last executing test programs:

1m11.824615366s ago: executing program 1 (id=446):
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setns(0xc9, 0x0)
mkdir(&(0x7f0000000000)='./proc\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/neigh/default/app_solicit\x00', 0x2, 0x0)
write(r0, 0x0, 0x0)

1m11.541623863s ago: executing program 1 (id=449):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r0, &(0x7f0000000100)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x9, @loopback}], 0x1c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000000)=0x10)

1m11.26522995s ago: executing program 1 (id=451):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-simd\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001)
recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=""/47, 0x2f}], 0x1}}], 0x1, 0x101, 0x0)

1m11.006706437s ago: executing program 1 (id=453):
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000002a00)={[{@utf8}, {@utf8}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@dmask={'dmask', 0x3d, 0x7e6f}}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@utf8}, {@errors_continue}]}, 0x1, 0x1533, &(0x7f0000006800)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x10b)
write(r0, &(0x7f0000000000)='7', 0x1)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)

1m9.649454491s ago: executing program 1 (id=461):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
lseek(r0, 0x89c, 0x0)
lseek(r0, 0xf596, 0x0)

1m9.006829907s ago: executing program 1 (id=465):
r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='mount_timeout\x00', &(0x7f0000000180)='1\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
sync()

1m8.368351053s ago: executing program 32 (id=465):
r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='mount_timeout\x00', &(0x7f0000000180)='1\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
sync()

42.57927908s ago: executing program 5 (id=625):
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4)

42.371613376s ago: executing program 5 (id=627):
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
close(r0)

40.508864992s ago: executing program 5 (id=637):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0xa84053c42c89434b, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000110000d2328bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

40.20175333s ago: executing program 5 (id=640):
syz_mount_image$udf(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x18410, &(0x7f0000000380)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0], 0xfe, 0x4b1, &(0x7f00000003c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./lower\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./upper\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./work\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000b80)='./mnt\x00', &(0x7f0000000bc0)='overlay\x00', 0x0, &(0x7f0000000c00)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00')

39.893651198s ago: executing program 5 (id=642):
syz_io_uring_setup(0x2a13, &(0x7f0000000100)={0x0, 0xfec9, 0x800, 0x3, 0xf}, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="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", 0x1e9, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}})

39.207977475s ago: executing program 5 (id=646):
syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000892e79106d142107259c010203010902"], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x2501, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x4000, 0xa000, 0xd, 0x7a, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xa}, {0x2, 0xffff1000, 0x8, 0x5, 0x2, 0x0, 0x4, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x0, 0x0, 0x6, 0xc4, 0x2, 0x9, 0x2, 0xff, 0xc, 0xfc}, {0x1, 0xdddd1000, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0xea, 0x0, 0x89}, {0x0, 0xffff1000, 0x3, 0x0, 0xc2, 0x3, 0x4, 0x6, 0x2, 0x34}, {0xffffffff, 0x1, 0xc, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xed, 0x5, 0xf1}, {0xeeee8000, 0x60000, 0xa, 0x3, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0xfd}, {0x0, 0x8080000, 0x8, 0x0, 0xa4, 0x7, 0x3, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x9000, 0xfffe}, 0xddf8ffdb, 0x0, 0x0, 0x60, 0x8, 0xf801, 0x3000, [0x80000001, 0x0, 0x1, 0xfffffffffffffffe]})

38.574242461s ago: executing program 33 (id=646):
syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000892e79106d142107259c010203010902"], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x2501, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x4000, 0xa000, 0xd, 0x7a, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xa}, {0x2, 0xffff1000, 0x8, 0x5, 0x2, 0x0, 0x4, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x0, 0x0, 0x6, 0xc4, 0x2, 0x9, 0x2, 0xff, 0xc, 0xfc}, {0x1, 0xdddd1000, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0xea, 0x0, 0x89}, {0x0, 0xffff1000, 0x3, 0x0, 0xc2, 0x3, 0x4, 0x6, 0x2, 0x34}, {0xffffffff, 0x1, 0xc, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xed, 0x5, 0xf1}, {0xeeee8000, 0x60000, 0xa, 0x3, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0xfd}, {0x0, 0x8080000, 0x8, 0x0, 0xa4, 0x7, 0x3, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x9000, 0xfffe}, 0xddf8ffdb, 0x0, 0x0, 0x60, 0x8, 0xf801, 0x3000, [0x80000001, 0x0, 0x1, 0xfffffffffffffffe]})

7.799681894s ago: executing program 2 (id=852):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000540)=0xc3, 0x4)
recvmmsg(r0, &(0x7f0000005200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/11, 0xb}, 0x4}], 0x1, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000005c0)=0x7f, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000600)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)

7.095484282s ago: executing program 2 (id=857):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff)
mount(&(0x7f00000001c0)=@filename='./dev/sda1\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='ext4\x00', 0x8410, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x0, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000300)=0x2)

6.737965381s ago: executing program 2 (id=859):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e1c, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000500)=0xce, 0x4)
connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x14, &(0x7f00000005c0)=[{&(0x7f0000000600)=' ', 0x100120}], 0x1}, 0xd007)

6.573251625s ago: executing program 0 (id=862):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x800810, &(0x7f00000000c0)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f0000002340)="$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")
rename(&(0x7f0000007840)='./file0\x00', &(0x7f0000007880)='\xe9\x1fq\x89Y\x1e\x923aK\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000007480)='.\x00', 0x0, 0x0)
lseek(r0, 0x2, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000001f80)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6)
getdents(r0, 0x0, 0x58)

5.57168007s ago: executing program 2 (id=865):
r0 = userfaultfd(0x80001)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000571000/0x2000)=nil, 0x2000})

4.748861551s ago: executing program 0 (id=868):
openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0)

4.527638236s ago: executing program 2 (id=870):
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x50000, 0x8, 0xd, 0x3, 0xe4, 0x40, 0xfa, 0x0, 0x38, 0x1b}, {0xdddd1000, 0x70000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x3, 0x3, 0x1}, {0x2000, 0xa000, 0xe, 0x5, 0x3, 0x7, 0x6, 0x8b, 0x22, 0xab, 0x5, 0x46}, {0x30000, 0x7000, 0x3, 0x1, 0x4, 0x43, 0x9, 0xfb, 0xc0, 0x7, 0xd}, {0xa000, 0x9000, 0x10, 0x2, 0x3, 0xa, 0xab, 0x7f, 0x4a, 0x83, 0xfe, 0xe}, {0xf000, 0x26000, 0x8, 0xfa, 0xb1, 0x8, 0x1, 0xd, 0x88, 0xfb, 0x1, 0xfd}, {0x7000, 0x2, 0xf, 0xd, 0x7, 0xff, 0xb, 0x0, 0x4, 0x81, 0x1}, {0x5000, 0xa000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x1a, 0x5, 0x3, 0x7, 0x19}, {0xb000, 0x2d}, {0xf000, 0x7fff}, 0xc0040075, 0x0, 0x231d7000, 0x42224, 0xb, 0x1, 0x3000, [0x483ffffffffffffe, 0x3, 0x80000004, 0x5b3]})
r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x5281, 0x10, 0xffffffee, 0x8d})
syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160060000090509"], 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x101001)
write$P9_RRENAME(r1, &(0x7f0000000640)={0x7, 0x15, 0x2}, 0x7)
close_range(r0, 0xffffffffffffffff, 0x0)

3.842373653s ago: executing program 0 (id=873):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x800, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
getpid()
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000900)=ANY=[@ANYBLOB="0100000000000000070000000000000004000000040000008786582e"])

3.712477297s ago: executing program 4 (id=874):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r1 = accept(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)='V', 0x1}], 0x1}], 0x1, 0x0)
recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)=""/36, 0x24}], 0x1}, 0x40008000)

3.519363022s ago: executing program 4 (id=875):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff58, 0x20008005, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10)
ppoll(&(0x7f0000000100)=[{r0, 0xc22}], 0x1, 0x0, 0x0, 0x0)
recvfrom(r0, &(0x7f0000000140)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)

3.367513516s ago: executing program 0 (id=876):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e1c, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000500)=0xce, 0x4)
connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x14, &(0x7f00000005c0)=[{&(0x7f0000000600)=' ', 0x100120}], 0x1}, 0xd007)

3.119129092s ago: executing program 3 (id=877):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b19ccccf6bf531d9ec214627c11430c1", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = accept(r1, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1110, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10b4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x10a1, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0x1110}}, 0x4004004)

2.859985888s ago: executing program 3 (id=879):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c)
recvfrom$inet6(r0, 0x0, 0x50, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x8, @mcast1, 0x8}, 0x1c)
syz_emit_ethernet(0x32, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x1, 0x0, @val=0x80}}}}}}}, 0x0)

2.369323831s ago: executing program 4 (id=881):
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$tun(r0, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x8ff, 0x30}, &(0x7f0000000080)=0xc)

2.167825976s ago: executing program 4 (id=883):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000100)={0x40000, 0x0, {[0x7d, 0x8, 0x2, 0xbdf1, 0x6, 0x6, 0x0, 0x1]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.113536137s ago: executing program 0 (id=884):
syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x98, &(0x7f0000000080), 0x1, 0x10ef, &(0x7f0000000840)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII")
r0 = openat(0xffffffffffffff9c, &(0x7f0000001940)='./file0\x00', 0x103a42, 0x100)
truncate(&(0x7f0000001980)='./file0\x00', 0x2000000)
syz_mount_image$msdos(&(0x7f00000019c0), &(0x7f0000001a00)='.\x00', 0x20, &(0x7f0000001a40)=ANY=[], 0x0, 0x0, &(0x7f0000001a80))
write$FUSE_POLL(r0, &(0x7f0000001ac0)={0x18, 0x0, 0x0, {0x1}}, 0x18)
ftruncate(r0, 0xff)

1.887987812s ago: executing program 4 (id=886):
syz_mount_image$jfs(&(0x7f00000048c0), &(0x7f0000004900)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c802, &(0x7f0000004980)=ANY=[], 0x3, 0x5f74, &(0x7f00000049c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f000004c100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f000004c140)='\f', 0x1, 0x8000c61)
r1 = openat(0xffffffffffffff9c, &(0x7f000004c180)='./file1\x00', 0x101042, 0x15)
r2 = openat(0xffffffffffffff9c, &(0x7f000004e200)='./file1\x00', 0xc4042, 0x1ff)
sendfile(r2, r1, 0x0, 0xfffe82)

1.887713853s ago: executing program 3 (id=887):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r2, 0x51b0b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x40}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
sendto$packet(r0, &(0x7f0000000040)="001a338568da3602a8b76fde0f0c487040a133c3", 0x14, 0x4, &(0x7f0000000180)={0x11, 0x8100, r2, 0x1, 0xe9, 0x6, @local}, 0x14)

1.736007917s ago: executing program 6 (id=888):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000001900)="9bd5890f84099a", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)="f624086ae5", 0x5}], 0x1, &(0x7f0000000a40)=ANY=[], 0x198}}], 0x2, 0x4000000)

1.59851904s ago: executing program 6 (id=889):
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x10)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340))
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1})

1.548967211s ago: executing program 3 (id=890):
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0)={0x1, <r0=>0x0}, 0x8)
r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=r0, 0x4)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r1}, 0x8)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
read(r2, 0x0, 0x47)
read$rfkill(r2, 0x0, 0x0)

1.344982047s ago: executing program 6 (id=891):
r0 = socket$inet(0x2, 0x3, 0x9)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e1f, @loopback}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0xff, @remote}, 'ip6gretap0\x00'})
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1)

1.228000509s ago: executing program 3 (id=892):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff58, 0x20008005, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10)
ppoll(&(0x7f0000000100)=[{r0, 0xc22}], 0x1, 0x0, 0x0, 0x0)
recvfrom(r0, &(0x7f0000000140)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)

1.105985802s ago: executing program 6 (id=893):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004)

1.062731873s ago: executing program 2 (id=894):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e1c, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000500)=0xce, 0x4)
connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x14, &(0x7f00000005c0)=[{&(0x7f0000000600)=' ', 0x100120}], 0x1}, 0xd007)

861.372228ms ago: executing program 6 (id=895):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key(&(0x7f0000000d00)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r0)
r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r1)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000140)=@chain={'key_or_keyring:', r1})
keyctl$revoke(0x3, r2)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r0)

720.986492ms ago: executing program 0 (id=896):
rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8)
r0 = getpgrp(0x0)
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x2a, &(0x7f0000000180)={0xa, 0x8})
rt_tgsigqueueinfo(r0, r1, 0x2c, &(0x7f0000000100)={0x11, 0x905, 0x4})
ppoll(0x0, 0x0, &(0x7f0000002d00), &(0x7f0000002d40)={[0x100000001]}, 0x8)

689.830413ms ago: executing program 6 (id=897):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x180)
mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2002, 0xc0)
r1 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
write(r0, &(0x7f00000003c0)='7', 0x1)
keyctl$get_persistent(0x16, 0x0, r1)

29.026649ms ago: executing program 3 (id=898):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x81d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x44}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

