last executing test programs:

17m53.182786272s ago: executing program 1 (id=350):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x1, 0x0, 0x1, 0x1009, 0x7c}, {0x3, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
r4 = socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ufs(&(0x7f0000009e00), &(0x7f0000000040)='./dev\x00', 0x300c806, &(0x7f0000000080)=ANY=[@ANYBLOB='ufstype=openstep\x00'], 0xfd, 0x9dfb, &(0x7f0000013cc0)="$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")
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {}, {0xe, 0xa}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x40810)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
shutdown(r0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x6a0000, 0x66)

17m50.801083642s ago: executing program 1 (id=356):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r3, 0x0, 0x0)

17m49.525036811s ago: executing program 1 (id=360):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000480), 0x2)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
pipe2(&(0x7f00000000c0), 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000100)=r3}, 0x20)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x6b82}], 0x2)

17m48.845061766s ago: executing program 1 (id=362):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r1, &(0x7f0000001600), &(0x7f0000001700)=@udp=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f0000000040)}, 0x20)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0)
write(r2, &(0x7f0000000100)='tps659', 0x6)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
clock_gettime(0x1, &(0x7f0000000000))

17m48.684494292s ago: executing program 1 (id=364):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ptype\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x4000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_clone(0x68411, 0x0, 0x17, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r1}, 0xc)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)

17m47.949102029s ago: executing program 1 (id=367):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = fanotify_init(0xf00, 0x1)
fanotify_mark(r3, 0x105, 0x40009967, 0xffffffffffffffff, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})

17m32.778067509s ago: executing program 32 (id=367):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = fanotify_init(0xf00, 0x1)
fanotify_mark(r3, 0x105, 0x40009967, 0xffffffffffffffff, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})

18.888035001s ago: executing program 2 (id=3421):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x20, 0x1a6, &(0x7f0000000200)="$eJzsmD9P21AUxc+zHVupKqVru7RSIyUd6thOWzVDh8wd2qFq1Y2ImCjgEJR4SLIA4kMwMzIxRyz5HjAAE0vYmBiMnvMsP+cPASn8E/c3XJ93383z9bVyBoMgiBfL2enlyUEum+b6NbIwRP5cjWsUqb6fufp0VP91uGtdHPcHP0vj5zEAQXD7+2sABmUVvlgHQfLXWXH9AyXSKXn/HxhMoZeg4K/QLhj+C70q6SavN82Vuueay02vyoXFg82Dw0NxvL/hNkNV6m9T2m93e2sVz3NbixIaJrbmzW9YVvBD6k9+X9FsrHh+sKHAxtiLBfAdRjSb0Uik53+nxeerieePVosexEOJLdzvLd5m5tSknu3oSEwRDPviH/E0+nksEftTsMeQk/xJk/yj4Dc2Cu1u73O9Uam5NXfdcYrfrC+W9dUphEY0ijf4Xzr0p1fS+akZtboeGWCn4vstW2c6QuV0DPgtZ5rj6qH/Kch/HHXNRE6G5/CGfeCXvArszOyWIAiCIAiCIAiCIAiCIAjiThjJ5Xuw8CtogtJEyvkdVl8HAAD//xdmaNU=")
clock_nanosleep(0x4, 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
set_mempolicy(0x1, 0x0, 0x3)
r0 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x19)
bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map=r1, 0x4, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0)
read$FUSE(r2, &(0x7f0000001b40)={0x2020}, 0x205c)
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=<r3=>0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
pwritev(r4, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2, 0x1, 0x407fffe)
timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8014}, 0x4000040)

17.192122145s ago: executing program 4 (id=3426):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0xf00, 0x0)
fanotify_mark(r1, 0x1, 0x1000003a, r0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x101000, 0x128)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x58)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x2)
read$FUSE(r1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)

15.564689522s ago: executing program 2 (id=3432):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000180)={[{@data_err_ignore}, {@resgid}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nobarrier}]}, 0x9, 0x624, &(0x7f0000001340)="$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")
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe(&(0x7f0000000040))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20)
sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
shutdown(r3, 0x1)

12.305766267s ago: executing program 4 (id=3441):
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
socket$packet(0x11, 0x3, 0x300)
ioctl(0xffffffffffffffff, 0xc138fd03, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x23, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r3], 0x5c}}, 0x40)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

10.924995978s ago: executing program 5 (id=3447):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
bind(0xffffffffffffffff, &(0x7f0000000000)=@hci={0x1f, 0x4, 0x2}, 0x80)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
msgctl$MSG_INFO(0x0, 0xc, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x103000)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, 0x0)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x8, 0x5}, [], {}, [], {}, {0x20, 0x1}}, 0x24, 0x2)

9.677169037s ago: executing program 5 (id=3448):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0xa3e})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882)
write$sndseq(r4, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c)

9.525371802s ago: executing program 3 (id=3450):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x18}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
getsockopt$sock_cred(r1, 0x1, 0x4d, 0x0, &(0x7f0000000000)=0x2f)
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r2, &(0x7f0000000740), 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0)
write(r3, 0x0, 0x0)

8.034968888s ago: executing program 3 (id=3452):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0), 0x0, 0x4000000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)

8.034211058s ago: executing program 5 (id=3462):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0xa3e})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882)
write$sndseq(r4, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c)

7.939285379s ago: executing program 4 (id=3453):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b80))
r2 = dup(r1)
r3 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0})
ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2})
semtimedop(0x0, &(0x7f0000000380), 0x0, 0x0)
semop(0x0, &(0x7f0000000000), 0x0)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000440)={{0x0, 0x0, 0xee01, 0x0, 0x0, 0x0, 0x791}, 0x9, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x808})
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})

7.077567079s ago: executing program 0 (id=3454):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r6 = accept(r4, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x900, 0x0, 0x4040040}, 0x4000840)

7.054310545s ago: executing program 3 (id=3455):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$vim2m(0x0, 0x7fff, 0x2)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x29)
ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000140)={0x8, 0x0, 0x2, 0x5})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40849}, 0x400c065)
io_uring_setup(0x56c7, &(0x7f0000000040)={0x0, 0x3a67, 0x80000, 0x0, 0x20002f7})
io_uring_setup(0x3b2f, &(0x7f0000000000)={0x0, 0x603b, 0x0, 0x1, 0x1c2})
writev(0xffffffffffffffff, 0x0, 0x0)

6.977449183s ago: executing program 2 (id=3456):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES16=0x0], 0x47, 0xc15, &(0x7f0000001940)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffccb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCCBRK(r1, 0x5428)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r5 = socket(0x10, 0x2, 0x0)
write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

6.880873475s ago: executing program 4 (id=3457):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x1411, 0x1, 0xfffffffc}, 0x10}, 0x1, 0x0, 0x0, 0x4000840}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
shmat(0x0, &(0x7f00007d0000/0x2000)=nil, 0x6000)
shmctl$SHM_UNLOCK(0x0, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)

5.892833334s ago: executing program 0 (id=3458):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r2)
sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x4044090)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000002c0)={0x3f})
sched_getattr(0x0, 0x0, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x80000000, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x10000000, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2]}, 0x45c)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000100)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x2, 0x1, 0x0, 0x2, 0x2, 0x0, 0x70bd27, 0xfffffffe}, 0x10}, 0x1, 0x7}, 0x40010)

5.720854724s ago: executing program 0 (id=3459):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b80))
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = dup(r1)
r4 = fcntl$dupfd(r0, 0x406, r2)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0})
ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3})
semtimedop(0x0, &(0x7f0000000380), 0x0, 0x0)
semop(0x0, &(0x7f0000000000), 0x0)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000440)={{0x0, 0x0, 0xee01, 0x0, 0x0, 0x0, 0x791}, 0x9, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x808})
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})

4.955191531s ago: executing program 2 (id=3460):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004440)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x91}}], 0x1, 0x240088e0)
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f0000000480)=""/66, 0x0)
keyctl$clear(0x3, 0xfffffffffffffffd)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
syslog(0x3, &(0x7f0000000000)=""/185, 0x64075da62934d5d1)

4.954968542s ago: executing program 4 (id=3461):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
capset(0x0, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675b44bdec6b6", 0x148}], 0x1}}], 0x1, 0x2090)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4)
sendmmsg(r3, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f3456774ea76202bc9969ea7026a8d7090c085a769e47294e4ea5b8ce3f6187e5ca87549e75b0b2980a21dc7b809da3f544d061ad96d06e0864906297353deefe8b52d519dd67f3f41dd7dd1cda0601b77e8415521d7dbb9893aeefbf94850960c84825a918b0", 0xd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000f00)="88a69f5139292fe55d24310330d349370620dd2737877e864a0d6d86ec395b0c41689f2e0742c4d3282f151e6faf27deab0464cdf91d6a7b73cbec929aa85b3d4f5114785c23d6c325efab561ca5f90113281359edb7ccdea124d6ea38a34d046ed5a7fdfc137e465ae8b692cb06ce3d14da5dc3ba35cac41c2fb97fe2618ebdd40e", 0x82}, {&(0x7f0000002240)="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", 0x761}], 0x2}}], 0x2, 0x0)

4.165844974s ago: executing program 5 (id=3463):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r2)
sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x4044090)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000002c0)={0x3f})
sched_getattr(0x0, 0x0, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x80000000, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x10000000, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2]}, 0x45c)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000100)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x2, 0x1, 0x0, 0x2, 0x6, 0x0, 0x70bd27, 0xfffffffe, [@sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x4, @empty}}, @sadb_key={0x1, 0x9}]}, 0x30}, 0x1, 0x7}, 0x40010)

4.029062936s ago: executing program 0 (id=3464):
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
socket$packet(0x11, 0x3, 0x300)
ioctl(0xffffffffffffffff, 0xc138fd03, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x23, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r3], 0x5c}}, 0x40)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

2.332512499s ago: executing program 3 (id=3465):
mkdirat(0xffffffffffffff9c, 0x0, 0x1c1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket(0x1, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0)
mount$9p_virtio(0x0, 0x0, &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d61"])
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)

2.32847339s ago: executing program 0 (id=3475):
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
socket$packet(0x11, 0x3, 0x300)
ioctl(0xffffffffffffffff, 0xc138fd03, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x23, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r3], 0x5c}}, 0x40)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

2.324857181s ago: executing program 2 (id=3476):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000180)={[{@data_err_ignore}, {@resgid}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nobarrier}]}, 0x9, 0x624, &(0x7f0000001340)="$eJzs3ctvVNUfAPDvvZ0+aH8/W4hB2UgTYyBRWlrAEGMixC0h+Ni5qrQQpFBCa7RIQklwozFuXJi4ciH+F0ri1oVbF25cGEPSGMNCDMqYO71TZjqddvqYmT4+n+S299G553vbfHvOnDnn3gB2rcHsSxpxICKuJRH9FccKkR8cXPi5B3/ePJ8tSRSLb/2RxM1byVzluZL8e1/+4n/7I/kpjdjXUVvu9OyNy2OTkxPX8+3hmSvXhqdnbxy5dGXs4sTFiaujL4+ePHH8xMmRoxu6vkLF+pk7733Q/8nZd7756lEy8u0vZ5M4FY/z2LLrWvra7g2VnP3OBqO44OGTvWnp68kNnnur+Ku/+necSZbuYMu6EBH7I6IzIp6J/uio+Gv2x8dvtDU4oKmKSZTrKGDXSVbP/87aXT3NCQZooXI7oPzefrn3wbXSJrdKgFaYP73QSbaQ+50RUc7/wkLfYPSU+gZ6HyRV/TxJRGysZ25BVsaPP5y9ky1Rpx8OaI652+Ve7qX1f1LKzYHoKW31Pkir8j+tWLL9b66z/MEl2/IfWmfudkQ8m9f/XbHu/H93neXLfwAAAAAAANg8905HxEvLjf9LF8f/dC0z/qcvIk5tQvmrf/6X3s9Xkk0oDqgwfzri1Zrxv/9Ujg4e6Mg/5/9/aTxAZ3rh0uTE0Yh4KiIOR2d3tj1SfdqqAcJHPtv3Zb3yK8f/ZUtWfnksYH6q+4UlE3HHx2bGNufqYXebvx3xsDT+92C+p3r8T1b/JzX1/6evZwl+rcEy9r1w91zVjt+e/HtYPf+BZil+HXFo2fk/T5rbycr35xgutQeGy62CWs999Pl39cqX/9A+Wf3fu3L+dyeV9+uZXtv5uyLi2GyhWO/4etv/XcnbHeXzZz4cm5m5PhLRlZyp3T+6tphhpyrnQzlfsvw//PzK/X+L7f+KPNwTEXMNlrn/cd+v9Y6p/6F9svwfX7n+H6iu/9e60hOjdwe+z28xVuNcQ/X/8VKdfjjfo/8PKtXej6PRBG1LuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwzaUR8b9I0qHF9TQdGoroi4inozednJqeefHC1PtXx7Nj1c//71/YTsrP/x+o2B5dsn0sIvZGxBcde0rbQ+enJsfbffEAAAAAAAAAAAAAAAAAAACwRfSV5vwXu5fO/8/83tHu6ICmK+Tf5TvsPoV1v7LYvamBAC23/vwHtrvG87+zqXEArVc//x8+Kpa0NByghbT/YfdaZ/77uAB2APU/7FYN9un1NDsOoB0arv/nmxsHAAAAAACwKfYevPdzEhFzr+wpLZmu/JjB/rCzpe0OAGgbY3hh9ypMtTsCoF28xweSxbW/l53sX3/0f9KcgAAAAAAAAAAAAACAGocOrH3+/5xJg7AjpBErPMLb2H7YyVaoypdLfjU/7CD1H/3RSN2faCHANmb+P7BaPb7x+f/FW2sKCAAAAAAAAAAAAACo1XPj8tjk5MT16dntt/La1ghjbStzY1sijE1debzaz5QfM7+2M3dGxNa4wFavlG/B0cYw2vg/CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqPJfAAAA//8MwS/R")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe(&(0x7f0000000040))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20)
sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
shutdown(r3, 0x1)

