last executing test programs:

2m26.829306156s ago: executing program 1 (id=226):
socket$inet6(0xa, 0x3, 0x5)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000200)=0x6, 0x4)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269bb, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0)

2m26.65312777s ago: executing program 1 (id=228):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000010600), &(0x7f0000000100)='./file2\x00', 0x400, &(0x7f00000001c0)=ANY=[@ANYBLOB="002afdae3565781009f76e97b48ab97bfb17214266c0e5b703257a3d77ba65f617bee62a9d1612402e69cc86c8fce5989be545ce26a9c4f5f2165f08000000b40d94de59edbb0507bf01e357e13bef384234e823d8137beac1c0afb4464b4d16006b7691ea638989f6f567a2817567b9c1606c0a15f5a0dbce62f673cd22ef303bcddff402dacf8c1372a5e8ff5bc596a5375037cf99b4ee7eb6f41587c2904d5cc071c32bc429a286bddc094a"], 0x1, 0x10600, &(0x7f0000020cc0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x8}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==")
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

2m25.428310687s ago: executing program 1 (id=250):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x6, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x3, @local}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101})

2m23.330491892s ago: executing program 1 (id=269):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r0 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r0, 0x0, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
connect$tipc(0xffffffffffffffff, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x0, 0x1}}, 0x10)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x2000003, 0x103032, 0xffffffffffffffff, 0xf7e29000)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000403512108240000102030109026e0003017fa006080b0002012030230904000000010130000a2401100a000a00000009040100f6ff02"], 0x0)

2m21.454437314s ago: executing program 1 (id=287):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x50000, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'})

2m21.349421077s ago: executing program 1 (id=288):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

2m6.307441648s ago: executing program 32 (id=288):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

5.938148126s ago: executing program 5 (id=1526):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf25090002007379fa32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8810)
socket(0x840000000002, 0x3, 0xff)
close(0x3)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0), 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @short={0x2, 0xffff}}, 0x14)
ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01320136b1ff"})

5.037080026s ago: executing program 5 (id=1535):
syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b70800000000000003010902"], 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
syz_usb_connect(0x1, 0x0, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040), 0x4)
sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x8820)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/103, 0x67}], 0x1)

2.873965645s ago: executing program 4 (id=1550):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup2(r0, r1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c)
sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfaba51c5d, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000001280)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xfc1, @rand_addr=' \x01\x00', 0xc09}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000180)=' B', 0x2}], 0x1}}], 0x1, 0x5)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0x2, 0x80}]})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000140)={0x0, 0x2}, 0x8)

2.865845075s ago: executing program 3 (id=1551):
socket(0x2b, 0x1, 0x1)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x7d4165c9)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet6_mptcp(0xa, 0x1, 0x106)
unshare(0x400)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

2.589678462s ago: executing program 2 (id=1555):
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, &(0x7f0000000240)="235913100000004a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xfec00000, 0x2, 0x0, 0x4, 0x7, 0x80, 0x4, 0x7, 0x0, 0x8, 0x9}, {0x50000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xff, 0x2}, {0xb000, 0xf066ce738b004ad5, 0xc, 0x0, 0x2, 0xc5, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x9000, 0x8080000, 0xb, 0x0, 0x6, 0x6, 0x0, 0xfc, 0x8, 0x3f, 0x6}, {0xb000, 0x25000, 0x9, 0x9, 0x2, 0x1, 0x2, 0x80, 0x10, 0xff, 0x6}, {0xf000, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x2, 0x50000, 0x8, 0x3, 0x0, 0x7, 0x9, 0x40, 0x96, 0x0, 0x1, 0x5}, {0x809fffb, 0x8cc}, {0xdddd1000}, 0xddf8ffd3, 0x0, 0xd000, 0x110, 0xe, 0xf801, 0x3000, [0x80000004, 0x0, 0x10000, 0xfffffffffffdffff]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.439119325s ago: executing program 2 (id=1556):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000001000000080000000b"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20)
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d1)

2.379837946s ago: executing program 2 (id=1557):
io_uring_setup(0x25f3, &(0x7f00000000c0)={0x0, 0xba1b, 0x1000, 0x0, 0x16f})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = socket$tipc(0x1e, 0x1, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r1, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="2fee", 0x2}], 0x1, 0x0, 0x0, 0x40010}, 0x0)
recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/35, 0x23}], 0x1}, 0x10040)
close_range(r0, 0xffffffffffffffff, 0x0)

2.006949825s ago: executing program 0 (id=1560):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1.945179616s ago: executing program 5 (id=1561):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
close_range(r4, 0xffffffffffffffff, 0x2)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)

1.944798956s ago: executing program 3 (id=1562):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r2 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r3 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x101d0)
sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x100005}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800)
close(r0)

1.943590096s ago: executing program 4 (id=1563):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r2)

1.871106068s ago: executing program 5 (id=1564):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0x2d5c000)
r0 = inotify_init()
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x34d})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1})
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)
close_range(r0, 0xffffffffffffffff, 0x0)

