last executing test programs:

11.513216457s ago: executing program 2 (id=3600):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20)
sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x3)

10.625328026s ago: executing program 2 (id=3602):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
epoll_create1(0x0)
keyctl$invalidate(0x15, 0x0)
r3 = socket(0x28, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0)
write(r4, 0x0, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4)
pselect6(0x40, &(0x7f0000000180)={0x1de80000000000, 0x1, 0x5c, 0x40, 0x4, 0x1000, 0xffffffffffffff47, 0x7}, &(0x7f00000001c0)={0x1, 0x8000, 0x6, 0x0, 0x800000000, 0x5f, 0x8000000000000000, 0x11}, &(0x7f0000000280)={0x7, 0x0, 0xc5d2, 0xa35a, 0x1, 0x800, 0x10, 0x7fffffffffffffff}, &(0x7f0000000340)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x7]}, 0x8})
setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8)
bind(r5, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80)
connect(r5, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10)
sendto(r5, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x0})

10.017756655s ago: executing program 0 (id=3606):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r0, &(0x7f0000000700), 0x0, 0x7, 0x10000004)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0)
write(r1, &(0x7f0000000480), 0x0)
mmap(&(0x7f00008fc000/0x11000)=nil, 0x11000, 0x3, 0x8031, 0xffffffffffffffff, 0x3a8bc000)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x400, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0x81}}, {@minixdf}, {@bh}, {@delalloc}, {@dioread_nolock}, {@noquota}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=")
creat(&(0x7f0000000080)='./file1\x00', 0x8)
timer_create(0x7, 0x0, &(0x7f0000000140))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})

9.367425632s ago: executing program 0 (id=3609):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a9", 0x1}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040051)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r2, 0x2217, 0x7721, 0x16, 0x0, 0x0)

9.292764429s ago: executing program 1 (id=3610):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20)
sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x3)

9.213767395s ago: executing program 0 (id=3611):
syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x840, &(0x7f0000000280)={[{@lazytime}, {@uqnoenforce}, {@nolargeio}, {}, {@nogrpid}, {@allocsize={'allocsize', 0x3d, [0x30, 0x33, 0x6d]}}, {@largeio}]}, 0x4, 0x968d, &(0x7f000001c300)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000200), 0xfea7)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
pwrite64(r1, &(0x7f0000000280)='+', 0x1, 0x0)
r2 = creat(&(0x7f0000000500)='./file1\x00', 0x85)
io_setup(0x1ff, &(0x7f00000001c0)=<r3=>0x0)
io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0xc8, 0x8, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}])

7.835512728s ago: executing program 1 (id=3613):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001", 0x21)
sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0)

6.763691085s ago: executing program 2 (id=3616):
r0 = syz_open_dev$dri(&(0x7f0000000140), 0x23a, 0x101000)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:04.0/resource\x00', 0x0, 0x0)
read(r0, 0x0, 0x0)
close(r1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560702000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback=0x1e}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc}, 0x10}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80)

5.273635511s ago: executing program 1 (id=3620):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x12)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
pwritev(r0, &(0x7f00000027c0)=[{&(0x7f00000003c0)="9162dbcf223fc3d5d700a7be1eccbb9d089aa42be5a26ebda2325c6400515cd0c4995523bafd98b9cb3da0dcddabf516b2aaeb3ac010d3f9af970bfc35460e14cb92cdc7812308d93f3dc4ad9f4dd32acf31ac960941073e894e728a7b052716b6ebbff42d00a54a90a7ea0594d7c7183d9833808eec84a1f049d88258c98973bb9ec33942b3d44024a673394e80159defc1b465db9498e6688f3ca805ea5cdb1cf52f2f0a539a7f07b215eadc62bad07496dfac9c9a5f69a42c7703d049068622d32c4e6e2940ac58ee02a4352f442156826a22e2751a35cc07193228677712b61c12762035f5aaed520491ae9a98b518e2", 0xf2}, {&(0x7f0000000500)="f7cfb4563c723ca46b24f1a609d882341bf2a3cb423f20509ba664a7340600db0d2707a230793d6694de50e8832056e418444a4eb6095e32193a8f444fb632f47b8992b7023ecc5e5308bc", 0x4b}, {&(0x7f0000000580)="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", 0xf18}], 0x3, 0x5dac, 0xdb1)

5.18581799s ago: executing program 0 (id=3621):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20)
sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x3)

4.945830291s ago: executing program 1 (id=3625):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
epoll_create1(0x0)
keyctl$invalidate(0x15, 0x0)
r3 = socket(0x28, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0)
write(r4, 0x0, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4)
pselect6(0x40, &(0x7f0000000180)={0x1de80000000000, 0x1, 0x5c, 0x40, 0x4, 0x1000, 0xffffffffffffff47, 0x7}, &(0x7f00000001c0)={0x1, 0x8000, 0x6, 0x0, 0x800000000, 0x5f, 0x8000000000000000, 0x11}, &(0x7f0000000280)={0x7, 0x0, 0xc5d2, 0xa35a, 0x1, 0x800, 0x10, 0x7fffffffffffffff}, &(0x7f0000000340)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x7]}, 0x8})
setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8)
bind(r5, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80)
connect(r5, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10)
sendto(r5, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x0})

4.877022236s ago: executing program 3 (id=3626):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r0, &(0x7f0000000700), 0x0, 0x7, 0x10000004)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x22, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0)
write(r2, &(0x7f0000000480), 0x0)
mmap(&(0x7f00008fc000/0x11000)=nil, 0x11000, 0x3, 0x8031, 0xffffffffffffffff, 0x3a8bc000)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x400, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0x81}}, {@minixdf}, {@bh}, {@delalloc}, {@dioread_nolock}, {@noquota}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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")
creat(&(0x7f0000000080)='./file1\x00', 0x8)
timer_create(0x7, 0x0, &(0x7f0000000140))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})

4.695113244s ago: executing program 3 (id=3627):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
accept(r0, 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)

2.765259664s ago: executing program 0 (id=3628):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001", 0x21)
sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0)

2.754197696s ago: executing program 1 (id=3629):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x212, 0x0, &(0x7f0000002a40)="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", 0x0, 0x3f95b0e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffefffc}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

2.606468027s ago: executing program 3 (id=3630):
syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x2481, 0x0)
ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x1, 0x0, &(0x7f0000000300)=[0x0], 0x1, 0x0})
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pselect6(0x40, &(0x7f0000000040)={0x11, 0x0, 0x401, 0x8000000, 0x0, 0xfffffffffffffffc, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0)

2.537696442s ago: executing program 1 (id=3631):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file2\x00', 0x8c0, &(0x7f0000000080)={[{@acl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@data_writeback}, {@localflocks}, {@coherency_full}, {@noacl}]}, 0x1, 0x4421, &(0x7f0000004500)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
write$binfmt_register(r0, &(0x7f00000000c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'ext4\x00', 0x3a, 'U', 0x3a, './file1'}, 0x2d)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r2, &(0x7f0000000000)='3', 0x4e)
fallocate(r1, 0x0, 0x0, 0x8fffb)

2.445011741s ago: executing program 2 (id=3632):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000010500010006000000050005000200000005000400000000000900020073797a3100000000140007800800064000000003080013400000040511000300686173683a69702c6d61726b"], 0x60}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x24, 0x7, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}]}, 0x24}}, 0x0)

2.294072404s ago: executing program 2 (id=3633):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f00000000c0)={r4, r4, 0x7, 0x0, 0x0, 0xe, 0x4, 0x8, 0x9, 0x3, 0x3, 0x2, 'syz1\x00'})

1.347035424s ago: executing program 2 (id=3634):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)

1.265946731s ago: executing program 3 (id=3635):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0)

1.191459407s ago: executing program 3 (id=3636):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20)
sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)}, 0x3)

265.034204ms ago: executing program 3 (id=3637):
r0 = socket$inet(0x2, 0x3, 0xff)
sendto$inet(r0, 0x0, 0x0, 0x20008004, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10)

0s ago: executing program 0 (id=3638):
r0 = socket$kcm(0x23, 0x5, 0x0)
listen(r0, 0x800)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10)
r3 = accept4(r0, 0x0, 0x0, 0x80000)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3)

kernel console output (not intermixed with test programs):