0s ago: executing program 4 (id=899):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @dev={0xac, 0x14, 0x14, 0x42}, @rand_addr=0x64011101}, 0xc)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000006c0)={0x7, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @multicast1}}}, 0x108)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0x1)
getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91)

kernel console output (not intermixed with test programs):

t 0x81 has an invalid bInterval 0, changing to 7
[  137.196986][ T3600] usb 3-1: config 0 interface 0 has no altsetting 0
[  137.217458][ T3600] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  137.246014][ T3600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.273480][ T3600] usb 3-1: config 0 descriptor??
[  137.409982][ T5295] netlink: 16 bytes leftover after parsing attributes in process `syz.4.274'.
[  137.712134][ T3600] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0
[  137.755563][ T3600] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0
[  137.773504][ T3600] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0
[  137.793751][ T3600] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0
[  137.825926][ T3600] nzxt-smart2 0003:1E71:2009.0004: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0
[  137.949263][ T3600] nzxt-smart2 0003:1E71:2009.0004: init_device failed: -38
[  137.971511][ T3600] nzxt-smart2: probe of 0003:1E71:2009.0004 failed with error -38
[  137.996940][ T3600] usb 3-1: USB disconnect, device number 4
[  138.211069][ T5309] fido_id[5309]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  138.490880][ T5319] input: syz1 as /devices/virtual/input/input10
[  139.157685][ T5341] loop0: detected capacity change from 0 to 4096
[  139.211986][ T5341] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  139.481435][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  139.551331][   T22] libceph: connect (1)[c::]:6789 error -101
[  139.574014][   T22] libceph: mon0 (1)[c::]:6789 connect error
[  139.582369][  T955] libceph: connect (1)[c::]:6789 error -101
[  139.588436][  T955] libceph: mon0 (1)[c::]:6789 connect error
[  139.598867][   T22] libceph: connect (1)[c::]:6789 error -101
[  139.613114][   T22] libceph: mon0 (1)[c::]:6789 connect error
[  139.677242][ T5359] loop2: detected capacity change from 0 to 2048
[  139.748348][ T5359] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  139.893542][   T22] libceph: connect (1)[c::]:6789 error -101
[  139.899763][  T955] libceph: connect (1)[c::]:6789 error -101
[  139.908799][  T955] libceph: mon0 (1)[c::]:6789 connect error
[  139.915392][   T22] libceph: mon0 (1)[c::]:6789 connect error
[  139.941844][ T5371] netlink: 'syz.0.302': attribute type 1 has an invalid length.
[  139.979930][ T5371] 8021q: adding VLAN 0 to HW filter on device bond1
[  140.064621][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  140.080876][ T5371] 8021q: adding VLAN 0 to HW filter on device bond1
[  140.088010][ T5371] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  140.171694][ T5371] bond1: (slave wireguard0): Error -95 calling set_mac_address
[  140.304528][ T5355] ceph: No mds server is up or the cluster is laggy
[  140.319198][ T5352] ceph: No mds server is up or the cluster is laggy
[  140.430591][ T3600] libceph: connect (1)[c::]:6789 error -101
[  140.439331][ T3600] libceph: mon0 (1)[c::]:6789 connect error
[  140.439558][  T955] libceph: connect (1)[c::]:6789 error -101
[  140.459114][  T955] libceph: mon0 (1)[c::]:6789 connect error
[  140.825624][   T26] audit: type=1326 audit(1792505127.927:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5379 comm="syz.1.304" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf299f559 code=0x7ffc0000
[  140.884810][   T26] audit: type=1326 audit(1792505127.967:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5379 comm="syz.1.304" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf299f559 code=0x7ffc0000
[  140.949140][   T26] audit: type=1326 audit(1792505127.967:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5379 comm="syz.1.304" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf299f559 code=0x7ffc0000
[  141.009117][   T26] audit: type=1326 audit(1792505127.967:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5379 comm="syz.1.304" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf299f559 code=0x7ffc0000
[  141.047347][ T5385] loop3: detected capacity change from 0 to 512
[  141.064198][   T26] audit: type=1326 audit(1792505127.967:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5379 comm="syz.1.304" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7efcf299f559 code=0x7ffc0000
[  141.100611][   T26] audit: type=1326 audit(1792505127.967:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5379 comm="syz.1.304" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf299f559 code=0x7ffc0000
[  141.135099][   T26] audit: type=1326 audit(1792505127.967:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5379 comm="syz.1.304" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf299f559 code=0x7ffc0000
[  141.160741][ T5385] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  141.221877][   T26] audit: type=1326 audit(1792505127.977:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5379 comm="syz.1.304" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf299f559 code=0x7ffc0000
[  141.251436][ T5385] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  141.273143][ T5385] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  141.398908][   T26] audit: type=1326 audit(1792505127.977:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5379 comm="syz.1.304" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf299f559 code=0x7ffc0000
[  141.437346][ T5398] netlink: 68 bytes leftover after parsing attributes in process `syz.2.311'.
[  141.494653][   T26] audit: type=1326 audit(1792505127.977:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5379 comm="syz.1.304" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7efcf299f559 code=0x7ffc0000
[  141.575115][ T4290] EXT4-fs (loop3): unmounting filesystem.
[  141.627482][ T5400] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  141.699846][ T5400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  141.723837][ T5400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  141.793075][ T5400] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  141.851891][ T5404] netlink: 'syz.0.315': attribute type 1 has an invalid length.
[  141.889334][ T5404] netlink: 'syz.0.315': attribute type 2 has an invalid length.
[  142.086905][ T5418] capability: warning: `syz.4.321' uses deprecated v2 capabilities in a way that may be insecure
[  142.173276][ T5421] bridge0: port 3(syz_tun) entered blocking state
[  142.185673][ T5421] bridge0: port 3(syz_tun) entered disabled state
[  142.200616][ T5421] device syz_tun entered promiscuous mode
[  142.213069][ T5421] bridge0: port 3(syz_tun) entered blocking state
[  142.220172][ T5421] bridge0: port 3(syz_tun) entered forwarding state
[  142.325324][ T5422] loop0: detected capacity change from 0 to 4096
[  142.346313][ T5422] EXT4-fs: Ignoring removed mblk_io_submit option
[  142.366185][ T5422] EXT4-fs (loop0): Test dummy encryption mode enabled
[  142.407965][ T5422] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  142.473841][ T5422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'.
[  142.636312][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  142.842262][ T4344] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  143.029162][ T4344] usb 5-1: Using ep0 maxpacket: 32
[  143.036483][ T4344] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  143.073558][ T4344] usb 5-1: config 0 interface 0 has no altsetting 0
[  143.099041][ T4344] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  143.129204][ T4344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.179814][ T4344] usb 5-1: config 0 descriptor??
[  143.207468][ T5454] loop1: detected capacity change from 0 to 512
[  143.289389][ T5454] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  143.339525][ T5454] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.619260][ T4344] corsair-cpro 0003:1B1C:0C10.0005: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0
[  143.655993][ T4274] EXT4-fs (loop1): unmounting filesystem.
[  143.788451][ T5467] netlink: 20 bytes leftover after parsing attributes in process `syz.2.339'.
[  143.830405][ T5467] netlink: 20 bytes leftover after parsing attributes in process `syz.2.339'.
[  143.849096][ T4347] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  144.069374][ T4347] usb 4-1: Using ep0 maxpacket: 16
[  144.076331][ T4344] corsair-cpro: probe of 0003:1B1C:0C10.0005 failed with error -71
[  144.085988][ T4347] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  144.116139][ T5461] loop0: detected capacity change from 0 to 32768
[  144.122922][ T4344] usb 5-1: USB disconnect, device number 5
[  144.128997][ T4347] usb 4-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config
[  144.144917][ T4347] usb 4-1: config 0 has no interface number 0
[  144.163539][ T4347] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[  144.195692][ T5472] loop2: detected capacity change from 0 to 4096
[  144.249088][ T4347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.262251][ T4347] usb 4-1: Product: syz
[  144.275978][ T4347] usb 4-1: Manufacturer: syz
[  144.295141][ T4347] usb 4-1: SerialNumber: syz
[  144.319477][ T4347] usb 4-1: config 0 descriptor??
[  144.326119][ T5461] XFS (loop0): Mounting V5 Filesystem
[  144.432811][ T5461] XFS (loop0): Ending clean mount
[  144.563100][ T4347] usb 4-1: USB disconnect, device number 6
[  144.665926][ T5480] fido_id[5480]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  144.719633][ T4273] XFS (loop0): Unmounting Filesystem
[  144.900468][ T5493] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  145.430114][ T4344] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  145.620870][ T4344] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  145.640261][ T4344] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  145.676835][ T4344] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  145.706514][ T4344] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  145.733382][ T4344] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  145.787619][ T4344] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  145.812618][ T4344] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  145.825276][ T4344] usb 1-1: Product: syz
[  145.838128][ T4344] usb 1-1: Manufacturer: syz
[  145.854643][ T5519] loop4: detected capacity change from 0 to 512
[  145.864615][ T4344] cdc_wdm 1-1:1.0: skipping garbage
[  145.870433][ T4344] cdc_wdm 1-1:1.0: skipping garbage
[  145.903365][ T4344] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  145.916047][ T4344] cdc_wdm 1-1:1.0: Unknown control protocol
[  146.175663][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  146.182586][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  146.182618][ T4342] usb 1-1: USB disconnect, device number 6
[  146.188724][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  146.432836][ T5529] loop2: detected capacity change from 0 to 512
[  146.553631][ T5529] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  146.612664][ T5529] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  146.842397][   T29] EXT4-fs (sda1): Delayed block allocation failed for inode 2035 at logical offset 0 with max blocks 1 with error 117
[  146.889394][   T29] EXT4-fs (sda1): This should not happen!! Data will be lost
[  146.889394][   T29] 
[  146.902795][   T29] EXT4-fs (sda1): Delayed block allocation failed for inode 2038 at logical offset 0 with max blocks 8 with error 117
[  146.927118][   T29] EXT4-fs (sda1): This should not happen!! Data will be lost
[  146.927118][   T29] 
[  146.955051][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  147.627756][ T5567] loop0: detected capacity change from 0 to 512
[  147.644186][ T5567] EXT4-fs (loop0): Test dummy encryption mode enabled
[  147.683700][ T5567] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.370: inode has both inline data and extents flags
[  147.710708][ T5567] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.370: couldn't read orphan inode 15 (err -117)
[  147.743867][ T5567] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  147.793983][ T4352] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.829159][ T4344] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  147.945279][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  147.992665][ T4352] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.058385][ T4344] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  148.071939][ T4344] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  148.089743][ T4344] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  148.105692][ T4344] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  148.120438][ T4344] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  148.125295][ T4352] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.154160][ T4344] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  148.170875][ T4344] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  148.182993][ T4344] usb 3-1: Product: syz
[  148.192805][ T4344] usb 3-1: Manufacturer: syz
[  148.240080][ T4344] cdc_wdm 3-1:1.0: skipping garbage
[  148.253024][ T4344] cdc_wdm 3-1:1.0: skipping garbage
[  148.272712][ T4344] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  148.281417][ T4352] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.296174][ T4344] cdc_wdm 3-1:1.0: Unknown control protocol
[  148.523566][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  148.530257][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  148.536619][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  148.543275][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  148.549693][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  148.556339][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  148.562649][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  148.569303][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  148.575997][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[  148.609678][  T955] usb 3-1: USB disconnect, device number 5
[  149.049297][   T22] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  149.254699][ T4286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  149.265035][ T4286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  149.271252][   T22] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  149.284664][ T4286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  149.301238][ T4286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  149.310374][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  149.317803][ T4286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  149.369177][   T22] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  149.441273][   T22] usb 4-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00
[  149.504466][   T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.527128][   T22] usb 4-1: Product: syz
[  149.547290][   T22] usb 4-1: Manufacturer: syz
[  149.557416][   T22] usb 4-1: SerialNumber: syz
[  149.777665][ T5586] rxe_eth0 speed is unknown, defaulting to 1000
[  149.819124][   T22] kaweth 4-1:1.0: Firmware present in device.
[  150.009911][   T22] kaweth 4-1:1.0: Statistics collection: 0
[  150.015913][   T22] kaweth 4-1:1.0: Multicast filter limit: 0
[  150.041568][   T22] kaweth 4-1:1.0: MTU: 0
[  150.058781][   T22] kaweth 4-1:1.0: Read MAC address 00:00:00:00:00:00
[  150.543263][ T5586] chnl_net:caif_netlink_parms(): no params data found
[  150.693824][   T22] kaweth 4-1:1.0: kaweth interface created at eth5
[  150.827331][   T14] usb 4-1: USB disconnect, device number 7
[  151.020797][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.144047][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.178269][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.206015][ T5586] device bridge_slave_0 entered promiscuous mode
[  151.249051][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.273131][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.298064][ T5586] device bridge_slave_1 entered promiscuous mode
[  151.349415][ T4288] Bluetooth: hci3: command 0x0409 tx timeout