1.220130177s ago: executing program 3 (id=3466):
kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x4010000}, {0x0, 0x0, 0x3e0000}], 0x0)
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
syz_ublk_setup_queues(r0, 0x0, &(0x7f0000019080)={0x0, 0x597f, 0x1, 0x2, 0xe9, 0x0, r0}, &(0x7f0000019180)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2067, 0x8000, 0x1, 0x17, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xce5e, 0x10, 0x2, 0x2c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xecae, 0x200, 0x3, 0x11e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcdf8, 0x800, 0x0, 0x3be, 0x0, r0}}], 0x4, 0x0, &(0x7f000001a480))
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x47}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008000)
sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xb4, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x33}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="30a01e252903"}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x3, 0x5, 0x0, {0x5e, 0xa, 0x0, 0xc, 0x0, 0x0, 0x1}, 0x400, 0x3ff, 0x2}}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_KEYS={0x54, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "8f547a722d2aa656507a74cfa6"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x4}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4080}, 0x4040000)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, r4, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080000}, 0x80)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
recvmsg(r7, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}], 0x1}, 0x20)

1.219262898s ago: executing program 2 (id=3478):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000180)={[{@data_err_ignore}, {@resgid}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nobarrier}]}, 0x9, 0x624, &(0x7f0000001340)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe(&(0x7f0000000040))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20)
sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
shutdown(r3, 0x1)

1.16493641s ago: executing program 5 (id=3467):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgid(0xffffffffffffffff)
r1 = getpgrp(r0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
fchdir(r5)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x40000, 0x108)
lseek(r6, 0x3, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x60000526)

1.129463869s ago: executing program 4 (id=3468):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = dup(r1)
r4 = fcntl$dupfd(r0, 0x406, r2)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0})
ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3})
semtimedop(0x0, &(0x7f0000000380), 0x0, 0x0)
semop(0x0, &(0x7f0000000000), 0x0)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000440)={{0x0, 0x0, 0xee01, 0x0, 0x0, 0x0, 0x791}, 0x9, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x808})
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})

175.11165ms ago: executing program 5 (id=3469):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
mmap$dsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x800004, 0x11, r0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
inotify_init()
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x800, 0x0)
r4 = fanotify_init(0x20, 0x2)
fanotify_mark(r4, 0x1, 0x40001008, 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00')
unlink(&(0x7f0000000000)='./file0\x00')

172.68944ms ago: executing program 0 (id=3482):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000140))
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400))
read(r3, &(0x7f00000002c0)=""/10, 0x5b)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x12)
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x44, &(0x7f0000000040)={0x0, 0x0}, 0x10)

0s ago: executing program 3 (id=3470):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r2)
sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x4044090)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000002c0)={0x3f})
sched_getattr(0x0, 0x0, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x80000000, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x10000000, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2]}, 0x45c)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000100)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x70bd27, 0xfffffffe, [@sadb_address={0x3, 0x6, 0x32, 0x0, 0x0, @in={0x2, 0x4e22, @local}}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x4, @empty}}]}, 0x40}, 0x1, 0x7}, 0x40010)

kernel console output (not intermixed with test programs):