1.865645018s ago: executing program 0 (id=1565):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0xb081}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4040844)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40008c0}, 0x44080)
getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x1e)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x64, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x20c89, 0x48044}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000)

1.790818399s ago: executing program 4 (id=1566):
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}})
add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x10}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0)
r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0d, &(0x7f0000000040))

1.76388834s ago: executing program 5 (id=1567):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x2000000c})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001})
poll(&(0x7f0000000140)=[{r4, 0x8}, {r3, 0x2cfc08c20dafc34e}], 0x2, 0x8000007)

1.76315718s ago: executing program 0 (id=1577):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup2(r0, r1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c)
sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfaba51c5d, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000001280)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xfc1, @rand_addr=' \x01\x00', 0xc09}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000180)=' B', 0x2}], 0x1}}], 0x1, 0x5)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0x2, 0x80}]})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000140)={0x0, 0x2}, 0x8)

1.496023766s ago: executing program 2 (id=1568):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a984b2b", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000140)="b527ce144a9e865255e6f85f4d18156225c3396c992b47cedd740a6a6c3c82aba6b56bd441a6dd0856d664fb959853821ce9917ed023550816ba4b97dded7e7c500000007c41c7e2197da810d26109c4572ec3dfb28073599772cf3e04b596b22fce7db25609f21c6da4db35a48c20cdfa", 0x71}, {&(0x7f0000002300)="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", 0x138}], 0x2}}], 0x2, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

1.143438934s ago: executing program 4 (id=1569):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x70, 0x1, 0x0, 0xfffffffe, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x2}}}]}, 0x24}}, 0x8ff248670b87d03c)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r5, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

1.067473566s ago: executing program 3 (id=1570):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x2, 0xf)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8821}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0)
sendto$packet(r0, &(0x7f0000000500)="39c394f705916c4516999da20800", 0x23, 0x40810, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)

1.002596918s ago: executing program 4 (id=1571):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4)
bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x5a2e, 0x4)
connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0xe4}]}, 0x10)
sendto(r0, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e", 0x5f, 0x4008044, 0x0, 0x0)
write$binfmt_misc(r0, &(0x7f0000000180)="f31f4335", 0x4)
sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0)

971.066478ms ago: executing program 3 (id=1572):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r4, 0x2e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="55ee4a4cf1734dcbf7a278d30a5a", 0xe}], 0x1}, 0x4)

873.18401ms ago: executing program 0 (id=1573):
semctl$GETPID(0x0, 0x7, 0xb, 0x0)
semctl$SEM_STAT(0x0, 0x0, 0x12, 0x0)
semget$private(0x0, 0x0, 0x402)
r0 = semget$private(0x0, 0x1, 0x82)
semctl$GETNCNT(r0, 0x1, 0xe, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
semget$private(0x0, 0x1, 0x500)
semctl$SEM_STAT(0x0, 0x3, 0x12, 0x0)

803.536482ms ago: executing program 5 (id=1574):
socket(0x2b, 0x1, 0x1)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x7d4165c9)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet6_mptcp(0xa, 0x1, 0x106)
unshare(0x400)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

794.669002ms ago: executing program 3 (id=1575):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004ffffffff000000000300000000000000000000000300000000000000000000000000000200000000000000000000001002"], 0x0, 0x56}, 0x20)

729.995984ms ago: executing program 3 (id=1576):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newlink={0x44, 0x10, 0x403, 0x58bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

729.306234ms ago: executing program 0 (id=1578):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x40, 0x9})
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x0, @empty, 0x5}}, 0x0, 0x0, 0x22, 0x0, "0a5c6ceffd1db96261998301d26735b0fcfec622a8d36ce86356e31fb6a2a8caa4b6c8b8496194a71dbc679caa154417766be8e699958b310a96e73d5487a448f5618dacd6ad978ac164dd9833adde0d"}, 0xd8)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bind$inet6(r0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xe4776000)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0xc, @loopback, 0x400}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754bab1cb61212bb07a2bd205f00f81bef965a071f0d1aadd97b9640d9a0cd9ea71a5e9aec7f03d4406a7710c42cb5e754b089928abcd7589d209bc45b4064028eb7fafaa8b125736e00"}, 0xd8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c)

674.223035ms ago: executing program 0 (id=1579):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24)

470.188389ms ago: executing program 2 (id=1580):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fadvise64(0xffffffffffffffff, 0x5, 0x0, 0x5)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8)
r3 = request_key(&(0x7f00000008c0)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000004c0)='\xfep\xb1\xabK-\x03\x00\xe5\x81\xb8}\xe6^\xab:B3\x00\x00\x00\x1e\x9a&rs\xcf\xd9\xde(\xdet|\xd7\x14\xe7\xe7%6\xc5\xf9\xe5\x1cx\xdf\x85\xbe7\x9e*U\x8d \xa8\'\xff\x0fl7-8Jn\x0e\x86:v\xcc9K\xc18\xd7\xc9\xc3F\xef\xd5F\xd6~k:\xf8\xc6E$\x0f\xb3Q\rI\xeb(\r$\x1aP\xaf\x8a\xdcx%j_\xe5\xa1\xb1\xf6Q\xb8\x88\x93c\a\\\xd3\x03\xfc\xba[b~f\xf3\x88', 0x0)
request_key(&(0x7f00000005c0)='user\x00', &(0x7f0000000680)={'syz', 0x0}, 0x0, r3)

