514.229351][T19232] bridge_slave_1: left allmulticast mode
[  514.232373][T19232] bridge_slave_1: left promiscuous mode
[  514.234944][T19232] bridge0: port 2(bridge_slave_1) entered disabled state
[  514.255038][T19232] team0: Port device bridge_slave_1 added
[  514.258020][T19232] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  514.338469][T19235] AppArmor: change_hat: Invalid input, NULL hat and NULL magic
[  514.411793][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  514.720397][T19240] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5440'.
[  515.157876][T19253] l2tp_ppp: sess 2/0: no socket in recv
[  515.451830][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  515.804335][T19272] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5455'.
[  515.809177][T19272] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5455'.
[  516.491769][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  516.957403][T19315] loop7: detected capacity change from 0 to 32768
[  517.005848][T19315] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  517.183637][T18321] IPVS: starting estimator thread 0...
[  517.188423][T19315] XFS (loop7): Ending clean mount
[  517.197883][T19315] XFS (loop7): Quotacheck needed: Please wait.
[  517.255421][T19315] XFS (loop7): Quotacheck: Done.
[  517.301934][T19338] IPVS: using max 78 ests per chain, 187200 per kthread
[  517.319493][T14328] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  517.531844][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  517.870754][ T5989] Process accounting resumed
[  517.970105][T19353] loop7: detected capacity change from 0 to 256
[  517.980314][T19353] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d)
[  517.987132][T19353] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  518.338835][T19369] tipc: Started in network mode
[  518.340790][T19369] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[  518.345296][T19369] tipc: Enabled bearer <eth:vlan0>, priority 10
[  518.384932][T19372] netlink: 'syz.9.5497': attribute type 11 has an invalid length.
[  518.550042][T19377] netlink: del zone limit has 4 unknown bytes
[  518.571760][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  519.352188][T18321] tipc: Node number set to 10005162
[  519.611828][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  520.651913][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  521.207099][T19467] team0 (unregistering): Port device team_slave_0 removed
[  521.216860][T19467] team0 (unregistering): Port device team_slave_1 removed
[  521.226353][T19467] team0 (unregistering): Port device bridge_slave_1 removed
[  521.691829][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  522.241195][T19531] netlink: 'syz.9.5572': attribute type 3 has an invalid length.
[  522.244665][T19531] netlink: 'syz.9.5572': attribute type 1 has an invalid length.
[  522.248017][T19531] netlink: 216 bytes leftover after parsing attributes in process `syz.9.5572'.
[  522.296308][T19533] netlink: 'syz.9.5573': attribute type 46 has an invalid length.
[  522.299514][T19533] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5573'.
[  522.731814][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  523.771799][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  523.796183][T19572] netlink: 'syz.9.5592': attribute type 12 has an invalid length.
[  523.800521][T19572] netlink: 'syz.9.5592': attribute type 29 has an invalid length.
[  523.810861][T19572] netlink: 148 bytes leftover after parsing attributes in process `syz.9.5592'.
[  524.578243][T19569] loop7: detected capacity change from 0 to 32768
[  524.589511][T19569] BTRFS info: device /dev/loop7 (7:7) using temp-fsid 9ca5f73e-ad03-4f01-aece-12bb5cc4ed2c
[  524.600814][T19569] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.5591 (19569)
[  524.625578][T19569] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  524.629480][T19569] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm
[  524.811774][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  524.845593][T19569] BTRFS info (device loop7): allowing degraded mounts
[  524.848062][T19569] BTRFS info (device loop7): enabling ssd optimizations
[  524.850715][T19569] BTRFS info (device loop7): enabling free space tree
[  524.857321][T19569] BTRFS info (device loop7): force zlib compression, level 3
[  524.998936][T14328] BTRFS info (device loop7): last unmount of filesystem 9ca5f73e-ad03-4f01-aece-12bb5cc4ed2c
[  525.281071][T19604] ipvlan3: entered promiscuous mode
[  525.851824][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  525.911840][T19625] loop7: detected capacity change from 0 to 4096
[  525.924757][T19625] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  525.968002][T19625] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  525.986929][T19625] ntfs3(loop7): Failed to initialize $Extend/$Reparse.
[  525.997760][T19625] ntfs3(loop7): ino=1b, mi_enum_attr
[  526.412040][  T794] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  526.571972][  T794] usb 10-1: Using ep0 maxpacket: 32
[  526.576065][  T794] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  526.591776][  T794] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  526.595787][  T794] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  526.599643][  T794] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  526.605491][  T794] usb 10-1: config 0 descriptor??
[  526.901859][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  526.940364][T19668] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5627'.
[  526.980950][T19671] loop7: detected capacity change from 0 to 16
[  526.989280][T19671] erofs (device loop7): dirblkbits 5 isn't supported
[  527.035165][  T794] savu 0003:1E7D:2D5A.0011: unknown main item tag 0x0
[  527.037755][  T794] savu 0003:1E7D:2D5A.0011: unknown main item tag 0x0
[  527.044283][  T794] savu 0003:1E7D:2D5A.0011: unknown main item tag 0x0
[  527.051935][  T794] savu 0003:1E7D:2D5A.0011: unknown main item tag 0x0
[  527.058437][  T794] savu 0003:1E7D:2D5A.0011: unknown main item tag 0x0
[  527.073687][  T794] savu 0003:1E7D:2D5A.0011: unbalanced collection at end of report description
[  527.089387][  T794] savu 0003:1E7D:2D5A.0011: parse failed
[  527.091413][  T794] savu 0003:1E7D:2D5A.0011: probe with driver savu failed with error -22
[  527.229990][    T9] usb 10-1: USB disconnect, device number 6
[  527.942087][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  528.981832][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  529.694746][ T7482] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  529.863636][ T7482] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  529.867986][ T7482] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  529.873295][ T7482] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  529.880051][ T7482] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  529.884349][ T7482] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.887779][ T7482] usb 10-1: Product: syz
[  529.889692][ T7482] usb 10-1: Manufacturer: syz
[  529.894985][ T7482] usb 10-1: SerialNumber: syz
[  529.900004][ T7482] usb 10-1: config 0 descriptor??
[  529.906742][T19723] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  529.909971][T19723] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  529.914826][ T7482] usb 10-1: ucan: probing device on interface #0
[  530.011852][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  530.134147][ T7482] usb 10-1: ucan: could not read protocol version, ret=-71
[  530.137136][ T7482] usb 10-1: ucan: probe failed; try to update the device firmware
[  530.148858][ T7482] usb 10-1: USB disconnect, device number 7
[  530.225304][T19733] netlink: 'syz.1.5655': attribute type 1 has an invalid length.
[  531.051795][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  531.168317][  T794] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  531.324147][  T794] usb 10-1: Using ep0 maxpacket: 32
[  531.362394][  T794] usb 10-1: config 14 has an invalid interface number: 137 but max is 3
[  531.365938][  T794] usb 10-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config
[  531.370044][  T794] usb 10-1: config 14 has 2 interfaces, different from the descriptor's value: 4
[  531.380434][  T794] usb 10-1: config 14 has no interface number 1
[  531.383929][  T794] usb 10-1: config 14 interface 137 has no altsetting 0
[  531.389375][  T794] usb 10-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=2a.8a
[  531.398669][  T794] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.402568][  T794] usb 10-1: Product: syz
[  531.404401][  T794] usb 10-1: Manufacturer: syz
[  531.406725][  T794] usb 10-1: SerialNumber: syz
[  531.813989][  T794] ati_remote2 10-1:14.0: ati_remote2_probe(): interface 0 must have an endpoint
[  531.826265][  T794] usb 10-1: USB disconnect, device number 8
[  532.092299][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  532.259676][T19764] netlink: 'syz.1.5668': attribute type 56 has an invalid length.
[  533.131782][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  533.135651][T19785] netlink: 'syz.1.5677': attribute type 4 has an invalid length.
[  534.171786][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  534.302542][T19826] overlayfs: failed to clone upperpath
[  534.325417][T19828] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5698'.
[  534.713537][T19839] loop7: detected capacity change from 0 to 512
[  534.723989][T19839] EXT4-fs: Ignoring removed orlov option
[  534.756079][T19839] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  534.760089][T19839] ext4 filesystem being mounted at /541/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  534.877563][T14328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  535.205418][T19860] loop7: detected capacity change from 0 to 1024
[  535.211834][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  535.229898][T19860] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  535.317930][T14328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  535.650408][T19882] geneve3: entered promiscuous mode
[  535.653664][T19882] geneve3: entered allmulticast mode
[  535.982073][T19902] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5732'.
[  536.252141][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  536.347644][T19915] ufs: You didn't specify the type of your ufs filesystem
[  536.347644][T19915] 
[  536.347644][T19915] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  536.347644][T19915] 
[  536.347644][T19915] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  536.359302][T19915] ufs: ufstype=old is supported read-only
[  536.368022][T19915] I/O error, dev loop15, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  536.553308][T19919] netlink: 'syz.1.5739': attribute type 2 has an invalid length.
[  536.592656][T19919] : entered promiscuous mode
[  536.647103][   T33] audit: type=1326 audit(1758860907.038:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19922 comm="syz.9.5741" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe06518ec29 code=0x0
[  536.938214][T19936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5747'.
[  537.292027][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  537.917747][T19952] loop7: detected capacity change from 0 to 1024
[  537.927140][T19952] EXT4-fs: Ignoring removed orlov option
[  537.952365][  T794] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  537.955092][T19952] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  537.986009][   T33] audit: type=1804 audit(1758860908.378:233): pid=19952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.5753" name="/newroot/555/bus/bus" dev="loop7" ino=18 res=1 errno=0
[  538.017847][   T33] audit: type=1804 audit(1758860908.388:234): pid=19952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.5753" name="/newroot/555/bus/bus" dev="loop7" ino=18 res=1 errno=0
[  538.115943][  T794] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  538.121028][  T794] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  538.127902][  T794] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  538.136960][  T794] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  538.141300][  T794] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.147294][  T794] usb 10-1: config 0 descriptor??
[  538.331915][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  538.580066][  T794] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[  538.839484][  T794] usb 10-1: USB disconnect, device number 9
[  539.047884][T14328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  539.279817][T19971] sock: sock_timestamping_bind_phc: sock not bind to device
[  539.381776][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  539.918416][   T33] audit: type=1326 audit(1758860910.308:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19986 comm="syz.1.5767" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58f8ec29 code=0x7ff00000
[  539.927988][   T33] audit: type=1326 audit(1758860910.308:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19986 comm="syz.1.5767" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58f8ec29 code=0x7ff00000
[  539.937951][   T33] audit: type=1326 audit(1758860910.308:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19986 comm="syz.1.5767" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58f8ec29 code=0x7ff00000
[  539.949372][   T33] audit: type=1326 audit(1758860910.308:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19986 comm="syz.1.5767" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58f8ec29 code=0x7ff00000
[  539.958668][   T33] audit: type=1326 audit(1758860910.308:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19986 comm="syz.1.5767" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58f8ec29 code=0x7ff00000
[  539.968614][   T33] audit: type=1326 audit(1758860910.308:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19986 comm="syz.1.5767" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58f8ec29 code=0x7ff00000
[  539.977325][   T33] audit: type=1326 audit(1758860910.308:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19986 comm="syz.1.5767" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58f8ec29 code=0x7ff00000
[  540.288819][T20003] 9pnet: p9_errstr2errno: server reported unknown error fdno=0xffffffffffffffff,wfdno=0xffffffffffffffff,k 
[  540.313083][T20008] overlay: Bad value for 'workdir'
[  540.397240][T20014] overlayfs: failed to clone upperpath
[  540.412137][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  540.792094][T20024] CIFS mount error: No usable UNC path provided in device string!
