last executing test programs:

6m35.270504653s ago: executing program 3 (id=2622):
read$msr(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x1, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0x10, 0x6, 0xfd, 0xfc, 0x1, 0xfd, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff})
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x82)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r3, &(0x7f0000006300), 0x2000, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102)
write$cgroup_int(r6, &(0x7f0000000040)=0x8000000001cb, 0x12)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

6m34.80671916s ago: executing program 3 (id=2629):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0})
syz_clone3(&(0x7f0000000300)={0x28000800, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_b'])
chdir(&(0x7f0000000100)='./file0\x00')
setresuid(0x0, 0xee00, 0x0)
symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
shmctl$SHM_UNLOCK(r3, 0xc)
r4 = socket(0x40000000015, 0x5, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040))
connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)

6m34.449996625s ago: executing program 3 (id=2634):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
read(r0, 0x0, 0x0)

6m34.195185168s ago: executing program 3 (id=2635):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000000c0), 0xfb, 0x4b6, &(0x7f0000000700)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x800)

6m33.155234635s ago: executing program 3 (id=2639):
syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x1, 0x17d, &(0x7f0000001ac0)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

6m32.595120282s ago: executing program 3 (id=2640):
read$msr(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x1, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0x10, 0x6, 0xfd, 0xfc, 0x1, 0xfd, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff})
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x82)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r3, &(0x7f0000006300), 0x2000, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102)
write$cgroup_int(r6, &(0x7f0000000040)=0x8000000001cb, 0x12)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

6m31.760445567s ago: executing program 32 (id=2640):
read$msr(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x1, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0x10, 0x6, 0xfd, 0xfc, 0x1, 0xfd, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff})
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x82)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r3, &(0x7f0000006300), 0x2000, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102)
write$cgroup_int(r6, &(0x7f0000000040)=0x8000000001cb, 0x12)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

4m5.392942266s ago: executing program 0 (id=3322):
read$msr(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x1, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0x10, 0x6, 0xfd, 0xfc, 0x1, 0xfd, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff})
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x82)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r3, &(0x7f0000006300), 0x2000, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102)
write$cgroup_int(r6, &(0x7f0000000040)=0x8000000001cb, 0x12)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

4m4.507231271s ago: executing program 0 (id=3327):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a"], 0x4c}}, 0x0)

4m3.879942592s ago: executing program 0 (id=3329):
r0 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x7f00000, 0x4)
bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
sendto$unix(r0, 0x0, 0xfffffffffffffceb, 0x0, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e21}, 0x6e)

4m3.391404584s ago: executing program 0 (id=3336):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0x0, 0x0, 0xffffffff}, 0xfffffbfe, 0x0, 0x4, 0x4, 0x9, 0x1c, 0x40, 0x0, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0)

4m2.802055407s ago: executing program 0 (id=3340):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"})

4m2.090103996s ago: executing program 0 (id=3346):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat(r0, &(0x7f0000000140)='test\x00', 0x42, 0x93)
write$P9_RLERRORu(r1, &(0x7f0000001640)=ANY=[@ANYBLOB="0e0000000003000100"], 0xe)

3m46.227624811s ago: executing program 33 (id=3346):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat(r0, &(0x7f0000000140)='test\x00', 0x42, 0x93)
write$P9_RLERRORu(r1, &(0x7f0000001640)=ANY=[@ANYBLOB="0e0000000003000100"], 0xe)

2m6.443313045s ago: executing program 5 (id=4020):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'tunl0\x00'}}, 0x1e)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @broadcast, 'veth0_virt_wifi\x00'}}, 0x1e)
close(0x3)

2m6.298989795s ago: executing program 5 (id=4025):
r0 = fanotify_init(0x10, 0x8000)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES16=0x0], 0x47, 0xc15, &(0x7f0000001940)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
ioctl$sock_netdev_private(r2, 0x89f0, &(0x7f0000000000)="a6cc04e2d83a")
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_async', 0x8182, 0x10)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, 0x0)
write$yama_ptrace_scope(r4, &(0x7f00000003c0)='3\x00', 0x2)
sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0))
syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x307b87f, 0x0, 0x3, 0x0, &(0x7f0000000240))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2000c95, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xff, 0x1557, &(0x7f0000004a40)="$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")
fstat(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x181441, 0x148)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0xfdef)
fchown(0xffffffffffffffff, r5, 0xee01)
fanotify_mark(r0, 0x455, 0x8000000, r1, 0x0)

2m5.159085903s ago: executing program 5 (id=4040):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x3, 0x1, 0x8}]}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20004db0"], 0x0)

2m4.782503982s ago: executing program 5 (id=4042):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000001c0)={[{}, {@init_itable}, {@nolazytime}, {@noblock_validity}]}, 0x3, 0x453, &(0x7f0000000780)="$eJzs3M9vFFUcAPDvzHaLCNiKqPxS8Vck/mgpoHLwoEYTD5iY6EGPTVsIslBDayKEKBiDJ2NMvBuP/gt60Ysxnoxe9W5IiOECeFozuzN0d7u7tNsti93PJxl4b+ZN3/v2zdt9M2+3AQytfdk/ScTWiPgzIsbq2eYC++r/Xb96fubG1fMzSVSrb/+T1Mpdu3p+pihanLclz+xPI9LPktjTpt6Fs+dOTlcqc2fy/OTiqQ8mF86ee+7Eqenjc8fnTh88cuTwoakXXzj4fF/izNp0bffH83t3vfHeV28e/aIp/pY41mznpsYf3daT1WrfqrsTbGtIJyMDbAirUoqIrLvKtfE/FqVY6ryxeP3TgTYOWFfVarW6pfPhC1VgA0uiOW/Iw7Ao3uiz+99ia50EvLx+04+Bu/JK/QYoi/t6vtWPjESalym33N/2076IePfCv99kW/T7OQQAQBs/ZvOfZ9vN/9J4oKHcPfna0HhE3BsR2yPivojYERH3R9TKPhgRO1dZf+siyfL5T3q5p8BWKJv/vZSvbTXP/4rZX4yX8ty2Wvzl5NiJytyB/HeyP8qbsvxUlzp+eu2PLzsda5z/ZVtWfzEXzNtxeWRT8zmz04vTa4m50ZWLEbtH2sWf3FwJSCJiV0Ts7rGOE09/t7fTsVvH30Uf1pmq30Y8Ve//C9ESfyHpvj45eVdU5g5MFlfFcr/+dumtTvWvKf4+yPr/7rbX/834x5PG9dqF1ddx6a/PO97T9Hr9jybv1NKj+b6PphcXz0xFjCZH641u3H9w6dwiX5T/4ff6/nbjf3ss/Sb2RER2ET8UEQ9HxCN52x+NiMci4vEu8f/y6hPv9x7/+sr6f3ZV/b+UGI3WPe0TpZM/f99U6fiy+G907//DtdT+fM9KXv9W0q7ermYAAAD4/0kjYmsk6cTNdJpOTNQ/L78jIq3MLyw+c2z+w9Oz9e8IjEc5LZ50jTU8D53Kb+vr+YsRUf9oQXH8UP7c+OvS5lp+Yma+Mjvo4GHIbekw/jN/lwbdOmDd+b4WDC/jH4aX8Q/Dy/iH4dVm/G8eRDuA26/d+/8nA2gHcPu1jH/LfjBE3P/D8Oo4/jfyX/4Barz/w1Ba2By3/pJ810Txk3o8fcMmonxHNGPtiWrStnMjHXTDJNYzMdjXJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH75LwAA//8HW+BC")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0)

2m4.463222588s ago: executing program 5 (id=4045):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000086dd0203050009000a004000683739ed122889fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef)

2m3.911176034s ago: executing program 5 (id=4054):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000002000)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1000}]})

2m3.398558701s ago: executing program 34 (id=4054):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000002000)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1000}]})

3.574884856s ago: executing program 6 (id=4989):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x0, 0x1, 0x4, 0x0, 0xfffffff9, {0x0, 0xea60}, {0x1, 0xc, 0x9, 0x48, 0x3, 0x8}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x496000})

3.122899971s ago: executing program 6 (id=4996):
syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0))
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f000001fc00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1814011, 0x0, 0x40, 0x0, &(0x7f0000000140))

3.043140288s ago: executing program 7 (id=4997):
r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000004c0)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x74, {"488d054900000048c7c30052020066890348c1e8106689430648c1e810894308b91b0000000f320d000c0000b805000000b9420d00000f01c131d2b8ff0100000f30b93008000031d2b8200000000f30fb90909090f4b90b08000031d231c00f3048cf"}}], 0x74})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2.672769736s ago: executing program 1 (id=5000):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cl1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cl1/spaces/ls1\x00', 0x1ff)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cl1/spaces/ls1/nodes/1\x00', 0x200)

2.612282359s ago: executing program 7 (id=5001):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
read$alg(r1, &(0x7f0000002300)=""/4128, 0x1020)
sendmmsg$alg(r1, &(0x7f00000020c0)=[{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001440)="a79fec4b64c4e0a6d65dc17abc6d81e8b26ba47ef485f966d457638623d7ef5407e1777dedd53db8dc407d057a40a121838efc9c90ad74b3594594f9e8842166f7db6b1449b4d90657947223ae381c211c39b7661dcca514681391ff63e9b3208c2c5570ef5f40f05c1c173004c1d520da48599811f2633040efc8d5791839b0be5c9eac30d2f501ad81c31301db9b8ae8dd28716c0199599964b21f26446644702ad4c133ef1b98c1b68e37cf642fe35d0390d00d2896411137db9558da1f845089f797634853ddcce7db6cb45e5271d723bd71f7", 0xd5}, {&(0x7f0000000200)="ef01de96e8e2d2559a54df7c5380bf9f5b7db339e49a", 0x16}, {&(0x7f0000003780)="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", 0xf26}], 0x3}], 0x1, 0x20004080)

2.611527149s ago: executing program 2 (id=5012):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70ad25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff3, 0x5}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)

2.478507877s ago: executing program 1 (id=5002):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
open$dir(&(0x7f00000000c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x800, 0xa0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x82002, 0x4)
read(r0, &(0x7f0000000c00)=""/4096, 0x1000)

2.1792978s ago: executing program 1 (id=5005):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", <r1=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00", r1, <r2=>0xffffffffffffffff})
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0))
dup3(r1, r0, 0x0)

2.126865762s ago: executing program 2 (id=5006):
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000880)=@vmx={0xa, 0x0, 0x2080, {0x70000, 0x10000, {0x2}}, {"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", "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"}})

1.936157442s ago: executing program 4 (id=5008):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a0000080480ff7f0905811765"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
write$char_usb(r1, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
fsync(r2)
syz_usb_control_io(r0, 0x0, 0x0)

1.935992192s ago: executing program 6 (id=5009):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0xa, 0x4000, 0x0, 0x1}, 'syz1\x00', 0x26})
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x3)
ioctl$UI_DEV_CREATE(r0, 0x5501)

1.935545622s ago: executing program 1 (id=5010):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000340)={0x40, 0x31, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000240)={0x84, &(0x7f0000000140)={0x20, 0x41}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000580)={0x20, 0x17, 0x91, "09271ceddf0679b4d9c97089b1a9ee410e8072dc778ce70bf2c0ea9720d72a87cbe6825ee949f2b6cd232231b1946aec0b9ac399cceea9136179fdedacd978a793a05229b1e9ffd7e1470cc0b8e09c9d38468e71b7bb0198ff4cd468a1f92c9d461a8d2bf0b8a5f8e0d67e75cb0d35c791e00fc966bd726034c295c2e8bb6d6458e7186f0bde983e253cf381d6f73b90cd"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.644047313s ago: executing program 7 (id=5011):
syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@bh}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x104)
write(r0, &(0x7f0000000000)='3', 0x4e)
timer_create(0x98e63d26ce15b27f, 0x0, 0x0)

906.247769ms ago: executing program 2 (id=5013):
r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000004c0)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x74, {"488d054900000048c7c30052020066890348c1e8106689430648c1e810894308b91b0000000f320d000c0000b805000000b9420d00000f01c131d2b8ff0100000f30b93008000031d2b8200000000f30fb90909090f4b90b08000031d231c00f3048cf"}}], 0x74})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

906.149669ms ago: executing program 7 (id=5014):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0xfffffffe)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
write(r1, &(0x7f0000000080)="a48c3fe8e4", 0x5)

905.620409ms ago: executing program 6 (id=5023):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'lo\x00', 0x1}, 0x18)
socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1)
sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x301}, 0x14}}, 0x0)

905.292549ms ago: executing program 1 (id=5015):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x8ac02)
syz_usb_disconnect(r0)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x8040480)
pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x40000000, 0x0, 0x100000000}, 0x0, 0x0, 0x0)

905.193649ms ago: executing program 4 (id=5016):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000000, 0x0, 0x0})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

742.424184ms ago: executing program 4 (id=5017):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4)
unshare(0x2c020400)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x48040, 0x110)
unlink(&(0x7f0000000200)='./file0\x00')

735.971845ms ago: executing program 6 (id=5018):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f00000005c0)={0x6c, 0x101, 0x0, 0x595f314c, 0x39, "1edc064af900"})
write$UHID_INPUT(r1, &(0x7f00000026c0)={0xd, {"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", 0x1000}}, 0x1006)
io_setup(0x20fe, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x2, 0x0, 0x0, r1, &(0x7f0000000340)='\t', 0x1, 0x600}])

609.618092ms ago: executing program 2 (id=5019):
socket$inet_tcp(0x2, 0x1, 0x0)
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0, 0x1c1, 0x6}, 0x18)
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x46d0, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x4f, 0x4f, 0x4f, 0x50, 0x46]}, 0x38)

609.499862ms ago: executing program 7 (id=5020):
syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@partition={'partition', 0x3d, 0x6}}, {@gid_forget}, {@session={'session', 0x3d, 0xfe8}}, {@noadinicb}, {@anchor}, {@uid_forget}]}, 0xfe, 0xc24, &(0x7f0000001480)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffc)
open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
sendfile(r0, r1, 0x0, 0x1000000201001)

458.608764ms ago: executing program 4 (id=5021):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x8, @loopback, 0x3}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

458.034594ms ago: executing program 2 (id=5022):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x1, 0x1}})
read(r0, &(0x7f0000000740)=""/4092, 0xffc)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

251.312528ms ago: executing program 4 (id=5024):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil)

197.833779ms ago: executing program 2 (id=5025):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a0000080480ff7f0905811765"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
write$char_usb(r1, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
fsync(r2)
syz_usb_control_io(r0, 0x0, 0x0)

161.683617ms ago: executing program 6 (id=5026):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000b80)={[{@grpid}, {@nobh}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nojournal_checksum}, {@minixdf}, {@bh}]}, 0x7, 0xbaf, &(0x7f00000017c0)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000000)='./bus\x00', 0x88d80a, 0x0, 0x20, 0x0, &(0x7f0000000000))
chdir(&(0x7f00000003c0)='./bus\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, &(0x7f0000002380)=""/4093, 0xffd)