35.805059ms ago: executing program 4 (id=1581):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0103000000000000000005"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040)
recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

0s ago: executing program 2 (id=1582):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x44, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x14}}, {0x14, 0x4, @remote}}}]}]}, 0x44}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)

kernel console output (not intermixed with test programs):

 of reach -- disabled
[   71.195189][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[   71.202733][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[   71.242700][ T4546] ftl_cs: FTL header not found.
[   71.643554][ T4567] loop0: detected capacity change from 0 to 256
[   71.705233][ T4567] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   71.757835][ T4567] FAT-fs (loop0): Filesystem has been set read-only
[   71.808739][ T4567] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   71.830729][ T4554] loop4: detected capacity change from 0 to 32768
[   71.854663][ T4567] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   71.877771][   T25] audit: type=1800 audit(1783748524.092:2): pid=4567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.76" name="file1" dev="loop0" ino=1048591 res=0 errno=0
[   71.929912][ T4554] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.72 (4554)
[   71.974544][ T4554] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[   72.010603][ T4554] BTRFS info (device loop4): force clearing of disk cache
[   72.035309][ T4554] BTRFS info (device loop4): setting nodatacow, compression disabled
[   72.069477][ T4554] BTRFS info (device loop4): enabling disk space caching
[   72.107041][ T4554] BTRFS info (device loop4): disabling disk space caching
[   72.151943][ T4554] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   72.206882][ T4554] BTRFS info (device loop4): trying to use backup root at mount time
[   72.226069][ T4582] loop1: detected capacity change from 0 to 256
[   72.269606][ T4554] BTRFS info (device loop4): has skinny extents
[   72.290699][ T4581] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   72.565586][    T9] BTRFS warning (device loop4): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0xb6fb6650 level 0
[   72.569512][ T4234] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   72.625049][ T4554] BTRFS warning (device loop4): couldn't read tree root
[   72.633286][ T4348] BTRFS warning (device loop4): checksum verify failed on 5324800 wanted 0x9f73850b found 0x7a216cc0 level 0
[   72.686946][ T4554] BTRFS warning (device loop4): couldn't read tree root
[   72.697842][ T4554] BTRFS error (device loop4): parent transid verify failed on 5255168 wanted 5 found 7
[   72.714620][ T4554] BTRFS warning (device loop4): couldn't read tree root
[   72.749542][ T4554] BTRFS info (device loop4): enabling ssd optimizations
[   72.765732][ T4610] loop1: detected capacity change from 0 to 16
[   72.780400][ T4554] BTRFS info (device loop4): clearing free space tree
[   72.787825][ T4554] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   72.829561][ T4234] usb 1-1: Using ep0 maxpacket: 32
[   72.849630][ T4554] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   72.863987][ T4610] erofs: (device loop1): mounted with root inode @ nid 36.
[   72.918103][ T4554] BTRFS info (device loop4): checking UUID tree
[   72.984936][ T4234] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[   73.004490][ T4234] usb 1-1: config 0 has no interface number 0
[   73.036379][ T4234] usb 1-1: config 0 interface 184 has no altsetting 0
[   73.219889][ T4234] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   73.239170][ T4234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.313849][ T4234] usb 1-1: Product: syz
[   73.318051][ T4234] usb 1-1: Manufacturer: syz
[   73.367376][ T4234] usb 1-1: SerialNumber: syz
[   73.416632][ T4234] usb 1-1: config 0 descriptor??
[   73.490529][ T4234] smsc75xx v1.0.0
[   73.498433][ T4628] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.626087][ T4628] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.769148][ T4628] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.814018][ T4637] loop2: detected capacity change from 0 to 2048
[   73.887399][ T4637] Alternate GPT is invalid, using primary GPT.
[   73.898329][ T4637]  loop2: p1 p2 p3
[   73.913898][ T4637] loop2: partition table partially beyond EOD, truncated
[   74.096256][ T4628] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.145313][ T4651] loop3: detected capacity change from 0 to 256
[   74.149779][ T4234] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[   74.185812][ T4234] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   74.580532][ T4628] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.605408][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   74.663906][ T4658] udevd[4658]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[   74.696474][ T4659] udevd[4659]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   74.705643][ T4628] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.764760][ T4628] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.828399][ T4628] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.838846][ T4664] loop3: detected capacity change from 0 to 512
[   74.926237][ T4664] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   74.947265][ T4664] ext4 filesystem being mounted at /22/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   75.369653][ T4234] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[   75.385412][ T4679] syz.3.102 (4679) used greatest stack depth: 19824 bytes left
