last executing test programs:

2m28.461415019s ago: executing program 3 (id=4):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = fanotify_init(0xf00, 0x0)
fanotify_mark(r2, 0x1, 0x5000003a, r1, 0x0)
r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4)
renameat2(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000002c0)='./file0\x00', 0x2)
read$FUSE(r2, &(0x7f0000000f40)={0x2020}, 0x2020)

2m28.312902583s ago: executing program 3 (id=7):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x201899, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
unshare(0x22020600)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0)
mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
umount2(&(0x7f0000000100)='./file0\x00', 0x0)

2m28.084421539s ago: executing program 3 (id=11):
syz_io_uring_setup(0x3857, 0x0, 0x0, 0x0, 0x0)
r0 = syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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")
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x3020805, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0], 0xff, 0x297, &(0x7f0000000780)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000380)='./file1\x00', 0x2024c1b, 0x0, 0x0, 0x0, &(0x7f00000000c0))
syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000300)='./file0\x00', 0x800, &(0x7f0000002040)={[{@dmask={'dmask', 0x3d, 0x6}}, {@umask={'umask', 0x3d, 0x5}}, {@namecase}, {@dmask={'dmask', 0x3d, 0xcf6}}, {@errors_remount}, {@errors_remount}, {@fmask={'fmask', 0x3d, 0x2}}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@allow_utime={'allow_utime', 0x3d, 0xce2f}}]}, 0x1, 0x1528, &(0x7f00000021c0)="$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")
chown(&(0x7f0000000000)='./file1\x00', 0xffffffffffffffff, 0x0)

2m27.071469233s ago: executing program 3 (id=22):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000140)={[{}, {@nobh}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x64}}, {@test_dummy_encryption}, {@lazytime}, {@nodioread_nolock}, {@minixdf}, {@bh}]}, 0x7, 0xbb2, &(0x7f0000000600)="$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")
chdir(0x0)
shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x6000)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000380)=0x3, 0x4)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})

2m26.880224398s ago: executing program 32 (id=22):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000140)={[{}, {@nobh}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x64}}, {@test_dummy_encryption}, {@lazytime}, {@nodioread_nolock}, {@minixdf}, {@bh}]}, 0x7, 0xbb2, &(0x7f0000000600)="$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")
chdir(0x0)
shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x6000)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000380)=0x3, 0x4)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})

1m48.301372909s ago: executing program 1 (id=298):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220600000006"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001040)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="07b9c2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

1m44.516886091s ago: executing program 1 (id=325):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000780)={r3, 0xfffffffd, 0x4, 0x0, 0x2, [<r4=>0x0], [0x0, 0x0, 0x400, 0x9], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000140)={r4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r5})

1m44.357317495s ago: executing program 1 (id=326):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20)
recvfrom$inet6(r0, &(0x7f0000000040)=""/26, 0x1a, 0x2, 0x0, 0xffffffffffffffce)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r3, 0xffffffffffffffff, 0x0)

1m44.122296371s ago: executing program 1 (id=329):
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x1204018, &(0x7f0000000240)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x56f, &(0x7f0000000b00)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1cd883, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020)

1m43.891936486s ago: executing program 1 (id=331):
unshare(0xc060200)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
unshare(0x22020600)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
unshare(0x8000000)
unshare(0x2c020400)

1m43.637109213s ago: executing program 1 (id=335):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf99017019b42da6b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)

1m43.600401364s ago: executing program 33 (id=335):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf99017019b42da6b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)

1m10.12199169s ago: executing program 2 (id=622):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
signalfd(r1, &(0x7f0000000040)={[0x10000]}, 0x8)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m9.929006174s ago: executing program 2 (id=623):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = dup(r2)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56561, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)

1m9.778541929s ago: executing program 2 (id=624):
r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0xa)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r2, 0x104, 0x1)
r3 = inotify_init1(0x80000)
inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x400)
getdents64(r2, 0x0, 0x0)

1m9.67857754s ago: executing program 2 (id=625):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2, 0x891, 0x340, {0x77359400}, {}, {0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1}, 0xb, 0x2, 0x0, 0x0, "0a7c7f0dc3f5eeab1c90d7f1281e2b311069803045c6e2e7c652262e39e89272d2424a0902303bc5e6ee70a9eb045336d93ae80eaf2cce5d6832029b3c214da1"}}, 0x80}, 0x1, 0x0, 0x0, 0x880}, 0x14000)
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

1m9.569195754s ago: executing program 2 (id=627):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x10b, 0xffffffffffffffff})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0})

1m9.172241873s ago: executing program 2 (id=631):
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='pids.current\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
writev(r1, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

1m8.947688128s ago: executing program 34 (id=631):
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='pids.current\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
writev(r1, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

4.50456964s ago: executing program 5 (id=1175):
syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000011440)='./file1\x00', 0x0, 0x1105004, 0x0)
open(0x0, 0x8000, 0xa0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109042, 0x23)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
ftruncate(r1, 0xc17a)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)

4.137762319s ago: executing program 5 (id=1176):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380)=0x1, 0x4)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
sendto(r0, 0x0, 0x0, 0x4000800, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

3.564752463s ago: executing program 6 (id=1187):
syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x7, 0x5, 0x79, 0x3, 0x2], 0x3332d000, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000002c0)=@arm64={0x4, 0xe, 0xd, '\x00', 0x5})
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0xeeee0000, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x0, 0x0, 0x7, 0xc4, 0x40, 0x1, 0x45, 0x3, 0x4, 0xf9}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0xffffffff, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0x80a0000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xd, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0xf000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.425138567s ago: executing program 6 (id=1189):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, 0x0, &(0x7f0000000300))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', <r4=>0x0})
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)

2.761059713s ago: executing program 0 (id=1191):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
bind$tipc(r0, 0x0, 0x0)
sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820)

2.726039144s ago: executing program 5 (id=1192):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000040000000400000001"], 0x48)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000040), &(0x7f00000000c0)=@udp6=r2, 0x1}, 0x20)
recvfrom(r2, &(0x7f00000004c0)=""/182, 0xb6, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x5}}, 0x20)

2.625230726s ago: executing program 0 (id=1193):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)

2.424803681s ago: executing program 4 (id=1195):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000e"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40)

2.424187491s ago: executing program 0 (id=1205):
pipe(&(0x7f00000007c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1000000000000222, 0x1)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4)
setresgid(0xee00, 0x0, 0x0)
sendto$unix(r2, &(0x7f00000004c0)="0434", 0x2, 0xd1, 0x0, 0x0)
recvfrom$unix(r3, 0x0, 0x0, 0x10102, 0x0, 0x0)
splice(r2, &(0x7f0000000040)=0x8, r1, &(0x7f0000000080)=0x10, 0x679000, 0x0)
splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0)

2.395047802s ago: executing program 6 (id=1196):
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x1, 0x56, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006)
recvfrom$inet6(r0, &(0x7f0000000000)=""/31, 0x1f, 0x2000, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1)
r4 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r4, &(0x7f0000000000)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b)

2.287221954s ago: executing program 4 (id=1197):
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
r2 = fcntl$dupfd(r1, 0x406, r1)
r3 = epoll_create1(0x0)
unshare(0x20400)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0x20000002})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x20000001})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000580)={0xa0002008})
pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0x10})

2.281887084s ago: executing program 6 (id=1198):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x2c00, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0xfd, 0xcdb9}]}, 0x10)
r1 = io_uring_setup(0x5dbe, &(0x7f0000000380)={0x0, 0x7371, 0x0, 0x1ffff, 0x377})
socket$inet_sctp(0x2, 0x1, 0x84)
close_range(r1, 0xffffffffffffffff, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

2.246307475s ago: executing program 0 (id=1199):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
r2 = epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x193, 0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001})
ppoll(&(0x7f00000001c0)=[{r5, 0xe055}, {r5, 0x9201}], 0x2, 0x0, 0x0, 0x0)
close_range(r1, r3, 0x0)

2.166477457s ago: executing program 4 (id=1200):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0xfffffe14)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
dup3(r1, r3, 0x6700000000000000)
close_range(r0, 0xffffffffffffffff, 0x0)

2.07322464s ago: executing program 4 (id=1201):
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x12)
setresuid(0xee01, 0xee01, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3})

2.003790561s ago: executing program 4 (id=1203):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
bind$tipc(r0, 0x0, 0x0)
sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820)

1.747935168s ago: executing program 5 (id=1208):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0)
r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r1}, 0x0)
landlock_restrict_self(r0, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1028}, 0x30, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000002c0)={0x20, r3}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0)

1.697256818s ago: executing program 7 (id=1209):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000e"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40)

1.697023228s ago: executing program 5 (id=1210):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000100)='./file1\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,resv_level=000000006,coherency=full,localflocks,coherency=full,noacl,\x00'/136], 0x1, 0x4435, &(0x7f000000cd80)="$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")
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r0, 0x8)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000300)={'#! ', './file1'}, 0xb)
copy_file_range(r3, &(0x7f00000001c0), r2, 0x0, 0xffffffffa003e45b, 0x700000000000000)
creat(&(0x7f0000000380)='./bus\x00', 0x0)

1.684487299s ago: executing program 7 (id=1211):
r0 = syz_open_procfs(0x0, &(0x7f0000000400)='mountinfo\x00')
r1 = epoll_create1(0x80000)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000680)='./file0\x00', 0x12148c5, &(0x7f00000002c0)={[{@utf8no}, {@fat=@flush}, {@shortname_mixed}, {@uni_xlate}, {@shortname_lower}, {@rodir}, {@fat=@quiet}, {@uni_xlate}, {@shortname_mixed}, {@shortname_lower}, {@uni_xlate}, {@uni_xlateno}, {@rodir}, {@utf8}, {@numtail}, {@uni_xlateno}]}, 0x0, 0x2ce, &(0x7f0000000700)="$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")
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x114a0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x40002000})
mkdir(0x0, 0x40)
mount$9p_xen(0x0, 0x0, 0x0, 0x6a78559906a90194, 0x0)
mount$tmpfs(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000004300), 0x1000000, 0x0)

1.624894371s ago: executing program 7 (id=1212):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, r0)
setpgid(0x0, r0)
tkill(r0, 0x7)
wait4(r0, 0x0, 0x0, 0x0)
r1 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x80)
r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000001c00)=r0, 0x12)

1.513198983s ago: executing program 7 (id=1213):
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'vlan1\x00', 0x400})
r2 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0x0)

1.445448395s ago: executing program 7 (id=1215):
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002, 0x0, 0x8000}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000700)=@deltaction={0x14, 0x31, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.364488797s ago: executing program 6 (id=1216):
socket$nl_route(0x10, 0x3, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r1, r1, 0x0, 0x200000)

1.193126901s ago: executing program 0 (id=1217):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, &(0x7f0000000500)={0x14, &(0x7f0000000440)={0x40, 0x30, 0x5f, {0x5f, 0x23, "e00dfafd95f7d1abfaa4eeb2be0d15e8c738d953ab6ccfe422920563de9bf70842529e6c0f450704d67fbf6fae9b03c094b32ad73f26513072a60f42ea4f9e854ae7cc369d6411b8d6887e33bb29581ef5ea3686d0a47139b5329e9325"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x480c}}}, &(0x7f0000000740)={0x2c, &(0x7f0000000540)={0x40, 0x11, 0x9, "0dcf28c3a4ecd4891c"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xfc}, 0x0, &(0x7f0000000700)={0x40, 0x5, 0x6, "b720940904fb"}})
syz_usb_control_io$rtl8150(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2009}}}, &(0x7f0000000340)={0x2c, &(0x7f0000000140)={0x20, 0xe}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000002c0)={0xc0, 0x5, 0x5, "0092cd4a86"}, &(0x7f0000000300)={0x40, 0x5, 0x2, "09b5"}})
syz_emit_ethernet(0x66, &(0x7f0000001a40)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x30, 0x3a, 0x1, @empty, @mcast2, {[], @dest_unreach={0xa0, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000f10000000000000000000218010000202070250000000000202020db1af8ff00010000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000400)='GPL\x00', 0x1}, 0x94)

445.503379ms ago: executing program 4 (id=1218):
r0 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/rcu_normal', 0x82802, 0x8)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dce141802c4dacf162e43ac6126c370ec00000000a04100", [0xffffffff7ffffce8, 0xa]}})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x10000007, 0x71, 0x0, 0xc0fbf901b4cbcb49, 0x13, 0x0, "585633671ffbca2496d5728d0f8f2bfcb2c20f83c6f1fa74940c64d4abfa391b832442b953fc573f4446b09d04892c8343a864c88ace846789292b47ee7a6d8e", "c5f83f1886fb50e0aa000000b8b01c3e296834cc07fac507844c13927171fe7002dc8aada05a7c0bda02f7ff87fdc11bc40300007f8d87f6000000006667c388", "ee221bd6914010cf943aaaf1169be93a8dc7d78055821a5718fd6b88965c471e", [0x3, 0x2]})
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c005090423000103"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000bc0)={0x0, 0x15, 0x3, "c39242"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
userfaultfd(0x80001)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e)
syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRESHEX=0x0, @ANYRES8=r3, @ANYRES16=r3, @ANYRESOCT, @ANYRES64=r3, @ANYRES16=r3], 0x0)