31.232084ms ago: executing program 7 (id=5027):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, &(0x7f0000000000)=0x10)
connect$bt_rfcomm(r1, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11}, 0xa)
shutdown(r0, 0x1)

24.212735ms ago: executing program 1 (id=5028):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000000, 0x0, 0x0})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

0s ago: executing program 4 (id=5029):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'lo\x00', 0x1}, 0x18)
socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1)
sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x301}, 0x14}}, 0x0)

kernel console output (not intermixed with test programs):

00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  756.528064][T16013] RSP: 002b:00007f2c2668b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000005
[  756.536509][T16013] RAX: ffffffffffffffda RBX: 00007f2c25a25fa0 RCX: 00007f2c2579e159
[  756.544506][T16013] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  756.552502][T16013] RBP: 00007f2c2583506b R08: 0000000000000000 R09: 0000000000000000
[  756.560503][T16013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  756.568514][T16013] R13: 00007f2c25a26038 R14: 00007f2c25a25fa0 R15: 00007ffd45828538
[  756.576527][T16013]  </TASK>
[  756.588675][T15751] jffs2: Further such events for this erase block will not be printed
[  756.597590][T15751] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x8a23 instead
[  756.608266][T15751] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0699 instead
[  756.619490][T15751] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d008: 0x8b47 instead
[  756.642243][T15751] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d00c: 0x53bf instead
[  756.661115][T15751] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d010: 0x770a instead
[  756.679990][T16013] ERROR: Out of memory at tomoyo_realpath_from_path.
[  756.695543][T15751] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d014: 0x753f instead
[  756.744838][T15751] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x6a07 instead
[  756.786798][T15751] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d01c: 0x1bab instead
[  756.847903][T15751] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d020: 0x63b3 instead
[  756.890797][T15751] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d024: 0xcf20 instead
[  756.920863][T15751] jffs2: Further such events for this erase block will not be printed
[  756.939797][T15751] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0xc744 instead
[  756.970739][T15751] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x6108 instead
[  757.005935][T16000] chnl_net:caif_netlink_parms(): no params data found
[  757.174350][T15751] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e008: 0x261e instead
[  757.188626][T15751] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e00c: 0x26d1 instead
[  757.206519][T15751] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e010: 0x7c60 instead
[  757.217889][T15751] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e014: 0x0537 instead
[  757.240118][T16032] fuse: Bad value for 'fd'
[  757.255990][T15751] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xe8f1 instead
[  757.266532][T15751] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e01c: 0xa19e instead
[  757.310933][T15751] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e020: 0x603c instead
[  757.351192][T15751] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e024: 0xe7e2 instead
[  757.383661][T16000] bridge0: port 1(bridge_slave_0) entered blocking state
[  757.391031][T16000] bridge0: port 1(bridge_slave_0) entered disabled state
[  757.399323][T16000] device bridge_slave_0 entered promiscuous mode
[  757.412587][T16000] bridge0: port 2(bridge_slave_1) entered blocking state
[  757.419805][T16000] bridge0: port 2(bridge_slave_1) entered disabled state
[  757.425141][T15751] jffs2: Further such events for this erase block will not be printed
[  757.432372][T16000] device bridge_slave_1 entered promiscuous mode
[  757.464211][T16000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  757.477359][T16000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  757.487696][T15751] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x570b instead
[  757.520347][T16000] team0: Port device team_slave_0 added
[  757.528872][T16000] team0: Port device team_slave_1 added
[  757.551338][T15751] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x620a instead
[  757.582616][T15751] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f008: 0x3bfd instead
[  757.608336][T15751] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f00c: 0xa8df instead
[  757.621352][T16000] batman_adv: batadv0: Adding interface: batadv_slave_0
[  757.628358][T16000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  757.647449][T15751] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f010: 0x81f3 instead
[  757.724077][T15751] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f014: 0x76c7 instead
[  757.755495][T16000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  757.766906][T15751] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x26c8 instead
[  757.799240][T15751] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f01c: 0xaebb instead
[  757.826395][T16000] batman_adv: batadv0: Adding interface: batadv_slave_1
[  757.834612][T15751] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f020: 0x03fa instead
[  757.835075][ T4290] Bluetooth: hci5: command 0x0409 tx timeout
[  757.904881][T16000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  757.983857][T15751] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f024: 0xe2a3 instead
[  758.022703][T15751] jffs2: Further such events for this erase block will not be printed
[  758.066187][T15751] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  758.086601][T16000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  758.098077][T16049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3438'.
[  758.107413][T15751] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[  758.531964][T16050] netlink: 34959 bytes leftover after parsing attributes in process `syz.4.3438'.
[  758.857765][T16000] device hsr_slave_0 entered promiscuous mode
[  758.894553][T16000] device hsr_slave_1 entered promiscuous mode
[  758.931974][T16000] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  758.944305][T16000] Cannot create hsr debugfs directory
[  759.235377][T16067] fuse: Bad value for 'fd'
[  759.912254][ T4290] Bluetooth: hci5: command 0x041b tx timeout
[  760.244892][T10093] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  760.345075][T16084] netlink: 'syz.5.3448': attribute type 10 has an invalid length.
[  760.448540][T10093] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  760.495129][T16000] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  760.513652][T16000] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  760.576267][T10093] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  760.628747][T16000] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  760.653979][T16000] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  760.710272][T16092] loop5: detected capacity change from 0 to 512
[  760.751003][T16092] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  760.790867][T10093] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  760.800228][T16092] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  760.907113][T16092] EXT4-fs (loop5): 1 truncate cleaned up
[  760.930804][T16092] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  761.084689][T16092] EXT4-fs (loop5): shut down requested (2)
[  761.629190][T16000] 8021q: adding VLAN 0 to HW filter on device bond0
[  761.729907][T10053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  761.748555][T10053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  761.802802][T16000] 8021q: adding VLAN 0 to HW filter on device team0
[  761.839254][T13262] EXT4-fs (loop5): unmounting filesystem.
[  761.848878][T10093] device .*! left promiscuous mode
[  761.990886][ T4290] Bluetooth: hci5: command 0x040f tx timeout
[  762.061609][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  762.081000][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  762.110677][ T4463] bridge0: port 1(bridge_slave_0) entered blocking state
[  762.117917][ T4463] bridge0: port 1(bridge_slave_0) entered forwarding state
[  762.211533][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  762.276763][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  762.296224][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  762.389483][ T4463] bridge0: port 2(bridge_slave_1) entered blocking state
[  762.396792][ T4463] bridge0: port 2(bridge_slave_1) entered forwarding state
[  762.445784][T10093] tipc: Disabling bearer <udp:syz0>
[  762.454058][T10093] tipc: Left network mode
[  762.476848][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  762.536445][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  762.562295][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  762.663722][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  762.751658][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  763.587245][T10093] bridge0: port 3(ip6gretap0) entered disabled state
[  763.838951][T10093] device ip6gretap0 left promiscuous mode
[  763.855309][T10093] bridge0: port 3(ip6gretap0) entered disabled state
[  763.921022][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  763.973479][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  764.021445][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  764.063967][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  764.071295][ T4290] Bluetooth: hci5: command 0x0419 tx timeout
[  764.141815][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  764.150433][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  764.411172][T16000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  764.715245][T16139] loop5: detected capacity change from 0 to 32768
[  764.754496][T16139] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.3464 (16139)
[  764.903556][T16139] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  764.946504][T16139] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  764.990313][T16139] BTRFS info (device loop5): setting nodatasum
[  765.030891][T16139] BTRFS info (device loop5): force zlib compression, level 3
[  765.038375][T16139] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  765.109131][T16139] BTRFS info (device loop5): use lzo compression, level 0
[  765.136164][T16139] BTRFS info (device loop5): turning on flush-on-commit
[  765.153827][T16139] BTRFS info (device loop5): enabling auto defrag
[  765.167268][T16139] BTRFS info (device loop5): max_inline at 4096
[  765.191538][T16139] BTRFS info (device loop5): using free space tree
[  765.497692][T16139] BTRFS info (device loop5): enabling ssd optimizations
[  765.714027][   T27] audit: type=1800 audit(1790274817.583:46): pid=16139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3464" name="file1" dev="loop5" ino=260 res=0 errno=0
[  765.923767][T13262] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  766.149949][T16006] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop5 scanned by udevd (16006)
[  766.337820][T16000] 8021q: adding VLAN 0 to HW filter on device batadv0
[  766.348214][T10053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  766.381099][T10053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  766.840235][T10093] device hsr_slave_0 left promiscuous mode
[  766.924106][T10093] device hsr_slave_1 left promiscuous mode
[  766.979752][T10093] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  766.993450][T10093] batman_adv: batadv0: Removing interface: batadv_slave_0
[  767.041392][T10093] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  767.070405][T10093] batman_adv: batadv0: Removing interface: batadv_slave_1
[  767.161579][T10093] device bridge_slave_1 left promiscuous mode
[  767.181222][T10093] bridge0: port 2(bridge_slave_1) entered disabled state
[  767.220964][T10093] device bridge_slave_0 left promiscuous mode
[  767.227272][T10093] bridge0: port 1(bridge_slave_0) entered disabled state
[  767.895321][T10093] device veth1_macvtap left promiscuous mode
[  768.021453][T10093] device veth0_macvtap left promiscuous mode
[  768.027873][T10093] device veth1_vlan left promiscuous mode
[  768.033842][T10093] device veth0_vlan left promiscuous mode
[  768.349677][T10093] bond1 (unregistering): Released all slaves
[  768.937842][T10093] team0 (unregistering): Port device team_slave_1 removed
[  768.988309][T10093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  769.042280][T10093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  769.460843][T10093] bond0 (unregistering): Released all slaves
[  769.655057][T15730] lo speed is unknown, defaulting to 1000
[  769.918683][T16261] netlink: 'syz.5.3485': attribute type 29 has an invalid length.
[  769.948610][T16261] netlink: 'syz.5.3485': attribute type 29 has an invalid length.
[  769.987294][T16267] netlink: 'syz.5.3485': attribute type 29 has an invalid length.
[  770.025150][T16268] netlink: 'syz.1.3487': attribute type 10 has an invalid length.
[  770.591431][T16261] netlink: 'syz.5.3485': attribute type 29 has an invalid length.
[  770.606331][T16267] netlink: 'syz.5.3485': attribute type 29 has an invalid length.
[  770.945147][T16293] FAULT_INJECTION: forcing a failure.
[  770.945147][T16293] name failslab, interval 1, probability 0, space 0, times 0
[  770.995275][T16293] CPU: 1 PID: 16293 Comm: syz.5.3491 Not tainted syzkaller #0
[  771.002847][T16293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  771.012952][T16293] Call Trace:
[  771.016268][T16293]  <TASK>
[  771.019252][T16293]  dump_stack_lvl+0x188/0x24e
[  771.023995][T16293]  ? show_regs_print_info+0x12/0x12
[  771.029246][T16293]  ? load_image+0x410/0x410
[  771.033823][T16293]  ? __might_sleep+0xd0/0xd0
[  771.038458][T16293]  ? __lock_acquire+0x7c40/0x7c40
[  771.043541][T16293]  should_fail_ex+0x390/0x4c0
[  771.048291][T16293]  should_failslab+0x5/0x20
[  771.052863][T16293]  slab_pre_alloc_hook+0x59/0x300
[  771.057989][T16293]  ? __lock_acquire+0x7c40/0x7c40
[  771.063076][T16293]  ? security_prepare_creds+0x47/0x130
[  771.068598][T16293]  __kmem_cache_alloc_node+0x4f/0x270
[  771.074061][T16293]  ? security_prepare_creds+0x47/0x130
[  771.079567][T16293]  __kmalloc+0xa3/0x240
[  771.083799][T16293]  security_prepare_creds+0x47/0x130
[  771.089136][T16293]  prepare_creds+0x450/0x610
[  771.093859][T16293]  lookup_user_key+0x2b4/0x1110
[  771.098831][T16293]  ? lookup_user_key_possessed+0x40/0x40
[  771.104538][T16293]  ? search_process_keyrings_rcu+0x2b0/0x2b0
[  771.110580][T16293]  ? __might_fault+0xc2/0x120
[  771.115384][T16293]  ? __might_fault+0xa6/0x120
[  771.120112][T16293]  __se_sys_add_key+0x311/0x410
[  771.125011][T16293]  ? __x64_sys_add_key+0xc0/0xc0
[  771.130000][T16293]  ? lockdep_hardirqs_on+0x94/0x140
[  771.135254][T16293]  ? __x64_sys_add_key+0x1c/0xc0
[  771.140246][T16293]  do_syscall_64+0x4c/0xa0
[  771.144712][T16293]  ? clear_bhb_loop+0x60/0xb0
[  771.149437][T16293]  ? clear_bhb_loop+0x60/0xb0
[  771.154170][T16293]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  771.160124][T16293] RIP: 0033:0x7f2c2579e159
[  771.164584][T16293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  771.184346][T16293] RSP: 002b:00007f2c2668b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  771.192833][T16293] RAX: ffffffffffffffda RBX: 00007f2c25a25fa0 RCX: 00007f2c2579e159
[  771.200856][T16293] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[  771.208886][T16293] RBP: 00007f2c2583506b R08: ffffffffffffffff R09: 0000000000000000
[  771.216913][T16293] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  771.224938][T16293] R13: 00007f2c25a26038 R14: 00007f2c25a25fa0 R15: 00007ffd45828538
[  771.232977][T16293]  </TASK>
[  771.289301][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  771.302069][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  772.136842][T16000] device veth0_vlan entered promiscuous mode
[  772.186897][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  772.231689][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  772.277090][T16000] device veth1_vlan entered promiscuous mode
[  772.315482][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  772.341882][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  772.396394][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  772.414080][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  772.436484][T16304] bridge0: port 1(bridge_slave_0) entered disabled state
[  772.465647][T16000] device veth0_macvtap entered promiscuous mode
[  772.473373][T16307] 9pnet_fd: Insufficient options for proto=fd
[  772.488630][T16000] device veth1_macvtap entered promiscuous mode
[  772.537296][T16000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  772.568487][T16000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  772.595155][T16000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  772.650741][T16000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  772.674377][T16000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  772.704425][T16000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  772.746546][T16000] batman_adv: batadv0: Interface activated: batadv_slave_0
[  772.784734][T16000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  772.823872][T16000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  772.845761][T16000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  772.884986][T16000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  772.913201][T16000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  772.967288][T16000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  773.001604][T16000] batman_adv: batadv0: Interface activated: batadv_slave_1
[  773.035303][T16320] loop5: detected capacity change from 0 to 1024
[  773.042325][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  773.051497][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  773.081199][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  773.141639][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  773.171804][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  773.204022][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  773.246664][T16000] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  773.290301][T16000] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  773.338624][T16000] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  773.400707][T16000] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  773.507389][T16320] hfsplus: xattr searching failed
