last executing test programs:

4m33.077234453s ago: executing program 1 (id=2):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@uni_xlateno}, {}, {@uni_xlate}, {@fat=@usefree}, {@uni_xlateno}, {@fat=@errors_remount}, {@shortname_lower}, {@shortname_mixed}, {@fat=@flush}, {@shortname_mixed}, {@fat=@quiet}, {@utf8no}]}, 0x0, 0x29f, &(0x7f0000000840)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020)

4m32.86695753s ago: executing program 1 (id=6):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000004})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x2})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0xa0000000})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x80000001, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x10000008, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x9, 0x3, 0x0, 0x10001, 0x10000002, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

4m31.61324621s ago: executing program 1 (id=14):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_mount_image$exfat(&(0x7f00000041c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=maciceland,utf8,errors=continue,utf8,uid=', @ANYRESHEX=0x0, @ANYRES16=0x0], 0x1, 0x1520, &(0x7f0000000440)="$eJzs3AucTtX6OPDnWWvtMSbpbZLLsNZ6Nm9yWSZJIklySZIkSXJLSJrkSEJiyC1pSJLkMiSXISSXaUwa9/tdEpKkSZKQ3JL1/wh/p1Pndzq/0zl+nzPP9/PZn1nPu/ez9trv8+733Xu9M/Ntl6E1G9eq1pCI4F+C538kA0AsAAwEgKsAIACA8vHl48+tzy0x+V/bCftzPZh2uUfALieuf87G9c/ZuP45G9c/Z+P652xc/5yN65+zcf0Zy8k2Tit0NS85d+H5/5yMP///i2SXGfPl6jLXdgWI+aMpXP+cjev/Xyv4Ixtx/XM2rn9OFXu5B8D+D+DzPyfI9XfXcP1zNq4/YznZv3+OWbnLPcf9Py0QydnfgVzu1x9jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsZzhpL9EAcDF9uUeF2OMMcYYY4wxxv48PtflHgFjjDHGGGOMMcb+/RAESFAQQAzkgljIDXEgAOBKyAtXQQSuhni4BvLBtZAfCkBBKAQJUBiKgAYDFghCKArFIArXQXG4HkpASSgFpcFBGUiEG6As3Ajl4CYoDzdDBbgFKkIluBUqw21QBW6HqnAHVIM7oTrUgJpQC+6C2nA31IF7oC7cC/XgPqgP90MDeAAawoPQCB6CxvAwNIFHoCk0g+bQAlr+r/Kfhx7wAvSEXpAMvaEPvAh9oR/0hwEwEF6CQfAyDIZXIAWGwFB4FYbBazAcXocR8AaMhDdhFLwFo2EMjIVxkArjYQK8DRPhHZgEk2EKTIU0mAbT4V2YATNhFrwHs+F9mANzYR7Mh3T4ADJgAWTCh7AQPoIsWASLYQkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFj2EbfALb4VPYATthF3wGu+HzfzL/xN/kd0VAQIECFSqMwRiMxViMwzjMg3kwL+bFCEYwHuMxH+bD/JgfC2JBTMAELIJF0KBByk1YFItiFKNYHItjCSyBpbAUOnSYiIlYFm/EclgOy2N5rIAVsCJWwkpYGStjFayCVbEqVsNqWB2rY02siXfhXdgb62AdrIt1sR7Wuzg9hQ2xITbCRtgYG2MTbIJNsSk2x+bYEltiK2yFrbE1tsW22A7bYXtsj0mYhB2wA3bEjtgJO2Fn7IxdsAt2xW7YLfv5XIAv4AvYC6uL3tgH+2BfTMnVHwfgAHwJB+HL+DK+gik4BIfiq/gqvobD8TiOwDdwJI7EKuItHI1jkMQ4TMVUnIATcCJOxEk4GSfjVEzDaTgdp+MMnIkz8T2cje/j+zgX5+J8TMd0zMAFmImZuBBPYBYuwsW4BJfiMlyKK3AlrsDVuAZX4zpchxtwA27CTbgFL56sCgA/xZ24E1NwN+7GPbgH9+Je3If7MBuzcT/uxwMW8CAexEN4CA/jETyKR/AYHsPjeAJPYr8LXT2b8HWjT0quSgFxjhJKxIgYEStiRZyIE3lEHpFX5BURERHxIl7kE/lEfpFfFBQFRYJIEEVEEWGEESTCGAAQUREVxUVxUUKUEKVEKeGEE4kiUZQVZUU5UU6UFzeLCuIWUVFUEm1cZVFZVBFtXVVxh6gmqonqooaoKWqJWqK2qC3qiDqirqgr6ol6or64XzQQvbE/PijOVaaxGIJNxFBsKpoJeeFIWonh2Fq0EW3F4+INHIHtRSuXJJ4SHcRo7Cj+IsbgM6KzGIddxHOiq+gmuovnRQ/R2vUUvcQk7C36iKnYV/QT/cUAMQNriPdwdu6a4hWRIoaIoeJVMR9fE8PF62JEbxAjxZtilHhLjBZjxFgxTqSK8WKCeFtMFO+ISWKymCKmijQxTUwX74oZYqaYJd4Ts8X7Yo6YK+aJ+SJdfCAyxAKRKT4UC8VHIkssEovFErFULBPLxQqRG1aJ1WKNWCvWifVig9goNonNYovYKj4W28QnYrv4VOwQO8Uu8ZnYLT4Xe8QXYq/4UuwTX4ls8bXYL74RB8S34qD4ThwS34vD4og4Kn4Qx8SP4rg4IU6KU+K0+EmcET+Ls8ILkCiFlFLJQMbIXDJW5pZx8gqZRwYXnt2rZby8RuaT18r8soAsKAvJBFlYFpFaGmklyVAWlcVkVF4ni8vrZQlZUpaSpaWTZWSivEGWlTfKcvImWV7eLCvIW2RFWUneKivL22QVebuEyPl9VJc1ZE1ZS94lk+FuWUfeI+vKe2U9eZ+sL++XDeQDsqF8UDaSD8nG8mHZRD4im8pmsrlsIVvKR2Ur+ZhsLdvItvJx2U4+IdvLJ2WSfEp2kP7CS+QZ2Vk+K7vI52RX2U12lz/Ls9LLnrKXhN4g+8gXZV/ZT/aXA+RA+ZIcJF+Wg+UrMkUOkUPlq3KYfE0Ol6/LEfINOVK+KUfJt+RoOUaOleNkqhwvJ8i35UT5jpwkJ8spcqpMk9Nk/ws9zZLyH+a//Tv5g3/Z+wa5UW6Sm+UWuVV+LLfJT+R2uV3ukDvkLrlL7pa75R65R+6Ve+U+uU9myzvkfrlfHpAH5EF5UB6Sh+RheUSekj/IY/JHeVyekCfkKXlanpZnLjwHoFAJJZVSgYpRuVSsyq3i1BUqj7pS5VVXqYi6WsWra1Q+da3KrwqogqqQSlCFVRGllVFWkQpVUVVMRdV1F9+jVClVWjlVRiWqG/6ZfFVcXa9KqJK/yr84vuS/M76WqqVqpVqp1qq1aqvaqnaqnWqv2qsklaQ6qA6qo+qoOqlOqrPqrLqoLqqr6qq6q+6qh+qheqqeKlklqz7qRdVX9VP91QA1UL2kBqlBarAarFJUihqqhqphapgaroarEWqEGqlGqlFqlBqtRquxaqxKValqgpqgJqqJapKapKaoKSpNpanparqaoWaoWWqWmq1mqzlqjpqn5ql0la4yVIbKVJlqoVqostQitUgtUUvUMrVMrVAr1Cq1Sq1Ra9Q6tU5lqY1qo9qsNqutaqvaprap7Wq72qF2qF1ql9qtdqs9ao/aq/aqfWqfylbZar/arw6oA+qgOqgOqUPqsDqsjqqj6pg6po6r4+qkOqlOq9PqjDqjzqqz5y77AhGIQAUqiAligtggNogL4oI8QZ4gb5A3iASRID6ID/IF1wb5gwJBwaBQkBAUDooEOjCBDcSFokeD64LiwfVBiaBkUCooHbigTJAY3BCUDW4MygU3BeWDm4MKwS1BxaBScGtQObgtqBLcHlQN7giqBXcG1YMaQc2gVnBXUDu4O6gT3BPUDe4N6gX3BfWD+4MGwQNBw+DBoFHwUNA4eDhoEjwSNA2aBc2DFkHLP7V/748XeMz11L10su6t++gXdV/dT/fXA/RA/ZIepF/Wg/UrOkUP0UP1q3qYfk0P16/rEfoNPVK/qUfpt/RoPUaP1eN0qh6vJ+i39UT9jp6kJ+speqpO09P0dP2unqFn6ln6PT1bv6/n6Ll6np6v0/UHOkMv0Jn6Q71Qf6Sz9CK9WC/RS/UyvVyv0Cv1Kr1ar9Fr9Tq9Xm/QG/UmvVlv0Vv1x3qb/kRv15/qHXqn3qU/07v153qP/kLv1V/qfforna2/1vv1N/qA/lYf1N/pQ/p7fVgf0Uf1D/qY/lEf1yf0SX1Kn9Y/6TP6Z31W+3MX9+c+3o0yysSYGBNrYk2ciTN5TB6T1+Q1ERMx8Sbe5DP5TH6T3xQ0BU2CSTBFTBFzDhkyRU1REzVRU9wUNyVMCVPKlDLOOJNoEk1ZU9aUM+VMeVPeVDAVTEVT0dxqbjW3mdvM7eZ2c4e5w9xp7jQ1TA1Ty9QytU1tU8fUMXVNXVPP1DP1TX3TwDQwDU1D08g0Mo1NY9PENDFNTVPT3DQ3LU1L08q0Mq1Na9PWtDXtTDvT3rQ3SSbJdDAdTEfT0XQynUxn09l0MV1MV9PVdDfdTQ/Tw/Q0PU2ySTZ9TB/T1/Q1/U1/M9AMNIPMIDPYDDYpJsUMNUPNMDPMDDfDzQjzhhl57kLVvGVGmzFmrBlnUk2qmWAmmIlmoplkJpkpZopJM2lmupluZpgZZpaZZWab2WaOmWPmmXkm3aSbDJNhMk2mWWgWmiyTZRabxWapWWqWm+VmpVlpVpvVZi2sNevNerPRbDSbzWaz1Ww128w2s91sNzvMDrPL7DK7zW6zx+wxe81es8/sM9km2+w3+80Bc8AcNAfNIXPIHDaHzVFz1Bwzx8xxc9ycNCfNaVPgwuelN7E2t42zV9g89kqb115l/zYuaAvZBFvYFrHa5rcFfhUba20JW9KWsqWts2Vsor3hN3FFW8neaivb22wVe7ut+pu4tr3b1rH32Lr2XlvL3vWruJ69z9a3D9sGiAC2mW1kW9jG9mHbxD5im9pmtrltYdvZJ2x7+6RNsk/ZDvbp38QZdoFdaVfZ1XaN3WF32pP2lD1gv7Wn7U+2p+1lB9qX7CD7sh1sX7Epdshv4pH2TTvKvmVH2zF2rB33m3iKnWrT7DQ73b5rZ9iZv4nT7Qd2ts20c+xcO8/O/yXOsGgz7Yd2of3IZtkAFtsldqldZpfbFf9/rEvsOrvebrDb7ad2s91it9qP7baLF8J2p91lP7O77ed2v/3G7rVf2n32oM22X/8Snzu+g/Y7e8h+bw/bI/ao/cEesz+qi9nnjv0H+7M9a70FQgKSpCigGMpFsZSb4ugKykNXUl66iiJ0NcXTNZSPrqX8VIAKUiFKoMJUhDQZskQUUlEqRlG6ji4OrxSVJkdlKJFuoLJ0I5Wjm6g83UwV6BaqSJVyX9iMbqeqdAdVozupOtWgmlSL7qLadDfVoXuoLt1L9eg+qk/3UwN6gBrSg9SIHqLG9DA1oUeoKTWj5tSCWtKj1Ioeo9bUhtrS49SOnqD29CQl0VPUgZ6mjvQX6kTPUGd6lrrQc9SVulF3ep560AvUk3pRMvWmPvQi9aV+1J8G0EB6iQbRyzSYXqEUGkJD6VUaRq/RcHqdRtAbNJLepFH0Fo2mMTSWxlEqjacJ9DZNpHdoEk2mKTSV0mgaTad3aQbNpFn0Hs2m92kOzaV5NJ/S6QPKoAWUSR/SQvqIsmgRLaYltJSW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lT6mbfQJbadPaQftpF30Ge2mz2kPfUF76UvaR19RNn1N++kbOkDf0kH6zvei7+kwHaGj9AMdox/pOJ2gk3SKTtNPdIZ+prPkCUIMRShDFQZhTJgrjA1zh3HhFWGe8Mowb3hVGAmvDuPDa8J84bVh/rBAWDAsFCaEhcMioQ5NaEMKw7BoWCyMhteFxcPrwxJhybBUWDp0YZkwMbwhLBveGJYLbwrLhzeHFcJbwophpfDheyuHt4VVwtvDquEdYbXwzrB6WCOsGdYK7wprh3eHdcJ7wrrhvWG58L6wfnh/2CB8IGwYPhg2Ch8KG4cPh03CR8KmYbOwedgibBk+GrYKHwtbh23CtuHjYbvwibB9+GSYFD4Vdgif/mX9fQv+/vrksHfYJ3wxfDH0/h45Lzo/mh79IJoRXRDNjH4YXRj9KJoVXRRdHF0SXRpdFl0eXRFdGV0VXR1dE10bXRddH90Q9b5WLnDohJNOucDFuFwu1uV2ce4Kl8dd6fK6q1zEXe3i3TUun7vW5XcFXEFXyCW4wq6I084468iFrqgr5qLuOlfcXe9KuJKulCvtnCvjEl0L19K1dK3cY661a+Pausfd4+4J94R70j3pnnId3NOuo/uL6+SecZ3ds+5Z95zr6rq57u5518ONz3v+ZEt2fVwf19f1df1dfzfQDXSD3CA32A12KS7FDXVD3TA3zA13w90IN8KNdCPd3QpgtBvtxrqxLtWluglugpvoJrpJbpKb4qa4NJfmprvpboab4arMPL+XOW6Om+fmuXSX7jLcuWvGTLfQLXRZLsstdovdUrfULXfL3Uq30q12q91at9atd+vdRrfRbXab3Va31W1z29x2t93t8Fed79TtdnvcHrfX7XX73Fcu233t9rtv3AH3rTvovnOH3PfusDvijrof3DH3ozvuTriT7pQ77X5yZ9zP7qzzLjUyPjIh8nZkYuSdyKTI5MiUyNRIWmRaZHrk3ciMyMzIrMh7kdmR9yNzInMj8yLzI+mRDyIZkQWRzMiHkYWRjyJZkUWRxZElkaWRZRHvC28OfVFfzEf9db64v96X8CV9KV/aO1/GJ/obfFl/oy/nb/Ll/c2+gr/FV/SV/K3+Ed/UN/PNfQvf0j/qW/nHfGvfxrf1j/t2/gnf3j/pk/xTvoN/2nf0f/Gd/DO+s3/Wd/HP+a6+m+/un/c9/Au+p+/lk31v38e/6Pv6fr6/H+AH+pf8IP+yH+xf8Sl+iB/qX/XD/Gt+uH/dj/Bv+JExb/pRF2+RYZxP9eP9BP+2n+jf8ZP8ZD/FT/Vpfpqf7t/1M/xMP8u/52f79/0cP9fP8/N9uv/AZ/gFPtN/6Bf6j3yWX3RxUtkv9yv8Sr/Kr/Zr/Fq/zq/3G/xGv8lv9lv8Vv+x3+Y/8dv9p36H3+l3+c/8bv+53+O/8Hv9l36f/8pn+6/9fv+NP+C/9Qf9d/6Q/94f9kf8Uf+DP+Z/9Mf9CX/Sn/Kn/U/+jP/Zn+W/WWOMMcYY+0PGX2qKX685P53f+3dyxF9t3AcArtxSKPuv15+7olyb/3y7n0hoFwGAp3p1efDiUr16cnLyhW2zJATF5gJc/CbonBi4FC+CtvAEJEEbKPu74+8nup2mf9B/9GaAuL/KiYVL8aX+vwDA5N/p/9HHR2ZUCE/G/w/9zwUoUexSTm64FC+Ctr/Mr7SBcn9n/AVa/YPx5/4yFaD1X+XkgUvxpfEnwmPwNCT9akvGGGOMMcYYY+y8fuLWThfvPy/+xufv3Z8nqEs5ueBS/I/uzxljjDHGGGOMMXb5PdOt+5OPJiW16fTPN6r+r7L+cKMJ/Lt65sbvNrwHuPiIAoB/sUOAcw35nzyKTf+RfaVcOHX+dtXSUz6A/xul/DMal/mNiTHGGGOMMfanu3TR/+vH1eUaEGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlgP9J/6d2OU+RsYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY+xy+38BAAD//3lG9tE=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file7\x00', 0x830000, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file3\x00', 0x60840, 0x8)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file2\x00', 0x5)