[   75.393835][ T4234] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71
[   75.407041][ T4234] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   75.430155][ T4234] smsc75xx: probe of 1-1:0.184 failed with error -71
[   75.459265][ T4234] usb 1-1: USB disconnect, device number 2
[   75.468344][ T4681] af_packet: tpacket_rcv: packet too big, clamped from 65354 to 4294967272. macoff=96
[   75.867639][ T4707] netlink: 'syz.3.111': attribute type 1 has an invalid length.
[   75.886434][ T4707] 8021q: adding VLAN 0 to HW filter on device bond2
[   75.958463][ T4707] bond2: (slave geneve2): making interface the new active one
[   75.974551][ T4707] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   76.009483][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[   76.022281][ T4707] syz.3.111 (4707) used greatest stack depth: 19744 bytes left
[   76.071694][   T25] audit: type=1326 audit(1783748528.292:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4711 comm="syz.0.113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee24e6e59 code=0x7ffc0000
[   76.113266][   T25] audit: type=1326 audit(1783748528.332:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4711 comm="syz.0.113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee24e6e59 code=0x7ffc0000
[   76.146376][   T25] audit: type=1326 audit(1783748528.332:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4711 comm="syz.0.113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee24e6e59 code=0x7ffc0000
[   76.171649][   T25] audit: type=1326 audit(1783748528.332:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4711 comm="syz.0.113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee24e6e59 code=0x7ffc0000
[   76.195847][   T25] audit: type=1326 audit(1783748528.332:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4711 comm="syz.0.113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7ee24e6e59 code=0x7ffc0000
[   76.225361][   T25] audit: type=1326 audit(1783748528.332:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4711 comm="syz.0.113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee24e6e59 code=0x7ffc0000
[   76.254106][   T25] audit: type=1326 audit(1783748528.332:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4711 comm="syz.0.113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee24e6e59 code=0x7ffc0000
[   76.279519][   T25] audit: type=1326 audit(1783748528.332:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4711 comm="syz.0.113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee24e6e59 code=0x7ffc0000
[   76.304900][   T25] audit: type=1326 audit(1783748528.332:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4711 comm="syz.0.113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee24e6e59 code=0x7ffc0000
[   76.899924][   T25] kauditd_printk_skb: 332 callbacks suppressed
[   76.901135][   T25] audit: type=1326 audit(1783748529.032:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4711 comm="syz.0.113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7ee24a768e code=0x7ffc0000
[   77.361658][   T25] audit: type=1326 audit(1783748529.032:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4711 comm="syz.0.113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7ee24a768e code=0x7ffc0000
[   77.385798][   T25] audit: type=1326 audit(1783748529.032:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4711 comm="syz.0.113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7ee24a768e code=0x7ffc0000
[   77.430268][   T25] audit: type=1326 audit(1783748529.042:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4711 comm="syz.0.113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7ee24a768e code=0x7ffc0000
[   77.548690][   T25] audit: type=1326 audit(1783748529.052:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4711 comm="syz.0.113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7ee24a768e code=0x7ffc0000
[   77.659144][   T25] audit: type=1326 audit(1783748529.052:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4711 comm="syz.0.113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7ee24a768e code=0x7ffc0000
[   77.729527][   T25] audit: type=1326 audit(1783748529.052:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4711 comm="syz.0.113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7ee24a768e code=0x7ffc0000
[   77.799526][   T25] audit: type=1326 audit(1783748529.052:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4711 comm="syz.0.113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7ee24a768e code=0x7ffc0000
[   77.889500][   T25] audit: type=1326 audit(1783748529.052:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4711 comm="syz.0.113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7ee24a768e code=0x7ffc0000
[   77.954357][   T25] audit: type=1326 audit(1783748529.062:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4711 comm="syz.0.113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7ee24e6e59 code=0x7ffc0000
[   78.092780][ T4744] xt_hashlimit: size too large, truncated to 1048576
[   78.171658][ T4731] loop3: detected capacity change from 0 to 32768
[   78.272749][ T4731] XFS (loop3): Mounting V5 Filesystem
[   78.331730][ T4731] XFS (loop3): Ending clean mount
[   78.531609][ T4188] XFS (loop3): Unmounting Filesystem
[   79.056101][ T4772] loop0: detected capacity change from 0 to 512
[   79.111244][ T4772] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   79.145330][ T4772] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[   79.167702][ T4779] 9pnet: Insufficient options for proto=fd
[   79.168371][ T4772] EXT4-fs (loop0): 1 truncate cleaned up
[   79.234808][ T4772] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback.