416.85809ms ago: executing program 6 (id=1219):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000040000000400000001"], 0x48)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000040), &(0x7f00000000c0)=@udp6=r2, 0x1}, 0x20)
recvfrom(r2, &(0x7f00000004c0)=""/182, 0xb6, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x5}}, 0x20)

213.333165ms ago: executing program 7 (id=1220):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x810, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x9, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x6, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x81, 0x2}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040)
syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)={0x20, 0xa, 0x28, {0x28, 0x23, "83efb930f0187ff0478fa22a61a54607b71ea9e43d359c479c37f545cb92e4c9c42123ec25cd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
socket(0x10, 0x80002, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1100000000f336, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

138.781967ms ago: executing program 5 (id=1221):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a080006"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)

0s ago: executing program 0 (id=1222):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0xc00, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r1}, 0x38)

kernel console output (not intermixed with test programs):

d state
[   70.242278][ T4338] device bridge_slave_1 entered promiscuous mode
[   70.270383][ T4386] loop2: detected capacity change from 0 to 164
[   70.339385][ T4390] loop1: detected capacity change from 0 to 1024
[   70.362466][ T4237] Bluetooth: hci3: command 0x0409 tx timeout
[   70.399331][ T4386] rock: corrupted directory entry. extent=32, offset=131072, size=237
[   70.459632][ T4338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.511018][ T4390] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   70.525127][ T4338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.678788][ T4338] team0: Port device team_slave_0 added
[   70.728474][ T4338] team0: Port device team_slave_1 added
[   70.832081][ T4338] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.867694][ T4338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.960676][ T4338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.049810][ T4338] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.070410][ T4338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.145757][ T4421] loop1: detected capacity change from 0 to 2048
[   71.158432][ T4338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.173826][ T4425] loop2: detected capacity change from 0 to 1024
[   71.198174][ T4421] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[   71.259378][ T4338] device hsr_slave_0 entered promiscuous mode
[   71.269359][ T4421] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   71.284894][ T4425] EXT4-fs (loop2): Ignoring removed bh option
[   71.295236][ T4338] device hsr_slave_1 entered promiscuous mode
[   71.327439][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[   71.334444][ T1433] ieee802154 phy1 wpan1: encryption failed: -22
[   71.361147][ T4338] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   71.370067][ T4425] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=ignore,max_dir_size_kb=0x0000000000000003,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none.
[   71.395126][ T4338] Cannot create hsr debugfs directory
[   71.501767][ T2285] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   71.751721][ T2285] usb 5-1: Using ep0 maxpacket: 8
[   71.770515][ T4444] kvm: pic: level sensitive irq not supported
[   71.773297][ T4444] kvm: pic: single mode not supported
[   71.802889][ T4444] kvm: pic: single mode not supported
[   71.808345][ T4444] kvm: pic: level sensitive irq not supported
[   71.846210][ T4444] kvm: pic: single mode not supported
[   71.857869][ T4444] kvm: pic: single mode not supported
[   71.863838][ T4444] kvm: pic: level sensitive irq not supported
[   71.871924][ T2285] usb 5-1: config 0 has an invalid interface number: 52 but max is 0
[   71.896433][ T2285] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   71.913206][ T2285] usb 5-1: config 0 has no interface number 0
[   71.919410][ T2285] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[   71.936038][ T2285] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[   71.958854][ T2285] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   72.023382][ T2285] usb 5-1: config 0 interface 52 has no altsetting 0
[   72.091503][ T1279] device hsr_slave_0 left promiscuous mode
[   72.098617][ T1279] device hsr_slave_1 left promiscuous mode
[   72.105853][ T1279] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.115390][ T2285] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[   72.136593][ T1279] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.143820][ T2285] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[   72.143866][ T2285] usb 5-1: Manufacturer: syz
[   72.169005][ T2285] usb 5-1: config 0 descriptor??
[   72.215377][ T1279] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.225728][ T2285] hub 5-1:0.52: bad descriptor, ignoring hub
[   72.236551][ T1279] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.241912][ T2285] hub: probe of 5-1:0.52 failed with error -5
[   72.258422][ T1279] device bridge_slave_1 left promiscuous mode
[   72.279384][ T1279] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.321900][ T1279] device bridge_slave_0 left promiscuous mode
[   72.338423][ T1279] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.379673][ T1279] device veth1_macvtap left promiscuous mode
[   72.388112][ T1279] device veth0_macvtap left promiscuous mode
[   72.395715][ T1279] device veth1_vlan left promiscuous mode
[   72.402136][ T1279] device veth0_vlan left promiscuous mode
[   72.442217][ T4232] Bluetooth: hci3: command 0x041b tx timeout
[   72.453835][ T2285] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[   72.478157][ T2285] synaptics_usb: probe of 5-1:0.52 failed with error -5
[   72.751839][ T4237] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   72.832792][ T1108] usb 5-1: USB disconnect, device number 2
[   72.950886][ T1279] team0 (unregistering): Port device team_slave_1 removed
[   72.974903][ T1279] team0 (unregistering): Port device team_slave_0 removed
[   72.998996][ T1279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   73.016315][ T1279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   73.183969][ T1279] bond0 (unregistering): Released all slaves
[   73.365385][ T4338] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   73.392158][ T4338] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   73.437361][ T4338] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   73.472298][ T4338] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   73.765647][ T4338] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.825973][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   73.877565][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   73.916919][ T4338] 8021q: adding VLAN 0 to HW filter on device team0
[   73.972240][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   74.004655][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   74.024007][ T4383] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.031853][ T4383] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.109750][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   74.139461][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   74.189637][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   74.229643][ T4383] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.236921][ T4383] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.290050][ T4237] usb 1-1: unable to get BOS descriptor or descriptor too short
[   74.300483][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   74.360084][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   74.390765][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   74.421893][ T4237] usb 1-1: unable to read config index 0 descriptor/start: -71
[   74.430325][ T4237] usb 1-1: can't read configurations, error -71
[   74.443374][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   74.474258][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   74.504446][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   74.522619][   T26] Bluetooth: hci3: command 0x040f tx timeout
[   74.549692][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   74.568196][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   74.587275][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   74.614295][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   74.639020][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   74.659211][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   74.707521][ T4526] loop1: detected capacity change from 0 to 4096
[   74.746535][ T4526] =======================================================
[   74.746535][ T4526] WARNING: The mand mount option has been deprecated and
[   74.746535][ T4526]          and is ignored by this kernel. Remove the mand
[   74.746535][ T4526]          option from the mount to silence this warning.
[   74.746535][ T4526] =======================================================
[   74.926292][ T4526] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[   75.015077][ T4526] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[   75.054769][ T4526] ntfs3: loop1: Failed to load $Extend.
[   75.195051][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   75.228387][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   75.262224][ T4338] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.276876][ T4526] ntfs3: loop1: MftZone: unavailable
[   75.315793][ T4544] ntfs3: loop1: MftZone: unavailable
[   75.409315][ T4544] ntfs3: loop1: no free space to extend mft
[   75.445965][ T4526] ntfs3: loop1: MftZone: unavailable
[   75.484196][ T4526] ntfs3: loop1: no free space to extend mft
[   75.529588][ T4551] ntfs3: loop1: MftZone: unavailable
[   75.560572][ T4551] ntfs3: loop1: no free space to extend mft
[   75.614821][ T4555] loop2: detected capacity change from 0 to 512
[   75.675575][ T4555] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.71: invalid indirect mapped block 4294967295 (level 1)
[   75.741483][ T4555] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.71: invalid indirect mapped block 4294967295 (level 1)
[   75.849362][ T4555] EXT4-fs (loop2): 2 truncates cleaned up
[   75.897085][ T4555] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000004004,barrier=0x0000000000000005,,errors=continue. Quota mode: writeback.
[   76.081440][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   76.130661][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   76.214149][ T4338] device veth0_vlan entered promiscuous mode
[   76.221978][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   76.230546][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   76.290301][ T4338] device veth1_vlan entered promiscuous mode
[   76.314123][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   76.326708][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   76.349667][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   76.361832][ T1345] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   76.370613][   T21] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   76.416519][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   76.469007][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   76.487344][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   76.518105][ T4338] device veth0_macvtap entered promiscuous mode
[   76.536251][ T4338] device veth1_macvtap entered promiscuous mode
[   76.590384][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.611153][   T26] Bluetooth: hci3: command 0x0419 tx timeout
[   76.640660][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.650988][   T21] usb 1-1: Using ep0 maxpacket: 8
[   76.677052][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.707373][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.747815][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.768897][ T4586] kvm: pic: non byte write
[   76.777085][   T21] usb 1-1: config 0 has no interfaces?
[   76.791935][ T1345] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   76.808528][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.821746][ T1345] usb 3-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00
[   76.858762][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.867690][ T1345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.897086][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.933753][ T1345] usb 3-1: config 0 descriptor??
[   76.938979][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.003623][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   77.004739][ T1345] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[   77.012281][   T21] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[   77.028644][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   77.038000][   T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.048840][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   77.068439][   T21] usb 1-1: Product: syz
[   77.073737][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   77.085771][   T21] usb 1-1: Manufacturer: syz
[   77.090409][   T21] usb 1-1: SerialNumber: syz
[   77.110094][   T21] usb 1-1: config 0 descriptor??
[   77.198016][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.236184][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.270616][ T4192] usb 3-1: USB disconnect, device number 2
[   77.276806][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.295582][ T4594] loop4: detected capacity change from 0 to 512
[   77.313796][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.326464][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.348939][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.359216][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.381716][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.417903][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.444333][ T4338] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.470981][ T4338] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.520885][ T1345] usb 1-1: USB disconnect, device number 4
[   77.538065][ T4338] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.567345][ T4338] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.593404][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   77.608361][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   77.623058][ T4594] FAT-fs (loop4): error, corrupted file size (i_pos 51, 8960)
[   77.630561][ T4594] FAT-fs (loop4): Filesystem has been set read-only
[   77.686724][ T4594] FAT-fs (loop4): error, corrupted file size (i_pos 51, 8960)
[   77.723683][ T4561] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[   77.771290][ T4594] FAT-fs (loop4): error, corrupted file size (i_pos 51, 8960)
[   77.790744][ T4594] FAT-fs (loop4): error, corrupted file size (i_pos 51, 8960)
[   77.829505][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.867981][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.920846][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   77.999762][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.043220][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.088299][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   78.236335][ T4610] loop1: detected capacity change from 0 to 512
[   78.332987][ T4615] syz.5.24 uses obsolete (PF_INET,SOCK_PACKET)
[   78.351795][ T4610] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[   78.429287][ T4615] netlink: 8 bytes leftover after parsing attributes in process `syz.5.24'.
[   78.481449][ T4610] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[   78.500224][   T25] audit: type=1326 audit(1784916646.164:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4621 comm="syz.2.85" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9958818e99 code=0x0
