last executing test programs:

4m36.69342058s ago: executing program 2 (id=260):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="20c81e0000004d61501d0100000000000000100000000000800700000000000038"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="40830100000081"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0})

4m34.062128684s ago: executing program 2 (id=290):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4m33.765385462s ago: executing program 2 (id=292):
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, 0x0, 0x50)
r2 = dup(r1)
fcntl$setpipe(r0, 0x407, 0x9)
vmsplice(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="c3", 0x1}], 0x1, 0x1)
read$FUSE(r0, &(0x7f0000003140)={0x2020}, 0x2020)

4m33.614299385s ago: executing program 2 (id=295):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x103496, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00')

4m33.467262639s ago: executing program 2 (id=298):
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0/file1\x00', 0x1000001, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./bus\x00', 0x4080, 0x0, 0x1, 0x0, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0/file1\x00', &(0x7f0000000100), 0x0, 0x0, 0x1)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200)

4m32.024529744s ago: executing program 2 (id=320):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x5, 0x6, 0x4, 0x10}, {0x4, 0x81, 0xa, 0x10000}]}, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe)

4m31.028741399s ago: executing program 32 (id=320):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x5, 0x6, 0x4, 0x10}, {0x4, 0x81, 0xa, 0x10000}]}, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe)

3m32.43024774s ago: executing program 5 (id=739):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)='\\', 0x1}], 0x1}, 0x24000800)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})

3m31.872227354s ago: executing program 5 (id=741):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x5, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x800, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x4000, 0x3, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367, 0x0, r6}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x796}, &(0x7f0000000340)=0x8)

3m30.057533058s ago: executing program 5 (id=752):
mount(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000070000000400000002000000000000"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r3, &(0x7f0000000280)}, 0x20)

3m29.675802968s ago: executing program 5 (id=758):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000100)={[{@init_itable}, {@resuid}, {@grpquota}]}, 0x3, 0x445, &(0x7f0000000b00)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mount$binderfs(0x0, 0x0, 0x0, 0x4847, &(0x7f0000000100)=ANY=[@ANYBLOB='max=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100))
r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
read$FUSE(r1, &(0x7f0000000840)={0x2020}, 0x2020)

3m28.878137297s ago: executing program 5 (id=766):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000000), &(0x7f0000000380)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc)

3m27.063543442s ago: executing program 5 (id=782):
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, 0x0, 0x40040c4)
syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ac05a81201000102030109022900010100c0320904000000fffd01"], 0x0)
close(0xffffffffffffffff)

3m26.690444161s ago: executing program 33 (id=782):
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, 0x0, 0x40040c4)
syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ac05a81201000102030109022900010100c0320904000000fffd01"], 0x0)
close(0xffffffffffffffff)

2m53.700080687s ago: executing program 1 (id=1014):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x1ee86, 0x409}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}]}, 0x2c}}, 0x24008c44)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@dellink={0x20, 0x11, 0x1, 0x70bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, 0xc0a742c700a80d57, 0x25aa6}}, 0x20}}, 0x2000e844)

2m52.196523694s ago: executing program 1 (id=1019):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0xc3)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x149)
write(r1, &(0x7f0000000000)='7', 0x1)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000300)={0x7f, 0x4d, 0x2ba8})

2m51.017567342s ago: executing program 1 (id=1027):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000000), 0x492493c, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0)

2m50.788355058s ago: executing program 1 (id=1030):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000000), 0xfd, 0x244, &(0x7f0000000680)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x22042, 0x3db)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)

2m49.231935176s ago: executing program 1 (id=1042):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x20000)

2m48.355451568s ago: executing program 1 (id=1047):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e24, @multicast1=0xe0000306}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0xd5, 0x0, 0xf}]}}}], 0x18}}], 0x1, 0x4880)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467630000635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f", @ANYRESOCT=0x0], 0xfd, 0x5531, &(0x7f0000000540)="$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")
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

2m47.8158039s ago: executing program 34 (id=1047):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e24, @multicast1=0xe0000306}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0xd5, 0x0, 0xf}]}}}], 0x18}}], 0x1, 0x4880)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467630000635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f", @ANYRESOCT=0x0], 0xfd, 0x5531, &(0x7f0000000540)="$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")
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

1m18.579492761s ago: executing program 4 (id=1915):
setitimer(0x1, &(0x7f0000000000)={{0x100, 0x5}, {0xb, 0x4}}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x3, 0x200, 0x101, 0x86}, 0x10)
write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xa74)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
setitimer(0x1, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, 0x0)

1m18.441129144s ago: executing program 4 (id=1917):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r0 = msgget$private(0x0, 0x19f)
msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYRES16], 0x2000, 0x0)
msgrcv(r0, 0x0, 0x0, 0x2, 0x3000)
msgctl$IPC_SET(r0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0xfffe}, 0x0, 0x0, 0x3, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7d, 0x3})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)

1m18.144692602s ago: executing program 4 (id=1921):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2)
r2 = dup3(r1, r0, 0x80000)
read$watch_queue(r2, &(0x7f0000000500)=""/227, 0xe3)

1m17.967640576s ago: executing program 4 (id=1924):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x380440e, &(0x7f0000000080)={[{@delalloc}, {@discard}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x24)
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)

1m17.115113756s ago: executing program 4 (id=1928):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000001000/0x1000)=nil)

1m16.211486659s ago: executing program 4 (id=1932):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x21c1, &(0x7f0000000340)={0x0, 0xca23, 0x200, 0xfffffff7, 0x182}, &(0x7f0000000300), &(0x7f0000ff4000), 0x0)
readv(r0, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/144, 0x90}], 0x1)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}})

1m1.091315184s ago: executing program 35 (id=1932):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x21c1, &(0x7f0000000340)={0x0, 0xca23, 0x200, 0xfffffff7, 0x182}, &(0x7f0000000300), &(0x7f0000ff4000), 0x0)
readv(r0, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/144, 0x90}], 0x1)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}})

16.937751666s ago: executing program 8 (id=2064):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e28, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0)

14.651605271s ago: executing program 8 (id=2064):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e28, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0)

11.271240891s ago: executing program 8 (id=2064):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e28, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0)

7.987412979s ago: executing program 8 (id=2064):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e28, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0)

5.194155916s ago: executing program 6 (id=2211):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42142, 0x1)
close(0x3)
close(r1)
signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x800)
socket$inet6_sctp(0xa, 0x5, 0x84)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1810040, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

5.179645897s ago: executing program 3 (id=2212):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
connect$inet(r1, 0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x1003}, [@IFLA_CARRIER={0x5, 0x21, 0x4}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040811}, 0x48000)

4.923224732s ago: executing program 3 (id=2214):
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001)
r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}})

4.5977569s ago: executing program 0 (id=2215):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x130, 0x1000000, 0xffffffff, 0x130, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x130, 0x0, {0x0, 0x1c8}, [@common=@unspec=@connbytes={{0x38}, {[{0x80000001}, {0x2d0f}], 0x1, 0x2}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x8, 0x1eb, 0xfb1, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x4, 0x3ff, 0xc15ac56b9c76af00}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xff, 0xffffff00, 'veth0_to_team\x00', 'vcan0\x00', {}, {0xff}, 0x32, 0x3}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@icmp={{0x28}, {0x0, 'zF', 0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x44, 0x0, [0x14, 0x6, 0x5, 0x13, 0x14, 0x4, 0x20, 0x1f, 0xe, 0x22, 0x6, 0x20, 0x24, 0x1a, 0x23, 0x3f], 0x1, 0x8, 0x8001}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x348)

4.557261961s ago: executing program 3 (id=2216):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x8001}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600), 0xfec8)
recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000440)=""/123, 0xff32}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000dc0)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680})

4.516222662s ago: executing program 7 (id=2217):
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
personality(0x4100001)
ppoll(0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0)

4.349973066s ago: executing program 3 (id=2218):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
munlockall()
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8)
r0 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0)
process_vm_writev(r0, 0x0, 0x0, &(0x7f0000001d80)=[{0x0}], 0x1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

4.299780017s ago: executing program 7 (id=2219):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="38000000031401002dbd700002dcdf250900020073607a310000000008004100736977001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x14f7325ddd07b80}, 0x44000)
syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0003001000000002800000121f", 0x2e}], 0x1}, 0x20008000)

4.1981599s ago: executing program 0 (id=2220):
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$key(0xf, 0x3, 0x2)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x48)
splice(r0, 0x0, r2, 0x0, 0x3000, 0x100000000000000d)

4.18039189s ago: executing program 6 (id=2221):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0600000004000000040000000001"], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)

3.946512906s ago: executing program 0 (id=2222):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$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")
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x30)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x85)
lseek(r2, 0x104, 0x1)
getdents64(r2, 0x0, 0x4f)

3.896255027s ago: executing program 8 (id=2064):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e28, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0)

3.888568857s ago: executing program 3 (id=2223):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"})
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0})

3.829963038s ago: executing program 6 (id=2224):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
capset(0x0, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x80501)
fanotify_mark(0xffffffffffffffff, 0x290, 0x48000008, 0xffffffffffffffff, 0x0)

1.189450012s ago: executing program 0 (id=2225):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
recvmmsg$unix(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0)
read$alg(r0, &(0x7f0000000000)=""/24, 0x18)
close(r1)

1.188297222s ago: executing program 7 (id=2226):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0xa0, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e21, 0x365, @mcast2, 0x6}, 0x1c)
recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0xfffffef8}, 0xdb2a}], 0x1, 0x40032060, 0x0)

1.188027112s ago: executing program 6 (id=2227):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000054)
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4)
sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e20, 0x9, @private0, 0xfffffffc}, 0x1c)

1.187845842s ago: executing program 3 (id=2228):
unshare(0x6a060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$l2tp6(0xa, 0x2, 0x73)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x200000000000000)

989.322917ms ago: executing program 7 (id=2229):
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
r0 = socket$inet6(0xa, 0x2, 0x0)
close(r0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4)
sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="18000000000000002900000037"], 0x10a0}, 0x34004054)

981.888937ms ago: executing program 6 (id=2230):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
newfstatat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0\x00', 0x0, 0x800)

877.193639ms ago: executing program 0 (id=2231):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c}]}, @NFT_MSG_DELFLOWTABLE={0x24c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x40000000}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x110, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0xfe45, 0x1, 'veth0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x2dc}}, 0x0)

739.697192ms ago: executing program 7 (id=2232):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
unshare(0x20000000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x40000000, 0x0)

607.126646ms ago: executing program 6 (id=2233):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000006c0)={0x14, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x6, 0x3, &(0x7f0000000080)={0x2, "1a9c66bf2f615e4200000000e200"}})

529.543527ms ago: executing program 0 (id=2234):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x140, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x114, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c}}, @TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0x4, 0x30, 0x3, 0xe}, {0x3ff, 0xff, 0x5, 0x2}, {0x3, 0x2, 0x80}]}}, @TCA_BPF_POLICE={0x4c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffa}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x6, 0x2, 0xc39, 0x2, {0x3, 0x0, 0xa28, 0xffff, 0x9, 0x3}, {0xa, 0x0, 0x9, 0x9, 0x5, 0xffff}, 0x8000, 0x7, 0x5}}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0xe, 0xfff2}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_OPS={{0x3, 0x4, 0x7}, {0x3c, 0x5, [{0xb, 0x0, 0x1, 0x2}, {0x1, 0x60, 0x3, 0x27}, {0x9, 0x7, 0x0, 0x4}, {0x8, 0x2, 0xe1, 0x782}, {0x1000, 0x7f, 0x81, 0x9}, {0x7, 0x6, 0x2, 0xa74}, {0x670, 0x78, 0xb, 0x2}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}]}}]}, 0x140}}, 0x0)

212.465665ms ago: executing program 7 (id=2235):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x2}]}, 0x10)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c)