[   79.476974][ T4783] netlink: 'syz.4.133': attribute type 1 has an invalid length.
[   79.620848][ T4783] device bond1 entered promiscuous mode
[   79.637983][ T4783] 8021q: adding VLAN 0 to HW filter on device bond1
[   79.719481][ T4785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.133'.
[   79.728389][ T4785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.133'.
[   79.926500][ T4788] bond1: (slave bridge1): making interface the new active one
[   79.948919][ T4788] device bridge1 entered promiscuous mode
[   79.968672][ T4788] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   79.994219][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[   80.090985][ T4796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.137'.
[   80.323022][ T4799] overlayfs: failed to clone upperpath
[   80.887467][ T4816] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000
[   80.919511][ T4234] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   81.004632][ T4474] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   81.159541][ T4234] usb 2-1: Using ep0 maxpacket: 16
[   81.245736][ T4834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.153'.
[   81.294949][ T4234] usb 2-1: config index 0 descriptor too short (expected 8192, got 27)
[   81.306678][ T4234] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   81.327342][ T4234] usb 2-1: config 0 has no interfaces?
[   81.334209][ T4837] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.154'.
[   81.384164][ T4474] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   81.405393][ T4474] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   81.424779][    T7] cfg80211: failed to load regulatory.db
[   81.429163][ T4474] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   81.457941][ T4474] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.508143][ T4814] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   81.509632][ T4234] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   81.546159][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.564609][ T4234] usb 2-1: Product: syz
[   81.568831][ T4234] usb 2-1: Manufacturer: syz
[   81.579683][ T4234] usb 2-1: SerialNumber: syz
[   81.605128][ T4234] usb 2-1: config 0 descriptor??
[   81.901462][ T4234] usb 2-1: USB disconnect, device number 2
[   82.176735][ T4234] usb 4-1: USB disconnect, device number 3
[   82.202314][ T4855] netlink: 'syz.2.160': attribute type 10 has an invalid length.
[   82.262836][ T4855] team0: Port device netdevsim0 added
[   82.746575][ T4875] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.167'.
[   82.868390][ T4878] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   83.088757][ T4882] syz.1.170 uses obsolete (PF_INET,SOCK_PACKET)
[   83.609642][ T4263] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   83.647679][ T4844] Set syz1 is full, maxelem 65536 reached
[   83.991983][ T4900] loop0: detected capacity change from 0 to 32768
[   84.010983][ T4900] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.178 (4900)
[   84.025870][ T4263] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   84.039178][ T4263] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   84.049590][ T4263] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   84.058853][ T4263] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.078402][ T4900] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[   84.087266][ T4900] BTRFS info (device loop0): force clearing of disk cache
[   84.099921][ T4890] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   84.108341][ T4900] BTRFS info (device loop0): setting nodatacow, compression disabled
[   84.126558][ T4900] BTRFS info (device loop0): enabling disk space caching
[   84.136065][ T4900] BTRFS info (device loop0): disabling disk space caching
[   84.178450][ T4900] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   84.219377][ T4900] BTRFS info (device loop0): trying to use backup root at mount time
[   84.248891][ T4900] BTRFS info (device loop0): has skinny extents
[   84.422834][ T4335] BTRFS warning (device loop0): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0xb6fb6650 level 0
[   84.439985][ T4900] BTRFS warning (device loop0): couldn't read tree root
[   84.447583][ T4342] BTRFS warning (device loop0): checksum verify failed on 5324800 wanted 0x9f73850b found 0x7a216cc0 level 0
[   84.465717][ T4900] BTRFS warning (device loop0): couldn't read tree root
[   84.475240][ T4900] BTRFS error (device loop0): parent transid verify failed on 5255168 wanted 5 found 7
[   84.495531][ T4900] BTRFS warning (device loop0): couldn't read tree root
[   84.580775][ T4474] usb 2-1: USB disconnect, device number 3
[   84.587764][ T4900] BTRFS info (device loop0): enabling ssd optimizations
[   84.647247][ T4900] BTRFS info (device loop0): clearing free space tree
[   84.654608][ T4900] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   84.666413][ T4900] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   84.691110][ T4900] BTRFS info (device loop0): checking UUID tree
[   84.750825][ T4942] block device autoloading is deprecated and will be removed.
[   84.866801][ T4948] loop3: detected capacity change from 0 to 256
[   84.873958][ T4946] loop_set_status: loop0 () has still dirty pages (nrpages=1)
[   85.157617][ T4955] Illegal XDP return value 19181568, expect packet loss!
[   85.257253][ T4957] netlink: 'syz.1.191': attribute type 1 has an invalid length.
[   85.356145][ T4957] 8021q: adding VLAN 0 to HW filter on device bond1
[   85.479057][ T4963] loop3: detected capacity change from 0 to 512
[   85.624130][ T4957] bond1: (slave geneve2): making interface the new active one