[  773.708839][ T4593] hfsplus: b-tree write err: -5, ino 3
[  773.722324][ T4463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  773.758852][ T4463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  773.787735][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  773.886508][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  773.929435][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  773.950368][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  775.273658][T16353] loop6: detected capacity change from 0 to 2048
[  775.343289][T16353] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  780.073626][T16424] loop5: detected capacity change from 0 to 2048
[  780.122783][T16424] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  782.480971][T14748] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  782.672982][T14748] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  782.700724][T14748] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  782.734266][T14748] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  782.760990][T14748] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  782.800348][T14748] usb 7-1: config 0 descriptor??
[  782.835841][T14748] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  783.074205][T16473] netlink: 27 bytes leftover after parsing attributes in process `syz.6.3543'.
[  783.106148][ T4318] usb 7-1: USB disconnect, device number 2
[  783.517465][T16503] loop5: detected capacity change from 0 to 2048
[  783.549869][T16503] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  783.869353][T16510] loop5: detected capacity change from 0 to 2048
[  783.926225][T16510] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  784.009833][T16516] loop6: detected capacity change from 0 to 256
[  784.193107][T16516] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  784.439558][T16523] fuse: Bad value for 'fd'
[  785.565941][ T4289] Bluetooth: hci2: command 0x0406 tx timeout
[  786.116842][T16549] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3568'.
[  787.859936][T16573] loop6: detected capacity change from 0 to 2048
[  787.882382][T16581] device ipvlan2 entered promiscuous mode
[  787.928995][T16573] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  787.964194][T16581] team0: Device ipvlan2 failed to register rx_handler
[  790.081160][ T4698] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  790.238062][T16616] tmpfs: Unknown parameter 'quota'
[  790.295761][ T4698] usb 6-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00
[  790.319957][ T4698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  791.087715][ T4698] usb 6-1: NFC: NXP PN500 firmware ver 0.0 now attached
[  791.296353][    C0] usb 6-1: NFC: Urb failure (status -71)
[  791.302781][ T4698] usb 6-1: NFC: Error on setting MAX_RETRIES config
[  791.312238][ T4698] pn533_usb: probe of 6-1:1.0 failed with error -71
[  791.439364][ T4698] usb 6-1: USB disconnect, device number 8
[  792.063116][T16667] syz.5.3602: attempt to access beyond end of device
[  792.063116][T16667] md32: rw=2048, sector=0, nr_sectors = 8 limit=0
[  792.851661][T16667] tmpfs: Unknown parameter 'quota'
[  793.157670][T16679] loop6: detected capacity change from 0 to 8
[  793.201752][T16679] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  793.239021][T16332] udevd[16332]: incorrect cramfs checksum on /dev/loop6
[  793.321273][T16332] udevd[16332]: incorrect cramfs checksum on /dev/loop6
[  794.041005][T16692] FAULT_INJECTION: forcing a failure.
[  794.041005][T16692] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  794.133614][T16692] CPU: 0 PID: 16692 Comm: syz.6.3617 Not tainted syzkaller #0
[  794.141296][T16692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  794.151396][T16692] Call Trace:
[  794.154709][T16692]  <TASK>
[  794.157686][T16692]  dump_stack_lvl+0x188/0x24e
[  794.162415][T16692]  ? show_regs_print_info+0x12/0x12
[  794.167661][T16692]  ? load_image+0x410/0x410
[  794.172215][T16692]  ? __lock_acquire+0x7c40/0x7c40
[  794.177297][T16692]  should_fail_ex+0x390/0x4c0
[  794.182031][T16692]  prepare_alloc_pages+0x1e1/0x5b0
[  794.187296][T16692]  __alloc_pages+0x130/0x4f0
[  794.191942][T16692]  ? zone_statistics+0x170/0x170
[  794.196935][T16692]  ? finish_task_switch+0x327/0x8e0
[  794.202186][T16692]  ? __schedule+0x1087/0x4030
[  794.206915][T16692]  __kmalloc_large_node+0x8c/0x1f0
[  794.212073][T16692]  ? iovec_from_user+0x83/0x360
[  794.217070][T16692]  __kmalloc+0x113/0x240
[  794.221378][T16692]  iovec_from_user+0x83/0x360
[  794.226109][T16692]  ? release_firmware_map_entry+0x187/0x187
[  794.232048][T16692]  __import_iovec+0x6c/0x510
[  794.236702][T16692]  import_iovec+0x6f/0xa0
[  794.241118][T16692]  process_vm_rw+0x1ed/0xc00
[  794.245761][T16692]  ? futex_wait_setup+0x270/0x270
[  794.250901][T16692]  ? __ia32_sys_process_vm_writev+0xf0/0xf0
[  794.256903][T16692]  ? lock_chain_count+0x20/0x20
[  794.261817][T16692]  __x64_sys_process_vm_writev+0xdc/0xf0
[  794.267507][T16692]  do_syscall_64+0x4c/0xa0
[  794.271969][T16692]  ? clear_bhb_loop+0x60/0xb0
[  794.276693][T16692]  ? clear_bhb_loop+0x60/0xb0
[  794.281460][T16692]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  794.287410][T16692] RIP: 0033:0x7f620959e159
[  794.291869][T16692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  794.311526][T16692] RSP: 002b:00007f620a453028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137
[  794.319999][T16692] RAX: ffffffffffffffda RBX: 00007f6209825fa0 RCX: 00007f620959e159
[  794.328020][T16692] RDX: 0000000000000310 RSI: 0000200000c22000 RDI: 0000000000000000
[  794.336045][T16692] RBP: 00007f620963506b R08: 0000000000000001 R09: 0000000000000000
[  794.344070][T16692] R10: 0000200000c22fa0 R11: 0000000000000246 R12: 0000000000000000
[  794.352094][T16692] R13: 00007f6209826038 R14: 00007f6209825fa0 R15: 00007fff10bf36e8
[  794.360139][T16692]  </TASK>
[  795.822884][T16723] program syz.6.3621 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  796.146408][T16734] loop5: detected capacity change from 0 to 2048
[  796.203444][T16734] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  798.816964][T16777] loop5: detected capacity change from 0 to 2048
[  798.883082][T16777] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  798.961603][ T4318] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  799.199344][ T4318] usb 7-1: Using ep0 maxpacket: 8
[  799.206978][ T4318] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  799.438074][ T4318] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  799.728265][ T4318] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  800.004687][ T4318] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  800.059688][ T4318] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  800.140754][ T4318] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  800.169087][ T4318] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  800.431619][ T4318] usb 7-1: usb_control_msg returned -32
[  800.437295][ T4318] usbtmc 7-1:16.0: can't read capabilities
[  802.249318][T16846] loop5: detected capacity change from 0 to 2048
[  802.296324][T16846] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  803.089223][ T1172] usb 7-1: USB disconnect, device number 3
[  803.662006][T16874] bridge0: port 1(bridge_slave_0) entered blocking state
[  803.669239][T16874] bridge0: port 1(bridge_slave_0) entered forwarding state
[  803.751261][ T4698] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  803.961028][ T4698] usb 7-1: Using ep0 maxpacket: 8
[  803.972662][ T4698] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[  803.996341][ T4698] usb 7-1: config 179 has no interface number 0
[  804.010661][ T4698] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  804.031974][ T4698] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  804.079580][ T4698] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  804.091601][ T4698] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  804.107599][ T4698] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  804.125588][ T4698] usb 7-1: config 179 interface 65 has no altsetting 0
[  804.133510][ T4698] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  804.147242][ T4698] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  804.197413][ T4698] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input10
[  804.425363][ T4698] usb 7-1: USB disconnect, device number 4
[  804.437015][ T4698] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  804.853443][T16916] fuse: Bad value for 'fd'
[  805.828027][T16952] fuse: Bad value for 'fd'
[  806.237004][T16966] netlink: 'syz.5.3695': attribute type 11 has an invalid length.
[  806.688292][T16949] loop6: detected capacity change from 0 to 40427
[  806.754777][T16949] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x3ffff
[  806.802472][T16949] F2FS-fs (loop6): invalid crc value
[  806.817346][T16949] F2FS-fs (loop6): Found nat_bits in checkpoint
[  806.985441][T16949] F2FS-fs (loop6): Start checkpoint disabled!
[  807.048055][T16949] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  807.057339][T16985] loop5: detected capacity change from 0 to 1024
[  807.138827][T16985] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  807.306770][T16991] fuse: Bad value for 'fd'
[  807.609254][T10112] kworker/u4:31: attempt to access beyond end of device
[  807.609254][T10112] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  808.623266][T17021] loop6: detected capacity change from 0 to 128
[  808.696114][T17021] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  808.713822][T17021] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  808.776264][T16000] EXT4-fs (loop6): unmounting filesystem.
[  808.837708][T17029] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3713'.
[  808.994570][T17033] loop6: detected capacity change from 0 to 512
[  809.013380][T17033] EXT4-fs: inline encryption not supported
[  809.041410][T17033] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  809.094307][T17033] EXT4-fs (loop6): 1 truncate cleaned up
[  809.110670][T17033] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  809.265572][T17040] fuse: Bad value for 'fd'
[  809.398181][T16000] EXT4-fs (loop6): unmounting filesystem.
[  809.418703][T17043] device syz_tun entered promiscuous mode
[  809.464240][T17043] device syz_tun left promiscuous mode
[  810.092562][T17057] netlink: 'syz.1.3723': attribute type 1 has an invalid length.
[  810.130675][T17057] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3723'.
[  810.347423][T17045] loop6: detected capacity change from 0 to 32768
[  810.402795][T17045] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10
[  810.500015][T17072] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3727'.
[  810.776751][T16332] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10
[  812.149063][T17096] loop6: detected capacity change from 0 to 2048
[  812.214058][T17096] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  813.171765][T17123] syz.5.3743: attempt to access beyond end of device
[  813.171765][T17123] md32: rw=2048, sector=0, nr_sectors = 8 limit=0
[  813.298572][T17129] tmpfs: Unknown parameter 'quota'
[  814.153059][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  814.159484][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  815.525970][T17158] device veth0_virt_wifi entered promiscuous mode
[  815.910247][T17170] netlink: 'syz.1.3755': attribute type 29 has an invalid length.
[  815.952994][T17170] netlink: 'syz.1.3755': attribute type 29 has an invalid length.
[  815.983201][T17171] netlink: 'syz.1.3755': attribute type 29 has an invalid length.
[  816.038429][T17170] netlink: 'syz.1.3755': attribute type 29 has an invalid length.
[  816.072281][T17170] netlink: 'syz.1.3755': attribute type 29 has an invalid length.
[  817.311266][T17203] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  817.698745][T17217] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  817.747968][T17217] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  817.757203][T17217] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  817.766358][T17217] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  817.775507][T17217] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  817.784652][T17217] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  817.793789][T17217] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  817.802933][T17217] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  817.812063][T17217] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  818.699648][T17247] loop6: detected capacity change from 0 to 2048
[  818.743012][T17247] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  819.917926][T17265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3782'.
[  820.235039][ T4698] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  820.423070][ T4698] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  820.439760][ T4698] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  820.469362][ T4698] usb 7-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[  820.495548][ T4698] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  820.515413][ T4698] usb 7-1: Product: syz
[  820.524134][ T4698] usb 7-1: Manufacturer: syz
[  820.533367][ T4698] usb 7-1: SerialNumber: syz
[  820.554616][ T4698] ums-sddr09 7-1:1.0: USB Mass Storage device detected
[  820.614023][ T4698] ums-sddr09 7-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  820.614023][ T4698]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  821.215796][ T4698] ums-sddr09: probe of 7-1:1.0 failed with error -5
[  821.250913][ T4698] usb 7-1: USB disconnect, device number 5
[  821.276961][T17298] loop5: detected capacity change from 0 to 2048
[  821.359061][T17298] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  822.763321][T17334] fuse: Bad value for 'fd'
[  823.144091][T17353] loop5: detected capacity change from 0 to 2048
[  823.215319][T17353] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  823.447436][T17363] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3813'.
[  825.019208][T17413] syz.5.3833: attempt to access beyond end of device
[  825.019208][T17413] md32: rw=2048, sector=0, nr_sectors = 8 limit=0
[  825.105815][T17415] fuse: Bad value for 'fd'
[  825.218413][T17417] tmpfs: Unknown parameter 'quota'
[  827.210748][T16211] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  828.184167][T16211] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  828.216354][T16211] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  828.238258][T17469] syz.5.3849: attempt to access beyond end of device
[  828.238258][T17469] md32: rw=2048, sector=0, nr_sectors = 8 limit=0
[  828.274570][T16211] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  828.299693][T16211] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  828.341999][T16211] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  828.371645][T16211] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  828.407095][T17477] tmpfs: Unknown parameter 'quota'
[  828.493333][T16211] usb 7-1: Product: syz
[  828.549476][T16211] usb 7-1: Manufacturer: syz
[  828.802600][T16211] cdc_wdm 7-1:1.0: skipping garbage
[  828.870053][T16211] cdc_wdm 7-1:1.0: skipping garbage
[  829.085410][T16211] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  829.128850][T16211] cdc_wdm 7-1:1.0: Unknown control protocol
[  829.324837][T16211] usb 7-1: USB disconnect, device number 6
[  829.923991][T17497] net_ratelimit: 2808 callbacks suppressed
[  829.924009][T17497] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  830.151305][T16211] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  830.387242][T16211] usb 7-1: device descriptor read/all, error -71
[  830.710177][T17530] fuse: Bad value for 'fd'
[  830.728426][T17531] tmpfs: Unknown parameter 'quota'
[  830.861021][T16211] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  830.936131][T17539] netlink: 'syz.4.3882': attribute type 13 has an invalid length.
[  830.959516][T17539] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.3882'.
[  831.044039][T17544] loop5: detected capacity change from 0 to 2048
[  831.064759][T16211] usb 7-1: unable to get BOS descriptor or descriptor too short
[  831.084466][T16211] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  831.124604][T16211] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  831.133272][T17544] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  831.202344][T16211] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  831.242149][T16211] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  831.250310][T16211] usb 7-1: Product: syz
[  831.297089][T16211] usb 7-1: Manufacturer: syz
[  831.340285][T16211] usb 7-1: SerialNumber: syz
[  831.426092][T16211] usb 7-1: selecting invalid altsetting 1
[  831.502426][T16211] usb 7-1: unit 6 not found!
[  832.499493][T16211] usb 7-1: 2:0: failed to get current value for ch 0 (-71)
[  832.619493][T16211] snd-usb-audio: probe of 7-1:1.0 failed with error -22
[  832.642285][T16211] usb 7-1: USB disconnect, device number 8
[  832.768148][T17569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3879'.
[  832.784672][T17571] ip_tables: iptables: counters copy to user failed while replacing table
[  832.874312][T16332] udevd[16332]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  833.061273][T17579] fuse: Bad value for 'fd'
[  833.334552][T17590] loop6: detected capacity change from 0 to 128
[  833.386266][T17590] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  833.414041][T17590] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  833.500772][ T1172] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  833.568049][T16000] EXT4-fs (loop6): unmounting filesystem.
[  833.700707][ T1172] usb 6-1: Using ep0 maxpacket: 8
[  833.708548][ T1172] usb 6-1: unable to get BOS descriptor or descriptor too short
[  833.746753][ T1172] usb 6-1: config 117 has an invalid interface number: 163 but max is 0
[  833.778337][   T27] audit: type=1326 audit(1790274885.643:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.4.3893" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc66339e159 code=0x0
[  833.778967][ T1172] usb 6-1: config 117 has no interface number 0