[  540.792094][T20024] 
[  540.796175][T20024] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  541.451794][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  541.949388][T20044] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5790'.
[  541.952855][T20044] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5790'.
[  542.384557][T20058] xt_limit: Overflow, try lower: 2498045675/2726951205
[  542.491777][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  542.732158][T20062] loop7: detected capacity change from 0 to 32768
[  542.744892][T20062] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  542.770358][T20062] XFS (loop7): Ending clean mount
[  542.781501][T20062] XFS (loop7): Quotacheck needed: Please wait.
[  542.822982][T20062] XFS (loop7): Quotacheck: Done.
[  542.868393][T14328] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  543.197148][T20090] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5807'.
[  543.241770][   T33] kauditd_printk_skb: 383 callbacks suppressed
[  543.241833][   T33] audit: type=1804 audit(1758860913.628:625): pid=20092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.5808" name="/newroot/570/bus/file0" dev="overlay" ino=2978 res=1 errno=0
[  543.531757][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  543.801877][  T976] usb 10-1: new full-speed USB device number 10 using dummy_hcd
[  543.953741][  T976] usb 10-1: config index 0 descriptor too short (expected 63186, got 210)
[  543.957089][  T976] usb 10-1: config 0 has an invalid interface number: 106 but max is 0
[  543.960811][  T976] usb 10-1: config 0 has an invalid descriptor of length 236, skipping remainder of the config
[  543.971347][  T976] usb 10-1: config 0 has no interface number 0
[  543.974155][  T976] usb 10-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  543.979062][  T976] usb 10-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0x71, changing to 0x1
[  543.984218][  T976] usb 10-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 38949, setting to 64
[  543.989289][  T976] usb 10-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  543.994979][  T976] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  543.999111][  T976] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  544.045659][  T976] usb 10-1: config 0 descriptor??
[  544.066241][  T976] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  544.256890][   T12] usb 10-1: Failed to submit usb control message: -71
[  544.260006][T18321] usb 10-1: USB disconnect, device number 10
[  544.267628][   T12] usb 10-1: unable to send the bmi data to the device: -71
[  544.270328][   T12] usb 10-1: unable to get target info from device
[  544.275379][   T12] usb 10-1: could not get target info (-71)
[  544.277781][   T12] usb 10-1: could not probe fw (-71)
[  544.571801][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  544.807886][T20150] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  544.835636][  T976] libceph: connect (1)[c::]:6789 error -101
[  544.837998][  T976] libceph: mon0 (1)[c::]:6789 connect error
[  544.889439][  T794] libceph: connect (1)[c::]:6789 error -101
[  544.895251][  T794] libceph: mon0 (1)[c::]:6789 connect error
[  544.939727][  T794] libceph: connect (1)[c::]:6789 error -101
[  544.942049][  T794] libceph: mon0 (1)[c::]:6789 connect error
[  545.096636][T18321] libceph: connect (1)[c::]:6789 error -101
[  545.099442][T18321] libceph: mon0 (1)[c::]:6789 connect error
[  545.121875][  T976] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  545.152387][  T794] libceph: connect (1)[c::]:6789 error -101
[  545.157752][  T794] libceph: mon0 (1)[c::]:6789 connect error
[  545.212239][  T794] libceph: connect (1)[c::]:6789 error -101
[  545.215010][  T794] libceph: mon0 (1)[c::]:6789 connect error
[  545.272785][  T976] usb 10-1: too many configurations: 41, using maximum allowed: 8
[  545.277497][  T976] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  545.281928][  T976] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  545.288298][  T976] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  545.292758][  T976] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  545.299228][  T976] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  545.303645][  T976] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  545.311246][  T976] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  545.315696][  T976] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  545.322409][  T976] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  545.326705][  T976] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  545.333475][  T976] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  545.337765][  T976] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  545.344374][  T976] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  545.348621][  T976] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  545.355602][  T976] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  545.359899][  T976] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  545.367669][  T976] usb 10-1: New USB device found, idVendor=187f, idProduct=211d, bcdDevice=f6.a7
[  545.371480][  T976] usb 10-1: New USB device strings: Mfr=35, Product=230, SerialNumber=33
[  545.375129][  T976] usb 10-1: Product: syz
[  545.377804][  T976] usb 10-1: Manufacturer: syz
[  545.379792][  T976] usb 10-1: SerialNumber: syz
[  545.386233][  T976] usb 10-1: config 0 descriptor??
[  545.597548][  T794] usb 10-1: USB disconnect, device number 11
[  545.611833][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  545.619020][  T976] libceph: connect (1)[c::]:6789 error -101
[  545.621690][  T976] libceph: mon0 (1)[c::]:6789 connect error
[  545.656038][T20164] ceph: No mds server is up or the cluster is laggy
[  545.656095][T20154] ceph: No mds server is up or the cluster is laggy
[  545.666154][    T9] libceph: connect (1)[c::]:6789 error -101
[  545.666825][T20161] ceph: No mds server is up or the cluster is laggy
[  545.669256][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  545.805170][T20170] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5840'.
[  545.808867][T20170] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  546.056468][   T33] audit: type=1800 audit(1758860916.448:626): pid=20181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.5845" name="/newroot/2466/bus/#12725//deleted" dev="tmpfs" ino=12725 res=0 errno=0
[  546.438765][T20199] netlink: 'syz.1.5852': attribute type 6 has an invalid length.
[  546.442154][T20199] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5852'.
[  546.651791][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  546.706030][T20222] comedi comedi0: ni_at_a2150: I/O port conflict (0x3,28)
[  547.691826][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  547.985700][T20242] hub 9-0:1.0: USB hub found
[  547.990081][T20242] hub 9-0:1.0: 1 port detected
[  548.351862][T18321] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  548.593615][T18321] usb 10-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  548.597469][T18321] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  548.600497][T18321] usb 10-1: Product: syz
[  548.609793][T18321] usb 10-1: Manufacturer: syz
[  548.615098][T18321] usb 10-1: SerialNumber: syz
[  548.620517][T18321] usb 10-1: config 0 descriptor??
[  548.629551][T18321] gspca_main: sunplus-2.14.0 probing 055f:c230
[  548.732071][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  549.443310][    T9] usb 10-1: USB disconnect, device number 12
[  549.776473][T20277] netlink: 'syz.1.5886': attribute type 3 has an invalid length.
[  549.781840][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  550.005811][T20286] ALSA: mixer_oss: invalid OSS volume ';'
[  550.242168][   T33] audit: type=1326 audit(1758860920.638:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20304 comm="syz.1.5900" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58f8ec29 code=0x7ffc0000
[  550.270799][   T33] audit: type=1326 audit(1758860920.638:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20304 comm="syz.1.5900" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58f8ec29 code=0x7ffc0000
[  550.287279][   T33] audit: type=1326 audit(1758860920.648:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20304 comm="syz.1.5900" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e58f8ec29 code=0x7ffc0000
[  550.297875][   T33] audit: type=1326 audit(1758860920.648:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20304 comm="syz.1.5900" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58f8ec29 code=0x7ffc0000
[  550.309202][   T33] audit: type=1326 audit(1758860920.648:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20304 comm="syz.1.5900" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58f8ec29 code=0x7ffc0000
[  550.318636][   T33] audit: type=1326 audit(1758860920.648:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20304 comm="syz.1.5900" exe="/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f6e58f8ec29 code=0x7ffc0000
[  550.334936][   T33] audit: type=1326 audit(1758860920.648:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20304 comm="syz.1.5900" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58f8ec29 code=0x7ffc0000
[  550.352108][   T33] audit: type=1326 audit(1758860920.648:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20304 comm="syz.1.5900" exe="/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f6e58f8ec29 code=0x7ffc0000
[  550.361116][   T33] audit: type=1326 audit(1758860920.648:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20304 comm="syz.1.5900" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58f8ec29 code=0x7ffc0000
[  550.392595][   T33] audit: type=1326 audit(1758860920.648:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20304 comm="syz.1.5900" exe="/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f6e58f8ec29 code=0x7ffc0000
[  550.675943][T20328] delete_channel: no stack
[  550.821785][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  551.116120][T20355] netlink: 'syz.9.5925': attribute type 10 has an invalid length.
[  551.412279][  T794] usb 10-1: new full-speed USB device number 13 using dummy_hcd
[  551.575705][  T794] usb 10-1: config 2 has an invalid interface number: 183 but max is 0
[  551.579340][  T794] usb 10-1: config 2 has no interface number 0
[  551.582508][  T794] usb 10-1: config 2 interface 183 has no altsetting 0
[  551.587860][  T794] usb 10-1: New USB device found, idVendor=0d49, idProduct=7310, bcdDevice=58.ae
[  551.592779][  T794] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  551.596253][  T794] usb 10-1: Product: syz
[  551.598140][  T794] usb 10-1: Manufacturer: syz
[  551.600212][  T794] usb 10-1: SerialNumber: syz
[  551.815543][  T794] usb-storage 10-1:2.183: USB Mass Storage device detected
[  551.830934][  T794] usb-storage 10-1:2.183: Quirks match for vid 0d49 pid 7310: 8000
[  551.851988][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  551.881612][  T794] usb 10-1: USB disconnect, device number 13
[  552.901799][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  553.931816][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  554.108763][T20431] netlink: 'syz.1.5957': attribute type 13 has an invalid length.
[  554.457217][T20439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5960'.
[  554.971911][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  555.232033][T20449] overlayfs: failed to resolve './file0': -2
[  555.402175][    T9] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  555.551987][    T9] usb 10-1: Using ep0 maxpacket: 32
[  555.557783][    T9] usb 10-1: config 0 has an invalid interface number: 89 but max is 0
[  555.561313][    T9] usb 10-1: config 0 has no interface number 0
[  555.564242][    T9] usb 10-1: config 0 interface 89 has no altsetting 0
[  555.570035][    T9] usb 10-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  555.574155][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.578389][    T9] usb 10-1: Product: syz
[  555.580319][    T9] usb 10-1: Manufacturer: syz
[  555.583224][    T9] usb 10-1: SerialNumber: syz
[  555.589544][    T9] usb 10-1: config 0 descriptor??
[  555.598133][    T9] em28xx 10-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  555.602533][    T9] em28xx 10-1:0.89: Video interface 89 found: bulk
[  556.011768][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  556.200714][    T9] em28xx 10-1:0.89: unknown em28xx chip ID (0)
[  556.241790][T20479] loop7: detected capacity change from 0 to 32768
[  556.246856][T20479] bcachefs (/dev/loop7): error reading default superblock: Bad minimum version 0.24: unwritten_extents, greater than version field 0.11: inode_btree_change
[  556.255299][T20479] bcachefs (/dev/loop7): error validating superblock: Bad sb offset (got 288230376151715840, read from 4096)
[  556.260476][T20479] bcachefs: bch2_fs_get_tree() error: invalid_sb_offset
[  556.559040][T20499] loop7: detected capacity change from 0 to 4096
[  556.576661][T20499] NILFS (loop7): invalid segment: Checksum error in segment payload
[  556.582680][T20499] NILFS (loop7): trying rollback from an earlier position
[  556.599600][T20499] NILFS (loop7): recovery complete
[  556.610251][T20500] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  556.667784][T20504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5990'.