[   85.644530][ T4957] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   85.680014][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[   86.239593][ T4981] netlink: 64 bytes leftover after parsing attributes in process `syz.1.199'.
[   86.268749][ T4981] device syzkaller1 entered promiscuous mode
[   86.329601][ T4646] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   86.431929][ T4983] netlink: 'syz.1.200': attribute type 21 has an invalid length.
[   86.699858][ T4646] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   86.763951][ T4646] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   86.787670][ T4646] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   86.816318][ T4646] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.859806][ T4977] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   86.983186][ T4992] netlink: 'syz.0.204': attribute type 10 has an invalid length.
[   87.025622][ T4992] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[   87.067489][ T4992] team0: Failed to send options change via netlink (err -105)
[   87.085287][ T4992] team0: Port device netdevsim0 added
[   87.106454][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   87.457322][ T4646] usb 3-1: USB disconnect, device number 3
[   87.497862][ T5004] fuse: root generation should be zero
[   87.570606][   T26] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   87.788369][ T5015] netlink: 28 bytes leftover after parsing attributes in process `syz.1.213'.
[   87.831012][   T26] usb 1-1: Using ep0 maxpacket: 16
[   87.843140][ T5015] lo speed is unknown, defaulting to 1000
[   87.875468][ T5015] lo speed is unknown, defaulting to 1000
[   87.898297][ T5015] lo speed is unknown, defaulting to 1000
[   87.939350][ T5015] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   87.959925][   T26] usb 1-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config
[   87.980524][   T26] usb 1-1: config 254 has 0 interfaces, different from the descriptor's value: 1
[   87.991702][ T5015] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   88.047807][ T5023] team0: Port device bridge1 added
[   88.079996][ T5015] lo speed is unknown, defaulting to 1000
[   88.087152][ T5023] bridge0: port 3(team0) entered blocking state
[   88.093785][ T5023] bridge0: port 3(team0) entered disabled state
[   88.103001][ T5023] device team0 entered promiscuous mode
[   88.110006][ T5023] device team_slave_0 entered promiscuous mode
[   88.116600][ T5023] device team_slave_1 entered promiscuous mode
[   88.123002][ T5023] device netdevsim0 entered promiscuous mode
[   88.129651][ T5023] device bridge1 entered promiscuous mode
[   88.138121][ T5023] bridge0: port 3(team0) entered blocking state
[   88.144690][ T5023] bridge0: port 3(team0) entered forwarding state
[   88.153711][ T5015] lo speed is unknown, defaulting to 1000
[   88.160728][ T5015] lo speed is unknown, defaulting to 1000
[   88.167659][ T5015] lo speed is unknown, defaulting to 1000
[   88.175636][ T5015] lo speed is unknown, defaulting to 1000
[   88.269841][   T26] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[   88.286218][   T26] usb 1-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3
[   88.286303][ T5029] loop3: detected capacity change from 0 to 512
[   88.315372][   T26] usb 1-1: Product: syz
[   88.325505][   T26] usb 1-1: Manufacturer: syz
[   88.360349][   T26] usb 1-1: SerialNumber: syz
[   88.371596][ T4941] Set syz1 is full, maxelem 65536 reached
[   88.411453][ T5029] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   88.522119][ T5029] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #16: comm syz.3.218: corrupted inode contents
[   88.570424][ T5029] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #16: comm syz.3.218: mark_inode_dirty error
[   88.585961][ T5029] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #16: comm syz.3.218: corrupted inode contents
[   88.608585][ T5029] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.218: mark_inode_dirty error
[   88.637137][ T5002] loop2: detected capacity change from 0 to 7
[   88.652214][ T5029] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #16: comm syz.3.218: corrupted inode contents
[   88.675000][ T5002]  loop2:
[   88.677986][ T5002] loop2: partition table partially beyond EOD, truncated
[   88.715723][ T5029] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[   88.744899][ T5029] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #16: comm syz.3.218: corrupted inode contents
[   88.772151][ T4263] usb 1-1: USB disconnect, device number 3
[   88.784863][ T5029] EXT4-fs error (device loop3): ext4_truncate:4286: inode #16: comm syz.3.218: mark_inode_dirty error
[   88.815751][ T5029] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[   88.836351][ T5029] EXT4-fs (loop3): 1 truncate cleaned up
[   88.855333][ T5029] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   88.908531][ T5047] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   88.922161][ T5029] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.859371][ T5055] loop1: detected capacity change from 0 to 131072
[   89.948198][ T5055] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[   89.957102][ T5055] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   89.982711][ T5055] F2FS-fs (loop1): invalid crc value
[   90.034146][ T5055] F2FS-fs (loop1): Found nat_bits in checkpoint
[   90.088148][ T5055] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   90.096513][ T5055] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   90.178611][ T5078] loop0: detected capacity change from 0 to 4096
[   90.228345][ T5078] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[   90.331383][ T5078] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[   91.558176][ T5111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.249'.