evice loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  142.697154][ T5073] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[  142.778104][ T5073] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.190: Corrupt directory, running e2fsck is recommended
[  142.876206][ T5073] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  142.895351][ T5073] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.190: corrupted in-inode xattr
[  143.882392][ T5073] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.190: couldn't read orphan inode 15 (err -117)
[  143.927895][ T5073] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  144.074680][ T5090] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  144.087196][ T5090] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[  144.097373][ T5090] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.190: Corrupt directory, running e2fsck is recommended
[  144.112574][ T5073] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  144.126041][ T5073] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[  144.136388][ T5073] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.190: Corrupt directory, running e2fsck is recommended
[  144.149482][ T5073] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.190: path /38/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  144.177507][ T5073] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 22: comm syz.3.190: path /38/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=65535, size=1024 fake=0
[  144.203631][ T5073] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 8: comm syz.3.190: path /38/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[  144.358785][ T4273] EXT4-fs (loop3): unmounting filesystem.
[  146.584892][ T5108] 8021q: adding VLAN 0 to HW filter on device bond1
[  148.726677][ T5128] loop1: detected capacity change from 0 to 256
[  148.827326][ T5128] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  148.887252][ T5128] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  148.998350][ T5128] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  149.149501][ T5128] exFAT-fs (loop1): failed to load alloc-bitmap
[  149.178255][ T5128] exFAT-fs (loop1): failed to recognize exfat type
[  150.271503][ T5128] loop1: detected capacity change from 0 to 8
[  151.226032][ T5180] device syzkaller0 entered promiscuous mode
[  152.890876][ T5203] loop3: detected capacity change from 0 to 128
[  152.911178][ T5203] affs: No valid root block on device loop3
[  153.094486][ T5204] Cannot find add_set index 0 as target
[  153.767165][ T5206] binder_alloc: 5205: pid 5205 spamming oneway? 2 buffers allocated for a total size of 5120
[  153.801131][ T5206] binder_alloc: 5205: pid 5205 spamming oneway? 3 buffers allocated for a total size of 5128
[  154.077304][ T4276] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  154.158537][ T5211] ceph: No mds server is up or the cluster is laggy
[  154.266209][ T5221] futex_wake_op: syz.4.220 tries to shift op by 144; fix this program
[  154.279893][ T4276] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  154.297966][ T4276] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  154.323662][ T4276] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  154.366108][ T4276] usb 3-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01
[  154.406206][ T4276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.461696][ T5208] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  154.614198][ T5224] loop1: detected capacity change from 0 to 4096
[  155.164542][ T5224] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  155.555045][ T5224] NILFS (loop1): mounting unchecked fs
[  155.563522][ T4286] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  155.714440][ T4359] udevd[4359]: incorrect nilfs2 checksum on /dev/loop1
[  156.025887][ T5224] NILFS (loop1): recovery complete
[  156.260124][ T5245] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  156.276433][ T4276] usb 3-1: USB disconnect, device number 9
[  156.582278][ T4286] Bluetooth: hci5: command 0xfc05 tx timeout
[  156.677315][ T4282] Bluetooth: hci5: Reading Intel version command failed (-110)
[  158.348212][ T5267] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  158.568886][ T5271] loop3: detected capacity change from 0 to 512
[  161.142325][ T5294] loop4: detected capacity change from 0 to 736
[  161.217756][ T5298] netlink: 'syz.0.236': attribute type 1 has an invalid length.
[  161.332919][ T5301] loop3: detected capacity change from 0 to 2048
[  161.414112][ T5298] bond2: (slave veth3): Enslaving as an active interface with a down link
[  161.539802][ T5301] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  161.684842][ T5305] bond2: (slave veth5): Enslaving as an active interface with a down link
[  161.739137][ T5298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.236'.
[  161.888461][ T5298] 8021q: adding VLAN 0 to HW filter on device bond2
[  163.545160][ T4273] EXT4-fs (loop3): unmounting filesystem.
[  164.005732][ T5326] device syzkaller0 entered promiscuous mode
[  165.032234][ T5338] loop3: detected capacity change from 0 to 512
[  165.084550][ T5338] EXT4-fs (loop3): bad s_min_extra_isize: 544
[  165.432065][ T5344] trusted_key: encrypted_key: insufficient parameters specified
[  165.513335][ T5347] "syz.2.246" (5347) uses obsolete ecb(arc4) skcipher
[  166.369328][ T5349] loop1: detected capacity change from 0 to 2048
[  166.388342][ T5353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.250'.
[  166.503408][ T5349] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  166.585134][ T5349] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  166.704257][ T5360] Bluetooth: ISO socket layer initialized
[  166.737562][ T2173] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  166.940280][ T2173] usb 4-1: config index 0 descriptor too short (expected 100, got 68)
[  166.951776][ T2173] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  166.991138][ T2173] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  167.230804][ T2173] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  167.261851][ T2173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  167.434386][ T2173] usb 4-1: SerialNumber: syz
[  167.833493][ T5356] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  168.206512][ T5356] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  168.263318][ T5380] loop1: detected capacity change from 0 to 512
[  168.468812][ T5380] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  168.497269][ T5380] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.822204][ T5356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.883604][ T5356] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.967268][ T2173] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42
[  169.073378][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  169.256125][ T5102] usb 4-1: USB disconnect, device number 2
[  169.307395][ T5389] sctp: [Deprecated]: syz.0.258 (pid 5389) Use of struct sctp_assoc_value in delayed_ack socket option.
[  169.307395][ T5389] Use struct sctp_sack_info instead
[  169.468228][ T5102] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device
[  170.024368][ T5392] device syzkaller0 entered promiscuous mode
[  170.036974][ T5392] tipc: Started in network mode
[  170.043174][ T5392] tipc: Node identity 4e4836ab8ed9, cluster identity 4711
[  170.051278][ T5392] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  170.113112][ T5391] tipc: Resetting bearer <eth:syzkaller0>
[  170.279361][ T5391] tipc: Disabling bearer <eth:syzkaller0>
[  173.591061][ T5423] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  173.683253][ T5423] CIFS: Attempting to mount \\127.0.0.1\share
[  174.181436][ T5418] loop2: detected capacity change from 0 to 40427
[  174.201997][ T5418] F2FS-fs (loop2): invalid crc value
[  174.247438][ T5418] F2FS-fs (loop2): Found nat_bits in checkpoint
[  174.299837][ T5418] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  174.458639][ T5423] CIFS: VFS: cifs_mount failed w/return code = -112
[  174.483442][ T5418] syz.2.267: attempt to access beyond end of device
[  174.483442][ T5418] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  174.499643][ T5418] syz.2.267: attempt to access beyond end of device
[  174.499643][ T5418] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  174.597768][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  174.695600][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  174.950209][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  175.013333][ T4287] syz-executor: attempt to access beyond end of device
[  175.013333][ T4287] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  175.105509][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  175.240084][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  175.377761][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  175.564712][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  181.511240][ T5508] device syzkaller0 entered promiscuous mode
[  182.837283][ T5531] PKCS8: Unsupported PKCS#8 version
[  184.647802][ T5550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.301'.
[  184.653556][ T5552] loop2: detected capacity change from 0 to 512
[  184.703681][ T5552] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  184.756193][ T5552] EXT4-fs error (device loop2): ext4_init_orphan_info:623: comm syz.2.302: orphan file block 0: bad magic
[  184.779616][ T5552] EXT4-fs (loop2): mount failed
[  184.858570][ T5552] ip6tnl0: Caught tx_queue_len zero misconfig
[  184.891420][ T5552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.302'.
[  185.706816][ T4319] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  186.758723][ T4319] usb 4-1: not running at top speed; connect to a high speed hub
[  187.571523][ T4319] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  187.678901][ T4319] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  187.698351][ T4319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.722178][ T4319] usb 4-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  187.734465][ T4319] usb 4-1: No streaming interface found for terminal 2.
[  188.075944][ T4319] usb 4-1: USB disconnect, device number 3
[  189.843782][ T5639] xt_nat: multiple ranges no longer supported
[  190.910901][   T26] audit: type=1804 audit(1790315483.600:3): pid=5644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.312" name="/newroot/61/file0" dev="fuse" ino=1 res=1 errno=0
[  191.044463][   T26] audit: type=1804 audit(1790315483.660:4): pid=5644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.312" name="/newroot/61/file0" dev="fuse" ino=1 res=1 errno=0
[  191.199477][ T5652] loop4: detected capacity change from 0 to 2048
[  191.240221][ T5652] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  191.280131][ T5652] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  191.322346][ T5652] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  193.882693][ T5670] device syzkaller0 entered promiscuous mode
[  193.931732][ T5670] tipc: Started in network mode
[  193.940363][ T5670] tipc: Node identity 7a82f7418cc8, cluster identity 4711
[  193.949603][ T5670] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  193.974592][ T5669] tipc: Resetting bearer <eth:syzkaller0>
[  194.073577][ T5669] tipc: Disabling bearer <eth:syzkaller0>
[  195.572860][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  195.579269][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  196.915272][ T5689] loop2: detected capacity change from 0 to 512
[  196.980029][ T5689] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  197.125840][ T5689] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  197.137489][ T5689] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.716012][ T5696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.329'.
[  199.039163][ T5701] bridge1: port 1(veth0_to_bond) entered blocking state
[  199.078322][ T5701] bridge1: port 1(veth0_to_bond) entered disabled state
[  199.098506][ T5701] device veth0_to_bond entered promiscuous mode
[  199.110197][ T4287] EXT4-fs (loop2): unmounting filesystem.
[  199.168177][ T5714] loop1: detected capacity change from 0 to 2048
[  199.278440][ T5714] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c11c, mo2=0002]
[  199.305431][ T5714] System zones: 0-7
[  199.438057][ T5714] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  199.601522][ T5723] loop3: detected capacity change from 0 to 164
[  201.206276][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  201.787641][ T4318] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  202.827406][ T4318] usb 4-1: Using ep0 maxpacket: 16
[  202.840843][ T4318] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  202.907175][ T4318] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  203.008107][ T4318] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  203.059608][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.120525][ T4318] usb 4-1: Product: syz
[  203.124838][ T4318] usb 4-1: Manufacturer: syz
[  203.171334][ T4318] usb 4-1: SerialNumber: syz
[  203.233687][ T4318] usb 4-1: config 0 descriptor??
[  203.414553][ T5752] loop4: detected capacity change from 0 to 256
[  203.687486][ T5752] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  204.299298][   T26] audit: type=1326 audit(1790315496.990:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.1.341" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36c099e159 code=0x0
[  204.374130][ T5767] loop2: detected capacity change from 0 to 2048
[  204.594579][ T5767] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  205.858777][ T1182] usb 4-1: USB disconnect, device number 4
[  207.204357][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  207.214708][ T5800] loop1: detected capacity change from 0 to 128
[  207.250613][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.313835][ T5798] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  207.343856][ T5793] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  207.794092][ T5799] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  207.803681][ T5799] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  207.812525][ T5799] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  207.821521][ T5799] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  208.343287][ T5799] bond0: (slave vxlan0): Enslaving as an active interface with an up link
[  208.384965][ T5805] netlink: 'syz.0.352': attribute type 9 has an invalid length.
[  210.927145][ T1182] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  211.123893][ T1182] usb 3-1: config 0 has an invalid interface number: 11 but max is 0
[  211.147221][ T1182] usb 3-1: config 0 has no interface number 0
[  211.153400][ T1182] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x7 has an invalid bInterval 129, changing to 11
[  211.202082][ T1182] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  211.251278][ T1182] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid wMaxPacketSize 0
[  211.297199][ T1182] usb 3-1: config 0 interface 11 has no altsetting 0
[  211.329998][ T5852] syz.4.365 uses obsolete (PF_INET,SOCK_PACKET)
[  211.369869][ T1182] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  211.407429][ T1182] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.726853][ T1182] usb 3-1: config 0 descriptor??
[  211.808509][ T1182] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected
[  212.053680][ T1182] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81
[  212.094610][ T1182] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82
[  212.148621][ T1182] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1
[  212.195734][ T1182] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2
[  212.248800][ T1182] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85
[  212.317359][ T1182] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5
[  212.377665][ T1182] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  212.421686][ T1182] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83
[  212.444113][ T1182] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84
[  212.503276][ T1182] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3
[  212.573169][ T1182] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4
[  212.632765][ T5861] netlink: 16 bytes leftover after parsing attributes in process `syz.0.368'.
[  212.713073][ T1182] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86
[  212.876290][ T1182] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6
[  213.055796][ T1182] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  213.238221][ T1182] usb 3-1: USB disconnect, device number 10
[  213.338946][ T1182] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  213.423811][ T1182] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  213.474426][ T1182] keyspan 3-1:0.11: device disconnected
[  213.806645][ T5874] netlink: 'syz.0.373': attribute type 10 has an invalid length.
[  213.840176][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.900611][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.909202][ T5874] bridge0: port 2(bridge_slave_1) entered forwarding state
[  214.057709][ T5874] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  214.161462][ T5874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.373'.
[  214.276063][ T5874] device bridge_slave_1 left promiscuous mode
[  214.298069][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.992496][ T5874] bond0: (slave bridge0): Releasing backup interface
[  215.124939][ T5887] loop3: detected capacity change from 0 to 2048
[  215.270856][ T5887] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  215.287207][ T5887] UDF-fs: Scanning with blocksize 512 failed
[  215.306617][ T5887] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  217.556178][ T5913] netlink: 84 bytes leftover after parsing attributes in process `syz.4.382'.
[  217.587425][ T5915] Bluetooth: MGMT ver 1.22
[  217.866593][ T5922] loop2: detected capacity change from 0 to 128
[  218.081818][ T5922] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  218.130058][ T5922] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  218.263141][ T5927] loop3: detected capacity change from 0 to 2048
[  218.412774][ T5927] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  219.861621][ T5922] fscrypt: Error allocating hmac(sha512): -2
[  220.323447][ T5936] xt_CT: You must specify a L4 protocol and not use inversions on it
[  220.633404][ T4287] EXT4-fs (loop2): unmounting filesystem.
[  221.026324][ T5949] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4287] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            
[  221.815760][ T5956] loop2: detected capacity change from 0 to 2048
[  222.133398][ T5956] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  222.977789][ T5956] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  222.990741][ T5962] loop4: detected capacity change from 0 to 16
[  223.040954][ T5956] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  223.168782][ T5962] erofs: (device loop4): erofs_init_device: empty device tag @ pos 0
[  223.288517][ T4356] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  223.499488][ T5967] xt_CT: You must specify a L4 protocol and not use inversions on it
[  223.517207][ T5967] netlink: 'syz.3.399': attribute type 21 has an invalid length.
[  223.723561][ T5845] x86/PAT: syz.1.364:5845 freeing invalid memtype [mem 0xfe004000-0xfe004fff]
[  224.080025][ T5972] netlink: 52 bytes leftover after parsing attributes in process `syz.3.401'.
[  224.949487][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.956893][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.130223][ T5978] netlink: 76 bytes leftover after parsing attributes in process `syz.3.401'.