[  556.793158][T20510] loop7: detected capacity change from 0 to 512
[  556.827563][T20510] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.5992: bad orphan inode 11862016
[  556.829130][    T9] em28xx 10-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64)
[  556.835982][    T9] em28xx 10-1:0.89: board has no eeprom
[  556.841610][T20510] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  556.852700][T20510] ext4 filesystem being mounted at /595/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  556.885794][T14328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  557.051764][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  557.076992][T20524] loop7: detected capacity change from 0 to 256
[  557.094940][    T9] em28xx 10-1:0.89: Identified as Terratec Grabby (card=67)
[  557.097922][    T9] em28xx 10-1:0.89: analog set to bulk mode.
[  557.109933][  T794] em28xx 10-1:0.89: Registering V4L2 extension
[  557.121804][T20524] FAT-fs (loop7): Directory bread(block 64) failed
[  557.126877][    T9] usb 10-1: USB disconnect, device number 14
[  557.138562][    T9] em28xx 10-1:0.89: Disconnecting em28xx
[  557.146623][T20524] FAT-fs (loop7): Directory bread(block 65) failed
[  557.149494][T20524] FAT-fs (loop7): Directory bread(block 66) failed
[  557.152706][T20524] FAT-fs (loop7): Directory bread(block 67) failed
[  557.155494][T20524] FAT-fs (loop7): Directory bread(block 68) failed
[  557.159018][T20524] FAT-fs (loop7): Directory bread(block 69) failed
[  557.162740][T20524] FAT-fs (loop7): Directory bread(block 70) failed
[  557.165501][T20524] FAT-fs (loop7): Directory bread(block 71) failed
[  557.168318][T20524] FAT-fs (loop7): Directory bread(block 72) failed
[  557.185306][  T794] em28xx 10-1:0.89: Config register raw data: 0xffffffed
[  557.188858][  T794] em28xx 10-1:0.89: AC97 chip type couldn't be determined
[  557.189619][T20524] FAT-fs (loop7): Directory bread(block 73) failed
[  557.195800][  T794] em28xx 10-1:0.89: No AC97 audio processor
[  557.204052][  T794] usb 10-1: Decoder not found
[  557.206165][  T794] em28xx 10-1:0.89: failed to create media graph
[  557.208848][  T794] em28xx 10-1:0.89: V4L2 device video103 deregistered
[  557.224741][  T794] em28xx 10-1:0.89: Registering snapshot button...
[  557.237073][  T794] input: em28xx snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.89/input/input22
[  557.247952][  T794] em28xx 10-1:0.89: Remote control support is not available for this card.
[  557.263213][    T9] em28xx 10-1:0.89: Closing input extension
[  557.265875][    T9] em28xx 10-1:0.89: Deregistering snapshot button
[  557.376187][    T9] em28xx 10-1:0.89: Freeing device
[  558.003426][T19581] kworker/u10:6: attempt to access beyond end of device
[  558.003426][T19581] loop7: rw=1, sector=1224, nr_sectors = 256 limit=256
[  558.014999][T19581] kworker/u10:6: attempt to access beyond end of device
[  558.014999][T19581] loop7: rw=1, sector=1512, nr_sectors = 320 limit=256
[  558.028572][T19581] kworker/u10:6: attempt to access beyond end of device
[  558.028572][T19581] loop7: rw=1, sector=1864, nr_sectors = 2048 limit=256
[  558.039408][T19581] kworker/u10:6: attempt to access beyond end of device
[  558.039408][T19581] loop7: rw=1, sector=3912, nr_sectors = 3464 limit=256
[  558.101793][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  558.207848][T20538] loop7: detected capacity change from 0 to 2048
[  558.267476][ T8202]  loop7: p1 p2 < > p3 < p5 p6 > p4
[  558.269680][ T8202] loop7: partition table partially beyond EOD, truncated
[  558.273879][ T8202] loop7: p2 start 4278190080 is beyond EOD, truncated
[  558.277097][ T8202] loop7: p4 size 8192 extends beyond EOD, truncated
[  558.282623][ T8202] loop7: p6 size 8192 extends beyond EOD, truncated
[  558.295749][T20538]  loop7: p1 p2 < > p3 < p5 p6 > p4
[  558.297753][T20538] loop7: partition table partially beyond EOD, truncated
[  558.301114][T20538] loop7: p2 start 4278190080 is beyond EOD, truncated
[  558.306056][T20538] loop7: p4 size 8192 extends beyond EOD, truncated
[  558.310726][T20538] loop7: p6 size 8192 extends beyond EOD, truncated
[  558.374443][T20540] CIFS mount error: No usable UNC path provided in device string!
[  558.374443][T20540] 
[  558.377837][T20540] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  558.463158][ T5950] udevd[5950]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory
[  558.470386][ T6154] udevd[6154]: inotify_add_watch(7, /dev/loop7p6, 10) failed: No such file or directory
[  558.478175][ T5943] udevd[5943]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory
[  558.480092][ T6271] udevd[6271]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[  558.486819][ T8202] udevd[8202]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  558.531143][ T5950] udevd[5950]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory
[  558.550240][ T6271] udevd[6271]: inotify_add_watch(7, /dev/loop7p6, 10) failed: No such file or directory
[  559.131817][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  560.172049][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  560.198275][T20583] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6024'.
[  560.449178][T20589] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  560.731969][  T794] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  560.868064][T20609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6037'.
[  560.881850][  T794] usb 10-1: Using ep0 maxpacket: 8
[  560.886999][  T794] usb 10-1: config index 0 descriptor too short (expected 30482, got 18)
[  560.893174][  T794] usb 10-1: config 0 has too many interfaces: 101, using maximum allowed: 32
[  560.896875][  T794] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 101
[  560.903645][  T794] usb 10-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00
[  560.908564][  T794] usb 10-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0
[  560.914395][  T794] usb 10-1: Product: syz
[  560.916194][  T794] usb 10-1: Manufacturer: syz
[  560.920059][  T794] usb 10-1: config 0 descriptor??
[  560.932072][  T794] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected
[  560.936422][  T794] usb 10-1: Detected FT2232C/D
[  561.128812][  T794] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  561.135481][  T794] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  561.147976][  T794] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  561.154800][  T794] usb 10-1: USB disconnect, device number 15
[  561.159903][  T794] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  561.171993][  T794] ftdi_sio 10-1:0.0: device disconnected
[  561.212074][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  561.621612][T20629] loop7: detected capacity change from 0 to 1024
[  561.629528][T20629] EXT4-fs: mb_optimize_scan should be set to 0 or 1.
[  562.255784][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  562.814877][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  562.918381][T20668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6060'.
[  563.292254][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  564.331816][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  564.452071][T20726] 9pnet_fd: Insufficient options for proto=fd
[  564.822393][T20731] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6085'.
[  565.040772][T20745] loop7: detected capacity change from 0 to 512
[  565.069762][T20745] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  565.228264][T14328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  565.371915][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  565.818540][T20765] overlayfs: failed to clone upperpath
[  565.868061][T20767] 9pnet_fd: Insufficient options for proto=fd
[  565.881872][  T794] usb 10-1: new full-speed USB device number 16 using dummy_hcd
[  566.034018][  T794] usb 10-1: config 0 has an invalid interface number: 235 but max is 0
[  566.039841][  T794] usb 10-1: config 0 has no interface number 0
[  566.044068][  T794] usb 10-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid maxpacket 65535, setting to 64
[  566.048857][  T794] usb 10-1: config 0 interface 235 has no altsetting 0
[  566.054795][  T794] usb 10-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18
[  566.058600][  T794] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  566.062141][  T794] usb 10-1: Product: syz
[  566.063952][  T794] usb 10-1: Manufacturer: syz
[  566.065950][  T794] usb 10-1: SerialNumber: syz
[  566.070171][  T794] usb 10-1: config 0 descriptor??
[  566.073522][T20759] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  566.078984][  T794] keyspan 10-1:0.235: Keyspan 1 port adapter converter detected
[  566.082508][  T794] keyspan 10-1:0.235: found no endpoint descriptor for endpoint 87
[  566.085993][  T794] keyspan 10-1:0.235: found no endpoint descriptor for endpoint 7
[  566.090485][  T794] keyspan 10-1:0.235: found no endpoint descriptor for endpoint 81
[  566.094550][  T794] keyspan 10-1:0.235: found no endpoint descriptor for endpoint 1
[  566.098331][  T794] keyspan 10-1:0.235: found no endpoint descriptor for endpoint 85
[  566.103101][  T794] usb 10-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  566.283985][  T794] usb 10-1: USB disconnect, device number 16
[  566.292801][  T794] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  566.296887][  T794] keyspan 10-1:0.235: device disconnected
[  566.411927][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  566.687000][T20783] (syz.1.6110,20783,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory.
[  567.461996][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  568.491860][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  568.980620][T20833] wg1 speed is unknown, defaulting to 1000
[  569.109486][T20835] netlink: 'syz.1.6134': attribute type 2 has an invalid length.
[  569.532155][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  570.408826][T20874] autofs: Unknown parameter 'no9 PG!8E	'
[  570.453385][T20876] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  570.582077][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  571.617683][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  571.700024][T20907] netlink: 'syz.1.6163': attribute type 3 has an invalid length.
[  571.703798][T20907] netlink: 'syz.1.6163': attribute type 27 has an invalid length.
[  572.652241][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  573.645449][T20933] loop7: detected capacity change from 0 to 32768
[  573.650157][T20941] ceph: No mds server is up or the cluster is laggy
[  573.660961][T18321] libceph: connect (1)[c::]:6789 error -101
[  573.668059][T18321] libceph: mon0 (1)[c::]:6789 connect error
[  573.689501][T20933] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  573.692754][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  573.727539][T20956] openvswitch: netlink: IPv6 tunnel dst address is zero
[  573.737324][T20933] XFS (loop7): Ending clean mount
[  573.781397][T20933] XFS (loop7): Quotacheck needed: Please wait.
[  573.838006][T20933] XFS (loop7): Quotacheck: Done.
[  573.902834][T14328] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  574.738708][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  574.780873][T20983] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6190'.
[  575.233986][T21003] gfs2: gfs2 mount does not exist
[  575.388160][T21010] loop7: detected capacity change from 0 to 256
[  575.431554][T21010] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  575.781916][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  576.324137][T21064] overlayfs: failed to clone upperpath
[  576.493786][T18321] page_pool_release_retry() stalled pool shutdown: id 86, 21 inflight 60 sec
[  576.549774][T21074] dvmrp9: left allmulticast mode
[  576.804827][T21086] netlink: 'syz.9.6233': attribute type 29 has an invalid length.
[  576.822007][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  576.989541][T21100] netlink: 'syz.9.6240': attribute type 3 has an invalid length.
[  577.045801][T21102] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  577.212415][T21110] loop7: detected capacity change from 0 to 8192
[  577.300113][T21110] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[  577.307946][T21110] FAT-fs (loop7): Filesystem has been set read-only
[  577.311296][T21110] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[  577.620705][T21137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6259'.
[  577.650780][T21137] macsec0: entered allmulticast mode
[  577.661910][T21137] bridge0: entered allmulticast mode
[  577.672662][T21137] bridge0: port 4(macsec0) entered blocking state
[  577.677759][T21137] bridge0: port 4(macsec0) entered disabled state
[  577.713172][T21137] bridge0: left allmulticast mode
[  577.851933][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  577.954728][T21148] IPVS: persistence engine module ip_vs_pe_s not found
[  578.469037][T21163] bridge0: entered promiscuous mode
[  578.473748][T21163] macvtap2: entered allmulticast mode
[  578.477715][T21163] bridge0: entered allmulticast mode
[  578.483023][T21163] bridge0: port 2(macvtap2) entered blocking state
[  578.489747][T21163] bridge0: port 2(macvtap2) entered disabled state
[  578.497386][T21163] bridge0: left allmulticast mode
[  578.499578][T21163] bridge0: left promiscuous mode
[  578.892053][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  579.048440][T21177] loop7: detected capacity change from 0 to 32768
[  579.061943][T21177] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.6277 (21177)
[  579.081336][T21177] BTRFS info (device loop7): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  579.096424][T21177] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm
[  579.217023][T21177] BTRFS info (device loop7): enabling ssd optimizations
[  579.228742][T21177] BTRFS info (device loop7): enabling free space tree
[  579.263398][T14328] BTRFS info (device loop7): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  579.835997][T21214] loop7: detected capacity change from 0 to 32768
[  579.875456][T21214] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode.