[   78.514552][ T4610] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   78.987569][ T4639] UBIFS error (pid: 4639): cannot open "./file0", error -22
[   79.037182][ T4641] netlink: 'syz.5.88': attribute type 10 has an invalid length.
[   79.112425][ T4603] loop4: detected capacity change from 0 to 40427
[   79.178627][ T4641] team0: Port device wlan1 added
[   79.249019][ T4603] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff
[   79.311866][ T4603] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4
[   79.364939][ T4603] F2FS-fs (loop4): invalid crc value
[   79.438041][ T4603] F2FS-fs (loop4): Found nat_bits in checkpoint
[   79.582811][ T4653] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   79.674545][ T4603] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   79.733843][ T4267] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   80.001762][ T4267] usb 6-1: Using ep0 maxpacket: 8
[   80.036159][ T4665] loop0: detected capacity change from 0 to 512
[   80.104131][ T4669] process 'syz.1.95' launched './file2' with NULL argv: empty string added
[   80.145694][ T4665] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   80.161950][ T4267] usb 6-1: config 0 has no interfaces?
[   80.251839][ T4665] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   80.276663][ T4669] loop1: detected capacity change from 0 to 1024
[   80.316868][ T4665] EXT4-fs (loop0): 1 truncate cleaned up
[   80.352178][ T4267] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[   80.362027][ T4267] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.374710][ T4267] usb 6-1: Product: syz
[   80.378913][ T4267] usb 6-1: Manufacturer: syz
[   80.383584][ T4267] usb 6-1: SerialNumber: syz
[   80.383887][ T4665] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,init_itable,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[   80.407877][ T4267] usb 6-1: config 0 descriptor??
[   80.493273][ T4669] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   80.711918][ T4665] EXT4-fs error (device loop0): mb_free_blocks:1889: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[   80.737801][ T4267] usb 6-1: USB disconnect, device number 2
[   80.789483][ T4665] EXT4-fs (loop0): Remounting filesystem read-only
[   81.408418][ T4693] loop1: detected capacity change from 0 to 32768
[   81.584008][ T4693] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[   81.625198][ T4693] JBD2: Ignoring recovery information on journal
[   81.668592][ T4718] loop2: detected capacity change from 0 to 512
[   81.788540][ T4718] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[   81.800301][ T4693] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   81.913937][ T4718] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback.
[   82.061907][ T4718] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.183118][ T4718] EXT4-fs error (device loop2): ext4_get_inode_usage:835: inode #12: comm syz.2.104: corrupted xattr block 6
[   82.324455][ T4742] loop4: detected capacity change from 0 to 128
[   82.464075][ T4693] (syz.1.99,4693,1):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount
[   82.630367][ T4750] loop2: detected capacity change from 0 to 512
[   82.708519][ T4750] EXT4-fs (loop2): Ignoring removed orlov option
[   82.719618][ T4189] ocfs2: Unmounting device (7,1) on (node local)
[   82.756544][ T4750] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[   82.788872][ T4750] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.109: corrupted in-inode xattr
[   82.824098][ T4750] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.109: couldn't read orphan inode 15 (err -117)
[   82.891741][ T4750] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000008000000,orlov,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback.
[   83.165468][ T4762] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   83.384515][ T4773] gfs2: gfs2 mount does not exist
[   83.578452][ T4777] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[   83.825194][ T4784] input: syz1 as /devices/virtual/input/input6
[   83.850470][ T4770] loop2: detected capacity change from 0 to 32768
[   83.965322][ T4770] XFS (loop2): Mounting V5 Filesystem
[   84.079387][ T4805] netlink: 4 bytes leftover after parsing attributes in process `syz.5.122'.
[   84.098471][ T4770] XFS (loop2): Ending clean mount
[   84.263344][ T4807] tipc: Started in network mode
[   84.271816][ T4807] tipc: Node identity 9ab231c71f89, cluster identity 4711
[   84.279431][ T4807] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.299797][ T4188] XFS (loop2): Unmounting Filesystem
[   84.314471][ T4807] device syzkaller0 entered promiscuous mode
[   84.378555][ T4806] tipc: Resetting bearer <eth:syzkaller0>
[   84.456109][ T4806] tipc: Disabling bearer <eth:syzkaller0>
[   84.787477][ T4826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.124'.
[   84.799769][ T4826] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[   84.813005][ T4826] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[   84.996151][ T4834] kvm: pic: level sensitive irq not supported
[   84.997182][ T4834] kvm: pic: level sensitive irq not supported
[   85.088082][ T4839] overlayfs: metacopy with no lower data found - abort lookup (/file0)
[   85.417153][ T4855] netlink: 252 bytes leftover after parsing attributes in process `syz.5.139'.
[   85.502474][ T4857] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   85.574536][ T4862] loop5: detected capacity change from 0 to 128
[   85.649728][ T4862] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   85.716295][ T4862] hpfs: filesystem error: improperly stopped
[   85.756643][ T4862] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   85.769092][ T4862] hpfs: You really don't want any checks? You are crazy...
[   85.778215][ T4862] hpfs: Code page index out of array
[   85.786454][ T4862] hpfs: code page support is disabled
[   85.799101][ T4862] hpfs: hpfs_map_4sectors(): unaligned read
[   85.807350][ T4862] hpfs: hpfs_map_4sectors(): unaligned read
[   85.821201][ T4862] hpfs: filesystem error: unable to find root dir
[   85.871445][ T4868] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.915489][ T4874] netlink: 'syz.2.147': attribute type 1 has an invalid length.
[   85.952322][ T4876] bond1: (slave geneve2): Error -99 calling set_mac_address
[   86.056898][ T4868] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.160382][ T4868] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.211164][ T4886] netlink: 14334 bytes leftover after parsing attributes in process `syz.0.149'.
[   86.224974][ T4889] netlink: 12 bytes leftover after parsing attributes in process `syz.5.152'.
[   86.234454][ T4890] netlink: 14334 bytes leftover after parsing attributes in process `syz.0.149'.
[   86.268776][ T4868] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.312292][ T4893] loop5: detected capacity change from 0 to 1024
[   86.393541][ T4868] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.440267][ T4893] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   86.468697][ T4868] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.529114][ T4868] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.548079][ T4868] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.670173][ T4903] loop5: detected capacity change from 0 to 2048
[   86.684858][ T1111] cfg80211: failed to load regulatory.db
[   86.718791][ T4903] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[   86.748215][ T4903] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   86.971733][ T4918] netlink: 24 bytes leftover after parsing attributes in process `syz.5.162'.
[   86.990908][ T4918] netlink: 4 bytes leftover after parsing attributes in process `syz.5.162'.
[   87.047233][ T4921] loop0: detected capacity change from 0 to 16
[   87.079199][ T4923] netlink: 12 bytes leftover after parsing attributes in process `syz.5.165'.
[   87.162637][ T4921] erofs: (device loop0): mounted with root inode @ nid 36.
[   87.212014][ T4929] netlink: 76 bytes leftover after parsing attributes in process `syz.1.168'.
[   87.668762][ T4927] loop5: detected capacity change from 0 to 32768
[   87.676456][ T4939] (unnamed net_device) (uninitialized): up delay (9) is not a multiple of miimon (5), value rounded to 5 ms
[   87.679982][ T4941] tipc: Failed to remove unknown binding: 66,0,0/0:1437829609/1437829610
[   87.719742][ T4939] device ip6gretap1 entered promiscuous mode
[   87.726802][ T4939] bond1: (slave ip6gretap1): no link monitoring support
[   87.737477][ T4939] bond1: (slave ip6gretap1): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details
[   87.760946][ T4939] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[   87.801574][ T4927] XFS (loop5): Mounting V5 Filesystem
[   87.930257][ T4927] XFS (loop5): Ending clean mount
[   88.174723][ T4338] XFS (loop5): Unmounting Filesystem
[   88.393850][ T4985] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   89.155178][ T4999] loop0: detected capacity change from 0 to 32768
[   89.184607][ T4192] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   89.275447][ T4999] XFS (loop0): Mounting V5 Filesystem
[   89.408964][ T4999] XFS (loop0): Ending clean mount
[   89.461822][ T4192] usb 5-1: Using ep0 maxpacket: 16
[   89.537755][   T25] audit: type=1800 audit(1784916657.204:3): pid=4999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.183" name="file1" dev="loop0" ino=4430 res=0 errno=0
[   89.566689][ T4190] XFS (loop0): Unmounting Filesystem
[   89.628609][ T4192] usb 5-1: config 9 has an invalid interface number: 7 but max is 1
[   89.636730][ T4192] usb 5-1: config 9 has an invalid interface number: 242 but max is 1
[   89.645721][ T4192] usb 5-1: config 9 has no interface number 0
[   89.652560][ T4192] usb 5-1: config 9 has no interface number 1
[   89.658666][ T4192] usb 5-1: config 9 interface 7 has no altsetting 0
[   89.667900][ T4192] usb 5-1: config 9 interface 242 has no altsetting 0
[   89.852008][ T4192] usb 5-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=20.ea
[   89.861092][ T4192] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.875275][ T4192] usb 5-1: Product: syz
[   89.879483][ T4192] usb 5-1: Manufacturer: syz
[   89.886124][ T4192] usb 5-1: SerialNumber: syz
[   90.041292][ T5034] __nla_validate_parse: 1 callbacks suppressed
[   90.041309][ T5034] netlink: 24 bytes leftover after parsing attributes in process `syz.0.191'.
[   90.199292][ T5038] loop2: detected capacity change from 0 to 1024
[   90.221457][ T4192] usb 5-1: Expected 3 endpoints, found: 0
[   90.286218][ T5038] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   90.293063][ T4192] sierra 5-1:9.242: Sierra USB modem converter detected
[   90.329502][ T5040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.193'.
[   90.752591][ T5048] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.194: iget: bad extra_isize 36621 (inode size 256)
[   91.352797][ T4192] usb 5-1: Sierra USB modem converter now attached to ttyUSB0
[   91.371852][ T4192] usb 5-1: USB disconnect, device number 3
[   91.396333][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   91.468515][ T4192] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[   91.482828][ T4192] sierra 5-1:9.242: device disconnected
[   91.490931][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   91.529459][ T5038] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.194: iget: bad extra_isize 36621 (inode size 256)
[   91.597831][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   91.645429][ T5052] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   91.748193][ T5057] netlink: 'syz.1.196': attribute type 10 has an invalid length.
[   91.758745][ T5057] device syz_tun entered promiscuous mode
[   91.920247][ T5066] loop0: detected capacity change from 0 to 4096
[   92.782116][ T1111] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   92.990668][ T5087] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   93.046181][ T1111] usb 2-1: Using ep0 maxpacket: 32
[   93.266356][ T5101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.208'.
[   93.309297][ T5101] device bridge_slave_1 left promiscuous mode
[   93.321977][ T1111] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[   93.340047][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.361050][ T5101] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.392586][ T1111] usb 2-1: Product: syz
[   93.401936][ T1111] usb 2-1: Manufacturer: syz
[   93.407258][ T1111] usb 2-1: SerialNumber: syz
[   93.420651][ T5109] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   93.472886][ T1111] usb 2-1: config 0 descriptor??
[   93.519093][ T1111] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[   93.545001][ T5101] device bridge_slave_0 left promiscuous mode
[   93.683308][ T5101] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.682000][   T13] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   95.089598][   T13] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[   95.110979][   T13] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[   95.137790][   T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.239127][   T13] gspca_main: stv0680-2.14.0 probing 041e:4007
[   95.507263][ T5171] netlink: 'syz.0.218': attribute type 3 has an invalid length.
[   95.531060][ T5171] netlink: 'syz.0.218': attribute type 3 has an invalid length.
[   95.552214][ T5171] netlink: 'syz.0.218': attribute type 3 has an invalid length.
[   95.586698][ T5171] netlink: 'syz.0.218': attribute type 3 has an invalid length.
[   95.604726][ T5171] netlink: 'syz.0.218': attribute type 3 has an invalid length.
[   95.634591][ T5171] netlink: 'syz.0.218': attribute type 3 has an invalid length.
[   95.667587][ T5171] netlink: 'syz.0.218': attribute type 3 has an invalid length.
[   95.696176][ T5171] netlink: 'syz.0.218': attribute type 3 has an invalid length.
[   95.726973][ T5171] netlink: 'syz.0.218': attribute type 3 has an invalid length.
[   95.741770][ T1111] gspca_ov534_9: reg_w failed -71
[   96.121878][ T1111] gspca_ov534_9: Unknown sensor 0000
[   96.125101][ T1111] ov534_9: probe of 2-1:0.0 failed with error -22
[   96.171199][ T1111] usb 2-1: USB disconnect, device number 2
[   96.386948][ T5191] loop1: detected capacity change from 0 to 512
[   96.404104][   T13] stv0680 6-1:4.0: Could not get descriptor 0200
[   96.474777][ T5191] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   96.534577][ T5191] EXT4-fs (loop1): 1 truncate cleaned up
[   96.561178][ T5191] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none.
[   96.621888][   T13] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[   96.663229][   T13] stv0680 6-1:4.0: last error: 35,  command = 0x2
[   96.714271][   T13] usb 6-1: USB disconnect, device number 3
[   96.735620][ T5191] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.222: Invalid block bitmap block 3 in block_group 0
[   96.942775][ T5191] EXT4-fs (loop1): Remounting filesystem read-only
[   96.954837][ T5191] EXT4-fs error (device loop1): ext4_discard_preallocations:5142: comm syz.1.222: Error -117 reading block bitmap for 0
[   96.982008][ T5205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.224'.
[   96.988533][ T5191] EXT4-fs (loop1): Remounting filesystem read-only
[   97.015964][ T5191] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #15: comm syz.1.222: invalid indirect mapped block 38 (level 1)
[   97.056034][ T5191] EXT4-fs (loop1): Remounting filesystem read-only
[   97.094649][ T5191] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem
[   97.130152][ T5202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.224'.
[   97.157890][ T5191] EXT4-fs (loop1): Remounting filesystem read-only
[   97.175191][ T5191] EXT4-fs error (device loop1): ext4_truncate:4286: inode #15: comm syz.1.222: mark_inode_dirty error
[   97.227189][ T5217] tipc: Started in network mode
[   97.243595][ T5217] tipc: Node identity 4, cluster identity 4711
[   97.251787][ T5217] tipc: Node number set to 4
[   97.259772][ T5191] EXT4-fs (loop1): Remounting filesystem read-only
[   97.329080][ T5191] EXT4-fs error (device loop1) in ext4_setattr:5645: Corrupt filesystem
