last executing test programs:

4m45.09884428s ago: executing program 0 (id=320):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl(r0, 0xc138fd06, &(0x7f0000000000)="04")

4m44.545137793s ago: executing program 0 (id=322):
syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x2804810, &(0x7f000000c680)=ANY=[], 0x1, 0x1e4, &(0x7f0000000380)="$eJzs28tO1UAcx/Ffe24U77eNKxMXuvFUDydRdvIAvoA7ApUQixp1IzERNr6Hj+HON/EFINEnqJky9VAyvdBDTwW/n+TQYehvZprwb6ckCMB/63r61ZOnQdpKkuTLPUkvX0jqZz93Gi5qjQDakXhHRV9k6O5eKk8BOB96v9z9o8IC/541fO4CwHl2uNZL9wE/POnn788bB/YzqLl/OFzzpZ795lh+KC2VbTv+5ve99Hi3Lx0cy4+UH8DbKxjo21H+gfL5oO767fzLJ/LLVUHzymTs++nh4f18/pKky5KuSLoq6Zp917oh6aZj/s0T89+puX5gHua3b5zrKStbz50fl0RG9lPAVM+r7Th6XGexDgObf+IYt46hzU8azp/lVxrmRzY/3ngbbxae9bzh6EA5f1b/gau+q1TWf6HZnw/nqf9+Qf0DqPbh0+7r9TiO3p++4ZefY55sDUemcREa2UbS9JjbdHXq61nMbt78Or/26kZwFuNor70VdnxjAtC68OPOuzDQ7qPtnfWtaCt6M5muPpuuTKZPV8N0Xx7OszsH8C+bPfTrnd9ve0EAAAAAAAAAAAAAAODUbkm63fUiAAAAACzEIv7hqetrBAAAAAAAAAAAAAAAAAAAAC6KPwEAAP//pAw4iQ==")
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)

4m43.981031078s ago: executing program 0 (id=324):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffd, 0x100, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x3, 0x794, 0x4e23, 0xc, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x20000810)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000}}, 0xe8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)

4m43.501438396s ago: executing program 0 (id=327):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

4m43.099605147s ago: executing program 0 (id=328):
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0xf, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}}, 0x0, 0x0, 0x2, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f)
ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/13)

4m42.518898506s ago: executing program 0 (id=331):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4890)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @mcast1, {[], @mld={0x83, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x26}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48)

4m41.572572358s ago: executing program 32 (id=331):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4890)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @mcast1, {[], @mld={0x83, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x26}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48)

3m39.502769412s ago: executing program 3 (id=553):
r0 = memfd_create(&(0x7f00000006c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xef`i\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x0)
r1 = dup(r0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000001580)={0x2020}, 0x2020)
sendfile(r1, r2, 0x0, 0x7)

3m39.206298303s ago: executing program 3 (id=554):
r0 = syz_ublk_setup_io_uring(0x1b19, &(0x7f0000000080)={0x0, 0x1c3b, 0x10000, 0xfffffffe, 0x2bf}, &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440))
mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, r0, 0x8000000)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
getsockopt$nfc_llcp(r1, 0x118, 0x1, &(0x7f0000000100)=""/198, 0xc6)

3m38.822947s ago: executing program 3 (id=556):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e01000008240501020205050764f7edb276"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0)

3m36.66321154s ago: executing program 3 (id=565):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

3m36.162859242s ago: executing program 3 (id=566):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000480)={[{@uni_xlate}, {@shortname_mixed}, {@shortname_win95}, {}, {@shortname_lower}, {@uni_xlateno}, {@uni_xlate}, {@utf8no}, {@fat=@showexec}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@numtail}, {@shortname_winnt}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@fat=@gid}, {@uni_xlateno}]}, 0x7, 0x2a6, &(0x7f0000000740)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0)

3m35.724683271s ago: executing program 3 (id=568):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e21, 0x8, @private1, 0x4}, {0xa, 0x4e22, 0xdb2a, @empty, 0x20000000}, 0x1, {[0x4, 0x3, 0x8, 0x845b, 0x0, 0x6, 0x6, 0x4]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4)

3m33.856120281s ago: executing program 33 (id=568):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e21, 0x8, @private1, 0x4}, {0xa, 0x4e22, 0xdb2a, @empty, 0x20000000}, 0x1, {[0x4, 0x3, 0x8, 0x845b, 0x0, 0x6, 0x6, 0x4]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4)

1m11.493132518s ago: executing program 2 (id=1107):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e23, @local}], 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6, 0x1}]}, 0x10)
listen(r0, 0x50)

1m10.964824756s ago: executing program 2 (id=1109):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0x60000, 0xffff1000, 0xf000, 0x9, 0x7f, 0x7, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0xd000, 0xd000, 0x10, 0x3, 0x7f, 0x7, 0x6, 0x6, 0x1, 0x4, 0x2, 0x5}, {0xf000, 0x8000000, 0x0, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x9000, 0xeeef0000, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0xa000, 0x41000, 0xa, 0x9, 0x5, 0x2, 0x7, 0xf1, 0x2, 0x6e, 0x2, 0x3}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xad, 0x2, 0x4, 0x5, 0x1, 0xe, 0x6, 0xa}, {0x10000, 0x60000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x7f, 0x3, 0x0, 0x7f, 0x1, 0xfc, 0x8}, {0x2, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x21, 0x5, 0x0, 0x8000900, 0x1, [0x6, 0x6, 0x8000000000000003, 0x3]})

1m10.199365271s ago: executing program 2 (id=1111):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44040}, 0x4000000)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
close_range(r0, 0xffffffffffffffff, 0x0)

1m9.628075818s ago: executing program 2 (id=1116):
socket$inet(0x2, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000100), 0x1, 0x50d, &(0x7f0000001bc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x1a33, 0x40901)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)

1m8.809295344s ago: executing program 2 (id=1119):
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0)
r1 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000009b80)={0x40000012})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r2, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006)

1m3.850890604s ago: executing program 2 (id=1138):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)

1m2.779833182s ago: executing program 34 (id=1138):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)

1m0.885888787s ago: executing program 5 (id=1150):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0xc005}, 0x4000890)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7fff, 0x8001, 0xc, 0x9, 0xf, 0x5, 0x8, 0x9}, &(0x7f0000000040)=0x20)
syz_clone(0x201000, 0x0, 0x0, 0x0, 0x0, 0x0)

59.579932703s ago: executing program 5 (id=1156):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xffffffff)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000180)={0x1, r1})
read$eventfd(r1, &(0x7f00000001c0), 0x8)

59.430487233s ago: executing program 5 (id=1158):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", <r1=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r1})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)

59.271418856s ago: executing program 5 (id=1159):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64], 0x4, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4")
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x400, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
lseek(r0, 0x1, 0x0)
getdents64(r0, 0x0, 0x22)

59.060472928s ago: executing program 5 (id=1161):
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @mcast2, 0x9}, 0x1c)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x80)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)

57.666911102s ago: executing program 5 (id=1166):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
poll(&(0x7f0000000180)=[{r0, 0x2}], 0x1, 0x7f)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240)=0x63f3, 0x4)

57.164803674s ago: executing program 35 (id=1166):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
poll(&(0x7f0000000180)=[{r0, 0x2}], 0x1, 0x7f)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240)=0x63f3, 0x4)

16.893176071s ago: executing program 4 (id=1425):
syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x1c005, &(0x7f00000000c0)={[{@rescan_uuid_tree}, {@datasum}, {@autodefrag}, {@nossd}, {@acl}, {@user_subvol_rm}, {@noacl}, {@clear_cache}, {@rescue={'rescue', 0x3d, 'idatacsums'}}, {@discard_async}, {@nodatacow}, {@space_cache_v2}, {@nodiscard}, {@enospc_debug}, {@nospace_cache}]}, 0x9, 0x559d, &(0x7f0000004040)="$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")
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

15.330488129s ago: executing program 4 (id=1435):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf250c00000008000300", @ANYRES32=r3, @ANYBLOB="05000800001a00000400280008006e"], 0x30}, 0x1, 0x0, 0x0, 0x38}, 0x8010)

14.789589679s ago: executing program 4 (id=1436):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000054000180060001000a00000006000200110000001400030000000000000000000000000000000001060004001f900000070006007272000008000800000000000c000700000000452b56d5000800090080"], 0x68}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x8c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010100}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x8c}}, 0x0)

14.447844049s ago: executing program 4 (id=1438):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64], 0x4, 0x1f5, &(0x7f0000000600)="$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")
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x400, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
lseek(r0, 0x1, 0x0)
getdents64(r0, 0x0, 0x22)

14.10021247s ago: executing program 4 (id=1440):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000180)={[{@noflush_merge}, {@adaptive_mode}, {@block_mode}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@discard}, {@nouser_xattr}, {@jqfmt_vfsv1}, {@errors_remount}, {@fsync_mode_strict}, {@age_extent_cache}, {@nocheckpoint_merge}, {@resuid}]}, 0x1, 0x552b, &(0x7f0000005a40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0xa, 0x247, &(0x7f0000001300)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)

13.507786591s ago: executing program 4 (id=1443):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x550, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x6, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x20000080, &(0x7f0000006080)={0xa, 0x4e1f, 0x80000004, @loopback, 0x55}, 0x1c)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffc1c}, 0x40002000)

12.503007695s ago: executing program 36 (id=1443):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x550, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x6, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x20000080, &(0x7f0000006080)={0xa, 0x4e1f, 0x80000004, @loopback, 0x55}, 0x1c)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffc1c}, 0x40002000)

8.563857506s ago: executing program 6 (id=1458):
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000000)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000840)={0x9c, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x8a, 0x0, 0x0, 0x0, @str='i\xad\x00\xad\xb6\xa9\xc1\x85\xbfL\x95\x9d\xbe\xe4\xd6 \x8a\x99\xf9~u\xe7^\xfa\x88E\xee\xc0\x14\xdb\xc0COw\xb4\xd4vr\x9f\xe8D\x93*\xa8\xc5\x19e\x97V\xd5\x9d\b\xca\x85\x89C\xa7\t\v\x15t5\x93rX\xd4\x19t\\\'cRg^==\xdd\x8f\xe5,I8\xe4\xfak\x03\x1a\xdb\x90jm\xc5\x05#\x92]\x80\xc7\xe8:k\x00<\"\x06\x01\x95/\xb4K=}I,\xean\x93H\xccHg\x87\xd7T\xed\x01>\xce\xd9\x98\xfbz\x1c\x84'}]}, 0x9c}], 0x1}, 0x0)

4.783818176s ago: executing program 7 (id=1482):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000002c0)={[{@errors_continue}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x6041, 0x59)
pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)

4.358251253s ago: executing program 7 (id=1484):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
write$tun(r0, &(0x7f0000001340)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0xc}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x30, 0x66, 0x0, 0xb, 0x67, 0x0, @rand_addr=0x64010102, @broadcast}, "2197e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a"}}, 0x3e)

4.251523515s ago: executing program 1 (id=1485):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
r1 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c)
writev(r1, &(0x7f00000028c0)=[{&(0x7f00000005c0)="06c3", 0x2}, {&(0x7f0000000880)="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", 0x615}, {&(0x7f0000000500)="4c7911315ed07e13be5391e38b57247dcbfa424aaec74724dd2da16f11eb214569c4c1781fd0c9bfbe5491e5675fadc4e6292bd9235dceba13387d09e48c218cb6a3", 0x42}], 0x3)

3.915374873s ago: executing program 6 (id=1486):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

3.914489033s ago: executing program 1 (id=1493):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r0 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02)
preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000000480)=""/208, 0xd0}], 0x1, 0x54, 0x7, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0x40045613, &(0x7f0000000300)={0x3, @win={{0x0, 0x5, 0x79, 0x6}, 0x8, 0xc, 0x0, 0x0, 0x0, 0x7f}})

3.664150164s ago: executing program 7 (id=1487):
socket$inet6_tcp(0xa, 0x1, 0x0)
timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
timer_gettime(r0, &(0x7f0000000340))

3.618226443s ago: executing program 1 (id=1488):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x20088c2)
sendmmsg$alg(r1, &(0x7f00000004c0)=[{0x0, 0x0, 0x0}], 0x1, 0x20044000)

3.433666101s ago: executing program 1 (id=1489):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

3.233445872s ago: executing program 6 (id=1490):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
recvmmsg(r0, &(0x7f00000018c0), 0x3fffffffffffe83, 0x2, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r0], 0x48}}, 0x2404c054)
readv(r0, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/58, 0x3a}], 0x1)

2.237709574s ago: executing program 6 (id=1491):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500))
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040810)

1.965695269s ago: executing program 6 (id=1492):
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a)
close(r0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

1.194978866s ago: executing program 7 (id=1494):
r0 = socket(0x2, 0x3, 0x88)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0x98b3}, {0x6, 0x8, 0xfd, 0x7}]}, 0x10)
bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10)

1.027174611s ago: executing program 1 (id=1495):
futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x1)
futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x1)
futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x2)
futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2)
futex(&(0x7f000000cffc)=0x3, 0x5, 0x3, 0x0, &(0x7f0000000000)=0x3, 0x5000002)

907.149305ms ago: executing program 6 (id=1496):
syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x100)
truncate(&(0x7f0000000080)='./file0\x00', 0x3a6800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x5338102665431fac)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)=':)u', 0x3}], 0x1)

885.73678ms ago: executing program 7 (id=1497):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x20088c2)
sendmmsg$alg(r1, &(0x7f00000004c0)=[{0x0, 0x0, 0x0}], 0x1, 0x20044000)

696.656388ms ago: executing program 7 (id=1498):
r0 = io_uring_setup(0x208b, &(0x7f0000000000)={0x0, 0xeec2, 0x800, 0x0, 0x65})
close_range(r0, r0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000)
preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3)