[  579.890818][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  579.890833][   T33] audit: type=1326 audit(1758860950.278:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21217 comm="syz.1.6289" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e58f8ec29 code=0x0
[  579.909077][T21214] (syz.7.6282,21214,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  579.942153][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  579.958788][T14328] ocfs2: Unmounting device (7,7) on (node local)
[  580.971903][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  582.011906][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  582.979638][T21345] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  582.983800][T21345] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  583.051959][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  583.399622][T21357] loop7: detected capacity change from 0 to 764
[  583.717102][T21363] loop7: detected capacity change from 0 to 128
[  583.728898][T21363] FAT-fs (loop7): Directory bread(block 32) failed
[  583.731603][T21363] FAT-fs (loop7): Directory bread(block 33) failed
[  583.734510][T21363] FAT-fs (loop7): Directory bread(block 34) failed
[  583.737174][T21363] FAT-fs (loop7): Directory bread(block 35) failed
[  583.739779][T21363] FAT-fs (loop7): Directory bread(block 36) failed
[  583.742797][T21363] FAT-fs (loop7): Directory bread(block 37) failed
[  583.745940][T21363] FAT-fs (loop7): Directory bread(block 38) failed
[  583.748512][T21363] FAT-fs (loop7): Directory bread(block 39) failed
[  583.751336][T21363] FAT-fs (loop7): Directory bread(block 40) failed
[  583.754475][T21363] FAT-fs (loop7): Directory bread(block 41) failed
[  583.955578][T21377] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  584.091886][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  584.188095][T21385] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6366'.
[  585.004803][T21393] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6369'.
[  585.004857][T21391] loop7: detected capacity change from 0 to 32768
[  585.008575][T21393] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6369'.
[  585.031168][T21393] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6369'.
[  585.047126][T21393] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6369'.
[  585.050842][T21393] netlink: 'syz.9.6369': attribute type 6 has an invalid length.
[  585.131897][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  585.252906][T21402] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6370'.
[  585.618294][T21428] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  586.172118][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  586.215028][T21439] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6390'.
[  587.211923][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  587.457900][T21463] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  588.251893][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  588.265025][T21483] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6408'.
[  588.481378][T21495] netlink: 'syz.9.6415': attribute type 1 has an invalid length.
[  589.291906][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  589.600391][T21557] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  589.649472][T21560] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6445'.
[  589.742681][T21567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6449'.
[  589.911872][    T9] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[  590.081910][    T9] usb 10-1: Using ep0 maxpacket: 8
[  590.086051][    T9] usb 10-1: config 0 has an invalid descriptor of length 91, skipping remainder of the config
[  590.090397][    T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x1 has an invalid bInterval 171, changing to 7
[  590.095664][    T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 9209, setting to 1024
[  590.100331][    T9] usb 10-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  590.106061][    T9] usb 10-1: config 0 interface 0 has no altsetting 0
[  590.112230][    T9] usb 10-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  590.115954][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.119432][    T9] usb 10-1: Product: syz
[  590.121267][    T9] usb 10-1: Manufacturer: syz
[  590.125067][    T9] usb 10-1: SerialNumber: syz
[  590.129822][    T9] usb 10-1: config 0 descriptor??
[  590.138722][    T9] snd_usb_toneport 10-1:0.0: Line 6 TonePort UX2 found
[  590.340548][    T9] snd_usb_toneport 10-1:0.0: cannot get proper max packet size
[  590.344093][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  590.347495][    T9] snd_usb_toneport 10-1:0.0: Line 6 TonePort UX2 now disconnected
[  590.353670][    T9] snd_usb_toneport 10-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  590.544791][ T9174] usb 10-1: USB disconnect, device number 17
[  591.371837][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  591.472606][T21595] loop7: detected capacity change from 0 to 4096
[  591.498007][T21600] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  591.527496][T21595] NILFS error (device loop7): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1
[  591.549329][T21595] Remounting filesystem read-only
[  591.682707][T21606] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6467'.
[  592.411873][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  593.452006][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  594.455348][T21695] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6503'.
[  594.501774][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  594.597553][T21699] loop7: detected capacity change from 0 to 512
[  594.605875][T21699] EXT4-fs: Ignoring removed oldalloc option
[  594.619081][T21699] EXT4-fs (loop7): 1 truncate cleaned up
[  594.624661][T21699] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  594.658567][T14328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  595.531916][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  595.667094][T21719] loop7: detected capacity change from 0 to 4096
[  595.671460][T21719] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  595.692320][T21719] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  595.699207][T21719] ntfs3(loop7): ino=19, mi_enum_attr
[  595.830961][T21723] loop7: detected capacity change from 0 to 128
[  595.869764][T21723] qnx6: unable to set blocksize
[  596.164478][T21732] program syz.9.6517 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  596.229913][T21738] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6521'.
[  596.377546][T21750] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6527'.
[  596.581811][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  596.795191][T21764] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.6533'.
[  596.799650][T21764] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.6533'.
[  597.040616][ T9174] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[  597.191908][ T9174] usb 10-1: Using ep0 maxpacket: 32
[  597.196258][ T9174] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  597.199442][ T9174] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  597.205451][ T9174] usb 10-1: config 0 descriptor??
[  597.415947][ T9174] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  597.425480][ T9174] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  597.434216][ T9174] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  597.438532][ T9174] usb 10-1: media controller created
[  597.454503][ T9174] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  597.611884][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  597.712855][   T33] audit: type=1800 audit(1758860968.108:639): pid=21779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6540" name="nullb0" dev="tmpfs" ino=4060 res=0 errno=0
[  598.028785][T21786] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  598.067167][   T33] audit: type=1326 audit(1758860968.458:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21787 comm="syz.1.6544" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58f8ec29 code=0x7ffc0000
[  598.076816][   T33] audit: type=1326 audit(1758860968.458:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21787 comm="syz.1.6544" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58f8ec29 code=0x7ffc0000
[  598.128705][ T9174] az6027: usb out operation failed. (-71)
[  598.130863][T21792] 9pnet_fd: Insufficient options for proto=fd
[  598.134320][ T9174] az6027: usb out operation failed. (-71)
[  598.136687][ T9174] stb0899_attach: Driver disabled by Kconfig
[  598.139167][ T9174] az6027: no front-end attached
[  598.139167][ T9174] 
[  598.153717][ T9174] az6027: usb out operation failed. (-71)
[  598.155784][ T9174] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  598.160052][ T9174] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input23
[  598.174423][ T9174] dvb-usb: schedule remote query interval to 400 msecs.
[  598.177523][ T9174] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  598.193325][ T9174] usb 10-1: USB disconnect, device number 18
[  598.289099][ T9174] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  598.304248][T21804] overlayfs: cannot append lower layer
[  598.335757][T21809] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6555'.
[  598.339126][T21809] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6555'.
[  598.367086][T21812] netlink: 18316 bytes leftover after parsing attributes in process `syz.9.6556'.
[  598.389212][T21816] veth1_to_bridge: entered promiscuous mode
[  598.391437][T21816] veth1_to_bridge: left promiscuous mode
[  598.655181][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  599.079696][   T33] audit: type=1326 audit(1758860969.468:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21825 comm="syz.7.6562" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0f558ec29 code=0x0
[  599.701849][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  600.075918][T21846] netlink: 'syz.7.6571': attribute type 1 has an invalid length.
[  600.078989][T21846] netlink: 'syz.7.6571': attribute type 1 has an invalid length.
[  600.083621][T21846] netlink: 216 bytes leftover after parsing attributes in process `syz.7.6571'.
[  600.142652][T21850] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6573'.
[  600.211309][T21856] binder: 21854:21856 ioctl c0306201 2000000001c0 returned -22
[  600.741795][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  601.710435][T15179] Bluetooth: hci3: command 0x1003 tx timeout
[  601.715040][ T5941] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  601.781885][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  601.959566][T21891] loop7: detected capacity change from 0 to 164
[  601.975753][T21891] rock: directory entry would overflow storage
[  601.978067][T21891] rock: sig=0x4f50, size=4, remaining=3
[  601.979959][T21891] isofs: Unable to find the ".." directory for NFS.
[  602.522727][T21906] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  602.617734][T10985] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  602.629608][T10985] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  602.646083][ T9174] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  602.811999][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  602.932037][ T9174] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  603.532077][ T7482] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  603.851821][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  603.893034][T21955] netlink: 'syz.9.6618': attribute type 1 has an invalid length.
[  604.457578][T21960] ptrace attach of ""[21961] was attempted by "/syz-executor exec"[21960]
[  604.840308][T21974] netlink: 96 bytes leftover after parsing attributes in process `syz.9.6626'.
[  604.891907][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  605.941848][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  605.984689][T22003] program syz.9.6638 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  606.034829][T22005] batman_adv: batadv0: Adding interface: geneve2
[  606.037575][T22005] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active
[  606.715843][T22018] tmpfs: Bad value for 'mpol'
[  606.971938][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  606.972048][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  608.011808][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  608.074104][T22082] tmpfs: Bad value for 'nr_blocks'
[  608.758991][   T33] audit: type=1326 audit(1758860979.148:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22093 comm="syz.1.6680" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58f8ec29 code=0x7fc00000
[  608.846636][T22105] loop7: detected capacity change from 0 to 512
[  608.862036][T22105] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  608.878277][T22105] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  608.884068][T22105] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  608.887474][T22105] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.6681: Failed to acquire dquot type 1
[  608.901646][T22105] EXT4-fs (loop7): 1 truncate cleaned up
[  608.905067][T22105] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  608.929268][T14328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  608.975109][T22110] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6682'.
[  609.051803][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  609.104326][   T33] audit: type=1326 audit(1758860979.478:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22093 comm="syz.1.6680" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e58f90b47 code=0x7fc00000
[  609.234468][T22122] netlink: 3 bytes leftover after parsing attributes in process `syz.7.6689'.
[  609.422419][T22143] netlink: 'syz.1.6698': attribute type 1 has an invalid length.
[  609.612158][  T794] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[  609.763689][  T794] usb 10-1: config 0 has an invalid interface number: 217 but max is 0
[  609.767062][  T794] usb 10-1: config 0 has no interface number 0
[  609.778701][  T794] usb 10-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  609.784801][  T794] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  609.788312][  T794] usb 10-1: Product: syz
[  609.790156][  T794] usb 10-1: Manufacturer: syz
[  609.793807][  T794] usb 10-1: SerialNumber: syz
[  609.800987][  T794] usb 10-1: config 0 descriptor??
[  609.805304][  T794] hub 10-1:0.217: bad descriptor, ignoring hub
[  609.807418][  T794] hub 10-1:0.217: probe with driver hub failed with error -5
[  610.091814][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  610.154575][  T794] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  610.225732][  T794] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  610.233454][  T794] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  610.237178][  T794] usb 10-1: media controller created
[  610.260810][  T794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  610.296956][  T794] DVB: Unable to find symbol dib7000p_attach()
[  610.299449][  T794] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  610.341843][  T794] rc_core: IR keymap rc-dib0700-rc5 not found
[  610.344551][  T794] Registered IR keymap rc-empty
[  610.347012][  T794] dvb-usb: could not initialize remote control.