[  833.824953][ T1172] usb 6-1: config 117 interface 163 has no altsetting 0
[  833.856609][ T1172] usb 6-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24
[  833.869516][ T1172] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  833.882924][ T1172] usb 6-1: Product: syz
[  833.887888][ T1172] usb 6-1: Manufacturer: syz
[  833.895257][ T1172] usb 6-1: SerialNumber: syz
[  834.140812][ T4319] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[  834.352732][ T4319] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  834.374145][ T4319] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  834.405750][ T4319] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  834.425158][ T4319] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  834.437064][ T4319] usb 7-1: Product: syz
[  834.441686][ T4319] usb 7-1: Manufacturer: syz
[  834.462693][ T4319] hub 7-1:4.0: USB hub found
[  834.515751][T17633] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  834.537870][T17633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  834.555024][T17633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  834.614391][T17633] device veth0_virt_wifi left promiscuous mode
[  834.672392][ T4319] hub 7-1:4.0: config failed, hub has too many ports! (err -19)
[  834.706692][T17633] device ipvlan2 left promiscuous mode
[  834.972568][T16118] usb 6-1: USB disconnect, device number 9
[  834.979061][T16118] f81534a_ctrl 6-1:117.163: failed to enable ports: -19
[  835.022648][ T4698] usb 7-1: USB disconnect, device number 9
[  835.103228][T17651] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  838.888382][T17739] loop5: detected capacity change from 0 to 2048
[  839.174733][T17739] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  839.256448][T17721] loop6: detected capacity change from 0 to 32768
[  839.915481][T17721] XFS (loop6): Mounting V5 Filesystem
[  840.240035][T17721] XFS (loop6): Ending clean mount
[  841.119343][T16000] XFS (loop6): Unmounting Filesystem
[  841.970425][T17786] loop5: detected capacity change from 0 to 2048
[  842.049637][T17786] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  843.209691][T17809] loop5: detected capacity change from 0 to 2048
[  843.278609][T17809] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  843.530285][T17822] loop6: detected capacity change from 0 to 2048
[  843.584190][T17822] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  845.166150][T17847] fuse: Bad value for 'fd'
[  845.659640][T17859] loop6: detected capacity change from 0 to 2048
[  845.695072][T17862] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  845.726971][T17859] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  845.759967][T17862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  846.003929][T15730] usb 6-1: new low-speed USB device number 10 using dummy_hcd
[  846.021625][T17866] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  846.076303][T17866] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  846.202374][T15730] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  846.210465][T15730] usb 6-1: config 0 has no interface number 0
[  846.244224][T15730] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  846.300991][T15730] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  846.367870][T15730] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  846.392601][T15730] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  846.461778][T15730] usb 6-1: config 0 descriptor??
[  846.483643][T17861] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  846.508021][T15730] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  846.821414][ T4698] usb 6-1: USB disconnect, device number 10
[  846.827460][    C0] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  847.880261][T17924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3976'.
[  848.021462][T17925] netlink: 34959 bytes leftover after parsing attributes in process `syz.1.3976'.
[  848.098999][ T4289] Bluetooth: hci5: unexpected cc 0x200b length: 2 > 1
[  849.394573][T17954] loop5: detected capacity change from 0 to 2048
[  849.470137][T17954] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  850.269540][T17983] tipc: Started in network mode
[  850.290990][T17983] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711
[  850.326949][T17983] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  850.498191][T17988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3995'.
[  851.109976][T18002] FAULT_INJECTION: forcing a failure.
[  851.109976][T18002] name failslab, interval 1, probability 0, space 0, times 0
[  851.167808][T18002] CPU: 0 PID: 18002 Comm: syz.6.4001 Not tainted syzkaller #0
[  851.175374][T18002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  851.185472][T18002] Call Trace:
[  851.188786][T18002]  <TASK>
[  851.191742][T18002]  dump_stack_lvl+0x188/0x24e
[  851.196461][T18002]  ? show_regs_print_info+0x12/0x12
[  851.201691][T18002]  ? load_image+0x410/0x410
[  851.206234][T18002]  ? __might_sleep+0xd0/0xd0
[  851.210851][T18002]  ? __lock_acquire+0x7c40/0x7c40
[  851.215917][T18002]  should_fail_ex+0x390/0x4c0
[  851.220643][T18002]  should_failslab+0x5/0x20
[  851.225179][T18002]  slab_pre_alloc_hook+0x59/0x300
[  851.230238][T18002]  kmem_cache_alloc+0x56/0x2f0
[  851.235038][T18002]  ? mas_alloc_nodes+0x2ec/0x880
[  851.240147][T18002]  mas_alloc_nodes+0x2ec/0x880
[  851.244957][T18002]  mas_preallocate+0x162/0x3b0
[  851.249768][T18002]  __vma_adjust+0x2ff/0x1d00
[  851.254406][T18002]  ? validate_mm+0x2e0/0x2e0
[  851.259061][T18002]  ? up_write+0x1b6/0x410
[  851.263429][T18002]  ? anon_vma_clone+0x475/0x4c0
[  851.268322][T18002]  __split_vma+0x3a2/0x4f0
[  851.272775][T18002]  madvise_update_vma+0x4ca/0xad0
[  851.277841][T18002]  do_madvise+0xfae/0x3520
[  851.282286][T18002]  ? release_firmware_map_entry+0x187/0x187
[  851.288212][T18002]  ? plist_add+0x3d7/0x490
[  851.292662][T18002]  ? madvise_set_anon_name+0x420/0x420
[  851.298154][T18002]  ? schedule+0xd0/0x180
[  851.302420][T18002]  ? futex_wait_queue+0x23/0x1b0
[  851.307382][T18002]  ? futex_wait_queue+0x134/0x1b0
[  851.312431][T18002]  ? futex_unqueue+0xc7/0xf0
[  851.317061][T18002]  ? futex_wait+0x4a3/0x5c0
[  851.321594][T18002]  ? futex_wait_setup+0x270/0x270
[  851.326662][T18002]  ? file_end_write+0x156/0x250
[  851.331631][T18002]  ? vfs_write+0x777/0x9a0
[  851.336085][T18002]  ? do_futex+0x310/0x320
[  851.340442][T18002]  ? __ia32_sys_get_robust_list+0x100/0x100
[  851.346380][T18002]  ? lock_chain_count+0x20/0x20
[  851.351271][T18002]  __x64_sys_madvise+0xa2/0xb0
[  851.356069][T18002]  do_syscall_64+0x4c/0xa0
[  851.360511][T18002]  ? clear_bhb_loop+0x60/0xb0
[  851.365222][T18002]  ? clear_bhb_loop+0x60/0xb0
[  851.369925][T18002]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  851.375860][T18002] RIP: 0033:0x7f620959e159
[  851.380300][T18002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  851.399948][T18002] RSP: 002b:00007f620a453028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  851.408392][T18002] RAX: ffffffffffffffda RBX: 00007f6209825fa0 RCX: 00007f620959e159
[  851.416392][T18002] RDX: 000000000000000c RSI: 0000000000003000 RDI: 0000200000000000
[  851.424387][T18002] RBP: 00007f620963506b R08: 0000000000000000 R09: 0000000000000000
[  851.432377][T18002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  851.440368][T18002] R13: 00007f6209826038 R14: 00007f6209825fa0 R15: 00007fff10bf36e8
[  851.448375][T18002]  </TASK>
[  851.457080][ T4907] tipc: Node number set to 43690
[  851.550917][T18010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4004'.
[  851.596387][T18011] netlink: 'syz.4.4005': attribute type 10 has an invalid length.
[  851.649596][T18011] team0: Port device dummy0 added
[  851.703157][T18010] netlink: 34959 bytes leftover after parsing attributes in process `syz.2.4004'.
[  852.350687][ T4358] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  852.471590][T18024] loop5: detected capacity change from 0 to 32768
[  852.551143][ T4358] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  852.573733][   T27] audit: type=1800 audit(1790274904.443:48): pid=18024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4011" name="file1" dev="loop5" ino=4 res=0 errno=0
[  852.577189][ T4358] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  852.684681][ T4358] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  852.710207][ T4358] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  852.761079][ T4358] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  852.769258][ T4358] usb 7-1: Product: syz
[  852.798430][ T4358] usb 7-1: Manufacturer: syz
[  852.821384][ T4358] usb 7-1: SerialNumber: syz
[  852.874070][T18024] read_mapping_page failed!
[  852.939569][T18037] fuse: Bad value for 'fd'
[  853.050455][ T4358] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  853.151826][T18039] bridge0: port 1(bridge_slave_0) entered disabled state
[  853.287808][T16211] usb 7-1: USB disconnect, device number 10
[  853.318664][T16211] usblp0: removed
[  853.434518][T18045] netlink: 'syz.1.4029': attribute type 10 has an invalid length.
[  853.480508][T18045] device syz_tun entered promiscuous mode
[  853.519254][T18045] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  853.720202][T18053] netlink: 'syz.1.4019': attribute type 29 has an invalid length.
[  853.751505][T18053] netlink: 'syz.1.4019': attribute type 29 has an invalid length.
[  853.786317][T18055] netlink: 'syz.1.4019': attribute type 29 has an invalid length.
[  853.800366][T18053] netlink: 'syz.1.4019': attribute type 29 has an invalid length.
[  853.813941][T18053] netlink: 'syz.1.4019': attribute type 29 has an invalid length.
[  853.878860][T18058] loop5: detected capacity change from 0 to 2048
[  853.968244][T18058] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  854.008789][T18063] loop7: detected capacity change from 0 to 7
[  854.046955][T18063] Dev loop7: unable to read RDB block 7
[  854.063217][T18063]  loop7: AHDI p1 p2 p3
[  854.075945][T18063] loop7: partition table partially beyond EOD, truncated
[  854.125160][T18063] loop7: p1 start 1601398130 is beyond EOD, truncated
[  854.155895][T18063] loop7: p2 start 1702059890 is beyond EOD, truncated
[  854.455687][T18072] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4031'.
[  854.844870][T18089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4037'.
[  855.085067][T18094] netlink: 'syz.4.4039': attribute type 29 has an invalid length.
[  855.133148][T18094] netlink: 'syz.4.4039': attribute type 29 has an invalid length.
[  855.158088][T18099] netlink: 'syz.4.4039': attribute type 29 has an invalid length.
[  855.382012][T18105] loop5: detected capacity change from 0 to 512
[  855.410724][T18105] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  855.448447][T18105] EXT4-fs (loop5): 1 truncate cleaned up
[  855.454806][T18105] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  855.570076][T13262] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  856.058320][T13262] EXT4-fs (loop5): unmounting filesystem.
[  856.177616][T18114] loop6: detected capacity change from 0 to 32768
[  856.231899][ T4593] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  856.262064][T18114] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[  856.323988][T18114] JBD2: Ignoring recovery information on journal
[  856.476301][T18114] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  856.492229][ T4593] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  856.660455][ T4593] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  856.845440][ T4593] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  856.874055][T16000] ocfs2: Unmounting device (7,6) on (node local)
[  857.495409][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  857.510088][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  857.521329][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  857.548327][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  857.557917][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  857.565304][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  857.785578][T18155] validate_nla: 3 callbacks suppressed
[  857.785598][T18155] netlink: 'syz.1.4063': attribute type 12 has an invalid length.
[  858.541202][T18148] chnl_net:caif_netlink_parms(): no params data found
[  858.648805][T18195] tls_set_device_offload_rx: netdev not found
[  859.052926][T18148] bridge0: port 1(bridge_slave_0) entered blocking state
[  859.062740][T18148] bridge0: port 1(bridge_slave_0) entered disabled state
[  859.096199][T18148] device bridge_slave_0 entered promiscuous mode
[  859.166908][T18148] bridge0: port 2(bridge_slave_1) entered blocking state
[  859.190778][T18148] bridge0: port 2(bridge_slave_1) entered disabled state
[  859.199089][T18148] device bridge_slave_1 entered promiscuous mode
[  859.603398][ T4290] Bluetooth: hci0: command 0x0409 tx timeout
[  860.110202][T18219] netlink: 'syz.6.4077': attribute type 12 has an invalid length.
[  860.247023][ T4593] device hsr_slave_0 left promiscuous mode
[  860.281345][ T4593] device hsr_slave_1 left promiscuous mode
[  860.297413][ T4593] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  860.316133][ T4593] batman_adv: batadv0: Removing interface: batadv_slave_0
[  860.345318][ T4593] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  860.363216][ T4593] batman_adv: batadv0: Removing interface: batadv_slave_1
[  860.391470][ T4593] device bridge_slave_1 left promiscuous mode
[  860.397783][ T4593] bridge0: port 2(bridge_slave_1) entered disabled state
[  860.442248][ T4593] device bridge_slave_0 left promiscuous mode
[  860.448559][ T4593] bridge0: port 1(bridge_slave_0) entered disabled state
[  860.536340][ T4593] device veth1_macvtap left promiscuous mode
[  860.542709][ T4593] device veth0_macvtap left promiscuous mode
[  860.548853][ T4593] device veth1_vlan left promiscuous mode
[  860.555932][ T4593] device veth0_vlan left promiscuous mode
[  861.284909][ T4593] team0 (unregistering): Port device team_slave_1 removed
[  861.342633][ T4593] team0 (unregistering): Port device team_slave_0 removed
[  861.396530][ T4593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  861.451148][ T4593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  861.671541][ T4290] Bluetooth: hci0: command 0x041b tx timeout
[  861.843077][ T4593] bond0 (unregistering): Released all slaves
[  861.967066][T18148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  862.028093][T18148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  862.191476][T18148] team0: Port device team_slave_0 added
[  862.205758][T18148] team0: Port device team_slave_1 added
[  862.338580][T18148] batman_adv: batadv0: Adding interface: batadv_slave_0
[  862.354433][T18148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  862.398818][T18148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  862.434808][T18148] batman_adv: batadv0: Adding interface: batadv_slave_1
[  862.452259][T18148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  862.531618][T18148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  862.699900][T18148] device hsr_slave_0 entered promiscuous mode
[  862.757726][T18148] device hsr_slave_1 entered promiscuous mode
[  862.780730][T18148] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  862.801055][T18148] Cannot create hsr debugfs directory
[  863.412917][T18148] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  863.461394][T18148] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  863.482132][T18148] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  863.531304][T18148] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  863.729079][T18148] 8021q: adding VLAN 0 to HW filter on device bond0
[  863.751050][ T4290] Bluetooth: hci0: command 0x040f tx timeout
[  863.827779][T10097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  863.857338][T10097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  863.880275][T18148] 8021q: adding VLAN 0 to HW filter on device team0
[  863.941560][ T9069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  863.976447][ T9069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  864.009945][ T9069] bridge0: port 1(bridge_slave_0) entered blocking state
[  864.017358][ T9069] bridge0: port 1(bridge_slave_0) entered forwarding state
[  864.058964][ T9069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  864.069654][ T9069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  864.109909][ T9069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  864.129318][ T9069] bridge0: port 2(bridge_slave_1) entered blocking state
[  864.136531][ T9069] bridge0: port 2(bridge_slave_1) entered forwarding state
[  864.188379][T10097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  864.228694][T10097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  864.270433][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  864.316518][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  864.380093][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  864.394190][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  864.426710][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  864.447500][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  864.471049][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  864.511570][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  864.545373][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  864.584807][T18148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  864.619686][T18307] netem: change failed
[  864.920977][T16210] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  865.111923][T16210] usb 7-1: Using ep0 maxpacket: 8
[  865.119730][T16210] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  865.146329][T16210] usb 7-1: config 0 has no interface number 0
[  865.166315][T16210] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  865.214007][T16210] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  865.249493][T16210] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  865.316368][T16210] usb 7-1: config 0 descriptor??
[  865.359332][T16210] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  865.421314][T10093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  865.436722][T10093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  865.464130][T18148] 8021q: adding VLAN 0 to HW filter on device batadv0
[  865.840128][ T4290] Bluetooth: hci0: command 0x0419 tx timeout
[  866.640128][ T4324] usb 7-1: USB disconnect, device number 11