0s ago: executing program 1 (id=1499):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x85, &(0x7f0000000740)={r2, 0x88, "0200000000000000703fe6153c598ae93aa83725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc58041310b18d364b87808f8a7494c5de7f7ba36ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec21e15e725d000000000000007b2858f76d3c773b57"}, &(0x7f0000000040)=0x90)

kernel console output (not intermixed with test programs):

left promiscuous mode
[  300.952726][ T8812] bond_slave_1: left promiscuous mode
[  300.961786][ T8812] bridge0: port 3(bond0) entered disabled state
[  301.843640][  T174] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  302.033381][  T174] usb 2-1: Using ep0 maxpacket: 8
[  302.060196][  T174] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  302.091456][  T174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.136747][  T174] usb 2-1: Product: syz
[  302.156988][  T174] usb 2-1: Manufacturer: syz
[  302.161649][  T174] usb 2-1: SerialNumber: syz
[  302.201060][  T174] usb 2-1: config 0 descriptor??
[  302.235191][ T8839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.927'.
[  302.252391][  T174] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  303.386833][  T174] usb 2-1: USB disconnect, device number 14
[  303.480899][ T8853] loop5: detected capacity change from 0 to 128
[  303.575335][ T8854] loop2: detected capacity change from 0 to 8
[  303.810014][ T8842] loop4: detected capacity change from 0 to 32768
[  303.916341][   T27] audit: type=1800 audit(1791038418.868:30): pid=8842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.929" name="file1" dev="loop4" ino=4 res=0 errno=0
[  304.025230][ T8854] zram0: detected capacity change from 0 to 2097152
[  304.038211][   T27] audit: type=1800 audit(1791038418.918:31): pid=8842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.929" name="file1" dev="loop4" ino=4 res=0 errno=0
[  304.139236][   T27] audit: type=1800 audit(1791038418.928:32): pid=8842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.929" name="file1" dev="loop4" ino=4 res=0 errno=0
[  305.243702][  T174] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  305.309890][ T8869] FAULT_INJECTION: forcing a failure.
[  305.309890][ T8869] name failslab, interval 1, probability 0, space 0, times 0
[  305.356900][ T8869] CPU: 0 PID: 8869 Comm: syz.1.940 Not tainted syzkaller #0
[  305.364270][ T8869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  305.374371][ T8869] Call Trace:
[  305.377693][ T8869]  <TASK>
[  305.380659][ T8869]  dump_stack_lvl+0x18c/0x250
[  305.385398][ T8869]  ? show_regs_print_info+0x20/0x20
[  305.390644][ T8869]  ? load_image+0x420/0x420
[  305.395194][ T8869]  ? __lock_acquire+0x7eb0/0x7eb0
[  305.400275][ T8869]  should_fail_ex+0x394/0x4c0
[  305.405000][ T8869]  should_failslab+0x9/0x20
[  305.409549][ T8869]  slab_pre_alloc_hook+0x59/0x300
[  305.414628][ T8869]  kmem_cache_alloc_lru+0x4d/0x2b0
[  305.419792][ T8869]  ? sock_alloc_inode+0x28/0xc0
[  305.424698][ T8869]  sock_alloc_inode+0x28/0xc0
[  305.429425][ T8869]  ? sockfs_init_fs_context+0xb0/0xb0
[  305.434837][ T8869]  new_inode_pseudo+0x63/0x1d0
[  305.439652][ T8869]  __sock_create+0x12d/0x940
[  305.444283][ T8869]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  305.450324][ T8869]  __sys_socket+0xd7/0x1b0
[  305.454799][ T8869]  __x64_sys_socket+0x7a/0x90
[  305.459526][ T8869]  do_syscall_64+0x55/0xb0
[  305.463991][ T8869]  ? clear_bhb_loop+0x40/0x90
[  305.468707][ T8869]  ? clear_bhb_loop+0x40/0x90
[  305.473470][ T8869]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  305.479409][ T8869] RIP: 0033:0x7f342379e159
[  305.483855][ T8869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  305.503504][ T8869] RSP: 002b:00007f342475d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  305.511964][ T8869] RAX: ffffffffffffffda RBX: 00007f3423a25fa0 RCX: 00007f342379e159
[  305.519980][ T8869] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010
[  305.527984][ T8869] RBP: 00007f342383506b R08: 0000000000000000 R09: 0000000000000000
[  305.535988][ T8869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  305.543987][ T8869] R13: 00007f3423a26038 R14: 00007f3423a25fa0 R15: 00007ffce0261f28
[  305.552007][ T8869]  </TASK>
[  305.650362][ T8869] net_ratelimit: 2294 callbacks suppressed
[  305.650382][ T8869] socket: no more sockets
[  305.662170][  T174] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  305.693259][  T174] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  305.715412][  T174] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  305.780438][  T174] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  305.831253][  T174] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.865546][  T174] usb 6-1: config 0 descriptor??
[  306.434502][  T174] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving
[  306.503560][  T174] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  306.960601][  T174] usb 6-1: USB disconnect, device number 4
[  307.817922][ T8895] FAULT_INJECTION: forcing a failure.
[  307.817922][ T8895] name failslab, interval 1, probability 0, space 0, times 0
[  307.868634][ T8895] CPU: 0 PID: 8895 Comm: syz.1.951 Not tainted syzkaller #0
[  307.876014][ T8895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  307.886117][ T8895] Call Trace:
[  307.889434][ T8895]  <TASK>
[  307.892397][ T8895]  dump_stack_lvl+0x18c/0x250
[  307.897245][ T8895]  ? show_regs_print_info+0x20/0x20
[  307.902519][ T8895]  ? load_image+0x420/0x420
[  307.907081][ T8895]  ? __might_sleep+0xe0/0xe0
[  307.911733][ T8895]  ? __lock_acquire+0x7eb0/0x7eb0
[  307.916816][ T8895]  ? do_futex+0x2ff/0x3e0
[  307.921188][ T8895]  should_fail_ex+0x394/0x4c0
[  307.925937][ T8895]  should_failslab+0x9/0x20
[  307.930489][ T8895]  slab_pre_alloc_hook+0x59/0x300
[  307.935570][ T8895]  kmem_cache_alloc+0x5a/0x2c0
[  307.940379][ T8895]  ? prepare_creds+0x30/0x5d0
[  307.945103][ T8895]  prepare_creds+0x30/0x5d0
[  307.949654][ T8895]  __sys_setfsgid+0xcd/0x370
[  307.954283][ T8895]  ? lockdep_hardirqs_on+0x98/0x150
[  307.959527][ T8895]  do_syscall_64+0x55/0xb0
[  307.963989][ T8895]  ? clear_bhb_loop+0x40/0x90
[  307.968699][ T8895]  ? clear_bhb_loop+0x40/0x90
[  307.973414][ T8895]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  307.979355][ T8895] RIP: 0033:0x7f342379e159
[  307.983808][ T8895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  308.003461][ T8895] RSP: 002b:00007f342475d028 EFLAGS: 00000246 ORIG_RAX: 000000000000007b
[  308.011939][ T8895] RAX: ffffffffffffffda RBX: 00007f3423a25fa0 RCX: 00007f342379e159
[  308.019981][ T8895] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00
[  308.028003][ T8895] RBP: 00007f342383506b R08: 0000000000000000 R09: 0000000000000000
[  308.036026][ T8895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  308.044053][ T8895] R13: 00007f3423a26038 R14: 00007f3423a25fa0 R15: 00007ffce0261f28
[  308.052092][ T8895]  </TASK>
[  308.277102][ T8890] loop2: detected capacity change from 0 to 32768
[  308.291367][ T8889] loop4: detected capacity change from 0 to 32768
[  308.402574][ T8890] JBD2: Ignoring recovery information on journal
[  308.598616][ T8890] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  308.777178][ T8905] jfs_unlink: dtDelete returned -116
[  308.777644][ T8905] jfs_unlink: dtDelete returned -116
[  309.057130][   T27] audit: type=1800 audit(1791038424.008:33): pid=8890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.949" name="file1" dev="loop2" ino=17058 res=0 errno=0
[  309.153981][   T27] audit: type=1800 audit(1791038424.098:34): pid=8890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.949" name="file1" dev="loop2" ino=17058 res=0 errno=0
[  309.441234][ T5782] ocfs2: Unmounting device (7,2) on (node local)
[  310.027224][ T8913] loop1: detected capacity change from 0 to 1024
[  310.075883][ T8913] EXT4-fs: Ignoring removed oldalloc option
[  310.199786][ T8913] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  310.199915][ T8913] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  310.324183][ T8913] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 3: comm syz.1.957: lblock 3 mapped to illegal pblock 3 (length 3)
[  310.372272][ T8913] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  310.372311][ T8913] EXT4-fs (loop1): This should not happen!! Data will be lost
[  310.372311][ T8913] 
[  310.457667][ T8913] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: block 3: comm syz.1.957: lblock 3 mapped to illegal pblock 3 (length 1)
[  310.672608][ T1099] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:7: lblock 8 mapped to illegal pblock 8 (length 8)
[  310.728516][ T1099] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  310.783183][ T1099] EXT4-fs (loop1): This should not happen!! Data will be lost
[  310.783183][ T1099] 
[  310.832160][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  310.958341][ T8923] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800
[  311.033762][ T8926] ./file0: Can't open blockdev
[  311.347541][ T8915] loop4: detected capacity change from 0 to 32768
[  311.477979][ T8931] x86/PAT: syz.1.961:8931 freeing invalid memtype [mem 0xfe004000-0xfe008fff]
[  311.502856][ T8915] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  311.574722][ T8931] x86/PAT: syz.1.961:8931 freeing invalid memtype [mem 0xfe000000-0xfe003fff]
[  311.711449][ T8915] XFS (loop4): Ending clean mount
[  312.033520][ T5816] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  312.299646][ T6695] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  312.303316][ T5816] usb 6-1: Using ep0 maxpacket: 8
[  312.481940][ T5816] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  312.498933][ T5816] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  312.514219][ T5816] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  312.529962][ T5816] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  312.560667][ T5816] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  312.606601][ T5816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.913703][ T5816] usb 6-1: GET_CAPABILITIES returned 0
[  312.922250][ T5816] usbtmc 6-1:16.0: can't read capabilities
[  313.217987][ T8929] loop2: detected capacity change from 0 to 40427
[  313.259089][    C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  313.268965][    C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  313.278280][    C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  313.287908][    C0] vkms_vblank_simulate: vblank timer overrun
[  313.300926][ T8929] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff
[  313.318568][ T8929] F2FS-fs (loop2): Image doesn't support compression
[  313.334033][ T8929] F2FS-fs (loop2): Image doesn't support compression
[  313.372131][ T8929] F2FS-fs (loop2): invalid crc value
[  313.376889][ T5816] usb 6-1: USB disconnect, device number 5
[  313.417854][ T8929] F2FS-fs (loop2): Found nat_bits in checkpoint
[  313.723236][ T8929] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  313.741577][ T8957] loop1: detected capacity change from 0 to 256
[  313.917285][ T8957] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x241b98d9, utbl_chksum : 0xe619d30d)
[  314.079498][ T8929] F2FS-fs (loop2): inject checkpoint error in f2fs_balance_fs of f2fs_map_blocks+0x6bc/0x4080
[  314.180274][ T8929] F2FS-fs (loop2): Stopped filesystem due to reason: 1
[  314.576874][ T8961] loop1: detected capacity change from 0 to 512
[  314.625982][ T8961] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿÿ01777777777777777777777" or missing value
[  314.637950][ T8963] loop4: detected capacity change from 0 to 512
[  314.791499][ T8963] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[  314.864516][ T8963] FAT-fs (loop4): Filesystem has been set read-only
[  316.646432][ T8981] loop2: detected capacity change from 0 to 1024
[  316.728818][ T8981] hfsplus: failed to load root directory
[  317.503615][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  317.513428][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  317.793452][ T5088] Bluetooth: hci1: command 0x0406 tx timeout
[  317.800132][ T8970] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  318.391419][ T8970] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  318.488142][ T8970] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  318.547265][ T8970] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  318.598495][ T8970] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  318.614362][ T8970] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  318.667668][ T8970] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  318.695136][ T8970] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  318.738138][ T8970] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  319.074079][    T8] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  319.295453][    T8] usb 3-1: config 0 has no interfaces?
[  319.334377][    T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  319.364972][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.405446][    T8] usb 3-1: Product: syz
[  319.425673][    T8] usb 3-1: Manufacturer: syz
[  319.430336][    T8] usb 3-1: SerialNumber: syz
[  319.496680][    T8] usb 3-1: config 0 descriptor??
[  319.880241][ T5088] Bluetooth: hci1: command 0x0406 tx timeout
[  319.967210][ T8995] loop5: detected capacity change from 0 to 40427
[  320.009951][ T8995] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  320.053881][ T8995] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  320.098011][ T8995] F2FS-fs (loop5): invalid crc value
[  320.189186][ T8995] F2FS-fs (loop5): Found nat_bits in checkpoint
[  320.231778][ T9012] loop1: detected capacity change from 0 to 4096
[  320.296508][ T9012] EXT4-fs (loop1): Test dummy encryption mode enabled
[  320.369432][ T9012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  320.514248][ T5088] Bluetooth: hci3: command 0x0406 tx timeout
[  320.618389][ T8995] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  320.651458][ T8995] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  320.674997][ T5088] Bluetooth: hci0: command 0x0c1a tx timeout
[  320.681117][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  320.796716][ T9012] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  320.897748][    T8] usb 3-1: USB disconnect, device number 8
[  321.165987][ T9028] loop4: detected capacity change from 0 to 256
[  321.200590][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.361708][ T9028] FAT-fs (loop4): Directory bread(block 64) failed
[  321.403119][ T9028] FAT-fs (loop4): Directory bread(block 65) failed
[  321.438427][ T9028] FAT-fs (loop4): Directory bread(block 66) failed
[  321.483452][ T9028] FAT-fs (loop4): Directory bread(block 67) failed
[  321.533835][ T9028] FAT-fs (loop4): Directory bread(block 68) failed
[  321.643532][ T9028] FAT-fs (loop4): Directory bread(block 69) failed
[  321.650331][ T9028] FAT-fs (loop4): Directory bread(block 70) failed
[  321.725154][ T9028] FAT-fs (loop4): Directory bread(block 71) failed
[  321.773369][ T9028] FAT-fs (loop4): Directory bread(block 72) failed
[  321.780022][ T9028] FAT-fs (loop4): Directory bread(block 73) failed
[  322.243289][  T174] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  322.459331][ T9043] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5788] was attempted by ""[9043]
[  322.466322][  T174] usb 3-1: config 4 has an invalid interface number: 44 but max is 0
[  322.489697][  T174] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  322.507811][  T174] usb 3-1: config 4 has no interface number 0
[  322.527819][  T174] usb 3-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  322.577119][  T174] usb 3-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20
[  322.594258][ T5088] Bluetooth: hci3: command 0x0406 tx timeout
[  322.606594][  T174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.635383][  T174] usb 3-1: Product: syz
[  322.645497][  T174] usb 3-1: Manufacturer: syz
[  322.659149][  T174] usb 3-1: SerialNumber: syz
[  322.755531][ T5088] Bluetooth: hci0: command 0x0c1a tx timeout
[  322.761641][ T5088] Bluetooth: hci2: command 0x0406 tx timeout
[  323.134532][  T174] dvb-usb: found a 'Gigabyte U7000' in warm state.
[  323.166216][  T174] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  323.195749][  T174] dvbdev: DVB: registering new adapter (Gigabyte U7000)
[  323.215069][  T174] usb 3-1: media controller created
[  323.251097][  T174] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  323.315952][  T174] DVB: Unable to find symbol dib7000p_attach()
[  323.322402][  T174] dvb-usb: no frontend was attached by 'Gigabyte U7000'
[  323.367937][  T174] rc_core: Couldn't load IR keymap rc-dib0700-rc5
[  323.384312][ T9057] FAULT_INJECTION: forcing a failure.
[  323.384312][ T9057] name failslab, interval 1, probability 0, space 0, times 0
[  323.403446][  T174] Registered IR keymap rc-empty
[  323.411531][  T174] dvb-usb: could not initialize remote control.
[  323.421283][ T9057] CPU: 0 PID: 9057 Comm: syz.1.1000 Not tainted syzkaller #0
[  323.428710][ T9057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  323.438802][ T9057] Call Trace:
[  323.442113][ T9057]  <TASK>
[  323.445073][ T9057]  dump_stack_lvl+0x18c/0x250
[  323.449811][ T9057]  ? show_regs_print_info+0x20/0x20
[  323.455063][ T9057]  ? load_image+0x420/0x420
[  323.459607][ T9057]  ? __might_sleep+0xe0/0xe0
[  323.464240][ T9057]  ? __lock_acquire+0x7eb0/0x7eb0
[  323.469311][ T9057]  ? ida_alloc_range+0x7d0/0x860
[  323.474290][ T9057]  should_fail_ex+0x394/0x4c0
[  323.479013][ T9057]  should_failslab+0x9/0x20
[  323.483557][ T9057]  slab_pre_alloc_hook+0x59/0x300
[  323.488631][ T9057]  ? alloc_vfsmnt+0x9d/0x450
[  323.493257][ T9057]  ? alloc_vfsmnt+0x9d/0x450
[  323.497875][ T9057]  __kmem_cache_alloc_node+0x53/0x250
[  323.503291][ T9057]  ? idr_replace+0x1b0/0x1b0
[  323.507923][ T9057]  ? alloc_vfsmnt+0x9d/0x450
[  323.512542][ T9057]  __kmalloc_node_track_caller+0xa4/0x230