[   97.433291][ T5191] EXT4-fs (loop1): Remounting filesystem read-only
[   98.878625][ T5253] sch_tbf: burst 21990 is lower than device lo mtu (65550) !
[  100.730606][ T5284] overlayfs: statfs failed on './file0'
[  101.359284][ T5312] loop5: detected capacity change from 0 to 128
[  101.545701][ T5316] loop1: detected capacity change from 0 to 256
[  101.792787][ T5334] netlink: 12 bytes leftover after parsing attributes in process `syz.5.255'.
[  102.035744][ T5344] validate_nla: 45 callbacks suppressed
[  102.035760][ T5344] netlink: 'syz.5.259': attribute type 1 has an invalid length.
[  102.210169][ T5344] 8021q: adding VLAN 0 to HW filter on device bond1
[  102.489527][ T5370] netlink: 236 bytes leftover after parsing attributes in process `syz.0.264'.
[  102.697454][ T5376] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  102.739891][ T5386] loop0: detected capacity change from 0 to 256
[  102.861439][ T5386] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04ab0af5, utbl_chksum : 0xe619d30d)
[  103.020602][ T5395] binder: 5393:5395 ioctl c0306201 200000000080 returned -14
[  103.078189][ T5395] binder: 5393:5395 ioctl c0306201 2000000003c0 returned -14
[  103.293425][ T5411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.272'.
[  103.977515][ T5434] capability: warning: `syz.0.281' uses deprecated v2 capabilities in a way that may be insecure
[  104.034950][ T5437] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.282'.
[  105.137905][   T25] audit: type=1326 audit(1784916672.804:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.5.288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4044b4be99 code=0x0
[  105.551770][ T4231] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  105.942087][ T4231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.968251][ T4231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.017821][ T4231] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  106.036505][ T4231] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  106.047032][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.074455][ T4231] usb 1-1: config 0 descriptor??
[  106.536200][ T4231] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[  106.601085][ T5479] loop2: detected capacity change from 0 to 4096
[  106.606155][ T4231] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  106.736823][ T5483] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  106.855821][ T4233] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  107.019482][   T13] usb 1-1: USB disconnect, device number 5
[  107.182195][ T5489] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  107.242230][ T4233] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  107.255658][ T4233] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  107.325688][ T5495] loop2: detected capacity change from 0 to 256
[  107.421934][ T4233] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  107.436503][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.451419][ T4233] usb 2-1: Product: syz
[  107.456320][ T4233] usb 2-1: Manufacturer: syz
[  107.461135][ T4233] usb 2-1: SerialNumber: syz
[  107.480759][ T4233] usb 2-1: config 0 descriptor??
[  107.502017][ T5481] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  107.510845][ T5481] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  107.748081][ T5481] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  107.767485][ T5481] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  108.002560][   T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  108.247305][   T13] usb 3-1: Using ep0 maxpacket: 32
[  108.272491][ T5513] loop5: detected capacity change from 0 to 512
[  108.328650][ T5513] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  108.359370][ T5513] ext4 filesystem being mounted at /50/file7 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.388036][   T13] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  108.410198][   T13] usb 3-1: config 0 has no interface number 0
[  108.421578][ T5513] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.307: Unrecognised inode hash code 20
[  108.428278][ T4181] udevd[4181]: incorrect ext4 checksum on /dev/loop5
[  108.435662][ T5513] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.307: Corrupt directory, running e2fsck is recommended
[  108.456062][ T5513] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.307: Unrecognised inode hash code 20
[  108.467908][ T5513] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.307: Corrupt directory, running e2fsck is recommended
[  108.476183][   T13] usb 3-1: config 0 interface 184 has no altsetting 0
[  108.498339][ T5513] EXT4-fs error (device loop5): ext4_validate_inode_bitmap:106: comm syz.5.307: Corrupt inode bitmap - block_group = 0, inode_bitmap = 18
[  108.682357][   T13] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  108.691466][   T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.703539][   T13] usb 3-1: Product: syz
[  108.707760][   T13] usb 3-1: Manufacturer: syz
[  108.712692][   T13] usb 3-1: SerialNumber: syz
[  108.741026][   T13] usb 3-1: config 0 descriptor??
[  108.792772][   T13] smsc75xx v1.0.0
[  109.141722][ T4232] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  109.309976][ T5542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'.
[  109.452033][   T13] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  109.475539][   T13] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  109.557285][ T4232] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  109.575653][ T4232] usb 6-1: config 0 has no interface number 0
[  109.772052][ T4232] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  109.784726][ T4232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.797256][ T4232] usb 6-1: Product: syz
[  109.801466][ T4232] usb 6-1: Manufacturer: syz
[  109.811165][ T4232] usb 6-1: SerialNumber: syz
[  109.820014][ T4232] usb 6-1: config 0 descriptor??
[  109.901891][ T4233] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[  109.956986][ T4233] dm9601 2-1:0.0 eth5: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 06:00:00:00:00:00
[  110.028971][ T4233] usb 2-1: USB disconnect, device number 3
[  110.047347][ T4233] dm9601 2-1:0.0 eth5: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet
[  110.081846][ T4232] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  110.132152][ T4232] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  110.162106][ T4232] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  110.170528][ T4232] usb 6-1: media controller created
[  110.245530][ T4232] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  110.758252][ T5573] loop1: detected capacity change from 0 to 164
[  110.808080][ T5573] ISOFS: unable to read i-node block
[  110.828050][ T5573] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  110.861909][   T13] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  110.880374][   T13] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  110.904284][   T13] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  110.918810][   T13] smsc75xx: probe of 3-1:0.184 failed with error -71
[  110.937812][   T13] usb 3-1: USB disconnect, device number 3
[  111.363839][ T4232] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[  111.437667][ T4232] usb 6-1: USB disconnect, device number 4
[  112.196861][ T5592] chnl_net:caif_netlink_parms(): no params data found
[  112.476152][ T5608] sch_tbf: burst 1520 is lower than device lo mtu (65550) !
[  112.590933][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.613915][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.641265][ T5592] device bridge_slave_0 entered promiscuous mode
[  112.649915][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.658628][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.666754][ T5592] device bridge_slave_1 entered promiscuous mode
[  112.693908][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  112.707581][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  112.739963][ T5592] team0: Port device team_slave_0 added
[  112.748017][ T5592] team0: Port device team_slave_1 added
[  112.771136][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0
[  112.791664][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.820955][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  112.836156][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1
[  112.845167][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.881897][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  112.954847][ T5592] device hsr_slave_0 entered promiscuous mode
[  112.972262][ T5592] device hsr_slave_1 entered promiscuous mode
[  112.981218][ T5592] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  112.999424][ T5592] Cannot create hsr debugfs directory
[  113.189155][ T5592] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  113.209750][ T5592] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  113.226418][ T5592] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  113.238755][ T5592] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  113.298832][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.305985][ T5592] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.313919][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.321093][ T5592] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.412433][   T26] Bluetooth: hci2: command 0x0409 tx timeout
[  113.503766][ T1279] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.594053][ T1279] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.040718][ T5644] Zero length message leads to an empty skb
[  114.194827][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.225597][ T5118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  114.230708][ T5649] loop2: detected capacity change from 0 to 1024
[  114.242730][ T5118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  114.253776][ T5592] 8021q: adding VLAN 0 to HW filter on device team0
[  114.264228][ T5653] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.354'.
[  114.278924][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  114.299734][ T5649] EXT4-fs (loop2): Ignoring removed oldalloc option
[  114.318713][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  114.327476][ T5649] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[  114.328182][ T1279] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.344065][ T1279] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.363183][ T5649] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (40000)
[  114.444442][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  114.510920][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  114.571798][ T1279] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.578929][ T1279] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.600704][ T2285] hid-generic 0005:0007:0009.0002: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa
[  114.660974][ T5666] fido_id[5666]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci2/hci2:200/report_descriptor': No such file or directory
[  114.720829][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  114.745757][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  114.787730][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  114.805579][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  114.840328][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  114.871454][ T5592] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  114.918252][ T5592] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  114.941847][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  114.950896][ T5676] binder: 5675:5676 unknown command 0
[  114.961082][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  114.968476][ T5676] binder: 5675:5676 ioctl c0306201 200000000080 returned -22
[  115.009512][ T5676] binder: BINDER_SET_CONTEXT_MGR already set
[  115.030194][ T5676] binder: 5675:5676 ioctl 4018620d 2000000002c0 returned -16
[  115.032611][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  115.056400][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  115.066034][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  115.076598][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  115.115483][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  115.210197][ T5687] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  115.239344][ T5687] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  115.275578][ T5687] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  115.314028][ T5687] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  115.355028][ T5687] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  115.383828][ T5687] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  115.408075][ T5687] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  115.492507][   T26] Bluetooth: hci2: command 0x041b tx timeout
[  115.541010][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.549368][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  115.570655][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  116.620810][ T5441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  116.639987][ T5441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  116.699626][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  116.718342][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  116.752475][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  116.772575][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  116.783816][ T5592] device veth0_vlan entered promiscuous mode
[  116.799150][ T5713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.374'.
[  116.830672][ T5592] device veth1_vlan entered promiscuous mode
[  116.868646][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  116.886236][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  116.899622][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  116.919785][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  116.948850][ T5592] device veth0_macvtap entered promiscuous mode
[  116.980418][ T5592] device veth1_macvtap entered promiscuous mode
[  117.065363][ T5592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  117.084106][ T5592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.101173][ T5592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  117.118307][ T5592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.129876][ T5592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  117.147834][ T5592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.158237][ T5592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  117.177195][ T5592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.188006][ T5592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  117.215851][ T5592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.229608][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.246699][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  117.260724][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  117.275978][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  117.288062][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  117.312141][ T1345] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  117.321366][ T5592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.338214][ T5592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.348625][ T5592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.359926][ T5592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.371525][ T5592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.385089][ T5592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.405712][ T5592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.426837][ T5592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.447511][ T5592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.462050][ T5592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.480171][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.510062][ T5732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.380'.
[  117.549553][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  117.567685][   T26] Bluetooth: hci2: command 0x040f tx timeout