[  151.588537][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  151.736237][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  151.928838][ T5586] team0: Port device team_slave_0 added
[  151.974626][ T5586] team0: Port device team_slave_1 added
[  152.110163][ T4352] device hsr_slave_0 left promiscuous mode
[  152.145978][ T4352] device hsr_slave_1 left promiscuous mode
[  152.156507][ T4352] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  152.199829][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_0
[  152.256449][ T4352] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  152.276080][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_1
[  152.321855][ T4352] device bridge_slave_1 left promiscuous mode
[  152.358750][ T4352] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.401064][ T4352] device bridge_slave_0 left promiscuous mode
[  152.407372][ T4352] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.551389][ T4352] device veth1_macvtap left promiscuous mode
[  152.569123][ T4352] device veth0_macvtap left promiscuous mode
[  152.590390][ T4352] device veth1_vlan left promiscuous mode
[  152.619735][ T4352] device veth0_vlan left promiscuous mode
[  153.429168][ T4288] Bluetooth: hci3: command 0x041b tx timeout
[  154.016656][ T4378] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  154.213542][ T4378] usb 2-1: Using ep0 maxpacket: 16
[  154.224048][ T4378] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  154.247767][ T4378] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.256807][ T4378] usb 2-1: Product: syz
[  154.261478][ T4378] usb 2-1: Manufacturer: syz
[  154.266189][ T4378] usb 2-1: SerialNumber: syz
[  154.282433][ T4378] usb 2-1: config 0 descriptor??
[  154.361473][ T4352] team0 (unregistering): Port device team_slave_1 removed
[  154.420436][ T4352] team0 (unregistering): Port device team_slave_0 removed
[  154.475387][ T4352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  154.543966][ T4352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  154.712706][ T4378] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  154.738135][ T4378] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  154.769349][ T4378] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  154.777359][ T4378] usb 2-1: media controller created
[  154.842324][ T4378] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  154.913592][ T5677] dtv5100: wlen = 0, aborting.
[  154.951580][ T4378] zl10353_read_register: readreg error (reg=127, ret==0)
[  154.960963][ T5691] loop2: detected capacity change from 0 to 256
[  154.967387][ T4378] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  154.975646][ T4378] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  154.993674][ T5691] exfat: Deprecated parameter 'utf8'
[  155.041897][ T4378] usb 2-1: USB disconnect, device number 6
[  155.076560][ T4378] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  155.095914][ T5691] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  155.300437][ T4352] bond0 (unregistering): Released all slaves
[  155.450179][ T5680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.404'.
[  155.464857][ T5680] netlink: 20 bytes leftover after parsing attributes in process `syz.3.404'.
[  155.496122][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0
[  155.503746][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.530264][ T4288] Bluetooth: hci3: command 0x040f tx timeout
[  155.539315][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  155.552459][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1
[  155.559746][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.589297][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  155.704103][ T5586] device hsr_slave_0 entered promiscuous mode
[  155.720420][ T5586] device hsr_slave_1 entered promiscuous mode
[  155.727333][ T5586] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  155.760956][ T5586] Cannot create hsr debugfs directory
[  156.116114][ T5706] loop1: detected capacity change from 0 to 2048
[  156.225867][ T5706]  loop1: p4 < >
[  156.292112][ T5706] syz.1.416: attempt to access beyond end of device
[  156.292112][ T5706] loop1p4: rw=2048, sector=2, nr_sectors = 1 limit=2
[  156.344848][ T5706] hfsplus: unable to find HFS+ superblock
[  156.467216][ T4396] udevd[4396]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  156.704763][ T5720] loop1: detected capacity change from 0 to 1024
[  156.828645][ T5720] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  156.868111][ T5720] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.913905][   T26] kauditd_printk_skb: 10 callbacks suppressed
[  156.913920][   T26] audit: type=1326 audit(1792505144.017:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5725 comm="syz.0.420" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592459f559 code=0x7ffc0000
[  156.989580][ T5730] netlink: 32 bytes leftover after parsing attributes in process `syz.2.421'.
[  157.014724][ T5586] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  157.018179][ T5730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.421'.
[  157.055085][   T26] audit: type=1326 audit(1792505144.017:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5725 comm="syz.0.420" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592459f559 code=0x7ffc0000
[  157.087933][ T5730] netlink: 32 bytes leftover after parsing attributes in process `syz.2.421'.
[  157.110540][ T5586] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  157.117672][ T5730] netlink: 24 bytes leftover after parsing attributes in process `syz.2.421'.
[  157.158185][   T26] audit: type=1326 audit(1792505144.017:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5725 comm="syz.0.420" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592459f559 code=0x7ffc0000
[  157.195166][ T5586] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  157.257287][ T5586] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  157.259157][   T26] audit: type=1326 audit(1792505144.017:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5725 comm="syz.0.420" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592459f559 code=0x7ffc0000
[  157.385909][   T26] audit: type=1326 audit(1792505144.017:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5725 comm="syz.0.420" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f592459f559 code=0x7ffc0000
[  157.495354][   T26] audit: type=1326 audit(1792505144.017:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5725 comm="syz.0.420" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592459f559 code=0x7ffc0000
[  157.589098][ T4288] Bluetooth: hci3: command 0x0419 tx timeout
[  157.607015][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.624260][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  157.636783][   T26] audit: type=1326 audit(1792505144.017:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5725 comm="syz.0.420" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592459f559 code=0x7ffc0000
[  157.707566][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  157.737662][ T5586] 8021q: adding VLAN 0 to HW filter on device team0
[  157.748277][ T4274] EXT4-fs (loop1): unmounting filesystem.
[  157.758468][   T26] audit: type=1326 audit(1792505144.017:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5725 comm="syz.0.420" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592459f559 code=0x7ffc0000
[  157.791162][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  157.808463][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  157.848419][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.855675][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.887890][   T26] audit: type=1326 audit(1792505144.017:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5725 comm="syz.0.420" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592459f559 code=0x7ffc0000
[  157.943143][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  157.961161][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  157.980672][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  158.001647][   T26] audit: type=1326 audit(1792505144.017:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5725 comm="syz.0.420" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f592459f559 code=0x7ffc0000
[  158.027064][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.034281][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.043927][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  158.078050][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  158.097631][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  158.126683][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  158.170275][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  158.181558][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  158.193580][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  158.210201][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  158.229351][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  158.247495][ T5586] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  158.259211][ T4342] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  158.272254][ T5586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  158.299102][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  158.328091][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  158.375657][ T5753] rxe_eth0 speed is unknown, defaulting to 1000
[  158.463462][ T4342] usb 2-1: Using ep0 maxpacket: 32
[  158.486959][ T4342] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  158.515864][ T4342] usb 2-1: config 0 has no interface number 0
[  158.547452][ T4342] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  158.573503][ T4342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.595924][ T4342] usb 2-1: Product: syz
[  158.609488][ T4342] usb 2-1: Manufacturer: syz
[  158.628268][ T4342] usb 2-1: SerialNumber: syz
[  158.664979][ T4342] usb 2-1: config 0 descriptor??
[  158.691235][ T4342] smsc95xx v2.0.0
[  159.074430][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  159.083080][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  159.098383][ T4342] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  159.103234][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.129029][ T4342] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  159.242220][ T5776] netlink: 14 bytes leftover after parsing attributes in process `syz.3.435'.
[  159.370414][ T5780] netlink: 32 bytes leftover after parsing attributes in process `syz.0.433'.
[  159.400233][ T5780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.433'.
[  159.418346][ T5780] netlink: 32 bytes leftover after parsing attributes in process `syz.0.433'.
[  159.776316][ T4342] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  159.799526][ T4342] smsc95xx: probe of 2-1:0.67 failed with error -71
[  159.849742][ T4342] usb 2-1: USB disconnect, device number 7
[  160.368722][ T5801] loop2: detected capacity change from 0 to 1024
[  160.391499][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  160.425660][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  160.428515][ T5801] EXT4-fs: Ignoring removed bh option
[  160.512648][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  160.548291][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  160.586535][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  160.617579][ T5801] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  160.690921][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  160.701936][ T5586] device veth0_vlan entered promiscuous mode
[  160.736897][ T5586] device veth1_vlan entered promiscuous mode
[  160.787458][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  160.807514][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  160.817900][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  160.847784][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  160.885864][ T5586] device veth0_macvtap entered promiscuous mode
[  160.935805][ T5586] device veth1_macvtap entered promiscuous mode
[  161.015230][ T5790] loop3: detected capacity change from 0 to 32768
[  161.026339][ T5586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.057625][ T5586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.086953][ T5586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.116893][ T5790] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.437 (5790)
[  161.144833][ T5586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.176554][ T5586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.199624][ T5816] __nla_validate_parse: 1 callbacks suppressed
[  161.199641][ T5816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'.
[  161.227857][ T5586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.259218][ T5586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.281330][ T5790] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  161.297389][ T5816] netlink: 1148 bytes leftover after parsing attributes in process `syz.0.443'.
[  161.319247][ T5790] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  161.328056][ T5586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.328088][ T5790] BTRFS info (device loop3): setting nodatasum
[  161.370639][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0
[  161.380913][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  161.396983][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  161.398869][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  161.435921][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  161.444138][ T5790] BTRFS info (device loop3): force zlib compression, level 3
[  161.460329][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  161.472589][ T5790] BTRFS info (device loop3): turning on flush-on-commit
[  161.529068][ T5790] BTRFS info (device loop3): max_inline at 4096
[  161.537753][ T5586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.560303][ T5790] BTRFS info (device loop3): using free space tree
[  161.568028][ T5586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.604642][ T5586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.681429][ T5586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.724374][ T5586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.773712][ T5586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.843570][ T5586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.887107][ T5586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.903569][ T5790] BTRFS info (device loop3): enabling ssd optimizations
[  161.968627][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.015262][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  162.034335][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  162.081789][ T5586] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.108482][ T5586] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.154519][ T5586] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.170311][ T5586] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.378331][ T5008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.387078][ T5008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.416813][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  162.515258][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.525541][ T5865] loop1: detected capacity change from 0 to 256
[  162.540914][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.560734][ T5865] exfat: Deprecated parameter 'utf8'
[  162.571504][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  162.610133][ T5865] exfat: Deprecated parameter 'utf8'
[  162.615597][ T5865] exfat: Deprecated parameter 'namecase'
[  162.669143][ T5865] exfat: Deprecated parameter 'utf8'
[  162.695667][ T5865] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  162.780416][ T4290] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  162.883588][ T5865] FAULT_INJECTION: forcing a failure.
[  162.883588][ T5865] name failslab, interval 1, probability 0, space 0, times 0
[  162.911197][ T5865] CPU: 1 PID: 5865 Comm: syz.1.453 Not tainted syzkaller #0
[  162.918655][ T5865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  162.928761][ T5865] Call Trace:
[  162.932095][ T5865]  <TASK>
[  162.935072][ T5865]  dump_stack_lvl+0x188/0x24e
[  162.939822][ T5865]  ? show_regs_print_info+0x12/0x12
[  162.945085][ T5865]  ? load_image+0x410/0x410
[  162.949647][ T5865]  ? __might_sleep+0xd0/0xd0
[  162.954350][ T5865]  ? __lock_acquire+0x7ea0/0x7ea0
[  162.959448][ T5865]  should_fail_ex+0x390/0x4c0
[  162.964227][ T5865]  should_failslab+0x5/0x20