[  866.882326][T10093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  866.897378][T10093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  866.923612][T10093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  866.935020][T10093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  866.947092][T18148] device veth0_vlan entered promiscuous mode
[  866.970150][T10093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  866.981176][T10093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  866.994782][T18148] device veth1_vlan entered promiscuous mode
[  867.020208][ T9069] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  867.028755][ T9069] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  867.038658][ T9069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  867.051536][ T9069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  867.062836][T18148] device veth0_macvtap entered promiscuous mode
[  867.082406][T18148] device veth1_macvtap entered promiscuous mode
[  867.102429][T18148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  867.115091][T18148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  867.125458][T18148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  867.139492][T18148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  867.149556][T18148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  867.165077][T18148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  867.176673][T18148] batman_adv: batadv0: Interface activated: batadv_slave_0
[  867.186472][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  867.196744][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  867.205533][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  867.214891][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  867.226894][T18148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  867.238281][T18148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  867.255060][T18148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  867.266995][T18148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  867.296523][T18148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  867.348690][T18148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  867.382371][T18148] batman_adv: batadv0: Interface activated: batadv_slave_1
[  867.392581][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  867.411785][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  867.536526][T18148] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  867.550917][T18148] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  867.573738][T18148] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  867.598556][T18148] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  867.860046][T10095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  867.883242][T10095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  867.939567][T10093] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  867.975013][ T9069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  868.006043][ T9069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  868.058017][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  868.257759][T18391] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer.
[  868.317735][T18399] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2527804186 (323558935808 ns) > initial count (117850194176 ns). Using initial count to start timer.
[  868.393280][T18398] loop7: detected capacity change from 0 to 2048
[  868.428470][T18398] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  870.874322][T18438] device ipvlan3 entered promiscuous mode
[  870.898081][T18438] team0: Device ipvlan3 failed to register rx_handler
[  871.948124][T18475] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4131'.
[  872.860190][T18459] loop7: detected capacity change from 0 to 32768
[  872.987300][T18459] ocfs2: Slot 0 on device (7,7) was already allocated to this node!
[  873.094189][T18459] JBD2: Ignoring recovery information on journal
[  873.187544][T18459] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  873.378136][ T4324] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  873.394560][T18502] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  873.589643][T18148] ocfs2: Unmounting device (7,7) on (node local)
[  874.205561][T18533] netlink: 'syz.7.4154': attribute type 4 has an invalid length.
[  874.217686][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4154'.
[  874.595139][T18542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4156'.
[  874.619001][T18544] FAULT_INJECTION: forcing a failure.
[  874.619001][T18544] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  874.671917][T18544] CPU: 1 PID: 18544 Comm: syz.7.4157 Not tainted syzkaller #0
[  874.679489][T18544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  874.689610][T18544] Call Trace:
[  874.692933][T18544]  <TASK>
[  874.695903][T18544]  dump_stack_lvl+0x188/0x24e
[  874.700640][T18544]  ? show_regs_print_info+0x12/0x12
[  874.705897][T18544]  ? load_image+0x410/0x410
[  874.710466][T18544]  ? __lock_acquire+0x7c40/0x7c40
[  874.715559][T18544]  should_fail_ex+0x390/0x4c0
[  874.720306][T18544]  prepare_alloc_pages+0x1e1/0x5b0
[  874.725493][T18544]  __alloc_pages+0x130/0x4f0
[  874.730156][T18544]  ? lockdep_hardirqs_on+0x94/0x140
[  874.735416][T18544]  ? zone_statistics+0x170/0x170
[  874.740419][T18544]  ? finish_task_switch+0x262/0x8e0
[  874.745687][T18544]  ? __schedule+0x1087/0x4030
[  874.750422][T18544]  __kmalloc_large_node+0x8c/0x1f0
[  874.755592][T18544]  ? iovec_from_user+0x83/0x360
[  874.760501][T18544]  __kmalloc+0x113/0x240
[  874.764808][T18544]  iovec_from_user+0x83/0x360
[  874.769556][T18544]  ? release_firmware_map_entry+0x187/0x187
[  874.775509][T18544]  __import_iovec+0x6c/0x510
[  874.780176][T18544]  import_iovec+0x6f/0xa0
[  874.784574][T18544]  process_vm_rw+0x1ed/0xc00
[  874.789229][T18544]  ? futex_wait_setup+0x270/0x270
[  874.794374][T18544]  ? __ia32_sys_process_vm_writev+0xf0/0xf0
[  874.800382][T18544]  ? lock_chain_count+0x20/0x20
[  874.805294][T18544]  __x64_sys_process_vm_writev+0xdc/0xf0
[  874.810995][T18544]  do_syscall_64+0x4c/0xa0
[  874.815470][T18544]  ? clear_bhb_loop+0x60/0xb0
[  874.820219][T18544]  ? clear_bhb_loop+0x60/0xb0
[  874.824945][T18544]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  874.830905][T18544] RIP: 0033:0x7f0ea1d9e159
[  874.835374][T18544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  874.855042][T18544] RSP: 002b:00007f0e9fff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137
[  874.863519][T18544] RAX: ffffffffffffffda RBX: 00007f0ea2025fa0 RCX: 00007f0ea1d9e159
[  874.871554][T18544] RDX: 0000000000000310 RSI: 0000200000c22000 RDI: 0000000000000000
[  874.879583][T18544] RBP: 00007f0ea1e3506b R08: 0000000000000001 R09: 0000000000000000
[  874.887605][T18544] R10: 0000200000c22fa0 R11: 0000000000000246 R12: 0000000000000000
[  874.895628][T18544] R13: 00007f0ea2026038 R14: 00007f0ea2025fa0 R15: 00007ffd37507c88
[  874.903685][T18544]  </TASK>
[  875.594049][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  875.600462][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  875.662250][T18568] loop6: detected capacity change from 0 to 512
[  875.786710][T18568] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  875.801299][T18568] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  876.182224][T16000] EXT4-fs (loop6): unmounting filesystem.
[  877.110797][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  877.168032][T18608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4174'.
[  877.632821][T18617] loop7: detected capacity change from 0 to 128
[  877.713451][T18617] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  877.786155][T18617] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  878.056154][T18148] EXT4-fs (loop7): unmounting filesystem.
[  878.365944][T18641] tun0: tun_chr_ioctl cmd 1074025675
[  878.398296][T18641] tun0: persist enabled
[  878.429331][T18648] tun0: tun_chr_ioctl cmd 1074025675
[  878.440100][T18648] tun0: persist enabled
[  878.784644][ T4358] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  878.844762][ T4358] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  879.609979][ T4907] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  879.627645][T18693] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  879.936288][T18703] tun0: tun_chr_ioctl cmd 1074025675
[  879.956398][T18703] tun0: persist enabled
[  879.967350][T18703] tun0: tun_chr_ioctl cmd 1074025675
[  879.983775][T18703] tun0: persist enabled
[  880.088906][T18701] loop6: detected capacity change from 0 to 8192
[  880.165069][T18701] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  880.180901][T18701] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal
[  880.221011][T18701] REISERFS (device loop6): using ordered data mode
[  880.248203][T18701] reiserfs: using flush barriers
[  880.275496][T18701] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  880.303119][T18701] REISERFS (device loop6): checking transaction log (loop6)
[  880.475098][T15730] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  880.484692][T18701] REISERFS (device loop6): Using r5 hash to sort names
[  880.613134][T18701] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  880.702607][T15730] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  880.787371][T15730] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  880.984919][T15730] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  881.219791][T15730] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  881.507170][T15730] usb 8-1: config 0 descriptor??
[  882.017424][T15730] hid-steam 0003:28DE:1142.0003: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.7-1/input0
[  882.102509][T18744] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4222'.
[  882.147434][T15730] hid-steam 0003:28DE:1142.0004: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.7-1/input0
[  882.300812][T15730] hid-steam 0003:28DE:1142.0003: Steam wireless receiver connected
[  882.326780][T15730] usb 8-1: USB disconnect, device number 2
[  882.457362][T15730] hid-steam 0003:28DE:1142.0003: Steam wireless receiver disconnected
[  882.666114][T18754] fido_id[18754]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  882.725045][T18761] loop6: detected capacity change from 0 to 2048
[  882.757964][T18761] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  882.790790][ T4289] Bluetooth: hci5: command 0x0406 tx timeout
[  883.398579][T18782] loop7: detected capacity change from 0 to 2048
[  883.431013][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  883.444573][T18782] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  884.817755][T18809] loop6: detected capacity change from 0 to 1024
[  884.861243][T18809] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  885.200822][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  885.229679][T18821] device syz_tun entered promiscuous mode
[  885.253489][T18821] device syz_tun left promiscuous mode
[  885.756845][T18841] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4243'.
[  885.929880][T15730] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  885.973360][T15730] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  886.266988][T18860] device syz_tun entered promiscuous mode
[  886.296630][T18860] device syz_tun left promiscuous mode
[  886.525171][T18866] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4251'.
[  886.760453][T18870] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  887.046275][T18877] loop7: detected capacity change from 0 to 8192
[  887.068323][T18877] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  887.092243][T18877] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal
[  887.109518][T18877] REISERFS (device loop7): using ordered data mode
[  887.139501][T18877] reiserfs: using flush barriers
[  887.151874][T18877] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  887.171546][T18877] REISERFS (device loop7): checking transaction log (loop7)
[  887.182310][T18877] REISERFS (device loop7): Using r5 hash to sort names
[  887.203006][T18877] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage.
[  887.291154][  T126] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  887.389431][T18887] netlink: 'syz.4.4259': attribute type 1 has an invalid length.
[  887.407505][T18887] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4259'.
[  887.480764][  T126] usb 7-1: Using ep0 maxpacket: 16
[  887.503015][  T126] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  887.540846][  T126] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  887.561076][  T126] usb 7-1: Product: syz
[  887.565331][  T126] usb 7-1: Manufacturer: syz
[  887.570009][  T126] usb 7-1: SerialNumber: syz
[  888.162800][T18913] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  888.824463][  T126] snd-usb-audio: probe of 7-1:1.0 failed with error -71
[  888.853492][  T126] usb 7-1: USB disconnect, device number 12
[  888.898468][T18929] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  888.905811][T18929] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  888.923457][T18931] vhci_hcd: xmit failed -107
[  888.941044][T18929] vhci_hcd vhci_hcd.0: Device attached
[  888.950803][T10097] vhci_hcd: stop threads
[  888.967759][T10097] vhci_hcd: release socket
[  888.987015][T10097] vhci_hcd: disconnect device
[  889.111166][T18936] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  889.147734][T18941] netlink: 'syz.4.4279': attribute type 29 has an invalid length.
[  889.164975][T18941] netlink: 'syz.4.4279': attribute type 29 has an invalid length.
[  889.174094][T18936] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  889.183325][T18936] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  889.192523][T18936] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  889.201717][T18936] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  889.203388][T18941] netlink: 'syz.4.4279': attribute type 29 has an invalid length.
[  889.210854][T18936] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  889.210927][T18936] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  889.210966][T18936] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  889.313847][T18941] netlink: 'syz.4.4279': attribute type 29 has an invalid length.
[  889.322791][T18941] netlink: 'syz.4.4279': attribute type 29 has an invalid length.
[  889.669834][T18947] loop7: detected capacity change from 0 to 512
[  889.707797][T18947] EXT4-fs: inline encryption not supported
[  889.738026][T18947] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  889.805418][T18947] EXT4-fs (loop7): 1 truncate cleaned up
[  889.870740][T18947] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  890.207815][T18148] EXT4-fs (loop7): unmounting filesystem.
[  891.040878][ T4358] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  891.114850][T18983] netlink: 'syz.2.4291': attribute type 29 has an invalid length.
[  891.166854][T18983] netlink: 'syz.2.4291': attribute type 29 has an invalid length.
[  891.213716][T18987] netlink: 'syz.2.4291': attribute type 29 has an invalid length.
[  891.226332][T18983] netlink: 'syz.2.4291': attribute type 29 has an invalid length.
[  891.242156][ T4358] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  891.280238][ T4358] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  891.301822][ T4358] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  891.330043][ T4358] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  891.353549][ T4358] usb 7-1: config 0 descriptor??
[  891.590756][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  892.133034][ T4358] hid-steam 0003:28DE:1142.0006: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0
[  892.252777][T19004] device veth1_to_bond entered promiscuous mode
[  892.263224][T19001] net_ratelimit: 3259 callbacks suppressed
[  892.263242][T19001] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  892.299983][ T4358] hid-steam 0003:28DE:1142.0007: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0
[  892.312348][T19004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4296'.
[  892.388087][T19001] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  892.397337][T19001] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  892.406519][T19001] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  892.415700][T19001] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  892.424884][T19001] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  892.434039][T19001] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  892.443232][T19001] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  892.452420][T19001] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  892.461596][T19001] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  892.474417][ T4358] hid-steam 0003:28DE:1142.0006: Steam wireless receiver connected
[  892.497368][ T4358] usb 7-1: USB disconnect, device number 13
[  892.530661][ T4358] hid-steam 0003:28DE:1142.0006: Steam wireless receiver disconnected
[  892.574622][T19005] fido_id[19005]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  893.222265][T19004] bond0: (slave bond_slave_1): Releasing backup interface
[  893.370668][ T4358] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  893.560804][ T4358] usb 8-1: Using ep0 maxpacket: 16
[  893.567954][ T4358] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  893.765683][ T4358] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  893.785360][ T4358] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  893.796061][ T4358] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  893.804208][ T4358] usb 8-1: Product: syz
[  893.808501][ T4358] usb 8-1: Manufacturer: syz
[  893.813232][ T4358] usb 8-1: SerialNumber: syz
[  894.006930][T19051] validate_nla: 1 callbacks suppressed
[  894.006948][T19051] netlink: 'syz.6.4307': attribute type 29 has an invalid length.
[  894.021148][T19051] netlink: 'syz.6.4307': attribute type 29 has an invalid length.
[  894.038255][ T4358] usb 8-1: 0:2 : does not exist
[  894.045965][T19051] netlink: 'syz.6.4307': attribute type 29 has an invalid length.
[  894.071911][ T4358] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[  894.088562][T19051] netlink: 'syz.6.4307': attribute type 29 has an invalid length.
[  894.124970][T19051] netlink: 'syz.6.4307': attribute type 29 has an invalid length.
[  894.169821][ T4358] usb 8-1: USB disconnect, device number 3
[  894.472751][T19064] loop6: detected capacity change from 0 to 2048