0s ago: executing program 8 (id=2064):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e28, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0)

kernel console output (not intermixed with test programs):

ring): unset [0, 0] type 1 family 0 port 8472 - 0
[  200.570812][    T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.656300][ T7510] loop3: detected capacity change from 0 to 512
[  200.763008][ T7510] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.968: iget: bad extended attribute block 134217728
[  200.792497][ T7515] futex_wake_op: syz.6.970 tries to shift op by 144; fix this program
[  200.802489][ T7515] futex_wake_op: syz.6.970 tries to shift op by 144; fix this program
[  200.823161][ T7513] af_packet: tpacket_rcv: packet too big, clamped from 240 to 4294967272. macoff=96
[  200.864690][ T7510] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.968: couldn't read orphan inode 15 (err -117)
[  200.883072][    T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  200.897067][ T7510] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  200.937536][    T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.978929][ T7510] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.968: bg 0: block 465: padding at end of block bitmap is not set
[  201.060011][ T7518] EXT4-fs (loop3): shut down requested (1)
[  201.094347][ T7510] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  201.128418][ T4286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  201.145106][ T4286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  201.158872][ T4286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  201.170776][ T4277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  201.185335][ T4277] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  201.212315][ T4286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  201.358957][ T4271] EXT4-fs (loop3): unmounting filesystem.
[  201.634140][    T9] tipc: Disabling bearer <udp:syz0>
[  201.668455][    T9] tipc: Left network mode
[  201.777568][ T4280] Bluetooth: hci1: command 0x0406 tx timeout
[  201.788490][ T4286] Bluetooth: hci2: command 0x0406 tx timeout
[  202.126492][ T7519] chnl_net:caif_netlink_parms(): no params data found
[  202.837423][ T7519] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.844846][ T7519] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.868198][ T7519] device bridge_slave_0 entered promiscuous mode
[  202.978737][ T7519] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.980902][ T7584] loop1: detected capacity change from 0 to 128
[  202.994983][ T7519] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.029198][ T7519] device bridge_slave_1 entered promiscuous mode
[  203.259517][ T7591] "syz.3.991" (7591) uses obsolete ecb(arc4) skcipher
[  203.290697][ T7519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  203.295516][ T7591] syz.3.991 sent an empty control message without MSG_MORE.
[  203.313120][ T4277] Bluetooth: hci3: command 0x0409 tx timeout
[  203.493962][ T7519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  203.747254][ T7519] team0: Port device team_slave_0 added
[  203.790926][ T7519] team0: Port device team_slave_1 added
[  203.990327][ T7614] xt_hashlimit: size too large, truncated to 1048576
[  204.296753][ T7519] batman_adv: batadv0: Adding interface: batadv_slave_0
[  204.324797][ T7519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.435205][ T7519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  204.753999][ T7630] netlink: 'syz.1.1003': attribute type 30 has an invalid length.
[  204.866695][ T7519] batman_adv: batadv0: Adding interface: batadv_slave_1
[  204.927672][ T7519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.059347][ T7519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.216222][    T9] device hsr_slave_0 left promiscuous mode
[  205.297459][    T9] device hsr_slave_1 left promiscuous mode
[  205.336713][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  205.357119][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  205.377070][ T4277] Bluetooth: hci3: command 0x041b tx timeout
[  205.387143][   T14] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  205.416357][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  205.452633][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  205.475565][    T9] device bridge_slave_0 left promiscuous mode
[  205.505392][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.598032][   T14] usb 4-1: too many configurations: 168, using maximum allowed: 8
[  205.625518][   T14] usb 4-1: config index 0 descriptor too short (expected 65016, got 133)
[  205.685937][   T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  205.813447][   T14] usb 4-1: config index 1 descriptor too short (expected 65016, got 133)
[  205.862039][   T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  205.917842][    T9] device veth1_macvtap left promiscuous mode
[  205.924388][    T9] device veth0_macvtap left promiscuous mode
[  205.934622][   T14] usb 4-1: config index 2 descriptor too short (expected 65016, got 133)
[  205.964968][    T9] device veth1_vlan left promiscuous mode
[  205.973161][   T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  206.004961][    T9] device veth0_vlan left promiscuous mode
[  206.016708][   T14] usb 4-1: config index 3 descriptor too short (expected 65016, got 133)
[  206.059988][   T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  206.100264][   T14] usb 4-1: config index 4 descriptor too short (expected 65016, got 133)
[  206.131017][   T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  206.172100][   T14] usb 4-1: config index 5 descriptor too short (expected 65016, got 133)
[  206.198480][   T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  206.231737][   T14] usb 4-1: config index 6 descriptor too short (expected 65016, got 133)
[  206.251092][   T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  206.290301][   T14] usb 4-1: config index 7 descriptor too short (expected 65016, got 133)
[  206.313395][   T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  206.350127][   T14] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  206.374823][   T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.403307][   T14] usb 4-1: Product: syz
[  206.422338][   T14] usb 4-1: Manufacturer: syz
[  206.445467][   T14] usb 4-1: SerialNumber: syz
[  206.618285][   T14] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  207.160416][ T4476] usb 4-1: USB disconnect, device number 8
[  207.330834][    T9] bond1 (unregistering): Released all slaves
[  207.472899][ T4277] Bluetooth: hci3: command 0x040f tx timeout
[  207.697247][   T14] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  207.796079][   T14] ath9k_htc: Failed to initialize the device
[  207.830236][ T4476] usb 4-1: ath9k_htc: USB layer deinitialized
[  208.490693][    T9] team0 (unregistering): Port device team_slave_1 removed
[  208.569989][    T9] team0 (unregistering): Port device team_slave_0 removed
[  208.631468][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  208.708901][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  209.432858][    T9] bond0 (unregistering): Released all slaves
[  209.547083][ T4280] Bluetooth: hci3: command 0x0419 tx timeout
[  209.732944][ T7519] device hsr_slave_0 entered promiscuous mode
[  209.771931][ T7519] device hsr_slave_1 entered promiscuous mode
[  209.822327][ T7519] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  209.887757][ T7519] Cannot create hsr debugfs directory
[  210.058580][ T7681] device veth0_macvtap left promiscuous mode
[  210.295747][ T7684] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1015'.
[  210.330308][ T7685] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1015'.
[  210.553161][ T7687] loop6: detected capacity change from 0 to 128
[  210.636369][ T7687] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  210.661430][ T7687] hpfs: filesystem error: improperly stopped
[  210.683098][ T7687] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  210.773191][ T7687] hpfs: You really don't want any checks? You are crazy...
[  210.797208][ T7687] hpfs: Code page index out of array
[  210.804237][ T7687] hpfs: code page support is disabled
[  210.827212][ T7687] hpfs: hpfs_map_4sectors(): unaligned read
[  210.846124][ T7687] hpfs: hpfs_map_4sectors(): unaligned read
[  210.865941][ T7687] hpfs: filesystem error: unable to find root dir
[  211.415635][ T7699] FAULT_INJECTION: forcing a failure.
[  211.415635][ T7699] name failslab, interval 1, probability 0, space 0, times 0
[  211.436178][ T7699] CPU: 0 PID: 7699 Comm: syz.1.1019 Not tainted syzkaller #0
[  211.444608][ T7699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  211.456452][ T7699] Call Trace:
[  211.459826][ T7699]  <TASK>
[  211.463109][ T7699]  dump_stack_lvl+0x188/0x24e
[  211.468316][ T7699]  ? show_regs_print_info+0x12/0x12
[  211.474237][ T7699]  ? load_image+0x410/0x410
[  211.478854][ T7699]  ? __might_sleep+0xd0/0xd0
[  211.483973][ T7699]  ? __lock_acquire+0x7ea0/0x7ea0
[  211.489316][ T7699]  should_fail_ex+0x390/0x4c0
[  211.494043][ T7699]  should_failslab+0x5/0x20
[  211.498741][ T7699]  slab_pre_alloc_hook+0x59/0x300
[  211.503895][ T7699]  kmem_cache_alloc+0x56/0x2f0
[  211.508961][ T7699]  ? security_inode_alloc+0x30/0x110
[  211.514283][ T7699]  security_inode_alloc+0x30/0x110
[  211.519425][ T7699]  inode_init_always+0x910/0xc90
[  211.524462][ T7699]  new_inode_pseudo+0x91/0x1c0
[  211.529493][ T7699]  new_inode+0x25/0x1d0
[  211.533666][ T7699]  shmem_get_inode+0x327/0xbc0
[  211.538562][ T7699]  __shmem_file_setup+0x10b/0x290
[  211.543711][ T7699]  ? shmem_file_setup+0x13/0x30
[  211.548981][ T7699]  drm_gem_object_init+0x1c0/0x240
[  211.554119][ T7699]  __drm_gem_shmem_create+0x172/0x300
[  211.559978][ T7699]  drm_gem_shmem_dumb_create+0x224/0x3e0
[  211.566350][ T7699]  ? drm_mode_create_dumb+0x260/0x260
[  211.574478][ T7699]  drm_ioctl_kernel+0x35f/0x4d0
[  211.579869][ T7699]  ? __lock_acquire+0x7ea0/0x7ea0
[  211.585175][ T7699]  ? drm_mode_create_dumb+0x260/0x260
[  211.590647][ T7699]  ? drm_copy_field+0x170/0x170
[  211.596191][ T7699]  ? __might_fault+0xc2/0x120
[  211.601013][ T7699]  ? __might_fault+0xa6/0x120
[  211.605981][ T7699]  drm_ioctl+0x65a/0xa30
[  211.610689][ T7699]  ? drm_mode_create_dumb+0x260/0x260
[  211.617384][ T7699]  ? drm_ioctl_kernel+0x4d0/0x4d0
[  211.622697][ T7699]  ? bpf_lsm_file_ioctl+0x5/0x10
[  211.630035][ T7699]  ? security_file_ioctl+0x7c/0xa0
[  211.636841][ T7699]  ? drm_ioctl_kernel+0x4d0/0x4d0
[  211.643190][ T7699]  __se_sys_ioctl+0xfa/0x170
[  211.648872][ T7699]  do_syscall_64+0x4c/0xa0
[  211.654252][ T7699]  ? clear_bhb_loop+0x60/0xb0
[  211.660499][ T7699]  ? clear_bhb_loop+0x60/0xb0
[  211.665873][ T7699]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  211.672751][ T7699] RIP: 0033:0x7fc6f4f9e199
[  211.678379][ T7699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  211.701271][ T7699] RSP: 002b:00007fc6f5efd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  211.712659][ T7699] RAX: ffffffffffffffda RBX: 00007fc6f5225fa0 RCX: 00007fc6f4f9e199
[  211.724461][ T7699] RDX: 0000200000000300 RSI: 00000000c02064b2 RDI: 0000000000000003
[  211.733936][ T7699] RBP: 00007fc6f50358e0 R08: 0000000000000000 R09: 0000000000000000
[  211.743061][ T7699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  211.751106][ T7699] R13: 00007fc6f5226038 R14: 00007fc6f5225fa0 R15: 00007ffec7c56c88
[  211.760708][ T7699]  </TASK>
[  212.269468][ T7711] netlink: 'syz.6.1022': attribute type 2 has an invalid length.
[  212.444248][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1024'.
[  212.881950][ T7519] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  212.913374][ T7519] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  213.016848][ T7738] loop1: detected capacity change from 0 to 128
[  213.053182][ T7519] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  213.159160][ T7738] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  213.218320][ T7738] ext4 filesystem being mounted at /238/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  213.262734][ T7519] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  213.502377][ T7754] loop6: detected capacity change from 0 to 16
[  213.579343][ T7754] erofs: (device loop6): mounted with root inode @ nid 36.
[  213.637349][ T7738] loop1: detected capacity change from 128 to 64
[  213.673506][ T7755] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Out of memory
[  213.693250][ T7519] 8021q: adding VLAN 0 to HW filter on device bond0
[  213.784806][ T7755] EXT4-fs error (device loop1): ext4_ext_tree_init:879: inode #13: comm syz.1.1030: mark_inode_dirty error
[  213.806816][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  213.825734][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  213.855708][ T7755] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Out of memory
[  213.903594][ T7755] EXT4-fs error (device loop1): __ext4_new_inode:1359: inode #13: comm syz.1.1030: mark_inode_dirty error
[  213.906718][ T7519] 8021q: adding VLAN 0 to HW filter on device team0
[  213.995257][ T7755] EXT4-fs error (device loop1) in __ext4_new_inode:1361: Out of memory
[  214.006668][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  214.018766][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  214.045656][ T7755] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Out of memory
[  214.082988][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.091421][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[  214.117094][ T7755] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #13: comm syz.1.1030: mark_inode_dirty error
[  214.143088][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  214.174427][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  214.177379][ T7755] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -12)
[  214.202763][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  214.223941][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.232303][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[  214.307625][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  214.320884][ T4272] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Out of memory
[  214.352679][ T4272] EXT4-fs error (device loop1): ext4_dirty_inode:6166: inode #2: comm syz-executor: mark_inode_dirty error
[  214.398480][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  214.420430][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  214.462359][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  214.500236][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  214.557534][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  214.575995][ T4546] EXT4-fs (loop1): unmounting filesystem.
[  214.635801][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  214.687747][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  214.749758][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  214.789228][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  214.827991][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  214.868410][ T7519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  215.022575][ T4476] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  215.227484][ T4476] usb 4-1: config 127 has an invalid interface number: 57 but max is 0
[  215.267146][ T4476] usb 4-1: config 127 has no interface number 0
[  215.292942][ T4476] usb 4-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  215.332813][ T4476] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b
[  215.354653][ T4476] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.374427][ T4476] usb 4-1: Product: syz
[  215.384551][ T4476] usb 4-1: Manufacturer: syz
[  215.404815][ T4476] usb 4-1: SerialNumber: syz
[  215.428608][ T7783] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  215.793848][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  215.817516][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  215.831918][ T7519] 8021q: adding VLAN 0 to HW filter on device batadv0
[  215.860036][ T7783] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  216.095941][ T4476] asix 4-1:127.57 (unnamed net_device) (uninitialized): invalid hw address, using random
[  216.296699][ T4476] asix 4-1:127.57 (unnamed net_device) (uninitialized): invalid PHY address: 33