[  610.349795][  T794] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[  610.362287][  T794] usb 10-1: USB disconnect, device number 19
[  610.411639][  T794] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[  611.131869][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  611.495792][T22188] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  611.683988][T22201] netlink: 'syz.9.6723': attribute type 12 has an invalid length.
[  611.735649][T22206] netlink: 'syz.1.6724': attribute type 12 has an invalid length.
[  611.739049][T22206] netlink: 'syz.1.6724': attribute type 29 has an invalid length.
[  611.746505][T22206] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6724'.
[  611.750319][T22206] netlink: 59 bytes leftover after parsing attributes in process `syz.1.6724'.
[  611.835894][T22212] netlink: 'syz.1.6728': attribute type 21 has an invalid length.
[  611.839438][T22212] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6728'.
[  612.172009][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  612.313479][T22246] dummy0: entered allmulticast mode
[  612.553269][T22252] loop7: detected capacity change from 0 to 32768
[  612.568719][T22252] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  612.591365][T22252] XFS (loop7): Ending clean mount
[  612.596042][T22252] XFS (loop7): Quotacheck needed: Please wait.
[  612.631332][T22252] XFS (loop7): Quotacheck: Done.
[  612.661521][T14328] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  612.746578][    T9] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[  612.906211][    T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  612.915555][    T9] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  612.921965][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  612.926310][    T9] usb 10-1: Product: syz
[  612.928116][    T9] usb 10-1: Manufacturer: syz
[  612.930087][    T9] usb 10-1: SerialNumber: syz
[  612.950871][    T9] usb 10-1: config 0 descriptor??
[  613.213454][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  613.383032][    T9] usb 10-1: USB disconnect, device number 20
[  614.251802][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  615.243569][T22322] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  615.291913][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  615.931970][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  616.331811][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  617.381810][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  617.528308][T22366] loop7: detected capacity change from 0 to 32768
[  617.528897][T22374] vlan2: entered promiscuous mode
[  617.532993][T22366] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.6788 (22366)
[  617.544388][T22366] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  617.548644][T22366] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  617.755425][T22366] BTRFS info (device loop7): rebuilding free space tree
[  617.769364][T22366] BTRFS info (device loop7): disabling free space tree
[  617.771614][T22366] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  617.774924][T22366] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  617.783200][T22366] BTRFS info (device loop7): setting nodatasum
[  617.785249][T22366] BTRFS info (device loop7): setting nodatacow
[  617.787145][T22366] BTRFS info (device loop7): enabling ssd optimizations
[  617.789354][T22366] BTRFS info (device loop7): force clearing of disk cache
[  617.792327][T22366] BTRFS info (device loop7): enabling auto defrag
[  617.794326][T22366] BTRFS info (device loop7): doing ref verification
[  617.815226][T22366] BTRFS info (device loop7): setting compat-ro feature flag for VERITY (0x4)
[  617.854510][T14328] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  617.862115][T22399] sctp: [Deprecated]: syz.9.6796 (pid 22399) Use of struct sctp_assoc_value in delayed_ack socket option.
[  617.862115][T22399] Use struct sctp_sack_info instead
[  618.411895][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  618.539062][T22427] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6809'.
[  618.596842][T22431] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  618.602080][T22431] block device autoloading is deprecated and will be removed.
[  618.689949][ T5941] Bluetooth: hci0: Unknown advertising packet type: 0x7f
[  618.690078][ T5941] Bluetooth: hci0: Malformed LE Event: 0x0d
[  618.826461][T22448] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  619.451788][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  619.635214][T22468] loop7: detected capacity change from 0 to 32768
[  619.695883][T22468] ERROR: (device loop7): diAllocBit: iag inconsistent
[  619.695883][T22468] 
[  619.715734][T22468] ERROR: (device loop7): remounting filesystem as read-only
[  619.718148][T22468] ialloc: diAlloc returned -5!
[  620.104337][T22494] loop7: detected capacity change from 0 to 256
[  620.107720][T22494] msdos: Bad value for 'time_offset'
[  620.128408][T22494] loop7: detected capacity change from 0 to 2048
[  620.172852][T22102]  loop7: p3 < > p4 < >
[  620.174759][T22102] loop7: partition table partially beyond EOD, truncated
[  620.177731][T22102] loop7: p3 start 4284289 is beyond EOD, truncated
[  620.191900][T22494]  loop7: p3 < > p4 < >
[  620.193706][T22494] loop7: partition table partially beyond EOD, truncated
[  620.196825][T22494] loop7: p3 start 4284289 is beyond EOD, truncated
[  620.205723][    T9] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[  620.248150][ T5299]  loop7: p3 < > p4 < >
[  620.253589][ T5299] loop7: partition table partially beyond EOD, truncated
[  620.256422][ T5299] loop7: p3 start 4284289 is beyond EOD, truncated
[  620.338993][T22102] udevd[22102]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[  620.352526][T22102] udevd[22102]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[  620.377126][    T9] usb 10-1: Using ep0 maxpacket: 16
[  620.379512][T22102] udevd[22102]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[  620.393660][    T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  620.397107][    T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  620.438620][    T9] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  620.441627][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  620.452239][    T9] usb 10-1: Product: syz
[  620.453699][    T9] usb 10-1: Manufacturer: syz
[  620.455275][    T9] usb 10-1: SerialNumber: syz
[  620.492562][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  620.514188][T22508] loop7: detected capacity change from 0 to 4096
[  620.529184][T22508] ntfs3(loop7): Primary boot: invalid sectors per cluster 75.
[  620.545259][T22508] ntfs3(loop7): try to read out of volume at offset 0x1ffe00
[  620.707582][    T9] usb 10-1: 0:2 : does not exist
[  620.763765][    T9] usb 10-1: USB disconnect, device number 21
[  620.923671][T22516] loop7: detected capacity change from 0 to 32768
[  620.937324][   T33] audit: type=1800 audit(1758860991.328:645): pid=22516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.6851" name="file1" dev="loop7" ino=7 res=0 errno=0
[  621.135614][T22516] ERROR: (device loop7): dbAdjCtl: the maximum free buddy is not the old root
[  621.135614][T22516] 
[  621.141362][T22516] ERROR: (device loop7): remounting filesystem as read-only
[  621.541785][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  622.346759][T22569] loop7: detected capacity change from 0 to 32768
[  622.360615][T22569] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.6873 (22569)
[  622.383136][T22569] BTRFS info (device loop7): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  622.386521][T22569] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm
[  622.400357][T22584] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6878'.
[  622.475967][T22569] BTRFS info (device loop7): enabling ssd optimizations
[  622.478403][T22569] BTRFS info (device loop7): turning on sync discard
[  622.480691][T22569] BTRFS info (device loop7): enabling free space tree
[  622.491803][T22569] BTRFS info (device loop7): use lzo compression, level 1
[  622.529097][T14328] BTRFS info (device loop7): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  622.581801][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  622.693443][T22611] netlink: 276 bytes leftover after parsing attributes in process `syz.1.6886'.
[  623.611851][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  624.023278][T22645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6899'.
[  624.257596][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  624.365410][T22659] netlink: 'syz.1.6905': attribute type 30 has an invalid length.
[  624.652099][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  625.691789][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  625.720413][T22700] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6923'.
[  626.731841][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  627.039716][T22740] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6939'.
[  627.772965][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  628.146465][T22752] overlayfs: failed to clone upperpath
[  628.597254][T22772] block nbd9: Attempted send on invalid socket
[  628.600087][T22772] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  628.607079][T22772] block nbd9: Attempted send on invalid socket
[  628.611167][T22772] I/O error, dev nbd9, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  628.811789][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  629.524394][T22803] openvswitch: netlink: Unknown key attributes 2
[  629.636282][T22810] loop7: detected capacity change from 0 to 2048
[  629.645618][T22810] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  629.851793][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  630.502497][ T9174] usb 10-1: new full-speed USB device number 22 using dummy_hcd
[  630.675440][ T9174] usb 10-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  630.679098][ T9174] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  630.682486][ T9174] usb 10-1: Product: syz
[  630.684407][ T9174] usb 10-1: Manufacturer: syz
[  630.686530][ T9174] usb 10-1: SerialNumber: syz
[  630.699771][ T9174] usb 10-1: config 0 descriptor??
[  630.718840][ T9174] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  630.737237][ T9174] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  630.764238][ T9174] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19)
[  630.892021][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  630.934047][ T9174] usb 10-1: USB disconnect, device number 22
[  631.378215][T22823] loop7: detected capacity change from 0 to 1024
[  631.418902][T22823] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  631.449473][T14328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  631.931932][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  632.411375][T22845] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6986'.
[  632.971823][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  633.075865][T22863] Device name not specified.
[  633.075865][T22863] 
[  633.851980][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  634.011896][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  635.045921][T22910] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  635.051808][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  635.086233][   T33] audit: type=1326 audit(1758861005.478:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22911 comm="syz.1.7016" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e58f8ec29 code=0x0
[  635.707759][T22918] loop7: detected capacity change from 0 to 32768
[  635.711104][T22918] XFS: noattr2 mount option is deprecated.
[  635.715341][T22918] XFS (loop7): attr2 and noattr2 cannot both be specified.
[  636.091772][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  636.386226][T22938] 8021q: adding VLAN 0 to HW filter on device batadv1
[  636.399055][T22938] overlayfs: failed to clone upperpath
[  636.492158][ T7482] page_pool_release_retry() stalled pool shutdown: id 86, 21 inflight 120 sec
[  637.131863][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  637.655629][T22964] sctp: [Deprecated]: syz.1.7040 (pid 22964) Use of struct sctp_assoc_value in delayed_ack socket option.
[  637.655629][T22964] Use struct sctp_sack_info instead
[  637.659029][T22962] netlink: 'syz.9.7039': attribute type 62 has an invalid length.
[  638.171759][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  639.028807][T23020] loop7: detected capacity change from 0 to 16
[  639.034739][T23020] erofs (device loop7): mounted with root inode @ nid 36.
[  639.080091][T23023] loop7: detected capacity change from 0 to 128
[  639.099414][T23023] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  639.104117][T23023] ext4 filesystem being mounted at /793/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  639.118565][T23023] fscrypt: AES-128-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  639.211833][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  639.221322][T23023] fscrypt: AES-128-CBC-ESSIV using implementation "essiv(cbc(ecb(aes-fixed-time)),sha256-lib)"
[  639.291298][T14328] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  639.795356][T23056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7080'.
[  640.064756][   T33] audit: type=1326 audit(1758861010.448:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23074 comm="syz.9.7089" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe06518ec29 code=0x0
[  640.112062][T23081] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7090'.
[  640.117565][T23081] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7090'.
[  640.130072][T23081] erspan0: entered promiscuous mode
[  640.139504][T23081] gretap0: entered promiscuous mode
[  640.251787][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  641.291762][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  641.479151][T23112] loop7: detected capacity change from 0 to 1024
[  641.487935][T23112] EXT4-fs: Ignoring removed bh option
[  641.500766][T23112] EXT4-fs (loop7): bad geometry: block count 768 exceeds size of device (512 blocks)
[  641.596068][T23116] vlan3: entered allmulticast mode
[  641.598658][T23116] bridge0: port 2(vlan3) entered blocking state
[  641.601358][T23116] bridge0: port 2(vlan3) entered disabled state
[  641.610008][T23116] vlan3: entered promiscuous mode
[  642.087544][T23148] netlink: 'syz.1.7121': attribute type 24 has an invalid length.