adv: batadv0: Interface deactivated: batadv_slave_1
[ 1330.227501][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1330.243508][   T49] bridge_slave_1: left allmulticast mode
[ 1330.253839][   T49] bridge_slave_1: left promiscuous mode
[ 1330.261887][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1330.287098][   T49] bridge_slave_0: left allmulticast mode
[ 1330.292984][   T49] bridge_slave_0: left promiscuous mode
[ 1330.299881][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1330.342022][   T49] veth1_macvtap: left promiscuous mode
[ 1330.348431][   T49] veth0_macvtap: left promiscuous mode
[ 1330.354322][   T49] veth1_vlan: left promiscuous mode
[ 1330.360275][   T49] veth0_vlan: left promiscuous mode
[ 1330.621455][   T49] bond1 (unregistering): Released all slaves
[ 1331.277686][   T49] team0 (unregistering): Port device team_slave_1 removed
[ 1331.330771][   T49] team0 (unregistering): Port device team_slave_0 removed
[ 1331.381596][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1331.431046][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1331.825933][   T49] bond0 (unregistering): Released all slaves
[ 1331.948607][T14521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2419'.
[ 1331.974938][T14368] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1332.309492][T14368] veth0_vlan: entered promiscuous mode
[ 1332.403241][T14368] veth1_vlan: entered promiscuous mode
[ 1332.628877][T14368] veth0_macvtap: entered promiscuous mode
[ 1332.726200][T14368] veth1_macvtap: entered promiscuous mode
[ 1333.229943][T14368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1333.241069][T14368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1333.251423][T14368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1333.262873][T14368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1333.273797][T14368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1333.282863][T14544] jffs2: notice: (14544) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1333.284849][T14368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1333.336739][T14368] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1333.366259][T14546] overlayfs: failed to resolve './file1': -2
[ 1333.378856][T14368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1333.390572][T14368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1333.401181][T14368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1333.412196][T14368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1333.422476][T14368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1333.433194][T14368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1333.446024][T14368] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1333.462776][T14368] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1333.472086][T14368] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1333.483543][T14368] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1333.495716][T14368] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1333.933450][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1333.953953][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1333.972878][T14552] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1333.981365][T14552] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1333.998121][T14552] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1334.006167][T14552] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1334.062308][   T49] IPVS: stop unused estimator thread 0...
[ 1334.097553][ T8106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1334.119548][ T8106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1335.587007][T14578] syz_tun: entered allmulticast mode
[ 1336.820086][T14592] loop3: detected capacity change from 0 to 512
[ 1336.944569][T14592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1337.017729][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1337.036541][T14592] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1337.049724][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1337.059188][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1337.070636][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1337.083476][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1337.096736][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1337.172489][T14368] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1337.182773][ T9204] syz_tun (unregistering): left allmulticast mode
[ 1337.320718][T14600] lo speed is unknown, defaulting to 1000
[ 1337.386360][ T1138] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1337.543599][ T1138] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1337.645286][   T12] nci: nci_rsp_packet: unknown rsp opcode 0x821
[ 1337.657793][ T1138] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1337.761414][ T1138] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1337.912902][T14600] chnl_net:caif_netlink_parms(): no params data found
[ 1338.102875][T14600] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1338.127092][T14600] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1338.134598][T14600] bridge_slave_0: entered allmulticast mode
[ 1338.142888][T14600] bridge_slave_0: entered promiscuous mode
[ 1338.152564][T14600] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1338.160638][T14600] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1338.168331][T14600] bridge_slave_1: entered allmulticast mode
[ 1338.176080][T14600] bridge_slave_1: entered promiscuous mode
[ 1338.373877][T14600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1338.388436][T14600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1338.471897][T14600] team0: Port device team_slave_0 added
[ 1338.482681][T14600] team0: Port device team_slave_1 added
[ 1338.602831][T14600] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1338.610244][T14600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1338.682048][T14600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1339.181196][   T51] Bluetooth: hci1: command tx timeout
[ 1339.202192][T14600] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1339.228012][T14600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1339.290178][T14600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1339.467750][T14600] hsr_slave_0: entered promiscuous mode
[ 1339.475000][T14600] hsr_slave_1: entered promiscuous mode
[ 1339.496156][T14600] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1339.506531][T14600] Cannot create hsr debugfs directory
[ 1339.512272][T14641] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1340.064720][ T1138] hsr_slave_0: left promiscuous mode
[ 1340.075534][ T1138] hsr_slave_1: left promiscuous mode
[ 1340.097758][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1340.105865][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1340.119527][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1340.130944][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1340.139263][ T1138] bridge_slave_1: left allmulticast mode
[ 1340.145178][ T1138] bridge_slave_1: left promiscuous mode
[ 1340.151299][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1340.161815][ T1138] bridge_slave_0: left allmulticast mode
[ 1340.167598][ T1138] bridge_slave_0: left promiscuous mode
[ 1340.173896][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1340.212075][ T1138] veth1_macvtap: left promiscuous mode
[ 1340.226609][ T1138] veth0_macvtap: left promiscuous mode
[ 1340.232256][ T1138] veth1_vlan: left promiscuous mode
[ 1340.245165][ T1138] veth0_vlan: left promiscuous mode
[ 1340.570642][T14613] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1341.237090][   T51] Bluetooth: hci1: command tx timeout
[ 1342.331371][T14670] loop3: detected capacity change from 0 to 512
[ 1342.362558][T14670] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1342.386652][T14670] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1342.473304][T14368] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1343.106869][ T1138] team0 (unregistering): Port device team_slave_1 removed
[ 1343.202366][ T1138] team0 (unregistering): Port device team_slave_0 removed
[ 1343.291119][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1343.306857][   T51] Bluetooth: hci1: command tx timeout
[ 1343.395314][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1343.451325][T14682] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000
[ 1343.464420][T14682] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1343.494910][T14680] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2466'.
[ 1344.695870][ T1138] bond0 (unregistering): Released all slaves
[ 1345.386660][   T51] Bluetooth: hci1: command tx timeout
[ 1345.714179][T14701] overlayfs: failed to clone upperpath
[ 1346.393937][   T23] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[ 1346.610910][   T23] usb 4-1: Using ep0 maxpacket: 16
[ 1346.659724][   T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1346.684738][   T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1346.744618][   T23] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[ 1346.777592][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1346.785807][   T23] usb 4-1: Product: syz
[ 1346.811531][   T23] usb 4-1: Manufacturer: syz
[ 1346.816207][   T23] usb 4-1: SerialNumber: syz
[ 1346.931137][T14600] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1346.973859][T14600] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1347.020957][T14600] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1347.024824][ T1138] IPVS: stop unused estimator thread 0...
[ 1347.068329][T14600] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1347.202601][   T23] usb 4-1: USB disconnect, device number 22
[ 1347.279066][T14551] udevd[14551]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1347.401216][T14600] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1347.467296][T14600] 8021q: adding VLAN 0 to HW filter on device team0
[ 1347.507572][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1347.514967][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1347.555405][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1347.562690][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1349.101604][T14600] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1349.247307][T14600] veth0_vlan: entered promiscuous mode
[ 1349.294530][T14600] veth1_vlan: entered promiscuous mode
[ 1349.503671][T14600] veth0_macvtap: entered promiscuous mode
[ 1349.521554][T14600] veth1_macvtap: entered promiscuous mode
[ 1349.573923][T14600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1349.631015][T14600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1349.649253][T14600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1349.666461][T14600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1349.709672][T14600] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1349.771811][T14600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1349.799444][T14600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1349.816618][T14600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1349.828190][T14600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1349.843070][T14600] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1349.880479][T14600] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1349.889955][T14600] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1349.899250][T14600] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1349.908734][T14600] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1350.082344][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1350.110043][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1350.155496][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1350.175840][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1353.167347][T14842] loop3: detected capacity change from 0 to 4096
[ 1353.174837][T14842] EXT4-fs: Ignoring removed orlov option
[ 1353.210584][T14842] EXT4-fs: Ignoring removed nobh option
[ 1353.226531][T14842] EXT4-fs: inline encryption not supported
[ 1353.414834][ T5774] syz_tun (unregistering): left allmulticast mode
[ 1353.436877][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1353.451825][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1353.461989][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1353.482064][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1353.493943][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1353.502298][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1353.508943][T14842] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1353.550550][T14842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1354.232487][T14842] fscrypt (loop3): Error allocating 'xts(aes)' transform: -4
[ 1354.391626][T14847] lo speed is unknown, defaulting to 1000
[ 1354.437818][T14857] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[ 1354.523645][   T28] kauditd_printk_skb: 63 callbacks suppressed
[ 1354.523661][   T28] audit: type=1800 audit(1790735474.838:370): pid=14857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2507" name="bus" dev="loop3" ino=18 res=0 errno=0
[ 1354.621724][T14368] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1354.921641][T14847] chnl_net:caif_netlink_parms(): no params data found
[ 1355.648213][ T5776] Bluetooth: hci0: command tx timeout
[ 1355.804164][T14847] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1355.871853][T14847] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1355.895592][T14847] bridge_slave_0: entered allmulticast mode
[ 1356.006573][T14847] bridge_slave_0: entered promiscuous mode
[ 1356.015364][T14847] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1356.064018][T14847] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1356.095736][T14847] bridge_slave_1: entered allmulticast mode
[ 1356.727442][T14847] bridge_slave_1: entered promiscuous mode
[ 1357.035643][T14847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1357.106683][T14903] nftables ruleset with unbound set
[ 1357.706941][ T5776] Bluetooth: hci0: command tx timeout
[ 1357.718901][T14847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1357.743191][T14905] ip_tables: iptables: counters copy to user failed while replacing table
[ 1357.813715][T14847] team0: Port device team_slave_0 added
[ 1357.824783][T14847] team0: Port device team_slave_1 added
[ 1357.851771][T14905] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2522'.
[ 1357.871223][T14847] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1357.986200][T14847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1358.023326][T14847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1358.238733][ T5779] IPVS: starting estimator thread 0...
[ 1358.347490][T14910] IPVS: using max 19 ests per chain, 45600 per kthread
[ 1358.363912][T14847] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1358.396512][T14847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1358.428223][T14847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1358.463521][T14918] syz_tun: entered allmulticast mode
[ 1358.504400][T14847] hsr_slave_0: entered promiscuous mode
[ 1358.511694][T14847] hsr_slave_1: entered promiscuous mode
[ 1358.521256][T14847] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1358.537666][T14847] Cannot create hsr debugfs directory
[ 1359.743108][T14847] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1359.781198][T14847] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1359.791675][ T5776] Bluetooth: hci0: command tx timeout