[  162.968790][ T5865]  slab_pre_alloc_hook+0x59/0x300
[  162.973900][ T5865]  kmem_cache_alloc_lru+0x49/0x2e0
[  162.979069][ T5865]  ? exfat_alloc_inode+0x24/0x60
[  162.984077][ T5865]  exfat_alloc_inode+0x24/0x60
[  162.988898][ T5865]  ? exfat_fill_super+0x2c60/0x2c60
[  162.994157][ T5865]  new_inode_pseudo+0x5f/0x1c0
[  162.998980][ T5865]  new_inode+0x25/0x1d0
[  163.003202][ T5865]  exfat_build_inode+0x180/0x1100
[  163.008330][ T5865]  ? __kmem_cache_free+0xb6/0x200
[  163.013424][ T5865]  ? exfat_free_dentry_set+0x23f/0x2c0
[  163.018956][ T5865]  exfat_lookup+0xcc1/0x15a0
[  163.023625][ T5865]  ? exfat_utf8_d_cmp+0x460/0x460
[  163.028704][ T5865]  ? __lock_acquire+0x142d/0x7ea0
[  163.033870][ T5865]  ? d_alloc+0x1e7/0x250
[  163.038218][ T5865]  ? do_raw_spin_unlock+0x11d/0x230
[  163.043482][ T5865]  ? _raw_spin_unlock+0x24/0x40
[  163.048417][ T5865]  ? d_alloc+0x1e7/0x250
[  163.052720][ T5865]  lookup_one_qstr_excl+0x10e/0x240
[  163.057981][ T5865]  filename_create+0x242/0x450
[  163.062820][ T5865]  ? kern_path_create+0x50/0x50
[  163.067735][ T5865]  ? __virt_addr_valid+0x188/0x540
[  163.072923][ T5865]  do_mknodat+0x176/0x4d0
[  163.077360][ T5865]  ? do_o_path+0x200/0x200
[  163.081842][ T5865]  ? getname_flags+0x206/0x500
[  163.086672][ T5865]  __x64_sys_mknodat+0xa5/0xc0
[  163.091495][ T5865]  do_syscall_64+0x4c/0xa0
[  163.096006][ T5865]  ? clear_bhb_loop+0x60/0xb0
[  163.100739][ T5865]  ? clear_bhb_loop+0x60/0xb0
[  163.105476][ T5865]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  163.111462][ T5865] RIP: 0033:0x7efcf299f559
[  163.115937][ T5865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.135602][ T5865] RSP: 002b:00007efcf38a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103
[  163.144091][ T5865] RAX: ffffffffffffffda RBX: 00007efcf2c25fa0 RCX: 00007efcf299f559
[  163.152119][ T5865] RDX: 0000000000001000 RSI: 0000200000000140 RDI: ffffffffffffff9c
[  163.160173][ T5865] RBP: 00007efcf2a36b20 R08: 0000000000000000 R09: 0000000000000000
[  163.168190][ T5865] R10: 0000000000000703 R11: 0000000000000246 R12: 0000000000000000
[  163.176214][ T5865] R13: 00007efcf2c26038 R14: 00007efcf2c25fa0 R15: 00007ffe02239dc8
[  163.184266][ T5865]  </TASK>
[  163.200248][ T5878] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  163.789067][ T3600] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  163.872739][ T5894] loop3: detected capacity change from 0 to 736
[  164.004526][ T3600] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  164.042962][ T3600] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  164.066704][ T3600] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  164.093128][ T3600] usb 3-1: config 0 interface 0 has no altsetting 0
[  164.142370][ T3600] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  164.161674][ T3600] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  164.193224][ T3600] usb 3-1: config 0 interface 0 has no altsetting 0
[  164.209508][ T3600] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  164.224915][ T3600] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  164.250963][ T3600] usb 3-1: config 0 interface 0 has no altsetting 0
[  164.283566][ T3600] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  164.313353][ T3600] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  164.361605][ T3600] usb 3-1: config 0 interface 0 has no altsetting 0
[  164.395788][ T3600] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  164.433669][ T3600] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  164.479006][ T3600] usb 3-1: config 0 interface 0 has no altsetting 0
[  164.517835][ T3600] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  164.545837][ T3600] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  164.596608][ T3600] usb 3-1: config 0 interface 0 has no altsetting 0
[  164.629154][ T3600] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  164.659152][ T4378] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  164.678210][ T3600] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  164.726138][ T3600] usb 3-1: config 0 interface 0 has no altsetting 0
[  164.748715][ T3600] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  164.777084][ T3600] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  164.809160][ T3600] usb 3-1: config 0 interface 0 has no altsetting 0
[  164.834917][ T3600] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  164.859314][ T4378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  164.876331][ T4378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.886777][ T3600] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  164.903606][ T4378] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  164.914452][ T3600] usb 3-1: Product: syz
[  164.918738][ T3600] usb 3-1: Manufacturer: syz
[  164.933714][ T4378] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.946248][ T3600] usb 3-1: SerialNumber: syz
[  164.961662][ T3600] usb 3-1: config 0 descriptor??
[  164.971556][ T4378] usb 4-1: config 0 descriptor??
[  165.000330][ T3600] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0
[  165.091649][ T5895] loop0: detected capacity change from 0 to 32768
[  165.183432][   T29] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.257248][ T5895] XFS (loop0): Mounting V5 Filesystem
[  165.346072][ T5883] usb 3-1: USB disconnect, device number 6
[  165.361115][ T5883] yurex 3-1:0.0: USB YUREX #0 now disconnected
[  165.406737][ T5895] XFS (loop0): Ending clean mount
[  165.452136][ T4378] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  165.459509][ T4378] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  165.466543][ T4378] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  165.474588][ T4378] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  165.483083][ T4378] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  165.494854][ T4378] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  165.502309][ T4378] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  165.514338][   T29] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.529700][ T4378] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0
[  165.575072][ T4273] XFS (loop0): Unmounting Filesystem
[  165.660799][ T4378] cp2112 0003:10C4:EA90.0006: Part Number: 0x00 Device Version: 0x00
[  165.767522][   T29] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.916815][   T29] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.041912][ T4286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  166.052335][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  166.061167][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  166.071613][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  166.080987][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  166.088893][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  166.171656][ T5931] rxe_eth0 speed is unknown, defaulting to 1000
[  166.264498][ T4378] cp2112 0003:10C4:EA90.0006: error reading lock byte: -71
[  166.319697][ T4378] usb 4-1: USB disconnect, device number 8
[  166.602477][ T5943] overlayfs: failed to set xattr on upper
[  166.615960][ T5943] overlayfs: ...falling back to index=off,metacopy=off.
[  166.631800][ T5008] rpcbind: server 127.0.0.1 not responding, timed out
[  166.734417][ T5940] fido_id[5940]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  167.292531][ T5931] chnl_net:caif_netlink_parms(): no params data found
[  167.344912][ T5961] loop2: detected capacity change from 0 to 2048
[  167.463529][ T5971] syz.2.474: attempt to access beyond end of device
[  167.463529][ T5971] loop5: rw=2048, sector=2, nr_sectors = 1 limit=0
[  167.560683][ T5971] hfsplus: unable to find HFS+ superblock
[  167.666222][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.716578][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.752512][ T5931] device bridge_slave_0 entered promiscuous mode
[  167.811664][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.821062][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.880035][ T5931] device bridge_slave_1 entered promiscuous mode
[  168.051908][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  168.143693][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  168.153740][ T4286] Bluetooth: hci2: command 0x0409 tx timeout
[  168.275609][ T5961]  loop2: p4 < >
[  168.373443][ T5963] loop3: detected capacity change from 0 to 131072
[  168.381035][ T5963] XFS: ikeep mount option is deprecated.
[  168.473422][ T5963] XFS (loop3): Mounting V5 Filesystem
[  168.505752][ T4379] udevd[4379]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  168.522595][ T5931] team0: Port device team_slave_0 added
[  168.532512][ T5931] team0: Port device team_slave_1 added
[  168.649784][ T5963] XFS (loop3): Starting recovery (logdev: internal)
[  168.684125][ T5963] XFS (loop3): Ending recovery (logdev: internal)
[  168.790071][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0
[  168.815949][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.929856][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  168.995343][ T4290] XFS (loop3): Unmounting Filesystem
[  169.038659][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1
[  169.059576][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.177257][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  169.432798][ T5931] device hsr_slave_0 entered promiscuous mode
[  169.443472][ T5931] device hsr_slave_1 entered promiscuous mode
[  169.461726][ T5931] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  169.475762][ T5931] Cannot create hsr debugfs directory
[  169.879987][ T6024] loop0: detected capacity change from 0 to 16
[  169.946650][ T6024] erofs: (device loop0): mounted with root inode @ nid 36.
[  170.229745][ T4286] Bluetooth: hci2: command 0x041b tx timeout
[  170.598682][   T29] device hsr_slave_0 left promiscuous mode
[  170.629343][   T29] device hsr_slave_1 left promiscuous mode
[  170.646654][   T29] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  170.649158][    T7] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  170.689395][   T29] batman_adv: batadv0: Removing interface: batadv_slave_0
[  170.739909][   T29] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  170.789225][   T29] batman_adv: batadv0: Removing interface: batadv_slave_1
[  170.800006][   T29] device bridge_slave_1 left promiscuous mode
[  170.806285][   T29] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.853393][   T29] device bridge_slave_0 left promiscuous mode
[  170.869179][    T7] usb 3-1: Using ep0 maxpacket: 32
[  170.879578][   T29] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.889929][    T7] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  170.918696][    T7] usb 3-1: config 0 has no interface number 0
[  170.933177][    T7] usb 3-1: config 0 interface 12 has no altsetting 0
[  170.966452][    T7] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  171.005043][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.037124][    T7] usb 3-1: Product: syz
[  171.052027][    T7] usb 3-1: Manufacturer: syz
[  171.062819][    T7] usb 3-1: SerialNumber: syz
[  171.078773][    T7] usb 3-1: config 0 descriptor??
[  171.110362][   T29] device veth1_macvtap left promiscuous mode
[  171.116514][   T29] device veth0_macvtap left promiscuous mode
[  171.153250][   T29] device veth1_vlan left promiscuous mode
[  171.169541][   T29] device veth0_vlan left promiscuous mode
[  171.633587][ T6039] loop4: detected capacity change from 0 to 32768
[  171.656075][ T6039] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.495 (6039)
[  171.688160][ T6039] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  171.732237][ T6039] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  171.766236][ T6039] BTRFS info (device loop4): setting nodatasum
[  171.796813][ T6039] BTRFS info (device loop4): force zlib compression, level 3
[  171.816847][ T6039] BTRFS info (device loop4): turning on flush-on-commit
[  171.837302][ T6039] BTRFS info (device loop4): max_inline at 4096
[  171.867847][ T6039] BTRFS info (device loop4): using free space tree
[  171.985942][ T6039] BTRFS info (device loop4): enabling ssd optimizations
[  172.084656][ T6065] vcan0: tx drop: invalid da for name 0x0000000000000003
[  172.309690][ T4286] Bluetooth: hci2: command 0x040f tx timeout
[  172.325093][ T5586] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  172.327326][    T7] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71
[  172.361158][    T7] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  172.373132][    T7] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  172.409095][    T7] f81534: probe of 3-1:0.12 failed with error -71
[  172.437110][    T7] usb 3-1: USB disconnect, device number 7
[  173.276617][   T29] team0 (unregistering): Port device team_slave_1 removed
[  173.354120][   T29] team0 (unregistering): Port device team_slave_0 removed
[  173.363327][ T6106] FAULT_INJECTION: forcing a failure.
[  173.363327][ T6106] name failslab, interval 1, probability 0, space 0, times 0
[  173.393849][ T6106] CPU: 0 PID: 6106 Comm: syz.0.506 Not tainted syzkaller #0
[  173.401222][ T6106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  173.411322][ T6106] Call Trace:
[  173.414640][ T6106]  <TASK>
[  173.417613][ T6106]  dump_stack_lvl+0x188/0x24e
[  173.422347][ T6106]  ? show_regs_print_info+0x12/0x12
[  173.427626][ T6106]  ? load_image+0x410/0x410
[  173.432190][ T6106]  ? __might_sleep+0xd0/0xd0
[  173.436834][ T6106]  ? __lock_acquire+0x7ea0/0x7ea0
[  173.441926][ T6106]  should_fail_ex+0x390/0x4c0
[  173.446667][ T6106]  should_failslab+0x5/0x20
[  173.451222][ T6106]  slab_pre_alloc_hook+0x59/0x300
[  173.456296][ T6106]  kmem_cache_alloc_node+0x5a/0x310
[  173.461534][ T6106]  ? __alloc_skb+0xf9/0x7d0
[  173.466090][ T6106]  __alloc_skb+0xf9/0x7d0
[  173.470459][ T6106]  tcp_stream_alloc_skb+0x3e/0x330
[  173.475620][ T6106]  tcp_connect+0x15e9/0x4a50
[  173.480245][ T6106]  ? tcp_fastopen_defer_connect+0xde/0x360
[  173.486114][ T6106]  tcp_v6_connect+0x119c/0x18f0
[  173.491017][ T6106]  ? tcp_v6_pre_connect+0xf0/0xf0
[  173.496103][ T6106]  ? do_syscall_64+0x4c/0xa0
[  173.500728][ T6106]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  173.506846][ T6106]  __inet_stream_connect+0x242/0xe10
[  173.512182][ T6106]  ? inet_dgram_connect+0x340/0x340
[  173.517427][ T6106]  tcp_sendmsg_fastopen+0x38f/0x600
[  173.522661][ T6106]  tcp_sendmsg_locked+0x356b/0x39e0
[  173.527905][ T6106]  ? __might_sleep+0xd0/0xd0
[  173.532524][ T6106]  ? __might_sleep+0xd0/0xd0
[  173.537162][ T6106]  ? mark_lock+0x94/0x320
[  173.541535][ T6106]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  173.547547][ T6106]  ? lock_chain_count+0x20/0x20
[  173.552427][ T6106]  ? tcp_sendmsg+0x1d/0x40
[  173.556883][ T6106]  ? tcp_set_state+0x520/0x520
[  173.561707][ T6106]  tcp_sendmsg+0x2b/0x40
[  173.565982][ T6106]  __sys_sendto+0x497/0x650
[  173.570513][ T6106]  ? __ia32_sys_getpeername+0x80/0x80
[  173.575933][ T6106]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  173.581949][ T6106]  ? lock_chain_count+0x20/0x20
[  173.586834][ T6106]  __x64_sys_sendto+0xda/0xf0
[  173.591544][ T6106]  do_syscall_64+0x4c/0xa0
[  173.595990][ T6106]  ? clear_bhb_loop+0x60/0xb0
[  173.600803][ T6106]  ? clear_bhb_loop+0x60/0xb0
[  173.605506][ T6106]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  173.611426][ T6106] RIP: 0033:0x7f592459f559
[  173.615891][ T6106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  173.635525][ T6106] RSP: 002b:00007f5925487028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  173.643992][ T6106] RAX: ffffffffffffffda RBX: 00007f5924825fa0 RCX: 00007f592459f559
[  173.652001][ T6106] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  173.660000][ T6106] RBP: 00007f5924636b20 R08: 0000200000000240 R09: 000000000000001c
[  173.668004][ T6106] R10: 0000000024000045 R11: 0000000000000246 R12: 0000000000000000
[  173.676008][ T6106] R13: 00007f5924826038 R14: 00007f5924825fa0 R15: 00007ffcbdd9e0e8
[  173.684040][ T6106]  </TASK>
[  173.765572][   T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  173.831509][   T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  174.256259][   T29] bond0 (unregistering): Released all slaves
[  174.347487][ T5931] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  174.398668][ T5931] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  174.400753][ T4286] Bluetooth: hci2: command 0x0419 tx timeout