4m31.249198142s ago: executing program 32 (id=14):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_mount_image$exfat(&(0x7f00000041c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=maciceland,utf8,errors=continue,utf8,uid=', @ANYRESHEX=0x0, @ANYRES16=0x0], 0x1, 0x1520, &(0x7f0000000440)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file7\x00', 0x830000, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file3\x00', 0x60840, 0x8)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file2\x00', 0x5)

3m1.60537652s ago: executing program 5 (id=734):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000680))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r2, 0x0)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xffffffffffffffd1, 0x0, 0x1, 0x0, 0x0, 0x24000002}, 0xc0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m1.356004728s ago: executing program 5 (id=736):
r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7ffcfffc}]})
r1 = fsmount(r0, 0x1, 0xc)
fchdir(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1)
open_by_handle_at(r2, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x600)

3m1.138366285s ago: executing program 5 (id=739):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc)
sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000040)='p', 0x1, 0x40, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240), 0xc)
sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)

3m0.844189914s ago: executing program 5 (id=744):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x28a5291, 0x0)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000040), 0x7, 0x4c1, &(0x7f0000000c00)="$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")

3m0.394341379s ago: executing program 5 (id=748):
r0 = syz_open_procfs(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0)
sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

2m59.869386826s ago: executing program 5 (id=751):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000010000000000000000000000180100002020692400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000069bf0000850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2}, 0x3c)
syz_emit_ethernet(0xe, &(0x7f00000008c0)={@local, @empty, @void, {@mpls_mc}}, 0x0)

2m59.381972341s ago: executing program 33 (id=751):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000010000000000000000000000180100002020692400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000069bf0000850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2}, 0x3c)
syz_emit_ethernet(0xe, &(0x7f00000008c0)={@local, @empty, @void, {@mpls_mc}}, 0x0)

2m48.732727804s ago: executing program 6 (id=752):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000001ec0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x65, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@timestamp_prespec={0x44, 0x4, 0xbe, 0x3, 0xe}]}}, {0x4e20, 0x4e20, 0x4d, 0x0, @gue={{0x1, 0x1, 0x3, 0x7, 0x100, @void}, "e24f82d681079ea7a4e87616ec93ff3299ed88d29741d161f504c73dcab29b8c8bb6bd8ee37e9d73eacb24c20d9d92e5f83e219b0692a1a8fb9c1dea766ac3456d"}}}}, 0x73)

2m48.425365825s ago: executing program 6 (id=814):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x44)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000280)=""/59, 0x5e)

2m47.785938795s ago: executing program 6 (id=820):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0xa, 0xfffb}]}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f00000001c0)='c', 0x1, 0x20008801, &(0x7f0000000200)={0x11, 0x88a8, r3, 0x1, 0xff, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14)

2m47.085293138s ago: executing program 6 (id=829):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
userfaultfd(0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x8855}, 0x440d0)

2m46.725806349s ago: executing program 34 (id=829):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
userfaultfd(0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x8855}, 0x440d0)

3.147097739s ago: executing program 4 (id=2343):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
ftruncate(r0, 0xc17a)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0)
mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000673000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000009c0)=0x7, 0x3, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0)

2.973161104s ago: executing program 4 (id=2344):
set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
pipe(0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2.973032394s ago: executing program 7 (id=2345):
epoll_create(0xf)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008000100000000001400", @ANYRES64=r1], 0x38}}, 0x0)

2.836196599s ago: executing program 7 (id=2349):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]})
close_range(r2, 0xffffffffffffffff, 0x200000000000000)

2.751225251s ago: executing program 7 (id=2351):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r0)
r3 = socket$key(0xf, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000200)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="11002bbd7000fddbdf250700000008000300", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x10)

2.726199852s ago: executing program 3 (id=2352):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001280), r3)
sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0)

2.561185828s ago: executing program 7 (id=2354):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x7}, 0x1c)
r1 = gettid()
fcntl$setown(r0, 0x8, r1)
setsockopt$sock_int(r0, 0x1, 0x20, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c)
ioctl$int_in(r0, 0x5452, &(0x7f0000001080)=0xa)
sendmmsg$inet6(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="02", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='b', 0x1}], 0x1}}], 0x2, 0x404c851)

2.512097029s ago: executing program 3 (id=2356):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r2, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f00000001c0)=r3}, 0x20)
syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[], 0x0)

2.341127805s ago: executing program 3 (id=2358):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269bb, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0)

2.336323175s ago: executing program 2 (id=2359):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x406, r1)
sendmmsg$inet6(r2, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20048815)
pselect6(0x40, &(0x7f00000002c0)={0x64, 0xffffffffffffffff, 0xfffffffffffffff4, 0x10, 0x9, 0x7ff, 0x1, 0x9}, 0x0, 0x0, 0x0, 0x0)

2.248735218s ago: executing program 4 (id=2360):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, 0x0, 0x50)
r2 = dup(r1)
fcntl$setpipe(r0, 0x407, 0x9)
pipe2$9p(&(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x40, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})
read$FUSE(r0, &(0x7f0000003140)={0x2020}, 0x2020)

2.197328409s ago: executing program 3 (id=2361):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x5084)
sendto$inet(r0, &(0x7f0000000300)="8995b3c271", 0x5, 0x4044880, 0x0, 0x0)

1.957388007s ago: executing program 0 (id=2364):
r0 = inotify_init1(0x0)
r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x50007a2)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1c8)
getdents64(r3, &(0x7f0000001f80)=""/4104, 0x1008)

1.916190398s ago: executing program 0 (id=2365):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000090000000800000002"], 0x48)
listen(r0, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20)
recvmmsg(r0, &(0x7f0000004c40)=[{{0x0, 0x0, 0x0}, 0x80000001}], 0x1, 0x40000062, 0x0)

1.803867372s ago: executing program 0 (id=2366):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, <r2=>r0, 0x2})
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000300)={r4, <r5=>0x0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000140)={r5})

1.665356626s ago: executing program 0 (id=2367):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000280)=0x40, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

1.620257958s ago: executing program 7 (id=2368):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x5)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10)
recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10000)

1.419584184s ago: executing program 2 (id=2369):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet(0x2, 0x3, 0x2f)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10)
sendto$inet(r2, 0x0, 0x0, 0x24008000, &(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)

1.265039539s ago: executing program 4 (id=2370):
setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc8, 0x2}}}, 0x7)
r0 = syz_open_dev$usbfs(0x0, 0x1, 0x80000)
ioctl$USBDEVFS_GET_SPEED(r0, 0x551f)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)
ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, 0x0)
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37)

1.26342725s ago: executing program 2 (id=2380):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', <r2=>0x0})
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4, r2, 0x1000000}, 0x10)

1.26202327s ago: executing program 3 (id=2381):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x80)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002d80)={r3, r2, 0x25, 0x8, @void}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xff}}, 0x40)

1.100270625s ago: executing program 0 (id=2371):
set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
pipe(0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1.100079135s ago: executing program 3 (id=2372):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f0000000200), 0x2, 0x4000)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0x3, 0xc, @string={0xc, 0x3, "c329b44b412b365e08ce"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00030800000008030000d372f547190d26184d77b53833ad11707af3f7578052699096"], 0x0, 0x0}, 0x0)

1.099874425s ago: executing program 4 (id=2373):
syz_mount_image$jfs(&(0x7f0000000cc0), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f0000000d00)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRES16, @ANYRES16, @ANYRES8, @ANYRESOCT, @ANYRES64, @ANYRES16, @ANYRESOCT], 0x1, 0x5e97, &(0x7f0000005e00)="$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")
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40))
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44)
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

665.349809ms ago: executing program 7 (id=2374):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0xb694a000)

665.152489ms ago: executing program 2 (id=2375):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40}], 0x1, 0x2004001)
io_setup(0xff, &(0x7f0000000380)=<r2=>0x0)
io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}])
write$sndseq(r1, &(0x7f00000003c0)=[{0x10, 0x6, 0xf2, 0x8, @time={0x39, 0x7}, {0x9, 0x9}, {0x6, 0x7}, @connect={{0x7, 0x4}, {0x4, 0x21}}}, {0x5, 0x7, 0xb, 0xb, @time={0xd7, 0x39}, {0x8, 0x5}, {0xc, 0x8}, @note={0x10, 0x75, 0x4b, 0xf, 0xba}}], 0x38)

186.182884ms ago: executing program 2 (id=2376):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
syz_emit_ethernet(0x6e, &(0x7f00000004c0)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53aff", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@hopopts={0x3a}]}}}}}}}, 0x0)

113.139927ms ago: executing program 4 (id=2377):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
fallocate(0xffffffffffffffff, 0x10, 0x10, 0x8800000)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"})
ioctl$sock_SIOCSIFBR(r0, 0x8941, 0x0)

1.42075ms ago: executing program 2 (id=2378):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept(r0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x4, 0x4, 0x4, 0xa4}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r2}, 0x20)

0s ago: executing program 0 (id=2379):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
rt_sigsuspend(&(0x7f0000000040)={[0x7]}, 0x8)

kernel console output (not intermixed with test programs):

6" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d96b9ce59 code=0x7ffc0000
[  156.981125][ T6738] loop5: detected capacity change from 0 to 512
[  157.045517][ T6738] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.744: corrupted in-inode xattr
[  157.064276][ T6738] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.744: couldn't read orphan inode 15 (err -117)
[  157.123535][ T6738] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  157.276313][ T6333] EXT4-fs (loop5): unmounting filesystem.
[  157.452595][ T6750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.749'.
[  157.468602][ T6745] loop3: detected capacity change from 0 to 32768
[  157.508184][ T6745] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.747 (6745)
[  157.560609][ T6745] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  157.593372][ T6745] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  157.608262][ T6745] BTRFS info (device loop3): setting nodatacow, compression disabled
[  157.616919][ T6745] BTRFS info (device loop3): turning on flush-on-commit
[  157.624216][ T6745] BTRFS info (device loop3): enabling auto defrag
[  157.631231][ T6745] BTRFS info (device loop3): trying to use backup root at mount time
[  157.639994][ T6745] BTRFS info (device loop3): turning on async discard
[  157.647293][ T6745] BTRFS info (device loop3): using free space tree
[  157.789734][ T6767] loop2: detected capacity change from 0 to 512
[  157.842878][ T5090] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  157.868961][ T5071] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.869727][ T6767] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  157.915586][ T6745] BTRFS error (device loop3): failed to load root extent
[  157.937818][ T6745] BTRFS warning (device loop3): try to load backup roots slot 1
[  157.958717][ T6767] xt_hashlimit: size too large, truncated to 1048576
[  157.996500][ T5105] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  158.014160][ T5071] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.031218][ T6745] BTRFS warning (device loop3): couldn't read tree root
[  158.055187][ T6745] BTRFS warning (device loop3): try to load backup roots slot 2
[  158.087942][ T6745] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[  158.109747][ T6745] BTRFS warning (device loop3): couldn't read tree root
[  158.140117][ T6745] BTRFS warning (device loop3): try to load backup roots slot 3
[  158.194631][ T6745] BTRFS info (device loop3): enabling ssd optimizations
[  158.204083][ T6745] BTRFS info (device loop3): rebuilding free space tree
[  158.217710][ T5071] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.291567][ T6745] BTRFS info (device loop3): checking UUID tree
[  158.354896][ T5071] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.669836][ T6741] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  159.101740][ T4287] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  159.101779][ T4288] Bluetooth: hci5: command 0x1003 tx timeout
[  159.260908][ T4288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  159.274690][ T4288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  159.283954][ T4288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  159.295213][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  159.302696][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  159.310277][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  160.050062][ T6790] chnl_net:caif_netlink_parms(): no params data found
[  160.466115][ T6824] overlayfs: failed to clone upperpath
[  160.595362][ T6790] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.638665][ T6790] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.664639][ T6790] device bridge_slave_0 entered promiscuous mode
[  160.702666][ T6790] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.709826][ T6790] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.737050][ T6790] device bridge_slave_1 entered promiscuous mode
[  160.959062][ T6790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.111290][ T6790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.167200][ T5071] device hsr_slave_0 left promiscuous mode
[  161.195398][ T5071] device hsr_slave_1 left promiscuous mode
[  161.206111][ T5071] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  161.218084][ T5071] batman_adv: batadv0: Removing interface: batadv_slave_0
[  161.230222][ T5071] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  161.259988][ T5071] batman_adv: batadv0: Removing interface: batadv_slave_1
[  161.275203][ T5071] device bridge_slave_1 left promiscuous mode
[  161.292715][ T5071] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.301345][ T5071] device bridge_slave_0 left promiscuous mode
[  161.317446][ T5071] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.341777][ T4287] Bluetooth: hci1: command 0x0409 tx timeout
[  161.363873][ T5071] device veth1_macvtap left promiscuous mode
[  161.370059][ T5071] device veth0_macvtap left promiscuous mode
[  161.712954][ T6849] loop0: detected capacity change from 0 to 512
[  161.783919][ T6849] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  161.940011][ T4281] EXT4-fs (loop0): unmounting filesystem.
[  162.047605][ T4279] EXT4-fs (loop2): unmounting filesystem.
[  162.649242][ T5071] team0 (unregistering): Port device team_slave_1 removed
[  162.720266][ T5071] team0 (unregistering): Port device team_slave_0 removed
[  162.765218][ T5071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  162.808443][ T5071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.118500][ T5071] bond0 (unregistering): Released all slaves
[  163.211565][ T6839] netlink: 7 bytes leftover after parsing attributes in process `syz.3.763'.
[  163.226377][ T6865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.769'.
[  163.245962][ T6865] netlink: 'syz.2.769': attribute type 12 has an invalid length.
[  163.267680][ T6865] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  163.276460][ T6865] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  163.285239][ T6865] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  163.294046][ T6865] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  163.316126][ T6877] netlink: 'syz.4.774': attribute type 15 has an invalid length.
[  163.329360][ T6877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.774'.
[  163.339570][ T6877] netlink: 'syz.4.774': attribute type 15 has an invalid length.
[  163.347450][ T6877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.774'.
[  163.388569][ T6790] team0: Port device team_slave_0 added
[  163.403225][ T6865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.769'.
[  163.421932][ T4288] Bluetooth: hci1: command 0x041b tx timeout
[  163.440083][ T6865] netlink: 'syz.2.769': attribute type 12 has an invalid length.
[  163.465710][ T6790] team0: Port device team_slave_1 added
[  163.541124][ T6790] batman_adv: batadv0: Adding interface: batadv_slave_0
[  163.598140][ T6790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.695853][ T6790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  163.723584][ T6790] batman_adv: batadv0: Adding interface: batadv_slave_1
[  163.740792][ T6790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.816238][ T6790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  163.892981][ T6790] device hsr_slave_0 entered promiscuous mode
[  163.901064][ T6790] device hsr_slave_1 entered promiscuous mode
[  163.909048][ T6790] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  163.926720][ T6790] Cannot create hsr debugfs directory
[  164.233572][ T6790] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  164.254494][ T6790] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  164.286902][ T6790] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  164.327885][ T6790] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  164.499230][ T6790] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.556684][ T6790] 8021q: adding VLAN 0 to HW filter on device team0
[  164.581127][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  164.589694][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  164.710533][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  164.727333][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  164.765809][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.772997][ T5098] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.798854][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  164.855376][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  164.879138][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.886288][ T5098] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.946702][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  164.956487][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  164.976243][ T6927] loop2: detected capacity change from 0 to 512
[  164.982484][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  165.001443][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  165.059994][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  165.070577][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  165.083937][ T6927] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  165.168791][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  165.198335][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  165.227088][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  165.250476][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  165.259491][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  165.268142][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  165.317747][ T6790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  165.361568][ T6946] loop0: detected capacity change from 0 to 256
[  165.455604][ T6946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  165.501987][ T4287] Bluetooth: hci1: command 0x040f tx timeout
[  165.562528][ T6946] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.588915][ T6946] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  165.646767][ T6956] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  165.692976][ T6956] batman_adv: batadv0: Adding interface: ip6gretap1
[  165.709912][ T6956] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.791586][ T6956] batman_adv: batadv0: Interface activated: ip6gretap1
[  166.102788][ T6971] input: syz0 as /devices/virtual/input/input5
[  166.109422][ T6971] input: failed to attach handler leds to device input5, error: -6
[  166.202615][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  166.220330][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  166.252701][ T6790] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.277078][ T6975] overlayfs: failed to clone upperpath
[  166.322667][ T4279] EXT4-fs (loop2): unmounting filesystem.
[  166.526186][ T6982] loop3: detected capacity change from 0 to 512
[  166.549005][ T6982] EXT4-fs (loop3): Test dummy encryption mode enabled
[  166.609789][ T6982] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.799: inode has both inline data and extents flags
[  166.641123][ T6982] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.799: couldn't read orphan inode 15 (err -117)
[  166.685359][ T6982] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  166.901035][ T4273] EXT4-fs (loop3): unmounting filesystem.
[  167.288205][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  167.306161][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  167.341054][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  167.369488][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  167.389608][ T6790] device veth0_vlan entered promiscuous mode
[  167.398452][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  167.437036][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  167.456698][ T6790] device veth1_vlan entered promiscuous mode
[  167.508875][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  167.521571][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  167.532605][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  167.549827][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  167.563237][ T6790] device veth0_macvtap entered promiscuous mode
[  167.581671][ T4288] Bluetooth: hci1: command 0x0419 tx timeout
[  167.589365][ T6790] device veth1_macvtap entered promiscuous mode
[  167.620843][ T6790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.656732][ T6790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.701704][ T6790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.740963][ T6790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.785182][ T6790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.817198][ T6790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.847817][ T6790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.878765][ T6790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.894730][ T6790] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.932301][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  167.941023][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  167.969864][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  168.002474][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  168.023783][ T6790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.061707][ T6790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.071561][ T6790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.101663][ T6790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.111494][ T6790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.161651][ T6790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.191688][ T6790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.221708][ T6790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.233852][ T6790] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.275111][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  168.296089][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  168.420730][ T6790] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.450129][ T6790] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.472460][ T6790] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.492870][ T6790] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.683892][ T5090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.707997][ T5090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.738004][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  168.778580][ T5090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.796135][ T5090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.830307][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  169.030431][ T7051] device syzkaller1 entered promiscuous mode
[  169.255576][ T7057] loop3: detected capacity change from 0 to 8192
[  169.306765][ T7062] loop6: detected capacity change from 0 to 2048
[  169.319395][ T7057] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  169.347617][ T7062] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  169.920530][ T6790] UDF-fs: error (device loop6): udf_read_inode: (ino 1317) failed !bh
[  169.952589][ T6790] UDF-fs: error (device loop6): udf_read_inode: (ino 1317) failed !bh
[  170.667317][ T5090] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.804298][ T5090] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.911289][ T5090] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.018377][   T26] audit: type=1326 audit(171.020:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7114 comm="syz.0.832" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef779ce59 code=0x7ffc0000
[  171.039768][ T7115] loop0: detected capacity change from 0 to 512
[  171.110907][   T26] audit: type=1326 audit(171.020:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7114 comm="syz.0.832" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef779ce59 code=0x7ffc0000
[  171.165655][ T5090] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.196844][ T7115] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  171.228595][   T26] audit: type=1326 audit(171.020:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7114 comm="syz.0.832" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef779ce59 code=0x7ffc0000
[  171.322365][ T7115] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4281] was attempted by ""[7115]
[  171.349510][   T26] audit: type=1326 audit(171.020:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7114 comm="syz.0.832" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1ef779ce59 code=0x7ffc0000
[  171.448541][   T26] audit: type=1326 audit(171.020:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7114 comm="syz.0.832" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef779ce59 code=0x7ffc0000
[  171.547023][ T4281] EXT4-fs (loop0): unmounting filesystem.
[  171.586465][   T26] audit: type=1326 audit(171.020:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7114 comm="syz.0.832" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef779ce59 code=0x7ffc0000
[  171.659937][   T26] audit: type=1326 audit(171.020:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7114 comm="syz.0.832" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1ef779ce59 code=0x7ffc0000
[  171.766291][   T26] audit: type=1326 audit(171.020:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7114 comm="syz.0.832" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef779ce59 code=0x7ffc0000
[  171.872761][ T4288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  171.915251][ T7139] loop0: detected capacity change from 0 to 2048
[  171.929864][ T4288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  171.943053][ T4288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  171.951008][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  171.959998][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  171.970227][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  171.992654][   T26] audit: type=1326 audit(171.020:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7114 comm="syz.0.832" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef779ce59 code=0x7ffc0000
[  172.016282][   T26] audit: type=1326 audit(171.020:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7114 comm="syz.0.832" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1ef779cbc2 code=0x7ffc0000
[  172.142549][ T7139] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  172.215371][ T7139] fs-verity: sha512 using implementation "sha512-avx2"
[  172.400991][ T4281] EXT4-fs (loop0): unmounting filesystem.
[  173.025164][ T7132] chnl_net:caif_netlink_parms(): no params data found
[  173.531337][ T7132] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.575518][ T7132] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.603532][ T7132] device bridge_slave_0 entered promiscuous mode
[  173.676528][ T7132] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.709319][ T7132] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.711893][ T7195] overlayfs: refusing to follow metacopy origin for (/file1)
[  173.725304][ T7132] device bridge_slave_1 entered promiscuous mode
[  174.049657][ T5090] device hsr_slave_0 left promiscuous mode
[  174.061889][ T4287] Bluetooth: hci1: command 0x0409 tx timeout
[  174.078595][ T5090] device hsr_slave_1 left promiscuous mode
[  174.119931][ T5090] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  174.129547][ T5090] batman_adv: batadv0: Removing interface: batadv_slave_0
[  174.137861][ T5090] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  174.146053][ T5090] batman_adv: batadv0: Removing interface: batadv_slave_1
[  174.155825][ T5090] device bridge_slave_1 left promiscuous mode
[  174.171772][ T5090] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.203431][ T5090] device bridge_slave_0 left promiscuous mode
[  174.212490][ T5090] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.294690][ T5090] device veth1_macvtap left promiscuous mode
[  174.307647][ T5090] device veth0_macvtap left promiscuous mode
[  174.317262][ T5090] device veth1_vlan left promiscuous mode
[  174.327920][ T5090] device veth0_vlan left promiscuous mode
[  175.058644][ T5090] team0 (unregistering): Port device team_slave_1 removed
[  175.129322][ T5090] team0 (unregistering): Port device team_slave_0 removed
[  175.182594][ T5090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  175.234289][ T5090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  175.544928][ T5090] bond0 (unregistering): Released all slaves