[ 1360.801424][T14847] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1360.812059][T14847] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1361.876803][ T5776] Bluetooth: hci0: command tx timeout
[ 1362.220049][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1362.230911][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1362.317918][T14847] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1362.328491][T14847] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1362.519512][T14961] loop3: detected capacity change from 0 to 512
[ 1362.526184][T14847] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1362.542745][T14847] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1362.597846][T14961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1362.630835][T14961] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1362.823078][T14368] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1363.675535][T14847] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1363.794475][T14847] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1364.009107][T14847] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1364.913466][T14847] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1364.933515][T14988] loop2: detected capacity change from 0 to 512
[ 1365.135636][T14847] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1365.250771][T14847] 8021q: adding VLAN 0 to HW filter on device team0
[ 1365.276866][T14992] loop3: detected capacity change from 0 to 4096
[ 1365.303450][T14992] EXT4-fs: inline encryption not supported
[ 1365.395559][T14992] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1365.405381][T14992] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1365.414879][ T8106] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1365.422151][ T8106] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1365.448975][ T8106] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1365.456544][ T8106] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1365.628039][T14992] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[ 1365.640631][T14992] System zones: 0-5
[ 1365.858687][T14992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1370.229758][T14368] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1370.457799][T14847] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1371.094921][T14847] veth0_vlan: entered promiscuous mode
[ 1371.392297][T14847] veth1_vlan: entered promiscuous mode
[ 1371.413059][ T8030] IPVS: starting estimator thread 0...
[ 1371.516786][T15034] IPVS: using max 19 ests per chain, 45600 per kthread
[ 1371.592346][T14847] veth0_macvtap: entered promiscuous mode
[ 1371.640214][T14847] veth1_macvtap: entered promiscuous mode
[ 1371.732566][T14847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1371.775010][T14847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1371.824037][T14847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1371.865284][T14847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1371.898733][T14847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1371.930970][T14847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1372.099191][T14847] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1372.121334][T14847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1372.149740][T14847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1372.165658][T14847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1372.176655][T14847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1372.188110][T14847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1372.201777][T14847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1372.213727][T14847] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1372.254838][T14847] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1372.274120][T14847] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1372.287806][T14847] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1372.296946][T14847] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1373.706790][T11389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1373.732674][T11389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1373.808847][ T3480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1373.881064][ T3480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1377.403155][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1377.417425][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1377.426139][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1377.434233][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1377.444073][   T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1377.451802][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1377.473871][ T9126] syz_tun (unregistering): left allmulticast mode
[ 1377.510652][T15061] loop3: detected capacity change from 0 to 32768
[ 1377.530161][T15061] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2557 (15061)
[ 1377.780098][T15061] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1377.803229][T15061] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[ 1377.816492][ T8030] IPVS: starting estimator thread 0...
[ 1377.836980][T15061] BTRFS info (device loop3): disabling tree log
[ 1377.843413][T15061] BTRFS info (device loop3): using free space tree
[ 1377.891276][ T5787] syz-executor (5787) used greatest stack depth: 20520 bytes left
[ 1377.898652][T15065] lo speed is unknown, defaulting to 1000
[ 1377.916845][T15072] IPVS: using max 23 ests per chain, 55200 per kthread
[ 1379.523110][T15096] loop1: detected capacity change from 0 to 512
[ 1379.546811][   T51] Bluetooth: hci2: command tx timeout
[ 1379.637472][T15096] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[ 1379.650792][T15061] BTRFS error (device loop3): open_ctree failed: -4
[ 1379.656952][T15096] System zones: 1-12
[ 1379.689647][T15096] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.2565: missing EA_INODE flag
[ 1379.736814][T15096] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2565: error while reading EA inode 12 err=-117
[ 1379.805418][T15096] EXT4-fs (loop1): 1 orphan inode deleted
[ 1379.813025][T15096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1379.894955][T15065] chnl_net:caif_netlink_parms(): no params data found
[ 1380.270679][T15112] digital: digital_start_poll: Unknown protocol
[ 1380.884854][T15065] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1380.938924][T15065] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1380.946214][T15065] bridge_slave_0: entered allmulticast mode
[ 1381.027537][T15065] bridge_slave_0: entered promiscuous mode
[ 1381.055457][T15065] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1381.078031][T15065] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1381.085302][T15065] bridge_slave_1: entered allmulticast mode
[ 1381.134224][T15065] bridge_slave_1: entered promiscuous mode
[ 1381.255853][T15065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1381.277740][T15116] loop3: detected capacity change from 0 to 256
[ 1381.370454][T15065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1381.540364][T15065] team0: Port device team_slave_0 added
[ 1381.620104][T15065] team0: Port device team_slave_1 added
[ 1381.629624][   T51] Bluetooth: hci2: command tx timeout
[ 1381.791267][T15065] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1381.824194][T15065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1381.868673][T15065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1381.881507][T15065] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1381.896660][T15065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1382.013850][T15065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1382.089221][T14847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1382.253556][T15065] hsr_slave_0: entered promiscuous mode
[ 1382.282485][T15065] hsr_slave_1: entered promiscuous mode
[ 1382.306645][T15065] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1382.314264][T15065] Cannot create hsr debugfs directory
[ 1384.737283][   T51] Bluetooth: hci2: command tx timeout
[ 1384.874233][T15065] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1384.892954][T15136] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2576'.
[ 1385.387459][T15137] fuse: Bad value for 'fd'
[ 1386.359309][T15065] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1386.552522][T15065] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1386.752775][   T51] Bluetooth: hci2: command tx timeout
[ 1386.761952][T15065] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1387.205358][T15065] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1387.225604][T15065] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1387.258441][T15065] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1387.272468][T15065] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1387.369502][T15148] loop2: detected capacity change from 0 to 32768
[ 1387.444284][T15065] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1387.458418][T15148] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1387.466218][T15065] 8021q: adding VLAN 0 to HW filter on device team0
[ 1387.490783][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1387.497952][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1387.560917][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1387.568252][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1387.671596][T15148] XFS (loop2): Ending clean mount
[ 1389.024723][T15065] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1389.082478][T15065] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1389.144657][T14600] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1390.325882][T15065] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1391.658292][T15181] fuse: Bad value for 'fd'
[ 1392.660348][T15065] veth0_vlan: entered promiscuous mode
[ 1392.694454][T15065] veth1_vlan: entered promiscuous mode
[ 1392.775096][T15065] veth0_macvtap: entered promiscuous mode
[ 1392.798571][T15065] veth1_macvtap: entered promiscuous mode
[ 1392.838762][T15065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1392.866238][T15065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1392.886990][T15065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1392.907667][T15065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1392.926516][T15065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1392.946573][ T8107] usb 2-1: new full-speed USB device number 39 using dummy_hcd
[ 1392.955111][T15065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1392.976441][T15065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1392.997740][T15065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1393.009655][T15065] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1393.035094][T15065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1393.051466][T15065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1393.063094][T15065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1393.080768][T15065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1393.091204][T15065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1393.117068][T15065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1393.136587][T15065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1393.156845][ T8107] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1393.169186][T15065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1393.186902][ T8107] usb 2-1: config 1 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[ 1393.207967][T15065] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1393.213427][ T8107] usb 2-1: config 1 interface 0 has no altsetting 0
[ 1393.241356][ T8107] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1393.254700][T15065] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1393.268396][ T8107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1393.282614][T15065] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1393.291174][ T8107] usb 2-1: SerialNumber: syz
[ 1393.308655][ T8107] hub 2-1:1.0: bad descriptor, ignoring hub
[ 1393.314629][ T8107] hub: probe of 2-1:1.0 failed with error -5
[ 1393.317749][T15065] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1393.333809][ T8107] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[ 1393.336682][T15065] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1393.371500][ T8107] cdc_acm 2-1:1.0: This needs exactly 3 endpoints
[ 1393.398277][ T8107] cdc_acm: probe of 2-1:1.0 failed with error -22
[ 1393.596540][ T8107] usb 2-1: USB disconnect, device number 39
[ 1393.641100][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1393.664941][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1393.713590][T15005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1393.729655][T15005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1393.873805][T15196] loop0: detected capacity change from 0 to 1024
[ 1393.891021][T15196] EXT4-fs: Ignoring removed bh option
[ 1393.953627][T15196] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1393.976863][T15196] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1394.041895][T15065] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1394.155199][T15203] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[ 1394.188985][T15203] CIFS: Attempting to mount //127.0.0.1/share
[ 1394.444056][T15206] loop0: detected capacity change from 0 to 1024
[ 1394.517783][T15203] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1394.966686][T15203] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1396.095223][T15221] loop0: detected capacity change from 0 to 512
[ 1396.184845][T15231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2597'.
[ 1396.194676][T15231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2597'.
[ 1396.939199][T15221] EXT4-fs: Ignoring removed bh option
[ 1396.957098][T15221] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1397.239331][T15221] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1397.340363][T15221] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1397.465692][T15242] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2600'.
[ 1397.506696][T15242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2600'.
[ 1400.650047][T15262] fuse: Invalid rootmode
[ 1401.682038][T15065] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1403.431786][T15289] loop3: detected capacity change from 0 to 32768
[ 1403.455011][ T8030] IPVS: starting estimator thread 0...
[ 1403.583539][T15289] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2606 (15289)
[ 1403.607524][T15289] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1403.617906][T15289] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[ 1403.627383][T15289] BTRFS info (device loop3): use zlib compression, level 3
[ 1403.634630][T15289] BTRFS info (device loop3): turning on sync discard
[ 1403.641394][T15289] BTRFS info (device loop3): using free space tree
[ 1404.356922][T15292] IPVS: using max 18 ests per chain, 43200 per kthread
[ 1404.607523][T15289] BTRFS info (device loop3): enabling ssd optimizations
[ 1405.656874][T15314] fuse: Invalid rootmode
[ 1406.309378][T15322] mmap: syz.1.2616 (15322): VmData 26099712 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[ 1406.752295][T14368] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1406.970789][T15330] loop1: detected capacity change from 0 to 256
[ 1407.117643][T15330] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[ 1407.177457][T15330] FAT-fs (loop1): Filesystem has been set read-only
[ 1407.224512][T15330] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[ 1407.281520][T15330] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[ 1407.350738][T15330] syz.1.2620 (15330) used greatest stack depth: 20464 bytes left