[  642.331969][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  643.372100][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  643.399835][T23178] netlink: 146780 bytes leftover after parsing attributes in process `syz.7.7135'.
[  643.624553][ T7482] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[  643.775140][ T7482] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  643.779334][ T7482] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  643.785145][ T7482] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  643.789797][ T7482] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  643.793409][ T7482] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  643.798006][ T7482] usb 10-1: config 0 descriptor??
[  644.221316][ T7482] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[  644.421757][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  644.698553][T23204] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  645.451916][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  645.528388][T23176] usb 10-1: string descriptor 0 read error: -2
[  646.419249][T23255] 9pnet: p9_errstr2errno: server reported unknown error @
[  646.491803][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  646.556462][T23261] loop7: detected capacity change from 0 to 2048
[  646.577101][T23264] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  646.633442][T23266] netlink: 'syz.1.7177': attribute type 5 has an invalid length.
[  646.644711][  T794] usb 10-1: reset high-speed USB device number 23 using dummy_hcd
[  646.664554][  T794] usb 10-1: device reset changed ep0 maxpacket size!
[  646.692467][T23268] tap0: tun_chr_ioctl cmd 2147767506
[  646.695023][T23268] tap0: tun_chr_ioctl cmd 1074025677
[  646.703088][ T7482] usb 10-1: USB disconnect, device number 23
[  646.705672][T23268] tap0: linktype set to 6
[  646.871968][ T7482] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[  646.907979][T23278] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7183'.
[  647.132243][ T7482] usb 10-1: Using ep0 maxpacket: 16
[  647.146851][ T7482] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  647.153415][ T7482] usb 10-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[  647.157169][ T7482] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  647.160535][ T7482] usb 10-1: Product: syz
[  647.163250][ T7482] usb 10-1: Manufacturer: syz
[  647.165185][ T7482] usb 10-1: SerialNumber: syz
[  647.169371][ T7482] usb 10-1: config 0 descriptor??
[  647.176941][ T7482] pegasus_notetaker 10-1:0.0: Invalid number of endpoints
[  647.179975][ T7482] pegasus_notetaker 10-1:0.0: probe with driver pegasus_notetaker failed with error -22
[  647.531837][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  647.570092][ T7482] usb 10-1: USB disconnect, device number 24
[  648.571907][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  649.171057][T23321] loop7: detected capacity change from 0 to 128
[  649.212222][T23321] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  649.218572][T23321] ext4 filesystem being mounted at /833/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  649.234978][T23321] EXT4-fs (loop7): resizing filesystem from 64 to 1 blocks
[  649.238083][T23321] EXT4-fs warning (device loop7): ext4_resize_fs:2042: can't shrink FS - resize aborted
[  649.257961][T14328] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  649.427164][T23337] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  649.611792][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  649.631449][T23345] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0
[  650.487537][T10985] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  650.490939][T10985] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  650.519151][T18321] wg1 speed is unknown, defaulting to 1000
[  650.523752][T18321] syz0: Port: 1 Link DOWN
[  650.615491][T10985] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  650.618887][T10985] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  650.651768][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  650.769088][T10985] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  650.774811][T10985] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  650.903191][T10985] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  650.912168][T10985] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  651.147515][T10985] bridge_slave_1: left allmulticast mode
[  651.149766][T10985] bridge_slave_1: left promiscuous mode
[  651.158250][T10985] bridge0: port 2(bridge_slave_1) entered disabled state
[  651.165019][T10985] bridge_slave_0: left allmulticast mode
[  651.167406][T10985] bridge_slave_0: left promiscuous mode
[  651.169919][T10985] bridge0: port 1(bridge_slave_0) entered disabled state
[  651.172351][ T7482] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[  651.246847][T23381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7225'.
[  651.330233][ T7482] usb 10-1: Using ep0 maxpacket: 8
[  651.346134][ T7482] usb 10-1: config 0 has an invalid interface number: 9 but max is 0
[  651.348807][ T7482] usb 10-1: config 0 has no interface number 0
[  651.350970][ T7482] usb 10-1: config 0 interface 9 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64
[  651.356134][ T7482] usb 10-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=23.ea
[  651.359238][ T7482] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  651.363939][ T7482] usb 10-1: config 0 descriptor??
[  651.367604][ T7482] usb 10-1: bad CDC descriptors
[  651.373844][ T7482] cdc_acm 10-1:0.9: Zero length descriptor references
[  651.378756][ T7482] cdc_acm 10-1:0.9: probe with driver cdc_acm failed with error -22
[  651.458560][T10985] dvmrp0 (unregistering): left allmulticast mode
[  651.572603][ T7482] usb 10-1: USB disconnect, device number 25
[  651.701827][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  651.745780][T10985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  651.750681][T10985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  651.755727][T10985] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  651.759564][T10985] bond0 (unregistering): Released all slaves
[  651.891655][T10985] bond1 (unregistering): Released all slaves
[  651.976925][T10985] : left promiscuous mode
[  652.582112][T10985] tipc: Disabling bearer <udp:syz2>
[  652.588820][T10985] tipc: Left network mode
[  652.731920][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  652.961264][T10985] hsr_slave_0: left promiscuous mode
[  652.979611][T10985] hsr_slave_1: left promiscuous mode
[  652.983142][T10985] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  652.986260][T10985] batman_adv: batadv0: Removing interface: batadv_slave_0
[  652.990396][T10985] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  652.993541][T10985] batman_adv: batadv0: Removing interface: batadv_slave_1
[  653.040435][T10985] veth1_macvtap: left promiscuous mode
[  653.052615][T10985] veth0_macvtap: left promiscuous mode
[  653.062916][T10985] veth1_vlan: left promiscuous mode
[  653.065143][T10985] veth0_vlan: left promiscuous mode
[  653.452410][T23452] ptrace attach of "/syz-executor exec"[14328] was attempted by "                                                                \x0cH;'Sde/Ȑ|zPиW\x0bP<I7{WrעӇamL5{޶-ڨظEfYS7?Vs\x0bM`gر/◒UCΐOGDn\x07wm}Oqp]K|I(9/kY_֤vqyrƲ.+/ny]6B\x5c*Lo \x0aB\x0dAn\x0bptQUolLobBMȹ.T3#(D\x1b?-MM\x0d{XLhl1GJ(\x0a\x07b\x0cf\x5cLe#ywO%0,zǂr\x5cH\x22@)ElĪo=0}|m ~MUK\x0bQoDU1h$tQf\x0b;\x0bvNT/rPx0m؇dG>t5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5
[  653.474621][    T9] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[  653.747872][    T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  653.764586][    T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  653.769252][    T9] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  653.773172][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  653.776919][    T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  653.794180][    T9] usb 10-1: config 0 descriptor??
[  653.914012][T10985] team0 (unregistering): Port device team_slave_1 removed
[  653.949222][T10985] team0 (unregistering): Port device team_slave_0 removed
[  654.213270][    T9] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0
[  654.220930][    T9] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0
[  654.226926][    T9] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0
[  654.229674][    T9] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0
[  654.232808][    T9] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0
[  654.235194][    T9] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0
[  654.237531][    T9] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0
[  654.253349][    T9] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0
[  654.415392][    T9] cp2112 0003:10C4:EA90.0014: Part Number: 0x00 Device Version: 0x00
[  654.809578][T10985] IPVS: stop unused estimator thread 0...
[  654.812092][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  654.843667][T23476] netlink: 'syz.1.7259': attribute type 10 has an invalid length.
[  654.880122][   T33] audit: type=1326 audit(1758861025.268:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23479 comm="syz.1.7260" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58f8ec29 code=0x7ffc0000
[  654.888954][   T33] audit: type=1326 audit(1758861025.268:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23479 comm="syz.1.7260" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58f8ec29 code=0x7ffc0000
[  654.899556][   T33] audit: type=1326 audit(1758861025.288:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23479 comm="syz.1.7260" exe="/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f6e58f8ec29 code=0x7ffc0000
[  654.910576][   T33] audit: type=1326 audit(1758861025.288:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23479 comm="syz.1.7260" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58f8ec29 code=0x7ffc0000
[  654.919859][   T33] audit: type=1326 audit(1758861025.288:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23479 comm="syz.1.7260" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58f8ec29 code=0x7ffc0000
[  655.024496][    T9] cp2112 0003:10C4:EA90.0014: error reading lock byte: -71
[  655.043571][    T9] usb 10-1: USB disconnect, device number 26
[  655.299945][   T33] audit: type=1804 audit(1758861025.688:653): pid=23492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7262" name="file0" dev="tmpfs" ino=16372 res=1 errno=0
[  655.851883][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  656.672407][T23520] netlink: 'syz.1.7271': attribute type 1 has an invalid length.
[  656.692749][T23520] bridge3: entered allmulticast mode
[  656.697291][T23520] bond5: (slave bridge3): making interface the new active one
[  656.700454][T23520] bond5: (slave bridge3): Enslaving as an active interface with an up link
[  656.874564][T23541] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  656.877771][T23541] overlayfs: failed to set xattr on upper
[  656.880159][T23541] overlayfs: ...falling back to redirect_dir=nofollow.
[  656.887067][T23541] overlayfs: ...falling back to index=off.
[  656.892351][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  656.950214][T23546] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  656.980958][T23548] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7284'.
[  657.044119][ T5989] hid-generic 0000:0000:0004.0015: unknown main item tag 0x0
[  657.047439][ T5989] hid-generic 0000:0000:0004.0015: unknown main item tag 0x0
[  657.054197][ T5989] hid-generic 0000:0000:0004.0015: unknown main item tag 0x0
[  657.060013][ T5989] hid-generic 0000:0000:0004.0015: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz1
[  657.189366][T23576] netlink: 'syz.9.7297': attribute type 29 has an invalid length.
[  657.387300][T23592] loop7: detected capacity change from 0 to 64
[  657.481241][T23596] netlink: 1315 bytes leftover after parsing attributes in process `syz.1.7307'.
[  657.613628][ T5989] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[  657.745602][T23616] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  657.773900][ T5989] usb 10-1: Using ep0 maxpacket: 16
[  657.779704][ T5989] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[  657.784670][ T5989] usb 10-1: config 0 has no interface number 0
[  657.787108][ T5989] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  657.790837][ T5989] usb 10-1: config 0 interface 1 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  657.799153][ T5989] usb 10-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d
[  657.804612][ T5989] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  657.808304][ T5989] usb 10-1: Product: syz
[  657.812280][ T5989] usb 10-1: Manufacturer: syz
[  657.814116][ T5989] usb 10-1: SerialNumber: syz
[  657.822253][ T5989] usb 10-1: config 0 descriptor??
[  657.828152][ T5989] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[  657.866513][T23623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7320'.
[  658.055178][ T5989] usb 10-1: USB disconnect, device number 27
[  658.734640][T23641] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7328'.
[  658.826642][T23644] 9pnet_virtio: no channels available for device syz
[  660.682856][T18321] IPVS: starting estimator thread 0...
[  660.812294][T23677] IPVS: using max 78 ests per chain, 187200 per kthread
[  661.376119][T23688] openvswitch: netlink: Key type 29 is not supported
[  661.802632][T23699] netlink: 'syz.9.7350': attribute type 6 has an invalid length.
[  662.528135][T23716] netlink: 25 bytes leftover after parsing attributes in process `syz.9.7358'.