[  117.581597][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  117.581818][ T1345] usb 6-1: Using ep0 maxpacket: 32
[  117.599919][ T5592] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.619649][ T5592] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.629211][ T5592] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.650064][ T5592] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.701942][ T1345] usb 6-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.723731][ T1345] usb 6-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  117.751884][ T1345] usb 6-1: config 0 interface 0 has no altsetting 0
[  117.758559][ T1345] usb 6-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00
[  117.791800][ T1345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.824753][ T1345] usb 6-1: config 0 descriptor??
[  117.864901][ T5441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.888094][ T5441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.920261][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  117.940735][ T5239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.970443][ T5239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.982592][ T5441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  118.144811][ T5745] netlink: 'syz.6.384': attribute type 1 has an invalid length.
[  118.272116][ T5748] netlink: 'syz.6.384': attribute type 10 has an invalid length.
[  118.290320][ T5748] netlink: 40 bytes leftover after parsing attributes in process `syz.6.384'.
[  118.304518][ T1345] hid-generic 0003:0458:5014.0003: item fetching failed at offset 5/39
[  118.323234][ T1345] hid-generic: probe of 0003:0458:5014.0003 failed with error -22
[  118.342070][ T5748] device dummy0 entered promiscuous mode
[  118.430038][ T5748] syz.6.384 (5748) used greatest stack depth: 20512 bytes left
[  118.634016][ T5723] udc-core: couldn't find an available UDC or it's busy
[  118.662988][ T5723] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  118.842520][   T26] usb 6-1: USB disconnect, device number 5
[  119.652786][ T4231] Bluetooth: hci2: command 0x0419 tx timeout
[  119.764375][ T5765] netlink: 76 bytes leftover after parsing attributes in process `syz.0.391'.
[  119.956800][ T5775] device geneve2 entered promiscuous mode
[  119.976111][ T5767] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  120.003508][ T5767] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  120.533201][   T25] audit: type=1804 audit(1784916688.194:5): pid=5788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.398" name="/newroot/80/file0" dev="fuse" ino=1 res=1 errno=0
[  120.580468][ T5799] tipc: Failed to remove unknown binding: 66,0,0/0:748736383/748736385
[  120.635935][ T5799] tipc: Failed to remove unknown binding: 66,0,0/0:748736383/748736384
[  120.768215][ T1345] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  121.012086][ T1345] usb 7-1: Using ep0 maxpacket: 8
[  121.043744][ T5814] 
[  121.172117][ T1345] usb 7-1: unable to get BOS descriptor or descriptor too short
[  121.271773][ T1345] usb 7-1: config 15 has an invalid interface number: 234 but max is 0
[  121.284951][ T1345] usb 7-1: config 15 has no interface number 0
[  121.297539][ T1345] usb 7-1: config 15 interface 234 has no altsetting 0
[  121.427540][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.434904][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.461950][ T1345] usb 7-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=20.aa
[  121.480345][ T1345] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.491821][ T4192] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  121.544927][ T1345] usb 7-1: Product: syz
[  121.554755][ T1345] usb 7-1: Manufacturer: syz
[  121.562978][ T1345] usb 7-1: SerialNumber: syz
[  121.865029][ T4192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  121.910747][ T4192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  121.940206][ T5792] IPVS: nq: FWM 3 0x00000003 - no destination available
[  121.947302][ T4192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  121.947334][ T4192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  122.092724][ T1345] pl2303 7-1:15.234: required endpoints missing
[  122.101972][ T4192] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  122.129454][ T1345] usb 7-1: USB disconnect, device number 2
[  122.135622][ T4192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.177584][ T4192] usb 6-1: Product: syz
[  122.182011][ T4192] usb 6-1: Manufacturer: syz
[  122.186632][ T4192] usb 6-1: SerialNumber: syz
[  122.237761][ T4192] usb 6-1: config 0 descriptor??
[  122.295679][ T5823] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.349963][ T5823] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.525385][ T4192] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  122.737689][   T13] usb 6-1: USB disconnect, device number 6
[  122.981522][ T5823] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.991000][ T5823] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.000339][ T5823] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.016076][ T5823] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.205539][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.231504][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.561493][ T5873] kvm: pic: single mode not supported
[  124.564854][ T5873] kvm: pic: non byte read
[  124.619005][ T5873] kvm: pic: single mode not supported
[  124.619023][ T5873] kvm: pic: level sensitive irq not supported
[  124.667253][ T5879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.431'.
[  124.682591][ T5873] kvm: pic: single mode not supported
[  124.682609][ T5873] kvm: pic: level sensitive irq not supported
[  124.700399][ T5873] kvm: pic: level sensitive irq not supported
[  125.127582][ T5873] kvm: pic: level sensitive irq not supported
[  125.591598][ T5873] kvm: pic: level sensitive irq not supported
[  125.612094][ T5873] kvm: pic: single mode not supported
[  125.618238][ T5873] kvm: pic: level sensitive irq not supported
[  126.120929][ T5906] overlayfs: failed to clone upperpath
[  126.291790][ T4231] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  126.584783][ T5912] 9pnet: Insufficient options for proto=fd
[  126.722002][ T4231] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  126.751508][ T4231] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  126.861964][ T4231] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  126.871097][ T4231] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  126.917367][ T5923] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  126.921687][ T4231] usb 6-1: SerialNumber: syz
[  127.277035][ T4231] usb 6-1: 0:2 : does not exist
[  127.293008][ T5942] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.448'.
[  127.321056][ T5937] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.448'.
[  127.367839][ T4231] usb 6-1: USB disconnect, device number 7
[  127.677278][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  128.148827][ T5963] kvm: pic: non byte write
[  128.540315][ T5975] loop2: detected capacity change from 0 to 512
[  128.630748][ T5980] loop5: detected capacity change from 0 to 256
[  128.689349][ T5975] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960)
[  128.716788][ T5975] FAT-fs (loop2): Filesystem has been set read-only
[  128.727645][ T5975] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960)
[  128.739355][ T5975] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960)
[  128.798118][ T5980] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9435e31, utbl_chksum : 0xe619d30d)
[  128.810385][ T5975] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960)
[  129.107114][ T5988] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  130.146972][ T6005] loop2: detected capacity change from 0 to 40427
[  130.248425][ T6005] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff
[  130.267195][ T6005] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4
[  130.301238][ T6005] F2FS-fs (loop2): invalid crc value
[  130.313381][ T6005] F2FS-fs (loop2): Found nat_bits in checkpoint
[  130.501792][ T6005] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  131.601528][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.488'.
[  131.699983][ T6049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.488'.
[  131.930656][   T25] audit: type=1326 audit(1784916699.594:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6055 comm="syz.6.490" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0f3638e99 code=0x0
[  132.230941][ T6066] UBIFS error (pid: 6066): cannot open "./file0", error -22
[  132.246278][ T6068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.496'.
[  132.278668][ T6068] 8021q: adding VLAN 0 to HW filter on device bond1
[  132.306175][ T6072] bond1: (slave vlan2): Error -34 calling dev_set_mtu
[  132.412426][ T6076] overlayfs: failed to clone upperpath
[  132.588322][ T6086] netlink: 'syz.4.503': attribute type 10 has an invalid length.
[  132.605925][ T6086] team0: Port device wlan1 added
[  132.773645][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[  132.780310][ T1433] ieee802154 phy1 wpan1: encryption failed: -22
[  132.959875][ T6094] netlink: 12 bytes leftover after parsing attributes in process `syz.6.507'.
[  133.447045][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.509'.
[  133.797075][ T6115] loop2: detected capacity change from 0 to 1024
[  133.876137][ T6115] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  134.600234][ T6136] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  135.047470][ T6157] binder: BINDER_SET_CONTEXT_MGR already set
[  135.068940][ T6159] loop5: detected capacity change from 0 to 7
[  135.081846][ T6157] binder: 6156:6157 ioctl 4018620d 200000004a80 returned -16
[  135.106109][ T6159]  loop5:
[  135.109523][ T6159] loop5: partition table partially beyond EOD, truncated
[  135.291492][ T6168] loop5: detected capacity change from 0 to 512
[  135.387190][ T6168] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[  135.471294][ T6168] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback.
[  135.493301][ T6168] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  135.597320][ T6168] EXT4-fs error (device loop5): ext4_get_inode_usage:835: inode #12: comm syz.5.531: corrupted xattr block 6
[  136.094904][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.545'.
[  136.489132][ T6212] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  136.505858][ T6212] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  136.950973][ T6226] Core dump to core aborted: cannot preserve file permissions
[  138.337405][ T6282] binder: 6280:6282 ioctl c0306201 200000000080 returned -14
[  138.396612][ T6282] binder: 6280:6282 ioctl c0306201 2000000003c0 returned -14
[  138.622389][ T6289] netlink: 11834 bytes leftover after parsing attributes in process `syz.5.578'.
[  138.653700][ T6289] netlink: 'syz.5.578': attribute type 25 has an invalid length.
[  138.661474][ T6289] netlink: 'syz.5.578': attribute type 27 has an invalid length.
[  138.694703][ T6289] netlink: 'syz.5.578': attribute type 28 has an invalid length.
[  138.722687][ T6289] netlink: 'syz.5.578': attribute type 29 has an invalid length.
[  138.751834][ T6289] netlink: 'syz.5.578': attribute type 30 has an invalid length.
[  138.944389][ T6293] netlink: 'syz.5.579': attribute type 1 has an invalid length.
[  138.986287][ T6238] loop6: detected capacity change from 0 to 32768
[  139.021580][ T4192] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  139.084935][ T6297] bond2: (slave geneve2): Error -99 calling set_mac_address
[  139.191168][ T4192] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  139.238825][ T6238] XFS (loop6): Mounting V5 Filesystem
[  139.522149][ T6238] XFS (loop6): Ending clean mount
[  139.746857][ T5592] XFS (loop6): Unmounting Filesystem
[  139.929211][ T6314] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.090686][ T6314] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.129174][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.5.586'.
[  140.148001][ T6320] loop5: detected capacity change from 0 to 128
[  140.268868][ T6314] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.315016][ T6323] netlink: 8 bytes leftover after parsing attributes in process `syz.5.586'.
[  140.386723][ T6314] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.612863][ T6314] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.640382][ T6314] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.666098][ T6314] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.694994][ T6314] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.771722][   T13] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  140.894289][ T6341] bond2: (slave ip6gretap1): making interface the new active one
[  140.906813][ T6341] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  141.131783][   T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  141.151739][   T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.161533][   T13] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  141.191699][   T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.218649][   T13] usb 3-1: config 0 descriptor??
[  141.442572][ T6356] loop5: detected capacity change from 0 to 2048
[  141.512315][ T6356] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,quota,delalloc,. Quota mode: writeback.
[  141.536112][ T6356] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  141.651798][ T1345] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  141.673157][ T6359] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set
[  141.696892][ T6359] EXT4-fs (loop5): Remounting filesystem read-only
[  141.910945][ T6364] loop5: detected capacity change from 0 to 136
[  142.011785][ T1345] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  142.028765][ T1345] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  142.052216][ T1345] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  142.161969][ T1345] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  142.171062][ T1345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  142.209940][ T1345] usb 1-1: SerialNumber: syz
[  142.262815][ T1345] cdc_ether 1-1:1.0: skipping garbage
[  142.268237][ T1345] cdc_ether 1-1:1.0: invalid descriptor buffer length
[  142.275473][ T1345] usb 1-1: bad CDC descriptors
[  142.477825][ T4233] usb 1-1: USB disconnect, device number 6
[  142.625416][   T13] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0005/input/input7
[  142.637378][ T1345] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  142.734596][   T13] uclogic 0003:256C:006D.0005: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input0
[  142.857730][ T4233] usb 3-1: USB disconnect, device number 4
[  142.909354][ T6374] fido_id[6374]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  143.552641][ T6387] netlink: 168 bytes leftover after parsing attributes in process `syz.2.609'.
[  143.590595][ T6389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.610'.
[  143.861762][ T1345] usb 6-1: unable to get BOS descriptor or descriptor too short
[  143.991850][ T1345] usb 6-1: unable to read config index 0 descriptor/start: -71
[  144.008009][ T1345] usb 6-1: can't read configurations, error -71
[  145.121823][ T1345] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  145.361738][ T1345] usb 6-1: Using ep0 maxpacket: 16
[  145.481979][ T1345] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  145.505270][ T1345] usb 6-1: config 0 has no interface number 0
[  145.683014][ T1345] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  145.701443][ T1345] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.738805][ T1345] usb 6-1: Product: syz
[  145.750054][ T1345] usb 6-1: Manufacturer: syz
[  145.755428][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.630'.
[  145.760043][ T1345] usb 6-1: SerialNumber: syz
[  145.804196][ T1345] usb 6-1: config 0 descriptor??
[  145.857966][ T1345] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  146.004941][ T6447] netlink: 'syz.6.634': attribute type 3 has an invalid length.