[  216.532209][   T22] usb 4-1: USB disconnect, device number 9
[  216.565976][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  216.591864][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  216.607178][ T4280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  216.622283][ T4280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  216.632693][ T4280] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  216.642431][ T4280] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  217.144290][ T7813] chnl_net:caif_netlink_parms(): no params data found
[  217.199213][ T7830] device veth0_macvtap left promiscuous mode
[  217.635696][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  217.655705][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  217.742144][ T7813] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.775627][ T7813] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.821580][ T7813] device bridge_slave_0 entered promiscuous mode
[  217.857611][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  217.878947][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  217.894941][ T7519] device veth0_vlan entered promiscuous mode
[  217.907061][ T7813] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.930021][ T7813] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.957627][ T7813] device bridge_slave_1 entered promiscuous mode
[  217.967320][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  217.979043][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  218.012407][ T7519] device veth1_vlan entered promiscuous mode
[  218.075767][ T7813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  218.123869][ T7813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  218.178190][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  218.219169][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  218.253224][ T7519] device veth0_macvtap entered promiscuous mode
[  218.299594][ T7519] device veth1_macvtap entered promiscuous mode
[  218.362095][ T7813] team0: Port device team_slave_0 added
[  218.439309][ T7813] team0: Port device team_slave_1 added
[  218.503355][ T7519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  218.548091][ T7519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.587091][ T7519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  218.649129][ T7519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.661740][ T4280] Bluetooth: hci1: command 0x0409 tx timeout
[  218.697013][ T7519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  218.726994][ T7519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.741096][ T7519] batman_adv: batadv0: Interface activated: batadv_slave_0
[  218.778159][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  218.802365][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  218.845068][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  218.865647][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  218.896152][ T7813] batman_adv: batadv0: Adding interface: batadv_slave_0
[  218.918203][ T7813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.024494][ T7813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  219.070378][ T7519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  219.105223][ T7519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.151564][ T7519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  219.191482][ T7519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.233099][ T7519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  219.258524][ T7519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.273431][ T7519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  219.298462][ T7519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.318469][ T7519] batman_adv: batadv0: Interface activated: batadv_slave_1
[  219.333782][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  219.367648][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  219.412729][ T7813] batman_adv: batadv0: Adding interface: batadv_slave_1
[  219.433008][ T7813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.503729][ T7813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  219.556731][ T7519] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.584651][ T7519] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.597337][ T7519] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.617447][ T7519] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.703399][ T7813] device hsr_slave_0 entered promiscuous mode
[  219.761855][ T7813] device hsr_slave_1 entered promiscuous mode
[  219.783117][ T7813] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  219.809915][ T7813] Cannot create hsr debugfs directory
[  219.850342][ T7896] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  219.856618][ T7899] loop3: detected capacity change from 0 to 512
[  219.893700][ T7896] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  219.911623][ T7899] EXT4-fs: Ignoring removed nobh option
[  219.955048][ T7896] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  219.995686][ T7899] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  220.022896][ T7899] EXT4-fs (loop3): Remounting filesystem read-only
[  220.025762][ T7896] device bridge_slave_0 left promiscuous mode
[  220.041446][ T7899] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1069: invalid indirect mapped block 4278190080 (level 0)
[  220.065508][ T7896] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.077012][ T7899] EXT4-fs (loop3): Remounting filesystem read-only
[  220.094795][ T7899] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1069: invalid indirect mapped block 1 (level 1)
[  220.116382][ T7896] device bridge_slave_1 left promiscuous mode
[  220.131544][ T7899] EXT4-fs (loop3): Remounting filesystem read-only
[  220.142310][ T7896] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.150524][ T7899] EXT4-fs (loop3): 1 truncate cleaned up
[  220.161588][ T7896] bond0: (slave bond_slave_0): Releasing backup interface
[  220.165112][ T7899] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  220.195411][ T7896] bond0: (slave bond_slave_1): Releasing backup interface
[  220.252063][ T7899] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  220.266397][    C0] vcan0: j1939_tp_rxtimer: 0xffff888018b21c00: rx timeout, send abort
[  220.281949][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888018b21c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  220.383432][ T4271] EXT4-fs (loop3): unmounting filesystem.
[  220.383805][ T7896] team0: Port device team_slave_0 removed
[  220.451958][ T7896] team0: Port device team_slave_1 removed
[  220.481480][ T7896] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  220.529709][ T7896] batman_adv: batadv0: Removing interface: batadv_slave_0
[  220.562013][ T7896] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  220.577291][ T7896] batman_adv: batadv0: Removing interface: batadv_slave_1
[  220.643028][ T7900] team0: Port device xfrm0 added
[  220.747366][ T4280] Bluetooth: hci1: command 0x041b tx timeout
[  220.956760][ T4315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.990400][ T4315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  221.065784][ T6780] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  221.123593][ T4315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  221.150462][ T7922] 9pnet: p9_errstr2errno: server reported unknown error 
[  221.163540][ T4315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  221.203279][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  221.489227][ T7813] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  221.538614][ T7813] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  221.584013][ T7813] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  221.631295][ T7813] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  221.986682][ T7813] 8021q: adding VLAN 0 to HW filter on device bond0
[  222.099611][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  222.133764][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  222.163382][ T7813] 8021q: adding VLAN 0 to HW filter on device team0
[  222.207379][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  222.227169][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  222.305642][ T6767] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.315064][ T6767] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.412659][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  222.464200][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  222.518572][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  222.594343][ T6767] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.602736][ T6767] bridge0: port 2(bridge_slave_1) entered forwarding state
[  222.687785][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  222.772842][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  222.802680][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  222.817322][ T4280] Bluetooth: hci1: command 0x040f tx timeout
[  222.877108][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  222.944854][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  223.003327][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  223.035041][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  223.097823][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  223.140204][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  223.213485][ T7813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  223.267462][ T7813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  223.328407][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  223.340904][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  224.317968][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  224.333749][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  224.388441][ T7813] 8021q: adding VLAN 0 to HW filter on device batadv0
[  224.902053][ T4280] Bluetooth: hci1: command 0x0419 tx timeout
[  224.921570][ T8017] loop4: detected capacity change from 0 to 512
[  225.028934][ T8017] EXT4-fs (loop4): filesystem is read-only
[  225.066528][ T8017] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  225.181809][ T8017] EXT4-fs (loop4): failed to initialize system zone (-117)
[  225.190823][ T8017] EXT4-fs (loop4): mount failed
[  225.272087][ T7019] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  225.596030][ T8044] device syzkaller1 entered promiscuous mode
[  225.762032][ T4477] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  225.963451][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  225.977075][ T4477] usb 4-1: Using ep0 maxpacket: 8
[  225.984854][ T4477] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  226.004447][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  226.034953][ T4477] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  226.090994][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  226.100116][ T4477] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  226.111620][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  226.137354][ T4477] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  226.153511][ T7813] device veth0_vlan entered promiscuous mode
[  226.178353][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  226.199942][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  226.217061][ T4477] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  226.254323][ T7813] device veth1_vlan entered promiscuous mode
[  226.294370][ T4477] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  226.334324][ T4477] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.434620][ T6780] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  226.467930][ T6780] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  226.533820][ T6780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  226.576386][ T6780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  226.605045][ T4477] usb 4-1: usb_control_msg returned -32
[  226.623167][ T4477] usbtmc 4-1:16.0: can't read capabilities
[  226.636100][ T7813] device veth0_macvtap entered promiscuous mode
[  226.672002][ T7813] device veth1_macvtap entered promiscuous mode
[  226.769819][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  226.789889][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  226.834512][ T7813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  226.881249][ T7813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.920915][ T7813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  226.958775][ T7813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.992955][ T7813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  227.015845][ T7813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.030763][ T7813] batman_adv: batadv0: Interface activated: batadv_slave_0
[  227.081283][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  227.115733][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  227.133849][ T7813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  227.160028][ T7813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.175451][ T7813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  227.193921][ T7813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.236493][ T7813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  227.265254][ T7813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.304199][ T7813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  227.335932][ T7813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.383993][ T7813] batman_adv: batadv0: Interface activated: batadv_slave_1
[  227.414612][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  227.424659][ T8104] usbtmc 4-1:16.0: usb_control_msg returned -32
[  227.433207][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  227.499787][ T7813] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  227.547152][ T7813] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  227.597042][ T7813] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  227.633798][   T14] usb 4-1: USB disconnect, device number 10
[  227.667187][ T7813] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  227.950935][ T4315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  227.964772][ T4315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.975999][ T8118] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  228.026630][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  228.172351][ T6767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.204934][ T6767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.265611][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  229.048332][ T4321] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[  229.252501][ T4321] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  229.284176][ T4321] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.303843][ T8157] loop6: detected capacity change from 0 to 2048
[  229.344700][ T4321] usb 8-1: Product: syz
[  229.363068][ T4321] usb 8-1: Manufacturer: syz
[  229.387122][ T4321] usb 8-1: SerialNumber: syz
[  229.411549][ T8157] Alternate GPT is invalid, using primary GPT.
[  229.423920][ T4321] usb 8-1: config 0 descriptor??
[  229.461826][ T8157]  loop6: p2 p3 p7
[  229.685633][ T4321] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  229.888414][ T8170] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1145'.
[  229.987182][ T4477] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  230.198864][ T4477] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  230.279879][ T4477] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  230.314531][ T4477] usb 5-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00
[  230.383234][ T4477] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  230.425756][ T4477] usb 5-1: Product: syz
[  230.454070][ T4477] usb 5-1: Manufacturer: syz
[  230.493198][ T4477] mos7840 5-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected
[  230.697085][ T4321] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -71
[  230.751932][ T4321] usb 8-1: USB disconnect, device number 2
[  231.284050][ T8202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1155'.
[  231.374956][ T8205] loop6: detected capacity change from 0 to 1024
[  231.422198][ T8205] EXT4-fs: Ignoring removed bh option