[  662.700955][T23714] loop7: detected capacity change from 0 to 32768
[  663.042367][T23714] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  663.133908][T23737] ceph: No mds server is up or the cluster is laggy
[  663.138164][  T976] libceph: connect (1)[c::]:6789 error -101
[  663.147581][  T976] libceph: mon0 (1)[c::]:6789 connect error
[  663.183979][T23714] XFS (loop7): Ending clean mount
[  663.187026][T23714] XFS (loop7): Quotacheck needed: Please wait.
[  663.252452][T23714] XFS (loop7): Quotacheck: Done.
[  663.291200][T14328] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  663.518321][T23756] loop7: detected capacity change from 0 to 4096
[  663.614830][T23756] ntfs3(loop7): ino=1e, "file1" attr_set_size
[  663.622345][T23759] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7371'.
[  664.215388][T23793] netlink: 256 bytes leftover after parsing attributes in process `syz.7.7387'.
[  664.218931][T23793] ksmbd: Unknown IPC event: 0, ignore.
[  664.297925][T23798] ip6erspan0: entered promiscuous mode
[  664.511658][T23803] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7391'.
[  666.294415][T23836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7399'.
[  666.822106][T15179] Bluetooth: hci3: command 0x1003 tx timeout
[  666.822424][ T5941] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  668.850022][   T33] audit: type=1326 audit(1758861039.238:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23922 comm="syz.1.7435" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58f8ec29 code=0x7ffc0000
[  668.866565][   T33] audit: type=1326 audit(1758861039.238:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23922 comm="syz.1.7435" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58f8ec29 code=0x7ffc0000
[  668.876739][   T33] audit: type=1326 audit(1758861039.238:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23922 comm="syz.1.7435" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6e58f8ec29 code=0x7ffc0000
[  668.885628][   T33] audit: type=1326 audit(1758861039.238:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23922 comm="syz.1.7435" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58f8ec29 code=0x7ffc0000
[  668.898297][   T33] audit: type=1326 audit(1758861039.238:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23922 comm="syz.1.7435" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58f8ec29 code=0x7ffc0000
[  668.907956][   T33] audit: type=1326 audit(1758861039.238:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23922 comm="syz.1.7435" exe="/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f6e58f8ec29 code=0x7ffc0000
[  668.920972][   T33] audit: type=1326 audit(1758861039.238:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23922 comm="syz.1.7435" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58f8ec29 code=0x7ffc0000
[  668.931387][   T33] audit: type=1326 audit(1758861039.238:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23922 comm="syz.1.7435" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58f8ec29 code=0x7ffc0000
[  669.416031][T23938] netlink: 'syz.7.7440': attribute type 2 has an invalid length.
[  669.427247][T23938] : entered promiscuous mode
[  670.332271][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  670.332924][T23976] pim6reg1: entered promiscuous mode
[  670.346153][T23976] pim6reg1: entered allmulticast mode
[  670.752856][T24000] loop7: detected capacity change from 0 to 1024
[  670.830651][T24006] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7474'.
[  670.906837][   T33] audit: type=1326 audit(1758861041.298:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24015 comm="syz.9.7479" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe06518ec29 code=0x0
[  671.008304][T24025] could not open pipe file descriptor
[  671.867939][T24036] netlink: 'syz.9.7486': attribute type 4 has an invalid length.
[  671.883913][T24036] netlink: 'syz.9.7486': attribute type 4 has an invalid length.
[  672.048656][T24046] openvswitch: netlink: Flow actions attr not present in new flow.
[  673.142346][ T5989] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[  673.353634][ T5989] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  673.365808][ T5989] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  673.390239][ T5989] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  673.401210][ T5989] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  673.432334][ T5989] usb 10-1: SerialNumber: syz
[  673.646946][ T5989] usb 10-1: 0:2 : does not exist
[  673.660950][ T5989] usb 10-1: USB disconnect, device number 28
[  673.684298][T22102] udevd[22102]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  674.681811][ T5989] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[  674.833717][ T5989] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  674.838425][ T5989] usb 10-1: config 0 interface 0 has no altsetting 0
[  674.841312][ T5989] usb 10-1: New USB device found, idVendor=056a, idProduct=0343, bcdDevice= 0.00
[  674.846316][ T5989] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  674.857229][ T5989] usb 10-1: config 0 descriptor??
[  675.484709][ T5989] usb 10-1: USB disconnect, device number 29
[  677.298142][T24160] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7544'.
[  677.381078][T24160] 8021q: adding VLAN 0 to HW filter on device bond1
[  677.442831][T24165] netlink: 'syz.1.7546': attribute type 27 has an invalid length.
[  677.462926][T24165] netlink: 'syz.1.7546': attribute type 1 has an invalid length.
[  678.257123][T24179] tipc: Failed to remove unknown binding: 66,1,1/10005162:3238014145/3238014147
[  678.261470][T24179] tipc: Failed to remove unknown binding: 66,1,1/10005162:3238014145/3238014147
[  678.388315][T24185] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7556'.
[  679.561868][   T33] audit: type=1326 audit(1758861049.888:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24225 comm="syz.9.7574" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06518ec29 code=0x7ffc0000
[  679.608980][   T33] audit: type=1326 audit(1758861049.888:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24225 comm="syz.9.7574" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06518ec29 code=0x7ffc0000
[  679.624736][   T33] audit: type=1326 audit(1758861049.888:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24225 comm="syz.9.7574" exe="/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fe06518ec29 code=0x7ffc0000
[  679.647260][   T33] audit: type=1326 audit(1758861049.888:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24225 comm="syz.9.7574" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06518ec29 code=0x7ffc0000
[  679.668880][   T33] audit: type=1326 audit(1758861049.888:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24225 comm="syz.9.7574" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06518ec29 code=0x7ffc0000
[  679.699633][   T33] audit: type=1326 audit(1758861049.888:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24225 comm="syz.9.7574" exe="/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fe06518ec29 code=0x7ffc0000
[  679.721903][   T33] audit: type=1326 audit(1758861049.888:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24225 comm="syz.9.7574" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06518ec29 code=0x7ffc0000
[  679.750963][   T33] audit: type=1326 audit(1758861049.888:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24225 comm="syz.9.7574" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06518ec29 code=0x7ffc0000
[  680.250391][T24252] tmpfs: Bad value for 'mpol'
[  680.876257][T24263] netlink: 140 bytes leftover after parsing attributes in process `syz.1.7591'.
[  680.887878][T24263] netlink: 140 bytes leftover after parsing attributes in process `syz.1.7591'.
[  681.166350][T24273] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7595'.
[  681.174095][T24273] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7595'.
[  681.334111][T24282] loop7: detected capacity change from 0 to 256
[  681.761815][    T9] usb 10-1: new high-speed USB device number 30 using dummy_hcd
[  682.071949][    T9] usb 10-1: Using ep0 maxpacket: 8
[  682.075457][    T9] usb 10-1: config 0 interface 0 has no altsetting 0
[  682.077961][    T9] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  682.081432][    T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  682.089454][    T9] usb 10-1: config 0 descriptor??
[  682.276536][T24301] pim6reg: entered allmulticast mode
[  682.297463][T24301] pim6reg: left allmulticast mode
[  682.311840][    T9] usbhid 10-1:0.0: can't add hid device: -71
[  682.314399][    T9] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  682.333986][    T9] usb 10-1: USB disconnect, device number 30
[  682.439670][T24310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7612'.
[  682.519678][T24314] loop7: detected capacity change from 0 to 4096
[  682.527124][T24314] ntfs3(loop7): mft corrupted
[  682.529159][T24314] ntfs3(loop7): Failed to load $MFT.
[  682.604149][T24320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7615'.
[  682.736322][T24328] JFS: charset not found
[  684.128917][T24363] netlink: 248 bytes leftover after parsing attributes in process `syz.9.7635'.
[  684.166331][    C1] ==================================================================
[  684.169809][    C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  684.173187][    C1] Write of size 8 at addr ffff8881225a1b30 by task kworker/u8:0/12
[  684.177063][    C1] 
[  684.178498][    C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  684.178515][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  684.178524][    C1] Workqueue: bat_events batadv_nc_worker
[  684.178551][    C1] Call Trace:
[  684.178558][    C1]  <IRQ>
[  684.178565][    C1]  dump_stack_lvl+0x189/0x250
[  684.178582][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  684.178599][    C1]  ? rcu_is_watching+0x15/0xb0
[  684.178618][    C1]  ? __kasan_check_byte+0x12/0x40
[  684.178636][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  684.178649][    C1]  ? rcu_is_watching+0x15/0xb0
[  684.178661][    C1]  ? lock_release+0x4b/0x3e0
[  684.178706][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  684.178720][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  684.178736][    C1]  print_report+0xca/0x240
[  684.178750][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  684.178764][    C1]  kasan_report+0x118/0x150
[  684.178781][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  684.178796][    C1]  __xfrm_state_delete+0x696/0xca0
[  684.178813][    C1]  xfrm_timer_handler+0x18f/0xa00
[  684.178829][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  684.178841][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  684.178859][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  684.178871][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  684.178888][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  684.178906][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  684.178919][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  684.178932][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  684.178949][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  684.178962][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  684.178977][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  684.178991][    C1]  handle_softirqs+0x286/0x870
[  684.179004][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  684.179017][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  684.179032][    C1]  __irq_exit_rcu+0xca/0x1f0
[  684.179044][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  684.179058][    C1]  irq_exit_rcu+0x9/0x30
[  684.179068][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  684.179080][    C1]  </IRQ>
[  684.179085][    C1]  <TASK>
[  684.179090][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  684.179104][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70
[  684.179120][    C1] Code: 89 fb e8 23 00 00 00 48 8b 3d 64 87 fe 0b 48 89 de 5b e9 f3 ab 58 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 e0 a0 92 65 8b 15 88 32
[  684.179131][    C1] RSP: 0018:ffffc900000f79a8 EFLAGS: 00000283
[  684.179142][    C1] RAX: ffff888109c43610 RBX: ffffffff8b484d00 RCX: 1ffff110213886c2
[  684.179151][    C1] RDX: 0000000000000002 RSI: ffffffff8dba996e RDI: ffff88801c2f5640
[  684.179159][    C1] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff8b484a0a
[  684.179167][    C1] R10: dffffc0000000000 R11: fffffbfff1f474e7 R12: dffffc0000000000
[  684.179176][    C1] R13: 1ffff110080a4313 R14: 0000000000000063 R15: ffff888040520d80
[  684.179186][    C1]  ? __pfx_batadv_nc_fwd_flush+0x10/0x10
[  684.179198][    C1]  ? batadv_nc_process_nc_paths+0xba/0x3a0
[  684.179212][    C1]  batadv_nc_process_nc_paths+0x326/0x3a0