[   91.636863][ T5112] netlink: 'syz.0.252': attribute type 3 has an invalid length.
[   91.672326][ T5112] netlink: 'syz.0.252': attribute type 3 has an invalid length.
[   92.098058][ T5135] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   92.215512][ T5140] netlink: 'syz.0.264': attribute type 9 has an invalid length.
[   92.257003][ T5140] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.264'.
[   92.359483][ T4231] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   92.468193][ T5157] netlink: 'syz.4.270': attribute type 1 has an invalid length.
[   92.497048][ T5157] 8021q: adding VLAN 0 to HW filter on device bond2
[   92.551629][ T5157] bond2: (slave geneve2): making interface the new active one
[   92.571402][ T5157] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   92.587198][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[   92.611812][ T4231] usb 4-1: Using ep0 maxpacket: 32
[   92.659883][ T5157] syz.4.270 (5157) used greatest stack depth: 19632 bytes left
[   92.700223][   T26] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   92.729646][ T4231] usb 4-1: config 0 has an invalid interface number: 89 but max is 0
[   92.737888][ T4231] usb 4-1: config 0 has no interface number 0
[   92.749839][ T4231] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[   92.762085][ T4231] usb 4-1: config 0 interface 89 has no altsetting 0
[   92.843015][ T5169] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   92.922881][ T4231] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[   92.935338][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.946817][ T5172] netlink: 28 bytes leftover after parsing attributes in process `syz.4.276'.
[   92.947285][ T4231] usb 4-1: Product: syz
[   92.965530][ T4231] usb 4-1: Manufacturer: syz
[   92.970303][ T4231] usb 4-1: SerialNumber: syz
[   92.977683][ T4231] usb 4-1: config 0 descriptor??
[   92.986789][ T5172] netlink: 28 bytes leftover after parsing attributes in process `syz.4.276'.
[   93.028144][ T5168] loop2: detected capacity change from 0 to 32768
[   93.030163][ T4231] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[   93.074835][ T4231] em28xx 4-1:0.89: Video interface 89 found:
[   93.092158][   T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   93.100945][   T25] audit: type=1326 audit(1783748545.312:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5177 comm="syz.0.278" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7ee24e6e59 code=0x0
[   93.103915][ T5168] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.274 (5168)
[   93.143057][   T26] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   93.157263][   T26] usb 2-1: too many endpoints for config 1 interface 1 altsetting 0: 246, using maximum allowed: 30
[   93.170663][   T26] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 246
[   93.203180][ T5168] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[   93.214649][ T5168] BTRFS info (device loop2): force clearing of disk cache
[   93.222377][ T5168] BTRFS info (device loop2): setting nodatacow, compression disabled
[   93.234355][ T5168] BTRFS info (device loop2): enabling disk space caching
[   93.248338][ T5168] BTRFS info (device loop2): disabling disk space caching
[   93.264176][ T5168] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   93.275360][ T5168] BTRFS info (device loop2): trying to use backup root at mount time
[   93.284008][ T5168] BTRFS info (device loop2): has skinny extents
[   93.384437][   T26] usb 2-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40
[   93.394430][   T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.411930][   T26] usb 2-1: Product: syz
[   93.416224][   T26] usb 2-1: Manufacturer: syz
[   93.427835][   T26] usb 2-1: SerialNumber: syz
[   93.435842][ T4335] BTRFS warning (device loop2): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0xb6fb6650 level 0
[   93.455500][ T5168] BTRFS warning (device loop2): couldn't read tree root
[   93.463603][ T4342] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0x7a216cc0 level 0
[   93.475599][ T5168] BTRFS warning (device loop2): couldn't read tree root
[   93.483074][ T5168] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7
[   93.492991][ T5168] BTRFS warning (device loop2): couldn't read tree root
[   93.507198][ T5168] BTRFS info (device loop2): enabling ssd optimizations
[   93.515549][ T5168] BTRFS info (device loop2): clearing free space tree
[   93.522549][ T5168] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   93.532422][ T5168] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   93.547705][ T5168] BTRFS info (device loop2): checking UUID tree
[   93.669549][ T4231] em28xx 4-1:0.89: unknown em28xx chip ID (0)
[   93.908734][   T26] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[   93.919134][   T26] usb 2-1: USB disconnect, device number 4
[   93.990087][ T5209] overlayfs: failed to clone upperpath
[   94.092967][ T5215] overlayfs: failed to clone upperpath
[   94.118263][ T5215] overlayfs: missing 'lowerdir'
[   94.182276][ T5219] netlink: 'syz.2.286': attribute type 39 has an invalid length.
[   94.192228][ T4659] udevd[4659]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   94.419921][ T4231] em28xx 4-1:0.89: board has no eeprom
[   94.479796][ T5227] overlayfs: upper fs does not support file handles, falling back to index=off.
[   94.729527][ T4231] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67)
[   94.739199][ T4231] em28xx 4-1:0.89: analog set to bulk mode.
[   94.757913][ T4640] em28xx 4-1:0.89: Registering V4L2 extension
[   94.772006][ T4231] usb 4-1: USB disconnect, device number 4
[   94.788384][ T4231] em28xx 4-1:0.89: Disconnecting em28xx