[  225.239057][ T5985] loop2: detected capacity change from 0 to 2048
[  225.246554][ T5978] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.254380][ T5978] bridge0: port 2(bridge_slave_1) entered forwarding state
[  225.262031][ T5978] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.269477][ T5978] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.419172][ T5978] netlink: 52 bytes leftover after parsing attributes in process `syz.3.401'.
[  225.469858][ T5985] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c11c, mo2=0002]
[  225.525638][ T5985] System zones: 0-7
[  225.568155][ T5985] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  225.849589][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.857238][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.342024][ T4287] EXT4-fs (loop2): unmounting filesystem.
[  227.146920][ T6016] loop3: detected capacity change from 0 to 2048
[  227.214978][ T6016] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  227.310388][ T6016] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  227.379023][ T6016] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  229.074877][ T4283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  229.119320][ T4283] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  229.128608][ T4286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  229.157284][ T4283] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  229.551508][ T4283] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  229.637994][ T4283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  229.896802][ T4282] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  229.905562][ T4282] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  229.913133][ T4282] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  229.938112][ T4282] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  229.946140][ T4282] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  229.967366][ T4282] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  230.193019][ T6030] loop3: detected capacity change from 0 to 512
[  230.270418][ T6030] EXT4-fs: inline encryption not supported
[  230.475268][ T6030] EXT4-fs (loop3): Test dummy encryption mode enabled
[  230.482612][ T6030] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  231.285454][ T6030] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.415: bad orphan inode 131083
[  231.353968][ T6030] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  231.499364][ T6024] chnl_net:caif_netlink_parms(): no params data found
[  232.110052][ T4282] Bluetooth: hci5: command 0x0409 tx timeout
[  232.710821][ T6024] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.762386][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.788619][ T6024] device bridge_slave_0 entered promiscuous mode
[  232.801812][   T26] audit: type=1800 audit(1790315525.490:6): pid=6052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.420" name="idProduct" dev="configfs" ino=40001 res=0 errno=0
[  232.831267][ T6024] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.864280][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.893707][ T6024] device bridge_slave_1 entered promiscuous mode
[  232.959464][ T6024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  232.971980][ T6024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  233.024238][ T6057] loop2: detected capacity change from 0 to 164
[  233.097766][ T6024] team0: Port device team_slave_0 added
[  233.124011][ T6024] team0: Port device team_slave_1 added
[  233.193372][ T6024] batman_adv: batadv0: Adding interface: batadv_slave_0
[  233.212460][ T6024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  233.328363][ T6024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  233.356251][ T6024] batman_adv: batadv0: Adding interface: batadv_slave_1
[  233.377465][ T6063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.423'.
[  233.567388][ T6024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.257688][ T4283] Bluetooth: hci5: command 0x041b tx timeout
[  234.337562][ T6024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  234.813408][ T6075] loop2: detected capacity change from 0 to 1024
[  236.058316][ T6075] hfsplus: unable to parse mount options
[  236.332684][ T6024] device hsr_slave_0 entered promiscuous mode
[  236.339214][ T4283] Bluetooth: hci5: command 0x040f tx timeout
[  236.377281][ T6024] device hsr_slave_1 entered promiscuous mode
[  236.413397][ T6024] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  236.460954][ T6024] Cannot create hsr debugfs directory
[  236.851104][ T6024] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  236.936082][ T6024] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  237.021042][ T6024] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  237.733808][ T6024] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  237.828205][ T6099] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  237.837433][ T6099] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  237.846633][ T6099] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  237.855828][ T6099] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  237.947581][ T6099] bond0: (slave vxlan0): Enslaving as an active interface with an up link
[  238.237679][ T6024] 8021q: adding VLAN 0 to HW filter on device bond0
[  238.265593][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  238.417917][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  238.427394][ T4283] Bluetooth: hci5: command 0x0419 tx timeout
[  239.262288][ T6024] 8021q: adding VLAN 0 to HW filter on device team0
[  240.110516][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  240.146531][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  240.248509][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.255955][ T5622] bridge0: port 1(bridge_slave_0) entered forwarding state
[  240.347198][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  240.365583][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  240.395475][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  240.606862][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.614104][ T5622] bridge0: port 2(bridge_slave_1) entered forwarding state
[  241.697788][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  241.770033][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  241.791353][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  241.804674][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  241.850614][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  241.878600][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  241.940159][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  241.969361][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  241.997360][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  242.030372][ T6024] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  242.049970][ T6024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  242.074487][ T6136] netlink: 76 bytes leftover after parsing attributes in process `syz.0.449'.
[  242.130609][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  242.152879][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  245.019893][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  245.037379][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  245.050161][ T6024] 8021q: adding VLAN 0 to HW filter on device batadv0
[  245.301758][ T6167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.445'.
[  248.837587][ T6188] loop2: detected capacity change from 0 to 4096
[  248.908164][ T6044] EXT4-fs (loop3): unmounting filesystem.
[  248.915217][ T6188] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  249.085699][ T6188] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  249.198707][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.453'.
[  249.255242][ T6203] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  249.299438][ T4287] EXT4-fs (loop2): unmounting filesystem.
[  249.431041][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  249.450200][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  249.503688][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  249.522870][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  249.558221][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  249.566381][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  249.594198][ T6024] device veth0_vlan entered promiscuous mode
[  249.628136][ T6024] device veth1_vlan entered promiscuous mode
[  250.835513][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  250.859981][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  250.906685][ T6024] device veth0_macvtap entered promiscuous mode
[  250.942169][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  250.972193][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  251.005183][ T6024] device veth1_macvtap entered promiscuous mode
[  251.067372][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  251.086760][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  251.144347][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  251.203434][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.253925][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  251.285478][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.306943][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  251.334117][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.344787][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  251.363260][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.405176][ T6024] batman_adv: batadv0: Interface activated: batadv_slave_0
[  251.459810][ T5627] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  251.616546][ T5627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  251.714550][ T6240] nftables ruleset with unbound set
[  251.890385][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  252.454614][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.487269][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  252.527137][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.542191][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  252.552960][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.568813][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  252.586988][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.663691][ T6024] batman_adv: batadv0: Interface activated: batadv_slave_1
[  252.689410][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  252.699920][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  252.730538][ T6024] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.747624][ T6024] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.769813][ T6024] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  252.799505][ T6024] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  252.959803][ T5622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.977315][ T5622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.028263][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  253.062943][ T4543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.087516][ T4543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.117657][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  255.779659][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  255.786147][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  256.618865][ T6274] md: invalid raid superblock magic on ram1
[  256.756433][ T6274] md: ram1 does not have a valid v0.0 superblock, not importing!
[  256.868279][ T6274] md: md_import_device returned -22
[  257.045899][ T6283] device syzkaller0 left promiscuous mode
[  266.132353][ T6350] loop2: detected capacity change from 0 to 8192
[  266.209172][ T6350] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  266.319251][ T6350] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  266.403944][ T6350] REISERFS (device loop2): using ordered data mode
[  266.473053][ T6350] reiserfs: using flush barriers
[  266.503548][ T6350] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  266.529022][ T6350] REISERFS (device loop2): checking transaction log (loop2)
[  266.848902][ T6350] REISERFS (device loop2): Using rupasov hash to sort names
[  266.956075][ T6350] REISERFS (device loop2): using 3.5.x disk format
[  267.102292][ T6350] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  267.156197][ T6350] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  267.257976][ T6350] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  267.281234][ T6350] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  267.367728][ T6350] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  268.933142][ T6393] netlink: 52 bytes leftover after parsing attributes in process `syz.4.507'.
[  268.954170][ T6393] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.961740][ T6393] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.175846][ T6393] netlink: 76 bytes leftover after parsing attributes in process `syz.4.507'.
[  269.786236][ T6393] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.793526][ T6393] bridge0: port 2(bridge_slave_1) entered forwarding state
[  269.801256][ T6393] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.808539][ T6393] bridge0: port 1(bridge_slave_0) entered forwarding state
[  270.025200][ T6393] netlink: 52 bytes leftover after parsing attributes in process `syz.4.507'.
[  270.117285][ T6393] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.124733][ T6393] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.282317][ T6409] loop2: detected capacity change from 0 to 256
[  270.321534][ T6415] netlink: 20 bytes leftover after parsing attributes in process `syz.5.511'.
[  270.373217][ T6409] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  270.425514][ T6417] binder: 6413:6417 ioctl c0306201 200000000080 returned -14
[  270.740850][ T6421] tipc: Started in network mode
[  270.767236][ T6421] tipc: Node identity 3a26e8b15a7a, cluster identity 4711
[  270.784476][ T6421] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  270.801342][ T6423] device syzkaller0 entered promiscuous mode
[  270.855625][ T6421] tipc: Resetting bearer <eth:syzkaller0>
[  270.893315][ T6420] tipc: Resetting bearer <eth:syzkaller0>
[  270.941539][ T6420] tipc: Disabling bearer <eth:syzkaller0>
[  271.192617][   T26] audit: type=1800 audit(1790315563.880:7): pid=6408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.521" name="bus" dev="ramfs" ino=40648 res=0 errno=0
[  274.891021][ T6475] syz.4.515 (6475) used greatest stack depth: 20528 bytes left
[  276.343790][ T6486] device syzkaller0 entered promiscuous mode
[  276.721776][ T6495] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  277.612451][ T6485] tipc: Resetting bearer <eth:syzkaller0>
[  278.486468][ T6485] tipc: Disabling bearer <eth:syzkaller0>
[  278.551868][ T6513] loop2: detected capacity change from 0 to 256
[  278.559009][ T4321] tipc: Node number set to 1616701617
[  278.636002][ T6513] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[  278.831224][   T26] audit: type=1800 audit(1790315571.520:8): pid=6524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.536" name="idProduct" dev="configfs" ino=39885 res=0 errno=0
[  278.890891][   T26] audit: type=1800 audit(1790315571.570:9): pid=6528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.536" name="UDC" dev="configfs" ino=39886 res=0 errno=0
[  285.208069][ T6607] fuse: Bad value for 'group_id'
[  286.687110][   T22] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  287.015973][ T6620] __vm_enough_memory: pid: 6620, comm: syz.0.559, no enough memory for the allocation
[  287.390357][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.555'.
[  288.679720][   T22] usb 3-1: unable to get BOS descriptor or descriptor too short
[  288.707165][   T22] usb 3-1: no configurations
[  288.713787][   T22] usb 3-1: can't read configurations, error -22
[  289.599224][ T6633] futex_wake_op: syz.2.572 tries to shift op by 144; fix this program
[  293.591484][ T6672] "syz.0.571" (6672) uses obsolete ecb(arc4) skcipher
[  293.691997][ T6673] sctp: [Deprecated]: syz.2.570 (pid 6673) Use of struct sctp_assoc_value in delayed_ack socket option.
[  293.691997][ T6673] Use struct sctp_sack_info instead
[  302.378929][ T5812] syz.4.355 (5812) used greatest stack depth: 17712 bytes left
[  303.159180][ T6741] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  303.246894][ T6741] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  303.290408][ T6741] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  303.368574][ T6749] netlink: 20 bytes leftover after parsing attributes in process `syz.4.589'.
[  303.390708][ T6741] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  303.478920][ T6741] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  303.622311][ T6741] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  303.656361][ T6741] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  304.728300][ T6767] device geneve2 entered promiscuous mode
[  305.593201][ T6778] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  306.031751][ T6763] loop5: detected capacity change from 0 to 40427
[  306.081812][ T6763] F2FS-fs (loop5): invalid crc value
[  306.154259][ T6763] F2FS-fs (loop5): Found nat_bits in checkpoint
[  306.206249][ T6763] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  306.304793][ T6763] syz.5.593: attempt to access beyond end of device
[  306.304793][ T6763] loop5: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  306.319306][ T6763] syz.5.593: attempt to access beyond end of device
[  306.319306][ T6763] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  306.705692][ T6024] syz-executor: attempt to access beyond end of device
[  306.705692][ T6024] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  308.089059][ T6817] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96
[  308.315687][ T6819] device syzkaller0 entered promiscuous mode
[  308.343035][ T6819] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  308.362515][ T6818] tipc: Resetting bearer <eth:syzkaller0>
[  308.417459][ T6818] tipc: Disabling bearer <eth:syzkaller0>
[  313.618702][ T6863] mmap: syz.0.622 (6863) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  316.750407][ T6901] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4287] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[6901]
[  317.129311][ T6902] "syz.0.629" (6902) uses obsolete ecb(arc4) skcipher
[  317.225977][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  317.237602][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  325.438944][ T6961] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  325.479766][ T6961] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  325.551324][ T6961] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  325.577957][ T6961] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  325.628287][ T6961] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  325.687946][ T6961] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  325.753717][ T6961] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  331.533119][ T7015] device syzkaller0 entered promiscuous mode
[  331.549366][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.569093][ T7015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.451972][ T7022] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  332.552922][ T7022] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  332.674734][ T7022] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  334.080640][ T7022] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  334.365683][ T7022] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  334.469018][ T7022] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  334.807461][ T7022] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  334.815257][ T7025] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[  338.202890][ T7071] loop5: detected capacity change from 0 to 32768