[  175.639805][ T7132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  175.683372][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.865'.
[  175.698090][ T7132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  175.794521][ T7132] team0: Port device team_slave_0 added
[  175.810382][ T7132] team0: Port device team_slave_1 added
[  175.836827][ T7132] batman_adv: batadv0: Adding interface: batadv_slave_0
[  175.850877][ T7132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.942556][ T7132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  176.000648][ T7132] batman_adv: batadv0: Adding interface: batadv_slave_1
[  176.021909][ T7132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.052467][ T7132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  176.116280][ T7132] device hsr_slave_0 entered promiscuous mode
[  176.149967][ T4287] Bluetooth: hci1: command 0x041b tx timeout
[  176.161034][ T7132] device hsr_slave_1 entered promiscuous mode
[  176.199949][ T7132] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  176.211719][ T7132] Cannot create hsr debugfs directory
[  176.450252][ T7252] netlink: 24 bytes leftover after parsing attributes in process `syz.2.874'.
[  176.705144][ T7132] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  176.734707][ T7132] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  176.763945][ T7132] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  176.820018][ T7132] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  177.061986][ T7132] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.121858][ T7132] 8021q: adding VLAN 0 to HW filter on device team0
[  177.128764][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  177.161404][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  177.207427][ T7274] loop3: detected capacity change from 0 to 1024
[  177.228529][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  177.252401][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  177.288912][ T5071] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.296093][ T5071] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.347617][ T7274] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  177.391832][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  177.448947][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  177.529117][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  177.538945][ T4273] EXT4-fs (loop3): unmounting filesystem.
[  177.558246][ T5071] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.565390][ T5071] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.610897][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  177.661258][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  177.718011][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  177.744184][ T7291] loop3: detected capacity change from 0 to 64
[  177.747640][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  177.786764][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  177.809349][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  177.828032][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  177.872242][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  177.898430][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  177.933628][   T26] kauditd_printk_skb: 37 callbacks suppressed
[  177.933642][   T26] audit: type=1800 audit(177.940:95): pid=7291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.883" name="file1" dev="loop3" ino=21 res=0 errno=0
[  177.963693][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  177.989640][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  178.020386][ T7291] syz.3.883: attempt to access beyond end of device
[  178.020386][ T7291] loop3: rw=0, sector=107, nr_sectors = 1 limit=64
[  178.043671][ T7291] Buffer I/O error on dev loop3, logical block 107, async page read
[  178.057783][ T7132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  178.102095][ T7291] syz.3.883: attempt to access beyond end of device
[  178.102095][ T7291] loop3: rw=0, sector=108, nr_sectors = 1 limit=64
[  178.170944][ T7291] Buffer I/O error on dev loop3, logical block 108, async page read
[  178.220263][ T7291] syz.3.883: attempt to access beyond end of device
[  178.220263][ T7291] loop3: rw=0, sector=109, nr_sectors = 1 limit=64
[  178.231651][ T4287] Bluetooth: hci1: command 0x040f tx timeout
[  178.338893][ T7291] Buffer I/O error on dev loop3, logical block 109, async page read
[  178.385502][ T7291] syz.3.883: attempt to access beyond end of device
[  178.385502][ T7291] loop3: rw=0, sector=110, nr_sectors = 1 limit=64
[  178.445995][ T7291] Buffer I/O error on dev loop3, logical block 110, async page read
[  178.484770][ T7291] syz.3.883: attempt to access beyond end of device
[  178.484770][ T7291] loop3: rw=0, sector=111, nr_sectors = 1 limit=64
[  178.523803][ T7291] Buffer I/O error on dev loop3, logical block 111, async page read
[  178.537234][ T7291] syz.3.883: attempt to access beyond end of device
[  178.537234][ T7291] loop3: rw=0, sector=112, nr_sectors = 1 limit=64
[  178.607288][ T7291] Buffer I/O error on dev loop3, logical block 112, async page read
[  178.618450][ T7291] syz.3.883: attempt to access beyond end of device
[  178.618450][ T7291] loop3: rw=0, sector=113, nr_sectors = 1 limit=64
[  178.649947][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  178.654359][ T7291] Buffer I/O error on dev loop3, logical block 113, async page read
[  178.666199][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  178.710425][ T7132] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.434742][ T7348] loop3: detected capacity change from 0 to 128
[  179.485391][ T7348] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  179.541765][ T7348] hpfs: filesystem error: improperly stopped
[  179.547808][ T7348] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  179.602977][ T7348] hpfs: You really don't want any checks? You are crazy...
[  179.637067][ T7348] hpfs: hpfs_map_sector(): read error
[  179.655456][ T7348] hpfs: code page support is disabled
[  179.681277][ T7348] hpfs: hpfs_map_4sectors(): unaligned read
[  179.706319][ T7348] hpfs: hpfs_map_4sectors(): unaligned read
[  179.737657][ T7348] hpfs: filesystem error: unable to find root dir
[  180.106320][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  180.127279][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  180.173992][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  180.222228][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  180.259091][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  180.283056][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  180.301872][ T4290] Bluetooth: hci1: command 0x0419 tx timeout
[  180.314771][ T7132] device veth0_vlan entered promiscuous mode
[  180.383605][ T7132] device veth1_vlan entered promiscuous mode
[  180.478751][ T7349] loop2: detected capacity change from 0 to 40427
[  180.493833][ T7132] device veth0_macvtap entered promiscuous mode
[  180.546300][ T7349] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x3ffff
[  180.548328][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  180.584778][ T7349] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0xe4
[  180.588748][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  180.623710][ T7349] F2FS-fs (loop2): invalid crc value
[  180.654075][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  180.669638][ T7349] F2FS-fs (loop2): Found nat_bits in checkpoint
[  180.673943][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  180.708685][ T7132] device veth1_macvtap entered promiscuous mode
[  180.747352][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  180.782760][ T4290] Bluetooth: hci0: command 0x0406 tx timeout
[  180.789532][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  180.797409][ T4287] Bluetooth: hci2: command 0x0406 tx timeout
[  180.797418][ T4290] Bluetooth: hci3: command 0x0406 tx timeout
[  180.837856][ T7132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.842408][ T7349] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x432/0xa20
[  180.857649][ T7132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.870714][ T7132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.882273][ T7132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.898757][ T7132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.920788][ T7132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.931937][ T7349] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  180.940067][ T7132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.951492][ T7132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.963720][ T7132] batman_adv: batadv0: Interface activated: batadv_slave_0
[  180.971537][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  180.985306][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  181.069335][ T7132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.085653][ T7349] F2FS-fs (loop2) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x6eb/0x1b10
[  181.101418][ T7132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.154379][ T7132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.172888][ T7349] F2FS-fs (loop2): switch extent_cache option is not allowed
[  181.174510][ T7132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.195840][ T7349] syz.2.896: attempt to access beyond end of device
[  181.195840][ T7349] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  181.205441][ T7132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.227265][ T7132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.238754][ T7132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.241248][ T7349] syz.2.896: attempt to access beyond end of device
[  181.241248][ T7349] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  181.288656][ T7132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.306836][ T7132] batman_adv: batadv0: Interface activated: batadv_slave_1
[  181.318197][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  181.337490][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  181.356764][ T7392] netlink: 'syz.0.909': attribute type 10 has an invalid length.
[  181.404363][ T7392] 8021q: adding VLAN 0 to HW filter on device team0
[  181.443820][ T7392] bond0: (slave team0): Enslaving as an active interface with an up link
[  181.460949][ T7395] netlink: 'syz.4.908': attribute type 1 has an invalid length.
[  181.469085][ T4279] syz-executor: attempt to access beyond end of device
[  181.469085][ T4279] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  181.596899][ T7395] device bond3 entered promiscuous mode
[  181.632037][ T7395] 8021q: adding VLAN 0 to HW filter on device bond3
[  181.748334][ T7400] 8021q: adding VLAN 0 to HW filter on device bond3
[  181.809624][ T7400] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  181.818682][ T7412] loop3: detected capacity change from 0 to 128
[  181.872043][ T7412] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  181.883940][ T7400] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  181.958969][ T7400] bond3: (slave ip6gre1): making interface the new active one
[  181.994873][ T7400] device ip6gre1 entered promiscuous mode
[  182.039321][ T7400] bond3: (slave ip6gre1): Enslaving as an active interface with an up link
[  182.060232][ T4273] EXT4-fs (loop3): unmounting filesystem.
[  182.088704][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  182.142932][ T7132] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.167936][ T7132] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.215568][ T7132] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.258852][ T7132] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.560726][ T7425] policy can only be matched on NF_INET_PRE_ROUTING
[  182.560746][ T7425] unable to load match
[  182.565530][ T5105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.639209][ T5105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.656100][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  182.746831][ T5105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.761663][ T5105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.798226][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  184.248212][ T4318] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  184.443404][ T4318] usb 4-1: config 0 interface 0 altsetting 91 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  184.510613][ T4318] usb 4-1: config 0 interface 0 has no altsetting 0
[  184.538161][ T4318] usb 4-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00
[  184.588793][ T4318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.635952][ T4318] usb 4-1: config 0 descriptor??
[  184.875716][ T4318] usbhid 4-1:0.0: can't add hid device: -71
[  184.891729][ T4318] usbhid: probe of 4-1:0.0 failed with error -71
[  184.928591][ T4318] usb 4-1: USB disconnect, device number 5
[  188.748069][ T7610] loop0: detected capacity change from 0 to 4096
[  188.885793][ T7617] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  188.960393][   T26] audit: type=1800 audit(188.960:96): pid=7610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.966" name="file1" dev="loop0" ino=15 res=0 errno=0
[  189.112895][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.969'.
[  189.373321][ T6785] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  190.796569][ T6785] usb 1-1: unable to get BOS descriptor or descriptor too short
[  190.819792][ T6785] usb 1-1: no configurations
[  190.827844][ T6785] usb 1-1: can't read configurations, error -22
[  191.120653][ T7665] 9pnet_fd: Insufficient options for proto=fd
[  193.924506][ T7747] tipc: Started in network mode
[  193.958712][ T7747] tipc: Node identity 9, cluster identity 4711
[  194.011134][ T7747] tipc: Node number set to 9
[  194.066141][ T1275] ieee802154 phy0 wpan0: encryption failed: -22
[  194.072513][ T1275] ieee802154 phy1 wpan1: encryption failed: -22
[  196.534426][ T4319] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  196.750079][ T4319] usb 4-1: unable to get BOS descriptor or descriptor too short
[  196.769167][ T4319] usb 4-1: unable to read config index 0 descriptor/start: -71
[  196.789929][ T4319] usb 4-1: can't read configurations, error -71
[  199.041950][ T7857] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.070883][ T7857] device batadv_slave_0 entered promiscuous mode
[  200.084810][ T7902] loop7: detected capacity change from 0 to 1024
[  200.193513][ T7902] hfsplus: request for non-existent node 16777216 in B*Tree
[  200.227648][ T7902] hfsplus: request for non-existent node 16777216 in B*Tree
[  200.245331][ T7902] hfsplus: request for non-existent node 16777216 in B*Tree
[  200.257744][ T7902] hfsplus: request for non-existent node 16777216 in B*Tree
[  200.269696][ T7907] hfsplus: request for non-existent node 16777216 in B*Tree
[  200.293462][ T7907] hfsplus: request for non-existent node 16777216 in B*Tree
[  200.331912][ T4319] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  200.350084][ T7902] hfsplus: request for non-existent node 16777216 in B*Tree
[  200.357855][ T7902] hfsplus: request for non-existent node 16777216 in B*Tree
[  200.541910][ T4319] usb 1-1: Using ep0 maxpacket: 16
[  200.550386][ T4319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  200.585337][ T4319] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  200.610148][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.636018][ T4319] usb 1-1: Product: syz
[  200.640208][ T4319] usb 1-1: Manufacturer: syz
[  200.665609][ T4319] usb 1-1: SerialNumber: syz
[  200.680761][ T4319] usb 1-1: config 0 descriptor??
[  200.697595][ T4319] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  200.713583][ T4319] em28xx 1-1:0.0: DVB interface 0 found: bulk
[  200.901827][ T4262] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  201.121950][ T4262] usb 8-1: Using ep0 maxpacket: 16
[  201.130515][ T4262] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  201.148461][ T4262] usb 8-1: config 0 has no interfaces?
[  201.154383][ T4262] usb 8-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  201.163937][ T4262] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.202809][ T4262] usb 8-1: config 0 descriptor??
[  201.321667][ T4319] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  201.964733][ T4319] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  201.980758][ T4319] em28xx 1-1:0.0: board has no eeprom
[  202.012101][ T7957] netlink: 'syz.4.1058': attribute type 4 has an invalid length.
[  202.047494][ T7960] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  202.069704][ T7961] netlink: 'syz.4.1058': attribute type 4 has an invalid length.
[  202.085206][ T4319] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  202.129166][ T4319] em28xx 1-1:0.0: dvb set to bulk mode.
[  202.157729][ T4318] em28xx 1-1:0.0: Binding DVB extension
[  202.173800][ T4319] usb 1-1: USB disconnect, device number 9
[  202.180217][ T4319] em28xx 1-1:0.0: Disconnecting em28xx
[  202.250484][ T7965] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1060'.
[  202.318234][ T4318] em28xx 1-1:0.0: Registering input extension
[  202.339509][ T4319] em28xx 1-1:0.0: Closing input extension
[  202.403961][ T4319] em28xx 1-1:0.0: Freeing device
[  202.484362][ T7975] sch_tbf: burst 19360 is lower than device lo mtu (11337746) !
[  202.806825][ T7988] loop5: detected capacity change from 0 to 7
[  202.831955][ T4916]  loop5:
[  202.834924][ T4916] loop5: partition table partially beyond EOD, truncated
[  202.848145][ T7988]  loop5:
[  202.864149][ T7988] loop5: partition table partially beyond EOD, truncated
[  203.170491][ T8000] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1073'.
[  203.275396][ T8000] device veth0_to_bond entered promiscuous mode
[  203.574532][ T4319] usb 8-1: USB disconnect, device number 2
[  203.844962][   T27] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  204.055466][   T27] usb 4-1: Using ep0 maxpacket: 16
[  204.068851][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  204.111350][   T27] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  204.151684][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.159710][   T27] usb 4-1: Product: syz
[  204.172582][   T27] usb 4-1: Manufacturer: syz
[  204.202113][   T27] usb 4-1: SerialNumber: syz
[  204.210934][   T27] usb 4-1: config 0 descriptor??
[  204.229333][   T27] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  204.271983][   T27] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  204.431608][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  204.441750][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  204.451730][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  204.461610][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  204.471608][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  204.481607][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  204.491606][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  204.501605][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  204.511605][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  204.541744][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  205.041982][   T27] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  205.374319][ T8034] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.383174][ T8034] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.662902][   T27] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  205.681122][   T27] em28xx 4-1:0.0: board has no eeprom
[  205.777601][   T27] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  205.788936][   T27] em28xx 4-1:0.0: dvb set to bulk mode.
[  205.816272][   T27] usb 4-1: USB disconnect, device number 8
[  205.841016][   T27] em28xx 4-1:0.0: Disconnecting em28xx
[  205.867306][ T5634] em28xx 4-1:0.0: Binding DVB extension
[  205.984160][ T5634] em28xx 4-1:0.0: Registering input extension
[  205.992222][   T27] em28xx 4-1:0.0: Closing input extension
[  206.020771][   T27] em28xx 4-1:0.0: Freeing device
[  206.200087][ T8034] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  206.289113][ T8034] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  206.761469][ T8034] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  206.770540][ T8034] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  206.780253][ T8034] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  206.791446][ T8034] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  207.070381][ T8034] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  207.079428][ T8034] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  207.088731][ T8034] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  207.097722][ T8034] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  207.125500][ T8039] netlink: 'syz.7.1085': attribute type 30 has an invalid length.