[  231.493207][ T8205] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  231.616368][ T8205] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  231.723167][ T4477] mos7840: probe of ttyUSB0 failed with error -71
[  231.778712][ T4477] usb 5-1: USB disconnect, device number 8
[  231.860720][ T4477] mos7840 5-1:1.0: device disconnected
[  232.538694][ T6898] EXT4-fs (loop6): unmounting filesystem.
[  232.934852][ T8264] syzkaller1: tun_chr_ioctl cmd 1074025677
[  232.971249][ T8264] syzkaller1: Refused to change device type
[  234.512853][ T8338] loop7: detected capacity change from 0 to 128
[  234.796618][ T8336] loop6: detected capacity change from 0 to 8192
[  234.861788][ T8336] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  234.944257][ T8345] jffs2: notice: (8345) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  234.991503][ T8347] overlayfs: missing 'lowerdir'
[  235.336545][ T8348] loop3: detected capacity change from 0 to 8192
[  235.509476][ T8361] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1198'.
[  235.867655][ T8372] gadgetfs: bound to dummy_udc driver
[  236.251249][ T8387] loop4: detected capacity change from 0 to 512
[  236.343214][ T8387] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  236.750858][ T7519] EXT4-fs (loop4): unmounting filesystem.
[  237.742636][ T8443] loop7: detected capacity change from 0 to 1024
[  237.806331][ T8443] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  237.959922][ T8443] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  238.083398][ T8449] device ipvlan2 entered promiscuous mode
[  238.274747][ T8449] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  238.309028][ T8449] team0: Device ipvlan2 failed to register rx_handler
[  238.625762][ T7813] EXT4-fs (loop7): unmounting filesystem.
[  239.188804][ T8486] sch_tbf: burst 7 is lower than device bridge0 mtu (1514) !
[  239.390193][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1237'.
[  239.422689][ T8489] sch_tbf: burst 0 is lower than device bridge0 mtu (1514) !
[  240.126789][ T8519] 9pnet: p9_errstr2errno: server reported unknown error ��
[  240.487599][ T8529] binder: 8527:8529 ioctl c00c620f 200000000080 returned -22
[  240.768170][ T8540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1256'.
[  241.031269][ T8547] netlink: 'syz.4.1259': attribute type 1 has an invalid length.
[  241.123152][ T8547] 8021q: adding VLAN 0 to HW filter on device bond1
[  241.197278][ T8549] bond1: (slave geneve2): making interface the new active one
[  241.308154][ T8549] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  241.392163][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  241.733805][ T8570] loop3: detected capacity change from 0 to 512
[  241.813063][ T8570] EXT4-fs (loop3): Test dummy encryption mode enabled
[  241.860006][ T8570] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #11: comm syz.3.1269: casefold flag without casefold feature
[  241.896367][ T8570] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.1269: couldn't read orphan inode 11 (err -117)
[  241.962626][ T8570] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  242.106136][   T27] audit: type=1800 audit(1791377272.087:38): pid=8570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1269" name="file1" dev="loop3" ino=15 res=0 errno=0
[  242.230582][ T4271] EXT4-fs (loop3): unmounting filesystem.
[  243.327357][ T5711] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  243.517003][ T5711] usb 4-1: Using ep0 maxpacket: 32
[  243.524896][ T5711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  243.579312][ T5711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  243.617139][ T5711] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  243.631960][ T8376] Set syz1 is full, maxelem 65536 reached
[  243.657058][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.702930][ T5711] usb 4-1: config 0 descriptor??
[  244.145380][ T5711] ft260 0003:0403:6030.0004: unknown main item tag 0x0
[  244.185268][ T5711] ft260 0003:0403:6030.0004: unknown main item tag 0x0
[  244.245318][ T5711] ft260 0003:0403:6030.0004: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0
[  244.357842][ T5711] ft260 0003:0403:6030.0004: chip code: 0000 0000
[  244.505288][ T8644] "syz.7.1298" (8644) uses obsolete ecb(arc4) skcipher
[  244.731911][ T8650] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1299'.
[  244.765707][ T8650] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1299'.
[  244.960457][ T5711] ft260 0003:0403:6030.0004: failed to retrieve status: -71
[  244.984569][ T5711] ft260 0003:0403:6030.0004: failed to reset I2C controller: -71
[  245.045783][ T5711] usb 4-1: USB disconnect, device number 11
[  245.384968][ T8656] netlink: 3568 bytes leftover after parsing attributes in process `syz.7.1300'.
[  245.420211][ T8662] fido_id[8662]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  247.385038][ T8694] loop6: detected capacity change from 0 to 32768
[  247.487380][ T8720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1325'.
[  247.498992][ T8720] netlink: 'syz.3.1325': attribute type 8 has an invalid length.
[  247.500339][ T8694] XFS (loop6): Mounting V5 Filesystem
[  247.510222][ T8720] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1325'.
[  247.587113][ T8720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1325'.
[  247.634846][ T8720] netlink: 'syz.3.1325': attribute type 8 has an invalid length.
[  247.647094][ T8720] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1325'.
[  247.756859][ T8694] XFS (loop6): Ending clean mount
[  247.884319][ T8694] XFS (loop6): Quotacheck needed: Please wait.
[  248.044782][ T8739] IPVS: rr: UDP [::1]:8080 - no destination available
[  248.128313][ T8694] XFS (loop6): Quotacheck: Done.
[  248.753779][ T6898] XFS (loop6): Unmounting Filesystem
[  249.111627][ T8764] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  249.161729][ T8764] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  249.440268][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1347'.
[  249.475666][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1347'.
[  249.548758][ T8774] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  249.558033][ T8774] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  249.567646][ T8774] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  249.578737][ T8774] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  249.580811][ T8781] loop6: detected capacity change from 0 to 512
[  249.692308][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1347'.
[  249.719826][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1347'.
[  249.752259][ T8781] EXT4-fs (loop6): 1 truncate cleaned up
[  249.764529][ T8781] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  249.846552][ T8781] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1339: invalid indirect mapped block 234881024 (level 0)
[  249.894115][ T8789] jffs2: notice: (8789) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  250.110372][ T6898] EXT4-fs (loop6): unmounting filesystem.
[  250.375405][ T8811] device geneve1 entered promiscuous mode
[  250.997177][ T8829] device gretap2 entered promiscuous mode
[  251.678121][ T8848] loop4: detected capacity change from 0 to 512
[  251.748587][ T8848] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  251.824918][ T8848] EXT4-fs (loop4): 1 truncate cleaned up
[  251.837064][ T8848] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  252.022239][ T7519] EXT4-fs (loop4): unmounting filesystem.
[  252.277217][ T8862] IPv6: ADDRCONF(NETDEV_CHANGE): geneve2: link becomes ready
[  252.822206][ T8887] loop7: detected capacity change from 0 to 764
[  252.930370][ T8887] rock: directory entry would overflow storage
[  252.947055][ T8887] rock: sig=0x5245, size=8, remaining=5
[  254.381704][ T8933] device geneve1 entered promiscuous mode
[  255.097104][ T5712] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  255.297170][ T5712] usb 7-1: Using ep0 maxpacket: 16
[  255.328613][ T5712] usb 7-1: unable to get BOS descriptor or descriptor too short
[  255.352612][ T5712] usb 7-1: config 9 has an invalid interface number: 57 but max is 0
[  255.401356][ T5712] usb 7-1: config 9 has no interface number 0
[  255.431949][ T5712] usb 7-1: config 9 interface 57 has no altsetting 0
[  255.468547][ T5712] usb 7-1: string descriptor 0 read error: -22
[  255.477940][ T8958] netlink: 'syz.3.1416': attribute type 1 has an invalid length.
[  255.505109][ T5712] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7
[  255.554078][ T5712] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.019751][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  256.027113][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  256.616182][ T5712] radio-keene 7-1:9.57: V4L2 device registered as radio48
[  256.821598][ T5712] usb 7-1: USB disconnect, device number 2
[  256.867015][ T4321] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  256.994587][ T8997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1430'.
[  257.031470][ T8997] device xfrm1 entered promiscuous mode
[  257.065134][ T8997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1430'.
[  257.077356][ T4321] usb 4-1: Using ep0 maxpacket: 16
[  257.086431][ T4321] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  257.161868][ T4321] usb 4-1: config 0 interface 0 has no altsetting 0
[  257.196047][ T4321] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  257.227263][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.235862][ T4321] usb 4-1: Product: syz
[  257.293455][ T4321] usb 4-1: Manufacturer: syz
[  257.332349][ T4321] usb 4-1: SerialNumber: syz
[  257.384835][ T4321] usb 4-1: config 0 descriptor??
[  257.523300][   T27] audit: type=1326 audit(1791377287.507:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9005 comm="syz.7.1434" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f64db79e199 code=0x0
[  257.548866][    C0] vkms_vblank_simulate: vblank timer overrun
[  257.556642][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1433'.
[  257.695577][ T4321] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7
[  257.799382][ T9013] loop5: detected capacity change from 0 to 7
[  257.807759][ T8165] Dev loop5: unable to read RDB block 7
[  257.815718][ T8165]  loop5: unable to read partition table
[  257.834964][ T8165] loop5: partition table beyond EOD, truncated
[  257.881161][ T9013] Dev loop5: unable to read RDB block 7
[  257.895171][ T9013]  loop5: unable to read partition table
[  257.914585][ T9013] loop5: partition table beyond EOD, truncated
[  257.930451][ T9013] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  258.117280][ T4321] rc_core: IR keymap rc-imon-pad not found
[  258.123171][ T4321] Registered IR keymap rc-empty
[  258.146445][ T4321] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  258.188268][ T4321] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  258.231467][ T9017] loop4: detected capacity change from 0 to 512
[  258.275187][ T4321] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  258.311377][ T4321] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8
[  258.371534][ T9017] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1437: invalid indirect mapped block 256 (level 2)
[  258.445836][ T4321] imon 4-1:0.0: iMON device (15c2:0041, intf0) on usb<4:12> initialized
[  258.454973][    C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  258.488919][ T9017] EXT4-fs (loop4): 2 truncates cleaned up
[  258.526117][ T9017] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  258.562250][ T4321] usb 4-1: USB disconnect, device number 12
[  258.903391][ T7519] EXT4-fs (loop4): unmounting filesystem.
[  259.036505][ T9034] loop7: detected capacity change from 0 to 2048
[  259.140976][ T9034] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  259.258416][ T9034] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1443: bg 0: block 240: padding at end of block bitmap is not set
[  259.439797][ T9034] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  259.525462][ T9034] EXT4-fs (loop7): This should not happen!! Data will be lost
[  259.525462][ T9034] 
[  259.565206][ T9034] EXT4-fs (loop7): Total free blocks count 0
[  259.589742][ T9034] EXT4-fs (loop7): Free/Dirty block details
[  259.618368][ T9034] EXT4-fs (loop7): free_blocks=0
[  259.654028][ T9034] EXT4-fs (loop7): dirty_blocks=16
[  259.695476][ T9034] EXT4-fs (loop7): Block reservation details
[  259.756023][ T9034] EXT4-fs (loop7): i_reserved_data_blocks=1
[  259.942475][ T7813] EXT4-fs (loop7): unmounting filesystem.
[  260.441559][ T9068] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1454'.
[  260.474091][ T9068] netlink: 'syz.0.1454': attribute type 8 has an invalid length.
[  260.508323][ T9068] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1454'.
[  260.563450][ T9068] device erspan0 entered promiscuous mode
[  260.590547][ T9068] device gretap0 entered promiscuous mode
[  260.641294][ T9068] device erspan0 left promiscuous mode
[  260.668078][ T9068] device gretap0 left promiscuous mode
[  261.722678][ T9090] loop6: detected capacity change from 0 to 8192
[  262.128508][ T9105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1468'.
[  262.159710][ T9105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1468'.
[  262.226119][ T9105] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  262.239352][ T9105] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  262.250719][ T9105] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  262.260764][ T9105] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  262.374963][ T9105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1468'.
[  262.413940][ T9105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1468'.
[  262.823035][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1474'.
[  262.854562][ T9122] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  263.110292][ T9122] batman_adv: batadv0: Removing interface: batadv_slave_1
[  264.248448][ T9169] netlink: 'syz.4.1491': attribute type 8 has an invalid length.
[  264.299625][ T9170] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1492'.
[  264.777083][   T14] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  264.972439][   T14] usb 5-1: config 0 has an invalid interface number: 237 but max is 0
[  265.020060][   T14] usb 5-1: config 0 has no interface number 0
[  265.041572][   T14] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  265.103112][   T14] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  265.141635][   T14] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  265.190066][   T14] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid maxpacket 49152, setting to 1024
[  265.244608][   T14] usb 5-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be
[  265.273112][   T14] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3
[  265.312827][   T14] usb 5-1: Product: syz
[  265.335224][   T14] usb 5-1: Manufacturer: syz
[  265.364729][   T14] usb 5-1: SerialNumber: syz
[  265.411362][   T14] usb 5-1: config 0 descriptor??
[  265.478966][   T14] xpad 5-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  265.647349][   T14] xpad: probe of 5-1:0.237 failed with error -5
[  265.737138][   T14] usb 5-1: USB disconnect, device number 9
[  266.624309][ T9232] loop4: detected capacity change from 0 to 512
[  266.661559][ T9232] EXT4-fs: Ignoring removed nobh option
[  266.694368][ T9232] EXT4-fs: Ignoring removed oldalloc option
[  266.707234][ T4477] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[  266.798197][ T9232] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  266.931219][ T4477] usb 8-1: not running at top speed; connect to a high speed hub
[  266.967279][ T4477] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  267.018617][ T4477] usb 8-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00
[  267.052038][ T4477] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.088299][ T4477] cyberjack 8-1:1.0: Reiner SCT Cyberjack USB card reader converter detected
[  267.136886][ T4477] usb 8-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  267.219710][ T7519] EXT4-fs (loop4): unmounting filesystem.
[  267.330188][ T4477] usb 8-1: USB disconnect, device number 3
[  267.356385][ T4477] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  267.459112][ T4477] cyberjack 8-1:1.0: device disconnected