[  323.518312][ T9057]  kstrdup+0x3b/0x80
[  323.522343][ T9057]  alloc_vfsmnt+0x9d/0x450
[  323.526808][ T9057]  clone_mnt+0x65/0xc60
[  323.531008][ T9057]  ? lockdep_softirqs_off+0x440/0x440
[  323.536425][ T9057]  copy_tree+0xe0/0x7e0
[  323.540626][ T9057]  ? down_write+0x16e/0x200
[  323.545176][ T9057]  ? down_read_killable+0x340/0x340
[  323.550433][ T9057]  __do_loopback+0x193/0x330
[  323.555080][ T9057]  __se_sys_open_tree+0x365/0x880
[  323.560155][ T9057]  ? lock_chain_count+0x20/0x20
[  323.565064][ T9057]  ? __x64_sys_open_tree+0x80/0x80
[  323.570230][ T9057]  ? lockdep_hardirqs_on+0x98/0x150
[  323.575480][ T9057]  do_syscall_64+0x55/0xb0
[  323.579944][ T9057]  ? clear_bhb_loop+0x40/0x90
[  323.584657][ T9057]  ? clear_bhb_loop+0x40/0x90
[  323.589406][ T9057]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  323.595350][ T9057] RIP: 0033:0x7f342379e159
[  323.599798][ T9057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  323.619448][ T9057] RSP: 002b:00007f342475d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac
[  323.627907][ T9057] RAX: ffffffffffffffda RBX: 00007f3423a25fa0 RCX: 00007f342379e159
[  323.635911][ T9057] RDX: 0000000000089901 RSI: 0000200000000640 RDI: ffffffffffffff9c
[  323.643919][ T9057] RBP: 00007f342383506b R08: 0000000000000000 R09: 0000000000000000
[  323.651919][ T9057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  323.659922][ T9057] R13: 00007f3423a26038 R14: 00007f3423a25fa0 R15: 00007ffce0261f28
[  323.667945][ T9057]  </TASK>
[  323.674375][  T174] dvb-usb: Gigabyte U7000 successfully initialized and connected.
[  323.689396][  T174] usb 3-1: USB disconnect, device number 9
[  323.706452][  T174] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected.
[  324.424671][ T9070] loop5: detected capacity change from 0 to 512
[  324.583900][ T9070] EXT4-fs: Ignoring removed nobh option
[  324.643577][ T9070] EXT4-fs (loop5): Test dummy encryption mode enabled
[  324.695540][ T9070] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13
[  324.732335][ T9070] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.1006: attempt to clear invalid blocks 1 len 1
[  324.816601][ T9070] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  324.853128][ T5088] Bluetooth: hci0: command 0x0c1a tx timeout
[  324.906583][ T9070] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1006: invalid indirect mapped block 1819239214 (level 0)
[  324.971694][ T9070] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1006: invalid indirect mapped block 1819239214 (level 1)
[  325.053944][ T9070] EXT4-fs (loop5): 1 truncate cleaned up
[  325.081463][ T9070] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  325.281896][ T9070] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.5.1006: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  325.412924][ T9070] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.5.1006: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  325.637064][ T7539] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.786201][ T9071] loop4: detected capacity change from 0 to 32768
[  325.924979][ T9071] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  326.000440][ T9091] loop5: detected capacity change from 0 to 128
[  326.059363][ T9091] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  326.075611][ T9075] loop1: detected capacity change from 0 to 40427
[  326.104079][ T9075] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  326.111880][ T9075] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  326.187489][ T9071] XFS (loop4): Ending clean mount
[  326.259139][ T9075] F2FS-fs (loop1): invalid crc value
[  326.345202][ T9075] F2FS-fs (loop1): Found nat_bits in checkpoint
[  326.459148][   T27] audit: type=1800 audit(1791038441.408:35): pid=9071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1007" name="file1" dev="loop4" ino=4422 res=0 errno=0
[  326.574900][ T9091] FAT-fs (loop5): error, parent dir link count too low (2)
[  326.609213][ T9091] FAT-fs (loop5): Filesystem has been set read-only
[  326.693785][ T6695] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  326.776676][ T9075] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  326.793599][ T9075] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  326.906818][ T7539] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  327.166919][ T9083] loop2: detected capacity change from 0 to 32768
[  327.239089][ T9083] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  327.290926][ T9083] JBD2: Ignoring recovery information on journal
[  327.490846][ T9103] loop5: detected capacity change from 0 to 256
[  327.654822][ T9083] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  327.678123][ T9103] FAT-fs (loop5): Directory bread(block 64) failed
[  327.718793][ T9103] FAT-fs (loop5): Directory bread(block 65) failed
[  327.733547][ T9103] FAT-fs (loop5): Directory bread(block 66) failed
[  327.758667][ T9103] FAT-fs (loop5): Directory bread(block 67) failed
[  327.782177][ T9103] FAT-fs (loop5): Directory bread(block 68) failed
[  327.827061][ T9103] FAT-fs (loop5): Directory bread(block 69) failed
[  327.904471][ T9103] FAT-fs (loop5): Directory bread(block 70) failed
[  327.911068][ T9103] FAT-fs (loop5): Directory bread(block 71) failed
[  327.968002][ T9103] FAT-fs (loop5): Directory bread(block 72) failed
[  328.016355][ T9103] FAT-fs (loop5): Directory bread(block 73) failed
[  328.156559][ T9107] loop4: detected capacity change from 0 to 512
[  328.193966][ T9107] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  328.266886][ T9107] EXT4-fs (loop4): invalid journal inode
[  328.327778][ T9107] EXT4-fs (loop4): can't get journal size
[  328.380773][ T9107] EXT4-fs (loop4): 1 truncate cleaned up
[  328.426206][ T9107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  328.668811][ T5782] ocfs2: Unmounting device (7,2) on (node local)
[  328.826161][ T6695] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.312834][ T9121] loop2: detected capacity change from 0 to 32768
[  330.388912][ T9121] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  330.518173][ T6189] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  330.566985][ T9121] XFS (loop2): Ending clean mount
[  330.756199][ T6189] usb 2-1: config 0 has no interfaces?
[  330.781642][ T6189] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  330.814587][ T9140] loop4: detected capacity change from 0 to 4096
[  330.821010][ T6189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.821041][ T6189] usb 2-1: Product: syz
[  330.821058][ T6189] usb 2-1: Manufacturer: syz
[  330.821076][ T6189] usb 2-1: SerialNumber: syz
[  330.830849][ T6189] usb 2-1: config 0 descriptor??
[  330.899296][ T5782] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  331.029401][ T9145] netlink: 3076 bytes leftover after parsing attributes in process `syz.5.1023'.
[  331.051545][ T9145] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.1023'.
[  332.016620][    T8] usb 2-1: USB disconnect, device number 15
[  332.753314][  T790] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  333.013311][  T790] usb 5-1: Using ep0 maxpacket: 8
[  333.064030][  T790] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  333.119011][  T790] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  333.155278][ T9152] loop5: detected capacity change from 0 to 32768
[  333.213457][  T790] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  333.243232][  T790] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  333.275013][ T9152] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  333.283175][  T790] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  333.283475][  T790] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  333.458761][ T9152] JBD2: Ignoring recovery information on journal
[  333.533334][  T790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.697902][ T9152] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  333.904034][  T790] usb 5-1: GET_CAPABILITIES returned 0
[  333.923701][  T790] usbtmc 5-1:16.0: can't read capabilities
[  334.365231][ T9160] loop1: detected capacity change from 0 to 32768
[  334.387182][ T7539] ocfs2: Unmounting device (7,5) on (node local)
[  334.459529][ T9160] JBD2: Ignoring recovery information on journal
[  334.548564][ T9160] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  334.617405][ T9168] usbtmc 5-1:16.0: stb usb_control_msg returned -32
[  334.659368][ T6189] usb 5-1: USB disconnect, device number 9
[  335.476562][ T5788] ocfs2: Unmounting device (7,1) on (node local)
[  337.945534][ T9188] loop4: detected capacity change from 0 to 512
[  338.004525][ T9188] EXT4-fs: Ignoring removed nobh option
[  338.042574][ T9188] EXT4-fs (loop4): Test dummy encryption mode enabled
[  338.173736][ T9188] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  338.204852][ T9188] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.1035: attempt to clear invalid blocks 1 len 1
[  338.221255][ T9196] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  338.290684][ T9188] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  338.347245][ T9188] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1035: invalid indirect mapped block 1819239214 (level 0)
[  338.393715][ T9188] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1035: invalid indirect mapped block 1819239214 (level 1)
[  338.457868][ T9188] EXT4-fs (loop4): 1 truncate cleaned up
[  338.480913][ T9188] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  338.605137][ T9188] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.1035: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  338.678978][ T9188] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.1035: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  338.818756][ T9178] loop5: detected capacity change from 0 to 32768
[  338.915858][ T6695] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.928570][ T9178] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  339.060921][ T9211] loop1: detected capacity change from 0 to 512
[  339.101312][ T9178] XFS (loop5): Ending clean mount
[  339.234812][ T9211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  339.313320][ T9211] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  339.629872][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.732350][ T7539] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  340.308520][ T9224] loop1: detected capacity change from 0 to 8192
[  340.787487][ T9235] "syz.2.1053" (9235) uses obsolete ecb(arc4) skcipher
[  342.274250][ T9254] FAULT_INJECTION: forcing a failure.
[  342.274250][ T9254] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  342.321265][ T9254] CPU: 0 PID: 9254 Comm: syz.4.1067 Not tainted syzkaller #0
[  342.328724][ T9254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  342.338826][ T9254] Call Trace:
[  342.342138][ T9254]  <TASK>
[  342.345097][ T9254]  dump_stack_lvl+0x18c/0x250
[  342.349822][ T9254]  ? show_regs_print_info+0x20/0x20
[  342.355066][ T9254]  ? load_image+0x420/0x420
[  342.359614][ T9254]  ? __might_fault+0xaa/0x120
[  342.364328][ T9254]  ? __lock_acquire+0x7eb0/0x7eb0
[  342.369390][ T9254]  ? __might_fault+0xaa/0x120
[  342.374107][ T9254]  should_fail_ex+0x394/0x4c0
[  342.378842][ T9254]  _copy_from_iter+0x1cd/0x1290
[  342.383745][ T9254]  ? __might_fault+0xaa/0x120
[  342.388477][ T9254]  ? copyout_mc+0x70/0x70
[  342.392861][ T9254]  ? copyout_mc+0x70/0x70
[  342.397242][ T9254]  ? __virt_addr_valid+0x10c/0x380
[  342.402403][ T9254]  ? __virt_addr_valid+0x10c/0x380
[  342.407568][ T9254]  ? __virt_addr_valid+0x10c/0x380
[  342.412723][ T9254]  ? page_copy_sane+0x4e/0x270
[  342.417549][ T9254]  copy_page_from_iter+0x7b/0x100
[  342.422636][ T9254]  skb_copy_datagram_from_iter+0x2ea/0x6f0
[  342.428504][ T9254]  tun_get_user+0xc99/0x3d30
[  342.433155][ T9254]  ? aa_file_perm+0x3e3/0xee0
[  342.437888][ T9254]  ? rcu_read_unlock+0xa0/0xa0
[  342.442715][ T9254]  ? tun_get+0x1c/0x2e0
[  342.446918][ T9254]  ? __lock_acquire+0x7eb0/0x7eb0
[  342.451990][ T9254]  ? tun_get+0x1c/0x2e0
[  342.456200][ T9254]  tun_chr_write_iter+0x119/0x200
[  342.461274][ T9254]  vfs_write+0x474/0x9a0
[  342.465572][ T9254]  ? file_end_write+0x250/0x250
[  342.470475][ T9254]  ? __fget_files+0x3fc/0x460
[  342.475238][ T9254]  ? __fdget_pos+0x1d8/0x330
[  342.479870][ T9254]  ? ksys_write+0x74/0x260
[  342.484337][ T9254]  ksys_write+0x151/0x260
[  342.488716][ T9254]  ? __ia32_sys_read+0x90/0x90
[  342.493530][ T9254]  ? lockdep_hardirqs_on+0x98/0x150
[  342.498772][ T9254]  do_syscall_64+0x55/0xb0
[  342.503240][ T9254]  ? clear_bhb_loop+0x40/0x90
[  342.507948][ T9254]  ? clear_bhb_loop+0x40/0x90
[  342.512664][ T9254]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  342.518603][ T9254] RIP: 0033:0x7fabae55e98e
[  342.523059][ T9254] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  342.542705][ T9254] RSP: 002b:00007fabaf38bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  342.551162][ T9254] RAX: ffffffffffffffda RBX: 00007fabaf38c6c0 RCX: 00007fabae55e98e
[  342.559174][ T9254] RDX: 0000000000000fc2 RSI: 0000200000002900 RDI: 00000000000000c8
[  342.567183][ T9254] RBP: 00007fabae63506b R08: 0000000000000000 R09: 0000000000000000
[  342.575189][ T9254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  342.583206][ T9254] R13: 00007fabae826038 R14: 00007fabae825fa0 R15: 00007fff157cedf8
[  342.591255][ T9254]  </TASK>
[  343.151041][ T9269] loop5: detected capacity change from 0 to 512
[  343.161879][ T9269] EXT4-fs: Ignoring removed nobh option
[  343.300975][ T9269] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  343.347092][ T9278] loop2: detected capacity change from 0 to 4096
[  343.363568][ T9269] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  343.457456][ T9280] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  343.470392][ T9278] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  343.558751][ T9278] NILFS (loop2): mounting fs with errors
[  343.608745][ T7539] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.703440][   T27] audit: type=1800 audit(1791038458.648:36): pid=9278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1070" name="file1" dev="loop2" ino=15 res=0 errno=0
[  343.812870][ T9278] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  344.771692][ T9305] loop2: detected capacity change from 0 to 256
[  345.379804][ T9314] loop6: detected capacity change from 0 to 8
[  345.453266][ T9314] loop6: detected capacity change from 8 to 7
[  345.528497][ T9314] Dev loop6: unable to read RDB block 7
[  345.543091][ T9314]  loop6: unable to read partition table
[  345.549054][ T9314] loop6: partition table beyond EOD, truncated
[  345.563132][ T9314] loop_reread_partitions: partition scan of loop6 (ÛuêƒGŸ­Ü±.:ˆÊåë0„Çñ™Àü¿Ð
[  345.563132][ T9314] å’�<l·k¨3"	[8­S~) failed (rc=-5)
[  345.665654][ T5142] Dev loop6: unable to read RDB block 7
[  345.671299][ T5142]  loop6: unable to read partition table
[  345.698619][ T5142] loop6: partition table beyond EOD, truncated
[  345.864097][  T790] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  345.933224][ T9322] FAULT_INJECTION: forcing a failure.
[  345.933224][ T9322] name failslab, interval 1, probability 0, space 0, times 0
[  345.945971][ T9322] CPU: 0 PID: 9322 Comm: syz.5.1085 Not tainted syzkaller #0
[  345.953390][ T9322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  345.963485][ T9322] Call Trace:
[  345.966798][ T9322]  <TASK>
[  345.969761][ T9322]  dump_stack_lvl+0x18c/0x250
[  345.974498][ T9322]  ? show_regs_print_info+0x20/0x20
[  345.979750][ T9322]  ? load_image+0x420/0x420
[  345.984312][ T9322]  should_fail_ex+0x394/0x4c0
[  345.989046][ T9322]  should_failslab+0x9/0x20
[  345.993591][ T9322]  slab_pre_alloc_hook+0x59/0x300
[  345.998679][ T9322]  kmem_cache_alloc+0x5a/0x2c0
[  346.003488][ T9322]  ? __nf_conntrack_alloc+0x93/0x370
[  346.008826][ T9322]  __nf_conntrack_alloc+0x93/0x370
[  346.013989][ T9322]  init_conntrack+0x166/0xe20
[  346.018724][ T9322]  ? early_drop+0x7f0/0x7f0
[  346.023277][ T9322]  ? nf_conntrack_find_get+0x670/0x670
[  346.028779][ T9322]  ? __siphash_unaligned+0x25c/0x3d0
[  346.034111][ T9322]  nf_conntrack_in+0xc29/0x15b0
[  346.039035][ T9322]  ? nf_ct_pernet+0x270/0x270
[  346.043762][ T9322]  ? ip6t_do_table+0x1cb/0x1570
[  346.048660][ T9322]  ? ip6t_alloc_initial_table+0x640/0x640
[  346.054428][ T9322]  ? ipv6_defrag+0x2d6/0x3a0
[  346.059064][ T9322]  ? ipv4_conntrack_local+0x200/0x200
[  346.064472][ T9322]  nf_hook_slow+0xbd/0x200
[  346.068938][ T9322]  NF_HOOK+0x21d/0x3b0
[  346.073051][ T9322]  ? sock_wfree+0x24f/0x600
[  346.077589][ T9322]  ? ip6_rcv_core+0x1082/0x1700
[  346.082488][ T9322]  ? net_zcopy_put_abort+0x90/0x90
[  346.087672][ T9322]  ? NF_HOOK+0x9f/0x3b0
[  346.091869][ T9322]  ? ip6_rcv_core+0x1700/0x1700
[  346.096764][ T9322]  ? net_zcopy_put_abort+0x90/0x90
[  346.101927][ T9322]  ? ip6_rcv_finish_core+0x420/0x420
[  346.107259][ T9322]  __netif_receive_skb+0xcc/0x290
[  346.112335][ T9322]  ? netif_receive_skb+0x106/0x720
[  346.117498][ T9322]  netif_receive_skb+0x1bc/0x720
[  346.122478][ T9322]  ? __bpf_trace_tasklet+0x160/0x160
[  346.127804][ T9322]  ? enqueue_to_backlog+0xe90/0xe90
[  346.133046][ T9322]  ? tun_rx_batched+0x186/0x790
[  346.137961][ T9322]  tun_rx_batched+0x1df/0x790
[  346.142705][ T9322]  ? pskb_may_pull+0xf0/0xf0
[  346.147398][ T9322]  ? __local_bh_enable_ip+0x13a/0x1c0
[  346.152824][ T9322]  ? lockdep_hardirqs_on+0x98/0x150
[  346.158068][ T9322]  ? read_lock_is_recursive+0x20/0x20
[  346.163484][ T9322]  ? __local_bh_enable_ip+0x13a/0x1c0
[  346.168894][ T9322]  ? _local_bh_enable+0xa0/0xa0
[  346.173778][ T9322]  ? skb_copy_datagram_from_iter+0x63c/0x6f0
[  346.179811][ T9322]  tun_get_user+0x286c/0x3d30
[  346.184544][ T9322]  ? tun_get_user+0x2488/0x3d30
[  346.189437][ T9322]  ? aa_file_perm+0x3e3/0xee0
[  346.194157][ T9322]  ? rcu_read_unlock+0xa0/0xa0
[  346.198983][ T9322]  ? tun_get+0x1c/0x2e0
[  346.203183][ T9322]  ? __lock_acquire+0x7eb0/0x7eb0
[  346.208267][ T9322]  ? tun_get+0x1c/0x2e0