[  894.582713][T19064] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  896.519333][T19119] loop6: detected capacity change from 0 to 2048
[  896.549846][T19119] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  897.051282][T19132] loop7: detected capacity change from 0 to 2048
[  897.117864][T19132] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  897.973726][T19151] net_ratelimit: 3256 callbacks suppressed
[  897.973747][T19151] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  899.758894][T19194] loop7: detected capacity change from 0 to 2048
[  899.839665][T19194] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  899.900964][T19202] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  900.550767][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  902.771649][T19251] page:ffffea00015f8000 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888057e00000 pfn:0x57e00
[  902.785553][T19251] head:ffffea00015f8000 order:3 compound_mapcount:0 compound_pincount:0
[  902.796930][T19251] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  902.813607][T19251] raw: 00fff00000010200 ffffea0001572008 ffffea0001fdb608 ffff88801744c3c0
[  902.858826][T19251] raw: ffff888057e00000 0000000000020001 00000001ffffffff 0000000000000000
[  902.919745][T19251] page dumped because: unmovable page
[  902.945611][T19251] page_owner tracks the page as allocated
[  902.972296][T19251] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4273, tgid 4273 (syz-executor), ts 82364694315, free_ts 27298025575
[  903.069831][T19251]  post_alloc_hook+0x173/0x1a0
[  903.078633][T19251]  get_page_from_freelist+0x206b/0x2180
[  903.090657][T19251]  __alloc_pages+0x1ec/0x4f0
[  903.100946][T19251]  alloc_slab_page+0x5d/0x180
[  903.120759][T19251]  new_slab+0x87/0x2d0
[  903.124951][T19251]  ___slab_alloc+0xbc5/0x1240
[  903.150048][T19251]  __kmem_cache_alloc_node+0x126/0x270
[  903.170327][T19251]  __kmalloc_node+0xa2/0x240
[  903.181034][T19251]  kvmalloc_node+0x6c/0x180
[  903.185735][T19251]  alloc_netdev_mqs+0x84/0xf10
[  903.201125][T19251]  rtnl_create_link+0x2fd/0xb90
[  903.221357][T19251]  rtnl_newlink+0x13c6/0x1f90
[  903.226187][T19251]  rtnetlink_rcv_msg+0x863/0xfb0
[  903.247257][T19251]  netlink_rcv_skb+0x1ef/0x440
[  903.256826][T19251]  netlink_unicast+0x7ad/0x920
[  903.265280][T19251]  netlink_sendmsg+0x8ad/0xbd0
[  903.270253][T19251] page last free stack trace:
[  903.279543][T19251]  free_unref_page_prepare+0x8e5/0x9e0
[  903.286656][T19251]  free_unref_page+0x2e/0x3f0
[  903.295945][T19251]  free_contig_range+0x9d/0x150
[  903.304536][T19251]  destroy_args+0xef/0xa0e
[  903.309330][T19251]  debug_vm_pgtable+0x33c/0x38e
[  903.319048][T19251]  do_one_initcall+0x257/0x800
[  903.326059][T19251]  do_initcall_level+0x13d/0x1ed
[  903.342533][T19251]  do_initcalls+0x4b/0x8a
[  903.356136][T19251]  kernel_init_freeable+0x401/0x5ab
[  903.367331][T19251]  kernel_init+0x19/0x1b0
[  903.385788][T19251]  ret_from_fork+0x1f/0x30
[  904.463464][   T27] audit: type=1326 audit(1790274956.333:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19286 comm="syz.2.4374" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9c379e159 code=0x0
[  904.494181][T19288] loop6: detected capacity change from 0 to 8
[  904.674390][T19288] SQUASHFS error: Unable to read directory block [249:c]
[  905.076010][T19308] loop6: detected capacity change from 0 to 2048
[  905.119888][T19308] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  906.236279][T19327] ip_tables: iptables: counters copy to user failed while replacing table
[  906.274679][T19330] overlayfs: failed to clone upperpath
[  906.837490][T19352] device syz_tun left promiscuous mode
[  906.855553][T19352] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  906.871800][ T4290] Bluetooth: hci2: command 0x1003 tx timeout
[  906.880250][T19352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  906.882583][ T4289] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  906.902282][ T4907] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  906.925678][T19352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  906.935499][T19352] bridge0: port 1(bridge_slave_0) entered blocking state
[  906.942754][T19352] bridge0: port 1(bridge_slave_0) entered forwarding state
[  906.950689][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  906.969452][T19352] device bridge1 left promiscuous mode
[  906.975983][T19352] device vlan2 left promiscuous mode
[  906.982972][T19352] device bridge0 left promiscuous mode
[  907.160782][ T4907] usb 7-1: Using ep0 maxpacket: 8
[  907.170055][ T4907] usb 7-1: unable to get BOS descriptor or descriptor too short
[  907.212633][ T4907] usb 7-1: config 117 has an invalid interface number: 163 but max is 0
[  907.239689][ T4907] usb 7-1: config 117 has no interface number 0
[  907.260823][   T27] audit: type=1326 audit(1790274959.133:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19364 comm="syz.1.4391" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6bad9e159 code=0x0
[  907.267581][ T4907] usb 7-1: config 117 interface 163 has no altsetting 0
[  907.315806][T19362] loop7: detected capacity change from 0 to 2048
[  907.350501][ T4907] usb 7-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24
[  907.367978][T19362] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  907.388414][ T4907] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  907.418731][ T4907] usb 7-1: Product: syz
[  907.426907][ T4907] usb 7-1: Manufacturer: syz
[  907.440670][ T4907] usb 7-1: SerialNumber: syz
[  908.329618][T19387] ip_tables: iptables: counters copy to user failed while replacing table
[  909.357595][T19399] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  909.414226][T19404] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  909.527531][T19404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  909.565354][T19404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  909.736777][T15730] usb 7-1: USB disconnect, device number 14
[  909.743600][T15730] f81534a_ctrl 7-1:117.163: failed to enable ports: -19
[  909.965895][   T27] audit: type=1326 audit(1790274961.833:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.7.4408" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ea1d9e159 code=0x0
[  910.997897][T19470] overlayfs: failed to clone upperpath
[  911.706850][T19475] input: syz0 as /devices/virtual/input/input11
[  912.639865][T19511] overlayfs: failed to clone upperpath
[  913.289424][T19500] loop7: detected capacity change from 0 to 32768
[  913.549141][T19500] XFS (loop7): Mounting V5 Filesystem
[  914.147826][T19500] XFS (loop7): Ending clean mount
[  914.429361][T18148] XFS (loop7): Unmounting Filesystem
[  914.595286][T19564] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  914.708993][T19564] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  914.877748][T19567] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  914.916969][T19567] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  915.578922][T19588] overlayfs: invalid redirect (./file0/file1)
[  915.788374][T19598] netlink: 'syz.6.4459': attribute type 10 has an invalid length.
[  916.535463][T19631] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  916.958844][T19647] loop6: detected capacity change from 0 to 512
[  916.995439][T19647] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  917.049292][T19647] EXT4-fs: test_dummy_encryption requires encrypt feature
[  917.280232][T19655] loop6: detected capacity change from 0 to 2048
[  917.289305][ T4289] Bluetooth: hci4: unexpected cc 0x200b length: 2 > 1
[  917.319941][T19655] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  917.576703][T19666] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  918.397362][T19672] netlink: 'syz.1.4492': attribute type 10 has an invalid length.
[  918.485363][T19672] team0: Port device dummy0 added
[  918.518191][T19680] netlink: 'syz.6.4490': attribute type 7 has an invalid length.
[  918.536034][T19676] netlink: 'syz.4.4502': attribute type 10 has an invalid length.
[  918.555459][T19680] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4490'.
[  918.600501][T19680] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4490'.
[  918.818710][T19689] loop7: detected capacity change from 0 to 512
[  918.854355][T19689] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  918.878539][T19689] EXT4-fs: test_dummy_encryption requires encrypt feature
[  919.214333][T19706] loop6: detected capacity change from 0 to 2048
[  919.231199][T19706] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  919.936728][T19720] netlink: 'syz.7.4506': attribute type 10 has an invalid length.
[  920.044696][T19720] team0: Port device dummy0 added
[  920.580317][T19731] netlink: 'syz.7.4511': attribute type 10 has an invalid length.
[  922.131472][T19779] netlink: 'syz.1.4530': attribute type 10 has an invalid length.
[  922.142800][T19781] loop6: detected capacity change from 0 to 2048
[  922.184828][T19781] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  924.080968][ T4907] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  924.272392][ T4907] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  924.293040][ T4907] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  924.313939][ T4907] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  924.340983][ T4907] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  924.593683][ T4907] usb 7-1: USB disconnect, device number 15
[  924.730771][ T4324] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  924.920696][ T4324] usb 8-1: Using ep0 maxpacket: 32
[  924.927731][ T4324] usb 8-1: config 0 has an invalid interface number: 184 but max is 0
[  924.950587][ T4324] usb 8-1: config 0 has no interface number 0
[  924.956790][ T4324] usb 8-1: config 0 interface 184 has no altsetting 0
[  924.973037][ T4324] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  924.990687][ T4324] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  925.009025][ T4324] usb 8-1: Product: syz
[  925.014556][ T4324] usb 8-1: Manufacturer: syz
[  925.029512][ T4324] usb 8-1: SerialNumber: syz
[  925.039083][ T4324] usb 8-1: config 0 descriptor??
[  925.057588][ T4324] smsc75xx v1.0.0
[  925.721206][ T4908] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  925.971161][ T4908] usb 7-1: Using ep0 maxpacket: 8
[  926.003599][ T4908] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  926.251190][ T4908] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  926.347609][ T4324] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  926.365704][ T4324] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  926.367010][ T4908] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  926.385830][ T4908] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  926.404861][ T4908] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  926.414635][ T4908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  926.603227][ T4324] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[  926.639052][ T4324] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[  926.654483][ T4908] usb 7-1: GET_CAPABILITIES returned 0
[  926.660075][ T4908] usbtmc 7-1:16.0: can't read capabilities
[  926.661238][ T4324] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  926.706445][ T4324] smsc75xx: probe of 8-1:0.184 failed with error -71
[  926.756528][ T4324] usb 8-1: USB disconnect, device number 4
[  926.884913][    C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  926.897197][ T4908] usb 7-1: USB disconnect, device number 16
[  929.350839][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  929.755244][ T4908] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  930.114603][ T4908] usb 8-1: Using ep0 maxpacket: 8
[  930.132076][ T4908] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  930.144908][ T4908] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  930.160891][ T4908] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  930.894741][ T4908] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  930.907989][ T4908] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  930.931410][ T4908] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  931.173973][ T4908] usb 8-1: GET_CAPABILITIES returned 0
[  931.179855][ T4908] usbtmc 8-1:16.0: can't read capabilities
[  931.325421][T19979] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4591'.
[  931.458543][    C1] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  932.093885][ T4908] usb 8-1: USB disconnect, device number 5
[  932.338465][T19979] device hsr_slave_1 left promiscuous mode
[  932.501181][ T4324] usb 7-1: new full-speed USB device number 17 using dummy_hcd
[  932.710325][ T4324] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  932.740658][ T4324] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  932.748756][ T4324] usb 7-1: Product: syz
[  932.780580][ T4324] usb 7-1: Manufacturer: syz
[  932.785276][ T4324] usb 7-1: SerialNumber: syz
[  932.819548][ T4324] usb 7-1: config 0 descriptor??
[  932.939122][T20001] device gretap1 entered promiscuous mode
[  933.078144][ T4324] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  934.412912][ T4324] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71
[  934.437637][ T4324] usb 7-1: USB disconnect, device number 17
[  934.565752][T20034] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4609'.
[  934.735273][T20034] device hsr_slave_1 left promiscuous mode
[  935.016803][T20048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4616'.
[  935.125257][T20051] loop6: detected capacity change from 0 to 2048
[  935.182418][T20051] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  935.479717][T20060] device syzkaller1 entered promiscuous mode
[  936.390664][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  936.676358][T20077] device gretap1 entered promiscuous mode
[  937.060306][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  937.068192][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  937.507588][T20092] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4628'.
[  937.867153][T20092] device hsr_slave_1 left promiscuous mode
[  937.877297][T20102] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4630'.
[  937.970892][T14748] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[  938.062339][T20108] loop6: detected capacity change from 0 to 1024
[  938.128826][T20108] hfsplus: xattr searching failed
[  938.164952][T14748] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  938.204692][T14748] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  938.230167][T14748] usb 8-1: Product: syz
[  938.244489][T14748] usb 8-1: Manufacturer: syz
[  938.249186][T14748] usb 8-1: SerialNumber: syz
[  938.268541][T14748] usb 8-1: config 0 descriptor??
[  938.481197][T14748] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  939.302612][T20146] FAULT_INJECTION: forcing a failure.
[  939.302612][T20146] name fail_usercopy, interval 1, probability 0, space 0, times -1
[  939.368323][T20146] CPU: 0 PID: 20146 Comm: syz.6.4653 Not tainted syzkaller #0
[  939.375883][T20146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  939.385991][T20146] Call Trace:
[  939.389319][T20146]  <TASK>
[  939.392305][T20146]  dump_stack_lvl+0x188/0x24e
[  939.397034][T20146]  ? show_regs_print_info+0x12/0x12
[  939.402290][T20146]  ? load_image+0x410/0x410
[  939.406853][T20146]  ? __lock_acquire+0x7c40/0x7c40
[  939.411920][T20146]  should_fail_ex+0x390/0x4c0
[  939.416643][T20146]  _copy_to_user+0x2c/0x130
[  939.421176][T20146]  move_addr_to_user+0x146/0x1e0
[  939.426251][T20146]  __sys_getsockname+0x216/0x2d0
[  939.431216][T20146]  ? __ia32_sys_connect+0x80/0x80
[  939.436298][T20146]  __x64_sys_getsockname+0x77/0x90
[  939.441436][T20146]  do_syscall_64+0x4c/0xa0
[  939.445879][T20146]  ? clear_bhb_loop+0x60/0xb0
[  939.450579][T20146]  ? clear_bhb_loop+0x60/0xb0
[  939.455278][T20146]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  939.461204][T20146] RIP: 0033:0x7f620959e159
[  939.465638][T20146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  939.485264][T20146] RSP: 002b:00007f620a453028 EFLAGS: 00000246 ORIG_RAX: 0000000000000033
[  939.493697][T20146] RAX: ffffffffffffffda RBX: 00007f6209825fa0 RCX: 00007f620959e159
[  939.501697][T20146] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000000000000003
[  939.509690][T20146] RBP: 00007f620963506b R08: 0000000000000000 R09: 0000000000000000
[  939.517689][T20146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  939.525681][T20146] R13: 00007f6209826038 R14: 00007f6209825fa0 R15: 00007fff10bf36e8
[  939.533690][T20146]  </TASK>
[  939.557875][T14748] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -71
[  939.587675][T14748] usb 8-1: USB disconnect, device number 6
[  939.923668][ T4908] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  939.956516][ T4908] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  940.381305][T20180] loop7: detected capacity change from 0 to 2048
[  940.418513][T20180] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  942.866215][T20220] Bluetooth: MGMT ver 1.22
[  943.206818][ T4324] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  943.228055][ T4324] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  944.043657][T20235] loop6: detected capacity change from 0 to 40427
[  944.080956][T20235] F2FS-fs (loop6): invalid crc value
[  944.132699][T20235] F2FS-fs (loop6): Found nat_bits in checkpoint
[  944.299044][T20235] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0
[  944.357704][T20235] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  944.463349][T16000] syz-executor: attempt to access beyond end of device
[  944.463349][T16000] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  946.757300][T20306] device-mapper: ioctl: only supply one of name or uuid, cmd(9)
[  947.052311][T20320] loop7: detected capacity change from 0 to 512
[  947.088646][T20320] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  947.479753][T14748] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  947.540235][T14748] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  949.142634][T20368] device-mapper: ioctl: only supply one of name or uuid, cmd(9)
[  949.712299][T20386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4737'.
[  949.731698][T20386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4737'.
[  949.752902][T20386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4737'.
[  949.776029][T20386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4737'.