[  207.141768][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1085'.
[  207.158051][ T8042] netlink: 'syz.7.1085': attribute type 30 has an invalid length.
[  207.170081][ T8042] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1085'.
[  207.782657][ T8081] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1094'.
[  207.824114][ T5110] bond0: (slave bond_slave_0): interface is now down
[  207.832894][ T5110] bond0: (slave bond_slave_1): interface is now down
[  207.871275][ T5110] bond0: now running without any active interface!
[  208.386626][ T8068] loop3: detected capacity change from 0 to 32768
[  208.494277][ T8068] XFS (loop3): Mounting V5 Filesystem
[  208.585843][ T8068] XFS (loop3): Ending clean mount
[  208.870328][ T4273] XFS (loop3): Unmounting Filesystem
[  210.147852][ T8122] loop2: detected capacity change from 0 to 32768
[  210.165851][ T8122] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1104 (8122)
[  210.273250][ T8122] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  210.295633][ T8122] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  210.326221][ T8122] BTRFS info (device loop2): setting nodatacow, compression disabled
[  210.351177][ T8122] BTRFS info (device loop2): turning on flush-on-commit
[  210.379501][ T8122] BTRFS info (device loop2): enabling auto defrag
[  210.408304][ T8122] BTRFS info (device loop2): trying to use backup root at mount time
[  210.437807][ T8122] BTRFS info (device loop2): turning on async discard
[  210.463340][ T8122] BTRFS info (device loop2): using free space tree
[  210.473316][ T8145] loop7: detected capacity change from 0 to 8192
[  210.527282][ T8145] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  210.616191][ T8145] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal
[  210.648914][ T8145] REISERFS (device loop7): using ordered data mode
[  210.703045][ T8145] reiserfs: using flush barriers
[  210.730000][ T8145] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  210.746943][ T8145] REISERFS (device loop7): checking transaction log (loop7)
[  210.759853][    T9] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  210.784087][ T8145] REISERFS (device loop7): Using rupasov hash to sort names
[  210.793717][ T8145] REISERFS (device loop7): using 3.5.x disk format
[  210.807162][ T8122] BTRFS error (device loop2): failed to load root extent
[  210.815740][ T8145] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  210.830500][ T8122] BTRFS warning (device loop2): try to load backup roots slot 1
[  210.854842][ T8173] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1111'.
[  210.866625][ T5098] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  210.867486][ T8145] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  210.908548][ T8145] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  210.919967][ T8122] BTRFS warning (device loop2): couldn't read tree root
[  210.927189][ T8145] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  210.956876][ T8122] BTRFS warning (device loop2): try to load backup roots slot 2
[  210.995769][ T8122] BTRFS error (device loop2): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[  211.011901][ T8145] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage.
[  211.044983][ T8122] BTRFS warning (device loop2): couldn't read tree root
[  211.078246][ T8122] BTRFS warning (device loop2): try to load backup roots slot 3
[  211.168825][ T8122] BTRFS info (device loop2): enabling ssd optimizations
[  211.195084][ T8122] BTRFS info (device loop2): rebuilding free space tree
[  211.273237][ T8122] BTRFS info (device loop2): checking UUID tree
[  211.335086][ T8189] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  211.377242][ T8189] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  211.437511][ T8189] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  211.524756][ T8122] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  211.627461][ T8200] sch_tbf: burst 19360 is lower than device lo mtu (65550) !
[  212.105047][ T8211] loop3: detected capacity change from 0 to 1024
[  212.225265][ T8211] hfsplus: request for non-existent node 16777216 in B*Tree
[  212.282131][ T8211] hfsplus: request for non-existent node 16777216 in B*Tree
[  212.289668][ T8211] hfsplus: request for non-existent node 16777216 in B*Tree
[  212.342485][ T8220] tipc: Failed to remove unknown binding: 66,0,0/0:2875859581/2875859582
[  212.372886][ T8211] hfsplus: request for non-existent node 16777216 in B*Tree
[  212.381557][ T8211] hfsplus: request for non-existent node 16777216 in B*Tree
[  212.504414][ T8211] hfsplus: request for non-existent node 16777216 in B*Tree
[  212.577915][ T8221] hfsplus: request for non-existent node 16777216 in B*Tree
[  212.616281][ T8221] hfsplus: request for non-existent node 16777216 in B*Tree
[  214.299663][ T8279] sch_tbf: burst 19360 is lower than device lo mtu (65550) !
[  215.307265][   T26] audit: type=1326 audit(215.310:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz.3.1150" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff907f9ce59 code=0x0
[  215.450602][ T8315] loop0: detected capacity change from 0 to 8192
[  215.475862][ T8315] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  215.489574][ T8315] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  215.499134][ T8315] REISERFS (device loop0): using ordered data mode
[  215.506264][ T8315] reiserfs: using flush barriers
[  215.515918][ T8315] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  215.547190][ T8315] REISERFS (device loop0): checking transaction log (loop0)
[  215.561394][ T8315] REISERFS (device loop0): Using rupasov hash to sort names
[  215.606157][ T8315] REISERFS (device loop0): using 3.5.x disk format
[  215.634387][ T8315] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  215.670661][ T8315] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  215.720272][ T8315] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  215.771953][ T8315] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  215.801888][ T8315] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  215.987721][ T8347] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1155'.
[  216.202475][ T8357] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  216.238202][ T8357] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  216.323418][ T8357] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  216.512755][ T8372] overlayfs: failed to clone upperpath
[  216.545192][   T26] audit: type=1326 audit(216.550:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8374 comm="syz.3.1164" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff907f9ce59 code=0x0
[  217.194020][ T8397] netlink: 'syz.4.1170': attribute type 5 has an invalid length.
[  217.219327][ T8396] netlink: 264 bytes leftover after parsing attributes in process `syz.7.1169'.
[  217.353057][ T8399] loop0: detected capacity change from 0 to 512
[  217.432258][ T8399] EXT4-fs: Ignoring removed i_version option
[  217.482516][ T8399] EXT4-fs: Ignoring removed bh option
[  217.579704][ T8399] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  217.599285][ T8410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1175'.
[  217.731549][ T8410] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1175'.
[  217.974391][ T4281] EXT4-fs (loop0): unmounting filesystem.
[  218.201994][ T8425] loop0: detected capacity change from 0 to 512
[  218.302155][ T8425] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  218.377895][ T8425] EXT4-fs (loop0): 1 truncate cleaned up
[  218.400721][ T8423] loop3: detected capacity change from 0 to 8192
[  218.461673][ T8425] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  218.528943][ T8434] EXT4-fs (loop0): shut down requested (2)
[  218.530644][ T8423] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  218.668222][ T8438] Set syz1 is full, maxelem 0 reached
[  218.676529][ T8423] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  218.696832][ T8423] REISERFS (device loop3): using ordered data mode
[  218.733602][ T8423] reiserfs: using flush barriers
[  218.762397][ T4281] EXT4-fs (loop0): unmounting filesystem.
[  218.768263][ T8423] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  218.832529][ T8423] REISERFS (device loop3): checking transaction log (loop3)
[  218.843936][ T8442] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1182'.
[  218.890951][ T8423] REISERFS (device loop3): Using rupasov hash to sort names
[  218.913897][ T8423] REISERFS (device loop3): using 3.5.x disk format
[  218.943939][ T8423] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  219.010368][ T8423] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  219.050907][ T8423] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  219.065136][ T8442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  219.096363][ T8423] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  219.134264][ T8442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  219.170392][ T8442] bond0 (unregistering): Released all slaves
[  219.183204][ T8423] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  219.573160][ T8462] loop7: detected capacity change from 0 to 4096
[  219.651735][ T8462] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  219.689780][ T8464] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  219.838797][ T8464] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  219.912437][ T8464] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  219.969122][ T7132] EXT4-fs (loop7): unmounting filesystem.
[  220.357732][ T8475] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1190'.
[  220.600796][ T8483] "syz.3.1192" (8483) uses obsolete ecb(arc4) skcipher
[  220.846548][ T8489] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1195'.
[  221.155726][ T8503] netlink: 'syz.4.1199': attribute type 1 has an invalid length.
[  221.175438][ T8503] netlink: 64403 bytes leftover after parsing attributes in process `syz.4.1199'.
[  221.318042][ T8507] tipc: Failed to remove unknown binding: 66,0,0/9:1403801963/1403801964
[  221.474945][ T8514] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1204'.
[  221.696278][ T8526] loop7: detected capacity change from 0 to 1024
[  221.924908][    T9] hfsplus: bad catalog file entry
[  221.943409][    T9] hfsplus: b-tree write err: -5, ino 3
[  222.466549][ T8555] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1212'.
[  222.509879][ T8558] loop2: detected capacity change from 0 to 1024
[  222.633611][ T8558] hfsplus: request for non-existent node 16777216 in B*Tree
[  222.658920][ T8558] hfsplus: request for non-existent node 16777216 in B*Tree
[  222.714551][ T8558] hfsplus: request for non-existent node 16777216 in B*Tree
[  222.756575][ T8568] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1218'.
[  222.799743][ T8558] hfsplus: request for non-existent node 16777216 in B*Tree
[  222.878197][ T8558] hfsplus: request for non-existent node 16777216 in B*Tree
[  222.905263][ T8558] hfsplus: request for non-existent node 16777216 in B*Tree
[  223.081961][ T5110] hfsplus: request for non-existent node 16777216 in B*Tree
[  223.096389][ T5110] hfsplus: request for non-existent node 16777216 in B*Tree
[  223.126903][ T8583] loop7: detected capacity change from 0 to 256
[  223.160897][ T8583] exfat: Unknown parameter 'ÿÿÐS”º�Ì 
[  223.160897][ T8583] ž­¨Sì°ÎBïxz:ºþ�žIµ)od&[&BF~™þ¸ðØ…�ß7]1k:ÏË©õ€Œ ûXÉi£Í£Øßéä^+ü>¹b'ôôOtö@'
[  223.180078][ T8581] loop0: detected capacity change from 0 to 2048
[  223.197580][ T8581] EXT4-fs: Ignoring removed mblk_io_submit option
[  223.227551][ T8581] EXT4-fs: Ignoring removed i_version option
[  223.334021][ T8589] netlink: 'syz.2.1223': attribute type 2 has an invalid length.
[  223.372362][ T8589] netlink: 'syz.2.1223': attribute type 9 has an invalid length.
[  223.381077][ T8581] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  223.436270][ T8589] netlink: 'syz.2.1223': attribute type 10 has an invalid length.
[  223.458378][ T8589] netlink: 'syz.2.1223': attribute type 11 has an invalid length.
[  223.511869][ T8589] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1223'.
[  223.552819][ T4281] EXT4-fs (loop0): unmounting filesystem.
[  223.825357][   T26] audit: type=1326 audit(223.830:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.0.1228" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ef779ce59 code=0x0
[  224.737146][ T8610] loop2: detected capacity change from 0 to 40427
[  224.786349][ T8610] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  224.809752][ T8610] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  224.830151][ T8633] loop0: detected capacity change from 0 to 1024
[  224.940812][ T8610] F2FS-fs (loop2): Found nat_bits in checkpoint
[  224.975658][ T8633] hfsplus: request for non-existent node 16777216 in B*Tree
[  225.033989][ T8633] hfsplus: request for non-existent node 16777216 in B*Tree
[  225.085271][ T8633] hfsplus: request for non-existent node 16777216 in B*Tree
[  225.127886][ T8633] hfsplus: request for non-existent node 16777216 in B*Tree
[  225.168517][ T8610] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  225.210779][ T8633] hfsplus: request for non-existent node 16777216 in B*Tree
[  225.220629][ T8610] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  225.266812][ T8649] loop7: detected capacity change from 0 to 2048
[  225.268976][ T8633] hfsplus: request for non-existent node 16777216 in B*Tree
[  225.309369][ T8653] capability: warning: `syz.3.1238' uses deprecated v2 capabilities in a way that may be insecure
[  225.332241][ T8649] EXT4-fs: Ignoring removed mblk_io_submit option
[  225.360861][ T8649] EXT4-fs: Ignoring removed i_version option
[  225.405190][ T8645] hfsplus: request for non-existent node 16777216 in B*Tree
[  225.416716][ T8645] hfsplus: request for non-existent node 16777216 in B*Tree
[  225.445531][ T8649] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  225.589582][ T7132] EXT4-fs (loop7): unmounting filesystem.
[  225.812535][ T8663] loop0: detected capacity change from 0 to 256
[  225.852766][ T8663] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  225.895344][ T8663] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  226.102791][ T8668] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1242'.
[  226.709342][ T8698] 9pnet_fd: Insufficient options for proto=fd
[  227.087496][ T8713] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1253'.
[  227.567383][ T8729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1258'.
[  228.241739][ T5627] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  228.338582][ T8761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  228.388216][ T8761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  228.461928][ T5627] usb 1-1: Using ep0 maxpacket: 16
[  228.477069][ T5627] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  228.501709][ T5627] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  228.536501][ T5627] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  228.573741][ T5627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.590373][ T5627] usb 1-1: Product: syz
[  228.606027][ T5627] usb 1-1: Manufacturer: syz
[  228.610654][ T5627] usb 1-1: SerialNumber: syz
[  228.746691][ T8778] loop3: detected capacity change from 0 to 1024
[  228.818401][ T8778] hfsplus: request for non-existent node 16777216 in B*Tree
[  228.838103][ T5627] usb 1-1: 0:2 : does not exist
[  228.852095][ T8778] hfsplus: request for non-existent node 16777216 in B*Tree
[  228.862661][ T5627] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  228.885704][ T8778] hfsplus: request for non-existent node 16777216 in B*Tree
[  228.918799][ T5627] usb 1-1: USB disconnect, device number 10
[  228.923169][ T8778] hfsplus: request for non-existent node 16777216 in B*Tree
[  228.997003][ T8778] hfsplus: request for non-existent node 16777216 in B*Tree
[  229.034508][ T8778] hfsplus: request for non-existent node 16777216 in B*Tree
[  229.055211][ T8783] hfsplus: request for non-existent node 16777216 in B*Tree
[  229.079523][ T8783] hfsplus: request for non-existent node 16777216 in B*Tree
[  229.142233][ T4916] udevd[4916]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  229.718591][ T4288] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11
[  229.823571][ T8821] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1280'.
[  230.069271][ T8833] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1283'.
[  230.221908][  T129] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  230.287276][ T8833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  230.340290][ T8833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  230.355100][ T8833] bond0 (unregistering): Released all slaves
[  230.366022][ T8845] netlink: 'syz.0.1285': attribute type 4 has an invalid length.
[  230.374446][ T8848] loop7: detected capacity change from 0 to 1024
[  230.445331][  T129] usb 4-1: Using ep0 maxpacket: 32
[  230.456558][  T129] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  230.463770][ T8848] hfsplus: request for non-existent node 16777216 in B*Tree
[  230.481799][  T129] usb 4-1: config 1 interface 2 has no altsetting 0
[  230.498531][  T129] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40
[  230.504683][ T8848] hfsplus: request for non-existent node 16777216 in B*Tree
[  230.543376][  T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.564125][  T129] usb 4-1: Product: syz
[  230.564749][ T8848] hfsplus: request for non-existent node 16777216 in B*Tree
[  230.583950][  T129] usb 4-1: Manufacturer: syz
[  230.598756][  T129] usb 4-1: SerialNumber: syz
[  230.602730][ T8848] hfsplus: request for non-existent node 16777216 in B*Tree
[  230.636683][ T8839] netlink: 'syz.0.1285': attribute type 4 has an invalid length.
[  230.656683][ T8850] hfsplus: request for non-existent node 16777216 in B*Tree
[  230.672253][ T8850] hfsplus: request for non-existent node 16777216 in B*Tree
[  230.842792][  T129] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  230.887188][  T129] usb 4-1: selecting invalid altsetting 0
[  230.927708][  T129] usb 4-1: USB disconnect, device number 9
[  231.223979][ T4916] udevd[4916]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  231.655125][  T129] kernel read not supported for file [userfaultfd] (pid: 129 comm: kworker/0:2)
[  231.693766][ T8887] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1295'.
[  231.862365][ T8895] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1297'.
[  232.928458][ T8918] loop7: detected capacity change from 0 to 512
[  232.942087][   T26] audit: type=1326 audit(232.950:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.3.1302" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff907f9ce59 code=0x0
[  232.969718][ T8918] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  233.036122][ T8918] EXT4-fs (loop7): 1 truncate cleaned up
[  233.056972][ T8918] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  233.222551][ T8927] EXT4-fs (loop7): shut down requested (2)
[  233.242131][ T8926] netlink: 'syz.2.1305': attribute type 1 has an invalid length.
[  233.299939][ T7132] EXT4-fs (loop7): unmounting filesystem.
[  233.315733][ T8926] device bond4 entered promiscuous mode
[  233.389254][ T8926] 8021q: adding VLAN 0 to HW filter on device bond4
[  233.440189][ T8929] device macvlan2 entered promiscuous mode
[  233.449341][ T8929] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  233.478134][ T8934] loop7: detected capacity change from 0 to 512
[  233.537255][ T8934] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  233.634889][ T8934] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #2: comm syz.7.1306: corrupted inode contents
[  233.716124][ T8934] EXT4-fs error (device loop7): ext4_dirty_inode:6156: inode #2: comm syz.7.1306: mark_inode_dirty error
[  233.729032][ T8934] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:477: comm syz.7.1306: Invalid block bitmap block 1011106043 in block_group 0
[  233.778096][ T8934] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm syz.7.1306: Invalid inode table block 2400618135 in block_group 0