[  346.212489][ T9322]  tun_chr_write_iter+0x119/0x200
[  346.217569][ T9322]  vfs_write+0x474/0x9a0
[  346.221863][ T9322]  ? file_end_write+0x250/0x250
[  346.226769][ T9322]  ? __fget_files+0x3fc/0x460
[  346.231497][ T9322]  ? __fdget_pos+0x1d8/0x330
[  346.236129][ T9322]  ? ksys_write+0x74/0x260
[  346.240590][ T9322]  ksys_write+0x151/0x260
[  346.244978][ T9322]  ? __ia32_sys_read+0x90/0x90
[  346.249787][ T9322]  ? lockdep_hardirqs_on+0x98/0x150
[  346.255028][ T9322]  do_syscall_64+0x55/0xb0
[  346.259486][ T9322]  ? clear_bhb_loop+0x40/0x90
[  346.264195][ T9322]  ? clear_bhb_loop+0x40/0x90
[  346.268907][ T9322]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  346.274857][ T9322] RIP: 0033:0x7f10ccd5e98e
[  346.279307][ T9322] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  346.298952][ T9322] RSP: 002b:00007f10cdc8dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  346.307426][ T9322] RAX: ffffffffffffffda RBX: 00007f10cdc8e6c0 RCX: 00007f10ccd5e98e
[  346.315439][ T9322] RDX: 0000000000000fc2 RSI: 0000200000002900 RDI: 00000000000000c8
[  346.323445][ T9322] RBP: 00007f10cce3506b R08: 0000000000000000 R09: 0000000000000000
[  346.331450][ T9322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  346.339452][ T9322] R13: 00007f10cd026038 R14: 00007f10cd025fa0 R15: 00007ffec76768a8
[  346.347475][ T9322]  </TASK>
[  346.513953][  T790] usb 2-1: config index 0 descriptor too short (expected 64906, got 45)
[  346.553962][  T790] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  346.575043][  T790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.587019][  T790] usb 2-1: Product: syz
[  346.593554][  T790] usb 2-1: Manufacturer: syz
[  346.599743][  T790] usb 2-1: SerialNumber: syz
[  346.620567][ T9317] loop2: detected capacity change from 0 to 32768
[  346.758465][ T9317] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  346.833113][  T174] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  346.853968][  T790] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  346.885974][  T790] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  346.899108][ T9317] XFS (loop2): Ending clean mount
[  346.914787][  T790] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  346.940935][  T790] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  346.986705][  T790] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  347.017507][   T27] audit: type=1800 audit(1791038461.968:37): pid=9317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1084" name="file1" dev="loop2" ino=4422 res=0 errno=0
[  347.050993][  T790] lan78xx: probe of 2-1:1.0 failed with error -71
[  347.074969][  T174] usb 5-1: Using ep0 maxpacket: 16
[  347.082771][  T790] usb 2-1: USB disconnect, device number 16
[  347.095703][  T174] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  347.144727][  T174] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  347.204549][  T174] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  347.253252][  T174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.323165][  T174] usb 5-1: config 0 descriptor??
[  347.496200][ T5782] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  347.855924][  T174] hid (null): report_id 0 is invalid
[  347.886952][  T174] hid (null): report_id 4252247276 is invalid
[  347.911097][  T174] hid (null): unknown global tag 0xe
[  347.948040][  T174] hid (null): global environment stack underflow
[  347.993412][  T174] hid (null): usage index exceeded
[  348.043661][  T174] usb 5-1: string descriptor 0 read error: -71
[  348.091733][  T174] usb 5-1: Max retries (5) exceeded reading string descriptor 200
[  348.117504][  T174] letsketch: probe of 0003:6161:4D15.000C failed with error -32
[  348.173658][  T174] usb 5-1: USB disconnect, device number 10
[  349.904841][ T9373] loop1: detected capacity change from 0 to 8
[  350.003753][ T9373] SQUASHFS error: zlib decompression failed, data probably corrupt
[  350.018885][ T9373] SQUASHFS error: Failed to read block 0x9b: -5
[  350.030242][ T9373] SQUASHFS error: Unable to read metadata cache entry [99]
[  350.042752][ T9373] SQUASHFS error: Unable to read inode 0x127
[  350.131445][ T9356] loop5: detected capacity change from 0 to 32768
[  350.313437][ T9356] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  350.480921][ T9356] XFS (loop5): Ending clean mount
[  350.656928][   T27] audit: type=1800 audit(1791038465.608:38): pid=9356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1099" name="file1" dev="loop5" ino=4422 res=0 errno=0
[  350.855614][ T9391] loop1: detected capacity change from 0 to 512
[  350.911301][ T9391] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  351.032890][ T9391] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.1110: bad orphan inode 131083
[  351.104023][ T9391] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  351.363138][ T7539] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  351.484949][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.997009][ T9406] tipc: Started in network mode
[  352.017745][ T9406] tipc: Node identity ac141441, cluster identity 4711
[  352.072124][ T9406] tipc: Enabled bearer <udp:syz2>, priority 10
[  352.158293][ T9407] loop2: detected capacity change from 0 to 512
[  352.269291][ T9407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  352.345902][ T9407] ext4 filesystem being mounted at /274/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  352.465345][   T27] audit: type=1800 audit(1791038467.408:39): pid=9407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1116" name="file1" dev="loop2" ino=15 res=0 errno=0
[  352.656177][ T5782] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz-executor: bg 0: block 217: padding at end of block bitmap is not set
[  352.734463][ T5782] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  352.771736][ T5782] EXT4-fs error (device loop2): ext4_lookup:1860: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[  352.825387][ T5782] EXT4-fs error (device loop2): ext4_lookup:1860: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[  353.154075][ T5816] tipc: Node number set to 2886997057
[  353.162003][ T9421] sctp: [Deprecated]: syz.1.1121 (pid 9421) Use of struct sctp_assoc_value in delayed_ack socket option.
[  353.162003][ T9421] Use struct sctp_sack_info instead
[  353.505372][   T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.960803][   T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.298415][   T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.457363][ T9437] loop5: detected capacity change from 0 to 256
[  354.545437][   T42] bond0: (slave netdevsim0): Releasing backup interface
[  354.616779][   T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.233231][    T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  356.450097][    T8] usb 5-1: Using ep0 maxpacket: 16
[  356.476319][    T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  356.520567][    T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  356.552539][    T8] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[  356.593195][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  356.673178][    T8] usb 5-1: SerialNumber: syz
[  356.757249][    T8] usb 5-1: 0:2 : does not exist
[  357.110093][ T9469] loop1: detected capacity change from 0 to 256
[  357.162108][    T8] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  357.216875][ T9469] exfat: Deprecated parameter 'utf8'
[  357.265364][ T6189] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  357.294099][    T8] usb 5-1: USB disconnect, device number 11
[  357.323439][ T9469] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a991031, utbl_chksum : 0xe619d30d)
[  357.455551][ T8196] udevd[8196]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  357.512071][ T6189] usb 6-1: Using ep0 maxpacket: 8
[  357.565969][ T6189] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  357.616237][ T6189] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.678446][ T6189] usb 6-1: Product: syz
[  357.698940][ T6189] usb 6-1: Manufacturer: syz
[  357.710304][ T6189] usb 6-1: SerialNumber: syz
[  357.794728][   T27] audit: type=1800 audit(1791038472.738:40): pid=9469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1137" name="file1" dev="loop1" ino=1048691 res=0 errno=0
[  358.805740][ T6189] cdc_ncm 6-1:1.0: bind() failure
[  358.819262][ T6189] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  358.899674][ T6189] cdc_ncm 6-1:1.1: bind() failure
[  358.949528][ T6189] usb 6-1: USB disconnect, device number 6
[  358.956889][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  359.032051][   T42] batman_adv: batadv0: Removing interface: batadv_slave_0
[  359.096721][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  359.121812][   T42] batman_adv: batadv0: Removing interface: batadv_slave_1
[  359.182879][   T42] bridge_slave_1: left allmulticast mode
[  359.188713][   T42] bridge_slave_1: left promiscuous mode
[  359.223838][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.294530][   T42] bridge_slave_0: left allmulticast mode
[  359.300242][   T42] bridge_slave_0: left promiscuous mode
[  359.340020][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.520851][   T42] team_slave_0: left promiscuous mode
[  359.526887][   T42] team_slave_1: left promiscuous mode
[  359.678862][   T42] veth1_macvtap: left promiscuous mode
[  359.691528][   T42] veth0_macvtap: left promiscuous mode
[  359.733294][   T42] veth1_vlan: left promiscuous mode
[  359.740623][   T42] veth0_vlan: left promiscuous mode
[  359.791627][ T9488] TCP: tcp_parse_options: Illegal window scaling value 16 > 14 received
[  360.236274][ T9495] loop5: detected capacity change from 0 to 256
[  361.290483][ T9510] loop1: detected capacity change from 0 to 764
[  361.359705][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  361.378352][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  361.459421][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  361.475145][ T9510] rock: directory entry would overflow storage
[  361.482379][ T9510] rock: sig=0x5850, size=36, remaining=22
[  361.488773][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  361.498630][   T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  361.510802][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  362.226346][ T9525] loop5: detected capacity change from 0 to 256
[  362.709344][   T42] team0 (unregistering): Port device team_slave_1 removed
[  362.773654][   T42] team0 (unregistering): Port device team_slave_0 removed
[  362.831226][   T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  362.889161][   T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  363.323182][   T42] bond0 (unregistering): Released all slaves
[  363.559939][   T51] Bluetooth: hci1: command tx timeout
[  364.076747][   T42] IPVS: stop unused estimator thread 0...
[  364.091122][ T9511] chnl_net:caif_netlink_parms(): no params data found
[  364.540991][   T42] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.613267][ T9511] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.620425][ T9511] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.642542][ T9511] bridge_slave_0: entered allmulticast mode
[  364.665248][ T9511] bridge_slave_0: entered promiscuous mode
[  364.772112][   T42] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.816190][ T9511] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.831956][ T9511] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.858910][ T9511] bridge_slave_1: entered allmulticast mode
[  364.880152][ T9511] bridge_slave_1: entered promiscuous mode
[  364.997335][   T42] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.055129][ T5088] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  365.072320][ T5088] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  365.082122][ T5088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  365.115983][ T5088] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  365.136409][ T5088] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  365.145056][ T5088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  365.258513][   T42] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.306027][ T9511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  365.394013][ T9511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  365.512652][ T9511] team0: Port device team_slave_0 added
[  365.544686][ T9581] loop4: detected capacity change from 0 to 8192
[  365.589174][ T9511] team0: Port device team_slave_1 added
[  365.633242][ T5088] Bluetooth: hci1: command tx timeout
[  365.775405][ T9511] batman_adv: batadv0: Adding interface: batadv_slave_0
[  365.799834][ T9511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  365.875015][ T9511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  365.914966][ T9511] batman_adv: batadv0: Adding interface: batadv_slave_1
[  365.948536][ T9511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  366.029563][ T9511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  366.171051][ T9589] loop1: detected capacity change from 0 to 256
[  366.528035][ T9511] hsr_slave_0: entered promiscuous mode
[  366.586312][ T9511] hsr_slave_1: entered promiscuous mode
[  366.641004][ T9599] loop1: detected capacity change from 0 to 256
[  366.749711][ T9599] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  366.794598][   T27] audit: type=1800 audit(1791038481.748:41): pid=9599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1175" name="file1" dev="loop1" ino=1048703 res=0 errno=0
[  367.036779][ T9604] loop1: detected capacity change from 0 to 256
[  367.093352][ T9604] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  367.243717][ T5088] Bluetooth: hci0: command tx timeout
[  367.347261][ T9574] chnl_net:caif_netlink_parms(): no params data found
[  367.713249][ T5088] Bluetooth: hci1: command tx timeout
[  367.761544][ T9620] loop5: detected capacity change from 0 to 4095
[  367.878277][    C0] blk_print_req_error: 92 callbacks suppressed
[  367.878297][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 52 prio class 2
[  367.900306][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  367.909856][    C0] buffer_io_error: 138 callbacks suppressed
[  367.909870][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  367.950108][    C0] I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  367.960560][    C0] I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  367.970071][    C0] Buffer I/O error on dev loop5, logical block 480, async page read
[  368.096836][ T9574] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.114913][ T9574] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.129491][ T9574] bridge_slave_0: entered allmulticast mode
[  368.142785][ T9574] bridge_slave_0: entered promiscuous mode
[  368.245695][ T9574] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.258818][ T9574] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.266981][ T9574] bridge_slave_1: entered allmulticast mode
[  368.274868][ T9574] bridge_slave_1: entered promiscuous mode
[  368.412362][ T9511] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  368.443507][ T9574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  368.444491][    T8] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  368.456533][ T9574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  368.521539][ T9511] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  368.561811][ T9511] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  368.623182][ T9511] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  368.651604][ T9574] team0: Port device team_slave_0 added
[  368.656746][    T8] usb 5-1: unable to get BOS descriptor or descriptor too short
[  368.667217][    T8] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1080, setting to 1024
[  368.686467][    T8] usb 5-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40
[  368.697102][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.709043][    T8] usb 5-1: Product: syz
[  368.713413][    T8] usb 5-1: Manufacturer: syz
[  368.723060][    T8] usb 5-1: SerialNumber: syz
[  368.761175][ T9574] team0: Port device team_slave_1 added
[  368.872453][   T42] hsr_slave_0: left promiscuous mode
[  368.878509][   T42] hsr_slave_1: left promiscuous mode
[  368.884874][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  368.892371][   T42] batman_adv: batadv0: Removing interface: batadv_slave_0
[  368.901402][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  368.909700][   T42] batman_adv: batadv0: Removing interface: batadv_slave_1
[  368.917875][   T42] bridge_slave_1: left allmulticast mode
[  368.923737][   T42] bridge_slave_1: left promiscuous mode
[  368.929533][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.940404][   T42] bridge_slave_0: left allmulticast mode
[  368.946327][   T42] bridge_slave_0: left promiscuous mode
[  368.952141][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.000601][    T8] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  369.010209][   T42] veth1_macvtap: left promiscuous mode
[  369.016371][   T42] veth0_macvtap: left promiscuous mode
[  369.022526][   T42] veth1_vlan: left promiscuous mode
[  369.029032][   T42] veth0_vlan: left promiscuous mode
[  369.053284][   T28] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  369.053411][    T8] usb 5-1: USB disconnect, device number 12
[  369.300390][   T28] usb 2-1: config 0 has no interfaces?
[  369.319428][ T5088] Bluetooth: hci0: command tx timeout
[  369.325781][   T28] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  369.335449][   T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.349176][   T28] usb 2-1: config 0 descriptor??
[  369.794321][ T5088] Bluetooth: hci1: command tx timeout
[  370.052027][   T42] team0 (unregistering): Port device team_slave_1 removed
[  370.112272][   T42] team0 (unregistering): Port device team_slave_0 removed
[  370.171825][   T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  370.231367][   T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  370.701990][   T42] bond0 (unregistering): Released all slaves