[  338.306916][ T7071] JBD2: Ignoring recovery information on journal
[  338.388163][ T7071] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  339.354801][   T26] audit: type=1800 audit(1790315632.040:10): pid=7071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.678" name="file1" dev="loop5" ino=17058 res=0 errno=0
[  340.609229][ T6024] ocfs2: Unmounting device (7,5) on (node local)
[  340.677734][ T7100] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  340.788008][ T7100] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  341.650315][ T7100] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  341.730765][ T7100] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  341.843790][ T7100] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  342.018517][ T7100] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  342.078087][ T7100] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  344.158714][ T7134] fuse: Bad value for 'fd'
[  346.008225][ T7160] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  346.018791][ T7160] device syzkaller0 entered promiscuous mode
[  346.044616][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  346.079399][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  346.106266][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  346.114234][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  346.122348][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  346.136715][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  346.153982][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  346.189921][ T7167] tipc: Resetting bearer <eth:syzkaller0>
[  346.217805][ T7157] tipc: Resetting bearer <eth:syzkaller0>
[  346.273309][ T7157] tipc: Disabling bearer <eth:syzkaller0>
[  347.571785][   T26] audit: type=1800 audit(1790315640.260:11): pid=7173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.703" name="bus" dev="ramfs" ino=42626 res=0 errno=0
[  350.572017][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.5.712'.
[  351.530837][ T7219] netlink: 'syz.2.718': attribute type 1 has an invalid length.
[  353.032626][ T7221] 8021q: adding VLAN 0 to HW filter on device bond2
[  353.043592][ T7221] bond1: (slave bond2): making interface the new active one
[  353.053419][ T7221] bond1: (slave bond2): Enslaving as an active interface with an up link
[  357.892635][ T7263] loop2: detected capacity change from 0 to 4096
[  357.931621][ T7263] EXT4-fs: Ignoring removed i_version option
[  358.025394][ T7263] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  358.226391][   T26] audit: type=1800 audit(1790315650.910:12): pid=7268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.727" name="sda" dev="loop2" ino=19 res=0 errno=0
[  358.758705][ T4287] EXT4-fs (loop2): unmounting filesystem.
[  360.806867][ T7295] netlink: 'syz.5.735': attribute type 4 has an invalid length.
[  362.974613][ T7306] syz.5.738 (7306) used greatest stack depth: 17088 bytes left
[  364.489066][ T7329] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  364.500067][ T7329] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  364.510470][ T7329] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  364.522717][ T7329] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  364.533901][ T7329] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  364.544351][ T7329] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  364.554951][ T7329] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  364.565334][ T7329] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  364.576031][ T7329] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  364.586466][ T7329] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  366.411625][ T7338] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[  370.233310][ T7375] sctp: [Deprecated]: syz.5.754 (pid 7375) Use of struct sctp_assoc_value in delayed_ack socket option.
[  370.233310][ T7375] Use struct sctp_sack_info instead
[  370.794074][ T7378] loop2: detected capacity change from 0 to 64
[  374.185439][ T7404] netlink: 2 bytes leftover after parsing attributes in process `syz.4.764'.
[  378.435455][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.774'.
[  378.457305][ T7430] bond0: option resend_igmp: invalid value (18446744072707910257)
[  378.465194][ T7430] bond0: option resend_igmp: allowed values 0 - 255
[  378.664163][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  378.673270][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  378.765648][ T7437] netlink: 16 bytes leftover after parsing attributes in process `syz.2.776'.
[  397.993161][ T7539] loop5: detected capacity change from 0 to 4096
[  398.028751][ T7539] EXT4-fs: Ignoring removed i_version option
[  398.080833][ T7539] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  398.128588][ T7546] netlink: 'syz.4.802': attribute type 4 has an invalid length.
[  398.394563][   T26] audit: type=1800 audit(1790315691.080:13): pid=7548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.800" name="sda" dev="loop5" ino=19 res=0 errno=0
[  399.823944][ T6024] EXT4-fs (loop5): unmounting filesystem.
[  406.629185][ T7600] netlink: 16 bytes leftover after parsing attributes in process `syz.4.817'.
[  407.671086][ T7609] device syzkaller0 entered promiscuous mode
[  409.026493][ T7640] loop5: detected capacity change from 0 to 512
[  409.136134][ T7640] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #2: comm syz.5.832: missing EA_INODE flag
[  409.227298][ T7640] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.832: error while reading EA inode 2 err=-117
[  409.247743][ T7640] EXT4-fs (loop5): 1 orphan inode deleted
[  409.248146][ T7650] loop2: detected capacity change from 0 to 1024
[  409.254020][ T7640] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  410.395726][ T6024] EXT4-fs (loop5): unmounting filesystem.
[  412.828738][ T7679] netlink: 'syz.0.841': attribute type 4 has an invalid length.
[  418.803398][ T7733] netlink: 'syz.3.859': attribute type 4 has an invalid length.
[  420.852564][ T7755] __vm_enough_memory: pid: 7755, comm: syz.2.874, no enough memory for the allocation
[  423.235810][ T7767] netlink: 'syz.4.870': attribute type 1 has an invalid length.
[  423.288922][ T7767] 8021q: adding VLAN 0 to HW filter on device bond2
[  423.358399][ T7767] bond1: (slave bond2): making interface the new active one
[  423.366168][ T7767] bond1: (slave bond2): Enslaving as an active interface with an up link
[  423.422502][ T7759] device dummy0 entered promiscuous mode
[  423.436157][ T7759] device vlan2 entered promiscuous mode
[  425.325088][ T7797] __vm_enough_memory: pid: 7797, comm: syz.3.880, no enough memory for the allocation
[  425.624174][ T7799] netlink: 'syz.2.876': attribute type 4 has an invalid length.
[  426.834282][   T26] audit: type=1326 audit(1790315719.520:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.4.894" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a5f9e159 code=0x7ffc0000
[  428.417627][   T26] audit: type=1326 audit(1790315719.520:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.4.894" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a5f9e159 code=0x7ffc0000
[  428.781355][   T26] audit: type=1326 audit(1790315719.790:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.4.894" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f79a5f9e159 code=0x7ffc0000
[  428.967726][   T26] audit: type=1326 audit(1790315719.790:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.4.894" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a5f9e159 code=0x7ffc0000
[  429.225919][   T26] audit: type=1326 audit(1790315719.790:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.4.894" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a5f9e159 code=0x7ffc0000
[  429.440918][   T26] audit: type=1326 audit(1790315719.790:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.4.894" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f79a5f9e159 code=0x7ffc0000
[  429.495598][   T26] audit: type=1326 audit(1790315720.530:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.4.894" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a5f9e159 code=0x7ffc0000
[  429.575705][   T26] audit: type=1326 audit(1790315720.530:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.4.894" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a5f9e159 code=0x7ffc0000
[  429.610451][   T26] audit: type=1326 audit(1790315721.090:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.4.894" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f79a5f9e159 code=0x7ffc0000
[  429.670151][   T26] audit: type=1326 audit(1790315721.090:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.4.894" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a5f9e159 code=0x7ffc0000
[  432.502123][ T7880] overlayfs: failed to clone lowerpath
[  437.308536][ T7936] loop2: detected capacity change from 0 to 512
[  437.823975][ T7936] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.914: missing EA_INODE flag
[  437.967775][ T7936] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.914: error while reading EA inode 2 err=-117
[  438.008513][ T7936] EXT4-fs (loop2): 1 orphan inode deleted
[  438.050970][ T7936] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  438.913699][ T4590] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  439.369739][ T4287] EXT4-fs (loop2): unmounting filesystem.
[  439.376014][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.5.917'.
[  440.120956][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  440.127760][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  441.110138][ T4590] usb 6-1: unable to get BOS descriptor or descriptor too short
[  441.129484][ T4590] usb 6-1: no configurations
[  441.134139][ T4590] usb 6-1: can't read configurations, error -22
[  441.878396][ T7988] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  443.029993][ T8003] loop5: detected capacity change from 0 to 256
[  445.974474][ T8008] device geneve3 entered promiscuous mode
[  451.441681][ T8056] device dummy0 entered promiscuous mode
[  451.497471][ T8056] device vlan1 entered promiscuous mode
[  451.558153][ T8064] fuse: Bad value for 'group_id'
[  451.638226][ T8063] device geneve2 entered promiscuous mode
[  451.874396][   T26] kauditd_printk_skb: 33 callbacks suppressed
[  451.874487][   T26] audit: type=1326 audit(1790315744.560:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.3.958" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3ad9e159 code=0x7ffc0000
[  451.942846][   T26] audit: type=1326 audit(1790315744.590:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.3.958" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3ad9e159 code=0x7ffc0000
[  452.034213][   T26] audit: type=1326 audit(1790315744.670:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.3.958" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4a3ad9e159 code=0x7ffc0000
[  452.058286][    C0] vkms_vblank_simulate: vblank timer overrun
[  452.077064][   T26] audit: type=1326 audit(1790315744.670:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.3.958" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3ad9e159 code=0x7ffc0000
[  452.107046][   T26] audit: type=1326 audit(1790315744.670:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.3.958" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3ad9e159 code=0x7ffc0000
[  452.351376][   T26] audit: type=1326 audit(1790315744.670:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.3.958" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4a3ad9e159 code=0x7ffc0000
[  452.809944][   T26] audit: type=1326 audit(1790315744.670:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.3.958" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3ad9e159 code=0x7ffc0000
[  452.901403][   T26] audit: type=1326 audit(1790315744.670:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.3.958" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3ad9e159 code=0x7ffc0000
[  452.925416][    C0] vkms_vblank_simulate: vblank timer overrun
[  452.932953][   T26] audit: type=1326 audit(1790315744.680:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.3.958" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a3ad5e98e code=0x7ffc0000
[  452.957259][    C0] vkms_vblank_simulate: vblank timer overrun
[  452.964469][   T26] audit: type=1326 audit(1790315744.680:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.3.958" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3ad9e159 code=0x7ffc0000
[  455.977709][ T8116] netlink: 'syz.3.970': attribute type 1 has an invalid length.
[  456.042831][ T8120] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  456.187076][ T8120] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  456.227562][ T8120] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  456.236601][ T8120] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  456.268556][ T8120] bond2: (slave geneve4): making interface the new active one
[  456.298567][ T8120] bond2: (slave geneve4): Enslaving as an active interface with an up link
[  456.357187][ T8119] netlink: 'syz.2.971': attribute type 1 has an invalid length.
[  456.513327][ T8116] netlink: 28 bytes leftover after parsing attributes in process `syz.3.970'.
[  456.611526][ T8116] 8021q: adding VLAN 0 to HW filter on device bond2
[  457.291836][ T8121] 8021q: adding VLAN 0 to HW filter on device bond4
[  457.348170][ T8121] bond3: (slave bond4): making interface the new active one
[  457.355960][ T8121] bond3: (slave bond4): Enslaving as an active interface with an up link
[  458.839786][ T8126] bond3: (slave gretap1): Enslaving as a backup interface with an up link
[  459.311993][ T8129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.971'.
[  459.707687][ T8129] 8021q: adding VLAN 0 to HW filter on device bond3
[  459.767436][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  461.201294][ T8175] netlink: 'syz.0.993': attribute type 1 has an invalid length.
[  462.291699][ T8189] loop5: detected capacity change from 0 to 256
[  462.301594][ T8189] FAT-fs (loop5): Unrecognized mount option "shortname=winmt" or missing value
[  462.648272][ T8188] loop5: detected capacity change from 0 to 512
[  462.795756][ T8188] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.985: inode #1: comm syz.5.985: iget: illegal inode #
[  462.814072][ T8188] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.985: error while reading EA inode 1 err=-117
[  462.827422][ T8188] EXT4-fs (loop5): 1 orphan inode deleted
[  462.833236][ T8188] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  462.848903][ T8176] 8021q: adding VLAN 0 to HW filter on device bond4
[  462.879404][ T8176] bond3: (slave bond4): making interface the new active one
[  462.957669][ T8176] bond3: (slave bond4): Enslaving as an active interface with an up link
[  463.014805][ T8178] bond3: (slave gretap1): Enslaving as a backup interface with an up link
[  463.039808][ T8180] netlink: 28 bytes leftover after parsing attributes in process `syz.0.993'.
[  463.056410][ T8180] 8021q: adding VLAN 0 to HW filter on device bond3
[  463.136213][ T8197] futex_wake_op: syz.4.986 tries to shift op by 144; fix this program
[  463.173010][ T6024] EXT4-fs (loop5): unmounting filesystem.
[  463.204865][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  463.338192][ T8203] loop5: detected capacity change from 0 to 128
[  463.441037][ T8203] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  471.674161][ T8271] futex_wake_op: syz.0.1004 tries to shift op by 144; fix this program
[  472.706369][ T8282] loop5: detected capacity change from 0 to 512
[  472.715517][ T8282] EXT4-fs: Ignoring removed orlov option
[  472.723177][ T8282] ext4: Bad value for 'data'
[  472.791541][ T8280] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  472.807875][ T7945] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  474.896275][ T8308] overlayfs: failed to clone lowerpath
[  480.901661][ T8378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1037'.
[  481.047261][ T8379] device syzkaller0 entered promiscuous mode
[  484.366642][ T8423] netlink: 'syz.3.1047': attribute type 1 has an invalid length.
[  485.352290][ T8429] bond3: (slave gretap1): making interface the new active one
[  485.473709][ T8429] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  485.666591][ T8448] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma?
[  485.722430][ T8449] netlink: 'syz.0.1066': attribute type 1 has an invalid length.
[  488.117494][   T26] kauditd_printk_skb: 37 callbacks suppressed
[  488.117513][   T26] audit: type=1804 audit(1790315780.800:104): pid=8468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1063" name="bus" dev="ramfs" ino=47297 res=1 errno=0
[  488.192766][   T26] audit: type=1804 audit(1790315780.840:105): pid=8468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1063" name="bus" dev="ramfs" ino=47297 res=1 errno=0
[  489.543829][ T8493] bond5 (unregistering): Released all slaves
[  495.890088][ T8556] bond6 (unregistering): Released all slaves
[  496.437249][   T26] audit: type=1800 audit(1790315789.100:106): pid=8562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1086" name="bus" dev="ramfs" ino=47412 res=0 errno=0
[  498.389872][ T8589] device syzkaller0 entered promiscuous mode
[  500.433767][ T8630] loop2: detected capacity change from 0 to 512
[  500.498024][ T8630] EXT4-fs: Ignoring removed i_version option
[  500.572805][ T8630] EXT4-fs: Ignoring removed oldalloc option
[  500.975641][ T8630] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  501.482914][   T26] audit: type=1800 audit(1790315794.170:107): pid=8621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1106" name="bus" dev="ramfs" ino=46759 res=0 errno=0
[  501.515376][ T8644] netlink: 'syz.3.1113': attribute type 1 has an invalid length.
[  501.525664][ T4287] EXT4-fs (loop2): unmounting filesystem.
[  501.545171][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  501.551584][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  502.550977][ T8643] bond7 (unregistering): Released all slaves
[  502.742062][ T8655] bond4: (slave bridge2): making interface the new active one
[  502.808940][ T8655] bond4: (slave bridge2): Enslaving as an active interface with an up link
[  502.958840][ T8661] device syzkaller0 entered promiscuous mode
[  506.578148][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1127'.
[  508.019607][ T8714] bond6 (unregistering): Released all slaves
[  508.270595][ T8731] IPVS: set_ctl: invalid protocol: 137 172.30.0.4:20001
[  510.547112][ T8753] tipc: Started in network mode
[  510.564809][ T8753] tipc: Node identity ac1414aa, cluster identity 4711
[  510.651476][ T8753] tipc: New replicast peer: 172.20.20.187
[  510.661917][ T8753] tipc: Enabled bearer <udp:syz0>, priority 10
[  511.073021][ T8769] file system registered
[  511.373298][ T8769] loop2: detected capacity change from 0 to 128
[  511.564742][ T4287] ffs_data_put(): freeing
[  511.721747][ T8774] bond5 (unregistering): Released all slaves
[  511.840969][   T22] tipc: Node number set to 2886997162
[  513.624772][ T8802] netlink: 'syz.0.1154': attribute type 1 has an invalid length.
[  513.903922][ T8802] bond7: (slave bridge0): making interface the new active one
[  514.784398][ T8802] bond7: (slave bridge0): Enslaving as an active interface with an up link