[  146.022241][ T6447] netlink: 'syz.6.634': attribute type 3 has an invalid length.
[  146.058306][ T6447] netlink: 'syz.6.634': attribute type 3 has an invalid length.
[  146.082430][ T6447] netlink: 'syz.6.634': attribute type 3 has an invalid length.
[  146.109079][ T6447] netlink: 'syz.6.634': attribute type 3 has an invalid length.
[  146.139595][ T6447] netlink: 'syz.6.634': attribute type 3 has an invalid length.
[  146.163996][ T6447] netlink: 'syz.6.634': attribute type 3 has an invalid length.
[  146.190202][ T6447] netlink: 'syz.6.634': attribute type 3 has an invalid length.
[  146.220198][ T6447] netlink: 'syz.6.634': attribute type 3 has an invalid length.
[  146.257542][ T6447] netlink: 'syz.6.634': attribute type 3 has an invalid length.
[  146.764014][ T6449] chnl_net:caif_netlink_parms(): no params data found
[  147.170447][ T6449] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.178641][ T6449] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.226127][ T6449] device bridge_slave_0 entered promiscuous mode
[  147.281938][ T6449] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.328855][ T6449] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.353103][ T6449] device bridge_slave_1 entered promiscuous mode
[  147.504020][ T6449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  147.522643][ T6449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  147.564316][ T5441] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.615652][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz.6.639'.
[  147.665303][ T6449] team0: Port device team_slave_0 added
[  147.707711][ T5441] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.735649][ T6449] team0: Port device team_slave_1 added
[  147.770222][ T6449] batman_adv: batadv0: Adding interface: batadv_slave_0
[  147.777512][ T6449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.827187][ T1345] gspca_spca1528: reg_r err -71
[  147.829280][ T6475] netlink: 12 bytes leftover after parsing attributes in process `syz.6.641'.
[  147.832341][ T1345] spca1528: probe of 6-1:0.1 failed with error -71
[  147.843031][ T1345] usb 6-1: USB disconnect, device number 9
[  147.866464][ T6449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  147.928303][ T5441] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.955553][ T6449] batman_adv: batadv0: Adding interface: batadv_slave_1
[  147.963543][ T6449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.990888][ T6449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  148.019634][ T6477] device bridge0 entered promiscuous mode
[  148.041299][ T6481] overlayfs: failed to clone upperpath
[  148.052061][ T5441] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.106401][ T6449] device hsr_slave_0 entered promiscuous mode
[  148.132968][ T6449] device hsr_slave_1 entered promiscuous mode
[  148.145412][ T6449] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  148.161771][ T6449] Cannot create hsr debugfs directory
[  148.362541][   T21] Bluetooth: hci1: command 0x0409 tx timeout
[  148.535733][ T6449] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  148.549834][ T6449] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  148.582763][ T6449] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  148.630376][ T6449] netdevsim netdevsim7 netdevsim3: renamed from eth3
��
���� 
 �
/dev/fusefd=0x0000000000000003,rootmode=00000000000000000040000,user_id=00000000000000000[  148.768941][   T21] usb 6-1: new high-speed USB device number 10 using dummy_hcd
000,group_id=00000000000000000000P)��F�@s��� [  148.868768][ T6449] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.891812][ T6512] overlayfs: failed to clone upperpath
[  148.937376][ T5118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  148.959525][ T5118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  148.994197][ T6449] 8021q: adding VLAN 0 to HW filter on device team0
[  149.040300][ T5118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  149.052175][   T21] usb 6-1: Using ep0 maxpacket: 32
[  149.067021][ T5118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  149.081045][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.089411][ T5118] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.183551][ T6519] input: syz1 as /devices/virtual/input/input8
[  149.190480][ T5118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  149.201016][ T5118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  149.208365][   T21] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[  149.211134][ T5118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  149.226503][   T21] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  149.237558][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.244737][ T5118] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.248809][   T21] usb 6-1: config 0 has no interface number 0
[  149.260630][ T5118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  149.279633][ T5118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  149.320710][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  149.340707][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  149.355519][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  149.367229][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  149.377235][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  149.386399][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  149.399728][ T6449] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  149.422791][ T6449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  149.438259][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  149.454270][   T21] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02
[  149.456450][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  149.473303][   T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.482450][   T21] usb 6-1: Product: syz
[  149.486798][   T21] usb 6-1: Manufacturer: syz
[  149.489634][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  149.494108][   T21] usb 6-1: SerialNumber: syz
[  149.514163][   T21] usb 6-1: config 0 descriptor??
[  149.570173][   T21] gspca_main: xirlink-cit-2.14.0 probing 0545:8080
[  149.601009][   T21] input: xirlink-cit as /devices/platform/dummy_hcd.5/usb6/6-1/input/input9
[  149.647231][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.6.659'.
[  149.918710][ T5441] device hsr_slave_0 left promiscuous mode
[  149.952826][ T5441] device hsr_slave_1 left promiscuous mode
[  149.962572][   T21] usb 6-1: USB disconnect, device number 10
[  149.990856][ T5441] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.021534][ T5441] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.053651][ T5441] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.053710][ T5441] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.118738][ T5441] device veth1_macvtap left promiscuous mode
[  150.118855][ T5441] device veth0_macvtap left promiscuous mode
[  150.118943][ T5441] device veth1_vlan left promiscuous mode
[  150.119013][ T5441] device veth0_vlan left promiscuous mode
[  150.442616][ T4267] Bluetooth: hci1: command 0x041b tx timeout
[  150.463146][ T5441] bond1 (unregistering): Released all slaves
[  151.428181][ T5441] team0 (unregistering): Port device team_slave_1 removed
[  151.513618][ T5441] team0 (unregistering): Port device team_slave_0 removed
[  151.574519][ T6556] fuse: Bad value for 'fd'
[  151.580701][ T5441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  151.605434][ T5441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  151.616265][ T6577] loop5: detected capacity change from 0 to 1024
[  151.666584][ T6577] EXT4-fs (loop5): Ignoring removed bh option
[  151.688340][ T6577] EXT4-fs (loop5): Ignoring removed bh option
[  151.804903][ T5441] bond0 (unregistering): Released all slaves
[  151.879655][ T6559] netlink: 12 bytes leftover after parsing attributes in process `syz.6.665'.
[  151.892583][ T6577] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,bh,min_batch_time=0x0000000000000008,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none.
[  152.174845][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  152.248369][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  152.523188][ T1345] Bluetooth: hci1: command 0x040f tx timeout
[  152.548396][ T6449] 8021q: adding VLAN 0 to HW filter on device batadv0
[  152.733351][ T6594] validate_nla: 43 callbacks suppressed
[  152.733368][ T6594] netlink: 'syz.6.672': attribute type 12 has an invalid length.
[  153.080066][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.676'.
[  153.202835][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  153.230403][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  153.332174][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  153.371071][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  153.428313][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  153.446857][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  153.505017][ T6449] device veth0_vlan entered promiscuous mode
[  153.528420][ T6629] netlink: 2036 bytes leftover after parsing attributes in process `syz.0.680'.
[  153.567380][ T6629] netlink: 24 bytes leftover after parsing attributes in process `syz.0.680'.
[  153.595398][ T6449] device veth1_vlan entered promiscuous mode
[  153.694799][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  153.716371][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  153.760612][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  153.776039][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  153.827310][ T6449] device veth0_macvtap entered promiscuous mode
[  153.864527][ T6449] device veth1_macvtap entered promiscuous mode
[  153.914851][ T6449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.948556][ T6449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.992519][ T6449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  154.029335][ T6449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.039751][ T6449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  154.050672][ T6449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.076711][ T6449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  154.090113][ T6449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.119425][ T6449] batman_adv: batadv0: Interface activated: batadv_slave_0
[  154.416373][ T6449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.737560][ T4192] Bluetooth: hci1: command 0x0419 tx timeout
[  154.762333][ T6449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.772539][ T6449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.784140][ T6449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.794334][ T6449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.805462][ T6449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.815657][ T6449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.826535][ T6449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.838173][ T6449] batman_adv: batadv0: Interface activated: batadv_slave_1
[  154.872698][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  154.927847][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  154.945840][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  154.957699][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  154.990124][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  155.016901][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  155.053218][ T6449] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.102909][ T6449] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.126805][ T6449] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.148245][ T6449] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.194074][ T6666] af_packet: tpacket_rcv: packet too big, clamped from 65354 to 4294967272. macoff=96
[  155.491569][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.522697][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.585684][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  155.669589][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.712963][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.745039][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  156.204603][ T6691] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  156.223531][ T6703] raw_sendmsg: syz.4.700 forgot to set AF_INET. Fix it!
[  157.675475][ T6739] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  158.030396][ T6755] gfs2: gfs2 mount does not exist
[  158.360875][ T6766] loop6: detected capacity change from 0 to 1764
[  158.613499][ T6778] loop5: detected capacity change from 0 to 512
[  158.760664][ T6778] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  158.826616][ T6778] ext4 filesystem being mounted at /120/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.304177][ T6805] tipc: Failed to remove unknown binding: 66,0,0/0:3478990019/3478990020
[  159.500226][   T25] audit: type=1326 audit(1784916727.164:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="syz.7.732" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5dc7ae3e99 code=0x0
[  160.447984][ T6856] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  161.041885][ T6884] IPVS: Scheduler module ip_vs_sip not found
[  161.123316][   T26] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  161.147146][ T6892] overlayfs: filesystem on './cgroup' not supported
[  161.332387][ T6866] loop6: detected capacity change from 0 to 32768
[  161.371034][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.759'.
[  161.382367][   T26] usb 8-1: Using ep0 maxpacket: 16
[  161.480035][ T6866] XFS (loop6): Mounting V5 Filesystem
[  161.512325][   T26] usb 8-1: config 0 has an invalid interface number: 105 but max is 0
[  161.551602][   T26] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  161.642735][   T26] usb 8-1: config 0 has no interface number 0
[  161.766132][ T6866] XFS (loop6): Ending clean mount
[  161.852526][   T26] usb 8-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  161.871868][   T26] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.879937][   T26] usb 8-1: Product: syz
[  161.906174][   T26] usb 8-1: Manufacturer: syz
[  161.942809][   T26] usb 8-1: SerialNumber: syz
[  161.973699][   T26] usb 8-1: config 0 descriptor??
[  162.061137][ T5592] XFS (loop6): Unmounting Filesystem
[  162.261480][ T1345] usb 8-1: USB disconnect, device number 2
[  163.057559][ T6982] netlink: 'syz.7.775': attribute type 3 has an invalid length.
[  163.093117][ T6982] netlink: 'syz.7.775': attribute type 3 has an invalid length.
[  163.109000][ T6982] netlink: 'syz.7.775': attribute type 3 has an invalid length.
[  163.122248][ T6982] netlink: 'syz.7.775': attribute type 3 has an invalid length.
[  163.140833][ T6982] netlink: 'syz.7.775': attribute type 3 has an invalid length.
[  163.163043][ T6982] netlink: 'syz.7.775': attribute type 3 has an invalid length.
[  163.201321][ T6982] netlink: 'syz.7.775': attribute type 3 has an invalid length.
[  163.263194][ T6982] netlink: 'syz.7.775': attribute type 3 has an invalid length.
[  163.295918][ T6982] netlink: 'syz.7.775': attribute type 3 has an invalid length.
[  163.309543][ T6982] netlink: 'syz.7.775': attribute type 3 has an invalid length.
[  163.591372][ T6992] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.776631][ T6992] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.950428][ T6992] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.075625][ T6992] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.245178][ T6992] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  164.312849][ T6992] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  164.378250][ T6992] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  164.439933][ T6992] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  164.666304][ T7007] netem: change failed
[  165.920004][ T7019] loop7: detected capacity change from 0 to 32768
[  166.011250][ T7019] XFS (loop7): Mounting V5 Filesystem
[  166.182322][   T21] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  166.195813][ T7019] XFS (loop7): Ending clean mount