[  370.790564][ T9574] batman_adv: batadv0: Adding interface: batadv_slave_0
[  370.805131][ T9574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  370.840246][ T9574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  370.886846][ T9574] batman_adv: batadv0: Adding interface: batadv_slave_1
[  370.903590][ T9574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  370.964819][ T9574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  371.101663][ T9574] hsr_slave_0: entered promiscuous mode
[  371.109244][ T9574] hsr_slave_1: entered promiscuous mode
[  371.116310][ T9574] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  371.124658][ T9574] Cannot create hsr debugfs directory
[  371.167818][ T9652] loop4: detected capacity change from 0 to 512
[  371.187975][ T9652] EXT4-fs (loop4): Test dummy encryption mode enabled
[  371.286726][ T9511] 8021q: adding VLAN 0 to HW filter on device bond0
[  371.388984][ T9652] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  371.392981][ T9511] 8021q: adding VLAN 0 to HW filter on device team0
[  371.408610][ T5088] Bluetooth: hci0: command tx timeout
[  371.485983][ T9652] jffs2: notice: (9652) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  371.562483][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.569757][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state
[  371.636558][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.643799][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state
[  371.878052][ T5856] usb 2-1: USB disconnect, device number 17
[  371.899936][ T6695] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  372.062611][ T9574] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  372.085705][ T9574] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  372.109723][ T9574] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  372.152671][ T9574] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  372.228692][ T9511] 8021q: adding VLAN 0 to HW filter on device batadv0
[  372.364962][ T9574] 8021q: adding VLAN 0 to HW filter on device bond0
[  372.461653][ T9574] 8021q: adding VLAN 0 to HW filter on device team0
[  372.499369][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state
[  372.506579][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state
[  372.552577][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state
[  372.559844][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state
[  372.596411][ T9511] veth0_vlan: entered promiscuous mode
[  372.639814][ T9511] veth1_vlan: entered promiscuous mode
[  372.683201][ T6189] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  372.776210][ T9511] veth0_macvtap: entered promiscuous mode
[  372.827991][ T9697] bond2 (unregistering): Released all slaves
[  372.880186][ T9511] veth1_macvtap: entered promiscuous mode
[  372.891000][ T6189] usb 5-1: config 0 has no interfaces?
[  372.937656][ T6189] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  372.953030][ T6189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.967590][ T9511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  372.983176][ T6189] usb 5-1: Product: syz
[  372.987449][ T6189] usb 5-1: Manufacturer: syz
[  373.002649][ T9511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.012874][ T6189] usb 5-1: SerialNumber: syz
[  373.030371][ T6189] usb 5-1: config 0 descriptor??
[  373.036550][ T9511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  373.058415][ T9511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.071968][ T9511] batman_adv: batadv0: Interface activated: batadv_slave_0
[  373.087382][ T9574] 8021q: adding VLAN 0 to HW filter on device batadv0
[  373.125367][ T9511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  373.151282][ T9511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.179157][ T9511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  373.206177][ T9511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.227500][ T9511] batman_adv: batadv0: Interface activated: batadv_slave_1
[  373.274311][ T9511] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  373.293253][ T9511] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.302134][ T9511] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  373.311695][ T9511] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.473555][ T5088] Bluetooth: hci0: command tx timeout
[  373.715334][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.730276][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.750191][ T9574] veth0_vlan: entered promiscuous mode
[  373.851959][ T5835] usb 5-1: USB disconnect, device number 13
[  373.867046][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.871002][ T9574] veth1_vlan: entered promiscuous mode
[  373.893155][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.040881][ T9574] veth0_macvtap: entered promiscuous mode
[  374.076734][ T9574] veth1_macvtap: entered promiscuous mode
[  374.159962][ T9574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  374.172565][ T9733] loop1: detected capacity change from 0 to 64
[  374.188973][ T9574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.236244][ T9574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  374.267474][ T9574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.272670][ T9736] loop6: detected capacity change from 0 to 2048
[  374.281148][   T27] audit: type=1800 audit(1791038489.218:42): pid=9733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1198" name="file1" dev="loop1" ino=21 res=0 errno=0
[  374.323278][ T9574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  374.357407][ T9574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.370331][ T9574] batman_adv: batadv0: Interface activated: batadv_slave_0
[  374.387248][ T9733] syz.1.1198: attempt to access beyond end of device
[  374.387248][ T9733] loop1: rw=34817, sector=57, nr_sectors = 8 limit=64
[  374.399780][ T9736] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  374.455817][ T9574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  374.515662][ T9574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.542027][ T9574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  374.563176][ T9574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.583518][ T9574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  374.614275][ T9574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.647822][ T9574] batman_adv: batadv0: Interface activated: batadv_slave_1
[  374.702383][ T9574] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  374.730135][ T9574] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  374.745089][ T9742] netlink: 'syz.4.1199': attribute type 29 has an invalid length.
[  374.763209][ T9574] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  374.781997][ T9574] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  374.819361][ T9742] netlink: 'syz.4.1199': attribute type 29 has an invalid length.
[  375.083530][ T5835] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  375.138484][ T2938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  375.164551][ T2938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  375.256279][ T2938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  375.274256][ T2938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  375.307253][ T5835] usb 2-1: unable to get BOS descriptor or descriptor too short
[  375.327786][ T5835] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  375.353293][ T5835] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  375.384034][ T5835] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  375.412575][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.437802][ T9574] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.446107][ T5835] usb 2-1: Product: syz
[  375.451018][ T5835] usb 2-1: Manufacturer: syz
[  375.522302][ T5835] usb 2-1: SerialNumber: syz
[  375.577886][ T5835] usb 2-1: selecting invalid altsetting 1
[  375.598667][ T5835] usb 2-1: unit 6 not found!
[  376.173109][ T5768] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  376.230552][ T9783] input: syz0 as /devices/virtual/input/input19
[  376.384123][ T5768] usb 7-1: too many configurations: 9, using maximum allowed: 8
[  376.403918][ T5768] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  376.415034][ T5835] usb 2-1: 2:0: failed to get current value for ch 0 (-71)
[  376.437685][ T5768] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  376.469064][ T5768] usb 7-1: config 0 interface 0 has no altsetting 0
[  376.493915][ T5768] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  376.506066][ T5835] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[  376.539632][ T5768] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  376.554305][ T5835] usb 2-1: USB disconnect, device number 18
[  376.573027][ T5768] usb 7-1: config 0 interface 0 has no altsetting 0
[  376.598391][ T5768] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  376.617030][ T5768] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  376.654815][ T8196] udevd[8196]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  376.672964][ T5768] usb 7-1: config 0 interface 0 has no altsetting 0
[  376.693824][ T5768] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  376.702812][ T5768] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  376.742270][ T5768] usb 7-1: config 0 interface 0 has no altsetting 0
[  376.763602][ T5768] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  376.782805][ T5768] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  376.803414][ T5768] usb 7-1: config 0 interface 0 has no altsetting 0
[  376.821696][ T5768] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  376.833407][ T5768] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  376.863031][ T5768] usb 7-1: config 0 interface 0 has no altsetting 0
[  376.884430][ T5768] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  376.905097][ T5768] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  376.939412][ T5768] usb 7-1: config 0 interface 0 has no altsetting 0
[  376.964175][ T5768] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  376.993706][ T5768] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  377.012986][ T5768] usb 7-1: config 0 interface 0 has no altsetting 0
[  377.026179][ T5768] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  377.043092][ T5768] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  377.061692][ T5768] usb 7-1: Product: syz
[  377.066658][ T5768] usb 7-1: Manufacturer: syz
[  377.071302][ T5768] usb 7-1: SerialNumber: syz
[  377.103958][ T5768] usb 7-1: config 0 descriptor??
[  377.133634][ T5768] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0
[  377.486192][ T5768] usb 7-1: USB disconnect, device number 2
[  377.504356][ T5768] yurex 7-1:0.0: USB YUREX #0 now disconnected
[  378.430185][ T9849] loop6: detected capacity change from 0 to 4096
[  378.669857][ T9852] loop4: detected capacity change from 0 to 4096
[  378.715498][ T9849] ntfs3: loop6: failed to convert "0080" to koi8-ru
[  378.749950][ T9849] ntfs3: loop6: failed to convert name for inode 1e.
[  378.770551][ T9849] ntfs3: loop6: ino=1f, mi_enum_attr
[  378.786749][ T9849] ntfs3: loop6: failed to convert "256c" to koi8-ru
[  378.800426][ T9853] ntfs3: loop6: failed to convert "256c" to koi8-ru
[  378.927163][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  378.938301][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  379.162481][ T9859] loop7: detected capacity change from 0 to 256
[  379.343250][ T5835] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  379.586717][ T5835] usb 7-1: unable to get BOS descriptor or descriptor too short
[  379.599659][ T5835] usb 7-1: not running at top speed; connect to a high speed hub
[  379.609430][ T5835] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4
[  379.642705][ T5835] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  379.651244][ T9859] FAT-fs (loop7): error, fat_get_cluster: detected the cluster chain loop (i_pos 194)
[  379.669647][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.678991][ T5835] usb 7-1: Product: syz
[  379.683498][ T5835] usb 7-1: Manufacturer: syz
[  379.688130][ T5835] usb 7-1: SerialNumber: syz
[  379.932168][ T5835] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  380.103248][ T5816] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  380.130875][ T5835] usb 7-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  380.142991][ T5835] usb 7-1: found format II with max.bitrate = 4, frame size=7372
[  380.293094][ T5816] usb 5-1: Using ep0 maxpacket: 32
[  380.300177][ T5816] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  380.308762][ T5816] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  380.320430][ T5816] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  380.329550][ T5816] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  380.340277][ T5816] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  380.350127][ T5816] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  380.364513][ T5816] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  380.373736][ T5816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.388669][ T5816] usb 5-1: config 0 descriptor??
[  380.551192][ T5835] usb 7-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  380.559925][ T5835] usb 7-1: found format II with max.bitrate = 4, frame size=7372
[  380.610534][ T5816] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  380.754729][ T5835] usb 7-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[  380.788257][ T9822] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  380.799450][ T5835] usb 7-1: USB disconnect, device number 3
[  380.905298][ T8196] udevd[8196]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  380.960984][ T6189] usb 5-1: USB disconnect, device number 14
[  380.994839][ T6189] usblp0: removed
[  382.023755][ T9896] loop1: detected capacity change from 0 to 32768
[  382.102833][ T9896] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  382.201747][ T9896] XFS (loop1): Ending clean mount
[  382.271696][ T9896] XFS (loop1): Quotacheck needed: Please wait.
[  382.275994][ T5835] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  382.412672][ T9896] XFS (loop1): Quotacheck: Done.
[  382.483365][ T5835] usb 5-1: Using ep0 maxpacket: 16
[  382.504892][ T5835] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  382.524689][ T5835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  382.557877][ T5835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  382.576344][ T5835] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  382.613077][ T5835] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  382.638009][ T5835] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  382.651178][ T5835] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  382.659605][ T5835] usb 5-1: Manufacturer: syz
[  382.665288][ T5788] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  382.700044][ T5835] usb 5-1: config 0 descriptor??
[  382.954001][ T5835] rc_core: Couldn't load IR keymap rc-hauppauge
[  382.960358][ T5835] Registered IR keymap rc-empty
[  382.983027][ T5816] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  383.016703][ T5835] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  383.070558][ T5835] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  383.132259][ T5835] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  383.157461][ T5835] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input20
[  383.191274][ T5835] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  383.213161][ T5816] usb 7-1: Using ep0 maxpacket: 8
[  383.225190][ T5816] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  383.234403][ T5835] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  383.253429][ T5816] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  383.283232][ T5816] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  383.293279][ T5835] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  383.312441][ T5816] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  383.323357][ T5835] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  383.332062][ T5816] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  383.346028][ T5816] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  383.373174][ T5816] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  383.383467][ T5835] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  383.433127][ T5835] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  383.483711][ T5835] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  383.523095][ T5835] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  383.553383][ T5835] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  383.588894][ T5835] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  383.645863][ T5835] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  383.663068][ T5816] usb 7-1: usb_control_msg returned -32
[  383.668723][ T5816] usbtmc 7-1:16.0: can't read capabilities
[  383.680655][ T5835] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  383.734293][ T5835] usb 5-1: USB disconnect, device number 15
[  384.066790][ T9966] usbtmc 7-1:16.0: INITIATE_CLEAR returned 0
[  384.084038][ T9968] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1257'.
[  384.121496][ T9968] netlink: 'syz.7.1257': attribute type 30 has an invalid length.
[  384.143184][ T9968] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  384.152774][ T9968] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  384.163567][ T9968] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  384.172431][ T9968] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  384.230161][ T9968] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1257'.
[  384.239921][ T9968] netlink: 'syz.7.1257': attribute type 30 has an invalid length.
[  384.267771][ T6189] usb 7-1: USB disconnect, device number 4
[  384.463587][ T9978] loop4: detected capacity change from 0 to 512