[  268.387194][ T5712] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  268.449421][ T9295] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  268.473414][ T9295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  268.490302][ T9295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  268.525117][ T9295] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  268.577186][ T5712] usb 5-1: Using ep0 maxpacket: 32
[  268.596013][ T5712] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  268.625463][ T5712] usb 5-1: config 0 has no interface number 0
[  268.646403][ T5712] usb 5-1: config 0 interface 12 has no altsetting 0
[  268.678971][ T5712] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  268.717012][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.725686][ T5712] usb 5-1: Product: syz
[  268.765101][ T5712] usb 5-1: Manufacturer: syz
[  268.806999][ T5712] usb 5-1: SerialNumber: syz
[  268.847818][ T5712] usb 5-1: config 0 descriptor??
[  269.353767][ T9313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1544'.
[  269.964249][ T9324] loop3: detected capacity change from 0 to 1024
[  270.023562][ T9324] hfsplus: invalid length 32517 has been corrected to 255
[  270.078239][ T5712] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  270.106827][   T27] audit: type=1800 audit(1791377300.091:40): pid=9324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1549" name="file1" dev="loop3" ino=20 res=0 errno=0
[  270.136000][ T5712] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  270.175693][ T9327] loop6: detected capacity change from 0 to 4096
[  270.187116][ T5712] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  270.226416][ T5712] f81534: probe of 5-1:0.12 failed with error -71
[  270.291958][ T5712] usb 5-1: USB disconnect, device number 10
[  270.322259][ T9324] hfsplus: b-tree write err: -5, ino 20
[  270.357073][ T9332] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  270.498723][ T9337] input: syz1 as /devices/virtual/input/input9
[  270.935307][ T9347] device bridge0 entered promiscuous mode
[  271.218440][ T9351] hfsplus: b-tree write err: -5, ino 20
[  271.830830][   T57] hfsplus: b-tree write err: -5, ino 20
[  272.400332][ T9389] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1574'.
[  272.952578][ T9406] bridge0: port 3(macvlan1) entered blocking state
[  272.975763][ T9406] bridge0: port 3(macvlan1) entered disabled state
[  273.015471][ T9406] device macvlan1 entered promiscuous mode
[  273.047416][ T9406] bridge0: port 3(macvlan1) entered blocking state
[  273.057386][ T9406] bridge0: port 3(macvlan1) entered forwarding state
[  273.102881][ T9408] device macvlan1 left promiscuous mode
[  273.124014][ T9408] bridge0: port 3(macvlan1) entered disabled state
[  273.150870][ T9410] loop3: detected capacity change from 0 to 512
[  273.185782][ T9410] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  273.227339][ T9410] EXT4-fs (loop3): 1 truncate cleaned up
[  273.242601][ T9410] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  273.498521][ T4271] EXT4-fs (loop3): unmounting filesystem.
[  273.744512][ T9432] netlink: 'syz.7.1594': attribute type 1 has an invalid length.
[  273.764591][ T9432] netlink: 'syz.7.1594': attribute type 2 has an invalid length.
[  273.921766][ T4477] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  274.133464][ T4477] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00
[  274.149394][ T4477] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.635696][ T4477] usb 4-1: Firmware: major: 131, minor: 226, hardware type: UNKNOWN (52)
[  274.838552][ T4477] usb 4-1: Read permanent extended address bc:db:74:90:71:8e:fe:a8 from device
[  274.875742][ T4477] usb 4-1: atusb_probe: initialization failed, error = -524
[  274.891056][ T4477] atusb: probe of 4-1:1.0 failed with error -524
[  275.042079][ T4477] usb 4-1: USB disconnect, device number 13
[  275.505096][ T9477] 9pnet: p9_errstr2errno: server reported unknown error ��n$�[
[  275.505096][ T9477] Q&|x�
[  276.925444][ T9518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1622'.
[  277.237103][ T4364] usb 7-1: new low-speed USB device number 3 using dummy_hcd
[  277.582488][ T9534] kvm: vcpu 3: requested lapic timer restore with starting count register 0x390=1117308807 (17876940912 ns) > initial count (13493447392 ns). Using initial count to start timer.
[  277.908876][ T9526] loop4: detected capacity change from 0 to 32768
[  278.004364][ T9526] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1625 (9526)
[  278.082126][ T9526] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  278.142769][ T9526] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  278.181254][ T9526] BTRFS info (device loop4): using free space tree
[  278.540819][ T9526] BTRFS info (device loop4): enabling ssd optimizations
[  278.932666][ T9589] loop3: detected capacity change from 0 to 512
[  278.957363][ T9591] overlayfs: failed to clone upperpath
[  279.095610][ T9589] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  279.137046][ T9589] FAT-fs (loop3): Filesystem has been set read-only
[  279.198365][ T9594] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  279.248486][ T7519] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  280.190974][ T9612] loop6: detected capacity change from 0 to 1024
[  280.268013][ T9612] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  280.307385][ T9612] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  280.373307][ T9612] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  280.418330][ T9612] EXT4-fs error (device loop6): ext4_get_journal_inode:5762: comm syz.6.1652: inode #1: comm syz.6.1652: iget: illegal inode #
[  280.474563][ T9612] EXT4-fs (loop6): no journal found
[  281.130743][   T27] audit: type=1326 audit(1791377311.121:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9639 comm="syz.0.1661" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efeef19e199 code=0x0
[  281.330828][ T9653] loop2: detected capacity change from 0 to 7
[  281.369472][ T8164] Dev loop2: unable to read RDB block 7
[  281.378122][ T8164]  loop2: AHDI p1 p2 p3
[  281.407074][ T8164] loop2: partition table partially beyond EOD, truncated
[  281.432436][ T8164] loop2: p1 start 1601398130 is beyond EOD, truncated
[  281.457000][ T8164] loop2: p2 start 1702059890 is beyond EOD, truncated
[  281.475212][ T9653] Dev loop2: unable to read RDB block 7
[  281.497157][ T9653]  loop2: AHDI p1 p2 p3
[  281.509578][ T9653] loop2: partition table partially beyond EOD, truncated
[  281.531258][ T9653] loop2: p1 start 1601398130 is beyond EOD, truncated
[  281.557972][ T9653] loop2: p2 start 1702059890 is beyond EOD, truncated
[  281.596036][ T4364] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  281.662009][ T9659] loop6: detected capacity change from 0 to 128
[  281.738340][ T9659] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  281.767146][ T9659] ext4 filesystem being mounted at /153/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  281.796785][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1670'.
[  281.843598][ T9666] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  281.878627][ T4364] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  281.896320][ T4364] usb 4-1: config 0 has no interface number 0
[  281.926680][ T4364] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  281.942463][ T9666] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  281.982566][ T4364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.005503][ T4364] usb 4-1: Product: syz
[  282.018306][ T4364] usb 4-1: Manufacturer: syz
[  282.024004][ T4364] usb 4-1: SerialNumber: syz
[  282.037989][ T4364] usb 4-1: config 0 descriptor??
[  282.059866][ T6898] EXT4-fs (loop6): unmounting filesystem.
[  282.272182][ T4364] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  282.300264][ T4364] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  282.335891][ T4364] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  282.373811][ T4364] usb 4-1: media controller created
[  282.455363][ T4364] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  282.587805][ T4364] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  282.678168][ T4364] usb 4-1: USB disconnect, device number 14
[  283.068127][ T9696] netlink: 'syz.4.1681': attribute type 1 has an invalid length.
[  283.193882][ T9696] device bond2 entered promiscuous mode
[  283.266831][ T9696] 8021q: adding VLAN 0 to HW filter on device bond2
[  283.276561][ T9702] loop7: detected capacity change from 0 to 128
[  283.341493][ T9698] bond2: (slave veth3): making interface the new active one
[  283.361910][ T9698] device veth3 entered promiscuous mode
[  283.392400][ T9702] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  283.413500][ T9698] bond2: (slave veth3): Enslaving as an active interface with an up link
[  283.441512][ T9702] ext4 filesystem being mounted at /116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  283.480879][ T6775] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  283.739215][ T7813] EXT4-fs (loop7): unmounting filesystem.
[  284.565400][ T9746] loop6: detected capacity change from 0 to 128
[  284.635303][ T9746] EXT4-fs error (device loop6): __ext4_fill_super:5465: inode #2: comm syz.6.1701: iget: checksum invalid
[  284.760911][ T9746] EXT4-fs (loop6): get root inode failed
[  284.793931][ T9746] EXT4-fs (loop6): mount failed
[  285.097038][ T5712] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  285.328181][ T5712] usb 5-1: not running at top speed; connect to a high speed hub
[  285.359594][ T5712] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  285.399155][   T27] audit: type=1804 audit(1791377315.381:42): pid=9778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1710" name="/newroot/167/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=26752 res=1 errno=0
[  285.449122][ T5712] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  285.484152][ T9783] loop3: detected capacity change from 0 to 164
[  285.486052][ T5712] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[  285.520162][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.545556][ T5712] usb 5-1: Product: syz
[  285.567429][   T27] audit: type=1326 audit(1791377315.561:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.3.1712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8899e199 code=0x7ffc0000
[  285.604226][ T5712] usb 5-1: Manufacturer: syz
[  285.626600][ T5712] usb 5-1: SerialNumber: syz
[  285.656389][ T5712] oti6858 5-1:1.0: oti6858 converter detected
[  285.674382][   T27] audit: type=1326 audit(1791377315.561:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.3.1712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8899e199 code=0x7ffc0000
[  285.734089][ T5712] usb 5-1: oti6858 converter now attached to ttyUSB0
[  285.809129][ T5712] libceph: connect (1)[c::]:6789 error -101
[  285.825544][ T5712] libceph: mon0 (1)[c::]:6789 connect error
[  285.880490][ T9787] ceph: No mds server is up or the cluster is laggy
[  285.955189][   T27] audit: type=1326 audit(1791377315.591:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.3.1712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8899e199 code=0x7ffc0000
[  285.987197][ T9756] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -90
[  286.015531][ T5711] usb 5-1: USB disconnect, device number 11
[  286.049718][ T5711] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0
[  286.080368][   T27] audit: type=1326 audit(1791377315.591:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.3.1712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b8899e199 code=0x7ffc0000
[  286.116615][ T5711] oti6858 5-1:1.0: device disconnected
[  286.160290][ T5712] libceph: connect (1)[c::]:6789 error -101
[  286.192849][ T5712] libceph: mon0 (1)[c::]:6789 connect error
[  286.291221][   T27] audit: type=1326 audit(1791377315.591:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.3.1712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8899e199 code=0x7ffc0000
[  286.362031][   T27] audit: type=1326 audit(1791377315.591:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.3.1712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8899e199 code=0x7ffc0000
[  286.402017][   T27] audit: type=1326 audit(1791377315.591:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.3.1712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8899e199 code=0x7ffc0000
[  286.442476][ T9802] netlink: 'syz.0.1719': attribute type 1 has an invalid length.
[  286.451668][   T27] audit: type=1326 audit(1791377315.591:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.3.1712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8899e199 code=0x7ffc0000
[  286.498956][ T9802] device bond1 entered promiscuous mode
[  286.506670][ T9802] 8021q: adding VLAN 0 to HW filter on device bond1
[  286.516150][   T27] audit: type=1326 audit(1791377315.591:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.3.1712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8899e199 code=0x7ffc0000
[  286.613192][   T27] audit: type=1326 audit(1791377315.591:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.3.1712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f3b8899e199 code=0x7ffc0000
[  286.649155][ T9808] bond1: (slave veth3): making interface the new active one
[  286.680771][ T9808] device veth3 entered promiscuous mode
[  286.702062][ T9808] bond1: (slave veth3): Enslaving as an active interface with an up link
[  286.725068][ T6775] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  286.748950][   T27] audit: type=1326 audit(1791377315.591:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.3.1712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8899e199 code=0x7ffc0000
[  286.769639][ T9814] loop4: detected capacity change from 0 to 2048
[  286.779197][   T27] audit: type=1326 audit(1791377315.591:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.3.1712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8899e199 code=0x7ffc0000
[  286.823496][   T27] audit: type=1326 audit(1791377315.591:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.3.1712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3b8899e199 code=0x7ffc0000
[  286.867798][   T27] audit: type=1326 audit(1791377315.591:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.3.1712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3b8899e199 code=0x7ffc0000
[  286.924834][ T9814] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  286.977643][ T9814] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  287.277479][ T9825] FAULT_INJECTION: forcing a failure.
[  287.277479][ T9825] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  287.338053][ T9825] CPU: 0 PID: 9825 Comm: syz.3.1727 Not tainted syzkaller #0
[  287.346491][ T9825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  287.356755][ T9825] Call Trace:
[  287.360525][ T9825]  <TASK>
[  287.363834][ T9825]  dump_stack_lvl+0x188/0x24e
[  287.369554][ T9825]  ? show_regs_print_info+0x12/0x12
[  287.376453][ T9825]  ? load_image+0x410/0x410
[  287.381377][ T9825]  ? __lock_acquire+0x7ea0/0x7ea0
[  287.386553][ T9825]  should_fail_ex+0x390/0x4c0
[  287.391983][ T9825]  _copy_from_user+0x2c/0x170
[  287.397502][ T9825]  kvm_dev_ioctl_get_cpuid+0x163/0x780
[  287.403521][ T9825]  ? kvm_set_cpu_caps+0x8b0/0x8b0
[  287.409107][ T9825]  ? __might_fault+0xa6/0x120
[  287.414402][ T9825]  kvm_arch_dev_ioctl+0x3d3/0x8a0
[  287.415641][ T9830] netlink: 27 bytes leftover after parsing attributes in process `syz.6.1730'.
[  287.419810][ T9825]  ? kvm_vm_ioctl_check_extension+0x660/0x660
[  287.419861][ T9825]  kvm_dev_ioctl+0xd6/0x17f0
[  287.419883][ T9825]  ? __fget_files+0x28/0x460
[  287.419910][ T9825]  ? hardware_enable_nolock+0x220/0x220
[  287.419931][ T9825]  ? bpf_lsm_file_ioctl+0x5/0x10
[  287.419954][ T9825]  ? security_file_ioctl+0x7c/0xa0
[  287.419975][ T9825]  ? hardware_enable_nolock+0x220/0x220
[  287.419993][ T9825]  __se_sys_ioctl+0xfa/0x170
[  287.420019][ T9825]  do_syscall_64+0x4c/0xa0
[  287.420038][ T9825]  ? clear_bhb_loop+0x60/0xb0
[  287.420056][ T9825]  ? clear_bhb_loop+0x60/0xb0
[  287.494175][ T9825]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  287.501573][ T9825] RIP: 0033:0x7f3b8899e199
[  287.507288][ T9825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  287.531618][ T9825] RSP: 002b:00007f3b89836028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  287.540780][ T9825] RAX: ffffffffffffffda RBX: 00007f3b88c25fa0 RCX: 00007f3b8899e199