[ 1407.359008][   T28] audit: type=1800 audit(1790735527.658:371): pid=15330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2620" name="file0" dev="loop1" ino=1048610 res=0 errno=0
[ 1407.558367][T15270] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (15270)
[ 1416.768738][T15422] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1417.148121][T15427] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2649'.
[ 1417.249431][T15428] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1420.456888][T15446] fuse: Bad value for 'rootmode'
[ 1425.897346][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1425.905605][T15451] loop1: detected capacity change from 0 to 128
[ 1426.862711][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1429.322468][T15469] tmpfs: Unknown parameter 'QOV¢òÿ'
[ 1430.127776][T15475] netlink: 'syz.2.2661': attribute type 1 has an invalid length.
[ 1430.135659][T15475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2661'.
[ 1430.366272][T15472] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-4]
[ 1430.387574][T15472] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-4]
[ 1430.421665][T15472] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-4]
[ 1430.456700][T15472] Error parsing options; rc = [-22]
[ 1430.503642][T15460] loop1: detected capacity change from 0 to 32768
[ 1430.532636][T15460] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2659 (15460)
[ 1432.397933][T15494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2666'.
[ 1432.441376][T15494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2666'.
[ 1432.585259][T15494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2666'.
[ 1432.616523][T15494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2666'.
[ 1435.132629][T15517] loop1: detected capacity change from 0 to 1024
[ 1435.681067][T15528] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ	ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value
[ 1438.653079][T15589] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2690'.
[ 1439.569779][T15597] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1439.995555][T15565] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1440.666721][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1441.674081][T15609] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2697'.
[ 1442.039496][T15616] loop0: detected capacity change from 0 to 512
[ 1442.071648][T15616] EXT4-fs: Ignoring removed bh option
[ 1442.104425][T15616] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1442.929143][T15616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1443.053083][T15616] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1444.214430][T15065] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1444.402559][T15638] loop1: detected capacity change from 0 to 32768
[ 1444.453765][T15638] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1444.511935][T15638] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1444.839565][T15638] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[ 1444.874340][ T5779] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 1444.887356][ T5779] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 1444.929089][T15642] loop0: detected capacity change from 0 to 32768
[ 1444.966827][T15642] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.2708 (15642)
[ 1444.971869][ T5779] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 84ms
[ 1445.064048][ T5779] gfs2: fsid=syz:syz.0: jid=0: Done
[ 1445.071559][T15638] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 1445.159577][T15642] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1445.216856][T15642] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[ 1445.252923][T15642] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[ 1445.296673][T15642] BTRFS info (device loop0): use zstd compression, level 3
[ 1445.304040][T15642] BTRFS info (device loop0): using free space tree
[ 1445.482133][T15642] BTRFS info (device loop0): enabling ssd optimizations
[ 1445.521912][T15642] BTRFS info (device loop0): auto enabling async discard
[ 1446.428807][   T51] Bluetooth: hci4: command 0x0406 tx timeout
[ 1446.843910][T15065] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1449.927502][T15697] loop1: detected capacity change from 0 to 512
[ 1449.969424][T15697] EXT4-fs: Ignoring removed bh option
[ 1450.066164][T15697] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1450.186773][T15697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1450.283182][T15697] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1451.828733][T14847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1458.267057][  T789] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[ 1458.480382][  T789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1458.523401][  T789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1458.562195][  T789] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[ 1458.602140][  T789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1458.624602][T15794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2736'.
[ 1458.630696][  T789] usb 1-1: config 0 descriptor??
[ 1461.226682][T15805] netlink: 'syz.3.2744': attribute type 1 has an invalid length.
[ 1461.234486][T15805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2744'.
[ 1461.522608][ T5776] Bluetooth: hci1: command 0x0406 tx timeout
[ 1461.688290][  T789] usbhid 1-1:0.0: can't add hid device: -71
[ 1461.694358][  T789] usbhid: probe of 1-1:0.0 failed with error -71
[ 1461.736496][  T789] usb 1-1: USB disconnect, device number 28
[ 1464.060963][T15839] netlink: 'syz.0.2755': attribute type 1 has an invalid length.
[ 1464.069273][T15839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2755'.
[ 1465.381610][T15843] veth0: entered promiscuous mode
[ 1465.415460][T15843] veth0: left promiscuous mode
[ 1465.444348][T15843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2757'.
[ 1465.563754][T15848] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2757'.
[ 1466.845003][T15862] loop1: detected capacity change from 0 to 512
[ 1469.391991][T15878] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.2768'.
[ 1469.401851][T15878] openvswitch: netlink: IP tunnel dst address not specified
[ 1470.333239][T15888] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2770'.
[ 1470.349925][T15888] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[ 1470.364705][T15888] openvswitch: netlink: Message has 1 unknown bytes.
[ 1470.723556][T15902] netlink: 'syz.0.2778': attribute type 10 has an invalid length.
[ 1470.764012][T15902] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1470.925490][T15907] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.2780'.
[ 1477.757037][T15679] Bluetooth: hci0: command 0x0406 tx timeout
[ 1478.852518][T15963] netlink: 'syz.3.2799': attribute type 29 has an invalid length.
[ 1478.898583][T15963] netlink: 'syz.3.2799': attribute type 29 has an invalid length.
[ 1478.937147][T15964] netlink: 'syz.3.2799': attribute type 29 has an invalid length.
[ 1478.983099][T15963] netlink: 'syz.3.2799': attribute type 29 has an invalid length.
[ 1479.016849][T15963] netlink: 'syz.3.2799': attribute type 29 has an invalid length.
[ 1479.045448][T15966] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2800'.
[ 1483.220638][T15989] netlink: set zone limit has 8 unknown bytes
[ 1483.372440][T15993] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2811'.
[ 1483.584437][T15997] netlink: 'syz.2.2813': attribute type 29 has an invalid length.
[ 1483.602987][T15995] loop1: detected capacity change from 0 to 1024
[ 1483.603729][T15997] netlink: 'syz.2.2813': attribute type 29 has an invalid length.
[ 1483.661480][T15997] netlink: 'syz.2.2813': attribute type 29 has an invalid length.
[ 1483.727168][T15999] netlink: 'syz.2.2813': attribute type 29 has an invalid length.
[ 1483.776503][T15997] netlink: 'syz.2.2813': attribute type 29 has an invalid length.
[ 1483.977645][T16001] loop1: detected capacity change from 0 to 2048
[ 1484.085526][T16001] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1485.794937][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1485.803929][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1488.791035][T16026] netlink: 'syz.3.2822': attribute type 1 has an invalid length.
[ 1488.798960][T16026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2822'.
[ 1488.920937][T16030] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2823'.
[ 1489.488618][T16040] syzkaller0: create flow: hash 3831164508 index 1
[ 1489.681842][T16045] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2821'.
[ 1489.686884][T15017] syzkaller0: tun_net_xmit 76
[ 1489.704899][T15017] syzkaller0: tun_net_xmit 48
[ 1489.710749][ T5779] syzkaller0: tun_net_xmit 76
[ 1489.726459][T16038] syzkaller0: delete flow: hash 3831164508 index 1
[ 1492.924851][T16059] netlink: 'syz.2.2832': attribute type 1 has an invalid length.
[ 1492.932860][T16059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2832'.
[ 1494.556042][T16067] futex_wake_op: syz.2.2834 tries to shift op by 32; fix this program
[ 1494.782688][T16073] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2837'.
[ 1498.258640][T16095] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2846'.
[ 1500.078325][T16106] loop1: detected capacity change from 0 to 512
[ 1500.118296][T16106] EXT4-fs: Ignoring removed bh option
[ 1500.176596][T16106] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1500.348828][T16106] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1500.537456][T16106] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1501.548567][T16129] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2856'.
[ 1502.442902][T16133] netlink: 'syz.2.2858': attribute type 1 has an invalid length.
[ 1502.450726][T16133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2858'.
[ 1502.519708][T15679] Bluetooth: hci2: command 0x0406 tx timeout
[ 1502.681776][T14847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1503.112033][T16153] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2867'.
[ 1503.889700][T16154] netlink: 'syz.3.2868': attribute type 1 has an invalid length.
[ 1503.897641][T16154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2868'.
[ 1505.169299][T16168] dccp_invalid_packet: P.Data Offset(172) too large
[ 1505.267072][T16168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2859'.
[ 1505.292292][T16166] loop0: detected capacity change from 0 to 512
[ 1505.370870][T16166] EXT4-fs: Ignoring removed bh option
[ 1505.417837][T16168] syz_tun (unregistering): left allmulticast mode
[ 1505.434534][T16166] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1505.528406][T16166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1505.575365][T16174] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2873'.
[ 1505.579007][T16166] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1507.232879][T16194] netlink: 'syz.2.2878': attribute type 1 has an invalid length.
[ 1507.240690][T16194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2878'.
[ 1507.355671][T15065] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1507.569852][T16199] loop1: detected capacity change from 0 to 128
[ 1507.694774][T16199] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[ 1509.255269][T16214] netlink: 'syz.3.2887': attribute type 1 has an invalid length.
[ 1509.263108][T16214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2887'.
[ 1509.758446][T16227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2893'.
[ 1509.774432][T16227] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2893'.
[ 1509.807419][T16227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2893'.
[ 1509.826929][T16227] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2893'.
[ 1509.916667][ T5779] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[ 1509.962722][T16232] loop1: detected capacity change from 0 to 512
[ 1509.971801][T16232] EXT4-fs: Ignoring removed oldalloc option
[ 1509.986616][T16232] EXT4-fs (loop1): orphan cleanup on readonly fs
[ 1509.995488][T16232] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[ 1510.027632][T16232] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.2894: attempt to clear invalid blocks 2 len 1
[ 1510.061071][T16232] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[ 1510.083675][T16232] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2894: invalid indirect mapped block 1819239214 (level 0)
[ 1510.099166][T16232] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2894: invalid indirect mapped block 1819239214 (level 1)
[ 1510.108500][ T5779] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[ 1510.122528][T16232] EXT4-fs (loop1): 1 truncate cleaned up
[ 1510.130970][T16232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1510.173989][ T5779] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1510.187914][T14847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1510.212343][ T5779] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[ 1510.233611][ T5779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1510.264087][ T5779] usb 1-1: Product: syz
[ 1510.274593][ T5779] usb 1-1: Manufacturer: syz
[ 1510.284551][ T5779] usb 1-1: SerialNumber: syz
[ 1510.317617][ T5779] usb 1-1: config 0 descriptor??
[ 1510.337433][T16225] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1510.352885][T16225] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1510.546023][T16237] loop1: detected capacity change from 0 to 1024
[ 1510.618224][T16225] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1510.619318][T16237] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[ 1510.656812][T16225] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1510.718063][T16237] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[ 1510.759475][T16237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1510.857201][T16237] syz.1.2896 (pid 16237) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[ 1510.889180][ T5779] Error reading MAC address
[ 1510.908919][ T5779] usb 1-1: USB disconnect, device number 29
[ 1510.996074][T14847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1511.826714][T16242] netlink: 'syz.2.2897': attribute type 1 has an invalid length.
[ 1511.834473][T16242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2897'.
[ 1512.418294][T16255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2902'.
[ 1512.432882][T16255] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2902'.
[ 1512.457377][T16255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2902'.
[ 1512.476638][T16255] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2902'.
[ 1512.642710][T16257] loop0: detected capacity change from 0 to 2048
[ 1512.749862][T16101] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1513.056492][   T28] audit: type=1326 audit(1790735633.368:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16260 comm="syz.1.2905" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb759e159 code=0x7ffc0000
[ 1513.151472][T16263] loop0: detected capacity change from 0 to 128
[ 1513.168525][T16263] UDF-fs: bad mount option "uid=ÿ" or missing value
[ 1513.709518][T16101] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1513.777461][   T28] audit: type=1326 audit(1790735633.368:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16260 comm="syz.1.2905" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb759e159 code=0x7ffc0000