[  233.802295][ T8934] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  233.819162][ T8934] EXT4-fs error (device loop7): ext4_dirty_inode:6156: inode #2: comm syz.7.1306: mark_inode_dirty error
[  233.844711][ T8934] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm syz.7.1306: Invalid inode table block 2400618135 in block_group 0
[  233.868135][ T8934] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  233.879128][ T8934] EXT4-fs error (device loop7): ext4_add_nondir:2855: inode #18: comm syz.7.1306: mark_inode_dirty error
[  233.897404][ T8934] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm syz.7.1306: Invalid inode table block 2400618135 in block_group 0
[  233.926509][ T8934] EXT4-fs warning (device loop7): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[  234.058017][ T7132] EXT4-fs (loop7): unmounting filesystem.
[  234.260210][ T8964] loop3: detected capacity change from 0 to 512
[  234.276108][ T8964] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  234.282549][ T8962] loop7: detected capacity change from 0 to 2048
[  234.316973][ T8962] UDF-fs: warning (device loop7): udf_verify_domain_identifier: Descriptor for logical volume marked write protected. Forcing read only mount.
[  234.334329][ T8964] EXT4-fs (loop3): 1 truncate cleaned up
[  234.340004][ T8964] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  234.540196][ T8970] EXT4-fs (loop3): shut down requested (2)
[  234.678786][ T4273] EXT4-fs (loop3): unmounting filesystem.
[  234.840160][ T8982] fuse: Bad value for 'fd'
[  235.034298][ T8990] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1327'.
[  235.072094][ T8992] loop3: detected capacity change from 0 to 512
[  235.203919][ T8992] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  235.364566][ T9006] 9pnet_fd: Insufficient options for proto=fd
[  235.370929][ T8992] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #2: comm syz.3.1328: corrupted inode contents
[  235.400645][ T8992] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #2: comm syz.3.1328: mark_inode_dirty error
[  235.419504][ T8992] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #2: comm syz.3.1328: corrupted inode contents
[  235.433255][ T8992] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.1328: mark_inode_dirty error
[  235.460514][ T8992] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.1328: Invalid block bitmap block 1011106043 in block_group 0
[  235.496509][ T8992] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  235.550289][ T8992] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.1328: Invalid inode table block 2400618135 in block_group 0
[  235.614575][ T8992] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  235.645110][ T8992] EXT4-fs error (device loop3): ext4_add_nondir:2855: inode #18: comm syz.3.1328: mark_inode_dirty error
[  235.678737][ T8992] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.1328: Invalid inode table block 2400618135 in block_group 0
[  235.700908][ T8992] EXT4-fs warning (device loop3): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[  235.808621][ T4273] EXT4-fs (loop3): unmounting filesystem.
[  236.357546][ T9030] loop0: detected capacity change from 0 to 2048
[  236.390131][ T9030] UDF-fs: warning (device loop0): udf_verify_domain_identifier: Descriptor for logical volume marked write protected. Forcing read only mount.
[  236.968736][ T9033] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.976286][ T9033] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.567888][ T9033] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  237.611858][ T9033] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  237.927643][ T9033] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  237.936898][ T9033] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  237.945931][ T9033] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  237.954893][ T9033] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  238.209980][ T9076] netlink: 'syz.7.1357': attribute type 4 has an invalid length.
[  238.229775][ T9076] netlink: 'syz.7.1357': attribute type 4 has an invalid length.
[  238.648310][ T9096] loop3: detected capacity change from 0 to 1024
[  238.680231][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1363'.
[  238.772338][ T4916] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  238.859241][ T9096] loop3: detected capacity change from 0 to 2048
[  238.876962][ T4916] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  238.964696][ T9109] loop7: detected capacity change from 0 to 128
[  238.972140][ T9096]  loop3: p3 < > p4 < >
[  238.977532][ T9096] loop3: partition table partially beyond EOD, truncated
[  238.998291][ T9096] loop3: p3 start 4284289 is beyond EOD, truncated
[  239.055537][   T26] audit: type=1804 audit(239.060:101): pid=9109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1371" name="/newroot/79/file0/bus" dev="loop7" ino=1048634 res=1 errno=0
[  239.419254][ T4916] udevd[4916]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  239.617272][ T9127] netlink: 'syz.4.1377': attribute type 4 has an invalid length.
[  239.673490][ T9130] loop0: detected capacity change from 0 to 512
[  239.707851][ T9131] netlink: 'syz.4.1377': attribute type 4 has an invalid length.
[  239.746497][ T9130] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  239.838817][ T9130] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.1376: iget: bad i_size value: 38620345925642
[  239.874082][ T9130] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.1376: couldn't read orphan inode 15 (err -117)
[  239.899920][ T9130] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  239.995996][ T9130] EXT4-fs warning (device loop0): ext4_dirblock_csum_set:427: inode #2: comm syz.0.1376: No space for directory leaf checksum. Please run e2fsck -D.
[  240.037145][ T4916] udevd[4916]: incorrect ext4 checksum on /dev/loop0
[  240.237725][ T9137] loop3: detected capacity change from 0 to 32768
[  240.303755][ T9137]  loop3: p1 < > p3 < p5 > p4
[  240.308493][ T9137] loop3: partition table partially beyond EOD, truncated
[  240.323284][ T9137] loop3: p4 start 1426063360 is beyond EOD, truncated
[  240.330125][ T9137] loop3: p5 start 75776 is beyond EOD, truncated
[  240.350255][ T4281] EXT4-fs (loop0): unmounting filesystem.
[  240.715915][ T9160] overlayfs: failed to clone upperpath
[  240.851363][ T9164] loop3: detected capacity change from 0 to 128
[  240.895980][ T9164] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  240.935654][ T9164] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  241.047977][ T9173] overlayfs: failed to clone lowerpath
[  241.188323][ T4363] udevd[4363]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  241.211071][ T4916] udevd[4916]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  241.276743][ T9178] netlink: 'syz.0.1394': attribute type 1 has an invalid length.
[  241.379004][ T9178] device bond1 entered promiscuous mode
[  241.385018][ T9178] 8021q: adding VLAN 0 to HW filter on device bond1
[  241.395830][ T9179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1394'.
[  241.405296][ T9179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1394'.
[  241.548225][ T9184] bond1: (slave bridge2): making interface the new active one
[  241.578640][ T9184] device bridge2 entered promiscuous mode
[  241.608434][ T9184] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  241.640488][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  242.454837][ T5105] device hsr_slave_0 left promiscuous mode
[  242.506443][ T5105] device hsr_slave_1 left promiscuous mode
[  242.545909][ T5105] batman_adv: batadv0: Removing interface: batadv_slave_0
[  242.600260][ T5105] batman_adv: batadv0: Removing interface: batadv_slave_1
[  242.677850][ T5105] device bridge_slave_1 left promiscuous mode
[  242.692986][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1411'.
[  242.727205][ T5105] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.781348][ T5105] device bridge_slave_0 left promiscuous mode
[  242.807880][ T5105] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.867444][ T5105] bond1 (unregistering): (slave macvlan1): Releasing backup interface
[  242.881552][ T5105] bond1 (unregistering): Released all slaves
[  243.891760][ T4320] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  244.116934][ T4320] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  244.137120][ T4320] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255
[  244.189339][ T4320] usb 8-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  244.219192][ T4320] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.249478][ T4320] usb 8-1: Product: syz
[  244.264288][ T4320] usb 8-1: Manufacturer: syz
[  244.268910][ T4320] usb 8-1: SerialNumber: syz
[  244.308538][ T4320] usb 8-1: config 0 descriptor??
[  244.318728][ T9239] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  244.360461][ T9239] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  244.605196][ T9239] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  244.642303][ T9239] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  244.841157][ T5105] team0 (unregistering): Port device team_slave_1 removed
[  244.995233][ T5105] team0 (unregistering): Port device team_slave_0 removed
[  245.074991][ T4320] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  245.107178][ T5105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  245.215244][ T5105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  245.279386][ T4320] dm9601 8-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  245.321807][ T4320] usb 8-1: USB disconnect, device number 3
[  245.729256][ T5105] bond0 (unregistering): Released all slaves
[  245.886803][ T9228] netlink: 'syz.3.1414': attribute type 1 has an invalid length.
[  245.969526][ T9230] bond0: (slave dummy0): Releasing backup interface
[  247.802574][   T26] audit: type=1804 audit(247.800:102): pid=9313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1439" name="file1" dev="ramfs" ino=52851 res=1 errno=0
[  249.158674][ T9363] netlink: 'syz.0.1454': attribute type 4 has an invalid length.
[  249.196511][ T9363] netlink: 'syz.0.1454': attribute type 4 has an invalid length.
[  249.275953][ T9365] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  249.671509][ T9377] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  249.680268][ T9358] overlayfs: statfs failed on './file0'
[  249.753529][ T9381] loop0: detected capacity change from 0 to 128
[  249.782502][ T9377] device batadv_slave_1 entered promiscuous mode
[  249.876828][   T26] audit: type=1804 audit(249.880:103): pid=9381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1461" name="/newroot/271/file0/bus" dev="loop0" ino=1048635 res=1 errno=0
[  250.232844][ T9397] netlink: 'syz.4.1468': attribute type 1 has an invalid length.
[  250.285323][ T9397] device bond0 entered promiscuous mode
[  250.291102][ T9397] 8021q: adding VLAN 0 to HW filter on device bond0
[  250.297847][ T4319] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  250.307736][ T9400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1468'.
[  250.316816][ T9400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1468'.
[  250.370209][ T9397] bond0: (slave bridge2): making interface the new active one
[  250.377960][ T9397] device bridge2 entered promiscuous mode
[  250.385998][ T9397] bond0: (slave bridge2): Enslaving as an active interface with an up link
[  250.395345][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  250.482239][ T4319] usb 8-1: Using ep0 maxpacket: 32
[  250.495114][ T4319] usb 8-1: config 0 has an invalid interface number: 184 but max is 0
[  250.512000][ T4319] usb 8-1: config 0 has no interface number 0
[  250.518574][ T4319] usb 8-1: config 0 interface 184 has no altsetting 0
[  250.536279][ T4319] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  250.546170][ T4319] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.557810][ T4319] usb 8-1: Product: syz
[  250.571845][ T4319] usb 8-1: Manufacturer: syz
[  250.576569][ T4319] usb 8-1: SerialNumber: syz
[  250.622542][ T4319] usb 8-1: config 0 descriptor??
[  250.657324][ T4319] smsc75xx v1.0.0
[  251.262808][ T4319] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  251.286954][ T4319] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  251.583582][ T9425] netlink: 10184 bytes leftover after parsing attributes in process `syz.0.1479'.
[  251.593087][ T9425] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1479'.
[  251.651680][  T129] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  251.843497][  T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  251.861492][  T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  251.872110][  T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  251.892117][  T129] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  251.901465][  T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.913590][  T129] usb 4-1: Product: syz
[  251.918347][  T129] usb 4-1: Manufacturer: syz
[  251.927343][  T129] usb 4-1: SerialNumber: syz
[  251.939811][  T129] usb 4-1: config 0 descriptor??
[  252.124858][ T4319] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  252.148937][ T4319] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  252.163501][  T129] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  252.187512][ T4319] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  252.207481][ T4319] smsc75xx: probe of 8-1:0.184 failed with error -71
[  252.224622][ T4319] usb 8-1: USB disconnect, device number 4
[  252.455077][   T26] audit: type=1326 audit(252.460:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9440 comm="syz.2.1492" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f901859ce59 code=0x0
[  252.469254][  T129] usb 4-1: USB disconnect, device number 10
[  255.308231][ T9522] loop3: detected capacity change from 0 to 4096
[  255.456576][ T9535] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  255.503714][ T1275] ieee802154 phy0 wpan0: encryption failed: -22
[  255.510068][ T1275] ieee802154 phy1 wpan1: encryption failed: -22
[  257.006874][ T9558] 9pnet: p9_errstr2errno: server reported unknown error 0x000000
[  257.694085][ T9575] xt_hashlimit: size too large, truncated to 1048576
[  260.177386][ T9618] overlayfs: failed to get inode (-116)
[  260.198717][ T9618] overlayfs: failed to get inode (-116)
[  262.031722][ T9645] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1567'.
[  262.132411][ T9645] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1567'.
[  262.299275][ T9653] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1570'.
[  262.337112][ T9654] netlink: 'syz.0.1569': attribute type 1 has an invalid length.
[  262.377569][ T9654] 8021q: adding VLAN 0 to HW filter on device bond2
[  262.409736][ T9661] bond2: (slave dummy0): making interface the new active one
[  262.425749][ T9661] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  262.434636][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  262.659846][ T9654] bond2 (unregistering): (slave dummy0): Releasing active interface
[  262.674974][ T9654] bond2 (unregistering): Released all slaves
[  262.828575][ T9671] Invalid ELF header magic: != ELF
[  263.223355][ T9682] overlayfs: failed to clone upperpath
[  263.413149][ T9690] loop0: detected capacity change from 0 to 512
[  263.513390][ T9690] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  263.541684][ T5627] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  263.725496][ T5627] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  263.756977][ T5627] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  263.803566][ T5627] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  263.848157][ T5627] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.876961][ T5627] usb 4-1: Product: syz
[  263.881232][ T5627] usb 4-1: Manufacturer: syz
[  263.897498][ T5627] usb 4-1: SerialNumber: syz
[  263.909469][ T4281] EXT4-fs (loop0): unmounting filesystem.
[  263.979700][ T5627] cdc_mbim 4-1:1.0: skipping garbage
[  264.172065][ T9684] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  264.367297][ T9716] loop7: detected capacity change from 0 to 8192
[  264.387693][ T9716] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  264.401061][ T9716] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal
[  264.410585][ T9716] REISERFS (device loop7): using ordered data mode
[  264.417534][ T9716] reiserfs: using flush barriers
[  264.425570][ T9716] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  264.442731][ T9716] REISERFS (device loop7): checking transaction log (loop7)
[  264.541323][ T9716] REISERFS (device loop7): Using tea hash to sort names
[  264.551300][ T9716] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage.
[  264.607358][ T9716] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2)
[  264.633772][ T9716] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2)
[  264.649339][ T9716] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2)
[  264.664033][ T9716] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2)
[  264.685243][ T9716] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2)
[  264.705462][ T9716] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2)
[  264.736704][ T9716] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 5)
[  264.768670][ T9716] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 5)
[  264.784242][ T9716] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 5)
[  264.807398][ T9716] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 5)
[  264.807953][ T9684] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  264.833338][ T9716] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 5)
[  264.849289][ T5627] cdc_mbim 4-1:1.0: setting tx_max = 16384
[  264.875059][ T5627] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device
[  264.933375][ T9716] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 5)
[  264.980002][ T5627] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, c6:d5:51:46:fc:56
[  265.005960][ T9716] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 1)
[  265.080258][ T4320] usb 4-1: USB disconnect, device number 11
[  265.100005][ T9716] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 1)
[  265.108160][ T9730] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1599'.
[  265.122007][ T4320] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM
[  265.230215][ T9733] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1600'.
[  265.785955][ T4352] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  265.985817][ T4352] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  266.008353][ T4352] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  266.051182][ T4352] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.068024][ T4352] usb 1-1: Product: syz
[  266.088111][ T4352] usb 1-1: Manufacturer: syz
[  266.098176][ T4352] usb 1-1: SerialNumber: syz
[  266.109329][ T9769] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1610'.
[  266.137155][ T9769] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1610'.
[  266.806359][ T9791] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1615'.
[  266.826083][ T9791] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms
[  266.888011][ T9795] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1615'.
[  266.925362][ T9795] bond5: Unable to set peer notification delay as MII monitoring is disabled
[  267.140721][ T4352] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[  267.153861][ T4352] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  267.177808][ T4352] cdc_ncm 1-1:1.0: setting rx_max = 2048
[  267.341281][ T4352] cdc_ncm 1-1:1.0: setting tx_max = 184
[  267.749427][ T4352] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  267.793814][ T4352] usb 1-1: USB disconnect, device number 11
[  267.810873][ T4352] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP)
[  267.945533][ T4320] kernel read not supported for file [userfaultfd] (pid: 4320 comm: kworker/0:7)
[  268.574497][ T9860] netlink: 'syz.3.1632': attribute type 12 has an invalid length.
[  268.684993][ T9867] fuse: Bad value for 'fd'
[  268.937188][ T9879] loop7: detected capacity change from 0 to 2048
[  268.970579][ T9879] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  269.217468][ T9887] netlink: 'syz.7.1639': attribute type 1 has an invalid length.
[  269.292184][ T9887] device bond0 entered promiscuous mode
[  269.297925][ T9887] 8021q: adding VLAN 0 to HW filter on device bond0