[  516.058101][   T26] audit: type=1804 audit(1790315808.750:108): pid=8821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1161" name="bus" dev="ramfs" ino=47790 res=1 errno=0
[  516.133728][   T26] audit: type=1804 audit(1790315808.750:109): pid=8821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1161" name="bus" dev="ramfs" ino=47790 res=1 errno=0
[  517.704527][ T8832] netlink: 'syz.2.1163': attribute type 1 has an invalid length.
[  517.790902][   T26] audit: type=1800 audit(1790315810.480:110): pid=8830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1159" name="bus" dev="ramfs" ino=47796 res=0 errno=0
[  520.163325][ T8867] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1170'.
[  520.809533][ T8863] netlink: 'syz.2.1171': attribute type 1 has an invalid length.
[  522.131400][ T8878] bond9: (slave bridge1): making interface the new active one
[  522.222802][ T8878] bond9: (slave bridge1): Enslaving as an active interface with an up link
[  523.021270][ T8887] netlink: 'syz.4.1178': attribute type 1 has an invalid length.
[  524.087018][ T4590] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  524.327019][ T4590] usb 3-1: Using ep0 maxpacket: 8
[  524.336038][ T4590] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  524.369400][ T4590] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.483969][ T4590] usb 3-1: Product: syz
[  524.488618][ T4590] usb 3-1: Manufacturer: syz
[  524.493407][ T4590] usb 3-1: SerialNumber: syz
[  525.261154][ T4590] usb 3-1: config 0 descriptor??
[  526.072125][ T4590] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  528.819101][ T4590] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -110
[  529.068915][ T7031] usb 3-1: USB disconnect, device number 13
[  529.132332][ T8938] overlayfs: failed to clone lowerpath
[  532.112078][ T8968] ip_tables: iptables: counters copy to user failed while replacing table
[  535.687388][ T9009] loop2: detected capacity change from 0 to 256
[  544.063766][ T9075] overlayfs: failed to clone lowerpath
[  544.793406][ T9074] capability: warning: `syz.3.1225' uses 32-bit capabilities (legacy support in use)
[  547.211736][ T9099] loop2: detected capacity change from 0 to 512
[  547.237046][ T4276] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  547.269843][ T9099] EXT4-fs: Ignoring removed nomblk_io_submit option
[  547.308676][ T9099] EXT4-fs (loop2): can't mount with both data=journal and delalloc
[  547.541684][ T4276] usb 6-1: unable to get BOS descriptor or descriptor too short
[  547.554973][ T4276] usb 6-1: config 4 has an invalid interface number: 4 but max is 0
[  547.563847][ T4276] usb 6-1: config 4 has no interface number 0
[  547.572435][ T4276] usb 6-1: config 4 interface 4 has no altsetting 0
[  547.593701][ T4276] usb 6-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed
[  547.608810][ T4276] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  547.619680][ T4276] usb 6-1: Product: syz
[  547.623976][ T4276] usb 6-1: Manufacturer: syz
[  547.629302][ T4276] usb 6-1: SerialNumber: syz
[  548.510586][ T9112] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  548.637754][ T4276] gspca_main: sunplus-2.14.0 probing 08ca:2016
[  548.645786][ T4276] gspca_sunplus: reg_w_riv err -71
[  548.649130][ T9115] futex_wake_op: syz.4.1235 tries to shift op by 144; fix this program
[  548.658327][ T4276] sunplus: probe of 6-1:4.4 failed with error -71
[  548.672136][ T4276] usb 6-1: USB disconnect, device number 4
[  550.266677][ T9124] bond8 (unregistering): Released all slaves
[  554.158815][ T9171] 9pnet_fd: Insufficient options for proto=fd
[  555.084699][ T9177] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  555.545412][ T9179] gadgetfs: bound to dummy_udc driver
[  556.453365][ T4276] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  556.461504][    C0] gadgetfs: connected
[  556.466318][ T4276] gadgetfs: disconnected
[  556.647256][    C0] gadgetfs: connected
[  556.653778][ T4276] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00
[  556.669036][ T4276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  556.718273][ T9178] gadgetfs: suspended from state 3
[  556.762808][ T4276] usb 1-1: can't set config #1, error -71
[  556.798345][ T9178] gadgetfs: disconnected
[  556.822170][ T4276] usb 1-1: USB disconnect, device number 3
[  557.750686][ T9189] bond6 (unregistering): Released all slaves
[  562.979751][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  562.986117][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  564.488937][ T9256] bond6 (unregistering): Released all slaves
[  564.784230][ T9274] ffs_data_put(): freeing
[  564.837629][ T9275] device syzkaller0 entered promiscuous mode
[  564.898018][ T9276] jffs2: notice: (9276) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  565.886700][ T9276] jffs2: fork failed for JFFS2 garbage collect thread: 4
[  567.721816][ T9301] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1283'.
[  572.948015][ T9364] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  578.984853][ T9436] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  581.421037][ T9452] fuse: Bad value for 'fd'
[  583.078977][ T9473] overlayfs: failed to clone lowerpath
[  584.606756][ T9486] loop5: detected capacity change from 0 to 512
[  584.672959][ T9486] EXT4-fs: Ignoring removed nomblk_io_submit option
[  584.757048][ T9486] EXT4-fs (loop5): can't mount with both data=journal and delalloc
[  586.443118][ T9496] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  593.269148][ T9542] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  597.493120][ T9581] jffs2: notice: (9581) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  597.573937][ T9583] syz.0.1361 sent an empty control message without MSG_MORE.
[  598.641488][ T9596] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  599.499244][ T9598] netlink: 'syz.5.1366': attribute type 1 has an invalid length.
[  600.233536][ T9609] loop2: detected capacity change from 0 to 2048
[  600.403145][ T9609] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  601.556268][ T9599] 8021q: adding VLAN 0 to HW filter on device bond2
[  601.706531][ T9599] bond1: (slave bond2): making interface the new active one
[  601.844599][ T9599] bond1: (slave bond2): Enslaving as an active interface with an up link
[  602.485873][ T9606] bond1: (slave gretap1): Enslaving as a backup interface with an up link
[  602.724727][ T9634] netlink: 'syz.4.1377': attribute type 1 has an invalid length.
[  603.777167][ T9649] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1379'.
[  603.860251][ T9650] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma?
[  604.600288][ T9634] bond7: (slave bridge1): making interface the new active one
[  604.636787][ T9634] bond7: (slave bridge1): Enslaving as an active interface with an up link
[  606.664928][ T9674] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[  606.672051][ T9674] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  606.683533][ T9674] vhci_hcd vhci_hcd.0: Device attached
[  606.978006][   T34] usb 43-1: new high-speed USB device number 2 using vhci_hcd
[  607.481867][ T9675] vhci_hcd: connection reset by peer
[  607.520050][ T5623] vhci_hcd: stop threads
[  607.534945][ T5623] vhci_hcd: release socket
[  607.642860][ T5623] vhci_hcd: disconnect device
[  612.824665][   T34] vhci_hcd: vhci_device speed not set
[  613.331008][ T9718] netlink: 'syz.3.1388': attribute type 1 has an invalid length.
[  613.686277][ T9728] netlink: 1708 bytes leftover after parsing attributes in process `syz.5.1401'.
[  615.321814][ T9743] fuse: Bad value for 'fd'
[  615.817764][ T9751] loop5: detected capacity change from 0 to 1024
[  615.825316][ T9751] EXT4-fs: Invalid want_extra_isize 7
[  615.985976][ T9504] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  617.245944][ T9769] netlink: 'syz.5.1412': attribute type 1 has an invalid length.
[  617.388913][ T9769] 8021q: adding VLAN 0 to HW filter on device bond4
[  617.416557][ T9769] bond3: (slave bond4): making interface the new active one
[  617.442871][ T9769] bond3: (slave bond4): Enslaving as an active interface with an up link
[  618.682501][ T9795] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  621.919816][ T9830] 8021q: adding VLAN 0 to HW filter on device bond8
[  623.059560][ T9839] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  623.066152][ T9839] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  623.074004][ T9839] vhci_hcd vhci_hcd.0: Device attached
[  623.094862][ T9840] vhci_hcd: connection closed
[  623.097742][ T5622] vhci_hcd: stop threads
[  623.357177][ T4276] usb 37-1: new high-speed USB device number 2 using vhci_hcd
[  623.576932][ T5622] vhci_hcd: release socket
[  623.617763][ T5622] vhci_hcd: disconnect device
[  624.425761][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  624.432910][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  625.011181][ T9864] netlink: 1708 bytes leftover after parsing attributes in process `syz.0.1444'.
[  627.611513][ T9898] loop2: detected capacity change from 0 to 8
[  628.737176][ T4276] vhci_hcd: vhci_device speed not set
[  629.201223][ T9910] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1457'.
[  633.715638][ T9960] jffs2: notice: (9960) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  636.885410][ T9996] 8021q: adding VLAN 0 to HW filter on device bond5
[  637.103980][T10016] lo: Caught tx_queue_len zero misconfig
[  637.256065][T10020] 9pnet: p9_errstr2errno: server reported unknown error tun
[  639.099226][T10033] xt_policy: output policy not valid in PREROUTING and INPUT
[  641.271935][T10045] tipc: Started in network mode
[  641.278119][T10045] tipc: Node identity 023fa486915, cluster identity 4711
[  641.450664][T10045] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  641.704738][T10051] loop2: detected capacity change from 0 to 1024
[  641.771918][T10051] EXT4-fs: Invalid want_extra_isize 7
[  642.644393][ T4276] tipc: Node number set to 2473567366
[  642.792540][T10063] netlink: 'syz.3.1498': attribute type 1 has an invalid length.
[  642.990505][T10067] 8021q: adding VLAN 0 to HW filter on device bond8
[  642.999486][T10067] bond7: (slave bond8): making interface the new active one
[  643.009503][T10067] bond7: (slave bond8): Enslaving as an active interface with an up link
[  643.294892][T10083] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready
[  643.403294][T10083] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  644.275451][T10081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  647.266594][T10132] netlink: 'syz.0.1518': attribute type 1 has an invalid length.
[  648.109947][T10136] 8021q: adding VLAN 0 to HW filter on device bond9
[  648.561986][T10136] bond8: (slave bond9): making interface the new active one
[  648.706071][T10136] bond8: (slave bond9): Enslaving as an active interface with an up link
[  649.112838][T10147] netlink: 'syz.5.1521': attribute type 1 has an invalid length.
[  652.821146][T10187] netlink: 'syz.0.1534': attribute type 1 has an invalid length.
[  653.046058][T10194] device syzkaller0 entered promiscuous mode
[  653.145671][T10190] 8021q: adding VLAN 0 to HW filter on device bond11
[  653.802312][T10190] bond10: (slave bond11): making interface the new active one
[  653.920862][T10190] bond10: (slave bond11): Enslaving as an active interface with an up link
[  654.007475][T10185] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  654.042935][T10201] tipc: Resetting bearer <eth:syzkaller0>
[  654.099172][T10184] tipc: Resetting bearer <eth:syzkaller0>
[  654.816336][T10184] tipc: Disabling bearer <eth:syzkaller0>
[  656.145256][T10220] loop2: detected capacity change from 0 to 512
[  656.234106][T10220] EXT4-fs: Ignoring removed nobh option
[  656.668015][T10220] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  656.795373][T10220] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1543: attempt to clear invalid blocks 1 len 1
[  656.957687][T10220] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  657.087441][T10220] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1543: invalid indirect mapped block 1819239214 (level 0)
[  657.159208][T10220] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1543: invalid indirect mapped block 1819239214 (level 1)
[  658.013340][T10220] EXT4-fs (loop2): 1 truncate cleaned up
[  658.025829][T10220] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  659.576068][T10243] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  659.748865][T10243] device syzkaller0 entered promiscuous mode
[  659.781364][ T4287] EXT4-fs (loop2): unmounting filesystem.
[  659.854987][T10243] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  660.043593][T10250] netlink: 'syz.4.1549': attribute type 1 has an invalid length.
[  660.128521][T10253] tipc: Resetting bearer <eth:syzkaller0>
[  660.233713][T10267] sctp: [Deprecated]: syz.3.1551 (pid 10267) Use of struct sctp_assoc_value in delayed_ack socket option.
[  660.233713][T10267] Use struct sctp_sack_info instead
[  660.482978][T10256] 8021q: adding VLAN 0 to HW filter on device bond10
[  660.770072][T10256] bond9: (slave bond10): making interface the new active one
[  660.811128][T10256] bond9: (slave bond10): Enslaving as an active interface with an up link
[  660.913405][T10240] tipc: Resetting bearer <eth:syzkaller0>
[  660.971549][T10240] tipc: Disabling bearer <eth:syzkaller0>
[  662.500305][T10300] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  665.222823][T10337] 8021q: adding VLAN 0 to HW filter on device bond6
[  665.615235][T10356] lo: Caught tx_queue_len zero misconfig
[  670.061885][T10408] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  672.892116][T10458] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  680.231773][T10534] loop2: detected capacity change from 0 to 512
[  681.052329][T10534] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  686.337610][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  686.344136][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  688.519612][T10648] netlink: 'syz.2.1648': attribute type 1 has an invalid length.
[  690.027671][T10675] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready
[  690.035527][T10675] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  691.020834][T10674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  691.163530][T10693] tc action pedit 'at' offset 5 out of bounds
[  691.170445][T10693] tc action pedit 'at' offset 5 out of bounds
[  691.176593][T10693] tc action pedit 'at' offset 5 out of bounds
[  691.183491][T10693] tc action pedit 'at' offset 5 out of bounds
[  691.189721][T10693] tc action pedit 'at' offset 5 out of bounds
[  691.195833][T10693] tc action pedit 'at' offset 5 out of bounds
[  691.201983][T10693] tc action pedit 'at' offset 5 out of bounds
[  691.208208][T10693] tc action pedit 'at' offset 5 out of bounds
[  691.214350][T10693] tc action pedit 'at' offset 5 out of bounds
[  691.220500][T10693] tc action pedit 'at' offset 5 out of bounds
[  691.226615][T10693] 0: reclassify loop, rule prio 0, protocol 800
[  691.675636][T10708] loop2: detected capacity change from 0 to 1024
[  691.687253][T10708] EXT4-fs: Ignoring removed bh option
[  691.800177][T10710] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  692.617862][T10708] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  692.826652][ T4287] EXT4-fs (loop2): unmounting filesystem.
[  693.642381][T10724] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready
[  693.650201][T10724] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready
[  693.657718][T10724] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready
[  693.665061][T10724] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready
[  693.672386][T10724] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready
[  693.679648][T10724] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready
[  693.686989][T10724] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready
[  693.694198][T10724] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready
[  693.701493][T10724] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready
[  693.709330][T10724] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready
[  693.717107][T10724] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready
[  693.726116][T10724] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready
[  693.733692][T10724] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready
[  697.026032][T10768] loop2: detected capacity change from 0 to 256
[  697.107024][T10766] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready
[  697.132386][T10768] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  697.148477][T10766] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  697.208722][T10772] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  697.760432][T10763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  701.309158][T10816] device syzkaller0 entered promiscuous mode
[  712.159598][T10918] sctp: [Deprecated]: syz.4.1723 (pid 10918) Use of struct sctp_assoc_value in delayed_ack socket option.
[  712.159598][T10918] Use struct sctp_sack_info instead
[  715.768684][T10959] bond11 (unregistering): Released all slaves
[  716.230366][T10971] sctp: [Deprecated]: syz.5.1737 (pid 10971) Use of struct sctp_assoc_value in delayed_ack socket option.
[  716.230366][T10971] Use struct sctp_sack_info instead
[  723.955645][T11053] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1761'.
[  724.415742][ T4276] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  724.717426][ T4276] usb 3-1: Using ep0 maxpacket: 16
[  724.731015][ T4276] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  724.856311][ T4276] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  724.929024][ T4276] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  724.974036][ T4276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  724.987314][ T4276] usb 3-1: Product: syz
[  724.991662][ T4276] usb 3-1: Manufacturer: syz
[  724.996412][ T4276] usb 3-1: SerialNumber: syz
[  725.083906][T11066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1765'.
[  725.367380][ T4276] usb 3-1: 0:2 : does not exist
[  725.378400][ T4276] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  726.114343][ T4276] usb 3-1: USB disconnect, device number 14
[  726.706565][T11073] udevd[11073]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  727.057782][T11096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1772'.
[  728.576569][T11115] sctp: [Deprecated]: syz.0.1779 (pid 11115) Use of struct sctp_assoc_value in delayed_ack socket option.
[  728.576569][T11115] Use struct sctp_sack_info instead
[  732.155943][T11148] Cannot find add_set index 0 as target
[  733.252687][T11168] sctp: [Deprecated]: syz.2.1792 (pid 11168) Use of struct sctp_assoc_value in delayed_ack socket option.
[  733.252687][T11168] Use struct sctp_sack_info instead
[  737.853719][T11230] loop2: detected capacity change from 0 to 1024
[  737.920078][T11230] hfsplus: unable to parse mount options
[  738.342773][T11238] sctp: [Deprecated]: syz.0.1810 (pid 11238) Use of struct sctp_assoc_value in delayed_ack socket option.
[  738.342773][T11238] Use struct sctp_sack_info instead
[  738.953227][T11243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1798'.
[  738.972802][T11243] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1798'.
[  739.110063][T11243] device geneve5 entered promiscuous mode
[  743.439253][T11306] futex_wake_op: syz.4.1828 tries to shift op by 144; fix this program
[  744.680862][T11341] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  747.299707][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  747.306131][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  747.899242][T11366] overlayfs: failed to clone lowerpath