[ 1513.806404][   T28] audit: type=1326 audit(1790735633.368:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16260 comm="syz.1.2905" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb759e159 code=0x7ffc0000
[ 1513.831382][   T28] audit: type=1326 audit(1790735633.368:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16260 comm="syz.1.2905" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fabb759e159 code=0x7ffc0000
[ 1513.865526][   T28] audit: type=1326 audit(1790735633.368:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16260 comm="syz.1.2905" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb759e159 code=0x7ffc0000
[ 1513.966649][   T28] audit: type=1326 audit(1790735633.368:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16260 comm="syz.1.2905" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb759e159 code=0x7ffc0000
[ 1514.100445][   T28] audit: type=1326 audit(1790735633.378:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16260 comm="syz.1.2905" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb759e159 code=0x7ffc0000
[ 1514.127920][   T28] audit: type=1326 audit(1790735633.378:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16260 comm="syz.1.2905" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fabb759e159 code=0x7ffc0000
[ 1515.293293][T16268] netlink: 'syz.1.2907': attribute type 1 has an invalid length.
[ 1515.302169][T16268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2907'.
[ 1515.336210][   T28] audit: type=1326 audit(1790735633.378:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16260 comm="syz.1.2905" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb759e159 code=0x7ffc0000
[ 1515.435027][   T28] audit: type=1326 audit(1790735633.378:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16260 comm="syz.1.2905" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb759e159 code=0x7ffc0000
[ 1516.385717][T16286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2912'.
[ 1516.396084][T16286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2912'.
[ 1516.422317][T16286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2912'.
[ 1516.451141][T16286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2912'.
[ 1516.727295][T16288] loop1: detected capacity change from 0 to 16
[ 1516.902166][T16288] erofs: (device loop1): mounted with root inode @ nid 36.
[ 1520.011097][T16303] netlink: 'syz.3.2918': attribute type 1 has an invalid length.
[ 1520.019011][T16303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2918'.
[ 1520.086680][   T28] kauditd_printk_skb: 13 callbacks suppressed
[ 1520.086695][   T28] audit: type=1326 audit(1790735640.408:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16300 comm="syz.1.2917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb759e159 code=0x7ffc0000
[ 1520.178073][   T28] audit: type=1326 audit(1790735640.438:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16300 comm="syz.1.2917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb759e159 code=0x7ffc0000
[ 1520.205440][   T28] audit: type=1326 audit(1790735640.458:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16300 comm="syz.1.2917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fabb759e159 code=0x7ffc0000
[ 1520.230486][   T28] audit: type=1326 audit(1790735640.458:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16300 comm="syz.1.2917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb759e159 code=0x7ffc0000
[ 1520.255650][   T28] audit: type=1326 audit(1790735640.458:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16300 comm="syz.1.2917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb759e159 code=0x7ffc0000
[ 1520.304814][   T28] audit: type=1326 audit(1790735640.438:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16300 comm="syz.1.2917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb759e159 code=0x7ffc0000
[ 1520.368812][   T28] audit: type=1326 audit(1790735640.498:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16300 comm="syz.1.2917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb759e159 code=0x7ffc0000
[ 1520.407689][T16307] ip_tables: iptables: counters copy to user failed while replacing table
[ 1520.456948][   T28] audit: type=1326 audit(1790735640.498:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16300 comm="syz.1.2917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb759e159 code=0x7ffc0000
[ 1520.529770][T16309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2921'.
[ 1520.539532][   T28] audit: type=1326 audit(1790735640.498:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16300 comm="syz.1.2917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb759e159 code=0x7ffc0000
[ 1520.596087][T16309] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2921'.
[ 1520.611079][   T28] audit: type=1326 audit(1790735640.498:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16300 comm="syz.1.2917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fabb759e159 code=0x7ffc0000
[ 1520.706612][T16309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2921'.
[ 1520.756462][T16309] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2921'.
[ 1520.932157][T16313] loop0: detected capacity change from 0 to 16
[ 1520.967261][T16313] erofs: (device loop0): mounted with root inode @ nid 36.
[ 1522.139897][T16331] loop0: detected capacity change from 0 to 1024
[ 1522.162947][T16331] EXT4-fs: Ignoring removed bh option
[ 1522.273190][T16331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1522.395866][T16331] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[ 1522.595058][T15065] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1522.850773][T16345] loop0: detected capacity change from 0 to 1024
[ 1522.901204][T16345] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1522.934026][T16345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1523.008759][T16345] EXT4-fs (loop0): shut down requested (1)
[ 1523.139360][T15065] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1523.486484][ T5779] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[ 1523.668783][ T5779] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1523.694011][ T5779] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32
[ 1523.716534][ T5838] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[ 1523.729385][ T5779] usb 2-1: New USB device found, idVendor=0e41, idProduct=4159, bcdDevice= 0.40
[ 1523.746289][ T5779] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1523.755902][ T5779] usb 2-1: Product: syz
[ 1523.760628][ T5779] usb 2-1: Manufacturer: syz
[ 1523.765269][ T5779] usb 2-1: SerialNumber: syz
[ 1523.779636][T16354] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1523.826025][T16370] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2939'.
[ 1523.943071][ T5838] usb 1-1: Using ep0 maxpacket: 16
[ 1523.959888][ T5838] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[ 1523.993948][ T5838] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1524.027950][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1524.061814][ T5838] usb 1-1: config 0 descriptor??
[ 1524.069922][ T5779] usb 2-1: Quirk or no altest; falling back to MIDI 1.0
[ 1524.080842][ T5838] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 1524.115269][ T5779] usb 2-1: MIDIStreaming interface descriptor not found
[ 1524.243600][ T5779] usb 2-1: USB disconnect, device number 40
[ 1524.369750][T16378] udevd[16378]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1525.638318][T16407] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2950'.
[ 1526.499697][  T789] usb 1-1: USB disconnect, device number 30
[ 1527.957369][ T5776] Bluetooth: hci2: unexpected event for opcode 0x1009
[ 1528.145574][T16461] trusted_key: encrypted_key: insufficient parameters specified
[ 1528.706290][T16466] loop0: detected capacity change from 0 to 256
[ 1528.750013][T16466] exfat: Deprecated parameter 'utf8'
[ 1528.773996][T16466] exfat: Deprecated parameter 'utf8'
[ 1528.785184][T16466] exfat: Deprecated parameter 'namecase'
[ 1528.791340][T16466] exfat: Deprecated parameter 'namecase'
[ 1528.849781][T16466] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x917246c7, utbl_chksum : 0xe619d30d)
[ 1529.415174][T16493] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1530.855980][T16496] lo: entered allmulticast mode
[ 1531.838748][T16512] loop0: detected capacity change from 0 to 512
[ 1531.853989][T16512] EXT4-fs: Ignoring removed bh option
[ 1531.861284][T16512] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1531.977836][T16512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1532.036584][T16512] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1532.169989][T16525] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1533.644168][ T5776] Bluetooth: hci1: unexpected event for opcode 0x080e
[ 1533.708446][T15065] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1534.782021][T16558] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1536.263761][T16583] loop1: detected capacity change from 0 to 1024
[ 1536.304128][T16583] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[ 1536.342777][T16583] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1536.376844][T16583] EXT4-fs (loop1): invalid journal inode
[ 1536.383117][T16583] EXT4-fs (loop1): can't get journal size
[ 1536.401739][T16583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1536.664491][T16591] netlink: 79 bytes leftover after parsing attributes in process `syz.1.3007'.
[ 1537.156767][ T5779] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[ 1537.458176][T16597] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1539.971555][ T5779] usb 2-1: device descriptor read/all, error -71
[ 1540.003394][T16603] loop0: detected capacity change from 0 to 512
[ 1540.018351][T14847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1541.166615][ T5779] usb 2-1: new full-speed USB device number 42 using dummy_hcd
[ 1541.379373][ T5779] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1541.411511][ T5779] usb 2-1: not running at top speed; connect to a high speed hub
[ 1541.441165][ T5779] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1541.476829][ T5779] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1541.516658][ T5779] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1541.544386][ T5779] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1541.674051][ T5779] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[ 1541.792078][ T5779] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1541.902049][ T5779] usb 2-1: Product: syz
[ 1541.963835][ T5779] usb 2-1: Manufacturer: syz
[ 1542.138392][ T5779] usb 2-1: Found UVC 1.00 device syz (8086:0ad2)
[ 1542.144984][ T5779] usb 2-1: No streaming interface found for terminal 2.
[ 1542.298726][ T5779] usb 2-1: USB disconnect, device number 42
[ 1544.640674][T16636] loop1: detected capacity change from 0 to 2048
[ 1544.736196][T16636] Alternate GPT is invalid, using primary GPT.
[ 1544.749063][T16636]  loop1: p2 p3 p7
[ 1544.945528][ T5143] Alternate GPT is invalid, using primary GPT.
[ 1544.954218][ T5143]  loop1: p2 p3 p7
[ 1545.071392][T16379] udevd[16379]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[ 1545.100842][T16341] udevd[16341]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[ 1545.112144][T16338] udevd[16338]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[ 1545.213194][T16341] udevd[16341]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[ 1546.013283][T16338] udevd[16338]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[ 1546.026549][T16379] udevd[16379]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[ 1546.276948][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1546.283589][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1548.479433][T16658] loop1: detected capacity change from 0 to 1024
[ 1548.511350][T16658] hfsplus: creator requires a 4 character value
[ 1548.541325][T16658] hfsplus: unable to parse mount options
[ 1549.115810][T16677] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1549.217052][T14515] usb 2-1: new full-speed USB device number 43 using dummy_hcd
[ 1549.437728][T14515] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1549.446157][T14515] usb 2-1: not running at top speed; connect to a high speed hub
[ 1549.461128][T14515] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1549.485453][T14515] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[ 1549.522960][T14515] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[ 1549.532873][T14515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1549.541963][T14515] usb 2-1: Product: syz
[ 1549.546822][T14515] usb 2-1: Manufacturer: syz
[ 1549.551555][T14515] usb 2-1: SerialNumber: syz
[ 1550.535190][T14515] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1550.827455][T14515] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[ 1550.866128][T14515] usb 2-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[ 1550.886019][T14515] usb 2-1: found format II with max.bitrate = 4, frame size=7372
[ 1550.916402][T14515] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[ 1550.927014][T14515] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[ 1550.934903][T14515] usb 2-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[ 1551.245779][T14515] usb 2-1: found format II with max.bitrate = 4, frame size=7372
[ 1551.306436][T15679] Bluetooth: hci2: command 0x0406 tx timeout
[ 1551.330793][T14515] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[ 1551.795416][T14515] usb 2-1: USB disconnect, device number 43
[ 1551.898997][T16314] udevd[16314]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1552.022705][T16705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1553.187741][T16707] loop0: detected capacity change from 0 to 512
[ 1554.499368][T16707] EXT4-fs: Ignoring removed bh option
[ 1554.605938][T16707] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1554.693478][T15679] Bluetooth: hci1: unexpected event for opcode 0x203d
[ 1554.752600][T16707] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1554.862449][T16707] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1555.214903][T15065] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1558.763850][T16753] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14600] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[16753]
[ 1561.262620][T16775] loop1: detected capacity change from 0 to 16
[ 1562.149318][T16775] erofs: (device loop1): mounted with root inode @ nid 36.
[ 1567.405684][T16816] loop0: detected capacity change from 0 to 16
[ 1567.442740][T16816] erofs: (device loop0): mounted with root inode @ nid 36.
[ 1570.341688][T16836] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14368] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[16836]
[ 1571.247292][T14515] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[ 1572.197308][T14515] usb 1-1: Using ep0 maxpacket: 32
[ 1572.204735][T14515] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[ 1572.213645][T14515] usb 1-1: config 0 has no interface number 0
[ 1572.226481][T14515] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1572.236430][T14515] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1572.244709][T14515] usb 1-1: Product: syz
[ 1572.249235][T14515] usb 1-1: Manufacturer: syz
[ 1572.253953][T14515] usb 1-1: SerialNumber: syz
[ 1572.315418][T14515] usb 1-1: config 0 descriptor??
[ 1572.325530][T14515] smsc95xx v2.0.0
[ 1572.936340][T14515] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71
[ 1572.976352][T14515] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[ 1573.011308][T14515] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[ 1573.036591][T14515] smsc95xx: probe of 1-1:0.67 failed with error -71