[  174.507901][ T5931] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  174.543530][ T5931] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  174.832741][ T6095] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  174.840384][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.880440][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  174.895387][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  174.923228][ T5931] 8021q: adding VLAN 0 to HW filter on device team0
[  174.952343][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  174.967118][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  174.976325][ T5008] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.983544][ T5008] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.029031][ T6095] usb 3-1: Using ep0 maxpacket: 32
[  175.037439][ T6095] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.049633][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  175.064954][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  175.092122][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  175.100667][ T6095] usb 3-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00
[  175.121581][ T5008] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.128786][ T5008] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.137262][ T6095] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.168430][ T6095] usb 3-1: config 0 descriptor??
[  175.179960][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  175.201120][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  175.218537][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  175.238470][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  175.263819][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  175.290374][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  175.320835][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  175.336876][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  175.370031][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  175.400014][ T6095] usb 3-1: string descriptor 0 read error: -71
[  175.407283][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  175.430925][ T6095] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input11
[  175.440247][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  175.462612][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  175.496660][ T3624] bcm5974 3-1:0.0: could not read from device
[  175.529243][ T3624] bcm5974 3-1:0.0: could not read from device
[  175.539130][ T6095] usb 3-1: USB disconnect, device number 9
[  175.684866][ T6146] loop0: detected capacity change from 0 to 128
[  175.733656][ T6146] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  175.870134][ T6146] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  175.890766][ T6146] ext2 filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  175.952547][ T6146] EXT4-fs error (device loop0): dx_make_map:1328: inode #2: block 63: comm syz.0.519: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[  175.975567][ T6146] EXT4-fs error (device loop0) in do_split:2097: Corrupt filesystem
[  176.166771][ T6160] loop4: detected capacity change from 0 to 1024
[  176.195633][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  176.364079][ T6168] device geneve1 entered promiscuous mode
[  176.405941][ T6160] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  176.497885][ T6160] hfsplus: xattr searching failed
[  176.524023][ T6173] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  176.536033][ T6173] hfsplus: xattr search failed
[  176.640075][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  176.670370][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  176.720908][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.838281][ T5008] hfsplus: b-tree write err: -5, ino 25
[  176.859535][ T5008] hfsplus: b-tree write err: -5, ino 4
[  176.865899][ T5008] hfsplus: b-tree write err: -5, ino 2
[  176.899113][ T5008] hfsplus: b-tree write err: -5, ino 28
[  177.309112][ T6091] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  177.407847][   T29] EXT4-fs (sda1): Delayed block allocation failed for inode 2035 at logical offset 0 with max blocks 1 with error 117
[  177.462537][   T29] EXT4-fs (sda1): This should not happen!! Data will be lost
[  177.462537][   T29] 
[  177.495051][   T29] EXT4-fs (sda1): Delayed block allocation failed for inode 2038 at logical offset 0 with max blocks 6 with error 117
[  177.519209][ T6091] usb 5-1: Using ep0 maxpacket: 16
[  177.528844][ T6091] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.538463][   T29] EXT4-fs (sda1): This should not happen!! Data will be lost
[  177.538463][   T29] 
[  177.579042][ T6091] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  177.612652][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.535'.
[  177.621817][ T6091] usb 5-1: config 0 interface 0 has no altsetting 0
[  177.628531][ T6091] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[  177.679325][ T6091] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.709664][ T6091] usb 5-1: config 0 descriptor??
[  178.017696][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  178.046499][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  178.116622][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  178.156479][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  178.175519][ T6091] logitech-djreceiver 0003:046D:C53A.0007: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.4-1/input0
[  178.211517][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  178.225792][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  178.252277][ T5931] device veth0_vlan entered promiscuous mode
[  178.302013][ T5931] device veth1_vlan entered promiscuous mode
[  178.385693][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  178.433362][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  178.450210][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  178.470537][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  178.494831][ T5931] device veth0_macvtap entered promiscuous mode
[  178.528610][ T5931] device veth1_macvtap entered promiscuous mode
[  178.609998][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.659004][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.690856][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.715068][ T5879] usb 5-1: USB disconnect, device number 6
[  178.748815][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.779898][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.818026][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.850693][ T6211] loop3: detected capacity change from 0 to 32768
[  178.863365][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.884623][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.896907][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0
[  178.909678][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  178.922373][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  178.955673][ T6211] XFS (loop3): Mounting V5 Filesystem
[  178.961289][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  178.971187][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  178.990994][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.016329][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.030577][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.075513][ T6211] XFS (loop3): Ending clean mount
[  179.083951][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.129044][ T6089] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  179.138984][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.169023][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.178914][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.206497][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.221875][ T4290] XFS (loop3): Unmounting Filesystem
[  179.247972][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.292658][ T5931] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.325957][ T6089] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  179.330414][ T5931] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.362828][ T6089] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  179.389096][ T5931] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.397872][ T5931] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.403117][ T6089] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  179.451431][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  179.469035][ T6089] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.491695][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  179.519839][ T6233] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  179.848805][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.888654][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.937464][ T6250] loop4: detected capacity change from 0 to 512
[  180.071244][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  180.127439][ T6250] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  180.155790][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.169126][ T6250] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  180.210272][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.236036][ T6093] usb 3-1: USB disconnect, device number 10
[  180.286959][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  180.426975][ T6256] loop0: detected capacity change from 0 to 4096
[  180.526413][ T6256] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  180.602951][ T5586] EXT4-fs (loop4): unmounting filesystem.
[  180.608889][ T6256] ntfs3: loop0: Failed to load $Extend.
[  180.809246][ T6095] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  180.920191][ T4273] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  180.987768][ T6272] binder: 6271:6272 ioctl 4018620d 0 returned -22
[  180.999310][ T6095] usb 4-1: Using ep0 maxpacket: 8
[  181.006367][ T6095] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  181.027695][ T4286] Bluetooth: hci0: Malformed LE Event: 0x1d
[  181.030037][ T6095] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  181.049164][ T6089] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  181.109307][ T6095] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.145478][ T6095] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  181.173565][ T6095] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.229989][ T6095] hub 4-1:1.0: bad descriptor, ignoring hub
[  181.248904][ T6093] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  181.252286][ T6089] usb 5-1: config 1 has an invalid interface number: 170 but max is 0
[  181.280196][ T6089] usb 5-1: config 1 has no interface number 0
[  181.286451][ T6089] usb 5-1: config 1 interface 170 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  181.297055][ T6095] hub: probe of 4-1:1.0 failed with error -5
[  181.319097][ T6093] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  181.331092][ T6095] cdc_wdm 4-1:1.0: skipping garbage
[  181.336361][ T6095] cdc_wdm 4-1:1.0: skipping garbage
[  181.352350][ T6089] usb 5-1: New USB device found, idVendor=06f8, idProduct=0001, bcdDevice=c7.cd
[  181.383885][ T6095] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  181.399295][ T6089] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.407552][ T6095] cdc_wdm 4-1:1.0: Unknown control protocol
[  181.664829][ T6089] usb 5-1: USB disconnect, device number 7
[  181.703863][ T6289] loop2: detected capacity change from 0 to 256
[  181.738628][ T6289] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  181.740658][ T6093] usb 4-1: USB disconnect, device number 9
[  181.935569][   T26] kauditd_printk_skb: 182 callbacks suppressed
[  181.935585][   T26] audit: type=1800 audit(1792505169.037:220): pid=6293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.555" name="alua_access_type" dev="configfs" ino=42141 res=0 errno=0
[  182.641485][    T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  182.881488][    T7] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  182.917584][    T7] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  182.974774][    T7] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  183.016951][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.071704][ T6313] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  183.606253][ T4339] usb 5-1: USB disconnect, device number 8
[  183.719308][ T5879] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  183.942218][ T5879] usb 1-1: Using ep0 maxpacket: 8
[  183.953625][ T5879] usb 1-1: config 0 has no interfaces?
[  183.971533][ T5879] usb 1-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[  184.005902][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.024275][ T5879] usb 1-1: Product: syz
[  184.038682][ T5879] usb 1-1: Manufacturer: syz
[  184.049015][ T5879] usb 1-1: SerialNumber: syz
[  184.089452][ T5879] usb 1-1: config 0 descriptor??
[  184.370717][ T4339] usb 1-1: USB disconnect, device number 7
[  184.590613][ T6358] rxe_eth0 speed is unknown, defaulting to 1000
[  185.139442][ T6374] loop5: detected capacity change from 0 to 4096
[  185.468974][ T6384] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  186.391248][ T6387] loop0: detected capacity change from 0 to 32768
[  186.397801][ T6410] "syz.5.584" (6410) uses obsolete ecb(arc4) skcipher
[  186.472250][ T6387] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.579 (6387)
[  186.541050][ T6387] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  186.603356][ T6387] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  186.642942][ T6387] BTRFS info (device loop0): using free space tree
[  186.733227][ T6420] loop5: detected capacity change from 0 to 128
[  186.777424][ T6420] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  186.911493][ T6420] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  186.949348][ T6420] ext2 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  187.153552][ T6387] BTRFS info (device loop0): enabling ssd optimizations
[  187.300774][ T6420] EXT4-fs error (device loop5): dx_make_map:1328: inode #2: block 63: comm syz.5.587: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[  187.362917][ T4273] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  187.385545][ T6420] EXT4-fs error (device loop5) in do_split:2097: Corrupt filesystem
[  187.522818][ T6457] loop4: detected capacity change from 0 to 128
[  187.552008][ T6457] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  187.657451][ T6457] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  188.057518][   T46] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  188.071100][ T5931] EXT4-fs (loop5): unmounting filesystem.
[  189.275643][ T6511] loop0: detected capacity change from 0 to 512
[  189.310452][ T6511] EXT4-fs: Ignoring removed mblk_io_submit option
[  189.449174][ T6511] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.610: corrupted in-inode xattr
[  189.539678][ T6511] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.610: couldn't read orphan inode 15 (err -117)
[  189.574884][ T6481] loop3: detected capacity change from 0 to 40427
[  189.586152][ T6511] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  189.611126][ T6481] F2FS-fs (loop3): invalid crc value
[  189.657872][ T6481] F2FS-fs (loop3): Found nat_bits in checkpoint
[  189.701282][ T6511] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #2: block 12: comm syz.0.610: lblock 3 mapped to illegal pblock 12 (length 1)
[  189.842688][ T6481] F2FS-fs (loop3): Start checkpoint disabled!
[  189.917651][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  189.927516][ T6481] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  190.078010][ T6481] process 'syz.3.600' launched './file0' with NULL argv: empty string added
[  190.117112][ T6481] Invalid argument reading file caps for ./file0
[  190.353312][   T11] kworker/u4:1: attempt to access beyond end of device
[  190.353312][   T11] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  191.399217][ T5883] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  191.581015][ T5883] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  191.604032][ T5883] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  191.624478][ T5883] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  191.644709][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.673634][ T6569] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  191.875896][ T6583] loop0: detected capacity change from 0 to 1024