[  752.812510][T11432] loop2: detected capacity change from 0 to 1024
[  752.852343][T11432] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  753.033615][T11432] EXT4-fs (loop2): barriers disabled
[  753.041799][T11432] JBD2: no valid journal superblock found
[  754.036884][T11432] EXT4-fs (loop2): error loading journal
[  755.139046][T11456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1863'.
[  755.238988][T11456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1863'.
[  761.540041][T11534] bond9 (unregistering): Released all slaves
[  763.755327][T11583] bond12 (unregistering): Released all slaves
[  764.964819][T11625] fuse: Unknown parameter 'åôK—ðX;3„®¤uè"Í#v”~ó'
[  766.455270][T11645] bond13 (unregistering): Released all slaves
[  768.893705][T11708] bond14 (unregistering): Released all slaves
[  771.436291][T11761] bond11 (unregistering): Released all slaves
[  775.018397][T11815] sctp: [Deprecated]: syz.0.1962 (pid 11815) Use of int in max_burst socket option.
[  775.018397][T11815] Use struct sctp_assoc_value instead
[  781.585302][T11856] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  785.584024][T11944] loop2: detected capacity change from 0 to 512
[  785.728359][T11944] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  785.754963][T11944] System zones: 1-12
[  785.807311][T11944] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.1989: missing EA_INODE flag
[  786.497400][T11944] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1989: error while reading EA inode 12 err=-117
[  786.831298][T11944] EXT4-fs (loop2): 1 orphan inode deleted
[  786.857021][T11944] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  787.989725][T11967] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  788.631668][ T4287] EXT4-fs (loop2): unmounting filesystem.
[  789.934624][T11980] 8021q: adding VLAN 0 to HW filter on device bond13
[  793.042361][T12007] bond15 (unregistering): Released all slaves
[  793.918201][T12034] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  798.527394][T12062] bond16 (unregistering): Released all slaves
[  799.053953][T12071] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2022'.
[  801.467976][   T26] audit: type=1326 audit(1790316094.160:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12082 comm="syz.5.2026" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904459e159 code=0x7ffc0000
[  802.379677][T12091] 8021q: adding VLAN 0 to HW filter on device bond12
[  802.496196][   T26] audit: type=1326 audit(1790316094.160:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12082 comm="syz.5.2026" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904459e159 code=0x7ffc0000
[  802.537308][   T26] audit: type=1326 audit(1790316094.160:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12082 comm="syz.5.2026" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904459e159 code=0x7ffc0000
[  802.579353][   T26] audit: type=1326 audit(1790316094.160:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12082 comm="syz.5.2026" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904459e159 code=0x7ffc0000
[  803.657053][   T26] audit: type=1326 audit(1790316094.160:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12082 comm="syz.5.2026" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f904459e159 code=0x7ffc0000
[  804.519199][T12103] IPv6: sit3: Disabled Multicast RS
[  804.839808][   T26] audit: type=1326 audit(1790316094.160:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12082 comm="syz.5.2026" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904459e159 code=0x7ffc0000
[  804.909980][   T26] audit: type=1326 audit(1790316094.160:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12082 comm="syz.5.2026" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904459e159 code=0x7ffc0000
[  804.934710][   T26] audit: type=1326 audit(1790316094.160:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12082 comm="syz.5.2026" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f904455e98e code=0x7ffc0000
[  804.974060][   T26] audit: type=1326 audit(1790316094.160:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12082 comm="syz.5.2026" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f904455a5ac code=0x7ffc0000
[  805.045373][   T26] audit: type=1326 audit(1790316094.160:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12082 comm="syz.5.2026" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f904455a60e code=0x7ffc0000
[  805.339081][T12114] bond13 (unregistering): Released all slaves
[  805.640183][T12123] Option 'dnserror' to dns_resolver key: bad/missing value
[  806.984834][T12135] 8021q: adding VLAN 0 to HW filter on device bond10
[  808.725597][T12166] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2050'.
[  808.738733][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  808.745167][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  808.796430][T12166] bond14 (unregistering): Released all slaves
[  813.909285][T12209] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2066'.
[  815.180836][T12224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  815.378680][T12232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2072'.
[  815.423326][T12232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2072'.
[  818.181129][T12249] Option 'dnserror' to dns_resolver key: bad/missing value
[  823.235657][T12283] tunl0: Caught tx_queue_len zero misconfig
[  823.435949][T12288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2086'.
[  823.475959][T12288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2086'.
[  824.519307][T12295] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2080'.
[  824.598508][T12295] bond17 (unregistering): Released all slaves
[  829.405381][T12343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2101'.
[  829.448667][T12343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2101'.
[  834.685834][T12380] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2118'.
[  834.758821][T12380] bond16 (unregistering): Released all slaves
[  837.636918][T12421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2127'.
[  839.315305][T12434] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2132'.
[  839.528295][T12434] bond18 (unregistering): Released all slaves
[  841.098597][T12455] IPv6: sit1: Disabled Multicast RS
[  849.772252][T12544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2171'.
[  850.031576][T12545] bond11 (unregistering): Released all slaves
[  850.132251][T12556] netlink: 'syz.5.2173': attribute type 10 has an invalid length.
[  850.143411][T12556] bridge0: port 2(bridge_slave_1) entered disabled state
[  850.151068][T12556] bridge0: port 1(bridge_slave_0) entered disabled state
[  850.899238][T12556] bridge0: port 2(bridge_slave_1) entered blocking state
[  850.906546][T12556] bridge0: port 2(bridge_slave_1) entered forwarding state
[  850.915709][T12556] bridge0: port 1(bridge_slave_0) entered blocking state
[  850.922950][T12556] bridge0: port 1(bridge_slave_0) entered forwarding state
[  850.957487][T12556] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  851.258649][T12573] loop2: detected capacity change from 0 to 256
[  856.163660][T12607] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready
[  856.171254][T12607] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready
[  856.178783][T12607] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready
[  856.186100][T12607] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready
[  856.193435][T12607] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready
[  856.200644][T12607] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready
[  856.208089][T12607] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready
[  856.215235][T12607] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready
[  856.222485][T12607] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready
[  856.229798][T12607] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready
[  856.237287][T12607] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready
[  856.244793][T12607] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready
[  856.252411][T12607] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready
[  856.260334][T12607] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready
[  856.541352][T12608] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2189'.
[  856.679666][T12611] bond17 (unregistering): Released all slaves
[  856.776730][T12619] loop2: detected capacity change from 0 to 128
[  856.814213][T12619] FAT-fs (loop2): invalid media value (0x07)
[  856.831182][T12619] FAT-fs (loop2): Can't find a valid FAT filesystem
[  864.537166][T12692] 8021q: adding VLAN 0 to HW filter on device bond19
[  864.837805][T12692] bond18: (slave bond19): Enslaving as an active interface with an up link
[  867.766187][T12730] netlink: 'syz.3.2226': attribute type 10 has an invalid length.
[  867.932700][T12730] bridge0: port 2(bridge_slave_1) entered blocking state
[  867.940026][T12730] bridge0: port 2(bridge_slave_1) entered forwarding state
[  867.947550][T12730] bridge0: port 1(bridge_slave_0) entered blocking state
[  867.954683][T12730] bridge0: port 1(bridge_slave_0) entered forwarding state
[  868.388854][T12730] device bridge0 entered promiscuous mode
[  868.407590][T12730] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  870.403372][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  870.409788][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  873.077798][T12762] 8021q: adding VLAN 0 to HW filter on device bond20
[  873.199563][T12762] bond19: (slave bond20): Enslaving as an active interface with an up link
[  873.735460][T12782] 8021q: adding VLAN 0 to HW filter on device bond22
[  873.746372][T12782] bond21: (slave bond22): Enslaving as an active interface with an up link
[  873.762810][T12789] netlink: 'syz.4.2243': attribute type 10 has an invalid length.
[  874.425609][T12789] bridge0: port 2(bridge_slave_1) entered blocking state
[  874.432837][T12789] bridge0: port 2(bridge_slave_1) entered forwarding state
[  874.440372][T12789] bridge0: port 1(bridge_slave_0) entered blocking state
[  874.447562][T12789] bridge0: port 1(bridge_slave_0) entered forwarding state
[  875.373438][T12789] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  880.409461][T12846] futex_wake_op: syz.5.2258 tries to shift op by 144; fix this program
[  881.253870][T12850] 8021q: adding VLAN 0 to HW filter on device bond15
[  881.263914][T12850] bond14: (slave bond15): Enslaving as an active interface with an up link
[  901.711494][T13079] netlink: 'syz.4.2329': attribute type 1 has an invalid length.
[  901.988292][T13079] 8021q: adding VLAN 0 to HW filter on device bond21
[  902.053017][T13079] bond20: (slave bond21): Enslaving as an active interface with an up link
[  907.664005][T13134] netlink: 'syz.3.2344': attribute type 1 has an invalid length.
[  907.948767][T13134] 8021q: adding VLAN 0 to HW filter on device bond13
[  907.991399][T13134] bond12: (slave bond13): Enslaving as an active interface with an up link
[  912.371368][T13187] netlink: 'syz.5.2364': attribute type 1 has an invalid length.
[  912.579759][T13187] 8021q: adding VLAN 0 to HW filter on device bond8
[  912.629015][T13187] bond7: (slave bond8): Enslaving as an active interface with an up link
[  917.771302][T13237] netlink: 'syz.5.2379': attribute type 1 has an invalid length.
[  918.145714][T13244] 8021q: adding VLAN 0 to HW filter on device bond10
[  919.183190][T13244] bond9: (slave bond10): Enslaving as an active interface with an up link
[  922.696867][   T26] kauditd_printk_skb: 41 callbacks suppressed
[  922.696886][   T26] audit: type=1326 audit(1790316215.370:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13267 comm="syz.5.2388" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904459e159 code=0x7ffc0000
[  923.114864][   T26] audit: type=1326 audit(1790316215.370:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13267 comm="syz.5.2388" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904459e159 code=0x7ffc0000
[  923.552591][   T26] audit: type=1326 audit(1790316215.370:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13267 comm="syz.5.2388" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f904459e159 code=0x7ffc0000
[  923.825857][   T26] audit: type=1326 audit(1790316215.370:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13267 comm="syz.5.2388" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904459e159 code=0x7ffc0000
[  923.944194][   T26] audit: type=1326 audit(1790316215.370:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13267 comm="syz.5.2388" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904459e159 code=0x7ffc0000
[  924.056686][   T26] audit: type=1326 audit(1790316215.370:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13267 comm="syz.5.2388" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f904459e159 code=0x7ffc0000
[  924.168354][   T26] audit: type=1326 audit(1790316215.370:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13267 comm="syz.5.2388" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904459e159 code=0x7ffc0000
[  924.197489][T13341] sctp: [Deprecated]: syz.3.2395 (pid 13341) Use of int in max_burst socket option.
[  924.197489][T13341] Use struct sctp_assoc_value instead
[  924.262600][T13343] netlink: 'syz.4.2398': attribute type 1 has an invalid length.
[  924.270794][   T26] audit: type=1326 audit(1790316215.370:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13267 comm="syz.5.2388" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904459e159 code=0x7ffc0000
[  924.353646][T13343] 8021q: adding VLAN 0 to HW filter on device bond23
[  924.394969][T13343] bond22: (slave bond23): Enslaving as an active interface with an up link
[  924.720017][T13332] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  924.819139][T13332] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  925.324760][T13366] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  926.081455][T13382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2411'.
[  926.971224][T13382] bond14 (unregistering): Released all slaves
[  927.264079][T13398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2424'.
[  927.640505][T13402] bond16 (unregistering): Released all slaves
[  928.444312][T13413] CIFS mount error: No usable UNC path provided in device string!
[  928.444312][T13413] 
[  928.454634][T13413] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  931.619325][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  931.810873][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  931.961136][T13441] MPTCP: kernel_bind error, err=-99
[  932.669889][T13450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2431'.
[  933.645082][T13450] bond24 (unregistering): Released all slaves
[  937.659732][T13500] bond14 (unregistering): Released all slaves
[  941.906875][ T5102] usb 3-1: new low-speed USB device number 15 using dummy_hcd
[  942.099163][ T5102] usb 3-1: unable to get BOS descriptor or descriptor too short
[  942.120345][ T5102] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x82 is Bulk; changing to Interrupt
[  942.142232][ T5102] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x3 is Bulk; changing to Interrupt
[  942.163248][ T5102] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  942.201439][ T5102] usb 3-1: config 1 interface 0 has no altsetting 0
[  942.209277][T13549] bond11 (unregistering): Released all slaves
[  942.258777][ T5102] usb 3-1: string descriptor 0 read error: -22
[  942.265273][ T5102] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  942.285124][ T5102] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  942.358177][T13540] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  942.383464][T13540] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  942.646345][ T5102] usb 3-1: bad CDC descriptors
[  943.127831][ T4590] usb 3-1: USB disconnect, device number 15
[  946.335727][T13605] bond15 (unregistering): Released all slaves
[  946.419062][T13615] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2485'.
[  951.709363][T13685] loop2: detected capacity change from 0 to 1024
[  951.776423][T13685] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  951.832543][T13685] EXT4-fs (loop2): barriers disabled
[  951.884695][T13685] JBD2: no valid journal superblock found
[  951.890772][T13685] EXT4-fs (loop2): error loading journal
[  954.668479][T13706] loop2: detected capacity change from 0 to 2048
[  954.755076][T13712] trusted_key: encrypted_key: insufficient parameters specified
[  954.943728][T13706] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  956.299702][T13738] loop2: detected capacity change from 0 to 1024
[  956.343221][T13738] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  956.386464][T13738] EXT4-fs (loop2): barriers disabled
[  956.411287][T13738] JBD2: no valid journal superblock found
[  956.417358][T13738] EXT4-fs (loop2): error loading journal
[  958.976508][T13759] siw: device registration error -23
[  962.113979][T13801] siw: device registration error -23
[  971.996238][T13916] loop2: detected capacity change from 0 to 2048
[  972.045929][T13916] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value
[  974.348513][T13956] loop2: detected capacity change from 0 to 1024
[  974.438842][T13956] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  974.519223][T13956] EXT4-fs (loop2): barriers disabled
[  974.545015][T13956] JBD2: no valid journal superblock found
[  974.583397][T13956] EXT4-fs (loop2): error loading journal
[  983.068071][T14081] ci_hdrc ci_hdrc.0: invalid resource
[  983.075851][T14081] ci_hdrc: probe of ci_hdrc.0 failed with error -22
[  984.698663][T14094] 0x7073726500000000-0x7073726500306e61 : ""
[  984.705274][T14094] mtd: partition "" is out of reach -- disabled
[  985.075767][T14094] ftl_cs: FTL header not found.
[  991.022555][T14168] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2662'.
[  992.782552][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  992.788988][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  998.430488][T14232] overlayfs: failed to clone upperpath
[  998.793894][T14238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2689'.
[  999.008728][T14247] trusted_key: encrypted_key: insufficient parameters specified
[  999.779872][T14242] bond23 (unregistering): Released all slaves
[ 1003.136840][T14291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2706'.
[ 1004.081400][T14299] bond23 (unregistering): Released all slaves
[ 1007.694754][T14342] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2723'.
[ 1007.961923][T14342] bond15 (unregistering): Released all slaves
[ 1012.726086][T14401] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2740'.
[ 1012.980125][T14404] bond12 (unregistering): Released all slaves
[ 1016.478585][T14434] trusted_key: encrypted_key: insufficient parameters specified
[ 1020.444355][T14473] loop2: detected capacity change from 0 to 1024
[ 1020.513241][T14473] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[ 1020.595780][T14473] EXT4-fs (loop2): barriers disabled
[ 1020.601144][T14473] JBD2: no valid journal superblock found
[ 1020.653850][T14473] EXT4-fs (loop2): error loading journal
[ 1023.630737][T14514] netlink: 'syz.5.2775': attribute type 1 has an invalid length.
[ 1026.973827][T14558] netlink: 'syz.0.2791': attribute type 1 has an invalid length.
[ 1033.850608][T14597] loop2: detected capacity change from 0 to 1024
[ 1034.021647][T14597] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[ 1034.177452][T14597] EXT4-fs (loop2): barriers disabled
[ 1034.186989][T14597] JBD2: no valid journal superblock found
[ 1034.220634][T14597] EXT4-fs (loop2): error loading journal