[  269.339037][ T9890] device macvlan2 entered promiscuous mode
[  269.386230][ T9890] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  269.387091][ T9894] overlayfs: failed to clone upperpath
[  269.459650][ T9896] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1641'.
[  269.749578][   T26] audit: type=1326 audit(269.750:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9907 comm="syz.7.1645" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f6d39ce59 code=0x0
[  269.932333][ T9904] loop3: detected capacity change from 0 to 8192
[  270.006482][ T9904]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  270.025747][ T9904] loop3: partition table partially beyond EOD, truncated
[  270.078944][ T9904] loop3: p1 start 100663296 is beyond EOD, truncated
[  270.115897][ T9904] loop3: p2 size 134217732 extends beyond EOD, truncated
[  270.176596][ T9904] loop3: p4 size 14876672 extends beyond EOD, truncated
[  270.206646][ T9904] loop3: p5 size 134217732 extends beyond EOD, truncated
[  270.239506][ T9904] loop3: p6 size 14876672 extends beyond EOD, truncated
[  270.285656][ T9927] device batadv_slave_1 entered promiscuous mode
[  270.873893][ T4916] udevd[4916]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  270.874262][ T4363] udevd[4363]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  270.902022][ T4351] udevd[4351]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  270.921365][ T4358] udevd[4358]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[  270.921734][ T4490] udevd[4490]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory
[  270.949085][ T9945] ceph: No mds server is up or the cluster is laggy
[  271.137444][ T9955] netlink: 'syz.2.1664': attribute type 4 has an invalid length.
[  271.168745][ T9955] netlink: 'syz.2.1664': attribute type 4 has an invalid length.
[  271.383906][ T4352] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  271.573478][ T4352] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  271.592930][ T4352] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  271.613458][ T4352] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  271.632619][ T4352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.649573][ T4352] usb 4-1: Product: syz
[  271.658354][ T4352] usb 4-1: Manufacturer: syz
[  271.679417][ T4352] usb 4-1: SerialNumber: syz
[  271.758542][ T9974] loop0: detected capacity change from 0 to 16
[  271.778388][ T9974] erofs: (device loop0): mounted with root inode @ nid 36.
[  271.849095][ T9974] erofs: (device loop0): erofs_map_blocks_flatmode: internal error @ nid: 36 (size 18446462598732841076), m_la 0x1000
[  271.920523][ T4352] usb 4-1: 0:2 : does not exist
[  271.927870][ T4352] usb 4-1: unit 9 not found!
[  271.963249][ T4352] usb 4-1: 4:0: cannot get min/max values for control 2 (id 4)
[  271.985671][ T4352] usb 4-1: 4:0: cannot get min/max values for control 3 (id 4)
[  272.006057][ T4352] usb 4-1: 4:0: cannot get min/max values for control 4 (id 4)
[  272.029899][ T4352] usb 4-1: USB disconnect, device number 12
[  272.053678][ T4916] udevd[4916]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  272.458861][ T9988] loop7: detected capacity change from 0 to 512
[  272.477723][ T9988] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  272.502478][ T9988] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #15: comm syz.7.1677: iget: bad i_size value: 38620345925642
[  272.547410][ T9988] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.1677: couldn't read orphan inode 15 (err -117)
[  272.576575][ T9988] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  272.627356][ T9988] EXT4-fs warning (device loop7): ext4_dirblock_csum_set:427: inode #2: comm syz.7.1677: No space for directory leaf checksum. Please run e2fsck -D.
[  272.679006][ T7132] EXT4-fs (loop7): unmounting filesystem.
[  273.073669][T10010] loop0: detected capacity change from 0 to 16
[  273.107029][T10010] erofs: (device loop0): mounted with root inode @ nid 36.
[  273.177908][T10010] erofs: (device loop0): z_erofs_fill_inode_lazy: unknown HEAD1 format 6 for nid 36, please upgrade kernel
[  273.210342][T10010] erofs: (device loop0): z_erofs_fill_inode_lazy: unknown HEAD1 format 6 for nid 36, please upgrade kernel
[  273.229327][T10010] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-95]
[  273.401994][T10014] loop7: detected capacity change from 0 to 8192
[  273.464100][T10014]  loop7: p1 p2
[  273.467616][T10014] loop7: partition table partially beyond EOD, truncated
[  273.491883][T10014] loop7: p1 start 16777216 is beyond EOD, truncated
[  273.526617][T10014] loop7: p2 start 50331648 is beyond EOD, truncated
[  273.623021][T10027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1693'.
[  275.130186][T10082] loop7: detected capacity change from 0 to 4096
[  275.238115][   T26] audit: type=1800 audit(275.240:106): pid=10082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1718" name="file1" dev="loop7" ino=33 res=0 errno=0
[  276.945571][ T4320] libceph: connect (1)[c::]:6789 error -101
[  276.962207][ T4320] libceph: mon0 (1)[c::]:6789 connect error
[  277.107203][T10137] ceph: No mds server is up or the cluster is laggy
[  277.492713][T10158] loop3: detected capacity change from 0 to 8192
[  278.508780][T10191] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.1759'.
[  278.528247][T10191] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1759'.
[  279.077341][T10214] loop0: detected capacity change from 0 to 512
[  279.138552][T10214] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  279.574660][T10241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1775'.
[  279.985533][ T4281] EXT4-fs (loop0): unmounting filesystem.
[  280.295301][T10268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1785'.
[  282.348179][T10308] loop0: detected capacity change from 0 to 40427
[  282.363890][T10308] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff
[  282.377808][T10308] F2FS-fs (loop0): invalid crc value
[  282.410099][T10308] F2FS-fs (loop0): Found nat_bits in checkpoint
[  282.499075][T10308] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  282.570720][T10308] syz.0.1801: attempt to access beyond end of device
[  282.570720][T10308] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  282.700212][ T4281] syz-executor: attempt to access beyond end of device
[  282.700212][ T4281] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  284.828913][T10340] loop3: detected capacity change from 0 to 512
[  284.989028][T10340] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002]
[  285.010884][T10340] System zones: 1-12
[  285.067807][T10340] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.1812: corrupted in-inode xattr
[  285.158976][T10340] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.1812: couldn't read orphan inode 15 (err -117)
[  285.268992][T10340] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  285.444592][T10340] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #2: comm syz.3.1812: directory missing '.'
[  285.634007][ T4273] EXT4-fs (loop3): unmounting filesystem.
[  288.211524][T10420] netlink: 'syz.7.1846': attribute type 10 has an invalid length.
[  288.251190][T10420] team0: Port device dummy0 added
[  288.265748][T10420] netlink: 'syz.7.1846': attribute type 10 has an invalid length.
[  288.282722][T10410] loop0: detected capacity change from 0 to 32768
[  288.289139][T10420] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  288.315985][T10410] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1841 (10410)
[  288.354558][T10420] team0: Failed to send options change via netlink (err -105)
[  288.362834][T10420] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  288.372746][T10420] team0: Port device dummy0 removed
[  288.390269][T10410] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  288.422146][T10410] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  288.433608][T10410] BTRFS info (device loop0): setting nodatasum
[  288.496319][T10410] BTRFS info (device loop0): enabling auto defrag
[  288.542031][T10410] BTRFS info (device loop0): disabling tree log
[  288.548317][T10410] BTRFS info (device loop0): using free space tree
[  288.584567][T10425] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1848'.
[  288.721678][T10450] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1853'.
[  288.772311][T10410] BTRFS info (device loop0): enabling ssd optimizations
[  288.902094][   T26] audit: type=1800 audit(288.910:107): pid=10410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1841" name="file1" dev="loop0" ino=260 res=0 errno=0
[  289.381457][ T4281] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  289.981639][ T4287] Bluetooth: hci3: command 0x0401 tx timeout
[  290.051244][T10494] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1864'.
[  290.303039][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1868'.
[  290.329341][T10508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1870'.
[  290.341393][T10504] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1868'.
[  290.361807][T10504] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1868'.
[  290.548694][T10511] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  291.657193][    C1] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(79001100443076) <= P.seqno(0) <= S.SWH(79001100443150)) and (P.ackno exists or LAWL(6437076726738) <= P.ackno(6437076726738) <= S.AWH(6437076726740), sending SYNC...
[  292.334326][T10581] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1891'.
[  292.340608][T10583] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1903'.
[  292.354676][T10581] unsupported nlmsg_type 40
[  292.430494][    C1] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(79001100443076) <= P.seqno(0) <= S.SWH(79001100443150)) and (P.ackno exists or LAWL(6437076726738) <= P.ackno(6437076726738) <= S.AWH(6437076726742), sending SYNC...
[  293.151960][T10614] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1906'.
[  293.995780][T10542] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  294.249442][T10627] kvm [10626]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00
[  294.291935][T10627] kvm [10626]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00
[  294.304918][T10627] kvm [10626]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00
[  294.338943][T10627] kvm [10626]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00
[  294.371055][T10627] kvm [10626]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00
[  296.073459][T10684] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.080907][T10684] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.768645][T10684] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  297.442128][T10684] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  297.451682][T10684] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  297.460701][T10684] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  297.470384][T10684] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  298.289309][T10493] libceph: connect (1)[c::]:6789 error -101
[  298.297724][T10493] libceph: mon0 (1)[c::]:6789 connect error
[  298.419097][T10740] ceph: No mds server is up or the cluster is laggy
[  298.546707][ T4288] Bluetooth: hci1: command 0x0406 tx timeout
[  298.626139][T10752] __nla_validate_parse: 1 callbacks suppressed
[  298.626155][T10752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1948'.
[  298.697250][T10752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1948'.
[  298.918063][T10760] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1949'.
[  299.442594][T10780] loop7: detected capacity change from 0 to 256
[  299.522264][T10780] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 196)
[  299.678110][ T7132] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 196)
[  299.820504][T10788] loop7: detected capacity change from 0 to 64
[  299.857083][T10791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1958'.
[  299.891067][T10791] 8021q: adding VLAN 0 to HW filter on device bond6
[  299.925401][T10791] 8021q: adding VLAN 0 to HW filter on device bond7
[  299.945627][T10791] bond6: (slave bond7): Enslaving as an active interface with an up link
[  300.073044][T10794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1958'.
[  300.919958][T10794] bond6 (unregistering): (slave bond7): Releasing backup interface
[  300.986966][T10794] bond6 (unregistering): Released all slaves
[  301.222507][T10832] loop3: detected capacity change from 0 to 4096
[  301.461338][   T26] audit: type=1800 audit(301.460:108): pid=10832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1967" name="file1" dev="loop3" ino=33 res=0 errno=0
[  302.010194][T10866] netlink: 'syz.0.1988': attribute type 10 has an invalid length.
[  302.178012][T10866] team0: Port device dummy0 added
[  302.199308][T10871] netlink: 'syz.0.1988': attribute type 10 has an invalid length.
[  302.260644][T10871] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  302.318023][T10871] team0: Failed to send options change via netlink (err -105)
[  302.335821][T10871] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  302.369096][T10871] team0: Port device dummy0 removed
[  302.386538][T10871] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  302.780256][T10888] netlink: 'syz.4.1986': attribute type 29 has an invalid length.
[  302.806130][T10888] netlink: 'syz.4.1986': attribute type 29 has an invalid length.
[  302.829306][T10888] netlink: 'syz.4.1986': attribute type 29 has an invalid length.
[  302.881983][T10888] netlink: 'syz.4.1986': attribute type 29 has an invalid length.
[  302.937174][T10888] netlink: 'syz.4.1986': attribute type 29 has an invalid length.
[  302.949113][T10888] netlink: 'syz.4.1986': attribute type 29 has an invalid length.
[  303.101705][ T5625] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  303.249939][ T4288] Bluetooth: Wrong link type (-22)
[  303.295191][ T5625] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  303.314565][ T5625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.331631][ T5625] usb 1-1: Product: syz
[  303.341814][ T5625] usb 1-1: Manufacturer: syz
[  303.346612][ T5625] usb 1-1: SerialNumber: syz
[  303.359023][ T5625] usb 1-1: config 0 descriptor??
[  303.364722][T10917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1996'.
[  303.490823][T10921] loop3: detected capacity change from 0 to 8192
[  303.529635][T10921] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  303.544823][T10921] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  303.554709][T10921] REISERFS (device loop3): using ordered data mode
[  303.561382][T10921] reiserfs: using flush barriers
[  303.571932][T10921] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  303.593791][ T5625] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  303.617757][T10921] REISERFS (device loop3): checking transaction log (loop3)
[  303.734392][T10927] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2003'.
[  303.907189][T10921] REISERFS (device loop3): Using tea hash to sort names
[  303.922168][T10921] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  304.116468][T10921] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2)
[  304.607453][ T5625] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32
[  304.625088][ T5625] usb 1-1: USB disconnect, device number 12
[  305.027839][T10961] netlink: 'syz.4.2015': attribute type 1 has an invalid length.
[  305.065111][T10961] device bond4 entered promiscuous mode
[  305.071112][T10961] 8021q: adding VLAN 0 to HW filter on device bond4
[  305.115205][T10961] device macvlan4 entered promiscuous mode
[  305.132200][T10961] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  305.527315][T10972] overlayfs: failed to clone upperpath
[  305.981674][T10904] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  306.732563][T11011] overlayfs: failed to clone upperpath
[  308.036849][   T26] audit: type=1326 audit(308.040:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11059 comm="syz.4.2055" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f165159ce59 code=0x0
[  308.830292][T11087] netlink: 'syz.3.2062': attribute type 10 has an invalid length.
[  308.880347][T11087] team0: Port device dummy0 added
[  308.888021][T11090] netlink: 'syz.3.2062': attribute type 10 has an invalid length.
[  308.897216][T11090] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  308.922854][T11090] team0: Failed to send options change via netlink (err -105)
[  308.930777][T11090] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  308.962044][T11090] team0: Port device dummy0 removed
[  308.994632][T11090] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  309.650864][T11126] loop7: detected capacity change from 0 to 16
[  309.681071][T11126] erofs: (device loop7): mounted with root inode @ nid 36.
[  309.696214][T11126] erofs: (device loop7): z_erofs_readahead: readahead error at page 3 @ nid 89
[  309.734339][T11126] syz.7.2078: attempt to access beyond end of device
[  309.734339][T11126] loop7: rw=524288, sector=34359738360, nr_sectors = 8 limit=16
[  309.771290][T11126] erofs: (device loop7): z_erofs_readahead: readahead error at page 4 @ nid 89
[  309.780805][T11126] syz.7.2078: attempt to access beyond end of device
[  309.780805][T11126] loop7: rw=524288, sector=16, nr_sectors = 40 limit=16
[  309.795578][T11126] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[4096]
[  309.808245][T11126] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  309.821056][   T26] audit: type=1800 audit(309.820:110): pid=11126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2078" name="file2" dev="loop7" ino=89 res=0 errno=0
[  309.848851][T11131] netlink: 'syz.2.2079': attribute type 10 has an invalid length.
[  309.953078][T11131] team0: Port device dummy0 added
[  309.964022][T11132] netlink: 'syz.2.2079': attribute type 10 has an invalid length.
[  309.979736][T11132] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  310.053174][T11132] team0: Failed to send options change via netlink (err -105)
[  310.060822][T11132] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  310.105474][T11132] team0: Port device dummy0 removed
[  310.125104][T11132] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  310.265338][T11146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2087'.
[  310.301930][T11148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2087'.
[  310.513162][T11158] netlink: 'syz.3.2092': attribute type 5 has an invalid length.
[  311.387785][T11185] loop7: detected capacity change from 0 to 512
[  311.431865][T11185] EXT4-fs: Ignoring removed mblk_io_submit option
[  311.438381][T11185] EXT4-fs: Ignoring removed i_version option
[  311.476180][T11185] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  311.557055][T11185] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  311.619447][T11185] EXT4-fs error (device loop7): ext4_find_dest_de:2115: inode #12: block 32: comm syz.7.2105: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[  311.719100][ T7132] EXT4-fs (loop7): unmounting filesystem.
[  312.397343][T11220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2116'.
[  313.082563][T11237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2123'.
[  313.112516][T11237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2123'.
[  314.084523][T11265] netlink: 'syz.0.2133': attribute type 29 has an invalid length.
[  314.093359][T11265] netlink: 'syz.0.2133': attribute type 29 has an invalid length.
[  314.106231][T11265] netlink: 'syz.0.2133': attribute type 29 has an invalid length.
[  314.117020][T11265] netlink: 'syz.0.2133': attribute type 29 has an invalid length.
[  314.140802][T11265] netlink: 'syz.0.2133': attribute type 29 has an invalid length.
[  314.227670][T11265] netlink: 'syz.0.2133': attribute type 29 has an invalid length.
[  314.459071][T11287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2141'.
[  315.451309][T11318] netlink: 'syz.2.2152': attribute type 29 has an invalid length.
[  315.455596][T11319] overlayfs: failed to clone upperpath
[  315.466388][T11318] netlink: 'syz.2.2152': attribute type 29 has an invalid length.
[  315.478712][T11318] netlink: 'syz.2.2152': attribute type 29 has an invalid length.
[  315.495341][T11318] netlink: 'syz.2.2152': attribute type 29 has an invalid length.
[  316.109420][T11342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2164'.
[  316.129477][T11342] batman_adv: batadv0: Removing interface: batadv_slave_0