getty: ttyS0: re[  949.922575][ T4289] Bluetooth: hci2: setting up ROME/QCA6390

Hü
ü[  949.988627][T20393] netlink: 144 bytes leftover after parsing attributes in process `syz.7.4740'.
[  950.175606][T20400] loop6: detected capacity change from 0 to 2048
[  950.245871][T20400] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)

ü
[  951.627249][T20428] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4751'.
[  951.637939][T20428] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4751'.
[  951.661922][T20428] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  951.671650][T20428] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  951.680419][T20428] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  951.689260][T20428] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  951.730744][T20428] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4751'.
[  951.758448][T20428] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4751'.
[  951.770841][T14748] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  951.930898][T14748] usb 7-1: device descriptor read/64, error -71
ü[  952.210902][T14748] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  952.310948][ T4290] Bluetooth: hci2: command 0xfc00 tx timeout
[  952.319725][ T4289] Bluetooth: hci2: Reading QCA version information failed (-110)
[  952.335824][ T4289] Bluetooth: hci2: Retry BT power ON:0

Hü
[  952.370762][T14748] usb 7-1: device descriptor read/64, error -71
[  952.501416][T14748] usb usb7-port1: attempt power cycle

ü
[  952.871208][T20462] overlayfs: failed to clone upperpath
[  952.921924][T14748] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  952.961934][T14748] usb 7-1: device descriptor read/8, error -71
[  953.231038][T14748] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  953.271734][T14748] usb 7-1: device descriptor read/8, error -71
[  953.399683][T14748] usb usb7-port1: unable to enumerate USB device
[  953.677869][T20478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4768'.
[  953.715806][T20478] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  953.724783][T20478] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  953.733631][T20478] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  953.742744][T20478] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  954.130997][T14748] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  954.312818][T14748] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  954.323238][T14748] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[  954.334305][T14748] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  954.347598][T14748] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  954.356793][T14748] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  954.711130][ T4290] Bluetooth: hci2: command 0xfc00 tx timeout
[  954.717291][ T4289] Bluetooth: hci2: Reading QCA version information failed (-110)
[  954.725907][ T4289] Bluetooth: hci2: Retry BT power ON:1

Hü
[  954.792158][T20499] overlayfs: failed to clone upperpath
[  954.878751][T14748] cxacru 8-1:1.0: send of cm 0x91 failed (-71)
[  954.900218][T14748] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71
[  954.927130][T14748] ATM dev 0: usbatm_atm_init: atm_start failed: -71!
[  954.969078][T14748] cxacru: probe of 8-1:1.0 failed with error -71
[  954.987105][T14748] usb 8-1: USB disconnect, device number 7

ü
[  955.324692][T20517] overlayfs: failed to clone lowerpath
[  956.165328][T20538] overlayfs: failed to clone upperpath
[  956.750915][ T4324] usb 8-1: new full-speed USB device number 8 using dummy_hcd
[  956.952521][ T4324] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  956.990600][ T4324] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  957.020579][ T4324] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  957.033757][ T4324] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  957.050591][ T4324] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  957.058705][ T4324] usb 8-1: Product: syz
[  957.086139][ T4324] usb 8-1: Manufacturer: syz
[  957.102505][ T4324] usb 8-1: SerialNumber: syz
[  957.110970][ T4288] Bluetooth: hci2: command 0xfc00 tx timeout
[  957.115775][T20551] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  957.124307][ T4289] Bluetooth: hci2: Reading QCA version information failed (-110)
[  957.132137][ T4289] Bluetooth: hci2: Retry BT power ON:2

Hü
[  957.376578][T20551] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  957.393358][T20551] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22