[ 1573.055462][T14515] usb 1-1: USB disconnect, device number 31
[ 1573.093869][T16859] loop1: detected capacity change from 0 to 1024
[ 1573.126802][T16859] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[ 1573.156960][T16859] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1573.183545][T16859] EXT4-fs (loop1): invalid journal inode
[ 1573.202404][T16859] EXT4-fs (loop1): can't get journal size
[ 1573.223824][T16859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1573.342622][T14847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1575.231997][T16877] loop1: detected capacity change from 0 to 256
[ 1575.354745][T16877] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[ 1575.395801][T16877] FAT-fs (loop1): bogus number of directory entries (1)
[ 1575.454544][T16877] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1580.486092][T16905] loop0: detected capacity change from 0 to 256
[ 1580.532011][T16905] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1580.576706][T16905] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[ 1580.657215][T16905] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1580.676127][T16905] exFAT-fs (loop0): failed to load alloc-bitmap
[ 1580.698410][T16912] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1580.715414][T16905] exFAT-fs (loop0): failed to recognize exfat type
[ 1580.781954][T16914] loop1: detected capacity change from 0 to 512
[ 1580.855343][T16914] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.3103: invalid block
[ 1582.147039][T16914] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.3103: invalid indirect mapped block 4294967295 (level 1)
[ 1582.221723][T16914] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.3103: invalid indirect mapped block 4294967295 (level 1)
[ 1582.235882][T16925] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3113'.
[ 1582.370712][T16914] EXT4-fs (loop1): 2 truncates cleaned up
[ 1582.381332][T16914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1582.622153][   T28] kauditd_printk_skb: 19 callbacks suppressed
[ 1582.622167][   T28] audit: type=1800 audit(1582.584:424): pid=16914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3103" name="file1" dev="loop1" ino=15 res=0 errno=0
[ 1582.680746][T14847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1585.941355][T16957] loop1: detected capacity change from 0 to 1024
[ 1586.110153][   T28] audit: type=1800 audit(1586.074:425): pid=16961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3125" name="file1" dev="loop1" ino=0 res=0 errno=0
[ 1586.938952][T16967] syz.3.3126 (16967) used greatest stack depth: 17448 bytes left
[ 1591.142421][T16986] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1593.794413][T17001] loop1: detected capacity change from 0 to 16
[ 1593.817395][T17001] erofs: (device loop1): mounted with root inode @ nid 36.
[ 1595.114621][T17012] loop1: detected capacity change from 0 to 1024
[ 1595.123352][T17012] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1595.185503][T17012] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1595.227300][T17012] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1595.264655][T17012] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal
[ 1596.375737][T15679] Bluetooth: hci0: unexpected cc 0x041a length: 8 > 1
[ 1596.383183][T15679] Bluetooth: hci0: unexpected event for opcode 0x041a
[ 1597.018279][T17031] loop1: detected capacity change from 0 to 1024
[ 1597.260976][T17031] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[ 1597.445196][T17031] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1598.030639][T17031] EXT4-fs (loop1): invalid journal inode
[ 1598.058891][T17031] EXT4-fs (loop1): can't get journal size
[ 1598.088719][T17031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1598.303577][T14847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1600.007307][T17053] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1600.023615][T17053] block nbd0: NBD_DISCONNECT
[ 1601.763035][T17080] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3162'.
[ 1602.144986][   T28] audit: type=1326 audit(1602.104:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17093 comm="syz.3.3168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a3d9e159 code=0x7ffc0000
[ 1602.806912][   T28] audit: type=1326 audit(1602.104:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17093 comm="syz.3.3168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a3d9e159 code=0x7ffc0000
[ 1602.852317][   T28] audit: type=1326 audit(1602.104:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17093 comm="syz.3.3168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a3d9e159 code=0x7ffc0000
[ 1602.926124][   T28] audit: type=1326 audit(1602.144:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17093 comm="syz.3.3168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a3d9e159 code=0x7ffc0000
[ 1602.977055][   T28] audit: type=1326 audit(1602.144:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17093 comm="syz.3.3168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a3d9e159 code=0x7ffc0000
[ 1603.047121][   T28] audit: type=1326 audit(1602.144:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17093 comm="syz.3.3168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc3a3d9e159 code=0x7ffc0000
[ 1603.098587][T17107] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3173'.
[ 1603.106449][   T28] audit: type=1326 audit(1602.144:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17093 comm="syz.3.3168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a3d9e159 code=0x7ffc0000
[ 1603.176418][   T28] audit: type=1326 audit(1602.144:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17093 comm="syz.3.3168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a3d9e159 code=0x7ffc0000
[ 1603.236504][   T28] audit: type=1326 audit(1602.144:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17093 comm="syz.3.3168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a3d9e159 code=0x7ffc0000
[ 1603.306423][   T28] audit: type=1326 audit(1602.144:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17093 comm="syz.3.3168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a3d9e159 code=0x7ffc0000
[ 1603.894734][T17126] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3182'.
[ 1605.457204][T17149] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3191'.
[ 1607.725068][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.732059][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1609.722576][T17181] loop0: detected capacity change from 0 to 128
[ 1609.768811][T17181] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1610.777316][T15065] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1611.796911][   T28] kauditd_printk_skb: 93 callbacks suppressed
[ 1611.796925][   T28] audit: type=1326 audit(1611.764:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17199 comm="syz.0.3208" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1611.847778][   T28] audit: type=1326 audit(1611.794:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17199 comm="syz.0.3208" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1611.936379][   T28] audit: type=1326 audit(1611.804:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17199 comm="syz.0.3208" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1612.851548][   T28] audit: type=1326 audit(1611.804:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17199 comm="syz.0.3208" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1612.891588][T17206] loop0: detected capacity change from 0 to 512
[ 1612.893282][T17208] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3202'.
[ 1612.909075][   T28] audit: type=1326 audit(1611.804:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17199 comm="syz.0.3208" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1612.954286][   T28] audit: type=1326 audit(1611.804:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17199 comm="syz.0.3208" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f9555e98e code=0x7ffc0000
[ 1613.020600][   T28] audit: type=1326 audit(1611.804:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17199 comm="syz.0.3208" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f6f9559f457 code=0x7ffc0000
[ 1613.027356][T17183] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1614.322853][   T28] audit: type=1326 audit(1611.804:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17199 comm="syz.0.3208" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1614.411211][   T28] audit: type=1326 audit(1611.804:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17199 comm="syz.0.3208" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f6f9559f457 code=0x7ffc0000
[ 1614.484172][   T28] audit: type=1326 audit(1611.804:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17199 comm="syz.0.3208" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6f9555e98e code=0x7ffc0000
[ 1614.616689][T15679] Bluetooth: hci0: unexpected event for opcode 0x0c25
[ 1615.318678][T17220] loop1: detected capacity change from 0 to 128
[ 1615.360151][T17220] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[ 1615.387940][T17223] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3214'.
[ 1615.402810][T17221] netlink: 79 bytes leftover after parsing attributes in process `syz.2.3212'.
[ 1615.428456][T17223] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3214'.
[ 1617.184915][   T28] kauditd_printk_skb: 9 callbacks suppressed
[ 1617.184933][   T28] audit: type=1800 audit(1617.134:548): pid=17227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3216" name="file1" dev="loop1" ino=94 res=0 errno=0
[ 1617.296223][   T28] audit: type=1800 audit(1617.134:549): pid=17220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3216" name="file1" dev="loop1" ino=94 res=0 errno=0
[ 1617.337637][T17238] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3221'.
[ 1617.505091][T17240] loop0: detected capacity change from 0 to 512
[ 1617.527420][T17240] FAT-fs (loop0): Unrecognized mount option "00000000000000000005" or missing value
[ 1617.702819][T17243] netlink: 79 bytes leftover after parsing attributes in process `syz.3.3225'.
[ 1617.771422][T17248] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3226'.
[ 1617.816831][T17248] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3226'.
[ 1617.834926][T17250] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3227'.
[ 1618.144513][ T5838] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[ 1618.305453][T17265] loop1: detected capacity change from 0 to 512
[ 1618.317435][T17265] EXT4-fs: Ignoring removed bh option
[ 1618.334274][T17265] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1618.337104][T17267] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3233'.
[ 1618.375393][ T5838] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1618.386598][ T5838] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1618.409770][T17265] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1618.426504][ T5838] usb 1-1: New USB device found, idVendor=0471, idProduct=0608, bcdDevice= 0.00
[ 1618.435634][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1618.669301][ T5816] usb 1-1: USB disconnect, device number 32
[ 1619.018107][T17283] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3237'.
[ 1619.028586][T17283] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3237'.
[ 1619.134281][T14847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1619.508417][T17294] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3242'.
[ 1619.637063][T17302] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3246'.
[ 1619.646884][T17302] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3246'.
[ 1620.097728][ T5776] Bluetooth: hci4: command 0x0406 tx timeout
[ 1621.010930][T17323] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3255'.
[ 1621.365924][T17328] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3257'.
[ 1621.389669][T17328] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3257'.
[ 1621.402866][T17331] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3259'.
[ 1623.431769][ T5776] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[ 1623.442616][ T5776] Bluetooth: hci0: Injecting HCI hardware error event
[ 1623.453217][ T5776] Bluetooth: hci0: hardware error 0x00
[ 1624.312969][T17347] loop0: detected capacity change from 0 to 512
[ 1624.348126][T17347] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[ 1624.383988][T17347] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1624.406556][T17347] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.3256: invalid indirect mapped block 9 (level 0)
[ 1624.428735][T17347] EXT4-fs (loop0): 1 truncate cleaned up
[ 1624.438064][T17347] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1624.483003][   T28] audit: type=1326 audit(1624.434:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17346 comm="syz.0.3256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1624.526988][   T28] audit: type=1326 audit(1624.434:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17346 comm="syz.0.3256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1624.552174][   T28] audit: type=1326 audit(1624.434:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17346 comm="syz.0.3256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1624.600977][   T28] audit: type=1326 audit(1624.434:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17346 comm="syz.0.3256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1624.687669][   T28] audit: type=1326 audit(1624.434:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17346 comm="syz.0.3256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1624.810709][   T28] audit: type=1326 audit(1624.434:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17346 comm="syz.0.3256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1624.920286][   T28] audit: type=1326 audit(1624.434:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17346 comm="syz.0.3256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1625.018660][   T28] audit: type=1326 audit(1624.434:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17346 comm="syz.0.3256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1625.069959][   T28] audit: type=1326 audit(1624.434:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17346 comm="syz.0.3256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1625.095894][T15065] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1625.105852][   T28] audit: type=1326 audit(1624.434:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17346 comm="syz.0.3256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1625.784885][ T5776] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1625.930293][T17359] __nla_validate_parse: 1 callbacks suppressed
[ 1625.930537][T17359] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3267'.
[ 1626.368775][T17366] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3268'.
[ 1626.416879][T17366] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3268'.
[ 1626.728085][    T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[ 1626.877307][T17375] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1626.939503][    T9] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1626.966527][    T9] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1627.003106][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1627.021646][    T9] usb 1-1: New USB device found, idVendor=056a, idProduct=51ab, bcdDevice= 0.00