[  287.549484][ T9825] RDX: 0000200000000180 RSI: 00000000c008ae09 RDI: 0000000000000003
[  287.559128][ T9825] RBP: 00007f3b88a358e0 R08: 0000000000000000 R09: 0000000000000000
[  287.568423][ T9825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  287.578380][ T9825] R13: 00007f3b88c26038 R14: 00007f3b88c25fa0 R15: 00007fff72a0dcf8
[  287.587004][ T9825]  </TASK>
[  287.972508][ T9841] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1734'.
[  288.014709][ T9845] netlink: 'syz.3.1735': attribute type 1 has an invalid length.
[  288.030686][ T4364] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  288.057479][ T9845] device bond2 entered promiscuous mode
[  288.070808][ T9845] 8021q: adding VLAN 0 to HW filter on device bond2
[  288.158963][ T9847] bond2: (slave veth3): making interface the new active one
[  288.194579][ T9847] device veth3 entered promiscuous mode
[  288.217051][ T4364] usb 8-1: Using ep0 maxpacket: 16
[  288.229237][ T4364] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  288.241434][ T9847] bond2: (slave veth3): Enslaving as an active interface with an up link
[  288.299535][ T4364] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  288.308459][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  288.330261][ T4364] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  288.381287][ T4364] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.429929][ T4364] usb 8-1: Product: syz
[  288.450226][ T4364] usb 8-1: Manufacturer: syz
[  288.472790][ T4364] usb 8-1: SerialNumber: syz
[  288.623698][ T9861] device wlan0 entered promiscuous mode
[  288.728671][ T4364] usb 8-1: 0:2 : does not exist
[  288.752686][ T4364] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[  288.867213][ T4364] usb 8-1: USB disconnect, device number 4
[  289.796347][ T9885] fuse: Bad value for 'fd'
[  290.211274][ T9894] ip_tables: iptables: counters copy to user failed while replacing table
[  292.135435][ T9955] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1782'.
[  292.402946][ T9966] FAULT_INJECTION: forcing a failure.
[  292.402946][ T9966] name failslab, interval 1, probability 0, space 0, times 0
[  292.442650][ T9966] CPU: 0 PID: 9966 Comm: syz.3.1785 Not tainted syzkaller #0
[  292.455671][ T9966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  292.471320][ T9966] Call Trace:
[  292.476315][ T9966]  <TASK>
[  292.479723][ T9966]  dump_stack_lvl+0x188/0x24e
[  292.484625][ T9966]  ? show_regs_print_info+0x12/0x12
[  292.491349][ T9966]  ? load_image+0x410/0x410
[  292.497129][ T9966]  ? __might_sleep+0xd0/0xd0
[  292.502079][ T9966]  ? __lock_acquire+0x7ea0/0x7ea0
[  292.508826][ T9966]  should_fail_ex+0x390/0x4c0
[  292.514979][ T9966]  should_failslab+0x5/0x20
[  292.520306][ T9966]  slab_pre_alloc_hook+0x59/0x300
[  292.526763][ T9966]  ? aa_get_newest_label+0xf9/0x5b0
[  292.532746][ T9966]  ? sk_prot_alloc+0xe7/0x210
[  292.538985][ T9966]  __kmem_cache_alloc_node+0x4f/0x270
[  292.547020][ T9966]  ? sk_prot_alloc+0xe7/0x210
[  292.552786][ T9966]  __kmalloc+0xa3/0x240
[  292.558679][ T9966]  sk_prot_alloc+0xe7/0x210
[  292.564435][ T9966]  ? sk_alloc+0x20/0x330
[  292.571607][ T9966]  sk_alloc+0x36/0x330
[  292.576345][ T9966]  packet_create+0xfb/0x770
[  292.581703][ T9966]  __sock_create+0x49a/0x940
[  292.587516][ T9966]  __sys_socket+0xc4/0x190
[  292.593630][ T9966]  __x64_sys_socket+0x76/0x80
[  292.599049][ T9966]  do_syscall_64+0x4c/0xa0
[  292.605004][ T9966]  ? clear_bhb_loop+0x60/0xb0
[  292.610691][ T9966]  ? clear_bhb_loop+0x60/0xb0
[  292.616123][ T9966]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  292.623803][ T9966] RIP: 0033:0x7f3b8899e199
[  292.629883][ T9966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  292.656367][ T9966] RSP: 002b:00007f3b89836028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  292.666784][ T9966] RAX: ffffffffffffffda RBX: 00007f3b88c25fa0 RCX: 00007f3b8899e199
[  292.676808][ T9966] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000011
[  292.686493][ T9966] RBP: 00007f3b88a358e0 R08: 0000000000000000 R09: 0000000000000000
[  292.696674][ T9966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  292.706417][ T9966] R13: 00007f3b88c26038 R14: 00007f3b88c25fa0 R15: 00007fff72a0dcf8
[  292.715004][ T9966]  </TASK>
[  293.043870][ T4477] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  293.267038][ T4477] usb 8-1: Using ep0 maxpacket: 32
[  293.286972][ T4477] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  293.345229][ T4477] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  293.419872][ T4477] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  293.466973][ T4477] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.525769][ T4477] usb 8-1: config 0 descriptor??
[  293.568973][ T4477] hub 8-1:0.0: USB hub found
[  293.711068][ T9981] loop4: detected capacity change from 0 to 128
[  293.760589][ T9981] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  293.773711][ T4477] hub 8-1:0.0: config failed, can't read hub descriptor (err -22)
[  293.845898][ T9981] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  293.872782][ T9986] loop3: detected capacity change from 0 to 16
[  293.920209][ T9986] erofs: (device loop3): mounted with root inode @ nid 36.
[  293.990187][ T9986] erofs: (device loop3): z_erofs_readahead: readahead error at page 3 @ nid 89
[  294.014414][ T4477] hid-generic 0003:046D:C31C.0005: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.7-1/input0
[  294.073187][ T9986] erofs: (device loop3): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[  294.164756][ T9986] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 89
[  294.259582][ T9986] syz.3.1795: attempt to access beyond end of device
[  294.259582][ T9986] loop3: rw=524288, sector=34359738360, nr_sectors = 8 limit=16
[  294.307211][ T4477] usb 8-1: USB disconnect, device number 5
[  294.381896][ T9986] erofs: (device loop3): z_erofs_readahead: readahead error at page 3 @ nid 89
[  294.446299][ T9986] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 3 @ nid 89
[  294.509388][ T9986] erofs: (device loop3): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[  294.595662][ T9991] fido_id[9991]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  294.597651][ T9986] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117]
[  294.694225][   T27] audit: type=1800 audit(1791377580.684:57): pid=9986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1795" name="file2" dev="loop3" ino=89 res=0 errno=0
[  294.987215][ T5715] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  295.208925][ T5715] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  295.240510][ T5715] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  295.257298][T10013] netlink: 324 bytes leftover after parsing attributes in process `syz.4.1803'.
[  295.291249][ T5715] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  295.304368][ T5715] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.321510][ T5715] usb 7-1: Product: syz
[  295.329342][ T5715] usb 7-1: Manufacturer: syz
[  295.336509][ T5715] usb 7-1: SerialNumber: syz
[  295.572259][ T5715] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  295.673398][T10023] loop7: detected capacity change from 0 to 2048
[  295.777121][T10023] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found!
[  295.875461][T10023] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  296.078876][ T5715] usb 7-1: USB disconnect, device number 4
[  296.108186][ T5715] usblp0: removed
[  297.460628][T10069] loop6: detected capacity change from 0 to 4096
[  297.504059][T10069] ntfs3: loop6: ino=3, Correct links count -> 2.
[  297.718521][T10069] ntfs3: loop6: failed to convert "0080" to cp874
[  297.808209][T10083] loop3: detected capacity change from 0 to 64
[  298.282573][T10090] loop6: detected capacity change from 0 to 4096
[  298.363114][T10090] EXT4-fs: Ignoring removed nobh option
[  298.397374][T10090] EXT4-fs: Ignoring removed bh option
[  298.447524][T10090] EXT4-fs (loop6): Test dummy encryption mode enabled
[  298.518753][T10090] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  298.694077][T10090] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  298.789949][T10103] loop3: detected capacity change from 0 to 1024
[  299.034398][ T6898] EXT4-fs (loop6): unmounting filesystem.
[  299.150231][ T4330] hfsplus: bad catalog file entry
[  299.390354][   T27] audit: type=1326 audit(1791377585.384:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.0.1849" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efeef19e199 code=0x0
[  299.486752][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802f74e800: rx timeout, send abort
[  299.507369][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802f74e800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  299.697226][ T5712] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  299.897024][ T5712] usb 8-1: Using ep0 maxpacket: 16
[  299.906731][T10117] 9pnet: p9_errstr2errno: server reported unknown error ��@
[  299.932130][ T5712] usb 8-1: unable to get BOS descriptor or descriptor too short
[  299.955858][ T5712] usb 8-1: unable to read config index 0 descriptor/start: -71
[  299.984410][ T5712] usb 8-1: can't read configurations, error -71
[  300.640376][T10146] netlink: 'syz.7.1858': attribute type 4 has an invalid length.
[  300.680517][T10146] netlink: 'syz.7.1858': attribute type 4 has an invalid length.
[  301.109487][T10158] 9pnet: p9_errstr2errno: server reported unknown error ��n$�[
[  301.109487][T10158] Q&|x�6
[  301.306011][T10162] ip_tables: iptables: counters copy to user failed while replacing table
[  301.648431][T10176] loop4: detected capacity change from 0 to 1024
[  301.805862][T10176] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  302.268345][ T7519] EXT4-fs (loop4): unmounting filesystem.
[  302.669749][T10202] loop4: detected capacity change from 0 to 128
[  302.724769][T10202] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  302.755456][T10202] ext4 filesystem being mounted at /162/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  302.948625][ T7519] EXT4-fs (loop4): unmounting filesystem.
[  303.413393][T10223] loop5: detected capacity change from 0 to 7
[  303.442234][ T8164] Dev loop5: unable to read RDB block 7
[  303.448553][ T8164]  loop5: unable to read partition table
[  303.470846][ T8164] loop5: partition table beyond EOD, truncated
[  303.492718][T10223] Dev loop5: unable to read RDB block 7
[  303.502343][T10223]  loop5: unable to read partition table
[  303.536587][T10223] loop5: partition table beyond EOD, truncated
[  303.558911][T10223] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  304.177602][ T4280] Bluetooth: hci4: command 0x0406 tx timeout
[  305.481969][T10292] input: syz0 as /devices/virtual/input/input10
[  305.713427][T10298] loop4: detected capacity change from 0 to 4096
[  305.721059][ T5711] usb 8-1: new full-speed USB device number 8 using dummy_hcd
[  305.826823][T10298] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  305.918803][ T5711] usb 8-1: config 4 has an invalid interface number: 44 but max is 0
[  305.961886][ T5711] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  306.018709][ T5711] usb 8-1: config 4 has no interface number 0
[  306.067052][ T5711] usb 8-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  306.143517][ T5711] usb 8-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20
[  306.199650][ T5711] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.239021][ T5711] usb 8-1: Product: syz
[  306.255660][ T5711] usb 8-1: Manufacturer: syz
[  306.279104][ T5711] usb 8-1: SerialNumber: syz
[  306.772406][ T5711] dvb-usb: found a 'Gigabyte U7000' in warm state.
[  306.789894][ T7519] EXT4-fs (loop4): unmounting filesystem.
[  306.800562][ T5711] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  306.835689][ T5711] dvbdev: DVB: registering new adapter (Gigabyte U7000)
[  306.875654][ T5711] usb 8-1: media controller created
[  306.910647][ T5711] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  307.236794][ T5711] DVB: Unable to find symbol dib7000p_attach()
[  307.254975][ T5711] dvb-usb: no frontend was attached by 'Gigabyte U7000'
[  307.557147][ T5711] rc_core: IR keymap rc-dib0700-rc5 not found
[  307.563566][ T5711] Registered IR keymap rc-empty
[  307.621306][ T5711] dvb-usb: could not initialize remote control.
[  307.658768][ T5711] dvb-usb: Gigabyte U7000 successfully initialized and connected.
[  307.777332][ T5711] usb 8-1: USB disconnect, device number 8
[  307.897229][ T5711] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected.
[  308.873551][T10351] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1941'.
[  309.278399][ T5712] libceph: connect (1)[c::]:6789 error -101
[  309.288077][ T5712] libceph: mon0 (1)[c::]:6789 connect error
[  309.328755][ T5712] libceph: connect (1)[c::]:6789 error -101
[  309.355011][ T5712] libceph: mon0 (1)[c::]:6789 connect error
[  309.677397][ T5712] libceph: connect (1)[c::]:6789 error -101
[  309.688487][ T5712] libceph: mon0 (1)[c::]:6789 connect error
[  309.727760][ T5712] libceph: connect (1)[c::]:6789 error -101
[  309.766768][ T5712] libceph: mon0 (1)[c::]:6789 connect error
[  309.953520][T10382] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1950'.
[  309.978977][T10382] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1950'.
[  310.060083][T10363] ceph: No mds server is up or the cluster is laggy
[  310.069059][T10367] ceph: No mds server is up or the cluster is laggy
[  310.494770][T10393] bridge0: port 3(syz_tun) entered blocking state
[  310.519878][T10393] bridge0: port 3(syz_tun) entered disabled state
[  310.574354][T10393] device syz_tun entered promiscuous mode
[  310.617758][T10393] bridge0: port 3(syz_tun) entered blocking state
[  310.625525][T10393] bridge0: port 3(syz_tun) entered forwarding state
[  311.492543][T10417] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1963'.
[  312.687118][ T5715] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  312.886977][ T5715] usb 4-1: Using ep0 maxpacket: 32
[  312.907939][ T5715] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  312.952367][ T5715] usb 4-1: config 0 has no interface number 0
[  312.978012][ T5715] usb 4-1: config 0 interface 184 has no altsetting 0
[  313.036180][ T5715] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  313.068283][T10452] overlayfs: failed to clone upperpath
[  313.076631][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.127473][ T5715] usb 4-1: Product: syz
[  313.132925][ T5715] usb 4-1: Manufacturer: syz
[  313.157000][ T5715] usb 4-1: SerialNumber: syz
[  313.196722][ T5715] usb 4-1: config 0 descriptor??
[  313.251376][ T5715] smsc75xx v1.0.0
[  313.419091][T10458] netlink: 762 bytes leftover after parsing attributes in process `syz.0.1980'.
[  313.466946][T10458] bridge: RTM_DELNEIGH with unconfigured vlan 289 on bridge0
[  313.654076][T10448] loop7: detected capacity change from 0 to 40427
[  313.727130][T10448] F2FS-fs (loop7): Small segment_count (9 < 1 * 24)
[  313.764608][T10448] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  313.788762][T10448] F2FS-fs (loop7): invalid crc value
[  313.828250][T10448] F2FS-fs (loop7): Found nat_bits in checkpoint
[  313.865773][ T5715] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  313.908263][ T5715] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  313.955255][T10469] netlink: 'syz.0.1984': attribute type 1 has an invalid length.
[  313.997170][T10448] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  314.021945][T10469] 8021q: adding VLAN 0 to HW filter on device bond2
[  314.044039][T10448] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  314.087991][ T5711] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  314.241362][   T27] audit: type=1804 audit(1791377600.234:59): pid=10448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1974" name="/newroot/169/bus/bus" dev="loop7" ino=10 res=1 errno=0
[  314.298682][ T5711] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  314.348316][ T5715] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[  314.364142][ T5711] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  314.394263][ T5715] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[  314.420707][ T5711] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  314.435606][ T5715] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  314.457742][ T5711] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  314.477019][ T5711] usb 7-1: SerialNumber: syz