[  384.496171][ T9978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  384.508889][ T9978] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  384.573575][   T27] audit: type=1800 audit(1791038499.528:43): pid=9978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1259" name="file2" dev="loop4" ino=16 res=0 errno=0
[  384.693383][ T9985] Bluetooth: MGMT ver 1.22
[  384.712754][ T6695] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  385.162476][T10001] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  385.760424][T10028] loop4: detected capacity change from 0 to 256
[  385.845820][T10028] exfat: Deprecated parameter 'namecase'
[  385.901400][T10028] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  385.988247][T10028] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  386.403413][T10013] loop1: detected capacity change from 0 to 40427
[  386.420363][T10013] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288)
[  386.448696][T10013] F2FS-fs (loop1): invalid crc value
[  386.492660][T10013] F2FS-fs (loop1): Found nat_bits in checkpoint
[  386.611531][T10013] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  386.930808][ T5788] syz-executor: attempt to access beyond end of device
[  386.930808][ T5788] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  386.976647][ T5788] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  387.133168][ T5816] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  387.342420][ T5816] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  387.361480][ T5816] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  387.400705][ T5816] usb 5-1: config 0 interface 0 has no altsetting 0
[  387.418881][ T5816] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  387.438611][ T5816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.480811][ T5816] usb 5-1: config 0 descriptor??
[  387.493274][T10047] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  387.980239][ T5816] dragonrise 0003:0079:0006.000D: unknown main item tag 0x7
[  388.013494][ T5816] dragonrise 0003:0079:0006.000D: unknown global tag 0xc
[  388.041520][ T5816] dragonrise 0003:0079:0006.000D: item 0 2 1 12 parsing failed
[  388.069715][ T5816] dragonrise 0003:0079:0006.000D: parse failed
[  388.091118][ T5816] dragonrise: probe of 0003:0079:0006.000D failed with error -22
[  388.226326][ T5815] usb 5-1: USB disconnect, device number 16
[  388.243020][  T174] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  388.293297][ T6189] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  388.373939][T10083] loop7: detected capacity change from 0 to 256
[  388.408157][T10083] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  388.435254][  T174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  388.455010][  T174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  388.477263][  T174] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  388.505652][ T6189] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  388.524421][  T174] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  388.534296][ T6189] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  388.563109][  T174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.576183][ T6189] usb 7-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00
[  388.596127][ T6189] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.615584][  T174] usb 2-1: config 0 descriptor??
[  388.647348][ T6189] opticon 7-1:1.0: opticon converter detected
[  388.692773][ T6189] usb 7-1: opticon converter now attached to ttyUSB0
[  388.900199][T10096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1292'.
[  388.988045][T10069] opticon ttyUSB0: usb_serial_generic_submit_read_urb - usb_submit_urb failed: -90
[  388.989206][ T6189] usb 7-1: USB disconnect, device number 5
[  389.052459][ T6189] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0
[  389.086394][  T174] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0
[  389.095511][ T6189] opticon 7-1:1.0: device disconnected
[  389.129575][  T174] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0
[  389.144639][  T174] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving
[  389.162784][  T174] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  389.199327][T10102] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  389.235740][T10102] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  389.304009][T10102] overlayfs: conflicting lowerdir path
[  390.773750][ T5816] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  390.815199][T10136] loop4: detected capacity change from 0 to 32768
[  390.886437][T10151] misc userio: Begin command sent, but we're already running
[  390.932657][T10136] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  390.953880][ T5816] usb 8-1: Using ep0 maxpacket: 32
[  390.964768][ T5816] usb 8-1: config index 0 descriptor too short (expected 35577, got 27)
[  390.985750][ T5816] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  391.003266][ T5816] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92
[  391.012283][ T5816] usb 8-1: config 1 has no interface number 0
[  391.033214][ T5816] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  391.059452][ T5816] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  391.098773][ T5816] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  391.119146][ T5816] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.177559][ T5816] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found
[  391.313431][  T174] usb 2-1: USB disconnect, device number 19
[  391.370354][ T6695] ocfs2: Unmounting device (7,4) on (node local)
[  391.427543][ T5816] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now attached
[  391.442255][ T5088] block nbd1: Receive control failed (result -107)
[  391.524100][T10163] block nbd1: shutting down sockets
[  391.675009][T10169] loop6: detected capacity change from 0 to 256
[  391.732724][T10169] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  391.867602][   T28] usb 8-1: USB disconnect, device number 2
[  391.884681][   T28] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected
[  392.245714][T10183] loop4: detected capacity change from 0 to 512
[  392.387196][T10183] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  392.432245][T10183] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  392.507919][T10183] EXT4-fs (loop4): orphan cleanup on readonly fs
[  392.508516][T10183] EXT4-fs error (device loop4): ext4_orphan_get:1434: comm syz.4.1314: bad orphan inode 15
[  392.525941][T10183] ext4_test_bit(bit=14, block=18) = 1
[  392.525956][T10183] is_bad_inode(inode)=0
[  392.525962][T10183] NEXT_ORPHAN(inode)=1023
[  392.525968][T10183] max_ino=32
[  392.525973][T10183] i_nlink=0
[  392.554814][T10183] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2974: inode #15: comm syz.4.1314: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  392.573152][T10183] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117)
[  392.577521][T10183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  392.621315][T10193] loop7: detected capacity change from 0 to 4096
[  392.756187][T10183] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.1314: path /281/éq‰Y’3aK: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=4096 fake=0
[  392.773619][T10197] batadv_slave_1: entered promiscuous mode
[  392.788390][T10196] batadv_slave_1: left promiscuous mode
[  392.922314][ T6695] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  393.551655][T10221] hub 8-0:1.0: USB hub found
[  393.559342][T10221] hub 8-0:1.0: 1 port detected
[  393.804569][T10232] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.1328'.
[  394.006485][T10239] FAULT_INJECTION: forcing a failure.
[  394.006485][T10239] name failslab, interval 1, probability 0, space 0, times 0
[  394.048068][T10244] hugetlbfs: syz.1.1333 (10244): Using mlock ulimits for SHM_HUGETLB is obsolete
[  394.063113][T10239] CPU: 1 PID: 10239 Comm: syz.6.1332 Not tainted syzkaller #0
[  394.070733][T10239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  394.080839][T10239] Call Trace:
[  394.084231][T10239]  <TASK>
[  394.087263][T10239]  dump_stack_lvl+0x18c/0x250
[  394.092210][T10239]  ? show_regs_print_info+0x20/0x20
[  394.097515][T10239]  ? load_image+0x420/0x420
[  394.102115][T10239]  ? __might_sleep+0xe0/0xe0
[  394.106863][T10239]  ? __lock_acquire+0x7eb0/0x7eb0
[  394.111976][T10239]  should_fail_ex+0x394/0x4c0
[  394.116816][T10239]  should_failslab+0x9/0x20
[  394.121397][T10239]  slab_pre_alloc_hook+0x59/0x300
[  394.126534][T10239]  kmem_cache_alloc+0x5a/0x2c0
[  394.130452][T10245] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  394.131334][T10239]  ? security_file_alloc+0x34/0x120
[  394.143660][T10239]  security_file_alloc+0x34/0x120
[  394.144672][    C0] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  394.148729][T10239]  init_file+0x94/0x1f0
[  394.148761][T10239]  alloc_empty_file+0xb7/0x1d0
[  394.148784][T10239]  alloc_file+0x5b/0x600
[  394.169606][T10239]  alloc_file_pseudo+0x184/0x210
[  394.174606][T10239]  ? fput+0x1a0/0x1a0
[  394.178646][T10239]  ? shmem_get_inode+0xa7a/0xcd0
[  394.183659][T10239]  __shmem_file_setup+0x23c/0x2c0
[  394.188747][T10239]  newseg+0x46c/0xb10
[  394.192791][T10239]  ? ksys_shmget+0x140/0x140
[  394.197430][T10239]  ? __lock_acquire+0x7eb0/0x7eb0
[  394.202502][T10239]  ? file_end_write+0x159/0x250
[  394.207408][T10239]  ipcget+0x1d1/0xe10
[  394.211446][T10239]  ? do_futex+0x35d/0x3e0
[  394.215865][T10239]  ? __ia32_sys_get_robust_list+0x110/0x110
[  394.221816][T10239]  ? ipc_obtain_object_check+0x1a0/0x1a0
[  394.227523][T10239]  __x64_sys_shmget+0x141/0x180
[  394.232434][T10239]  ? lock_chain_count+0x20/0x20
[  394.237351][T10239]  ? shm_more_checks+0x80/0x80
[  394.242181][T10239]  ? lockdep_hardirqs_on+0x98/0x150
[  394.247442][T10239]  do_syscall_64+0x55/0xb0
[  394.251909][T10239]  ? clear_bhb_loop+0x40/0x90
[  394.256732][T10239]  ? clear_bhb_loop+0x40/0x90
[  394.261475][T10239]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  394.267466][T10239] RIP: 0033:0x7fb7bfb9e159
[  394.271939][T10239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  394.291610][T10239] RSP: 002b:00007fb7c09d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d
[  394.300095][T10239] RAX: ffffffffffffffda RBX: 00007fb7bfe25fa0 RCX: 00007fb7bfb9e159
[  394.308125][T10239] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000000000000
[  394.316151][T10239] RBP: 00007fb7bfc3506b R08: 0000000000000000 R09: 0000000000000000
[  394.324172][T10239] R10: 0000200000ffd000 R11: 0000000000000246 R12: 0000000000000000
[  394.332193][T10239] R13: 00007fb7bfe26038 R14: 00007fb7bfe25fa0 R15: 00007fffa0ae1d68
[  394.340236][T10239]  </TASK>
[  394.428081][  T174] IPVS: starting estimator thread 0...
[  394.533935][T10252] IPVS: using max 15 ests per chain, 36000 per kthread
[  395.025247][T10274] loop1: detected capacity change from 0 to 2048
[  395.101444][T10274] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  395.184173][T10274] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  395.437390][T10284] loop7: detected capacity change from 0 to 2048
[  395.490813][T10284] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found!
[  395.552367][T10284] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  395.571777][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.811013][T10265] loop6: detected capacity change from 0 to 32768
[  395.905717][T10265] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  395.911621][T10282] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22
[  396.012279][T10265] XFS (loop6): Ending clean mount
[  396.332596][ T9511] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  396.624516][T10304] loop7: detected capacity change from 0 to 4096
[  396.661477][T10309] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  396.698349][T10309] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[  396.962796][T10311] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1354'.
[  396.997404][T10311] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1354'.
[  397.261194][T10318] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1357'.
[  397.836384][T10338] loop4: detected capacity change from 0 to 512
[  397.876347][T10338] EXT4-fs (loop4): 1 truncate cleaned up
[  397.885800][T10338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  397.987638][T10338] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1365: bg 0: block 465: padding at end of block bitmap is not set
[  398.042509][T10338] EXT4-fs (loop4): Remounting filesystem read-only
[  398.136769][ T6695] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  398.208065][T10346] FAULT_INJECTION: forcing a failure.
[  398.208065][T10346] name failslab, interval 1, probability 0, space 0, times 0
[  398.234028][T10346] CPU: 1 PID: 10346 Comm: syz.1.1368 Not tainted syzkaller #0
[  398.241572][T10346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  398.251674][T10346] Call Trace:
[  398.255005][T10346]  <TASK>
[  398.257984][T10346]  dump_stack_lvl+0x18c/0x250
[  398.262732][T10346]  ? show_regs_print_info+0x20/0x20
[  398.267999][T10346]  ? load_image+0x420/0x420
[  398.272557][T10346]  ? __might_sleep+0xe0/0xe0
[  398.277174][T10346]  ? __lock_acquire+0x7eb0/0x7eb0
[  398.282265][T10346]  should_fail_ex+0x394/0x4c0
[  398.287008][T10346]  should_failslab+0x9/0x20
[  398.291563][T10346]  slab_pre_alloc_hook+0x59/0x300
[  398.296656][T10346]  kmem_cache_alloc+0x5a/0x2c0
[  398.301917][T10346]  ? getname_flags+0xbb/0x500
[  398.306642][T10346]  getname_flags+0xbb/0x500
[  398.311185][T10346]  __x64_sys_statx+0x158/0x2b0
[  398.315998][T10346]  ? cp_statx+0x6d0/0x6d0
[  398.320360][T10346]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  398.326370][T10346]  ? lock_chain_count+0x20/0x20
[  398.331256][T10346]  ? lockdep_hardirqs_on+0x98/0x150
[  398.336486][T10346]  do_syscall_64+0x55/0xb0
[  398.340946][T10346]  ? clear_bhb_loop+0x40/0x90
[  398.345663][T10346]  ? clear_bhb_loop+0x40/0x90
[  398.350379][T10346]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  398.356312][T10346] RIP: 0033:0x7f342379e159
[  398.361112][T10346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  398.380789][T10346] RSP: 002b:00007f342475d028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c
[  398.389245][T10346] RAX: ffffffffffffffda RBX: 00007f3423a25fa0 RCX: 00007f342379e159
[  398.397251][T10346] RDX: 0000000000006400 RSI: 0000000000000000 RDI: ffffffffffffffff
[  398.405248][T10346] RBP: 00007f342383506b R08: 0000000000000000 R09: 0000000000000000
[  398.413239][T10346] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  398.421227][T10346] R13: 00007f3423a26038 R14: 00007f3423a25fa0 R15: 00007ffce0261f28
[  398.429229][T10346]  </TASK>
[  398.438277][T10349] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1369'.
[  398.754317][   T28] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  398.913293][    T8] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  398.939266][   T28] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  398.957252][   T28] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  398.967497][   T28] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  398.976680][   T28] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  398.990545][T10351] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  399.002380][   T28] usb 7-1: Quirk or no altest; falling back to MIDI 1.0
[  399.135212][    T8] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  399.156452][    T8] usb 8-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00
[  399.173045][    T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.181343][    T8] usb 8-1: Product: syz
[  399.191649][    T8] usb 8-1: Manufacturer: syz
[  399.197030][    T8] usb 8-1: SerialNumber: syz
[  399.213315][    T8] keyspan 8-1:1.0: Keyspan 1 port adapter converter detected
[  399.230985][    T8] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84
[  399.251493][    T8] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81
[  399.262569][    T8] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 82
[  399.262708][T10376] loop1: detected capacity change from 0 to 512
[  399.275430][    T8] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1
[  399.313062][T10376] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  399.330156][    T8] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2
[  399.352568][    T8] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 83
[  399.361518][    T8] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 3
[  399.365710][T10376] EXT4-fs (loop1): 1 truncate cleaned up
[  399.379539][    T8] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  399.396773][ T5835] usb 7-1: USB disconnect, device number 6
[  399.415086][T10376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  399.629676][T10376] EXT4-fs error (device loop1): __ext4_expand_extra_isize:5972: inode #15: comm syz.1.1378: bad extra_isize 62 (inode size 256)
[  399.678109][T10376] EXT4-fs (loop1): Remounting filesystem read-only
[  399.691789][T10376] EXT4-fs (loop1): pa ffff88807712d9f8: logic 0, phys. 193, len 32
[  399.703834][   T28] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  399.771141][ T5816] usb 8-1: USB disconnect, device number 3
[  399.786156][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  399.817574][ T5816] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  399.850508][ T5816] keyspan 8-1:1.0: device disconnected
[  399.927030][   T28] usb 5-1: config index 0 descriptor too short (expected 64906, got 45)
[  399.938949][   T28] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  399.948520][   T28] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.962228][   T28] usb 5-1: Product: syz
[  399.968809][   T28] usb 5-1: Manufacturer: syz
[  399.978947][   T28] usb 5-1: SerialNumber: syz