[ 1627.046456][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1627.077961][    T9] usb 1-1: config 0 descriptor??
[ 1627.729397][T17386] loop1: detected capacity change from 0 to 128
[ 1627.774696][T17386] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[ 1627.832370][    T9] wacom 0003:056A:51AB.0001: unknown main item tag 0x0
[ 1627.851840][    T9] wacom 0003:056A:51AB.0001: unknown main item tag 0x0
[ 1627.859817][    T9] wacom 0003:056A:51AB.0001: unknown main item tag 0x0
[ 1627.876361][    T9] wacom 0003:056A:51AB.0001: unknown main item tag 0x0
[ 1627.883543][    T9] wacom 0003:056A:51AB.0001: unknown main item tag 0x0
[ 1627.897204][    T9] wacom 0003:056A:51AB.0001: unknown main item tag 0x0
[ 1627.938687][    T9] wacom 0003:056A:51AB.0001: unknown main item tag 0x0
[ 1627.945834][    T9] wacom 0003:056A:51AB.0001: unknown main item tag 0x0
[ 1627.977099][    T9] wacom 0003:056A:51AB.0001: unknown main item tag 0x0
[ 1627.984030][    T9] wacom 0003:056A:51AB.0001: unknown main item tag 0x0
[ 1628.002639][    T9] wacom 0003:056A:51AB.0001: Unknown device_type for 'HID 056a:51ab'. Ignoring.
[ 1628.036925][    T9] usb 1-1: USB disconnect, device number 33
[ 1628.311584][T17395] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3280'.
[ 1629.534802][T17408] loop0: detected capacity change from 0 to 128
[ 1629.611273][T17408] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1630.565677][T15065] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1630.903584][T17421] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1630.920039][T17421] block nbd0: NBD_DISCONNECT
[ 1631.855287][T17426] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3291'.
[ 1633.080891][T17436] loop0: detected capacity change from 0 to 736
[ 1633.193620][T17436] Bluetooth: MGMT ver 1.22
[ 1633.315535][T17441] loop1: detected capacity change from 0 to 128
[ 1633.323891][T17441] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[ 1633.380742][   T28] kauditd_printk_skb: 55 callbacks suppressed
[ 1633.380756][   T28] audit: type=1800 audit(1633.344:615): pid=17441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3295" name="bus" dev="loop1" ino=1048611 res=0 errno=0
[ 1634.781596][T17460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1634.798920][T17460] block nbd0: NBD_DISCONNECT
[ 1634.923714][   T12] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[ 1637.182546][T17483] loop0: detected capacity change from 0 to 128
[ 1637.216441][T17483] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1638.184189][T15065] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1638.555958][T17496] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1638.571992][T17496] block nbd0: NBD_DISCONNECT
[ 1639.068478][ T5776] Bluetooth: hci2: command 0x0406 tx timeout
[ 1639.425974][T17498] loop0: detected capacity change from 0 to 256
[ 1639.474449][T17498] exfat: Bad value for 'uid'
[ 1639.699731][   T28] audit: type=1326 audit(1639.654:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17503 comm="syz.0.3315" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1640.490429][   T28] audit: type=1326 audit(1639.654:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17503 comm="syz.0.3315" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1640.550420][   T28] audit: type=1326 audit(1640.494:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17503 comm="syz.0.3315" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1640.575376][   T28] audit: type=1326 audit(1640.494:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17503 comm="syz.0.3315" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1641.985304][   T28] audit: type=1326 audit(1640.494:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17503 comm="syz.0.3315" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1642.031520][   T28] audit: type=1326 audit(1640.494:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17503 comm="syz.0.3315" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1642.150565][   T28] audit: type=1326 audit(1640.494:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17503 comm="syz.0.3315" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1642.242395][   T28] audit: type=1326 audit(1640.494:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17503 comm="syz.0.3315" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1642.278689][   T28] audit: type=1326 audit(1640.504:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17503 comm="syz.0.3315" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1642.322382][   T28] audit: type=1326 audit(1640.504:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17503 comm="syz.0.3315" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1642.501797][T17523] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1643.696556][T17552] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3329'.
[ 1643.882368][T17556] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1644.021124][T17562] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3334'.
[ 1644.040652][T17562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3334'.
[ 1644.061915][T17562] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3334'.
[ 1644.267094][T17571] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3338'.
[ 1644.325300][T17575] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3339'.
[ 1644.331648][T17571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3338'.
[ 1644.604220][T17587] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1644.620504][T17587] block nbd1: NBD_DISCONNECT
[ 1645.152916][T17584] ip_tables: iptables: counters copy to user failed while replacing table
[ 1645.626557][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1647.696197][T17598] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3348'.
[ 1648.417351][ T5776] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[ 1648.431066][ T5776] Bluetooth: hci4: Injecting HCI hardware error event
[ 1648.446660][ T5776] Bluetooth: hci4: hardware error 0x00
[ 1648.776451][T17613] loop1: detected capacity change from 0 to 128
[ 1648.827187][T17613] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1649.811270][T14847] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1649.978916][T15679] Bluetooth: hci2: unexpected event for opcode 0x2012
[ 1650.101406][T17629] loop1: detected capacity change from 0 to 256
[ 1650.169777][T17629] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d)
[ 1651.096683][ T5776] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[ 1652.534936][T17646] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3359'.
[ 1652.796387][T14515] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[ 1652.997250][T17658] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1653.027863][T14515] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 1653.050191][T14515] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[ 1653.411021][T14515] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1653.422840][T14515] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1653.434123][T14515] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[ 1653.443802][T14515] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1653.643146][T17648] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1653.690733][T17648] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1653.785937][T14515] pl2303 1-1:1.0: pl2303 converter detected
[ 1653.797221][T14515] usb 1-1: pl2303 converter now attached to ttyUSB0
[ 1653.863248][   T28] kauditd_printk_skb: 32 callbacks suppressed
[ 1653.863262][   T28] audit: type=1326 audit(1653.814:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17664 comm="syz.3.3364" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a3d9e159 code=0x7ffc0000
[ 1653.908160][T17667] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1653.916174][T17667] IPv6: NLM_F_CREATE should be set when creating new route
[ 1653.924844][   T28] audit: type=1326 audit(1653.814:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17664 comm="syz.3.3364" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a3d9e159 code=0x7ffc0000
[ 1653.953234][T17667] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1653.961871][   T28] audit: type=1326 audit(1653.814:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17664 comm="syz.3.3364" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a3d9e159 code=0x7ffc0000
[ 1653.986742][   T28] audit: type=1326 audit(1653.824:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17664 comm="syz.3.3364" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc3a3d9e159 code=0x7ffc0000
[ 1654.026633][ T5776] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[ 1654.035774][ T5776] Bluetooth: hci2: Injecting HCI hardware error event
[ 1654.047373][T15679] Bluetooth: hci2: hardware error 0x00
[ 1654.115533][ T8107] usb 1-1: USB disconnect, device number 34
[ 1654.125873][T17648] pl2303 1-1:1.0: pl2303_vendor_write - failed to write [0007]: -71
[ 1654.161101][   T28] audit: type=1326 audit(1653.824:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17664 comm="syz.3.3364" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a3d9e159 code=0x7ffc0000
[ 1654.297821][T17648] pl2303 ttyUSB0: pl2303_get_line_request - failed: -19
[ 1654.389992][T17648] pl2303 ttyUSB0: pl2303_set_line_request - failed: -19
[ 1654.414049][   T28] audit: type=1326 audit(1653.824:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17664 comm="syz.3.3364" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a3d9e159 code=0x7ffc0000
[ 1654.561751][T17648] pl2303 1-1:1.0: pl2303_vendor_read - failed to read [000a]: -19
[ 1654.700169][   T28] audit: type=1326 audit(1653.824:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17664 comm="syz.3.3364" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a3d9e159 code=0x7ffc0000
[ 1654.730304][   T28] audit: type=1326 audit(1653.824:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17664 comm="syz.3.3364" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3a3d9e159 code=0x7ffc0000
[ 1654.755382][T17648] pl2303 ttyUSB0: failed to submit interrupt urb: -19
[ 1654.894404][ T8107] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[ 1654.917230][   T28] audit: type=1326 audit(1653.824:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17664 comm="syz.3.3364" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a3d9e159 code=0x7ffc0000
[ 1655.479955][ T8107] pl2303 1-1:1.0: device disconnected
[ 1655.540432][   T28] audit: type=1326 audit(1653.824:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17664 comm="syz.3.3364" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a3d9e159 code=0x7ffc0000
[ 1656.039427][T17688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1656.107730][T15679] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[ 1656.129045][T17692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3372'.
[ 1656.146611][T17692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3372'.
[ 1656.209740][T17695] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3374'.
[ 1656.235171][T17692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3372'.
[ 1656.246364][T17692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3372'.
[ 1656.397302][T17701] loop1: detected capacity change from 0 to 128
[ 1656.468258][T17701] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1658.379557][T14847] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1658.393777][T17717] netlink: 79 bytes leftover after parsing attributes in process `syz.2.3380'.
[ 1659.177210][T15679] Bluetooth: hci1: unexpected event for opcode 0x1003
[ 1659.475280][T17713] loop0: detected capacity change from 0 to 164
[ 1659.792445][T17733] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3385'.
[ 1659.865720][T17735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3379'.
[ 1661.506101][T17747] netlink: 79 bytes leftover after parsing attributes in process `syz.2.3390'.
[ 1662.862340][T17761] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[ 1662.891504][T17765] loop1: detected capacity change from 0 to 128
[ 1662.996783][T17765] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1663.880975][T17777] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3398'.
[ 1664.395552][T14847] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1664.888705][T15679] Bluetooth: hci1: adv larger than maximum supported
[ 1664.888790][T15679] Bluetooth: hci1: Malformed LE Event: 0x0d
[ 1666.189795][T17803] loop0: detected capacity change from 0 to 128
[ 1666.270529][T17806] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3409'.
[ 1666.289933][T17803] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1667.110845][ T5776] Bluetooth: hci1: command 0x0406 tx timeout
[ 1667.793857][T15065] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1668.449488][T17822] loop1: detected capacity change from 0 to 256
[ 1669.152842][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1669.159402][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1672.535888][T17854] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3421'.
[ 1673.710290][T15679] Bluetooth: hci1: command 0x0406 tx timeout
[ 1676.277206][T17904] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3433'.
[ 1679.048264][T17930] FAULT_INJECTION: forcing a failure.
[ 1679.048264][T17930] name failslab, interval 1, probability 0, space 0, times 0
[ 1679.081537][T17930] CPU: 0 PID: 17930 Comm: syz.0.3438 Not tainted syzkaller #0
[ 1679.089069][T17930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1679.099154][T17930] Call Trace:
[ 1679.102549][T17930]  <TASK>
[ 1679.105528][T17930]  dump_stack_lvl+0x18c/0x250
[ 1679.110343][T17930]  ? show_regs_print_info+0x20/0x20
[ 1679.115607][T17930]  ? load_image+0x420/0x420
[ 1679.120127][T17930]  ? __might_sleep+0xe0/0xe0
[ 1679.125014][T17930]  ? __lock_acquire+0x7d80/0x7d80
[ 1679.130051][T17930]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1679.136072][T17930]  should_fail_ex+0x394/0x4c0
[ 1679.141106][T17930]  should_failslab+0x9/0x20
[ 1679.145753][T17930]  slab_pre_alloc_hook+0x59/0x300
[ 1679.150839][T17930]  ? pcpu_alloc+0x11e7/0x1880
[ 1679.155516][T17930]  ? percpu_ref_init+0xc3/0x340
[ 1679.160469][T17930]  __kmem_cache_alloc_node+0x53/0x250
[ 1679.165855][T17930]  ? percpu_ref_init+0xc3/0x340
[ 1679.170807][T17930]  ? blk_timeout_work+0x10/0x10
[ 1679.175696][T17930]  kmalloc_trace+0x2a/0xe0
[ 1679.180205][T17930]  percpu_ref_init+0xc3/0x340
[ 1679.184874][T17930]  blk_alloc_queue+0x369/0x4c0
[ 1679.189632][T17930]  __blk_alloc_disk+0x19/0x80
[ 1679.194388][T17930]  dm_create+0x46f/0xf90
[ 1679.198677][T17930]  dev_create+0x1f8/0x400
[ 1679.203092][T17930]  ? list_devices+0x820/0x820
[ 1679.207774][T17930]  ? __might_fault+0xaa/0x120
[ 1679.212463][T17930]  ? __might_fault+0xc6/0x120
[ 1679.217156][T17930]  ? __might_fault+0xaa/0x120
[ 1679.221844][T17930]  ? list_devices+0x820/0x820
[ 1679.226516][T17930]  dm_ctl_ioctl+0x975/0xd00
[ 1679.231049][T17930]  ? list_devices+0x820/0x820
[ 1679.235959][T17930]  ? dm_poll+0x120/0x120
[ 1679.240238][T17930]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1679.245190][T17930]  ? security_file_ioctl+0x80/0xa0
[ 1679.250353][T17930]  ? dm_poll+0x120/0x120
[ 1679.254622][T17930]  __se_sys_ioctl+0xfd/0x170
[ 1679.259274][T17930]  do_syscall_64+0x55/0xb0
[ 1679.263703][T17930]  ? clear_bhb_loop+0x40/0x90
[ 1679.268480][T17930]  ? clear_bhb_loop+0x40/0x90
[ 1679.273199][T17930]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1679.279281][T17930] RIP: 0033:0x7f6f9559e159