[  166.218383][ T7048] netlink: 11834 bytes leftover after parsing attributes in process `syz.4.804'.
[  166.226115][   T21] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  166.317779][   T25] audit: type=1800 audit(1784916733.984:8): pid=7019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.785" name="file1" dev="loop7" ino=4430 res=0 errno=0
[  166.434931][ T6449] XFS (loop7): Unmounting Filesystem
[  166.911133][ T7062] binder: 7061:7062 ioctl c0306201 200000000080 returned -14
[  166.925753][ T7062] binder: 7061:7062 ioctl c0306201 2000000003c0 returned -14
[  168.249859][ T7096] tipc: Started in network mode
[  168.255529][ T7096] tipc: Node identity 4, cluster identity 4711
[  168.935969][ T7096] tipc: Node number set to 4
[  169.465118][ T7118] loop7: detected capacity change from 0 to 2048
[  169.742463][ T7118] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=continue,resuid=0x0000000000000000,acl,,errors=continue. Quota mode: none.
[  169.829374][ T7136] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.819'.
[  169.834899][ T7118] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  169.938662][ T7106] loop6: detected capacity change from 0 to 32768
[  170.030381][ T7106] XFS (loop6): Mounting V5 Filesystem
[  170.186239][ T7106] XFS (loop6): Ending clean mount
[  170.364639][   T25] audit: type=1800 audit(1784916738.034:9): pid=7106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.809" name="file1" dev="loop6" ino=4430 res=0 errno=0
[  170.528224][ T5592] XFS (loop6): Unmounting Filesystem
[  171.261357][ T7170] loop5: detected capacity change from 0 to 32768
[  171.355928][ T7170] XFS (loop5): Mounting V5 Filesystem
[  171.483154][ T7170] XFS (loop5): Ending clean mount
[  171.575987][   T25] audit: type=1800 audit(1784916739.244:10): pid=7170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.837" name="file1" dev="loop5" ino=4430 res=0 errno=0
[  171.677835][ T4338] XFS (loop5): Unmounting Filesystem
[  171.680028][ T7199] binder: 7198:7199 ioctl c0306201 200000000080 returned -14
[  171.706690][ T7199] binder: 7198:7199 ioctl c0306201 2000000003c0 returned -14
[  171.842775][ T7202] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.832'.
[  172.335770][ T7213] kvm: pic: non byte write
[  172.431951][    C0] Unknown status report in ack skb
[  172.558503][ T7216] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  172.581929][ T7216] overlayfs: failed to set xattr on upper
[  172.591934][ T7216] overlayfs: ...falling back to index=off,metacopy=off.
[  173.065777][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.842'.
[  174.269000][ T7259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.855'.
[  177.562451][ T1111] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  177.882329][   T21] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  177.962493][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  177.978269][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  177.991362][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  178.003766][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  178.142248][   T21] usb 6-1: Using ep0 maxpacket: 8
[  178.208149][ T1111] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  178.218736][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.231917][ T1111] usb 1-1: Product: syz
[  178.236122][ T1111] usb 1-1: Manufacturer: syz
[  178.240730][ T1111] usb 1-1: SerialNumber: syz
[  178.258424][ T1111] usb 1-1: config 0 descriptor??
[  178.282314][   T21] usb 6-1: config 0 has no interfaces?
[  178.462511][   T21] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  178.471595][   T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.486167][   T21] usb 6-1: Product: syz
[  178.490390][   T21] usb 6-1: Manufacturer: syz
[  178.511311][   T21] usb 6-1: SerialNumber: syz
[  178.528467][ T1111] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  178.555792][   T21] usb 6-1: config 0 descriptor??
[  178.567475][ T7395] netem: change failed
[  178.578558][ T7395] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.878'.
[  178.761283][ T1345] usb 1-1: USB disconnect, device number 7
[  178.833665][ T1111] usb 6-1: USB disconnect, device number 11
[  180.403882][ T7433] block device autoloading is deprecated and will be removed.
[  180.442369][ T7436] block device autoloading is deprecated and will be removed.
[  180.522100][ T4267] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  180.741849][ T4267] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  180.764020][ T4267] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  180.922151][ T7431] loop5: detected capacity change from 0 to 40427
[  180.959796][ T7431] F2FS-fs (loop5): Fix alignment : done, start(4096) end(16896) block(12288)
[  180.979791][ T7431] F2FS-fs (loop5): invalid crc value
[  181.002632][ T7431] F2FS-fs (loop5): invalid crc value
[  181.016600][ T7431] F2FS-fs (loop5): Failed to get valid F2FS checkpoint
[  181.751530][ T7468] tipc: Failed to remove unknown binding: 66,0,0/0:335976779/335976780
[  181.774397][ T7468] tipc: Failed to remove unknown binding: 66,0,0/0:335976779/335976780
[  181.810276][ T1345] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  181.826288][ T1345] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  182.682896][ T1345] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  182.873718][ T7483] loop6: detected capacity change from 0 to 40427
[  182.922110][ T7483] F2FS-fs (loop6): Fix alignment : done, start(4096) end(16896) block(12288)
[  182.941467][ T7483] F2FS-fs (loop6): invalid crc value
[  182.954737][ T7483] F2FS-fs (loop6): invalid crc value
[  182.960122][ T7483] F2FS-fs (loop6): Failed to get valid F2FS checkpoint
[  184.023164][ T7519] netlink: 24 bytes leftover after parsing attributes in process `syz.7.915'.
[  184.753312][ T7558] netem: change failed
[  184.765531][ T7555] validate_nla: 99 callbacks suppressed
[  184.765548][ T7555] netlink: 'syz.0.927': attribute type 4 has an invalid length.
[  184.878169][ T7560] netlink: 'syz.0.927': attribute type 4 has an invalid length.
[  185.495179][ T7588] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  185.523591][ T7588] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  185.552648][ T7588] device bridge_slave_0 left promiscuous mode
[  185.571477][ T7588] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.617627][ T7588] device bridge_slave_1 left promiscuous mode
[  185.631358][ T7588] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.668719][ T7588] bond0: (slave bond_slave_0): Releasing backup interface
[  185.713286][ T7588] bond0: (slave bond_slave_1): Releasing backup interface
[  185.825095][ T7588] team0: Port device team_slave_0 removed
[  185.840358][ T7569] loop5: detected capacity change from 0 to 32768
[  185.896622][ T7588] team0: Port device team_slave_1 removed
[  185.929094][ T7588] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.961895][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  185.979507][ T7588] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.999420][ T7569] XFS (loop5): Mounting V5 Filesystem
[  186.013335][ T7588] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  186.041812][ T1108] Bluetooth: hci0: command 0x0406 tx timeout
[  186.048044][ T1108] Bluetooth: hci4: command 0x0406 tx timeout
[  186.061839][ T7588] batman_adv: batadv0: Removing interface: batadv_slave_1
[  186.094263][ T7569] XFS (loop5): Ending clean mount
[  186.202512][ T7569] XFS (loop5): Quotacheck needed: Please wait.
[  186.247682][ T7588] team0: Port device wlan1 removed
[  186.316311][ T7613] netlink: 12 bytes leftover after parsing attributes in process `syz.7.944'.
[  186.338048][ T1111] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  186.366700][ T7569] XFS (loop5): Quotacheck: Done.
[  186.534797][ T4338] XFS (loop5): Unmounting Filesystem
[  186.571888][ T7625] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  186.647241][ T7627] netlink: 12 bytes leftover after parsing attributes in process `syz.6.951'.
[  186.788597][ T7636] overlayfs: failed to clone upperpath
[  186.800611][ T7637] netlink: 'syz.0.954': attribute type 1 has an invalid length.
[  186.910185][ T7637] 8021q: adding VLAN 0 to HW filter on device bond3
[  186.936441][ T7639] bond3: (slave veth5): Enslaving as a backup interface with a down link
[  187.064950][ T7637] bond3: (slave dummy0): Enslaving as a backup interface with an up link
[  187.118674][ T7637] netlink: 'syz.0.954': attribute type 10 has an invalid length.
[  187.134110][ T5118] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  187.152009][ T7637] netlink: 40 bytes leftover after parsing attributes in process `syz.0.954'.
[  187.216966][ T7637] device dummy0 entered promiscuous mode
[  187.246058][ T7637] bond3: (slave dummy0): Removing an active aggregator
[  187.253839][ T5118] bond3: (slave dummy0): link status up again after 0 ms
[  187.274591][ T7637] bond3: (slave dummy0): Releasing backup interface
[  187.406363][ T1111] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  187.440071][ T7661] netlink: 12 bytes leftover after parsing attributes in process `syz.5.962'.
[  187.451843][ T4267] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  187.711700][ T4267] usb 7-1: Using ep0 maxpacket: 32
[  187.732798][ T7672] bond1: (slave ip6gretap1): making interface the new active one
[  187.740829][ T7674] overlayfs: failed to clone upperpath
[  187.742894][ T7672] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  187.831920][ T4267] usb 7-1: config 0 has an invalid interface number: 12 but max is 0
[  187.840032][ T4267] usb 7-1: config 0 has no interface number 0
[  187.979226][ T4267] usb 7-1: config 0 interface 12 has no altsetting 0
[  188.017135][ T7681] netlink: 24 bytes leftover after parsing attributes in process `syz.0.969'.
[  188.162094][ T4267] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  188.185404][ T4267] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.216757][ T4267] usb 7-1: Product: syz
[  188.220969][ T4267] usb 7-1: Manufacturer: syz
[  188.240551][ T4267] usb 7-1: SerialNumber: syz
[  188.285782][ T4267] usb 7-1: config 0 descriptor??
[  188.636985][ T1108] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  189.011897][ T1108] usb 6-1: config 0 has an invalid interface number: 50 but max is 0
[  189.020645][ T1108] usb 6-1: config 0 has no interface number 0
[  189.031077][ T1108] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  189.216975][ T1108] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  189.258158][ T1108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.467414][ T1108] usb 6-1: Product: syz
[  189.555773][ T1108] usb 6-1: Manufacturer: syz
[  189.634667][ T1108] usb 6-1: SerialNumber: syz
[  189.794881][ T1108] usb 6-1: config 0 descriptor??
[  189.933282][ T1108] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0
[  190.239876][ T7739] Illegal XDP return value 4292726784, expect packet loss!
[  190.470770][ T1111] usb 6-1: USB disconnect, device number 12
[  190.682169][ T4267] f81534 7-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71
[  190.691492][ T4267] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71
[  190.700520][ T4267] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  190.708919][ T4267] f81534: probe of 7-1:0.12 failed with error -71
[  190.741063][ T4267] usb 7-1: USB disconnect, device number 3
[  191.173855][   T21] Bluetooth: hci3: command 0x0406 tx timeout
[  191.674968][ T1111] yurex 6-1:0.50: USB YUREX #0 now disconnected
[  192.215693][ T7818] overlayfs: failed to clone upperpath
[  192.262300][ T4231] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  192.527316][ T4231] usb 7-1: Using ep0 maxpacket: 8
[  192.688405][ T4231] usb 7-1: config 0 has no interfaces?
[  192.858104][ T4231] usb 7-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  192.877911][ T4231] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.906038][ T4231] usb 7-1: Product: syz
[  192.910247][ T4231] usb 7-1: Manufacturer: syz
[  192.944843][ T4231] usb 7-1: SerialNumber: syz
[  192.963856][ T4231] usb 7-1: config 0 descriptor??
[  193.258649][ T4267] usb 7-1: USB disconnect, device number 4
[  193.963484][ T7857] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1033'.
[  194.206254][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  194.215532][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[  194.221957][ T1433] ieee802154 phy1 wpan1: encryption failed: -22
[  194.295699][ T7873] bond1: (slave ip6gretap2): making interface the new active one
[  194.337562][ T7873] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link
[  194.404128][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  194.448065][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  194.493948][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  194.550562][ T7881] device bridge_slave_0 left promiscuous mode
[  194.600844][ T7881] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.646951][ T7881] device bridge_slave_1 left promiscuous mode
[  194.665709][ T7881] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.703081][ T7881] bond0: (slave bond_slave_0): Releasing backup interface
[  194.743230][ T7881] bond0: (slave bond_slave_1): Releasing backup interface
[  194.890847][ T7881] team0: Port device team_slave_0 removed
[  194.949207][ T7881] team0: Port device team_slave_1 removed
[  194.970453][ T7881] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  194.998591][ T7881] batman_adv: batadv0: Removing interface: batadv_slave_0
[  195.035206][ T7881] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  195.068014][ T7881] batman_adv: batadv0: Removing interface: batadv_slave_1
[  195.140245][ T7881] bond1: (slave ip6gretap1): Releasing active interface
[  195.158110][ T7880] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  195.166079][ T7880] IPv6: NLM_F_CREATE should be set when creating new route
[  195.555834][ T7882] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.563334][ T7882] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.058635][ T7882] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  196.114746][ T7882] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  196.577153][ T7882] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  196.587432][ T7882] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  196.602790][ T7882] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  196.616479][ T7882] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  196.755427][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1046'.
[  196.802268][ T7882] syz.6.1044 (7882) used greatest stack depth: 19920 bytes left
[  196.886514][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  196.906691][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  196.923665][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  196.947302][ T7899] device bridge_slave_0 left promiscuous mode
[  196.957865][ T7899] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.968621][ T7899] device bridge_slave_1 left promiscuous mode
[  196.977285][ T7899] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.995930][ T7899] bond0: (slave bond_slave_0): Releasing backup interface
[  197.019775][ T7899] bond0: (slave bond_slave_1): Releasing backup interface
[  197.079234][ T7899] team0: Port device team_slave_0 removed
[  197.100857][ T7899] team0: Port device team_slave_1 removed
[  197.108843][ T7899] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  197.116959][ T7899] batman_adv: batadv0: Removing interface: batadv_slave_0
[  197.126064][ T7899] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  197.134874][ T7899] batman_adv: batadv0: Removing interface: batadv_slave_1
[  197.165704][ T7899] team0: Port device wlan1 removed
[  197.173007][ T7909] loop6: detected capacity change from 0 to 32768
[  197.187893][ T7913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1053'.
[  197.278978][ T7909] XFS (loop6): Mounting V5 Filesystem
[  197.322344][ T7923] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.1054'.
[  197.352535][ T7919] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.1054'.
[  197.467985][ T7909] XFS (loop6): Ending clean mount