ü
[  957.472166][T20579] overlayfs: failed to clone lowerpath
[  958.010571][   T27] audit: type=1326 audit(1790275009.873:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20593 comm="syz.2.4818" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe9c379e159 code=0x0
[  958.033218][T20551] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  958.050761][T20551] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  958.376520][ T4324] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42
[  958.428075][ T4324] cdc_ncm 8-1:1.0: setting tx_max = 16384
[  958.633882][ T4324] cdc_ncm 8-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.7-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  958.735823][ T4324] usb 8-1: USB disconnect, device number 8
[  958.785719][ T4324] cdc_ncm 8-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.7-1, CDC NCM (NO ZLP)
[  958.868546][T20604] fuse: Bad value for 'fd'
[  959.510969][ T4290] Bluetooth: hci2: command 0xfc00 tx timeout
[  959.517141][ T4289] Bluetooth: hci2: Reading QCA version information failed (-110)
[  959.820603][ T4908] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  960.032634][ T4908] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  960.063714][ T4908] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  960.095527][ T4908] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 97, changing to 10
[  960.119749][ T4908] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 24929, setting to 1024
[  960.149672][ T4908] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  960.168077][ T4908] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  960.184120][ T4908] usb 8-1: Product: syz
[  960.204222][ T4908] usb 8-1: Manufacturer: syz
[  960.217994][ T4908] usb 8-1: SerialNumber: syz
[  960.249825][ T4908] usb 8-1: config 0 descriptor??
[  960.393233][   T27] audit: type=1326 audit(1790275012.263:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20664 comm="syz.6.4832" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f620959e159 code=0x0
[  960.490989][ T4908] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  960.744646][ T4908] usb 8-1: USB disconnect, device number 9
[  960.848914][T20683] device batadv_slave_0 entered promiscuous mode
[  960.857517][T20682] device batadv_slave_0 left promiscuous mode
[  962.753962][T20722] loop6: detected capacity change from 0 to 128
[  962.818588][T20722] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  962.879347][   T27] audit: type=1326 audit(1790275014.743:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20724 comm="syz.4.4855" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc66339e159 code=0x0
[  963.007893][T20722] FAT-fs (loop6): error, parent dir link count too low (2)
[  963.060702][T20722] FAT-fs (loop6): Filesystem has been set read-only
[  963.110893][T20731] netlink: 'syz.1.4856': attribute type 1 has an invalid length.
[  963.149249][T16000] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  963.235778][T20731] 8021q: adding VLAN 0 to HW filter on device bond1
[  963.630950][T16210] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  963.740620][ T4358] usb 8-1: new low-speed USB device number 10 using dummy_hcd
[  963.812449][T16210] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  963.831253][T16210] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  963.851705][T16210] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 97, changing to 10
[  963.880954][T16210] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 24929, setting to 1024
[  963.919925][T16210] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  963.948049][T16210] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  963.962957][T16210] usb 7-1: Product: syz
[  963.972415][ T4358] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  963.990929][T16210] usb 7-1: Manufacturer: syz
[  963.991804][ T4358] usb 8-1: config 0 has no interface number 0
[  963.995621][T16210] usb 7-1: SerialNumber: syz
[  964.022874][T16210] usb 7-1: config 0 descriptor??
[  964.039215][ T4358] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  964.091976][ T4358] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  964.123405][ T4358] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  964.156808][ T4358] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  964.201830][ T4358] usb 8-1: config 0 descriptor??
[  964.207506][T20746] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  964.257056][ T4358] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  964.259432][T16210] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux1
[  964.471139][    C0] iowarrior 8-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  964.480403][ T4358] usb 8-1: USB disconnect, device number 10
[  964.506931][T16211] usb 7-1: USB disconnect, device number 22
[  965.292994][T20784] device batadv_slave_0 entered promiscuous mode
[  965.313768][T20782] device batadv_slave_0 left promiscuous mode
[  965.610684][ T4358] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  965.800971][ T4358] usb 8-1: Using ep0 maxpacket: 32
[  965.813756][ T4358] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  965.850584][ T4358] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  965.890579][ T4358] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  965.919127][ T4358] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  965.965007][ T4358] usb 8-1: config 0 descriptor??
[  966.368845][T20803] gadgetfs: bound to dummy_udc driver
[  966.387267][ T4358] ft260 0003:0403:6030.000B: unknown main item tag 0x0
[  966.420624][ T4358] ft260 0003:0403:6030.000B: unknown main item tag 0x0
[  966.455548][ T4358] ft260 0003:0403:6030.000B: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.7-1/input0
[  966.582399][ T4358] ft260 0003:0403:6030.000B: chip code: 0000 0000
[  966.676985][T20816] 9pnet_fd: Insufficient options for proto=fd
[  966.686277][T16211] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  966.702810][    C1] gadgetfs: connected
[  966.711725][T16211] gadgetfs: disconnected
[  966.890797][    C1] gadgetfs: connected
[  966.896268][T16211] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  966.920626][T16211] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  966.929763][T16211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  966.953437][    C1] gadgetfs: configuration #1
[  967.152424][T20807] gadgetfs: suspended from state 3
[  967.160359][ T4908] usb 1-1: USB disconnect, device number 2
[  967.171384][T20807] gadgetfs: disconnected
[  967.193543][ T4358] ft260 0003:0403:6030.000B: failed to retrieve status: -71
[  967.213535][ T4358] ft260 0003:0403:6030.000B: failed to reset I2C controller: -71
[  967.307907][ T4358] usb 8-1: USB disconnect, device number 11
[  967.455358][T20821] netlink: 'syz.4.4893': attribute type 1 has an invalid length.
[  967.534644][T20821] 8021q: adding VLAN 0 to HW filter on device bond1
[  967.571333][T20819] fido_id[20819]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  968.484626][T20853] __nla_validate_parse: 3 callbacks suppressed
[  968.484644][T20853] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4907'.
[  968.994256][T20853] team0: Port device team_slave_0 removed
[  969.031947][T20863] netlink: 'syz.6.4911': attribute type 1 has an invalid length.
[  969.171692][T20863] 8021q: adding VLAN 0 to HW filter on device bond1
[  970.242690][ T4358] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  970.355290][T20887] netlink: 'syz.1.4921': attribute type 15 has an invalid length.
[  970.406026][T20887] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0
[  970.415088][T20887] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0
[  970.424022][T20887] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0
[  970.432812][T20887] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0
[  970.454173][ T4358] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  970.490574][ T4358] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  970.500331][ T4358] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  970.525201][ T4358] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  970.599546][ T4358] spcp8x5 8-1:1.0: SPCP8x5 converter detected
[  970.607891][T20887] netlink: 'syz.1.4921': attribute type 15 has an invalid length.
[  970.655544][ T4358] usb 8-1: SPCP8x5 converter now attached to ttyUSB0
[  970.695346][T20897] qfq: no options
[  971.003911][T20885] SPCP8x5 ttyUSB0: failed to set control lines: -110
[  971.021655][T20885] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32)
[  971.051131][T20885] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  971.213942][T20884] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  971.268374][T16211] usb 8-1: USB disconnect, device number 12
[  971.288429][T16211] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  971.328111][T16211] spcp8x5 8-1:1.0: device disconnected
[  972.541801][T20933] netlink: 'syz.2.4950': attribute type 1 has an invalid length.
[  972.607959][T20933] 8021q: adding VLAN 0 to HW filter on device bond2
[  972.677244][T20938] netlink: 'syz.4.4939': attribute type 15 has an invalid length.
[  972.729789][T20938] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[  972.738987][T20938] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[  972.747916][T20938] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[  972.756718][T20938] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[  972.795785][T20939] bond2: (slave geneve2): making interface the new active one
[  972.821450][T20939] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  972.844274][T20938] netlink: 'syz.4.4939': attribute type 15 has an invalid length.
[  972.858417][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  973.091191][T20950] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4941'.
[  973.511785][T20950] team0: Port device team_slave_0 removed
[  973.560945][T16210] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  973.752972][T16210] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  973.786224][T16210] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  973.827078][T16210] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  973.870632][T16210] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  973.873585][T20975] overlayfs: failed to clone upperpath
[  973.903919][T16210] usb 8-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  973.930633][T16210] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  975.051106][T21010] overlayfs: failed to clone upperpath
[  975.209541][T16210] gud 8-1:1.0: DP-1: Failed to add properties (ret=-71)
[  975.228525][T16210] gud 8-1:1.0: Failed to get connectors (error=-71)
[  975.255641][T16210] gud: probe of 8-1:1.0 failed with error -71
[  975.331182][T16210] usb 8-1: USB disconnect, device number 13
[  975.432061][T21022] netlink: 'syz.6.4973': attribute type 1 has an invalid length.
[  975.502112][T21022] 8021q: adding VLAN 0 to HW filter on device bond2
[  975.615905][T21024] bond2: (slave geneve2): making interface the new active one
[  975.677236][T21024] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  975.715423][T10097] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  976.066237][T21042] overlayfs: failed to clone upperpath
[  977.699351][T21071] loop6: detected capacity change from 0 to 32768
[  977.761845][T21071] XFS (loop6): Mounting V5 Filesystem
[  977.806457][T21071] XFS (loop6): Ending clean mount
[  978.138013][T16000] XFS (loop6): Unmounting Filesystem
[  978.538934][T21118] loop7: detected capacity change from 0 to 512
[  978.567202][T21118] EXT4-fs: Ignoring removed bh option
[  978.575653][T21120] input: syz1 as /devices/virtual/input/input12
[  978.648198][T21118] FAULT_INJECTION: forcing a failure.
[  978.648198][T21118] name failslab, interval 1, probability 0, space 0, times 0
[  978.716605][T21118] CPU: 0 PID: 21118 Comm: syz.7.5011 Not tainted syzkaller #0
[  978.724277][T21118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  978.734394][T21118] Call Trace:
[  978.737714][T21118]  <TASK>
[  978.740725][T21118]  dump_stack_lvl+0x188/0x24e
[  978.745552][T21118]  ? show_regs_print_info+0x12/0x12
[  978.750796][T21118]  ? load_image+0x410/0x410
[  978.755353][T21118]  ? __might_sleep+0xd0/0xd0
[  978.759998][T21118]  ? __lock_acquire+0x7c40/0x7c40
[  978.765095][T21118]  should_fail_ex+0x390/0x4c0
[  978.769824][T21118]  should_failslab+0x5/0x20
[  978.774381][T21118]  slab_pre_alloc_hook+0x59/0x300
[  978.779487][T21118]  kmem_cache_alloc+0x56/0x2f0
[  978.784318][T21118]  ? __sigqueue_alloc+0x40c/0x520
[  978.789498][T21118]  ? __sigqueue_alloc+0x32/0x520
[  978.794490][T21118]  __sigqueue_alloc+0x40c/0x520
[  978.799404][T21118]  do_timer_create+0x1e2/0x12f0
[  978.804384][T21118]  ? vfs_write+0x777/0x9a0
[  978.808864][T21118]  ? do_futex+0x2e2/0x320
[  978.813242][T21118]  ? __ia32_sys_clock_nanosleep_time32+0xa0/0xa0
[  978.819641][T21118]  __x64_sys_timer_create+0x149/0x1c0
[  978.825212][T21118]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  978.831256][T21118]  ? posix_timer_event+0xf0/0xf0
[  978.836260][T21118]  ? lock_chain_count+0x20/0x20
[  978.841174][T21118]  ? lockdep_hardirqs_on+0x94/0x140
[  978.846477][T21118]  do_syscall_64+0x4c/0xa0
[  978.850948][T21118]  ? clear_bhb_loop+0x60/0xb0
[  978.855673][T21118]  ? clear_bhb_loop+0x60/0xb0
[  978.860407][T21118]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  978.866358][T21118] RIP: 0033:0x7f0ea1d9e159
[  978.870817][T21118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  978.890468][T21118] RSP: 002b:00007f0e9fff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de
[  978.898937][T21118] RAX: ffffffffffffffda RBX: 00007f0ea2025fa0 RCX: 00007f0ea1d9e159
[  978.906962][T21118] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 98e63d26ce15b27f
[  978.914980][T21118] RBP: 00007f0ea1e3506b R08: 0000000000000000 R09: 0000000000000000
[  978.922991][T21118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  978.931000][T21118] R13: 00007f0ea2026038 R14: 00007f0ea2025fa0 R15: 00007ffd37507c88
[  978.939031][T21118]  </TASK>
[  979.235432][T21128] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 1, id = 0
[  979.617262][T21141] loop7: detected capacity change from 0 to 2048
[  979.624178][T21141] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=2362, location=2362
[  979.625438][T21141] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  979.625908][T21141] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  979.688701][T21144] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  979.724802][T21141] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  979.775155][   T27] audit: type=1800 audit(1790275031.643:55): pid=21141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5020" name="file1" dev="loop7" ino=1346 res=0 errno=0
[  980.070770][ T4289] Bluetooth: hci0: command 0x0406 tx timeout
[  980.108057][T21153] loop6: detected capacity change from 0 to 4096
[  980.165744][T21153] EXT4-fs: Ignoring removed nobh option
[  980.167944][T21158] 
[  980.173738][T21158] ======================================================
[  980.180784][T21158] WARNING: possible circular locking dependency detected
[  980.187876][T21158] syzkaller #0 Not tainted
[  980.192322][T21158] ------------------------------------------------------
[  980.199373][T21158] syz.7.5027/21158 is trying to acquire lock:
[  980.205499][T21158] ffff888027898428 (&hdev->lock){+.+.}-{3:3}, at: l2cap_chan_connect+0xfb/0xe20
[  980.214793][T21158] 
[  980.214793][T21158] but task is already holding lock:
[  980.222195][T21158] ffffffff8ded61c8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x99/0x10c0
[  980.231315][T21158] 
[  980.231315][T21158] which lock already depends on the new lock.
[  980.231315][T21158] 
[  980.241771][T21158] 
[  980.241771][T21158] the existing dependency chain (in reverse order) is:
[  980.250809][T21158] 
[  980.250809][T21158] -> #2 (rfcomm_mutex){+.+.}-{3:3}:
[  980.258246][T21158]        __mutex_lock+0x12d/0xae0
[  980.263300][T21158]        rfcomm_security_cfm+0x95/0x780
[  980.268941][T21158]        hci_encrypt_cfm+0x363/0x4d0
[  980.274280][T21158]        hci_encrypt_change_evt+0x961/0xd30
[  980.280189][T21158]        hci_event_packet+0x806/0x1290
[  980.285674][T21158]        hci_rx_work+0x3eb/0xd40
[  980.290697][T21158]        process_one_work+0x8ab/0x1160
[  980.296244][T21158]        worker_thread+0xaf5/0x12a0
[  980.301483][T21158]        kthread+0x29d/0x330
[  980.306085][T21158]        ret_from_fork+0x1f/0x30
[  980.311047][T21158] 
[  980.311047][T21158] -> #1 (hci_cb_list_lock){+.+.}-{3:3}:
[  980.318800][T21158]        __mutex_lock+0x12d/0xae0
[  980.323845][T21158]        hci_remote_features_evt+0x464/0xa10
[  980.329848][T21158]        hci_event_packet+0x806/0x1290
[  980.335327][T21158]        hci_rx_work+0x3eb/0xd40
[  980.340291][T21158]        process_one_work+0x8ab/0x1160
[  980.345772][T21158]        worker_thread+0xaf5/0x12a0
[  980.350990][T21158]        kthread+0x29d/0x330
[  980.355592][T21158]        ret_from_fork+0x1f/0x30
[  980.360558][T21158] 
[  980.360558][T21158] -> #0 (&hdev->lock){+.+.}-{3:3}:
[  980.367880][T21158]        __lock_acquire+0x2d18/0x7c40
[  980.373281][T21158]        lock_acquire+0x1bb/0x4a0
[  980.378324][T21158]        __mutex_lock+0x12d/0xae0
[  980.383368][T21158]        l2cap_chan_connect+0xfb/0xe20
[  980.388867][T21158]        l2cap_sock_connect+0x576/0x750
[  980.394441][T21158]        kernel_connect+0x13e/0x1c0
[  980.399660][T21158]        rfcomm_dlc_open+0x600/0x10c0
[  980.405059][T21158]        rfcomm_sock_connect+0x2e9/0x600
[  980.410739][T21158]        __sys_connect+0x3cb/0x450
[  980.415864][T21158]        __x64_sys_connect+0x76/0x80
[  980.421166][T21158]        do_syscall_64+0x4c/0xa0
[  980.426125][T21158]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  980.432593][T21158] 
[  980.432593][T21158] other info that might help us debug this:
[  980.432593][T21158] 
[  980.442837][T21158] Chain exists of:
[  980.442837][T21158]   &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex
[  980.442837][T21158] 
[  980.455367][T21158]  Possible unsafe locking scenario:
[  980.455367][T21158] 
[  980.462824][T21158]        CPU0                    CPU1
[  980.468198][T21158]        ----                    ----
[  980.473578][T21158]   lock(rfcomm_mutex);
[  980.477751][T21158]                                lock(hci_cb_list_lock);
[  980.484792][T21158]                                lock(rfcomm_mutex);
[  980.491482][T21158]   lock(&hdev->lock);
[  980.495566][T21158] 
[  980.495566][T21158]  *** DEADLOCK ***
[  980.495566][T21158] 
[  980.503724][T21158] 1 lock held by syz.7.5027/21158:
[  980.508850][T21158]  #0: ffffffff8ded61c8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x99/0x10c0
[  980.518292][T21158] 
[  980.518292][T21158] stack backtrace:
[  980.524195][T21158] CPU: 0 PID: 21158 Comm: syz.7.5027 Not tainted syzkaller #0
[  980.531673][T21158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  980.541772][T21158] Call Trace:
[  980.545071][T21158]  <TASK>
[  980.548036][T21158]  dump_stack_lvl+0x188/0x24e
[  980.552755][T21158]  ? load_image+0x410/0x410
[  980.557288][T21158]  ? show_regs_print_info+0x12/0x12
[  980.562511][T21158]  ? print_circular_bug+0x12b/0x1a0
[  980.567765][T21158]  check_noncircular+0x296/0x330
[  980.572746][T21158]  ? add_chain_block+0x9b0/0x9b0
[  980.577705][T21158]  ? lockdep_lock+0xf1/0x1f0
[  980.582322][T21158]  ? _find_first_zero_bit+0xd2/0x100
[  980.587636][T21158]  __lock_acquire+0x2d18/0x7c40
[  980.592526][T21158]  ? verify_lock_unused+0x140/0x140
[  980.597756][T21158]  ? verify_lock_unused+0x140/0x140
[  980.602989][T21158]  lock_acquire+0x1bb/0x4a0
[  980.607520][T21158]  ? l2cap_chan_connect+0xfb/0xe20
[  980.612658][T21158]  ? __might_sleep+0xd0/0xd0
[  980.617264][T21158]  ? read_lock_is_recursive+0x10/0x10
[  980.622669][T21158]  ? __lock_acquire+0x7c40/0x7c40
[  980.627745][T21158]  ? __lock_acquire+0x28d6/0x7c40
[  980.632813][T21158]  __mutex_lock+0x12d/0xae0
[  980.637337][T21158]  ? l2cap_chan_connect+0xfb/0xe20
[  980.642474][T21158]  ? do_raw_read_unlock+0x39/0x70
[  980.647520][T21158]  ? _raw_read_unlock+0x24/0x40
[  980.652400][T21158]  ? hci_get_route+0x3a1/0x4d0
[  980.657184][T21158]  ? l2cap_chan_connect+0xfb/0xe20
[  980.662331][T21158]  ? mutex_lock_nested+0x10/0x10
[  980.667294][T21158]  ? print_unlock_imbalance_bug+0x160/0x160
[  980.673218][T21158]  ? mark_lock+0x94/0x320
[  980.677587][T21158]  l2cap_chan_connect+0xfb/0xe20
[  980.682593][T21158]  ? lock_chain_count+0x20/0x20
[  980.687497][T21158]  ? l2cap_sock_connect+0x13e/0x750
[  980.692746][T21158]  ? l2cap_chan_le_send_credits+0x590/0x590
[  980.698682][T21158]  ? __local_bh_enable_ip+0x136/0x1c0
[  980.704088][T21158]  ? _local_bh_enable+0xa0/0xa0
[  980.708987][T21158]  l2cap_sock_connect+0x576/0x750
[  980.714046][T21158]  ? l2cap_sock_bind+0x870/0x870
[  980.719030][T21158]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  980.725056][T21158]  ? memset+0x1e/0x40
[  980.729089][T21158]  ? kernel_connect+0xee/0x1c0
[  980.733873][T21158]  kernel_connect+0x13e/0x1c0
[  980.738589][T21158]  ? kernel_accept+0x420/0x420
[  980.743399][T21158]  ? rfcomm_dlc_open+0x5c4/0x10c0
[  980.748440][T21158]  rfcomm_dlc_open+0x600/0x10c0
[  980.753316][T21158]  ? lock_chain_count+0x20/0x20
[  980.758195][T21158]  ? rfcomm_sock_connect+0x2c2/0x600
[  980.763508][T21158]  ? rfcomm_dlc_free+0x40/0x40
[  980.768291][T21158]  ? __local_bh_enable_ip+0x136/0x1c0
[  980.773677][T21158]  ? lockdep_hardirqs_on+0x94/0x140
[  980.778908][T21158]  ? __local_bh_enable_ip+0x136/0x1c0
[  980.784297][T21158]  ? _local_bh_enable+0xa0/0xa0
[  980.789164][T21158]  ? do_raw_spin_unlock+0x11d/0x230
[  980.794382][T21158]  rfcomm_sock_connect+0x2e9/0x600
[  980.799513][T21158]  ? rfcomm_sock_bind+0x550/0x550
[  980.804566][T21158]  __sys_connect+0x3cb/0x450
[  980.809185][T21158]  ? __sys_connect_file+0x170/0x170
[  980.814417][T21158]  __x64_sys_connect+0x76/0x80
[  980.819196][T21158]  do_syscall_64+0x4c/0xa0
[  980.823629][T21158]  ? clear_bhb_loop+0x60/0xb0
[  980.828325][T21158]  ? clear_bhb_loop+0x60/0xb0
[  980.833020][T21158]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  980.838969][T21158] RIP: 0033:0x7f0ea1d9e159
[  980.843400][T21158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  980.863029][T21158] RSP: 002b:00007f0e9fff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  980.871510][T21158] RAX: ffffffffffffffda RBX: 00007f0ea2025fa0 RCX: 00007f0ea1d9e159
[  980.879539][T21158] RDX: 000000000000000a RSI: 0000200000000040 RDI: 0000000000000004
[  980.887534][T21158] RBP: 00007f0ea1e3506b R08: 0000000000000000 R09: 0000000000000000
[  980.895524][T21158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  980.903512][T21158] R13: 00007f0ea2026038 R14: 00007f0ea2025fa0 R15: 00007ffd37507c88
[  980.911508][T21158]  </TASK>
[  980.926440][T21153] EXT4-fs: Ignoring removed bh option
[  980.937635][T21160] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 1, id = 0
[  980.949984][T21153] EXT4-fs (loop6): Test dummy encryption mode enabled
[  980.977790][T21153] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  981.098427][T21153] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  981.198139][T16000] EXT4-fs (loop6): unmounting filesystem.