[ 1679.283754][T17930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1679.303697][T17930] RSP: 002b:00007f6f937f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1679.312128][T17930] RAX: ffffffffffffffda RBX: 00007f6f95825fa0 RCX: 00007f6f9559e159
[ 1679.320103][T17930] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003
[ 1679.328095][T17930] RBP: 00007f6f9563506b R08: 0000000000000000 R09: 0000000000000000
[ 1679.336093][T17930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1679.344078][T17930] R13: 00007f6f95826038 R14: 00007f6f95825fa0 R15: 00007fffc3a8e6a8
[ 1679.352075][T17930]  </TASK>
[ 1683.581263][T17975] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3445'.
[ 1683.765275][T17979] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1687.600453][T18025] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1687.616903][T18025] block nbd1: NBD_DISCONNECT
[ 1688.527171][T18030] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3464'.
[ 1690.699141][T18043] loop1: detected capacity change from 0 to 32768
[ 1690.736627][T18053] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1690.771451][T18043] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1690.788321][T18043] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1690.872081][T18047] loop0: detected capacity change from 0 to 40427
[ 1690.899910][T18047] F2FS-fs (loop0): heap/no_heap options were deprecated
[ 1690.900130][T18043] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[ 1690.916466][T18047] F2FS-fs (loop0): build fault injection attr: rate: 19, type: 0x7ffff
[ 1690.935291][ T5816] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 1690.942439][ T5816] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 1691.820433][ T5816] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 877ms
[ 1691.838598][ T5816] gfs2: fsid=syz:syz.0: jid=0: Done
[ 1691.860481][T18043] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 1692.392231][T18070] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3477'.
[ 1695.207565][   T28] kauditd_printk_skb: 18 callbacks suppressed
[ 1695.207580][   T28] audit: type=1326 audit(1695.174:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18087 comm="syz.3.3485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a3d9e159 code=0x7ffc0000
[ 1696.050688][   T28] audit: type=1326 audit(1695.174:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18087 comm="syz.3.3485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a3d9e159 code=0x7ffc0000
[ 1696.131815][   T28] audit: type=1326 audit(1695.204:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18087 comm="syz.3.3485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a3d9e159 code=0x7ffc0000
[ 1696.256865][   T28] audit: type=1326 audit(1695.204:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18087 comm="syz.3.3485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a3d9e159 code=0x7ffc0000
[ 1696.288477][T18094] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3486'.
[ 1696.314212][   T28] audit: type=1326 audit(1695.974:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18087 comm="syz.3.3485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3a3d9e159 code=0x7ffc0000
[ 1696.386576][   T28] audit: type=1326 audit(1695.974:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18087 comm="syz.3.3485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a3d9e159 code=0x7ffc0000
[ 1696.447146][   T28] audit: type=1326 audit(1695.974:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18087 comm="syz.3.3485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a3d9e159 code=0x7ffc0000
[ 1696.493415][T18098] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1696.509986][T18098] block nbd1: NBD_DISCONNECT
[ 1696.693449][   T28] audit: type=1326 audit(1695.994:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18087 comm="syz.3.3485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a3d9e159 code=0x7ffc0000
[ 1696.977856][   T28] audit: type=1326 audit(1695.994:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18087 comm="syz.3.3485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a3d9e159 code=0x7ffc0000
[ 1697.261643][   T28] audit: type=1326 audit(1695.994:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18087 comm="syz.3.3485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc3a3d9e159 code=0x7ffc0000
[ 1699.917878][T18131] loop0: detected capacity change from 0 to 16
[ 1700.155134][T18131] erofs: (device loop0): mounted with root inode @ nid 36.
[ 1700.334252][T18128] x_tables: unsorted entry at hook 3
[ 1700.661725][T18135] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3499'.
[ 1701.637749][T18162] netlink: 34 bytes leftover after parsing attributes in process `syz.3.3497'.
[ 1701.907358][T18171] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3512'.
[ 1702.009853][T18175] capability: warning: `syz.0.3513' uses 32-bit capabilities (legacy support in use)
[ 1702.066509][   T28] kauditd_printk_skb: 4 callbacks suppressed
[ 1702.066525][   T28] audit: type=1326 audit(1702.024:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18172 comm="syz.2.3514" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f638199e159 code=0x7fc00000
[ 1702.113384][   T28] audit: type=1326 audit(1702.034:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18172 comm="syz.2.3514" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f638199e159 code=0x7fc00000
[ 1702.154184][   T28] audit: type=1326 audit(1702.034:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18172 comm="syz.2.3514" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f638199e159 code=0x7fc00000
[ 1702.454537][   T28] audit: type=1326 audit(1702.034:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18172 comm="syz.2.3514" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f638199e159 code=0x7fc00000
[ 1702.596578][   T28] audit: type=1326 audit(1702.034:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18172 comm="syz.2.3514" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f638199e159 code=0x7fc00000
[ 1702.777937][   T28] audit: type=1326 audit(1702.034:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18172 comm="syz.2.3514" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f638199e159 code=0x7fc00000
[ 1702.965257][   T28] audit: type=1326 audit(1702.034:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18172 comm="syz.2.3514" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f638199e159 code=0x7fc00000
[ 1703.345770][   T28] audit: type=1326 audit(1702.034:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18172 comm="syz.2.3514" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f638199e159 code=0x7fc00000
[ 1703.506874][   T28] audit: type=1326 audit(1702.034:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18172 comm="syz.2.3514" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f638199e159 code=0x7fc00000
[ 1709.188323][T18282] loop0: detected capacity change from 0 to 40427
[ 1709.251187][T18282] F2FS-fs (loop0): invalid crc value
[ 1709.316048][T18282] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 1709.821882][T18282] F2FS-fs (loop0): Start checkpoint disabled!
[ 1713.066510][T15679] Bluetooth: hci1: command 0x0406 tx timeout
[ 1713.446004][T18333] loop1: detected capacity change from 0 to 128
[ 1713.518484][T18333] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1713.825018][T18337] netlink: 79 bytes leftover after parsing attributes in process `syz.3.3574'.
[ 1714.502343][T14847] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1714.690237][T18348] netlink: 34 bytes leftover after parsing attributes in process `syz.1.3577'.
[ 1717.534083][T18366] netlink: 79 bytes leftover after parsing attributes in process `syz.0.3584'.
[ 1720.006500][T18392] netlink: 79 bytes leftover after parsing attributes in process `syz.1.3594'.
[ 1721.081515][   T28] audit: type=1326 audit(1721.044:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18406 comm="syz.0.3592" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1721.136410][   T28] audit: type=1326 audit(1721.044:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18406 comm="syz.0.3592" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1721.178723][T18409] netlink: 'syz.2.3597': attribute type 11 has an invalid length.
[ 1721.186353][   T28] audit: type=1326 audit(1721.044:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18406 comm="syz.0.3592" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1721.220887][T18409] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3597'.
[ 1721.256432][   T28] audit: type=1326 audit(1721.044:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18406 comm="syz.0.3592" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1721.316427][   T28] audit: type=1326 audit(1721.044:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18406 comm="syz.0.3592" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1721.381772][   T28] audit: type=1326 audit(1721.044:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18406 comm="syz.0.3592" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1722.289411][   T28] audit: type=1326 audit(1721.044:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18406 comm="syz.0.3592" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1722.376443][   T28] audit: type=1326 audit(1721.044:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18406 comm="syz.0.3592" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1722.403410][T18422] netlink: 79 bytes leftover after parsing attributes in process `syz.0.3603'.
[ 1722.433474][   T28] audit: type=1326 audit(1721.044:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18406 comm="syz.0.3592" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1722.496425][   T28] audit: type=1326 audit(1721.044:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18406 comm="syz.0.3592" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f6f9559e159 code=0x7ffc0000
[ 1722.538779][T18424] loop1: detected capacity change from 0 to 128
[ 1722.578095][T18424] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1723.577308][T18437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3608'.
[ 1723.604499][T14847] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1723.630341][T18437] vxlan: RTM_NEWNEIGH with invalid state 0x9
[ 1726.440549][T18441] loop0: detected capacity change from 0 to 32768
[ 1726.519801][T18441] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1726.790511][T18441] XFS (loop0): Ending clean mount
[ 1727.374762][T18441] XFS (loop0): Quotacheck needed: Please wait.
[ 1727.591625][T18441] XFS (loop0): Quotacheck: Done.
[ 1727.671045][T15065] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1727.679214][T18484] loop1: detected capacity change from 0 to 64
[ 1730.265500][T18504] program syz.1.3629 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1730.590777][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1730.597385][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1731.733935][T18506] loop1: detected capacity change from 0 to 32768
[ 1732.898505][T18506] JBD2: Ignoring recovery information on journal
[ 1732.921839][T18527] netlink: 'syz.0.3638': attribute type 2 has an invalid length.
[ 1733.054291][T18506] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[ 1733.077303][T18527] ------------[ cut here ]------------
[ 1733.083364][T18527] kernel BUG at net/phonet/socket.c:213!
[ 1733.114592][T18527] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[ 1733.120901][T18527] CPU: 0 PID: 18527 Comm: syz.0.3638 Not tainted syzkaller #0
[ 1733.128823][T18527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1733.139829][T18527] RIP: 0010:pn_socket_sendmsg+0x235/0x240
[ 1733.146463][T18527] Code: 41 5f 5d c3 e8 8c 50 cb 00 89 d9 80 e1 07 fe c1 38 c1 0f 8c 0f ff ff ff 48 89 df e8 c5 1d 1a f8 e9 02 ff ff ff e8 db 91 c1 f7 <0f> 0b 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 48 89 e5 41 57 41
[ 1733.168267][T18527] RSP: 0018:ffffc9000d3d7c20 EFLAGS: 00010283
[ 1733.175712][T18527] RAX: ffffffff89c5f975 RBX: 0000000000000000 RCX: 0000000000080000
[ 1733.183829][T18527] RDX: ffffc9000e6ee000 RSI: 0000000000000a1b RDI: 0000000000000a1c
[ 1733.191919][T18527] RBP: ffffc9000d3d7cd0 R08: ffffffff8e8c316f R09: 1ffffffff1d1862d
[ 1733.200007][T18527] R10: dffffc0000000000 R11: fffffbfff1d1862e R12: dffffc0000000000
[ 1733.208010][T18527] R13: ffff8880302ebc00 R14: ffff88805f930640 R15: 1ffff92001a7af88
[ 1733.216100][T18527] FS:  00007f6f937f66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1733.225061][T18527] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1733.231675][T18527] CR2: 0000001b33024218 CR3: 000000002e423000 CR4: 00000000003506f0
[ 1733.240069][T18527] Call Trace:
[ 1733.243817][T18527]  <TASK>
[ 1733.246787][T18527]  ? pn_socket_ioctl+0x350/0x350
[ 1733.251773][T18527]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1733.257100][T18527]  ? security_socket_sendmsg+0x80/0xa0
[ 1733.263232][T18527]  __sys_sendto+0x4a9/0x6b0
[ 1733.267961][T18527]  ? __ia32_sys_getpeername+0x90/0x90
[ 1733.273560][T18527]  ? __lock_acquire+0x7d80/0x7d80
[ 1733.278710][T18527]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1733.284817][T18527]  ? lock_chain_count+0x20/0x20
[ 1733.289791][T18527]  ? lock_chain_count+0x20/0x20
[ 1733.294768][T18527]  __x64_sys_sendto+0xde/0xf0
[ 1733.299668][T18527]  do_syscall_64+0x55/0xb0
[ 1733.304130][T18527]  ? clear_bhb_loop+0x40/0x90
[ 1733.308961][T18527]  ? clear_bhb_loop+0x40/0x90
[ 1733.313768][T18527]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1733.319882][T18527] RIP: 0033:0x7f6f9555e98e
[ 1733.324371][T18527] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1733.344058][T18527] RSP: 002b:00007f6f937f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1733.352541][T18527] RAX: ffffffffffffffda RBX: 00007f6f937f66c0 RCX: 00007f6f9555e98e
[ 1733.360551][T18527] RDX: 0000000000000020 RSI: 00007f6f937f5000 RDI: 0000000000000006
[ 1733.368547][T18527] RBP: 0000000000000000 R08: 00007f6f937f4f04 R09: 000000000000000c
[ 1733.376626][T18527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[ 1733.384624][T18527] R13: 00007f6f937f4f58 R14: 00007f6f937f5000 R15: 0000000000000000
[ 1733.392803][T18527]  </TASK>
[ 1733.395852][T18527] Modules linked in:
[ 1733.402107][T18527] ---[ end trace 0000000000000000 ]---
[ 1733.407999][T18527] RIP: 0010:pn_socket_sendmsg+0x235/0x240
[ 1733.415054][T18527] Code: 41 5f 5d c3 e8 8c 50 cb 00 89 d9 80 e1 07 fe c1 38 c1 0f 8c 0f ff ff ff 48 89 df e8 c5 1d 1a f8 e9 02 ff ff ff e8 db 91 c1 f7 <0f> 0b 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 48 89 e5 41 57 41
[ 1733.441225][T18527] RSP: 0018:ffffc9000d3d7c20 EFLAGS: 00010283
[ 1733.448499][T18527] RAX: ffffffff89c5f975 RBX: 0000000000000000 RCX: 0000000000080000
[ 1733.456934][T18527] RDX: ffffc9000e6ee000 RSI: 0000000000000a1b RDI: 0000000000000a1c
[ 1733.465281][T18527] RBP: ffffc9000d3d7cd0 R08: ffffffff8e8c316f R09: 1ffffffff1d1862d
[ 1733.473818][T18527] R10: dffffc0000000000 R11: fffffbfff1d1862e R12: dffffc0000000000
[ 1733.483908][T18527] R13: ffff8880302ebc00 R14: ffff88805f930640 R15: 1ffff92001a7af88
[ 1733.495160][T18527] FS:  00007f6f937f66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1733.518677][T18527] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1733.527099][T18527] CR2: 00007fabb53d2ff8 CR3: 000000002e423000 CR4: 00000000003506f0
[ 1733.537331][T18527] Kernel panic - not syncing: Fatal exception
[ 1733.543740][T18527] Kernel Offset: disabled
[ 1733.548072][T18527] Rebooting in 86400 seconds..