[  197.487470][ T7909] XFS (loop6): Quotacheck needed: Please wait.
[  197.598823][ T7942] fuse: Bad value for 'fd'
[  197.626451][ T7941] device syzkaller0 entered promiscuous mode
[  197.646978][ T7909] XFS (loop6): Quotacheck: Done.
[  197.738259][ T5592] XFS (loop6): Unmounting Filesystem
[  198.193780][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1068'.
[  198.230202][ T7962] bond1: (slave veth3): Enslaving as an active interface with a down link
[  198.432354][ T4237] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  198.702220][ T4237] usb 6-1: Using ep0 maxpacket: 8
[  198.832433][ T4237] usb 6-1: config 0 has no interfaces?
[  198.955062][ T7994] netlink: 'syz.7.1080': attribute type 1 has an invalid length.
[  198.981791][ T7994] 8021q: adding VLAN 0 to HW filter on device bond2
[  199.009256][ T7994] bond2: (slave veth7): Enslaving as a backup interface with a down link
[  199.018384][ T4237] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  199.028088][ T4237] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.037230][ T4237] usb 6-1: Product: syz
[  199.041530][ T4237] usb 6-1: Manufacturer: syz
[  199.050972][ T4237] usb 6-1: SerialNumber: syz
[  199.059822][ T4237] usb 6-1: config 0 descriptor??
[  199.080157][ T7994] bond2: (slave dummy0): Enslaving as a backup interface with an up link
[  199.092461][    T9] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  199.108974][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  199.134778][ T7994] netlink: 'syz.7.1080': attribute type 10 has an invalid length.
[  199.143782][ T7994] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1080'.
[  199.153464][ T7994] device dummy0 entered promiscuous mode
[  199.163983][ T7994] bond2: (slave dummy0): Removing an active aggregator
[  199.180575][ T7994] bond2: (slave dummy0): Releasing backup interface
[  199.196596][ T7998] overlayfs: failed to clone upperpath
[  199.202188][ T1345] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  199.424520][   T26] usb 6-1: USB disconnect, device number 13
[  199.442011][ T1345] usb 7-1: Using ep0 maxpacket: 8
[  199.721949][ T1345] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  199.740928][ T1345] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.766960][ T1345] usb 7-1: Product: syz
[  199.771169][ T1345] usb 7-1: Manufacturer: syz
[  199.793313][ T1345] usb 7-1: SerialNumber: syz
[  199.812512][ T1345] usb 7-1: config 0 descriptor??
[  200.091961][ T1345] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  201.053108][ T8041] netlink: 'syz.4.1096': attribute type 1 has an invalid length.
[  201.109313][ T8041] 8021q: adding VLAN 0 to HW filter on device bond2
[  201.224840][ T8047] bond2: (slave veth3): Enslaving as a backup interface with a down link
[  201.347469][ T8041] bond2: (slave dummy0): Enslaving as a backup interface with an up link
[  201.425272][ T8041] netlink: 'syz.4.1096': attribute type 10 has an invalid length.
[  201.435785][ T8041] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1096'.
[  201.452211][ T5239] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  201.479608][ T8041] device dummy0 entered promiscuous mode
[  201.492603][ T8041] bond2: (slave dummy0): Removing an active aggregator
[  201.500277][ T8041] bond2: (slave dummy0): Releasing backup interface
[  202.455926][ T1345] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  202.570676][ T1345] dvbdev: DVB: registering new adapter (Terratec H7)
[  202.578225][ T1345] usb 7-1: media controller created
[  202.595307][ T8072] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  202.605988][ T8072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  202.613660][ T8072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  202.622501][ T8074] overlayfs: failed to clone lowerpath
[  202.638311][ T1345] usb 7-1: dvb_usb_v2: MAC address: de:c4:d5:d6:00:00
[  202.673183][ T8076] overlayfs: failed to clone lowerpath
[  202.688582][ T1345] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  202.794659][ T8072] bond2: (slave veth7): Releasing backup interface
[  202.867837][ T1345] DVB: Unable to find symbol drxk_attach()
[  202.910543][ T8075] team0: Mode changed to "loadbalance"
[  202.949141][ T1345] dvb_usb_az6007: probe of 7-1:0.0 failed with error -22
[  202.986677][ T1345] usb 7-1: USB disconnect, device number 5
[  203.044869][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1109'.
[  203.159673][ T8086] bond3: (slave veth9): Enslaving as an active interface with a down link
[  203.207752][ T8088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1122'.
[  203.265155][ T8088] 8021q: adding VLAN 0 to HW filter on device bond4
[  203.384316][ T8096] loop5: detected capacity change from 0 to 8
[  203.479613][ T8100] tipc: Failed to remove unknown binding: 66,1,1/0:4015605304/4015605306
[  203.538711][ T8102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1116'.
[  203.553384][ T8096] SQUASHFS error: lzo decompression failed, data probably corrupt
[  203.562597][ T8096] SQUASHFS error: Failed to read block 0x144: -5
[  203.569222][ T8096] SQUASHFS error: Unable to read metadata cache entry [142]
[  203.578030][ T8096] SQUASHFS error: Unable to read inode 0x11f
[  203.902326][ T8113] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  203.909717][ T8113] IPv6: NLM_F_CREATE should be set when creating new route
[  204.311376][ T8099] tipc: Failed to remove unknown binding: 66,1,1/0:4015605304/4015605306
[  204.368987][ T8099] tipc: Failed to remove unknown binding: 66,1,1/0:4015605304/4015605306
[  205.096237][ T8125] binder: 8124:8125 ioctl c0306201 200000000080 returned -14
[  205.147645][ T8125] binder: BINDER_SET_CONTEXT_MGR already set
[  205.183428][ T8125] binder: 8124:8125 ioctl 4018620d 200000000040 returned -16
[  205.221832][ T8125] binder: 8124:8125 ioctl c0306201 2000000003c0 returned -14
[  206.664938][ T8113] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  206.674744][ T8113] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  206.684163][ T8113] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  206.692603][ T8113] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  206.867655][ T8143] device bridge0 entered promiscuous mode
[  207.219483][ T8159] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1137'.
[  208.290173][ T8178] device wg1 entered promiscuous mode
[  209.426682][ T8194] ceph: No mds server is up or the cluster is laggy
[  209.453110][   T13] libceph: connect (1)[c::]:6789 error -101
[  209.497647][   T13] libceph: mon0 (1)[c::]:6789 connect error
[  209.521861][ T8211] device bridge0 entered promiscuous mode
[  209.876615][ T8230] tipc: Failed to remove unknown binding: 66,1,1/4:3762136796/3762136798
[  210.274297][ T7893] libceph: connect (1)[c::]:6789 error -101
[  210.280402][ T7893] libceph: mon0 (1)[c::]:6789 connect error
[  210.295026][ T7893] libceph: connect (1)[c::]:6789 error -101
[  210.301314][ T7893] libceph: mon0 (1)[c::]:6789 connect error
[  210.311449][ T8254] ceph: No mds server is up or the cluster is laggy
[  210.399191][ T8260] loop5: detected capacity change from 0 to 128
[  210.945313][ T8271] tipc: Failed to remove unknown binding: 66,1,1/0:2295013113/2295013115
[  211.103344][ T8279] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1182'.
[  212.069584][ T8299] device bridge_slave_0 left promiscuous mode
[  212.076091][ T8299] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.113968][ T8299] device bridge_slave_1 left promiscuous mode
[  212.127929][ T8299] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.154032][ T8303] tipc: Failed to remove unknown binding: 66,1,1/0:2906235124/2906235126
[  212.178757][ T8299] bond0: (slave bond_slave_0): Releasing backup interface
[  212.208493][ T8299] bond0: (slave bond_slave_1): Releasing backup interface
[  212.255577][ T8299] team0: Port device team_slave_0 removed
[  212.289866][ T8299] team0: Port device team_slave_1 removed
[  212.311833][ T8299] batman_adv: batadv0: Removing interface: batadv_slave_0
[  212.329510][ T8299] batman_adv: batadv0: Removing interface: batadv_slave_1
[  212.338345][ T8299] bond1: (slave veth3): Releasing backup interface
[  212.377728][ T8304] team0: Mode changed to "loadbalance"
[  212.495696][ T8318] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1195'.
[  212.498515][ T8321] netlink: 1363 bytes leftover after parsing attributes in process `syz.6.1196'.
[  212.779111][ T8335] overlayfs: failed to clone upperpath
[  212.810908][ T8337] tipc: Failed to remove unknown binding: 66,0,0/0:4019580007/4019580008
[  212.890655][ T8341] tipc: Failed to remove unknown binding: 66,1,1/4:2886409572/2886409574
[  213.128959][ T8352] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1209'.
[  213.357730][ T8364] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1213'.
[  213.382647][ T8354] loop5: detected capacity change from 0 to 32768
[  213.467232][ T8354] JBD2: Ignoring recovery information on journal
[  213.557454][ T8366] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  213.716469][ T8340] tipc: Failed to remove unknown binding: 66,1,1/4:2886409572/2886409574
[  213.808139][ T8340] tipc: Failed to remove unknown binding: 66,1,1/4:2886409572/2886409574
[  214.202969][ T8366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  214.417609][ T8366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  214.464883][ T8354] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  214.613073][ T8354] OCFS2: ERROR (device loop5): int ocfs2_commit_truncate(struct ocfs2_super *, struct inode *, struct buffer_head *): Inode 17058 has empty extent block at 17058
[  214.635435][ T8354] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  214.646738][ T8354] OCFS2: File system is now read-only.
[  214.657946][ T8354] (syz.5.1210,8354,0):ocfs2_truncate_file:507 ERROR: status = -30
[  214.666399][ T8354] (syz.5.1210,8354,0):ocfs2_setattr:1220 ERROR: status = -30
[  214.724255][ T4338] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature 
[  214.752345][ T4338] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  214.768539][ T4338] (syz-executor,4338,1):_ocfs2_free_suballoc_bits:2511 ERROR: status = -30
[  214.780714][ T4338] (syz-executor,4338,1):_ocfs2_free_clusters:2605 ERROR: status = -30
[  214.795302][ T4338] (syz-executor,4338,1):ocfs2_sync_local_to_main:1001 ERROR: status = -30
[  214.805433][ T4338] (syz-executor,4338,1):ocfs2_sync_local_to_main:1013 ERROR: status = -30
[  214.818634][ T4338] (syz-executor,4338,1):ocfs2_shutdown_local_alloc:449 ERROR: status = -30
[  214.849996][ T4338] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature 
[  214.877595][ T4338] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  214.890247][ T4338] (syz-executor,4338,1):_ocfs2_free_suballoc_bits:2511 ERROR: status = -30
[  214.906153][ T4338] (syz-executor,4338,1):_ocfs2_free_clusters:2605 ERROR: status = -30
[  214.915106][ T4338] (syz-executor,4338,1):ocfs2_replay_truncate_records:5974 ERROR: status = -30
[  214.937733][ T4338] (syz-executor,4338,1):__ocfs2_flush_truncate_log:6055 ERROR: status = -30
[  214.950946][ T4338] (syz-executor,4338,1):ocfs2_truncate_log_shutdown:6320 ERROR: status = -30
[  214.969106][ T4338] 
[  214.971484][ T4338] ============================================
[  214.977634][ T4338] WARNING: possible recursive locking detected
[  214.983800][ T4338] syzkaller #0 Not tainted
[  214.988216][ T4338] --------------------------------------------
[  214.994367][ T4338] syz-executor/4338 is trying to acquire lock:
[  215.000526][ T4338] ffff88807b22e990 (jbd2_handle){++++}-{0:0}, at: jbd2_journal_lock_updates+0x88/0x390
[  215.010230][ T4338] 
[  215.010230][ T4338] but task is already holding lock:
[  215.017603][ T4338] ffff88807b22e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560
[  215.026846][ T4338] 
[  215.026846][ T4338] other info that might help us debug this:
[  215.034913][ T4338]  Possible unsafe locking scenario:
[  215.034913][ T4338] 
[  215.042366][ T4338]        CPU0
[  215.045655][ T4338]        ----
[  215.048954][ T4338]   lock(jbd2_handle);
[  215.053027][ T4338]   lock(jbd2_handle);
[  215.057099][ T4338] 
[  215.057099][ T4338]  *** DEADLOCK ***
[  215.057099][ T4338] 
[  215.065237][ T4338]  May be due to missing lock nesting notation
[  215.065237][ T4338] 
[  215.073555][ T4338] 4 locks held by syz-executor/4338:
[  215.078844][ T4338]  #0: ffff88807c23a0e0 (&type->s_umount_key#73){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0
[  215.089055][ T4338]  #1: ffff88807c23a650 (sb_internal#2){.+.+}-{0:0}, at: __ocfs2_flush_truncate_log+0x49f/0x1110
[  215.099705][ T4338]  #2: ffff88805ee2a8e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0
[  215.110440][ T4338]  #3: ffff88807b22e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560
[  215.120117][ T4338] 
[  215.120117][ T4338] stack backtrace:
[  215.126027][ T4338] CPU: 1 PID: 4338 Comm: syz-executor Not tainted syzkaller #0
[  215.133577][ T4338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  215.143653][ T4338] Call Trace:
[  215.146942][ T4338]  <TASK>
[  215.149874][ T4338]  dump_stack_lvl+0x188/0x250
[  215.154580][ T4338]  ? show_regs_print_info+0x20/0x20
[  215.159794][ T4338]  ? load_image+0x410/0x410
[  215.164317][ T4338]  __lock_acquire+0x1247/0x7b50
[  215.169187][ T4338]  ? lockdep_lock+0x1f0/0x1f0
[  215.173884][ T4338]  ? verify_lock_unused+0x140/0x140
[  215.179103][ T4338]  ? stack_trace_save+0xa6/0xf0
[  215.183963][ T4338]  ? verify_lock_unused+0x140/0x140
[  215.189173][ T4338]  lock_acquire+0x19e/0x400
[  215.193692][ T4338]  ? jbd2_journal_lock_updates+0x88/0x390
[  215.199422][ T4338]  ? cleanup_mnt+0x426/0x4d0
[  215.204022][ T4338]  ? exit_to_user_mode_loop+0x10f/0x130
[  215.209576][ T4338]  ? exit_to_user_mode_prepare+0xee/0x180
[  215.215302][ T4338]  ? syscall_exit_to_user_mode+0x16/0x40
[  215.220957][ T4338]  ? read_lock_is_recursive+0x10/0x10
[  215.226353][ T4338]  jbd2_journal_lock_updates+0xa4/0x390
[  215.231920][ T4338]  ? jbd2_journal_lock_updates+0x88/0x390
[  215.237654][ T4338]  ? __lock_acquire+0x7b50/0x7b50
[  215.242692][ T4338]  ? jbd2_journal_wait_updates+0x270/0x270
[  215.248508][ T4338]  ? __rwlock_init+0x140/0x140
[  215.253285][ T4338]  ? do_raw_spin_unlock+0x11d/0x230
[  215.258505][ T4338]  ocfs2_journal_shutdown+0x3f7/0xb00
[  215.263916][ T4338]  ? ocfs2_journal_init+0xc80/0xc80
[  215.269124][ T4338]  ? ocfs2_dismount_volume+0x1f1/0x890
[  215.274594][ T4338]  ? kfree+0xef/0x2a0
[  215.278587][ T4338]  ocfs2_dismount_volume+0x1f9/0x890
[  215.283885][ T4338]  ? ocfs2_enable_quotas+0x4a0/0x4a0
[  215.289187][ T4338]  ? clear_inode+0x150/0x150
[  215.293781][ T4338]  ? __static_call_return0+0x5/0x10
[  215.298989][ T4338]  ? ocfs2_free_inode+0x20/0x20
[  215.303850][ T4338]  generic_shutdown_super+0x130/0x300
[  215.309250][ T4338]  kill_block_super+0x7c/0xe0
[  215.313937][ T4338]  deactivate_locked_super+0x93/0xf0
[  215.319234][ T4338]  cleanup_mnt+0x426/0x4d0
[  215.323776][ T4338]  task_work_run+0x125/0x1a0
[  215.328378][ T4338]  exit_to_user_mode_loop+0x10f/0x130
[  215.333757][ T4338]  exit_to_user_mode_prepare+0xee/0x180
[  215.339310][ T4338]  syscall_exit_to_user_mode+0x16/0x40
[  215.344778][ T4338]  do_syscall_64+0x58/0xa0
[  215.349203][ T4338]  ? clear_bhb_loop+0x30/0x80
[  215.353882][ T4338]  ? clear_bhb_loop+0x30/0x80
[  215.358573][ T4338]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  215.364492][ T4338] RIP: 0033:0x7f4044b4d0d7
[  215.368914][ T4338] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  215.388524][ T4338] RSP: 002b:00007ffd6392a608 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  215.396952][ T4338] RAX: 0000000000000000 RBX: 00007f4044be130a RCX: 00007f4044b4d0d7
[  215.404940][ T4338] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd6392a6c0
[  215.412927][ T4338] RBP: 00007ffd6392a6c0 R08: 00007ffd6392b6c0 R09: 00000000ffffffff
[  215.420917][ T4338] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd6392b750
[  215.428911][ T4338] R13: 00007f4044be130a R14: 0000000000034694 R15: 00007ffd6392b790
[  215.436910][ T4338]  </TASK>