[  314.497392][ T5715] smsc75xx: probe of 4-1:0.184 failed with error -71
[  314.554026][ T5715] usb 4-1: USB disconnect, device number 15
[  314.684110][ T7813] syz-executor: attempt to access beyond end of device
[  314.684110][ T7813] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  314.714375][ T5711] usb 7-1: 0:2 : does not exist
[  314.749556][ T5711] usb 7-1: USB disconnect, device number 5
[  314.824621][ T8164] udevd[8164]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  316.389442][T10514] loop3: detected capacity change from 0 to 512
[  316.457684][T10513] team0: Device ipvlan1 failed to register rx_handler
[  316.487681][T10514] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  316.961517][T10527] 9pnet: p9_errstr2errno: server reported unknown error 0x0000
[  317.054701][T10532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2010'.
[  317.342056][T10540] netlink: 'syz.0.2013': attribute type 20 has an invalid length.
[  317.371698][T10540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2013'.
[  317.427341][T10540] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  317.437659][T10540] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  317.448816][T10540] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  317.459883][T10540] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  317.472888][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  317.481958][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  317.537271][ T4277] Bluetooth: hci1: command 0x0406 tx timeout
[  317.647234][ T4477] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  317.679115][T10549] device batadv_slave_0 entered promiscuous mode
[  317.714172][T10540] netlink: 'syz.0.2013': attribute type 20 has an invalid length.
[  317.724831][T10540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2013'.
[  317.738854][T10548] device batadv_slave_0 left promiscuous mode
[  317.848955][ T4477] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  317.887040][ T4477] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  317.928971][ T4477] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  317.958184][ T4477] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.969858][T10555] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2021'.
[  317.969935][T10554] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  318.005046][ T4477] usb 8-1: config 0 descriptor??
[  318.044101][T10555] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.077456][T10558] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2021'.
[  318.431544][ T4477] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0
[  318.459778][T10569] loop3: detected capacity change from 0 to 128
[  318.467269][ T4477] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0
[  318.493979][ T4477] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0D8C:0022.0006/input/input12
[  318.554276][T10569] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  318.597915][T10569] FAT-fs (loop3): Filesystem has been set read-only
[  318.605871][ T4477] cm6533_jd 0003:0D8C:0022.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.7-1/input0
[  318.647121][T10569] syz.3.2025: attempt to access beyond end of device
[  318.647121][T10569] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  318.673749][ T4477] usb 8-1: USB disconnect, device number 9
[  318.740908][T10569] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  318.793115][T10569] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  318.849675][T10569] syz.3.2025: attempt to access beyond end of device
[  318.849675][T10569] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  318.861216][T10579] ip_tables: iptables: counters copy to user failed while replacing table
[  318.905377][   T27] audit: type=1800 audit(1791377604.894:60): pid=10569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2025" name="file2" dev="loop3" ino=1048686 res=0 errno=0
[  318.949209][T10577] fido_id[10577]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  319.214841][T10586] gadgetfs: bound to dummy_udc driver
[  319.399335][T10590] device pim6reg1 entered promiscuous mode
[  319.763302][T10603] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  319.867166][T10603] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  320.037039][ T5711] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  320.227185][ T5711] usb 7-1: Using ep0 maxpacket: 16
[  320.235020][ T5711] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  320.274373][ T5711] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  320.327500][ T5711] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  320.356992][ T5711] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  320.397152][ T5711] usb 7-1: config 0 interface 0 has no altsetting 0
[  320.404759][ T5711] usb 7-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[  320.446961][ T5711] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.508698][ T5711] usb 7-1: config 0 descriptor??
[  320.958390][ T5711] logitech-djreceiver 0003:046D:C53A.0007: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.6-1/input0
[  321.172500][ T5711] usb 7-1: USB disconnect, device number 6
[  321.408942][T10625] fido_id[10625]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  321.807508][T10644] loop3: detected capacity change from 0 to 8192
[  321.914157][T10644] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  322.027043][T10644] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  322.091465][T10644] REISERFS (device loop3): using ordered data mode
[  322.132033][T10644] reiserfs: using flush barriers
[  322.177254][T10644] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  322.184955][   T57] wlan1: Trigger new scan to find an IBSS to join
[  322.246379][T10644] REISERFS (device loop3): checking transaction log (loop3)
[  322.310923][T10656] "syz.0.2061" (10656) uses obsolete ecb(arc4) skcipher
[  322.348592][T10657] tls_set_device_offload: netdev not found
[  322.349281][T10644] REISERFS (device loop3): Using r5 hash to sort names
[  322.444688][T10644] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  322.897336][T10677] capability: warning: `syz.6.2069' uses 32-bit capabilities (legacy support in use)
[  323.308046][T10685] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2073'.
[  323.725746][ T4277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  323.744028][ T4277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  323.754833][ T4277] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  323.767711][ T4277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  323.776002][ T4277] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  323.784514][ T4286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  324.178799][   T57] wlan1: Trigger new scan to find an IBSS to join
[  324.376190][ T6777] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  324.388847][T10700] loop7: detected capacity change from 0 to 16
[  324.405050][ T6777] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.470392][T10700] erofs: (device loop7): mounted with root inode @ nid 36.
[  324.522594][T10700] erofs: (device loop7): z_erofs_readahead: readahead error at page 3 @ nid 89
[  324.583913][T10700] erofs: (device loop7): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[  324.621238][ T6777] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  324.636434][T10700] erofs: (device loop7): z_erofs_readahead: readahead error at page 0 @ nid 89
[  324.644115][T10700] syz.7.2077: attempt to access beyond end of device
[  324.644115][T10700] loop7: rw=524288, sector=34359738360, nr_sectors = 8 limit=16
[  324.752088][ T6777] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.779316][T10700] erofs: (device loop7): z_erofs_readahead: readahead error at page 3 @ nid 89
[  324.854680][T10700] erofs: (device loop7): z_erofs_pcluster_readmore: readmore error at page 3 @ nid 89
[  324.912586][T10700] erofs: (device loop7): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[  324.962974][ T6777] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  324.982579][ T6777] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.998047][T10700] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117]
[  325.009346][   T27] audit: type=1800 audit(1791377611.004:61): pid=10700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2077" name="file2" dev="loop7" ino=89 res=0 errno=0
[  325.138463][   T57] rpcbind: server 127.0.0.1 not responding, timed out
[  325.262210][ T6777] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  325.288992][ T6777] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.487512][T10688] chnl_net:caif_netlink_parms(): no params data found
[  325.858780][ T4280] Bluetooth: hci3: command 0x0409 tx timeout
[  325.924858][T10688] bridge0: port 1(bridge_slave_0) entered blocking state
[  325.957324][T10688] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.989796][T10688] device bridge_slave_0 entered promiscuous mode
[  326.067291][T10688] bridge0: port 2(bridge_slave_1) entered blocking state
[  326.101655][T10688] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.138492][T10688] device bridge_slave_1 entered promiscuous mode
[  326.299938][T10688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  326.666443][T10688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  326.765432][T10688] team0: Port device team_slave_0 added
[  326.779747][T10688] team0: Port device team_slave_1 added
[  326.860261][T10688] batman_adv: batadv0: Adding interface: batadv_slave_0
[  326.879491][T10688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  326.921757][T10688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  326.974130][T10688] batman_adv: batadv0: Adding interface: batadv_slave_1
[  326.985487][T10688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  327.052122][T10688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  327.144417][ T6769] wlan1: Trigger new scan to find an IBSS to join
[  327.218076][ T6769] wlan1: Trigger new scan to find an IBSS to join
[  327.282245][T10688] device hsr_slave_0 entered promiscuous mode
[  327.298078][T10688] device hsr_slave_1 entered promiscuous mode
[  327.311710][T10688] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  327.327061][T10688] Cannot create hsr debugfs directory
[  327.938325][ T4280] Bluetooth: hci3: command 0x041b tx timeout
[  328.025792][T10688] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  328.080785][T10688] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  328.093946][   T57] wlan1: Creating new IBSS network, BSSID 02:42:07:c2:51:a7
[  328.290161][T10688] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  328.300936][T10688] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  328.449730][ T6777] device hsr_slave_0 left promiscuous mode
[  328.486029][ T6777] device hsr_slave_1 left promiscuous mode
[  328.507423][ T6777] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  328.516148][ T6777] batman_adv: batadv0: Removing interface: batadv_slave_0
[  328.538033][ T6777] device bridge_slave_1 left promiscuous mode
[  328.557165][ T6777] bridge0: port 2(bridge_slave_1) entered disabled state
[  328.577195][ T6777] device bridge_slave_0 left promiscuous mode
[  328.584446][ T6777] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.692849][ T6777] device veth1_macvtap left promiscuous mode
[  328.700717][ T6777] device veth0_macvtap left promiscuous mode
[  328.710638][ T6777] device veth1_vlan left promiscuous mode
[  328.716873][ T6777] device veth0_vlan left promiscuous mode
[  328.994508][T10787] loop6: detected capacity change from 0 to 512
[  329.081369][ T8164] udevd[8164]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory
[  329.105020][T10787] EXT4-fs: Ignoring removed nomblk_io_submit option
[  329.154527][T10787] EXT4-fs: Ignoring removed nomblk_io_submit option
[  329.196773][T10787] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  329.214374][ T6777] bond2 (unregistering): (slave veth3): Releasing backup interface
[  329.243949][ T6777] device veth3 left promiscuous mode
[  329.335967][T10787] EXT4-fs (loop6): 1 truncate cleaned up
[  329.342168][T10787] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  329.563349][ T6898] EXT4-fs (loop6): unmounting filesystem.
[  329.650216][ T8164] udevd[8164]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory
[  329.709404][ T8164] udevd[8164]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory
[  330.037291][ T4280] Bluetooth: hci3: command 0x040f tx timeout
[  330.184525][ T6769] wlan1: Trigger new scan to find an IBSS to join
[  330.328747][ T6777] bond2 (unregistering): Released all slaves
[  330.406393][ T6777] bond1 (unregistering): (slave geneve2): Releasing active interface
[  330.974255][ T6777] bond1 (unregistering): Released all slaves
[  331.231059][ T6767] wlan1: Creating new IBSS network, BSSID e2:77:13:1b:d8:bd
[  332.105548][ T4280] Bluetooth: hci3: command 0x0419 tx timeout
[  333.065705][ T6777] team0 (unregistering): Port device team_slave_1 removed
[  333.241852][ T6777] team0 (unregistering): Port device team_slave_0 removed
[  333.415546][ T6777] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  333.607408][ T6777] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  334.460684][ T6777] bond0 (unregistering): Released all slaves
[  334.626809][T10823] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  334.723447][T10823] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  334.797727][T10823] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  335.192029][T10688] 8021q: adding VLAN 0 to HW filter on device bond0
[  335.250769][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  335.260961][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  335.276830][T10688] 8021q: adding VLAN 0 to HW filter on device team0
[  335.345712][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  335.384319][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  335.435241][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state
[  335.445380][ T4330] bridge0: port 1(bridge_slave_0) entered forwarding state
[  335.502311][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  335.544628][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  335.584983][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  335.637530][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.646772][ T4330] bridge0: port 2(bridge_slave_1) entered forwarding state
[  335.723997][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  335.780512][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  335.877320][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  335.922005][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  335.966490][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  336.003350][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  336.060241][T10688] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  336.109783][T10688] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  336.170296][T10869] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2122'.
[  336.198492][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  336.238570][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  336.288222][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  336.358982][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  336.408813][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  336.473309][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  336.573430][T10880] loop3: detected capacity change from 0 to 1024
[  336.625088][T10831] udevd[10831]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  336.761176][T10831] udevd[10831]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  336.809943][T10831] udevd[10831]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  337.367155][ T6773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  337.375365][ T6773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  337.447080][T10688] 8021q: adding VLAN 0 to HW filter on device batadv0
[  337.749627][T10919] netlink: 876 bytes leftover after parsing attributes in process `syz.6.2139'.