[  191.922633][ T6581] loop3: detected capacity change from 0 to 4096
[  191.942483][ T6583] EXT4-fs: Ignoring removed bh option
[  192.071898][ T6583] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  192.157109][ T6587] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  192.303850][ T6093] usb 6-1: USB disconnect, device number 2
[  192.987825][ T6604] netlink: 'syz.5.637': attribute type 25 has an invalid length.
[  193.006968][ T6604] netlink: 4 bytes leftover after parsing attributes in process `syz.5.637'.
[  193.045217][ T6604] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  193.055209][ T6604] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  193.064220][ T6604] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  193.073010][ T6604] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  193.091295][ T6604] netlink: 'syz.5.637': attribute type 25 has an invalid length.
[  193.105586][ T6604] netlink: 4 bytes leftover after parsing attributes in process `syz.5.637'.
[  193.124460][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  193.269208][ T6611] loop5: detected capacity change from 0 to 128
[  193.293656][ T6611] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  193.310165][ T4346] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  193.387908][ T6611] overlayfs: upper fs needs to support d_type.
[  193.419416][ T6611] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  193.426858][ T6611] overlayfs: failed to set xattr on upper
[  193.439805][ T6611] overlayfs: ...falling back to index=off,metacopy=off.
[  193.451288][ T6611] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  193.523209][ T4346] usb 3-1: unable to get BOS descriptor or descriptor too short
[  193.547267][ T4346] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  193.565654][ T4346] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  193.580473][ T4346] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  193.596462][ T5931] UDF-fs: error (device loop5): udf_read_inode: (ino 114) failed !bh
[  193.608647][ T4346] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  193.626533][ T5931] UDF-fs: error (device loop5): udf_read_inode: (ino 114) failed !bh
[  193.639155][ T4346] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  193.675975][ T4346] usb 3-1: config 1 interface 1 has no altsetting 0
[  193.701846][ T4346] usb 3-1: string descriptor 0 read error: -22
[  193.711320][ T4346] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  193.721596][ T4346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.950327][ T6621] loop0: detected capacity change from 0 to 1024
[  193.957814][ T6621] EXT4-fs: Ignoring removed oldalloc option
[  193.987067][ T6621] EXT4-fs: Ignoring removed orlov option
[  194.035800][ T6621] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  194.049148][ T6089] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  194.163471][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  194.169941][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  194.241099][ T6089] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  194.257219][ T6089] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[  194.274371][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  194.277494][ T6089] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  194.304479][ T6089] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  194.315464][   T57] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  194.325040][ T6089] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.373930][   T57] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.581577][   T57] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  194.669449][   T57] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.816025][ T6089] cxacru 5-1:1.0: send of cm 0x91 failed (-71)
[  194.830470][ T6089] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71
[  194.833241][ T6463] usb 3-1: USB disconnect, device number 11
[  194.846766][   T57] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  194.873676][ T6089] ATM dev 0: usbatm_atm_init: atm_start failed: -71!
[  194.900189][   T57] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.959336][ T6089] cxacru: probe of 5-1:1.0 failed with error -71
[  195.004868][ T6089] usb 5-1: USB disconnect, device number 9
[  195.067933][   T57] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  195.088774][   T57] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.605366][ T6639] loop4: detected capacity change from 0 to 256
[  195.712016][ T6639] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d)
[  195.730793][ T4288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  195.742538][ T4288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  195.751245][ T4288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  195.760768][ T4288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  195.769454][ T4288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  195.778535][ T4288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  195.897133][ T6641] rxe_eth0 speed is unknown, defaulting to 1000
[  195.944486][   T26] audit: type=1800 audit(1792505183.047:221): pid=6639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.653" name="file1" dev="loop4" ino=1048678 res=0 errno=0
[  196.045178][ T6652] loop0: detected capacity change from 0 to 512
[  196.124443][ T6652] EXT4-fs: Ignoring removed nomblk_io_submit option
[  196.165574][ T6652] EXT4-fs: Ignoring removed nomblk_io_submit option
[  196.219131][ T6652] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  196.345631][ T6652] EXT4-fs (loop0): 1 truncate cleaned up
[  196.403831][ T6652] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  196.714334][ T6666] loop4: detected capacity change from 0 to 512
[  196.738099][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  196.765622][ T6666] EXT4-fs: inline encryption not supported
[  196.827612][ T6666] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  196.855543][ T6666] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  196.917151][ T6666] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  196.970687][ T6666] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  197.015090][ T6666] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  197.050384][ T6666] EXT4-fs (loop4): orphan cleanup on readonly fs
[  197.163801][ T6666] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.659: bg 0: block 34: padding at end of block bitmap is not set
[  197.196077][ T6666] Quota error (device loop4): write_blk: dquota write failed
[  197.235155][ T6666] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  197.297340][ T6666] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.659: Failed to acquire dquot type 1
[  197.393746][ T6641] chnl_net:caif_netlink_parms(): no params data found
[  197.409093][ T6666] EXT4-fs (loop4): 1 truncate cleaned up
[  197.429380][ T6666] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  197.534828][ T6666] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  197.694416][ T5586] EXT4-fs (loop4): unmounting filesystem.
[  197.830534][ T4288] Bluetooth: hci2: command 0x0409 tx timeout
[  197.938344][ T6641] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.983297][ T6641] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.012270][ T6641] device bridge_slave_0 entered promiscuous mode
[  198.050833][ T6641] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.084603][ T6641] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.137405][ T6641] device bridge_slave_1 entered promiscuous mode
[  198.149690][ T6089] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  198.202513][   T57] device hsr_slave_0 left promiscuous mode
[  198.225875][ T6715] loop2: detected capacity change from 0 to 512
[  198.254262][ T6715] EXT4-fs: Ignoring removed mblk_io_submit option
[  198.277488][   T57] device hsr_slave_1 left promiscuous mode
[  198.300085][   T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  198.318881][   T57] batman_adv: batadv0: Removing interface: batadv_slave_0
[  198.331673][ T6715] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.669: corrupted in-inode xattr
[  198.339504][ T6089] usb 4-1: Using ep0 maxpacket: 16
[  198.352574][ T6089] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  198.363751][ T6089] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  198.377424][ T6089] usb 4-1: config 0 interface 0 has no altsetting 0
[  198.384240][ T6089] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[  198.391360][   T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  198.399979][ T6089] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.418511][ T6715] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.669: couldn't read orphan inode 15 (err -117)
[  198.424737][ T6089] usb 4-1: config 0 descriptor??
[  198.474793][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[  198.500330][   T57] device bridge_slave_1 left promiscuous mode
[  198.506631][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.507554][ T6715] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  198.590440][   T57] device bridge_slave_0 left promiscuous mode
[  198.596732][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.642358][ T6715] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #2: block 12: comm syz.2.669: lblock 3 mapped to illegal pblock 12 (length 1)
[  198.726818][   T57] device veth1_macvtap left promiscuous mode
[  198.733338][   T57] device veth0_macvtap left promiscuous mode
[  198.746811][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  198.753925][   T57] device veth1_vlan left promiscuous mode
[  198.809158][   T57] device veth0_vlan left promiscuous mode
[  198.873258][ T6089] logitech-djreceiver 0003:046D:C53A.0009: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.3-1/input0
[  199.456974][ T6095] usb 4-1: USB disconnect, device number 10
[  199.778793][ T6740] overlayfs: failed to set xattr on upper
[  199.785757][ T6740] overlayfs: ...falling back to index=off,metacopy=off.
[  199.910174][ T4288] Bluetooth: hci2: command 0x041b tx timeout
[  200.066978][   T57] team0 (unregistering): Port device team_slave_1 removed
[  200.170525][   T57] team0 (unregistering): Port device team_slave_0 removed
[  200.245512][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  200.311945][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  200.722687][   T57] bond0 (unregistering): Released all slaves
[  200.798604][ T6720] rxe_eth0 speed is unknown, defaulting to 1000
[  200.819850][ T6641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  200.842857][ T6641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  201.011031][ T6641] team0: Port device team_slave_0 added
[  201.099781][ T6641] team0: Port device team_slave_1 added
[  201.202966][ T6641] batman_adv: batadv0: Adding interface: batadv_slave_0
[  201.217920][ T6641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.301562][ T6641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  201.369648][ T6641] batman_adv: batadv0: Adding interface: batadv_slave_1
[  201.376694][ T6641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.495880][ T6641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  201.654704][ T6641] device hsr_slave_0 entered promiscuous mode
[  201.707098][ T6641] device hsr_slave_1 entered promiscuous mode
[  201.726941][ T6641] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  201.758479][ T6641] Cannot create hsr debugfs directory
[  201.990175][ T4288] Bluetooth: hci2: command 0x040f tx timeout
[  202.492331][ T6785] loop2: detected capacity change from 0 to 1024
[  202.600057][ T6641] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  202.639353][ T6641] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  202.672597][ T6641] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  202.742771][ T6641] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  203.027038][ T6788] loop2: detected capacity change from 0 to 1024
[  203.072429][ T6788] EXT4-fs: Ignoring removed bh option
[  203.098333][ T6641] 8021q: adding VLAN 0 to HW filter on device bond0
[  203.178741][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  203.199868][ T6788] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  203.217328][   T26] audit: type=1800 audit(1792505190.317:222): pid=6788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.693" name="file1" dev="loop2" ino=15 res=0 errno=0
[  203.231678][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  203.347264][ T6641] 8021q: adding VLAN 0 to HW filter on device team0
[  203.375272][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  203.389989][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  203.416544][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.423786][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.478458][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  203.498370][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  203.507166][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  203.528660][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  203.548785][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.555995][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.578040][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  203.626526][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  203.651409][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  203.692282][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  203.732966][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  203.776265][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  203.790318][ T6811] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  203.797975][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  203.832970][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  203.875717][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  203.903267][ T6641] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  203.931903][ T6641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  203.943076][ T6818] loop2: detected capacity change from 0 to 1024
[  203.951620][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  203.962402][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  203.985089][ T6818] EXT4-fs: Ignoring removed bh option
[  204.050751][ T6818] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  204.070025][ T4286] Bluetooth: hci2: command 0x0419 tx timeout
[  204.393609][ T4284] Bluetooth: hci5: command 0x1003 tx timeout
[  204.395826][ T4288] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  204.556180][ T6837] loop0: detected capacity change from 0 to 16
[  204.630089][ T6837] erofs: (device loop0): mounted with root inode @ nid 36.
[  204.931322][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  204.938892][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  205.007875][ T6641] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.043605][ T6851] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  205.086041][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  205.393892][ T6858] overlayfs: statfs failed on './file0'
[  205.434682][ T6857] device bond1 entered promiscuous mode
[  205.449570][ T6857] 8021q: adding VLAN 0 to HW filter on device bond1
[  205.626342][ T6868] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  206.372707][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  206.396734][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  206.453331][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  206.462887][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  206.471708][ T4288] Bluetooth: hci0: command 0x0406 tx timeout
[  206.495191][ T6641] device veth0_vlan entered promiscuous mode
[  206.509335][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  206.522049][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  206.536386][ T6641] device veth1_vlan entered promiscuous mode
[  206.565540][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  206.609906][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  206.636120][ T6903] FAULT_INJECTION: forcing a failure.
[  206.636120][ T6903] name failslab, interval 1, probability 0, space 0, times 0
[  206.652434][ T6641] device veth0_macvtap entered promiscuous mode
[  206.676005][ T6641] device veth1_macvtap entered promiscuous mode
[  206.696910][ T6903] CPU: 0 PID: 6903 Comm: syz.4.724 Not tainted syzkaller #0
[  206.704284][ T6903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  206.714413][ T6903] Call Trace:
[  206.717737][ T6903]  <TASK>
[  206.720697][ T6903]  dump_stack_lvl+0x188/0x24e
[  206.725415][ T6903]  ? show_regs_print_info+0x12/0x12
[  206.730649][ T6903]  ? load_image+0x410/0x410
[  206.735185][ T6903]  ? __might_sleep+0xd0/0xd0
[  206.739804][ T6903]  ? __lock_acquire+0x7ea0/0x7ea0
[  206.744878][ T6903]  should_fail_ex+0x390/0x4c0
[  206.749598][ T6903]  should_failslab+0x5/0x20
[  206.754123][ T6903]  slab_pre_alloc_hook+0x59/0x300
[  206.759189][ T6903]  ? kvm_dev_ioctl+0x9c8/0x17f0
[  206.764075][ T6903]  __kmem_cache_alloc_node+0x4f/0x270
[  206.769564][ T6903]  ? kvm_dev_ioctl+0x9c8/0x17f0
[  206.774444][ T6903]  kmalloc_trace+0x26/0xe0
[  206.778892][ T6903]  kvm_dev_ioctl+0x9c8/0x17f0
[  206.783617][ T6903]  ? hardware_enable_nolock+0x220/0x220
[  206.789196][ T6903]  ? bpf_lsm_file_ioctl+0x5/0x10
[  206.794166][ T6903]  ? security_file_ioctl+0x7c/0xa0
[  206.799327][ T6903]  ? hardware_enable_nolock+0x220/0x220
[  206.804945][ T6903]  __se_sys_ioctl+0xfa/0x170
[  206.809586][ T6903]  do_syscall_64+0x4c/0xa0
[  206.814250][ T6903]  ? clear_bhb_loop+0x60/0xb0
[  206.818967][ T6903]  ? clear_bhb_loop+0x60/0xb0
[  206.823688][ T6903]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  206.829631][ T6903] RIP: 0033:0x7f629179f559
[  206.834088][ T6903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  206.853728][ T6903] RSP: 002b:00007f629266c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  206.862186][ T6903] RAX: ffffffffffffffda RBX: 00007f6291a25fa0 RCX: 00007f629179f559
[  206.870209][ T6903] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004
[  206.878224][ T6903] RBP: 00007f6291836b20 R08: 0000000000000000 R09: 0000000000000000
[  206.886228][ T6903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  206.894233][ T6903] R13: 00007f6291a26038 R14: 00007f6291a25fa0 R15: 00007ffdb2cbb258
[  206.902257][ T6903]  </TASK>
[  206.994046][ T6641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.057831][ T6641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.105843][ T6641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.165082][ T6641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.213480][ T6641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.254872][ T6641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.292763][ T6641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.352374][ T6641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.390402][ T6641] batman_adv: batadv0: Interface activated: batadv_slave_0
[  207.422291][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  207.452826][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  207.473940][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  207.511981][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  207.540134][ T6641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.554173][ T6641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.565653][ T6641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.581092][ T6641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.592410][ T6641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.603815][ T6641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.614068][ T6641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.635030][ T6641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.670614][ T6641] batman_adv: batadv0: Interface activated: batadv_slave_1
[  207.691103][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  207.713918][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  207.766017][ T6641] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  207.804649][ T6641] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  207.831004][ T6641] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  207.849098][ T6641] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  208.014472][   T57] EXT4-fs (sda1): Delayed block allocation failed for inode 2035 at logical offset 0 with max blocks 1 with error 117
[  208.067987][   T57] EXT4-fs (sda1): This should not happen!! Data will be lost
[  208.067987][   T57] 
[  208.132322][   T57] EXT4-fs (sda1): Delayed block allocation failed for inode 2038 at logical offset 0 with max blocks 5 with error 117
[  208.181369][ T5257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.181386][   T57] EXT4-fs (sda1): This should not happen!! Data will be lost
[  208.181386][   T57] 
[  208.204044][ T6928] loop4: detected capacity change from 0 to 2048
[  208.245670][ T5257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.275289][ T6928] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  208.313565][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  208.352213][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.368492][ T6928] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  208.378755][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.406147][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  208.798863][ T6944] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  208.878466][ T6946] loop3: detected capacity change from 0 to 1024
[  208.916568][ T6946] EXT4-fs: Ignoring removed bh option
[  208.929208][ T6464] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  209.022438][ T6946] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  209.075545][   T26] audit: type=1800 audit(1792505196.177:223): pid=6946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.736" name="file1" dev="loop3" ino=15 res=0 errno=0
[  209.098328][ T6953] netlink: 'syz.4.737': attribute type 19 has an invalid length.
[  209.116437][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.737'.
[  209.128837][ T6464] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  209.149089][ T6464] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  209.169710][ T6953] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  209.178897][ T6953] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  209.188567][ T6953] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  209.198038][ T6953] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  209.217073][ T6464] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  209.226579][ T6464] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.256539][ T6940] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  209.334964][ T6953] netlink: 'syz.4.737': attribute type 19 has an invalid length.
[  209.397385][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.737'.
[  209.463064][ T4290] EXT4-fs (loop3): unmounting filesystem.
[  210.246808][ T6972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.751'.
[  210.306925][ T6972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.751'.
[  210.478899][ T6090] usb 7-1: USB disconnect, device number 2
[  210.885008][ T6991] netlink: 'syz.0.748': attribute type 1 has an invalid length.
[  210.913345][ T6989] loop3: detected capacity change from 0 to 1024
[  211.743614][ T7016] loop3: detected capacity change from 0 to 512
[  211.833331][ T7016] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  211.867641][ T7016] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  211.956164][   T26] audit: type=1800 audit(1792505199.057:224): pid=7016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.757" name="file1" dev="loop3" ino=15 res=0 errno=0
[  212.038453][ T4290] EXT4-fs (loop3): unmounting filesystem.
[  212.459277][ T6465] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  212.661076][ T6465] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  212.678660][ T6465] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  212.695052][ T6465] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  212.712937][ T6465] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.744219][ T7033] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  213.169106][ T6090] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  213.201705][ T6465] usb 4-1: USB disconnect, device number 11
[  213.249234][ T7059] loop4: detected capacity change from 0 to 512
[  213.339268][ T7059] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  213.360940][ T7059] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  213.380753][ T6090] usb 3-1: Using ep0 maxpacket: 16
[  213.396440][ T6090] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  213.414049][ T6090] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.425292][ T6090] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  213.436121][ T6090] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  213.449342][ T6090] usb 3-1: config 0 interface 0 has no altsetting 0
[  213.456029][ T6090] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[  213.466222][ T6090] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.479706][ T6090] usb 3-1: config 0 descriptor??
[  213.660344][ T5586] EXT4-fs (loop4): unmounting filesystem.
[  213.930925][ T6090] logitech-djreceiver 0003:046D:C53A.000A: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.2-1/input0
[  213.955346][ T7081] loop3: detected capacity change from 0 to 164
[  214.011493][ T4288] Bluetooth: hci4: ISO packet for unknown connection handle 6
[  214.100372][ T6090] usb 3-1: USB disconnect, device number 12
[  214.354323][ T7086] fido_id[7086]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  214.804663][ T7103] FAULT_INJECTION: forcing a failure.
[  214.804663][ T7103] name failslab, interval 1, probability 0, space 0, times 0
[  214.931144][ T7103] CPU: 1 PID: 7103 Comm: syz.4.779 Not tainted syzkaller #0
[  214.938523][ T7103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  214.948640][ T7103] Call Trace:
[  214.951984][ T7103]  <TASK>
[  214.954963][ T7103]  dump_stack_lvl+0x188/0x24e
[  214.959710][ T7103]  ? show_regs_print_info+0x12/0x12
[  214.964966][ T7103]  ? load_image+0x410/0x410
[  214.969526][ T7103]  ? __lock_acquire+0x7ea0/0x7ea0
[  214.974628][ T7103]  should_fail_ex+0x390/0x4c0
[  214.979371][ T7103]  should_failslab+0x5/0x20
[  214.983929][ T7103]  slab_pre_alloc_hook+0x59/0x300
[  214.989024][ T7103]  ? __vb2_queue_alloc+0x142/0x1410
[  214.994275][ T7103]  __kmem_cache_alloc_node+0x4f/0x270
[  214.999716][ T7103]  ? __vb2_queue_alloc+0x142/0x1410
[  215.005008][ T7103]  __kmalloc+0xa3/0x240
[  215.009232][ T7103]  __vb2_queue_alloc+0x142/0x1410
[  215.014351][ T7103]  vb2_core_reqbufs+0x9ff/0x10e0
[  215.019364][ T7103]  ? trace_contention_end+0x5f/0x170
[  215.024710][ T7103]  ? vb2_verify_memory_type+0x570/0x570
[  215.030315][ T7103]  ? __mutex_lock+0x1ab/0xae0
[  215.035063][ T7103]  ? do_vfs_ioctl+0x1be3/0x1d40
[  215.040016][ T7103]  ? vb2_verify_memory_type+0x1f8/0x570
[  215.045625][ T7103]  vb2_ioctl_reqbufs+0x470/0x780
[  215.050726][ T7103]  __video_do_ioctl+0xa10/0xe40
[  215.055671][ T7103]  ? __lock_acquire+0x7ea0/0x7ea0
[  215.060759][ T7103]  ? video_ioctl2+0x30/0x30
[  215.065333][ T7103]  ? __might_fault+0xc2/0x120
[  215.070061][ T7103]  ? __might_fault+0xa6/0x120
[  215.074816][ T7103]  video_usercopy+0x987/0x1450
[  215.079660][ T7103]  ? video_ioctl2+0x30/0x30
[  215.084229][ T7103]  ? v4l_printk_ioctl+0x130/0x130
[  215.089358][ T7103]  v4l2_ioctl+0x183/0x1d0
[  215.093749][ T7103]  ? v4l2_poll+0x2b0/0x2b0
[  215.098234][ T7103]  __se_sys_ioctl+0xfa/0x170
[  215.102923][ T7103]  do_syscall_64+0x4c/0xa0
[  215.107395][ T7103]  ? clear_bhb_loop+0x60/0xb0
[  215.112134][ T7103]  ? clear_bhb_loop+0x60/0xb0
[  215.116869][ T7103]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  215.122829][ T7103] RIP: 0033:0x7f629179f559
[  215.127319][ T7103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  215.146984][ T7103] RSP: 002b:00007f629266c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  215.155457][ T7103] RAX: ffffffffffffffda RBX: 00007f6291a25fa0 RCX: 00007f629179f559
[  215.163483][ T7103] RDX: 000020000001aa40 RSI: 00000000c0145608 RDI: 0000000000000004
[  215.171515][ T7103] RBP: 00007f6291836b20 R08: 0000000000000000 R09: 0000000000000000
[  215.179541][ T7103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  215.187568][ T7103] R13: 00007f6291a26038 R14: 00007f6291a25fa0 R15: 00007ffdb2cbb258
[  215.195620][ T7103]  </TASK>
[  216.319152][ T6093] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  216.515226][ T6093] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  216.544790][ T6093] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  216.574949][ T6093] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  216.586718][ T6093] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.619821][ T7138] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  217.144269][ T6093] usb 1-1: USB disconnect, device number 8
[  217.187236][ T7175] loop4: detected capacity change from 0 to 1024
[  217.228349][ T7175] EXT4-fs: Ignoring removed bh option
[  217.304928][ T7175] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  217.826465][ T7159] loop2: detected capacity change from 0 to 32768
[  217.916946][ T7159] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  217.958338][ T7159] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  218.156717][ T7159] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 8ms
[  218.196709][ T6089] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  218.212608][ T6089] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  218.357264][ T5586] EXT4-fs (loop4): unmounting filesystem.
[  218.464081][ T6089] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 251ms
[  218.503573][ T6089] gfs2: fsid=syz:syz.0: jid=0: Done
[  218.512115][ T7200] loop3: detected capacity change from 0 to 128
[  218.524314][ T7159] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  218.588765][ T7200] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  218.754160][ T7200] netlink: 'syz.3.807': attribute type 12 has an invalid length.
[  219.137223][ T7215] netlink: 'syz.0.811': attribute type 1 has an invalid length.
[  219.159142][ T7215] netlink: 'syz.0.811': attribute type 2 has an invalid length.
[  219.317840][   T26] audit: type=1326 audit(1792505206.417:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7223 comm="syz.6.813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d9c99f559 code=0x0
[  220.103603][ T7247] loop3: detected capacity change from 0 to 1024
[  220.163534][ T7247] EXT4-fs: Ignoring removed bh option
[  220.247073][ T7247] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  220.598839][ T7269] netlink: 28 bytes leftover after parsing attributes in process `syz.2.822'.
[  221.195119][ T7265] loop6: detected capacity change from 0 to 32768
[  221.284662][   T26] audit: type=1800 audit(1792505208.387:226): pid=7265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.821" name="file1" dev="loop6" ino=4 res=0 errno=0
[  221.311637][ T4290] EXT4-fs (loop3): unmounting filesystem.
[  222.494169][ T7325] loop2: detected capacity change from 0 to 1024
[  222.611934][ T7325] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  222.663143][ T7331] loop6: detected capacity change from 0 to 1024
[  222.770360][ T7331] EXT4-fs: Ignoring removed bh option
[  222.860460][ T7331] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  223.038214][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  223.059689][ T7337] rxe_eth0 speed is unknown, defaulting to 1000
[  223.290246][ T7349] device syzkaller1 entered promiscuous mode
[  224.001127][ T7345] loop3: detected capacity change from 0 to 40427
[  224.024692][ T6641] EXT4-fs (loop6): unmounting filesystem.
[  224.050245][ T7345] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  224.071061][ T7345] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  224.111950][ T7345] F2FS-fs (loop3): invalid crc value
[  224.172208][ T7345] F2FS-fs (loop3): Found nat_bits in checkpoint
[  224.244636][ T7364] user requested TSC rate below hardware speed
[  224.390138][ T7345] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  224.408375][ T7345] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  224.528546][   T26] audit: type=1804 audit(1792505211.627:227): pid=7345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.840" name="/newroot/181/bus/bus" dev="loop3" ino=10 res=1 errno=0
[  224.944794][ T4290] syz-executor: attempt to access beyond end of device
[  224.944794][ T4290] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  224.980008][ T7352] loop0: detected capacity change from 0 to 40427
[  225.016719][ T7352] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  225.066415][ T7352] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  225.097772][ T7380] FAULT_INJECTION: forcing a failure.