[  684.179225][    C1]  ? batadv_nc_process_nc_paths+0xba/0x3a0
[  684.179238][    C1]  batadv_nc_worker+0x429/0x610
[  684.179255][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  684.179268][    C1]  process_scheduled_works+0xae1/0x17b0
[  684.179288][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  684.179304][    C1]  worker_thread+0x8a0/0xda0
[  684.179324][    C1]  kthread+0x711/0x8a0
[  684.179340][    C1]  ? __pfx_worker_thread+0x10/0x10
[  684.179351][    C1]  ? __pfx_kthread+0x10/0x10
[  684.179366][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  684.179382][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  684.179394][    C1]  ? __pfx_kthread+0x10/0x10
[  684.179407][    C1]  ret_from_fork+0x439/0x7d0
[  684.179421][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  684.179435][    C1]  ? __switch_to_asm+0x39/0x70
[  684.179448][    C1]  ? __switch_to_asm+0x33/0x70
[  684.179462][    C1]  ? __pfx_kthread+0x10/0x10
[  684.179476][    C1]  ret_from_fork_asm+0x1a/0x30
[  684.179494][    C1]  </TASK>
[  684.179499][    C1] 
[  684.339851][    C1] Allocated by task 23290:
[  684.341715][    C1]  kasan_save_track+0x3e/0x80
[  684.343706][    C1]  __kasan_slab_alloc+0x6c/0x80
[  684.345753][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  684.347989][    C1]  xfrm_state_alloc+0x24/0x2f0
[  684.350017][    C1]  __find_acq_core+0x8a7/0x1c00
[  684.352105][    C1]  xfrm_find_acq+0x78/0xa0
[  684.353933][    C1]  xfrm_alloc_userspi+0x6b3/0xc90
[  684.355928][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  684.358011][    C1]  netlink_rcv_skb+0x208/0x470
[  684.359942][    C1]  xfrm_netlink_rcv+0x79/0x90
[  684.361752][    C1]  netlink_unicast+0x82f/0x9e0
[  684.363779][    C1]  netlink_sendmsg+0x805/0xb30
[  684.365706][    C1]  __sock_sendmsg+0x21c/0x270
[  684.367517][    C1]  ____sys_sendmsg+0x505/0x830
[  684.369510][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  684.371478][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  684.373578][    C1]  do_syscall_64+0xfa/0x3b0
[  684.375482][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  684.377887][    C1] 
[  684.378937][    C1] Freed by task 47:
[  684.380572][    C1]  kasan_save_track+0x3e/0x80
[  684.382534][    C1]  kasan_save_free_info+0x46/0x50
[  684.384553][    C1]  __kasan_slab_free+0x5b/0x80
[  684.386496][    C1]  kmem_cache_free+0x18f/0x400
[  684.388483][    C1]  xfrm_state_gc_task+0x52d/0x6b0
[  684.390642][    C1]  process_scheduled_works+0xae1/0x17b0
[  684.392970][    C1]  worker_thread+0x8a0/0xda0
[  684.394846][    C1]  kthread+0x711/0x8a0
[  684.396573][    C1]  ret_from_fork+0x439/0x7d0
[  684.398564][    C1]  ret_from_fork_asm+0x1a/0x30
[  684.400572][    C1] 
[  684.401553][    C1] The buggy address belongs to the object at ffff8881225a1b00
[  684.401553][    C1]  which belongs to the cache xfrm_state of size 928
[  684.407264][    C1] The buggy address is located 48 bytes inside of
[  684.407264][    C1]  freed 928-byte region [ffff8881225a1b00, ffff8881225a1ea0)
[  684.412803][    C1] 
[  684.413844][    C1] The buggy address belongs to the physical page:
[  684.416524][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881225a2880 pfn:0x1225a0
[  684.420631][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  684.424005][    C1] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  684.427111][    C1] page_type: f5(slab)
[  684.428823][    C1] raw: 057ff00000000040 ffff88801beec640 dead000000000122 0000000000000000
[  684.432290][    C1] raw: ffff8881225a2880 00000000800e0006 00000000f5000000 0000000000000000
[  684.435656][    C1] head: 057ff00000000040 ffff88801beec640 dead000000000122 0000000000000000
[  684.439045][    C1] head: ffff8881225a2880 00000000800e0006 00000000f5000000 0000000000000000
[  684.442411][    C1] head: 057ff00000000002 ffffea0004896801 00000000ffffffff 00000000ffffffff
[  684.445971][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  684.449584][    C1] page dumped because: kasan: bad access detected
[  684.452326][    C1] page_owner tracks the page as allocated
[  684.454635][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 17352, tgid 17340 (syz.7.4658), ts 453602311270, free_ts 425673422812
[  684.462283][    C1]  post_alloc_hook+0x240/0x2a0
[  684.464289][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  684.466591][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  684.469159][    C1]  alloc_pages_mpol+0x232/0x4a0
[  684.471260][    C1]  allocate_slab+0x8a/0x370
[  684.473067][    C1]  ___slab_alloc+0xbeb/0x1420
[  684.475019][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  684.477338][    C1]  xfrm_state_alloc+0x24/0x2f0
[  684.479347][    C1]  xfrm_state_find+0x37d4/0x5400
[  684.481426][    C1]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  684.484006][    C1]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  684.486268][    C1]  xfrm_lookup_route+0x3c/0x1c0
[  684.488277][    C1]  udp_sendmsg+0x142e/0x2170
[  684.490144][    C1]  __sock_sendmsg+0x19c/0x270
[  684.492037][    C1]  ____sys_sendmsg+0x52d/0x830
[  684.493991][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  684.495930][    C1] page last free pid 6358 tgid 6358 stack trace:
[  684.498529][    C1]  __free_frozen_pages+0xbc4/0xd30
[  684.500666][    C1]  vfree+0x25a/0x400
[  684.502352][    C1]  delayed_vfree_work+0x55/0x80
[  684.504412][    C1]  process_scheduled_works+0xae1/0x17b0
[  684.506621][    C1]  worker_thread+0x8a0/0xda0
[  684.508511][    C1]  kthread+0x711/0x8a0
[  684.510195][    C1]  ret_from_fork+0x439/0x7d0
[  684.512134][    C1]  ret_from_fork_asm+0x1a/0x30
[  684.514139][    C1] 
[  684.515165][    C1] Memory state around the buggy address:
[  684.517520][    C1]  ffff8881225a1a00: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  684.520731][    C1]  ffff8881225a1a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  684.524092][    C1] >ffff8881225a1b00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  684.527356][    C1]                                      ^
[  684.529582][    C1]  ffff8881225a1b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  684.532797][    C1]  ffff8881225a1c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  684.536065][    C1] ==================================================================
[  684.539643][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  684.542599][    C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  684.546379][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  684.550343][    C1] Workqueue: bat_events batadv_nc_worker
[  684.552509][    C1] Call Trace:
[  684.553846][    C1]  <IRQ>
[  684.555022][    C1]  dump_stack_lvl+0x99/0x250
[  684.556884][    C1]  ? __asan_memcpy+0x40/0x70
[  684.558775][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  684.560958][    C1]  ? __pfx__printk+0x10/0x10
[  684.562816][    C1]  vpanic+0x281/0x750
[  684.564487][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  684.566666][    C1]  ? __pfx_vpanic+0x10/0x10
[  684.568619][    C1]  ? irqentry_exit+0x74/0x90
[  684.570577][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  684.572736][    C1]  panic+0xb9/0xc0
[  684.574281][    C1]  ? __pfx_panic+0x10/0x10
[  684.576188][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  684.578660][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  684.581338][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  684.583515][    C1]  check_panic_on_warn+0x89/0xb0
[  684.585606][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  684.587807][    C1]  end_report+0x78/0x160
[  684.589534][    C1]  kasan_report+0x129/0x150
[  684.591424][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  684.593611][    C1]  __xfrm_state_delete+0x696/0xca0
[  684.595739][    C1]  xfrm_timer_handler+0x18f/0xa00
[  684.597734][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  684.599989][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  684.602463][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  684.604592][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  684.607072][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  684.609753][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  684.611997][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  684.614197][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  684.616418][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  684.618821][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  684.621317][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  684.623517][    C1]  handle_softirqs+0x286/0x870
[  684.625556][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  684.627596][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  684.629840][    C1]  __irq_exit_rcu+0xca/0x1f0
[  684.631784][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  684.633988][    C1]  irq_exit_rcu+0x9/0x30
[  684.635819][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  684.638165][    C1]  </IRQ>
[  684.639438][    C1]  <TASK>
[  684.640704][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  684.643253][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70
[  684.645864][    C1] Code: 89 fb e8 23 00 00 00 48 8b 3d 64 87 fe 0b 48 89 de 5b e9 f3 ab 58 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 e0 a0 92 65 8b 15 88 32
[  684.653846][    C1] RSP: 0018:ffffc900000f79a8 EFLAGS: 00000283
[  684.656368][    C1] RAX: ffff888109c43610 RBX: ffffffff8b484d00 RCX: 1ffff110213886c2
[  684.659700][    C1] RDX: 0000000000000002 RSI: ffffffff8dba996e RDI: ffff88801c2f5640
[  684.662981][    C1] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff8b484a0a
[  684.666272][    C1] R10: dffffc0000000000 R11: fffffbfff1f474e7 R12: dffffc0000000000
[  684.669463][    C1] R13: 1ffff110080a4313 R14: 0000000000000063 R15: ffff888040520d80
[  684.672756][    C1]  ? __pfx_batadv_nc_fwd_flush+0x10/0x10
[  684.675097][    C1]  ? batadv_nc_process_nc_paths+0xba/0x3a0
[  684.677501][    C1]  batadv_nc_process_nc_paths+0x326/0x3a0
[  684.679883][    C1]  ? batadv_nc_process_nc_paths+0xba/0x3a0
[  684.682341][    C1]  batadv_nc_worker+0x429/0x610
[  684.684271][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  684.686698][    C1]  process_scheduled_works+0xae1/0x17b0
[  684.688979][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  684.691385][    C1]  worker_thread+0x8a0/0xda0
[  684.693310][    C1]  kthread+0x711/0x8a0
[  684.695017][    C1]  ? __pfx_worker_thread+0x10/0x10
[  684.697150][    C1]  ? __pfx_kthread+0x10/0x10
[  684.699071][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  684.701199][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  684.703317][    C1]  ? __pfx_kthread+0x10/0x10
[  684.705231][    C1]  ret_from_fork+0x439/0x7d0
[  684.707130][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  684.709297][    C1]  ? __switch_to_asm+0x39/0x70
[  684.711239][    C1]  ? __switch_to_asm+0x33/0x70
[  684.713260][    C1]  ? __pfx_kthread+0x10/0x10
[  684.715196][    C1]  ret_from_fork_asm+0x1a/0x30
[  684.717189][    C1]  </TASK>
[  684.719304][    C1] Kernel Offset: disabled
[  684.721114][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:26:38  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000010003 RBX=ffff88804b023900 RCX=0000000000000838 RDX=0000000000000000
RSI=0000000000010003 RDI=0000000000000838 RBP=0000000000000001 RSP=ffffc900034efaf8
R8 =0000000000000000 R9 =ffffffff81ae036e R10=0000000000000003 R11=ffffffff81703490
R12=00000000100015cf R13=dffffc0000000000 R14=0000000000010003 R15=0000000000000020
RIP=ffffffff81716179 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555559649500 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000562081ee1000 CR3=0000000042276000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8133c59e ffffffff8133c59e
XMM02=00007f6e591a7498 ffffffff8133c59e XMM03=00007f6e591a74a8 00007f6e591a74a0
XMM04=00007f6e59d0d100 00007f6e591a7460 XMM05=00007f6e591a7478 00007f6e591a74c0
XMM06=00007f6e591a74b8 00007f6e591a74b0 XMM07=00007f6e591a74a8 00007f6e591a74a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f6e59012fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e03b0
R8 =ffff888107b48237 R9 =1ffff11020f69046 R10=dffffc0000000000 R11=ffffffff854fada0
R12=dffffc0000000000 R13=ffffffff99b038ca R14=ffffffff99df8460 R15=0000000000000000
RIP=ffffffff854fae1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000562081caf030 CR3=000000003f18e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fe0653a7498 00007fe0653a7470 XMM03=00007fe0653a74a8 00007fe0653a74a0
XMM04=00007fe065f0d100 00007fe0653a7460 XMM05=00007fe0653a7478 00007fe0653a74c0
XMM06=00007fe0653a74b8 00007fe0653a74b0 XMM07=00007fe0653a74a8 00007fe0653a74a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fe065212fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