[ 1035.172131][T14613] netlink: 'syz.5.2805': attribute type 1 has an invalid length.
[ 1036.846377][T14647] loop2: detected capacity change from 0 to 1024
[ 1036.857388][T14647] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[ 1036.877927][T14647] EXT4-fs (loop2): barriers disabled
[ 1036.917279][T14647] JBD2: no valid journal superblock found
[ 1037.125988][T14647] EXT4-fs (loop2): error loading journal
[ 1038.634019][T14660] netlink: 'syz.4.2822': attribute type 1 has an invalid length.
[ 1044.457728][T14737] netlink: 'syz.4.2846': attribute type 1 has an invalid length.
[ 1044.483171][T14738] overlayfs: failed to clone lowerpath
[ 1044.490561][T14738] overlayfs: failed to clone lowerpath
[ 1046.320813][T14765] loop2: detected capacity change from 0 to 1024
[ 1046.384723][T14765] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[ 1046.434832][T14765] EXT4-fs (loop2): barriers disabled
[ 1046.440196][T14765] JBD2: no valid journal superblock found
[ 1046.483026][T14765] EXT4-fs (loop2): error loading journal
[ 1048.525582][T14786] netlink: 'syz.3.2860': attribute type 1 has an invalid length.
[ 1049.429345][T14805] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2863'.
[ 1053.875193][T14831] netlink: 'syz.0.2876': attribute type 1 has an invalid length.
[ 1053.910040][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1053.916551][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1062.562459][T14908] netlink: 'syz.3.2890': attribute type 1 has an invalid length.
[ 1072.408310][T14999] loop2: detected capacity change from 0 to 1024
[ 1072.523179][T14999] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[ 1072.733845][T14999] EXT4-fs (loop2): barriers disabled
[ 1072.739212][T14999] JBD2: no valid journal superblock found
[ 1072.953290][T14999] EXT4-fs (loop2): error loading journal
[ 1086.941110][T11441] libceph: connect (1)[c::]:6789 error -101
[ 1086.948698][T15102] ceph: No mds server is up or the cluster is laggy
[ 1086.963365][T11441] libceph: mon0 (1)[c::]:6789 connect error
[ 1088.342509][T15119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2951'.
[ 1088.354507][T15119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2951'.
[ 1088.364732][T15119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2951'.
[ 1088.376216][T15119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2951'.
[ 1088.386198][T15119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2951'.
[ 1094.632141][T15207] overlayfs: failed to clone upperpath
[ 1094.743817][T15210] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2963'.
[ 1100.707565][T15264] loop2: detected capacity change from 0 to 1024
[ 1100.775580][T15264] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[ 1100.849245][T15264] EXT4-fs (loop2): barriers disabled
[ 1100.854605][T15264] JBD2: no valid journal superblock found
[ 1100.957788][T15264] EXT4-fs (loop2): error loading journal
[ 1102.354033][T15282] device syzkaller0 entered promiscuous mode
[ 1102.532372][T15282] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1102.569783][T15280] tipc: Resetting bearer <eth:syzkaller0>
[ 1102.638722][T15280] tipc: Disabling bearer <eth:syzkaller0>
[ 1103.862881][T15310] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2990'.
[ 1106.751463][T15349] dns_resolver: Unsupported content type (6)
[ 1107.336324][T15352] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1107.629309][T15358] netlink: 'syz.4.3006': attribute type 1 has an invalid length.
[ 1112.319712][T15405] netlink: 'syz.5.3018': attribute type 1 has an invalid length.
[ 1112.626974][T15416] ip6t_REJECT: ECHOREPLY is not supported
[ 1112.811189][T15415] loop2: detected capacity change from 0 to 1024
[ 1112.963472][T15415] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[ 1113.424266][T15415] EXT4-fs (loop2): barriers disabled
[ 1113.429720][T15415] JBD2: no valid journal superblock found
[ 1113.472494][T15415] EXT4-fs (loop2): error loading journal
[ 1115.079365][T15436] loop2: detected capacity change from 0 to 1024
[ 1115.142756][T15436] hfsplus: unable to parse mount options
[ 1115.971730][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.978080][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1117.825924][T15462] netlink: 'syz.4.3035': attribute type 1 has an invalid length.
[ 1117.902426][T15463] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3035'.
[ 1118.952201][T15111] libceph: connect (1)[c::]:6789 error -101
[ 1118.961751][T15111] libceph: mon0 (1)[c::]:6789 connect error
[ 1119.233202][T15111] libceph: connect (1)[c::]:6789 error -101
[ 1119.239322][T15111] libceph: mon0 (1)[c::]:6789 connect error
[ 1119.798170][T15111] libceph: connect (1)[c::]:6789 error -101
[ 1119.806074][T15111] libceph: mon0 (1)[c::]:6789 connect error
[ 1120.191050][T15476] ceph: No mds server is up or the cluster is laggy
[ 1121.708481][T15514] netlink: 'syz.2.3049': attribute type 1 has an invalid length.
[ 1121.788379][T15517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3049'.
[ 1124.531918][T15556] netlink: 'syz.2.3064': attribute type 1 has an invalid length.
[ 1124.745027][T15563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3064'.
[ 1128.240337][T15607] loop2: detected capacity change from 0 to 1024
[ 1128.284488][T15607] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[ 1128.303972][T15607] EXT4-fs (loop2): barriers disabled
[ 1128.315382][T15607] JBD2: no valid journal superblock found
[ 1128.330138][T15607] EXT4-fs (loop2): error loading journal
[ 1129.294941][T15626] netlink: 'syz.3.3082': attribute type 1 has an invalid length.
[ 1129.884261][T15631] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3082'.
[ 1135.338544][T15693] loop2: detected capacity change from 0 to 1024
[ 1135.470963][T15693] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[ 1135.979897][T15693] EXT4-fs (loop2): barriers disabled
[ 1136.016506][T15693] JBD2: no valid journal superblock found
[ 1136.101796][T15693] EXT4-fs (loop2): error loading journal
[ 1136.439762][T15708] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3097'.
[ 1136.465863][T15705] netlink: 'syz.5.3097': attribute type 1 has an invalid length.
[ 1139.648880][T15751] netlink: 'syz.2.3115': attribute type 1 has an invalid length.
[ 1140.583898][T15755] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3115'.
[ 1144.389501][T15810] netlink: 'syz.4.3130': attribute type 1 has an invalid length.
[ 1145.634744][T15814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3130'.
[ 1145.656599][T15814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3130'.
[ 1149.806043][T15873] netlink: 'syz.0.3145': attribute type 1 has an invalid length.
[ 1151.100069][T15876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3145'.
[ 1151.133398][T15876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3145'.
[ 1154.728919][T15924] loop2: detected capacity change from 0 to 1764
[ 1154.828867][T15924] CIFS mount error: No usable UNC path provided in device string!
[ 1154.828867][T15924] 
[ 1154.839062][T15924] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1155.521661][T15926] loop2: detected capacity change from 0 to 1024
[ 1155.545472][T15926] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[ 1155.576245][T15926] EXT4-fs (loop2): barriers disabled
[ 1155.601657][T15926] JBD2: no valid journal superblock found
[ 1155.617145][T15926] EXT4-fs (loop2): error loading journal
[ 1158.270572][T15948] netlink: 'syz.2.3163': attribute type 1 has an invalid length.
[ 1158.357658][T15952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3163'.
[ 1158.427176][T15952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3163'.
[ 1158.947963][   T26] audit: type=1800 audit(2000000090.685:170): pid=15962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3168" name=08 dev="sda1" ino=2052 res=0 errno=0
[ 1159.998139][T15977] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1171.505041][T16095] ubi0: attaching mtd0
[ 1171.534799][T16095] ubi0: scanning is finished
[ 1171.539497][T16095] ubi0 error: ubi_read_volume_table: the layout volume was not found
[ 1173.438513][T16095] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[ 1174.090761][T16109] netlink: 'syz.2.3210': attribute type 1 has an invalid length.
[ 1174.354003][T16109] 8021q: adding VLAN 0 to HW filter on device bond20
[ 1174.972889][T16114] device gretap2 entered promiscuous mode
[ 1175.046917][T16114] bond20: (slave gretap2): making interface the new active one
[ 1175.084483][T16114] bond20: (slave gretap2): Enslaving as an active interface with an up link
[ 1175.145905][T16115] device macvlan2 entered promiscuous mode
[ 1175.174898][T16115] device bond20 entered promiscuous mode
[ 1175.181453][T16115] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1175.190688][T16115] bond20: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 1175.209125][T16115] device bond20 left promiscuous mode
[ 1175.298715][T11911] IPv6: ADDRCONF(NETDEV_CHANGE): bond20: link becomes ready
[ 1176.693433][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1176.699973][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.776848][T16155] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3220'.
[ 1185.955613][T16220] loop2: detected capacity change from 0 to 512
[ 1186.087939][T16220] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.3243: Unrecognised inode hash code 255
[ 1186.136186][T16220] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.3243: Corrupt directory, running e2fsck is recommended
[ 1186.246356][T16220] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[ 1186.495349][T16220] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.3243: corrupted in-inode xattr
[ 1186.564482][T16220] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.3243: couldn't read orphan inode 15 (err -117)
[ 1186.641259][T16220] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1188.347953][ T4287] EXT4-fs (loop2): unmounting filesystem.
[ 1194.498402][T16288] __vm_enough_memory: pid: 16288, comm: syz.3.3261, no enough memory for the allocation
[ 1195.000558][T16291] overlayfs: failed to clone lowerpath
[ 1195.051402][T16291] overlayfs: failed to clone lowerpath
[ 1201.880960][T16391] Cannot find add_set index 2 as target
[ 1206.146826][T16422] overlayfs: failed to clone upperpath
[ 1206.257883][T16426] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3288'.
[ 1225.208750][T16584] tipc: Cannot configure node identity twice
[ 1225.267154][T16584] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[ 1225.347779][T16587] bridge0: port 3(syz_tun) entered blocking state
[ 1225.354399][T16587] bridge0: port 3(syz_tun) entered disabled state
[ 1225.391713][T16587] device syz_tun entered promiscuous mode
[ 1225.432230][T16587] bridge0: port 3(syz_tun) entered blocking state
[ 1225.439302][T16587] bridge0: port 3(syz_tun) entered forwarding state
[ 1225.589647][T16587] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1)
[ 1225.707459][T16588] futex_wake_op: syz.4.3334 tries to shift op by 144; fix this program
[ 1228.302770][T16617] kAFS: No cell specified
[ 1238.103197][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.109568][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1241.338362][T16758] "syz.3.3382" (16758) uses obsolete ecb(arc4) skcipher
[ 1243.946572][T16778] netlink: 'syz.4.3388': attribute type 1 has an invalid length.
[ 1244.056797][T16778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3388'.
[ 1250.860810][T16830] netlink: 'syz.3.3402': attribute type 1 has an invalid length.
[ 1250.967549][T16836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3402'.
[ 1256.000437][T16877] Cannot find del_set index 4 as target
[ 1256.751747][T16878] loop2: detected capacity change from 0 to 512
[ 1257.039424][T16878] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1257.881263][T16878] EXT4-fs (loop2): 1 truncate cleaned up
[ 1257.887049][T16878] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1258.360296][ T4287] EXT4-fs (loop2): unmounting filesystem.
[ 1258.651662][T16882] netlink: 'syz.0.3414': attribute type 1 has an invalid length.
[ 1258.820249][T16884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3414'.
[ 1259.881805][T16893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3415'.
[ 1259.892987][T16893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3415'.
[ 1259.902646][T16893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3415'.
[ 1259.912589][T16893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3415'.
[ 1259.921757][T16893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3415'.
[ 1260.263009][T16907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3420'.
[ 1261.208098][T16914] loop2: detected capacity change from 0 to 16
[ 1261.260380][T16914] erofs: (device loop2): mounted with root inode @ nid 36.
[ 1262.379476][T16928] netlink: 'syz.5.3427': attribute type 1 has an invalid length.
[ 1264.391955][T16951] loop2: detected capacity change from 0 to 1024
[ 1264.460502][T16951] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[ 1264.528969][T16951] EXT4-fs (loop2): barriers disabled
[ 1264.630527][T16951] JBD2: no valid journal superblock found
[ 1264.645134][T16951] EXT4-fs (loop2): error loading journal
[ 1269.902447][T17011] netlink: 'syz.4.3441': attribute type 1 has an invalid length.
[ 1273.433875][T17046] loop2: detected capacity change from 0 to 2048
[ 1273.492282][T17046] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1276.448993][T17070] netlink: 'syz.0.3464': attribute type 1 has an invalid length.
[ 1277.025959][T17076] loop2: detected capacity change from 0 to 1024
[ 1277.057176][T17077] netlink: 'syz.0.3475': attribute type 1 has an invalid length.
[ 1277.075570][T17076] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[ 1277.097252][T17076] EXT4-fs (loop2): barriers disabled
[ 1277.106580][T17076] JBD2: no valid journal superblock found
[ 1277.123214][T17076] EXT4-fs (loop2): error loading journal
[ 1278.018247][T17079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3465'.
[ 1278.212365][T17093] loop2: detected capacity change from 0 to 1024
[ 1279.127110][T17093] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[ 1279.166600][T17093] EXT4-fs (loop2): barriers disabled
[ 1279.176440][T17093] JBD2: no valid journal superblock found
[ 1279.192341][T17093] EXT4-fs (loop2): error loading journal
[ 1279.671892][T10334] ------------[ cut here ]------------
[ 1279.678012][T10334] WARNING: CPU: 0 PID: 10334 at io_uring/io_uring.c:2892 io_ring_exit_work+0x329/0x760
[ 1279.688113][T10334] Modules linked in:
[ 1279.692073][T10334] CPU: 0 PID: 10334 Comm: kworker/u4:8 Not tainted syzkaller #0
[ 1279.699892][T10334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1279.710142][T10334] Workqueue: events_unbound io_ring_exit_work
[ 1279.716338][T10334] RIP: 0010:io_ring_exit_work+0x329/0x760
[ 1279.722261][T10334] Code: 89 fd 48 8b 7c 24 30 48 8b 74 24 08 e8 ae 2e 11 00 48 85 c0 75 40 e8 44 11 58 f7 4c 8b 7c 24 10 e9 1e fe ff ff e8 35 11 58 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb c7 44 89 e9 80 e1 07 80 c1
[ 1279.742146][T10334] RSP: 0018:ffffc900056b7ac0 EFLAGS: 00010293
[ 1279.748254][T10334] RAX: ffffffff8a2a21ab RBX: 1ffff1100a8a4e03 RCX: ffff888055ffbc00
[ 1279.756539][T10334] RDX: 0000000000000000 RSI: ffffffffffffffea RDI: 0000000000000000
[ 1279.764729][T10334] RBP: ffffc900056b7c30 R08: ffffc900056b7a47 R09: 1ffff92000ad6f48
[ 1279.772876][T10334] R10: dffffc0000000000 R11: fffff52000ad6f49 R12: dffffc0000000000
[ 1279.781026][T10334] R13: 0000000100017e29 R14: 0000000100017e3f R15: ffff888054527018
[ 1279.789030][T10334] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1279.798061][T10334] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1279.804770][T10334] CR2: 00007f7a546ca6fa CR3: 000000008e2d2000 CR4: 00000000003506f0
[ 1279.812826][T10334] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1279.820979][T10334] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1279.828984][T10334] Call Trace:
[ 1279.832401][T10334]  <TASK>
[ 1279.835424][T10334]  ? io_ring_ctx_wait_and_kill+0x2e0/0x2e0
[ 1279.841394][T10334]  ? _raw_spin_unlock+0x40/0x40
[ 1279.846344][T10334]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1279.851737][T10334]  ? process_one_work+0x7b4/0x1160
[ 1279.856928][T10334]  process_one_work+0x8ab/0x1160
[ 1279.862028][T10334]  ? worker_detach_from_pool+0x240/0x240
[ 1279.867802][T10334]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1279.872922][T10334]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1279.878528][T10334]  ? wq_worker_running+0x97/0x190
[ 1279.884078][T10334]  worker_thread+0xaf5/0x12a0
[ 1279.888837][T10334]  kthread+0x29d/0x330
[ 1279.893105][T10334]  ? worker_clr_flags+0x1a0/0x1a0
[ 1279.898171][T10334]  ? kthread_blkcg+0xd0/0xd0
[ 1279.902874][T10334]  ret_from_fork+0x1f/0x30
[ 1279.907416][T10334]  </TASK>
[ 1279.910552][T10334] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1279.917862][T10334] CPU: 0 PID: 10334 Comm: kworker/u4:8 Not tainted syzkaller #0
[ 1279.925656][T10334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1279.936030][T10334] Workqueue: events_unbound io_ring_exit_work
[ 1279.942166][T10334] Call Trace:
[ 1279.945472][T10334]  <TASK>
[ 1279.948432][T10334]  dump_stack_lvl+0x188/0x24e
[ 1279.953171][T10334]  ? memcpy+0x3c/0x60
[ 1279.957235][T10334]  ? show_regs_print_info+0x12/0x12
[ 1279.962446][T10334]  ? load_image+0x410/0x410
[ 1279.967063][T10334]  panic+0x2d3/0x710
[ 1279.970972][T10334]  ? bpf_jit_dump+0xd0/0xd0
[ 1279.975591][T10334]  ? ret_from_fork+0x1f/0x30
[ 1279.980198][T10334]  __warn+0x2f8/0x4f0
[ 1279.984197][T10334]  ? io_ring_exit_work+0x329/0x760
[ 1279.989318][T10334]  ? io_ring_exit_work+0x329/0x760
[ 1279.994439][T10334]  report_bug+0x2ba/0x4f0
[ 1279.998795][T10334]  ? io_ring_exit_work+0x329/0x760
[ 1280.003922][T10334]  handle_bug+0x3a/0x70
[ 1280.008083][T10334]  exc_invalid_op+0x16/0x40
[ 1280.012593][T10334]  asm_exc_invalid_op+0x16/0x20
[ 1280.017484][T10334] RIP: 0010:io_ring_exit_work+0x329/0x760
[ 1280.023401][T10334] Code: 89 fd 48 8b 7c 24 30 48 8b 74 24 08 e8 ae 2e 11 00 48 85 c0 75 40 e8 44 11 58 f7 4c 8b 7c 24 10 e9 1e fe ff ff e8 35 11 58 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb c7 44 89 e9 80 e1 07 80 c1
[ 1280.043127][T10334] RSP: 0018:ffffc900056b7ac0 EFLAGS: 00010293
[ 1280.049312][T10334] RAX: ffffffff8a2a21ab RBX: 1ffff1100a8a4e03 RCX: ffff888055ffbc00
[ 1280.057300][T10334] RDX: 0000000000000000 RSI: ffffffffffffffea RDI: 0000000000000000
[ 1280.065298][T10334] RBP: ffffc900056b7c30 R08: ffffc900056b7a47 R09: 1ffff92000ad6f48
[ 1280.073368][T10334] R10: dffffc0000000000 R11: fffff52000ad6f49 R12: dffffc0000000000
[ 1280.081444][T10334] R13: 0000000100017e29 R14: 0000000100017e3f R15: ffff888054527018
[ 1280.089692][T10334]  ? io_ring_exit_work+0x329/0x760
[ 1280.094839][T10334]  ? io_ring_ctx_wait_and_kill+0x2e0/0x2e0
[ 1280.100676][T10334]  ? _raw_spin_unlock+0x40/0x40
[ 1280.105543][T10334]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1280.110754][T10334]  ? process_one_work+0x7b4/0x1160
[ 1280.115874][T10334]  process_one_work+0x8ab/0x1160
[ 1280.120930][T10334]  ? worker_detach_from_pool+0x240/0x240
[ 1280.126576][T10334]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1280.131616][T10334]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1280.137176][T10334]  ? wq_worker_running+0x97/0x190
[ 1280.142211][T10334]  worker_thread+0xaf5/0x12a0
[ 1280.146918][T10334]  kthread+0x29d/0x330
[ 1280.151000][T10334]  ? worker_clr_flags+0x1a0/0x1a0
[ 1280.156124][T10334]  ? kthread_blkcg+0xd0/0xd0
[ 1280.160721][T10334]  ret_from_fork+0x1f/0x30
[ 1280.165174][T10334]  </TASK>
[ 1280.168542][T10334] Kernel Offset: disabled
[ 1280.172977][T10334] Rebooting in 86400 seconds..