[  338.897771][T10954] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2149'.
[  339.263636][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  339.286438][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  339.312599][T10963] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  339.346198][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  339.366769][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  339.410389][T10688] device veth0_vlan entered promiscuous mode
[  339.457977][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  339.527901][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  339.614085][T10688] device veth1_vlan entered promiscuous mode
[  339.737922][ T6773] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  339.798309][ T6773] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  339.865698][ T6773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  339.919944][ T6773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  339.954110][T10688] device veth0_macvtap entered promiscuous mode
[  339.974538][T10977] netlink: 'syz.0.2156': attribute type 15 has an invalid length.
[  339.996507][T10977] netlink: 'syz.0.2156': attribute type 15 has an invalid length.
[  340.055442][T10688] device veth1_macvtap entered promiscuous mode
[  340.193945][T10688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  340.226704][T10688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.282071][T10688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  340.308629][T10688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.344200][T10688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  340.358489][T10688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.373750][T10688] batman_adv: batadv0: Interface activated: batadv_slave_0
[  340.385813][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  340.421575][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  340.457926][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  340.474342][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  340.500213][T10688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  340.540925][T10688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.572501][T10688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  340.594423][T10688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.611567][T10688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  340.649543][T10688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.663687][T10688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  340.677618][T10688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.693746][T10688] batman_adv: batadv0: Interface activated: batadv_slave_1
[  340.708630][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  340.739764][ T6767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  340.767766][T10688] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  340.824227][T10688] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  340.856037][T10688] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  340.893990][T10688] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  341.891662][   T11] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.995909][T11020] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2174'.
[  342.254571][   T11] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.503307][   T11] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.635990][T11038] fuse: Bad value for 'fd'
[  342.657246][ T4280] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  342.704651][T11039] loop3: detected capacity change from 0 to 1024
[  342.720510][   T11] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.746516][T10831] udevd[10831]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  342.762660][T11039] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  342.846729][T11039] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  342.953998][T11039] EXT4-fs error (device loop3): ext4_get_journal_inode:5762: inode #5: comm syz.3.2178: unexpected bad inode w/o EXT4_IGET_BAD
[  343.007212][ T4476] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  343.053665][T11039] EXT4-fs (loop3): no journal found
[  343.088485][T11039] EXT4-fs (loop3): can't get journal size
[  343.120223][T11050] loop7: detected capacity change from 0 to 512
[  343.128653][T11039] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  343.230385][T10831] udevd[10831]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory
[  343.248781][ T4476] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  343.301333][T11050] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  343.317023][ T4476] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[  343.328478][ T4476] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  343.342657][ T4476] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  343.352941][T11050] ext4 filesystem being mounted at /215/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  343.357863][T10831] udevd[10831]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory
[  343.376015][ T4476] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.437589][ T4271] EXT4-fs (loop3): unmounting filesystem.
[  343.584121][T10831] udevd[10831]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  343.690688][T10831] udevd[10831]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  343.785191][T11061] loop3: detected capacity change from 0 to 512
[  343.811854][ T7813] EXT4-fs (loop7): unmounting filesystem.
[  343.815706][T10831] udevd[10831]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  343.832263][ T4476] cxacru 7-1:1.0: send of cm 0x91 failed (-71)
[  343.867689][ T4476] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71
[  343.875377][T11061] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  343.939997][ T4476] ATM dev 0: usbatm_atm_init: atm_start failed: -71!
[  343.990403][ T4476] cxacru: probe of 7-1:1.0 failed with error -71
[  344.037260][ T4476] usb 7-1: USB disconnect, device number 7
[  344.127971][T11063] udevd[11063]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  344.171364][T11063] udevd[11063]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  344.234497][T11063] udevd[11063]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory
[  344.319095][T11063] udevd[11063]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory
[  345.461686][   T11] device hsr_slave_0 left promiscuous mode
[  345.494238][   T11] device hsr_slave_1 left promiscuous mode
[  345.514581][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  345.537128][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  345.577778][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  345.585612][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  345.607776][   T11] device bridge_slave_1 left promiscuous mode
[  345.616011][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.638383][   T11] device bridge_slave_0 left promiscuous mode
[  345.659604][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.827222][   T11] device veth1_macvtap left promiscuous mode
[  345.834091][   T11] device veth0_macvtap left promiscuous mode
[  345.857202][   T11] device veth1_vlan left promiscuous mode
[  345.867304][   T11] device veth0_vlan left promiscuous mode
[  347.501872][   T11] team0 (unregistering): Port device team_slave_1 removed
[  347.631188][   T11] team0 (unregistering): Port device team_slave_0 removed
[  347.735492][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  347.838986][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  348.993378][   T11] bond0 (unregistering): Released all slaves
[  358.135758][ T6775] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  361.311018][ T6775] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  371.412329][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2192'.
[  375.752581][T11504] FAULT_INJECTION: forcing a failure.
[  375.752581][T11504] name failslab, interval 1, probability 0, space 0, times 0
[  375.830964][T11504] CPU: 0 PID: 11504 Comm: syz.6.2208 Not tainted syzkaller #0
[  375.840346][T11504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  375.853174][T11504] Call Trace:
[  375.856474][T11504]  <TASK>
[  375.859548][T11504]  dump_stack_lvl+0x188/0x24e
[  375.864514][T11504]  ? show_regs_print_info+0x12/0x12
[  375.870072][T11504]  ? load_image+0x410/0x410
[  375.875886][T11504]  ? __might_sleep+0xd0/0xd0
[  375.880831][T11504]  ? __lock_acquire+0x7ea0/0x7ea0
[  375.886956][T11504]  should_fail_ex+0x390/0x4c0
[  375.891849][T11504]  should_failslab+0x5/0x20
[  375.896416][T11504]  slab_pre_alloc_hook+0x59/0x300
[  375.902816][T11504]  kmem_cache_alloc+0x56/0x2f0
[  375.909224][T11504]  ? __anon_vma_prepare+0x64/0x430
[  375.915430][T11504]  __anon_vma_prepare+0x64/0x430
[  375.921871][T11504]  ? __lock_acquire+0x7ea0/0x7ea0
[  375.927253][T11504]  do_huge_pmd_anonymous_page+0x1137/0x1510
[  375.933726][T11504]  ? count_memcg_event_mm+0x36b/0x3c0
[  375.939890][T11504]  ? count_memcg_event_mm+0x8a/0x3c0
[  375.946751][T11504]  ? vma_thp_gfp_mask+0x160/0x160
[  375.951932][T11504]  ? hugepage_vma_check+0x46d/0x540
[  375.959279][T11504]  handle_mm_fault+0x11f0/0x3d40
[  375.965046][T11504]  ? numa_migrate_prep+0x250/0x250
[  375.971088][T11504]  ? check_vma_flags+0x45c/0x4c0
[  375.978243][T11504]  __get_user_pages+0x40d/0xec0
[  375.985620][T11504]  ? populate_vma_page_range+0x2b0/0x2b0
[  375.992349][T11504]  populate_vma_page_range+0x214/0x2b0
[  375.998725][T11504]  __mm_populate+0x25c/0x380
[  376.004818][T11504]  ? check_vma_flags+0x4c0/0x4c0
[  376.011136][T11504]  ? up_write+0x1b6/0x410
[  376.017521][T11504]  ? do_mlock+0x194/0x640
[  376.022691][T11504]  do_mlock+0x53a/0x640
[  376.028494][T11504]  ? lru_gen_add_folio+0xe20/0xe20
[  376.034583][T11504]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  376.042269][T11504]  ? lock_chain_count+0x20/0x20
[  376.048106][T11504]  ? syscall_enter_from_user_mode+0x21/0x80
[  376.055990][T11504]  __x64_sys_mlock+0x5c/0x70
[  376.062464][T11504]  do_syscall_64+0x4c/0xa0
[  376.068383][T11504]  ? clear_bhb_loop+0x60/0xb0
[  376.074829][T11504]  ? clear_bhb_loop+0x60/0xb0
[  376.080719][T11504]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  376.089199][T11504] RIP: 0033:0x7faaeaf9e199
[  376.095908][T11504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  376.120956][T11504] RSP: 002b:00007faaebe9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[  376.129893][T11504] RAX: ffffffffffffffda RBX: 00007faaeb225fa0 RCX: 00007faaeaf9e199
[  376.141103][T11504] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000200000c00000
[  376.153271][T11504] RBP: 00007faaeb0358e0 R08: 0000000000000000 R09: 0000000000000000
[  376.164254][T11504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  376.177330][T11504] R13: 00007faaeb226038 R14: 00007faaeb225fa0 R15: 00007ffcd11dca98
[  376.188488][T11504]  </TASK>
[  378.910427][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  378.923946][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  379.118016][T11567] xt_connbytes: Forcing CT accounting to be enabled
[  379.159938][T11567] x_tables: ip_tables: icmp match: only valid for protocol 1
[  379.452762][T11575] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  379.508572][T11581] bridge0: port 3(syz_tun) entered disabled state
[  379.514978][T11575] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98
[  379.659450][T11581] device syz_tun left promiscuous mode
[  379.665403][T11581] bridge0: port 3(syz_tun) entered disabled state
[  379.784381][ T4477] infiniband s`z1: ib_query_port failed (-19)
[  379.859604][T11577] infiniband syz1: Couldn't create per-port data
[  379.892784][T11577] rdma_rxe: rxe_register_device failed with error -19
[  379.931747][T11577] rdma_rxe: failed to add syz_tun
[  380.001730][T11575] siw: device registration error -19
[  382.840348][T11644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2231'.
[  383.407173][ T4321] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  383.627099][ T4321] usb 7-1: Using ep0 maxpacket: 16
[  383.659034][ T4321] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  383.692670][ T4321] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.723564][ T4321] usb 7-1: Product: syz
[  383.736098][ T4321] usb 7-1: Manufacturer: syz
[  383.771449][ T4321] usb 7-1: SerialNumber: syz
SYZFAIL: open(/dev/rfkill) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: repeatedly failed to execute the program
proc=8 req=2064 state=3 status=67 (errno 9: Bad file descriptor)
[  384.036570][ T4321] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  384.092177][ T4321] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  384.141444][ T4321] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  384.171040][ T4321] usb 7-1: media controller created
[  384.260568][ T4321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  384.427077][ T4321] zl10353_read_register: readreg error (reg=127, ret==-32)
[  385.747597][ T4321] dvb_usb_gl861: probe of 7-1:157.0 failed with error -5
[  385.897401][ T4321] usb 7-1: USB disconnect, device number 8
[  386.323101][ T6767] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.468819][ T6767] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.598892][ T6767] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.709006][ T6767] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.093189][ T6767] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  387.127033][ T6767] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.260824][ T6767] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  387.287980][ T6767] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.395563][ T6767] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  387.409274][ T6767] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.500023][ T6767] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  387.531452][ T6767] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.864577][ T6767] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.993440][ T6767] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.102174][ T6767] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.269210][ T6767] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.060620][ T4330] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  390.309843][ T6767] team0: Port device xfrm0 removed
[  391.323070][ T6767] IPVS: stopping master sync thread 7499 ...
[  392.239418][ T4330] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  392.738477][ T6767] device hsr_slave_0 left promiscuous mode
[  392.766934][ T6767] device hsr_slave_1 left promiscuous mode
[  392.778252][ T6767] device hsr_slave_0 left promiscuous mode
[  392.787333][ T6767] device hsr_slave_1 left promiscuous mode
[  392.807153][ T6767] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  392.815343][ T6767] batman_adv: batadv0: Removing interface: batadv_slave_1
[  392.852003][ T6767] device hsr_slave_0 left promiscuous mode
[  392.871288][ T6767] device hsr_slave_1 left promiscuous mode
[  392.892125][ T6767] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  392.927337][ T6767] batman_adv: batadv0: Removing interface: batadv_slave_0
[  392.938444][ T6767] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  392.946369][ T6767] batman_adv: batadv0: Removing interface: batadv_slave_1
[  392.977850][ T6767] device bridge_slave_1 left promiscuous mode
[  392.999515][ T6767] bridge0: port 2(bridge_slave_1) entered disabled state
[  393.008716][ T6767] device bridge_slave_0 left promiscuous mode
[  393.016241][ T6767] bridge0: port 1(bridge_slave_0) entered disabled state
[  393.157791][ T6767] device veth1_macvtap left promiscuous mode
[  393.164268][ T6767] device veth0_macvtap left promiscuous mode
[  393.170468][ T6767] device veth1_vlan left promiscuous mode
[  393.176391][ T6767] device veth0_vlan left promiscuous mode
[  393.184534][ T6767] device veth1_macvtap left promiscuous mode
[  393.193552][ T6767] device veth1_vlan left promiscuous mode
[  393.200790][ T6767] device veth0_vlan left promiscuous mode
[  393.214011][ T6767] device veth1_macvtap left promiscuous mode
[  393.222954][ T6767] device veth0_macvtap left promiscuous mode
[  393.236238][ T6767] device veth1_vlan left promiscuous mode
[  393.242980][ T6767] device veth0_vlan left promiscuous mode