[  400.212745][   T28] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  400.233256][   T28] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  400.251144][   T28] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  400.263046][ T6189] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  400.279803][   T28] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  400.297672][   T28] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  400.311071][   T28] lan78xx: probe of 5-1:1.0 failed with error -71
[  400.328312][   T28] usb 5-1: USB disconnect, device number 17
[  400.453475][ T6189] usb 2-1: Using ep0 maxpacket: 16
[  400.466977][ T6189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  400.481589][ T6189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  400.498091][ T6189] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  400.533143][ T6189] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  400.552577][ T6189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.578825][ T6189] usb 2-1: config 0 descriptor??
[  400.645978][T10403] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  400.833464][T10390] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  400.842374][T10390] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  400.851296][T10390] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  400.861212][T10390] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  400.937153][T10416] netlink: 'syz.4.1389': attribute type 12 has an invalid length.
[  400.945489][T10416] netlink: 'syz.4.1389': attribute type 29 has an invalid length.
[  400.953610][T10416] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1389'.
[  400.962784][T10416] netlink: 'syz.4.1389': attribute type 3 has an invalid length.
[  400.970834][T10416] netlink: 'syz.4.1389': attribute type 2 has an invalid length.
[  400.978860][T10416] netlink: 35 bytes leftover after parsing attributes in process `syz.4.1389'.
[  401.168078][ T6189] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000F/input/input23
[  401.294960][ T6189] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  401.371220][ T6189] usb 2-1: USB disconnect, device number 20
[  401.373064][ T5768] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  401.493840][T10427] fido_id[10427]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  401.585102][ T5768] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  401.615876][ T5768] usb 5-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00
[  401.631883][ T5768] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.641859][ T5768] usb 5-1: Product: syz
[  401.647247][ T5768] usb 5-1: Manufacturer: syz
[  401.652022][ T5768] usb 5-1: SerialNumber: syz
[  401.680057][ T5768] keyspan 5-1:1.0: Keyspan 1 port adapter converter detected
[  401.689621][ T5768] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84
[  401.707443][ T5768] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81
[  401.715877][ T5768] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 82
[  401.724346][ T5768] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1
[  401.744972][ T5768] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2
[  401.758605][ T5768] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 83
[  401.767088][ T5768] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 3
[  401.777487][ T5768] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  402.059380][ T6189] usb 5-1: USB disconnect, device number 18
[  402.073268][ T6189] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  402.111323][ T6189] keyspan 5-1:1.0: device disconnected
[  402.787164][T10461] CIFS: Attempting to mount //127.0.0.1/share
[  403.696281][T10461] CIFS: VFS: cifs_mount failed w/return code = -112
[  403.713913][    T8] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  403.915329][    T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  403.957339][    T8] usb 2-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00
[  403.973100][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.981230][    T8] usb 2-1: Product: syz
[  403.995533][    T8] usb 2-1: Manufacturer: syz
[  404.008407][    T8] usb 2-1: SerialNumber: syz
[  404.037429][    T8] keyspan 2-1:1.0: Keyspan 1 port adapter converter detected
[  404.073307][    T8] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84
[  404.100024][    T8] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81
[  404.130300][    T8] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 82
[  404.161119][    T8] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1
[  404.190524][    T8] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2
[  404.220948][    T8] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 83
[  404.264861][    T8] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 3
[  404.308719][    T8] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  404.342177][    T8] usb 2-1: USB disconnect, device number 21
[  404.405443][    T8] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  404.463864][    T8] keyspan 2-1:1.0: device disconnected
[  404.568509][T10523] loop6: detected capacity change from 0 to 512
[  404.606565][T10521] loop7: detected capacity change from 0 to 1024
[  404.713238][T10521] hfsplus: xattr searching failed
[  404.934417][T10530] netlink: 'syz.6.1426': attribute type 4 has an invalid length.
[  405.369690][T10544] block nbd6: shutting down sockets
[  405.540174][T10527] loop4: detected capacity change from 0 to 32768
[  405.576034][T10527] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1425 (10527)
[  405.631380][T10527] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  405.653105][T10527] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  405.662728][T10527] BTRFS info (device loop4): enabling auto defrag
[  405.693461][T10527] BTRFS info (device loop4): force clearing of disk cache
[  405.700768][T10527] BTRFS info (device loop4): ignoring data csums
[  405.714055][T10527] BTRFS info (device loop4): turning on async discard
[  405.714807][ T5818] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  405.720883][T10527] BTRFS info (device loop4): setting nodatacow, compression disabled
[  405.720916][T10527] BTRFS info (device loop4): turning off async discard
[  405.720941][T10527] BTRFS info (device loop4): disabling free space tree
[  405.937425][ T5818] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  405.976118][ T5818] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  406.023038][ T5818] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  406.061633][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  406.112761][T10547] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  406.133652][ T6695] BTRFS info (device loop4: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  406.157007][ T5818] usb 2-1: Quirk or no altest; falling back to MIDI 1.0
[  406.514773][T10586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1435'.
[  406.664225][ T6189] usb 2-1: USB disconnect, device number 22
[  406.865692][ T5835] IPVS: starting estimator thread 0...
[  407.033095][T10591] IPVS: using max 17 ests per chain, 40800 per kthread
[  407.156666][T10596] loop4: detected capacity change from 0 to 256
[  407.378703][T10600] loop6: detected capacity change from 0 to 256
[  407.430461][T10600] exfat: Deprecated parameter 'utf8'
[  407.702651][T10600] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1a991031, utbl_chksum : 0xe619d30d)
[  407.844659][   T27] audit: type=1800 audit(1791038522.799:44): pid=10600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1439" name="file1" dev="loop6" ino=1048721 res=0 errno=0
[  407.902881][T10593] loop7: detected capacity change from 0 to 32768
[  407.949205][T10593] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop7 scanned by syz.7.1437 (10593)
[  408.067615][T10593] BTRFS info (device loop7): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  408.093159][T10593] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm
[  408.113863][T10593] BTRFS info (device loop7): setting nodatacow, compression disabled
[  408.127283][T10593] BTRFS info (device loop7): turning on flush-on-commit
[  408.150577][T10593] BTRFS info (device loop7): using free space tree
[  408.160536][   T42] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.350346][T10593] BTRFS info (device loop7): enabling ssd optimizations
[  408.403022][T10593] BTRFS info (device loop7): auto enabling async discard
[  408.617325][   T42] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.845641][   T42] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.115045][ T9574] BTRFS info (device loop7): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  409.217016][T10642] loop1: detected capacity change from 0 to 2048
[  409.283242][T10642] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  409.325554][   T42] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.059643][T10654] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input24
[  410.139162][   T42] tipc: Disabling bearer <udp:syz2>
[  410.178204][   T42] tipc: Left network mode
[  410.345984][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  410.363278][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  410.372188][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  410.408663][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  410.429503][   T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  410.443235][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  410.826394][T10673] loop1: detected capacity change from 0 to 4096
[  410.877321][T10676] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  411.057126][T10673] ntfs: volume version 3.1.
[  411.503192][ T6189] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  411.703276][ T6189] usb 8-1: Using ep0 maxpacket: 16
[  411.741976][ T6189] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  411.807850][ T6189] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  411.853894][T10644] loop6: detected capacity change from 0 to 40427
[  411.882679][T10644] F2FS-fs (loop6): Corrupted extension count (327717 + 1 > 64)
[  411.883696][ T6189] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  411.920589][T10644] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  411.964661][ T6189] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  411.975976][ T6189] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.986158][T10644] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x7ffff
[  411.996118][ T6189] usb 8-1: config 0 descriptor??
[  412.061239][T10644] F2FS-fs (loop6): invalid crc value
[  412.079722][T10660] chnl_net:caif_netlink_parms(): no params data found
[  412.100012][T10644] F2FS-fs (loop6): Found nat_bits in checkpoint
[  412.516197][ T5088] Bluetooth: hci2: command tx timeout
[  412.601924][ T6189] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0010/input/input25
[  412.742000][ T6189] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0
[  412.785573][ T6189] usb 8-1: USB disconnect, device number 4
[  413.048228][T10713] fido_id[10713]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  413.311977][T10660] bridge0: port 1(bridge_slave_0) entered blocking state
[  413.320487][T10660] bridge0: port 1(bridge_slave_0) entered disabled state
[  413.348107][T10660] bridge_slave_0: entered allmulticast mode
[  413.364633][T10660] bridge_slave_0: entered promiscuous mode
[  413.385333][T10660] bridge0: port 2(bridge_slave_1) entered blocking state
[  413.395343][T10727] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1461'.
[  413.406705][T10660] bridge0: port 2(bridge_slave_1) entered disabled state
[  413.425853][T10660] bridge_slave_1: entered allmulticast mode
[  413.459180][T10660] bridge_slave_1: entered promiscuous mode
[  413.667357][T10660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  413.704592][T10660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  413.830242][   T42] hsr_slave_0: left promiscuous mode
[  413.847067][   T42] hsr_slave_1: left promiscuous mode
[  413.867381][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  413.883062][   T42] batman_adv: batadv0: Removing interface: batadv_slave_0
[  413.893316][ T6189] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  413.930449][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  413.948554][   T42] batman_adv: batadv0: Removing interface: batadv_slave_1
[  413.969684][   T42] bridge_slave_1: left allmulticast mode
[  413.976173][   T42] bridge_slave_1: left promiscuous mode
[  413.994938][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[  414.034952][   T42] bridge_slave_0: left allmulticast mode
[  414.040712][   T42] bridge_slave_0: left promiscuous mode
[  414.056932][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[  414.109971][ T6189] usb 2-1: unable to get BOS descriptor or descriptor too short
[  414.146363][ T6189] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1080, setting to 1024
[  414.181734][ T6189] usb 2-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40
[  414.203403][ T6189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.214236][ T6189] usb 2-1: Product: syz
[  414.218475][ T6189] usb 2-1: Manufacturer: syz
[  414.224024][ T6189] usb 2-1: SerialNumber: syz
[  414.257811][   T42] veth1_macvtap: left promiscuous mode
[  414.264149][   T42] veth0_macvtap: left promiscuous mode
[  414.270817][   T42] veth1_vlan: left promiscuous mode
[  414.277071][   T42] veth0_vlan: left promiscuous mode
[  414.519628][ T6189] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  414.580229][ T6189] usb 2-1: USB disconnect, device number 23
[  414.597018][ T5088] Bluetooth: hci2: command tx timeout
[  414.911117][T10747] Trying to write to read-only block-device nullb0
[  415.890928][   T42] team0 (unregistering): Port device team_slave_1 removed
[  416.029540][   T42] team0 (unregistering): Port device team_slave_0 removed
[  416.116967][   T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  416.201387][T10780] FAULT_INJECTION: forcing a failure.
[  416.201387][T10780] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  416.215795][T10780] CPU: 0 PID: 10780 Comm: syz.7.1480 Not tainted syzkaller #0
[  416.223334][T10780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  416.233428][T10780] Call Trace:
[  416.236745][T10780]  <TASK>
[  416.239719][T10780]  dump_stack_lvl+0x18c/0x250
[  416.244440][T10780]  ? show_regs_print_info+0x20/0x20
[  416.249652][T10780]  ? load_image+0x420/0x420
[  416.254183][T10780]  ? __might_fault+0xaa/0x120
[  416.258903][T10780]  ? __lock_acquire+0x7eb0/0x7eb0
[  416.263946][T10780]  ? __lock_acquire+0x7eb0/0x7eb0
[  416.268999][T10780]  should_fail_ex+0x394/0x4c0
[  416.273703][T10780]  set_fd_set+0x3a/0x90
[  416.277953][T10780]  core_sys_select+0x8c9/0xa80
[  416.282763][T10780]  ? poll_select_set_timeout+0x150/0x150
[  416.288416][T10780]  ? sigprocmask+0x190/0x190
[  416.293033][T10780]  __se_sys_pselect6+0x272/0x340
[  416.298027][T10780]  ? __x64_sys_pselect6+0xf0/0xf0
[  416.303087][T10780]  ? __x64_sys_pselect6+0x21/0xf0
[  416.308117][T10780]  do_syscall_64+0x55/0xb0
[  416.312537][T10780]  ? clear_bhb_loop+0x40/0x90
[  416.317232][T10780]  ? clear_bhb_loop+0x40/0x90
[  416.321933][T10780]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  416.327842][T10780] RIP: 0033:0x7f633599e159
[  416.332283][T10780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  416.351893][T10780] RSP: 002b:00007f6336885028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  416.360324][T10780] RAX: ffffffffffffffda RBX: 00007f6335c25fa0 RCX: 00007f633599e159
[  416.368336][T10780] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000000000000020
[  416.376322][T10780] RBP: 00007f6335a3506b R08: 0000200000000280 R09: 0000200000000300
[  416.384305][T10780] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000
[  416.392297][T10780] R13: 00007f6335c26038 R14: 00007f6335c25fa0 R15: 00007ffcc474d7b8
[  416.400293][T10780]  </TASK>
[  416.406465][   T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  416.683224][ T5088] Bluetooth: hci2: command tx timeout
[  416.711118][T10785] loop7: detected capacity change from 0 to 128
[  416.759738][T10785] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  416.801761][T10785] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  417.095847][ T9574] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  417.269502][T10793] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  417.380932][   T42] bond0 (unregistering): Released all slaves
[  417.476002][T10742] netlink: 124 bytes leftover after parsing attributes in process `syz.6.1458'.
[  417.519153][T10660] team0: Port device team_slave_0 added
[  417.556272][T10660] team0: Port device team_slave_1 added
[  417.653366][T10660] batman_adv: batadv0: Adding interface: batadv_slave_0
[  417.660560][T10660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  417.687669][T10660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  417.964032][T10660] batman_adv: batadv0: Adding interface: batadv_slave_1
[  417.971056][T10660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  418.043073][T10660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  418.245156][T10660] hsr_slave_0: entered promiscuous mode
[  418.268341][T10660] hsr_slave_1: entered promiscuous mode
[  418.304459][T10660] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  418.312091][T10660] Cannot create hsr debugfs directory
[  418.753199][ T5088] Bluetooth: hci2: command tx timeout
[  419.194149][   T42] IPVS: stop unused estimator thread 0...
[  419.856518][T10660] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  419.896652][T10660] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  419.913695][T10660] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  419.928379][T10660] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  420.146012][T10660] 8021q: adding VLAN 0 to HW filter on device bond0
[  420.199895][T10660] 8021q: adding VLAN 0 to HW filter on device team0
[  420.238106][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state
[  420.245376][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state
[  420.309245][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state
[  420.316492][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state