[  225.097772][ T7380] name failslab, interval 1, probability 0, space 0, times 0
[  225.099796][ T7352] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7
[  225.162496][ T7380] CPU: 1 PID: 7380 Comm: syz.4.850 Not tainted syzkaller #0
[  225.169873][ T7380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  225.179977][ T7380] Call Trace:
[  225.183298][ T7380]  <TASK>
[  225.186268][ T7380]  dump_stack_lvl+0x188/0x24e
[  225.189129][ T7352] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff
[  225.191025][ T7380]  ? show_regs_print_info+0x12/0x12
[  225.204617][ T7380]  ? load_image+0x410/0x410
[  225.209184][ T7380]  ? __might_sleep+0xd0/0xd0
[  225.213843][ T7380]  ? __lock_acquire+0x7ea0/0x7ea0
[  225.218954][ T7380]  ? node_tag_clear+0x1ec/0x310
[  225.223861][ T7380]  should_fail_ex+0x390/0x4c0
[  225.228601][ T7380]  should_failslab+0x5/0x20
[  225.233158][ T7380]  slab_pre_alloc_hook+0x59/0x300
[  225.238327][ T7380]  ? __kernfs_new_node+0xa6/0x7f0
[  225.243410][ T7380]  __kmem_cache_alloc_node+0x4f/0x270
[  225.248848][ T7380]  ? __kernfs_new_node+0xa6/0x7f0
[  225.253932][ T7380]  __kmalloc_node_track_caller+0xa0/0x240
[  225.259729][ T7380]  kstrdup_const+0x56/0x90
[  225.264216][ T7380]  __kernfs_new_node+0xa6/0x7f0
[  225.269126][ T7380]  ? __lock_acquire+0x7ea0/0x7ea0
[  225.274212][ T7380]  ? kernfs_new_node+0x250/0x250
[  225.279195][ T7380]  ? rwsem_write_trylock+0x135/0x1c0
[  225.284532][ T7380]  ? clear_nonspinnable+0x60/0x60
[  225.289626][ T7380]  ? up_write+0x1b6/0x410
[  225.294025][ T7380]  kernfs_new_node+0x148/0x250
[  225.298872][ T7380]  __kernfs_create_file+0x47/0x2e0
[  225.304028][ T7380]  cgroup_addrm_files+0x80c/0xd50
[  225.309101][ T7380]  ? trace_raw_output_cgroup_event+0x1e0/0x1e0
[  225.315294][ T7380]  ? mark_lock+0x94/0x320
[  225.319703][ T7380]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  225.325788][ T7380]  ? css_next_descendant_pre+0x179/0x250
[  225.331480][ T7380]  css_populate_dir+0x1da/0x3b0
[  225.336362][ T7380]  cgroup_mkdir+0xc61/0xe70
[  225.340907][ T7380]  ? css_task_iter_end+0x280/0x280
[  225.346060][ T7380]  ? kernfs_iop_permission+0x26d/0x350
[  225.351553][ T7380]  ? css_task_iter_end+0x280/0x280
[  225.356692][ T7380]  kernfs_iop_mkdir+0x23d/0x3d0
[  225.361594][ T7380]  vfs_mkdir+0x386/0x570
[  225.365888][ T7380]  do_mkdirat+0x1d8/0x440
[  225.370250][ T7380]  ? vfs_mkdir+0x570/0x570
[  225.374707][ T7380]  __x64_sys_mkdirat+0x85/0x90
[  225.379499][ T7380]  do_syscall_64+0x4c/0xa0
[  225.383943][ T7380]  ? clear_bhb_loop+0x60/0xb0
[  225.388673][ T7380]  ? clear_bhb_loop+0x60/0xb0
[  225.393379][ T7380]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  225.399300][ T7380] RIP: 0033:0x7f629179f559
[  225.403738][ T7380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  225.423387][ T7380] RSP: 002b:00007f629266c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  225.431843][ T7380] RAX: ffffffffffffffda RBX: 00007f6291a25fa0 RCX: 00007f629179f559
[  225.439853][ T7380] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[  225.447861][ T7380] RBP: 00007f6291836b20 R08: 0000000000000000 R09: 0000000000000000
[  225.455867][ T7380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  225.463864][ T7380] R13: 00007f6291a26038 R14: 00007f6291a25fa0 R15: 00007ffdb2cbb258
[  225.471900][ T7380]  </TASK>
[  225.480354][    C0] vcan0: j1939_tp_rxtimer: 0xffff888057c5c400: rx timeout, send abort
[  225.492864][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057c5c400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  225.529375][ T7352] F2FS-fs (loop0): invalid crc value
[  225.553457][ T7352] F2FS-fs (loop0): Found nat_bits in checkpoint
[  225.658988][ T7380] cgroup: cgroup_addrm_files: failed to add notify_on_release, err=-12
[  225.715226][ T7352] F2FS-fs (loop0): Start checkpoint disabled!
[  225.812888][ T7352] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  225.853396][ T7352] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  225.973760][ T7352] F2FS-fs (loop0) : inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_page+0x1cd/0x910
[  226.199205][ T5257] kworker/u4:8: attempt to access beyond end of device
[  226.199205][ T5257] loop0: rw=2049, sector=40960, nr_sectors = 40 limit=40427
[  226.409528][ T7404] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[  227.333451][ T7426] loop0: detected capacity change from 0 to 32768
[  227.389323][ T7426] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.862 (7426)
[  227.455618][ T7426] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  227.470508][ T7426] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  227.497587][ T7426] BTRFS info (device loop0): setting nodatasum
[  227.543307][ T7426] BTRFS info (device loop0): force zlib compression, level 3
[  227.586838][ T7426] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[  227.627929][ T7426] BTRFS info (device loop0): use lzo compression, level 0
[  227.658342][ T7426] BTRFS info (device loop0): turning on flush-on-commit
[  227.695453][ T7426] BTRFS info (device loop0): enabling auto defrag
[  227.726010][ T7426] BTRFS info (device loop0): max_inline at 4096
[  227.745990][ T7426] BTRFS info (device loop0): using free space tree
[  227.957221][ T7422] loop6: detected capacity change from 0 to 40427
[  228.061245][ T7422] F2FS-fs (loop6): invalid crc value
[  228.112816][ T7422] F2FS-fs (loop6): Found nat_bits in checkpoint
[  228.138779][ T7426] BTRFS info (device loop0): enabling ssd optimizations
[  228.266438][ T7422] F2FS-fs (loop6): Start checkpoint disabled!
[  228.321839][ T7422] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  228.703681][ T4273] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  229.309234][ T4346] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  229.500949][ T4346] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 20480, setting to 64
[  229.544537][ T4346] usb 3-1: config 0 interface 0 has no altsetting 0
[  229.564096][ T4346] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  229.619008][ T4346] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  229.638216][ T4346] usb 3-1: Product: syz
[  229.652683][ T4346] usb 3-1: Manufacturer: syz
[  229.666586][ T4346] usb 3-1: SerialNumber: syz
[  229.680477][ T7492] loop0: detected capacity change from 0 to 16
[  229.695591][ T4346] usb 3-1: config 0 descriptor??
[  229.747508][ T4346] usb 3-1: selecting invalid altsetting 0
[  229.780495][ T7492] erofs: (device loop0): mounted with root inode @ nid 36.
[  229.977817][ T7476] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  231.586668][ T7533] loop0: detected capacity change from 0 to 8192
[  231.595221][ T7540] device bridge1 entered promiscuous mode
[  231.634069][ T7533] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  231.719188][ T7533] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  231.735508][ T7533] REISERFS (device loop0): using ordered data mode
[  231.753004][   T22] usb 3-1: USB disconnect, device number 13
[  231.779551][ T7533] reiserfs: using flush barriers
[  231.798584][ T7533] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  231.889581][ T7533] REISERFS (device loop0): checking transaction log (loop0)
[  232.145113][ T7553] netlink: 'syz.6.891': attribute type 8 has an invalid length.
[  232.187669][ T7533] REISERFS (device loop0): Using tea hash to sort names
[  232.219450][ T7533] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  232.649933][ T7538] loop4: detected capacity change from 0 to 32768
[  232.846841][ T7538] ERROR: (device loop4): dbAlloc: the hint is outside the map
[  232.846841][ T7538] 
[  232.914871][ T7570] FAULT_INJECTION: forcing a failure.
[  232.914871][ T7570] name failslab, interval 1, probability 0, space 0, times 0
[  232.918115][ T7538] ERROR: (device loop4): remounting filesystem as read-only
[  232.967166][ T7538] syz.4.886: attempt to access beyond end of device
[  232.967166][ T7538] loop4: rw=2049, sector=44032, nr_sectors = 8 limit=32768
[  232.981971][ T7570] CPU: 0 PID: 7570 Comm: syz.6.897 Not tainted syzkaller #0
[  232.989330][ T7570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  232.999440][ T7570] Call Trace:
[  233.002762][ T7570]  <TASK>
[  233.005724][ T7570]  dump_stack_lvl+0x188/0x24e
[  233.010475][ T7570]  ? show_regs_print_info+0x12/0x12
[  233.015735][ T7570]  ? load_image+0x410/0x410
[  233.020275][ T7570]  ? __might_sleep+0xd0/0xd0
[  233.024894][ T7570]  ? __lock_acquire+0x7ea0/0x7ea0
[  233.029961][ T7570]  should_fail_ex+0x390/0x4c0
[  233.034692][ T7570]  should_failslab+0x5/0x20
[  233.039231][ T7570]  slab_pre_alloc_hook+0x59/0x300
[  233.044319][ T7570]  ? assoc_array_insert+0x8f/0x3080
[  233.049566][ T7570]  __kmem_cache_alloc_node+0x4f/0x270
[  233.054998][ T7570]  ? assoc_array_insert+0x8f/0x3080
[  233.060227][ T7570]  kmalloc_trace+0x26/0xe0
[  233.064676][ T7570]  assoc_array_insert+0x8f/0x3080
[  233.069740][ T7570]  ? __key_link_lock+0x97/0xb0
[  233.074535][ T7570]  ? mutex_lock_nested+0x10/0x10
[  233.079507][ T7570]  ? rwsem_write_trylock+0x135/0x1c0
[  233.084857][ T7570]  ? clear_nonspinnable+0x60/0x60
[  233.089928][ T7570]  __key_link_begin+0xd2/0x1e0
[  233.094722][ T7570]  key_instantiate_and_link+0x21f/0x4b0
[  233.100303][ T7570]  ? key_payload_reserve+0x3b0/0x3b0
[  233.105631][ T7570]  ? do_raw_spin_unlock+0x11d/0x230
[  233.110876][ T7570]  ? clear_nonspinnable+0x60/0x60
[  233.115956][ T7570]  keyring_alloc+0x6b/0xa0
[  233.120423][ T7570]  keyctl_get_persistent+0x595/0x780
[  233.125763][ T7570]  ? proc_key_users_show+0x310/0x310
[  233.131118][ T7570]  __se_sys_keyctl+0x59f/0x870
[  233.135917][ T7570]  ? __x64_sys_keyctl+0xc0/0xc0
[  233.140829][ T7570]  ? do_futex+0x310/0x320
[  233.145192][ T7570]  ? __ia32_sys_get_robust_list+0x100/0x100
[  233.151125][ T7570]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  233.157143][ T7570]  ? lock_chain_count+0x20/0x20
[  233.162053][ T7570]  ? lockdep_hardirqs_on+0x94/0x140
[  233.167309][ T7570]  ? __x64_sys_keyctl+0x1c/0xc0
[  233.172226][ T7570]  do_syscall_64+0x4c/0xa0
[  233.176699][ T7570]  ? clear_bhb_loop+0x60/0xb0
[  233.181430][ T7570]  ? clear_bhb_loop+0x60/0xb0
[  233.186138][ T7570]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  233.192062][ T7570] RIP: 0033:0x7f1d9c99f559
[  233.196506][ T7570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  233.216145][ T7570] RSP: 002b:00007f1d9d7f0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  233.224590][ T7570] RAX: ffffffffffffffda RBX: 00007f1d9cc25fa0 RCX: 00007f1d9c99f559
[  233.232612][ T7570] RDX: 000000002424ea60 RSI: 0000000000000000 RDI: 0000000000000016
[  233.240609][ T7570] RBP: 00007f1d9ca36b20 R08: 0000000000000000 R09: 0000000000000000
[  233.248606][ T7570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  233.256602][ T7570] R13: 00007f1d9cc26038 R14: 00007f1d9cc25fa0 R15: 00007ffcfa20b4e8
[  233.264619][ T7570]  </TASK>
[  233.404898][ T5586] ------------[ cut here ]------------
[  233.411142][ T5586] kernel BUG at fs/jfs/inode.c:175!
[  233.419260][ T5586] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  233.425384][ T5586] CPU: 0 PID: 5586 Comm: syz-executor Not tainted syzkaller #0
[  233.432960][ T5586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  233.443036][ T5586] RIP: 0010:jfs_evict_inode+0x420/0x430
[  233.448617][ T5586] Code: e6 fe e9 e8 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 ba 59 e6 fe e9 16 fe ff ff e8 d0 fd 94 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 57 41 56 41 54
[  233.468246][ T5586] RSP: 0018:ffffc90003117b08 EFLAGS: 00010293
[  233.474333][ T5586] RAX: ffffffff82ed48b0 RBX: ffff88807231a930 RCX: ffff8880545b0000
[  233.482416][ T5586] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88807231a930
[  233.490407][ T5586] RBP: 0000000000000001 R08: ffffffff91934397 R09: 1ffffffff2326872
[  233.498401][ T5586] R10: dffffc0000000000 R11: fffffbfff2326873 R12: dffffc0000000000
[  233.506398][ T5586] R13: dffffc0000000000 R14: ffff88807231a5b8 R15: ffff88807231a958
[  233.514397][ T5586] FS:  000055558bae6500(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000
[  233.523348][ T5586] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  233.529974][ T5586] CR2: 00007ff33ef556c8 CR3: 0000000074ae1000 CR4: 00000000003506f0
[  233.537971][ T5586] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  233.545955][ T5586] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  233.553953][ T5586] Call Trace:
[  233.557253][ T5586]  <TASK>
[  233.560216][ T5586]  ? jfs_write_inode+0x220/0x220
[  233.565189][ T5586]  evict+0x4b6/0x8b0
[  233.569112][ T5586]  ? evict_inodes+0x577/0x6e0
[  233.573810][ T5586]  ? proc_nr_inodes+0x2f0/0x2f0
[  233.578695][ T5586]  ? do_raw_spin_unlock+0x11d/0x230
[  233.583915][ T5586]  ? do_raw_spin_unlock+0x11d/0x230
[  233.589136][ T5586]  evict_inodes+0x650/0x6e0
[  233.593671][ T5586]  ? clear_inode+0x150/0x150
[  233.598283][ T5586]  ? dput+0x37/0x1d0
[  233.602204][ T5586]  generic_shutdown_super+0x93/0x340
[  233.607522][ T5586]  kill_block_super+0x7c/0xe0
[  233.612230][ T5586]  deactivate_locked_super+0x93/0xf0
[  233.617539][ T5586]  cleanup_mnt+0x471/0x4f0
[  233.621981][ T5586]  task_work_run+0x1d0/0x260
[  233.626597][ T5586]  ? task_work_cancel+0x220/0x220
[  233.631674][ T5586]  ? exit_to_user_mode_loop+0x3b/0x110
[  233.637248][ T5586]  exit_to_user_mode_loop+0xe6/0x110
[  233.642585][ T5586]  exit_to_user_mode_prepare+0xee/0x180
[  233.648163][ T5586]  syscall_exit_to_user_mode+0x16/0x40
[  233.653656][ T5586]  do_syscall_64+0x58/0xa0
[  233.658093][ T5586]  ? clear_bhb_loop+0x60/0xb0
[  233.662795][ T5586]  ? clear_bhb_loop+0x60/0xb0
[  233.667504][ T5586]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  233.673441][ T5586] RIP: 0033:0x7f62917a0797
[  233.677876][ T5586] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  233.697587][ T5586] RSP: 002b:00007ffdb2cba4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  233.706021][ T5586] RAX: 0000000000000000 RBX: 00007f6291835f63 RCX: 00007f62917a0797
[  233.714024][ T5586] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdb2cba580
[  233.722011][ T5586] RBP: 00007ffdb2cba580 R08: 00007ffdb2cbb580 R09: 00000000ffffffff
[  233.730003][ T5586] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdb2cbb610
[  233.737996][ T5586] R13: 00007f6291835f63 R14: 0000000000038dd3 R15: 00007ffdb2cbb650
[  233.746000][ T5586]  </TASK>
[  233.749050][ T5586] Modules linked in:
[  233.770558][ T7575] netlink: 'syz.3.898': attribute type 14 has an invalid length.
[  233.778410][ T7575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.898'.
[  233.791005][ T7575] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  233.799800][ T7575] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  233.809212][ T7575] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  233.817954][ T7575] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  233.844142][ T7575] netlink: 'syz.3.898': attribute type 14 has an invalid length.
[  233.855599][ T7575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.898'.
[  233.864889][ T5586] ---[ end trace 0000000000000000 ]---
[  233.884872][ T5586] RIP: 0010:jfs_evict_inode+0x420/0x430
[  233.895582][ T5586] Code: e6 fe e9 e8 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 ba 59 e6 fe e9 16 fe ff ff e8 d0 fd 94 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 57 41 56 41 54
[  233.916290][ T5586] RSP: 0018:ffffc90003117b08 EFLAGS: 00010293
[  233.922468][ T5586] RAX: ffffffff82ed48b0 RBX: ffff88807231a930 RCX: ffff8880545b0000
[  233.938965][ T5586] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88807231a930
[  233.946992][ T5586] RBP: 0000000000000001 R08: ffffffff91934397 R09: 1ffffffff2326872
[  233.961345][ T5586] R10: dffffc0000000000 R11: fffffbfff2326873 R12: dffffc0000000000
[  233.969623][ T5586] R13: dffffc0000000000 R14: ffff88807231a5b8 R15: ffff88807231a958
[  233.977646][ T5586] FS:  000055558bae6500(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000
[  233.986711][ T5586] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  233.993415][ T5586] CR2: 000000110c3fdeb5 CR3: 0000000074ae1000 CR4: 00000000003506f0
[  234.006646][ T5586] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  234.015556][ T5586] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  234.024189][ T5586] Kernel panic - not syncing: Fatal exception
[  234.030929][ T5586] Kernel Offset: disabled
[  234.035274][ T5586] Rebooting in 86400 seconds..