[  316.146295][T11342] batman_adv: batadv0: Removing interface: batadv_slave_1
[  316.627776][T11362] xt_hashlimit: size too large, truncated to 1048576
[  316.944038][ T1275] ieee802154 phy0 wpan0: encryption failed: -22
[  316.950425][ T1275] ieee802154 phy1 wpan1: encryption failed: -22
[  318.108041][T11389] device bridge2 entered promiscuous mode
[  318.451910][T11398] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000
[  319.005833][T11425] loop7: detected capacity change from 0 to 2048
[  319.129459][T11425] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  319.324104][T11435] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  319.394609][T11435] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 160 with error 28
[  319.471775][T11435] EXT4-fs (loop7): This should not happen!! Data will be lost
[  319.471775][T11435] 
[  319.481510][T11435] EXT4-fs (loop7): Total free blocks count 0
[  319.512778][T11435] EXT4-fs (loop7): Free/Dirty block details
[  319.529340][T11435] EXT4-fs (loop7): free_blocks=4096
[  319.550656][T11435] EXT4-fs (loop7): dirty_blocks=512
[  319.556394][T11441] loop3: detected capacity change from 0 to 512
[  319.574486][T11435] EXT4-fs (loop7): Block reservation details
[  319.596169][T11435] EXT4-fs (loop7): i_reserved_data_blocks=32
[  319.667338][T11441] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.2201: bad orphan inode 15
[  319.729048][T11441] ext4_test_bit(bit=14, block=5) = 0
[  319.749051][T11441] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  319.912066][T11441] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #2: block 13: comm syz.3.2201: lblock 0 mapped to illegal pblock 13 (length 1)
[  319.957315][ T5071] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 160 with max blocks 322 with error 28
[  320.092801][ T4273] EXT4-fs (loop3): unmounting filesystem.
[  320.421960][T11454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2206'.
[  320.459205][T11454] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2206'.
[  320.526057][T11444] infiniband syz1: set active
[  320.576646][T11444] infiniband syz1: added syz_tun
[  320.936017][T11444] RDS/IB: syz1: added
[  320.941416][T11444] smc: adding ib device syz1 with port count 1
[  320.949681][T11444] smc:    ib device syz1 port 1 has pnetid 
[  321.288454][T11469] netlink: 323 bytes leftover after parsing attributes in process `syz.2.2211'.
[  321.449004][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2213'.
[  321.818952][T11483] 9pnet_virtio: no channels available for device syz
[  323.348960][T11525] ªªªªªª: renamed from vlan0
[  323.828105][T11536] mmap: syz.7.2236 (11536) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  324.107860][T11544] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2241'.
[  324.399989][T11558] loop3: detected capacity change from 0 to 8
[  324.458938][T11558] SQUASHFS error: zlib decompression failed, data probably corrupt
[  324.475738][T11558] SQUASHFS error: Failed to read block 0x9b: -5
[  324.495314][T11558] SQUASHFS error: Unable to read metadata cache entry [99]
[  324.514733][T11558] SQUASHFS error: Unable to read inode 0x104
[  325.314704][T11588] loop7: detected capacity change from 0 to 256
[  326.419643][T11611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2264'.
[  326.678324][T11624] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2269'.
[  327.132967][T11630] sd 0:0:1:0: PR command failed: 1026
[  327.138388][T11630] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  327.150171][T11630] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  327.251977][T11642] device veth0 entered promiscuous mode
[  327.263145][T11642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2276'.
[  327.544613][T11641] device veth0 left promiscuous mode
[  328.111728][T10492] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  328.297390][T10492] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  328.318815][T10492] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  328.335682][T10492] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  328.360654][T10492] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.402105][T11655] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  328.669422][T10492] usb 8-1: USB disconnect, device number 5
[  329.297673][ T4288] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  329.304349][ T4287] Bluetooth: hci5: command 0x1003 tx timeout
[  329.954629][T11701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2296'.
[  330.068605][T11701] HTB: quantum of class 80190007 is big. Consider r2q change.
[  330.221984][ T6785] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  330.415802][ T6785] usb 8-1: Using ep0 maxpacket: 32
[  330.423416][ T6785] usb 8-1: config 2 has an invalid interface number: 88 but max is 0
[  330.446328][ T6785] usb 8-1: config 2 has no interface number 0
[  330.480035][ T6785] usb 8-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256
[  330.506455][ T6785] usb 8-1: config 2 interface 88 has no altsetting 0
[  330.535881][ T6785] usb 8-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  330.551755][ T6785] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.571684][ T6785] usb 8-1: Product: syz
[  330.575879][ T6785] usb 8-1: Manufacturer: syz
[  330.610287][ T6785] usb 8-1: SerialNumber: syz
[  330.630330][T11702] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  330.853572][T11702] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  330.911657][ T5625] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  331.094145][ T5625] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  331.105572][ T5625] usb 4-1: config 0 interface 0 has no altsetting 0
[  331.112280][ T5625] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  331.121363][ T5625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.131877][ T5625] usb 4-1: config 0 descriptor??
[  331.679860][T11736] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2313'.
[  331.851375][T11742] overlayfs: failed to clone upperpath
[  332.066881][ T6785] asix 8-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  332.082095][ T6785] asix 8-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  332.092845][ T6785] asix: probe of 8-1:2.88 failed with error -71
[  332.112065][ T6785] usb 8-1: USB disconnect, device number 6
[  332.299525][T10493] usb 4-1: USB disconnect, device number 13
[  333.237864][T11746] could not allocate digest TFM handle blake2s-256-generic
[  334.381691][ T4288] Bluetooth: hci4: command 0x0406 tx timeout
[  334.435925][T11799] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2339'.
[  334.977373][T11828] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2351'.
[  336.876673][  T129] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  337.068329][  T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  337.089650][  T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  337.108728][  T129] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  337.292494][  T129] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  337.319595][  T129] usb 4-1: Manufacturer: syz
[  337.353546][  T129] usb 4-1: config 0 descriptor??
[  337.571191][T11895] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.578749][T11895] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.635696][T11895] device vlan2 left promiscuous mode
[  337.673725][T11895] device vlan0 left promiscuous mode
[  337.689381][T11895] bridge0: port 3(vlan2) entered disabled state
[  337.712767][T11895] device bridge_slave_1 left promiscuous mode
[  337.721272][T11895] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.737430][T11895] device bridge_slave_0 left promiscuous mode
[  337.747891][T11895] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.785544][    C1] ------------[ cut here ]------------
[  337.791480][    C1] ODEBUG: free active (active state 0) object type: timer_list hint: br_ip6_multicast_port_query_expired+0x0/0x20
[  337.803936][    C1] WARNING: CPU: 1 PID: 11895 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x43c/0x530
[  337.814088][    C1] Modules linked in:
[  337.818009][    C1] CPU: 1 PID: 11895 Comm: syz.4.2377 Not tainted syzkaller #0
[  337.825517][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  337.835624][    C1] RIP: 0010:debug_check_no_obj_freed+0x43c/0x530
[  337.842014][    C1] Code: ef e8 98 af bd fd 4c 8b 45 00 48 c7 c7 c0 24 df 8a 48 c7 c6 80 21 df 8a 48 c7 c2 20 26 df 8a 8b 0c 24 4d 89 e9 e8 b4 11 38 fd <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 75 5d 0a
[  337.861670][    C1] RSP: 0018:ffffc900001e0a18 EFLAGS: 00010246
[  337.867756][    C1] RAX: efd435b75458b800 RBX: ffffffff96ec2be8 RCX: ffff888024cc0000
[  337.875776][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  337.883793][    C1] RBP: ffffffff8a8df720 R08: ffffc900001e06a7 R09: 1ffff9200003c0d4
[  337.891814][    C1] R10: dffffc0000000000 R11: fffff5200003c0d5 R12: ffff8880573c5400
[  337.899798][    C1] R13: ffffffff8915c690 R14: ffff8880573c5000 R15: ffff8880573c5278
[  337.907820][    C1] FS:  00007f16525306c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  337.916822][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  337.923454][    C1] CR2: 00007f90193456b8 CR3: 0000000073c4e000 CR4: 00000000003506e0
[  337.931444][    C1] Call Trace:
[  337.934776][    C1]  <IRQ>
[  337.937645][    C1]  slab_free_freelist_hook+0xd2/0x1a0
[  337.943075][    C1]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  337.949255][    C1]  ? kobject_put+0x21d/0x460
[  337.953893][    C1]  __kmem_cache_free+0xb6/0x1f0
[  337.958767][    C1]  kobject_put+0x21d/0x460
[  337.963242][    C1]  ? br_port_flag_is_set+0x170/0x170
[  337.968541][    C1]  ? rcu_core+0xa29/0x1740
[  337.973008][    C1]  rcu_core+0xa99/0x1740
[  337.977286][    C1]  ? rcu_cpu_kthread_park+0x90/0x90
[  337.982535][    C1]  ? __run_timers+0x79c/0x800
[  337.987232][    C1]  ? __run_timers+0x75f/0x800
[  337.991964][    C1]  ? detach_timer+0x350/0x350
[  337.996670][    C1]  ? lock_chain_count+0x20/0x20
[  338.001580][    C1]  handle_softirqs+0x2a1/0x930
[  338.006452][    C1]  ? __irq_exit_rcu+0x13b/0x230
[  338.011324][    C1]  ? do_softirq+0x210/0x210
[  338.015883][    C1]  __irq_exit_rcu+0x13b/0x230
[  338.020571][    C1]  ? irq_exit_rcu+0x20/0x20
[  338.025131][    C1]  irq_exit_rcu+0x5/0x20
[  338.029378][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  338.035055][    C1]  </IRQ>
[  338.037990][    C1]  <TASK>
[  338.040929][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  338.046970][    C1] RIP: 0010:lockdep_unregister_key+0x4e8/0x550
[  338.053176][    C1] Code: d1 aa 90 48 c7 c6 70 f7 64 81 e8 73 a8 07 00 e8 de bb 07 00 e9 5c fc ff ff e8 d4 9e c9 08 41 f7 c4 00 02 00 00 74 d1 fb 84 db <75> d0 eb e1 0f 0b eb 88 0f 0b e9 f8 fe ff ff 0f 0b e9 45 ff ff ff
[  338.072838][    C1] RSP: 0018:ffffc9000432f820 EFLAGS: 00000202
[  338.078925][    C1] RAX: dffffc0000000000 RBX: ffff888027179a01 RCX: efd435b75458b800
[  338.086941][    C1] RDX: 0000000000000001 RSI: ffffffff8a8c2680 RDI: ffffffff8adf1b60
[  338.094959][    C1] RBP: ffffc9000432f900 R08: ffffffff90aafa6f R09: 1ffffffff2155f4d
[  338.102983][    C1] R10: dffffc0000000000 R11: fffffbfff2155f4e R12: 0000000000000a06
[  338.110963][    C1] R13: ffff888027179a99 R14: ffffffff90aad198 R15: 1ffff92000865f08
[  338.118985][    C1]  ? lockdep_reset_lock+0x300/0x300
[  338.124243][    C1]  ? rcu_is_watching+0x11/0xa0
[  338.129030][    C1]  ? qdisc_reset+0x299/0x5c0
[  338.133675][    C1]  __qdisc_destroy+0x128/0x430
[  338.138470][    C1]  dev_shutdown+0x92/0x440
[  338.142946][    C1]  unregister_netdevice_many_notify+0xa76/0x19c0
[  338.149287][    C1]  ? kasan_quarantine_put+0xd4/0x220
[  338.154618][    C1]  ? unregister_netdevice_many+0x20/0x20
[  338.160256][    C1]  ? slab_free_freelist_hook+0x131/0x1a0
[  338.165933][    C1]  ? kernfs_put+0x319/0x490
[  338.170436][    C1]  unregister_netdevice_queue+0x328/0x370
[  338.176208][    C1]  ? kernfs_put+0x477/0x490
[  338.180722][    C1]  ? list_netdevice+0x6c0/0x6c0
[  338.185627][    C1]  ? sysfs_remove_group+0x263/0x290
[  338.190848][    C1]  ? br_dev_delete+0xde/0x110
[  338.195598][    C1]  br_del_bridge+0xb9/0xf0
[  338.200034][    C1]  br_ioctl_stub+0x6e0/0xcf0
[  338.204680][    C1]  ? rcu_is_watching+0x11/0xa0
[  338.209455][    C1]  ? rcu_read_unlock+0xa0/0xa0
[  338.214261][    C1]  ? __mutex_lock+0x1ab/0xaf0
[  338.218952][    C1]  ? mutex_lock_nested+0x10/0x10
[  338.223948][    C1]  ? rcu_read_unlock+0xa0/0xa0
[  338.228725][    C1]  sock_ioctl+0x494/0x710
[  338.233112][    C1]  ? sock_poll+0x410/0x410
[  338.237557][    C1]  ? bpf_lsm_file_ioctl+0x5/0x10
[  338.242550][    C1]  ? security_file_ioctl+0x7c/0xa0
[  338.247684][    C1]  ? sock_poll+0x410/0x410
[  338.252160][    C1]  __se_sys_ioctl+0xfa/0x170
[  338.256774][    C1]  do_syscall_64+0x4c/0xa0
[  338.261193][    C1]  ? clear_bhb_loop+0x60/0xb0
[  338.265928][    C1]  ? clear_bhb_loop+0x60/0xb0
[  338.270628][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  338.276570][    C1] RIP: 0033:0x7f165159ce59
[  338.281002][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  338.300657][    C1] RSP: 002b:00007f1652530028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  338.309103][    C1] RAX: ffffffffffffffda RBX: 00007f1651815fa0 RCX: 00007f165159ce59
[  338.317138][    C1] RDX: 0000200000000900 RSI: 00000000000089a1 RDI: 0000000000000007
[  338.325154][    C1] RBP: 00007f1651632d6f R08: 0000000000000000 R09: 0000000000000000
[  338.333184][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  338.341168][    C1] R13: 00007f1651816038 R14: 00007f1651815fa0 R15: 00007fff50466a08
[  338.349222][    C1]  </TASK>
[  338.352294][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  338.359575][    C1] CPU: 1 PID: 11895 Comm: syz.4.2377 Not tainted syzkaller #0
[  338.367040][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  338.377101][    C1] Call Trace:
[  338.380387][    C1]  <IRQ>
[  338.383241][    C1]  dump_stack_lvl+0x188/0x24e
[  338.387929][    C1]  ? memcpy+0x3c/0x60
[  338.391922][    C1]  ? show_regs_print_info+0x12/0x12
[  338.397133][    C1]  ? load_image+0x400/0x400
[  338.399872][  T129] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0006/input/input9
[  338.412047][    C1]  panic+0x2e5/0x730
[  338.415965][    C1]  ? bpf_jit_dump+0xd0/0xd0
[  338.420493][    C1]  __warn+0x2f8/0x4f0
[  338.424488][    C1]  ? debug_check_no_obj_freed+0x43c/0x530
[  338.430217][    C1]  ? debug_check_no_obj_freed+0x43c/0x530
[  338.435955][    C1]  report_bug+0x2ba/0x4f0
[  338.440297][    C1]  ? debug_check_no_obj_freed+0x43c/0x530
[  338.446034][    C1]  handle_bug+0x3a/0x70
[  338.450193][    C1]  exc_invalid_op+0x16/0x40
[  338.454680][    C1]  asm_exc_invalid_op+0x16/0x20
[  338.459513][    C1] RIP: 0010:debug_check_no_obj_freed+0x43c/0x530
[  338.465833][    C1] Code: ef e8 98 af bd fd 4c 8b 45 00 48 c7 c7 c0 24 df 8a 48 c7 c6 80 21 df 8a 48 c7 c2 20 26 df 8a 8b 0c 24 4d 89 e9 e8 b4 11 38 fd <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 75 5d 0a
[  338.485444][    C1] RSP: 0018:ffffc900001e0a18 EFLAGS: 00010246
[  338.491492][    C1] RAX: efd435b75458b800 RBX: ffffffff96ec2be8 RCX: ffff888024cc0000
[  338.499455][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  338.507407][    C1] RBP: ffffffff8a8df720 R08: ffffc900001e06a7 R09: 1ffff9200003c0d4
[  338.515370][    C1] R10: dffffc0000000000 R11: fffff5200003c0d5 R12: ffff8880573c5400
[  338.521618][  T129] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0006/input/input10
[  338.533818][    C1] R13: ffffffff8915c690 R14: ffff8880573c5000 R15: ffff8880573c5278
[  338.541806][    C1]  ? br_ip6_multicast_router_expired+0x20/0x20
[  338.547623][  T129] uclogic 0003:256C:006D.0006: input,hiddev0,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.3-1/input0
[  338.559510][    C1]  ? debug_check_no_obj_freed+0x43c/0x530
[  338.565257][    C1]  slab_free_freelist_hook+0xd2/0x1a0
[  338.570645][    C1]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  338.576819][    C1]  ? kobject_put+0x21d/0x460
[  338.581446][    C1]  __kmem_cache_free+0xb6/0x1f0
[  338.586331][    C1]  kobject_put+0x21d/0x460
[  338.590760][    C1]  ? br_port_flag_is_set+0x170/0x170
[  338.596054][    C1]  ? rcu_core+0xa29/0x1740
[  338.600484][    C1]  rcu_core+0xa99/0x1740
[  338.604751][    C1]  ? rcu_cpu_kthread_park+0x90/0x90
[  338.609961][    C1]  ? __run_timers+0x79c/0x800
[  338.614654][    C1]  ? __run_timers+0x75f/0x800
[  338.619355][    C1]  ? detach_timer+0x350/0x350
[  338.624047][    C1]  ? lock_chain_count+0x20/0x20
[  338.628921][    C1]  handle_softirqs+0x2a1/0x930
[  338.633701][    C1]  ? __irq_exit_rcu+0x13b/0x230
[  338.638571][    C1]  ? do_softirq+0x210/0x210
[  338.643093][    C1]  __irq_exit_rcu+0x13b/0x230
[  338.647797][    C1]  ? irq_exit_rcu+0x20/0x20
[  338.652328][    C1]  irq_exit_rcu+0x5/0x20
[  338.656576][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  338.662224][    C1]  </IRQ>
[  338.665154][    C1]  <TASK>
[  338.668090][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  338.674082][    C1] RIP: 0010:lockdep_unregister_key+0x4e8/0x550
[  338.680250][    C1] Code: d1 aa 90 48 c7 c6 70 f7 64 81 e8 73 a8 07 00 e8 de bb 07 00 e9 5c fc ff ff e8 d4 9e c9 08 41 f7 c4 00 02 00 00 74 d1 fb 84 db <75> d0 eb e1 0f 0b eb 88 0f 0b e9 f8 fe ff ff 0f 0b e9 45 ff ff ff
[  338.685518][T10492] usb 4-1: USB disconnect, device number 14
[  338.705736][    C1] RSP: 0018:ffffc9000432f820 EFLAGS: 00000202
[  338.711801][    C1] RAX: dffffc0000000000 RBX: ffff888027179a01 RCX: efd435b75458b800
[  338.719778][    C1] RDX: 0000000000000001 RSI: ffffffff8a8c2680 RDI: ffffffff8adf1b60
[  338.727741][    C1] RBP: ffffc9000432f900 R08: ffffffff90aafa6f R09: 1ffffffff2155f4d
[  338.735720][    C1] R10: dffffc0000000000 R11: fffffbfff2155f4e R12: 0000000000000a06
[  338.743674][    C1] R13: ffff888027179a99 R14: ffffffff90aad198 R15: 1ffff92000865f08
[  338.751645][    C1]  ? lockdep_reset_lock+0x300/0x300
[  338.756830][    C1]  ? rcu_is_watching+0x11/0xa0
[  338.761586][    C1]  ? qdisc_reset+0x299/0x5c0
[  338.766195][    C1]  __qdisc_destroy+0x128/0x430
[  338.770975][    C1]  dev_shutdown+0x92/0x440
[  338.775411][    C1]  unregister_netdevice_many_notify+0xa76/0x19c0
[  338.781765][    C1]  ? kasan_quarantine_put+0xd4/0x220
[  338.787068][    C1]  ? unregister_netdevice_many+0x20/0x20
[  338.792717][    C1]  ? slab_free_freelist_hook+0x131/0x1a0
[  338.798356][    C1]  ? kernfs_put+0x319/0x490
[  338.802852][    C1]  unregister_netdevice_queue+0x328/0x370
[  338.808578][    C1]  ? kernfs_put+0x477/0x490
[  338.813077][    C1]  ? list_netdevice+0x6c0/0x6c0
[  338.817930][    C1]  ? sysfs_remove_group+0x263/0x290
[  338.823114][    C1]  ? br_dev_delete+0xde/0x110
[  338.827791][    C1]  br_del_bridge+0xb9/0xf0
[  338.832188][    C1]  br_ioctl_stub+0x6e0/0xcf0
[  338.836762][    C1]  ? rcu_is_watching+0x11/0xa0
[  338.841518][    C1]  ? rcu_read_unlock+0xa0/0xa0
[  338.846279][    C1]  ? __mutex_lock+0x1ab/0xaf0
[  338.850938][    C1]  ? mutex_lock_nested+0x10/0x10
[  338.855862][    C1]  ? rcu_read_unlock+0xa0/0xa0
[  338.860603][    C1]  sock_ioctl+0x494/0x710
[  338.864926][    C1]  ? sock_poll+0x410/0x410
[  338.869350][    C1]  ? bpf_lsm_file_ioctl+0x5/0x10
[  338.874273][    C1]  ? security_file_ioctl+0x7c/0xa0
[  338.879376][    C1]  ? sock_poll+0x410/0x410
[  338.883783][    C1]  __se_sys_ioctl+0xfa/0x170
[  338.888364][    C1]  do_syscall_64+0x4c/0xa0
[  338.892761][    C1]  ? clear_bhb_loop+0x60/0xb0
[  338.897434][    C1]  ? clear_bhb_loop+0x60/0xb0
[  338.902106][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  338.907984][    C1] RIP: 0033:0x7f165159ce59
[  338.912391][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  338.932006][    C1] RSP: 002b:00007f1652530028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  338.940434][    C1] RAX: ffffffffffffffda RBX: 00007f1651815fa0 RCX: 00007f165159ce59
[  338.948416][    C1] RDX: 0000200000000900 RSI: 00000000000089a1 RDI: 0000000000000007
[  338.956398][    C1] RBP: 00007f1651632d6f R08: 0000000000000000 R09: 0000000000000000
[  338.964374][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  338.972356][    C1] R13: 00007f1651816038 R14: 00007f1651815fa0 R15: 00007fff50466a08
[  338.976835][T11913] fido_id[11913]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  338.994897][    C1]  </TASK>
[  338.998243][    C1] Kernel Offset: disabled
[  339.002594][    C1] Rebooting in 86400 seconds..