[  420.622805][T10660] 8021q: adding VLAN 0 to HW filter on device batadv0
[  420.785420][T10660] veth0_vlan: entered promiscuous mode
[  420.820676][T10660] veth1_vlan: entered promiscuous mode
[  420.831157][T10858] loop6: detected capacity change from 0 to 8192
[  420.859780][T10858] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  420.881959][T10858] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal
[  420.893604][T10858] REISERFS (device loop6): using ordered data mode
[  420.900271][T10858] reiserfs: using flush barriers
[  420.922086][T10660] veth0_macvtap: entered promiscuous mode
[  420.925724][T10858] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  420.936779][T10660] veth1_macvtap: entered promiscuous mode
[  420.971992][T10858] REISERFS (device loop6): checking transaction log (loop6)
[  420.993635][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  421.004470][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  421.015355][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  421.026751][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  421.037039][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  421.048068][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  421.069941][T10660] batman_adv: batadv0: Interface activated: batadv_slave_0
[  421.097789][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  421.116677][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  421.138539][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  421.160516][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  421.184099][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  421.208456][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  421.237393][T10660] batman_adv: batadv0: Interface activated: batadv_slave_1
[  421.297379][T10858] REISERFS (device loop6): Using tea hash to sort names
[  421.304445][T10660] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  421.304487][T10660] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  421.344661][T10858] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  421.362999][T10660] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  421.379674][T10660] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  421.449579][T10858] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 4)
[  421.465249][T10858] 
[  421.467620][T10858] ======================================================
[  421.474662][T10858] WARNING: possible circular locking dependency detected
[  421.481703][T10858] syzkaller #0 Not tainted
[  421.486142][T10858] ------------------------------------------------------
[  421.493188][T10858] syz.6.1496/10858 is trying to acquire lock:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  421.499278][T10858] ffff88805ed22410 (&type->i_mutex_dir_key#13/3){+.+.}-{3:3}, at: open_xa_dir+0x146/0x6f0
[  421.509314][T10858] 
[  421.509314][T10858] but task is already holding lock:
[  421.516707][T10858] ffff88805ecc0990 (&sb->s_type->i_mutex_key#30){+.+.}-{3:3}, at: generic_file_write_iter+0x83/0x2e0
[  421.527668][T10858] 
[  421.527668][T10858] which lock already depends on the new lock.
[  421.527668][T10858] 
[  421.538099][T10858] 
[  421.538099][T10858] the existing dependency chain (in reverse order) is:
[  421.547147][T10858] 
[  421.547147][T10858] -> #2 (&sb->s_type->i_mutex_key#30){+.+.}-{3:3}:
[  421.555888][T10858]        down_write+0x97/0x200
[  421.560747][T10858]        vfs_rename+0x6f4/0xe60
[  421.565632][T10858]        do_renameat2+0x8b0/0xc80
[  421.570685][T10858]        __x64_sys_renameat2+0xd2/0xe0
[  421.576175][T10858]        do_syscall_64+0x55/0xb0
[  421.581142][T10858]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  421.587577][T10858] 
[  421.587577][T10858] -> #1 (&type->i_mutex_dir_key#13/2){+.+.}-{3:3}:
[  421.596324][T10858]        down_write_nested+0x9e/0x200
[  421.601745][T10858]        delete_one_xattr+0xfa/0x2d0
[  421.607065][T10858]        reiserfs_for_each_xattr+0x8a6/0xa30
[  421.613078][T10858]        reiserfs_delete_xattrs+0x20/0x90
[  421.618830][T10858]        reiserfs_evict_inode+0x24a/0x4c0
[  421.624581][T10858]        evict+0x4b7/0x8a0
[  421.629053][T10858]        vfs_rmdir+0x378/0x4b0
[  421.633831][T10858]        do_rmdir+0x29f/0x590
[  421.638529][T10858]        __x64_sys_unlinkat+0xc4/0xe0
[  421.643912][T10858]        do_syscall_64+0x55/0xb0
[  421.648857][T10858]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  421.655450][T10858] 
[  421.655450][T10858] -> #0 (&type->i_mutex_dir_key#13/3){+.+.}-{3:3}:
[  421.664157][T10858]        __lock_acquire+0x3a07/0x7eb0
[  421.669546][T10858]        lock_acquire+0x19e/0x420
[  421.674585][T10858]        down_write_nested+0x9e/0x200
[  421.679982][T10858]        open_xa_dir+0x146/0x6f0
[  421.684938][T10858]        xattr_lookup+0x22/0x2a0
[  421.689878][T10858]        reiserfs_xattr_get+0x114/0x5a0
[  421.695450][T10858]        __vfs_getxattr+0x406/0x440
[  421.700657][T10858]        cap_inode_need_killpriv+0x45/0x60
[  421.706483][T10858]        security_inode_need_killpriv+0x62/0x90
[  421.712740][T10858]        __file_remove_privs+0x23f/0x600
[  421.718470][T10858]        __generic_file_write_iter+0x7c/0x230
[  421.724564][T10858]        generic_file_write_iter+0xaf/0x2e0
[  421.730500][T10858]        do_iter_write+0x747/0xc50
[  421.735658][T10858]        do_writev+0x27f/0x480
[  421.740447][T10858]        do_syscall_64+0x55/0xb0
[  421.745438][T10858]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  421.751872][T10858] 
[  421.751872][T10858] other info that might help us debug this:
[  421.751872][T10858] 
[  421.762095][T10858] Chain exists of:
[  421.762095][T10858]   &type->i_mutex_dir_key#13/3 --> &type->i_mutex_dir_key#13/2 --> &sb->s_type->i_mutex_key#30
[  421.762095][T10858] 
[  421.778285][T10858]  Possible unsafe locking scenario:
[  421.778285][T10858] 
[  421.785735][T10858]        CPU0                    CPU1
[  421.791111][T10858]        ----                    ----
[  421.796650][T10858]   lock(&sb->s_type->i_mutex_key#30);
[  421.802112][T10858]                                lock(&type->i_mutex_dir_key#13/2);
[  421.810118][T10858]                                lock(&sb->s_type->i_mutex_key#30);
[  421.818111][T10858]   lock(&type->i_mutex_dir_key#13/3);
[  421.823584][T10858] 
[  421.823584][T10858]  *** DEADLOCK ***
[  421.823584][T10858] 
[  421.831742][T10858] 3 locks held by syz.6.1496/10858:
[  421.836959][T10858]  #0: ffff88801fb839c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330
[  421.846228][T10858]  #1: ffff8880301ac418 (sb_writers#25){.+.+}-{0:0}, at: do_writev+0x261/0x480
[  421.855216][T10858]  #2: ffff88805ecc0990 (&sb->s_type->i_mutex_key#30){+.+.}-{3:3}, at: generic_file_write_iter+0x83/0x2e0
[  421.866534][T10858] 
[  421.866534][T10858] stack backtrace:
[  421.872417][T10858] CPU: 1 PID: 10858 Comm: syz.6.1496 Not tainted syzkaller #0
[  421.879891][T10858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  421.890020][T10858] Call Trace:
[  421.893332][T10858]  <TASK>
[  421.896305][T10858]  dump_stack_lvl+0x18c/0x250
[  421.901044][T10858]  ? load_image+0x420/0x420
[  421.905601][T10858]  ? show_regs_print_info+0x20/0x20
[  421.910942][T10858]  ? print_circular_bug+0x12b/0x1a0
[  421.916186][T10858]  check_noncircular+0x2fc/0x400
[  421.921174][T10858]  ? look_up_lock_class+0x75/0x140
[  421.926333][T10858]  ? print_deadlock_bug+0x5d0/0x5d0
[  421.931578][T10858]  ? lockdep_lock+0xf5/0x230
[  421.936217][T10858]  ? _find_first_zero_bit+0xd6/0x100
[  421.941540][T10858]  __lock_acquire+0x3a07/0x7eb0
[  421.946427][T10858]  ? unfix_nodes+0x971/0x9b0
[  421.951070][T10858]  ? __lock_acquire+0x1431/0x7eb0
[  421.956139][T10858]  ? verify_lock_unused+0x140/0x140
[  421.961389][T10858]  lock_acquire+0x19e/0x420
[  421.965933][T10858]  ? open_xa_dir+0x146/0x6f0
[  421.970568][T10858]  ? check_noncircular+0x18a/0x400
[  421.975818][T10858]  ? __might_sleep+0xe0/0xe0
[  421.980492][T10858]  ? read_lock_is_recursive+0x20/0x20
[  421.985921][T10858]  ? print_deadlock_bug+0x5d0/0x5d0
[  421.991161][T10858]  ? lockdep_lock+0xf5/0x230
[  421.995846][T10858]  ? lockdep_unlock+0x146/0x2e0
[  422.001885][T10858]  down_write_nested+0x9e/0x200
[  422.006790][T10858]  ? open_xa_dir+0x146/0x6f0
[  422.011427][T10858]  ? down_read_non_owner+0x310/0x310
[  422.016774][T10858]  ? __lock_acquire+0x36dd/0x7eb0
[  422.021847][T10858]  open_xa_dir+0x146/0x6f0
[  422.026319][T10858]  ? listxattr_filler+0x520/0x520
[  422.031396][T10858]  xattr_lookup+0x22/0x2a0
[  422.035858][T10858]  reiserfs_xattr_get+0x114/0x5a0
[  422.040910][T10858]  ? xattr_full_name+0x6f/0x80
[  422.045682][T10858]  ? security_get+0x69/0xb0
[  422.050651][T10858]  ? security_list+0x80/0x80
[  422.055270][T10858]  __vfs_getxattr+0x406/0x440
[  422.059968][T10858]  cap_inode_need_killpriv+0x45/0x60
[  422.065273][T10858]  security_inode_need_killpriv+0x62/0x90
[  422.071011][T10858]  __file_remove_privs+0x23f/0x600
[  422.076130][T10858]  ? file_remove_privs+0x20/0x20
[  422.081071][T10858]  ? verify_lock_unused+0x140/0x140
[  422.086286][T10858]  ? aa_path_link+0xf80/0xf80
[  422.090972][T10858]  ? generic_write_checks_count+0x36a/0x450
[  422.096882][T10858]  __generic_file_write_iter+0x7c/0x230
[  422.102466][T10858]  ? generic_file_write_iter+0x9b/0x2e0
[  422.108020][T10858]  generic_file_write_iter+0xaf/0x2e0
[  422.113401][T10858]  do_iter_write+0x747/0xc50
[  422.118004][T10858]  ? vfs_iter_write+0xa0/0xa0
[  422.122701][T10858]  ? rcu_read_lock_any_held+0xb4/0x140
[  422.128171][T10858]  do_writev+0x27f/0x480
[  422.132415][T10858]  ? do_readv+0x460/0x460
[  422.136757][T10858]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  422.142735][T10858]  ? lock_chain_count+0x20/0x20
[  422.147599][T10858]  ? lockdep_hardirqs_on+0x98/0x150
[  422.152830][T10858]  do_syscall_64+0x55/0xb0
[  422.157261][T10858]  ? clear_bhb_loop+0x40/0x90
[  422.161950][T10858]  ? clear_bhb_loop+0x40/0x90
[  422.166640][T10858]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  422.172541][T10858] RIP: 0033:0x7fb7bfb9e159
[  422.176985][T10858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  422.196603][T10858] RSP: 002b:00007fb7c09d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  422.205019][T10858] RAX: ffffffffffffffda RBX: 00007fb7bfe25fa0 RCX: 00007fb7bfb9e159
[  422.212997][T10858] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004
[  422.220980][T10858] RBP: 00007fb7bfc3506b R08: 0000000000000000 R09: 0000000000000000
[  422.228955][T10858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  422.236942][T10858] R13: 00007fb7bfe26038 R14: 00007fb7bfe25fa0 R15: 00007fffa0ae1d68
[  422.244930][T10858]  </TASK>
[  423.131554][ T1099] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  423.142200][ T1099] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.226551][ T1099] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  423.258168][ T1099] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.328158][ T1099] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  423.340487][ T1099] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.411190][ T1099] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode
[  423.433470][ T1099] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  423.453435][ T1099] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.497291][ T1099] dummy0: left promiscuous mode
[  424.508029][ T1099] hsr_slave_0: left promiscuous mode
[  424.514044][ T1099] hsr_slave_1: left promiscuous mode
[  424.535900][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  424.549289][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0
[  424.557529][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  424.566623][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1
[  424.575025][ T1099] bridge_slave_1: left allmulticast mode
[  424.580705][ T1099] bridge_slave_1: left promiscuous mode
[  424.588456][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.597668][ T1099] bridge_slave_0: left allmulticast mode
[  424.607395][ T1099] bridge_slave_0: left promiscuous mode
[  424.616840][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.631806][ T1099] veth1_macvtap: left promiscuous mode
[  424.637575][ T1099] veth0_macvtap: left promiscuous mode
[  424.646922][ T1099] veth1_vlan: left promiscuous mode
[  424.652280][ T1099] veth0_vlan: left promiscuous mode
[  424.792009][ T1099] bond1 (unregistering): Released all slaves
[  424.951061][ T1099] team0 (unregistering): Port device team_slave_1 removed
[  424.990765][ T1099] team0 (unregistering): Port device team_slave_0 removed
[  425.027559][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  425.062743][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  425.176804][ T1099] bond0 (unregistering): Released all slaves
[  425.629218][ T1099] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.186931][ T1099] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.228298][ T1099] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.280776][ T1099] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.400601][ T1099] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.450773][ T1099] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.509802][ T1099] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.549727][ T1099] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.685075][ T1099] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  426.697567][ T1099] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.755892][ T1099] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  426.767666][ T1099] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.819883][ T1099] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  426.830366][ T1099] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.904613][ T1099] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  426.915366][ T1099] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.032460][ T1099] hsr_slave_0: left promiscuous mode
[  428.038321][ T1099] hsr_slave_1: left promiscuous mode
[  428.046856][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  428.055147][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0
[  428.062668][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  428.070111][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1
[  428.077967][ T1099] bridge_slave_1: left allmulticast mode
[  428.083881][ T1099] bridge_slave_1: left promiscuous mode
[  428.089600][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.097949][ T1099] bridge_slave_0: left allmulticast mode
[  428.103827][ T1099] bridge_slave_0: left promiscuous mode
[  428.109479][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state
[  428.120698][ T1099] hsr_slave_0: left promiscuous mode
[  428.126841][ T1099] hsr_slave_1: left promiscuous mode
[  428.132522][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  428.139986][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0
[  428.147524][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  428.155052][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1
[  428.162536][ T1099] bridge_slave_1: left allmulticast mode
[  428.169594][ T1099] bridge_slave_1: left promiscuous mode
[  428.175373][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.184590][ T1099] bridge_slave_0: left allmulticast mode
[  428.190246][ T1099] bridge_slave_0: left promiscuous mode
[  428.197159][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state
[  428.209262][ T1099] hsr_slave_0: left promiscuous mode
[  428.215435][ T1099] hsr_slave_1: left promiscuous mode
[  428.221112][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  428.228564][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0
[  428.236168][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  428.244663][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1
[  428.252115][ T1099] bridge_slave_1: left allmulticast mode
[  428.257919][ T1099] bridge_slave_1: left promiscuous mode
[  428.263780][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.272291][ T1099] bridge_slave_0: left allmulticast mode
[  428.278225][ T1099] bridge_slave_0: left promiscuous mode
[  428.283973][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state
[  428.296404][ T1099] veth1_macvtap: left promiscuous mode
[  428.301997][ T1099] veth0_macvtap: left promiscuous mode
[  428.308451][ T1099] veth1_vlan: left promiscuous mode
[  428.314769][ T1099] veth0_vlan: left promiscuous mode
[  428.320868][ T1099] veth1_macvtap: left promiscuous mode
[  428.326451][ T1099] veth0_macvtap: left promiscuous mode
[  428.332024][ T1099] veth1_vlan: left promiscuous mode
[  428.337544][ T1099] veth0_vlan: left promiscuous mode
[  428.344072][ T1099] veth1_macvtap: left promiscuous mode
[  428.349564][ T1099] veth0_macvtap: left promiscuous mode
[  428.355750][ T1099] veth1_vlan: left promiscuous mode
[  428.361017][ T1099] veth0_vlan: left promiscuous mode
[  428.691639][ T1099] team0 (unregistering): Port device team_slave_1 removed
[  428.704761][ T1099] team0 (unregistering): Port device team_slave_0 removed
[  428.736434][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  428.778254][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  428.840679][ T1099] bond0 (unregistering): Released all slaves
[  429.004761][ T1099] team0 (unregistering): Port device team_slave_1 removed
[  429.039146][ T1099] team0 (unregistering): Port device team_slave_0 removed
[  429.070328][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  429.108857][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  429.187821][ T1099] bond0 (unregistering): Released all slaves
[  429.367114][ T1099] team0 (unregistering): Port device team_slave_1 removed
[  429.401351][ T1099] team0 (unregistering): Port device team_slave_0 removed
[  429.434814][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  429.469851][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  429.542132][ T1099] bond0 (unregistering): Released all slaves
[  430.377208][ T1099] IPVS: stop unused estimator thread 0...