[   94.848148][ T4640] em28xx 4-1:0.89: Config register raw data: 0xffffffed
[   94.862071][ T4640] em28xx 4-1:0.89: AC97 chip type couldn't be determined
[   94.869127][ T4640] em28xx 4-1:0.89: No AC97 audio processor
[   94.898882][ T4640] usb 4-1: Decoder not found
[   94.912476][ T4640] em28xx 4-1:0.89: failed to create media graph
[   94.918873][ T4640] em28xx 4-1:0.89: V4L2 device video103 deregistered
[   94.947096][ T4640] em28xx 4-1:0.89: Registering snapshot button...
[   94.963177][ T4640] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input7
[   94.993939][ T4640] em28xx 4-1:0.89: Remote control support is not available for this card.
[   95.023924][ T4231] em28xx 4-1:0.89: Closing input extension
[   95.031445][ T4231] em28xx 4-1:0.89: Deregistering snapshot button
[   95.097303][ T4231] em28xx 4-1:0.89: Freeing device
[   96.269162][ T5299] loop0: detected capacity change from 0 to 512
[   96.308556][ T5299] EXT4-fs (loop0): Ignoring removed bh option
[   96.333760][ T5299] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.305: corrupted in-inode xattr
[   96.346416][ T5299] EXT4-fs (loop0): Remounting filesystem read-only
[   96.354174][ T5299] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.305: couldn't read orphan inode 15 (err -117)
[   96.369884][ T5299] EXT4-fs (loop0): Remounting filesystem read-only
[   96.376430][ T5299] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,init_itable=0x0000000000000009,init_itable=0x0000000000000004,init_itable,errors=remount-ro,nolazytime,norecovery,resgid=0x0000000000000000,. Quota mode: none.
[   96.494402][ T5304] loop2: detected capacity change from 0 to 4096
[   96.521475][ T5304] EXT4-fs error (device loop2): ext4_quota_enable:6440: comm syz.2.306: Bad quota inum: 3, type: 2
[   96.553017][ T5299] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.305: Unrecognised inode hash code 4
[   96.564728][ T5299] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.305: Corrupt directory, running e2fsck is recommended
[   96.578300][ T5299] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.305: Unrecognised inode hash code 4
[   96.582583][ T5304] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-117, ino=3). Please run e2fsck to fix.
[   96.590274][ T5299] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.305: Corrupt directory, running e2fsck is recommended
[   96.663783][ T5304] EXT4-fs (loop2): mount failed
[   96.915850][ T5314] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   97.081156][ T5320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.312'.
[   97.196464][ T5334] loop3: detected capacity change from 0 to 1024
[   97.277381][ T5336] netlink: 'syz.4.319': attribute type 4 has an invalid length.
[   97.293999][ T5334] EXT4-fs (loop3): Ignoring removed oldalloc option
[   97.309844][ T5334] EXT4-fs (loop3): Ignoring removed oldalloc option
[   97.329455][ T5336] netlink: 'syz.4.319': attribute type 4 has an invalid length.
[   97.337577][ T5334] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   97.384786][ T5334] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,min_batch_time=0x0000000000000003,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none.
[   97.844965][ T5351] 0x000000000000-0x000000020003 : ""
[   97.850653][ T5351] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x20000
[   97.866871][ T5351] ftl_cs: FTL header not found.
[   97.949241][ T5354] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[   99.136301][ T5373] netlink: 236 bytes leftover after parsing attributes in process `syz.4.341'.
[   99.519489][ T4289] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   99.799561][ T4289] usb 3-1: Using ep0 maxpacket: 8
[   99.954961][ T4289] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[   99.973413][ T4289] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   99.993376][ T4289] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  100.016651][ T4289] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16
[  100.042517][ T4289] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  100.076318][ T4289] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  100.098475][ T4289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.349366][ T5379] loop0: detected capacity change from 0 to 32768
[  100.378490][ T5379] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.343 (5379)
[  100.386569][ T5381] loop3: detected capacity change from 0 to 32768
[  100.392138][ T4289] usb 3-1: usb_control_msg returned -32
[  100.402701][ T4289] usbtmc 3-1:16.0: can't read capabilities
[  100.434333][ T5381] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.332 (5381)
[  100.447279][ T5379] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  100.468503][ T5379] BTRFS info (device loop0): force clearing of disk cache
[  100.489006][ T5381] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  100.489500][ T5379] BTRFS info (device loop0): use zlib compression, level 3
[  100.514563][ T5381] BTRFS info (device loop3): force clearing of disk cache
[  100.535082][ T5381] BTRFS info (device loop3): setting nodatacow, compression disabled
[  100.540849][ T5379] BTRFS info (device loop0): enabling ssd optimizations
[  100.553871][ T5381] BTRFS info (device loop3): enabling disk space caching
[  100.569824][ T5379] BTRFS info (device loop0): using spread ssd allocation scheme
[  100.574186][ T5381] BTRFS info (device loop3): disabling disk space caching
[  100.577897][ T5379] BTRFS info (device loop0): using free space tree
[  100.611632][ T5381] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  100.639538][ T5379] BTRFS info (device loop0): has skinny extents
[  100.642353][ T5381] BTRFS info (device loop3): trying to use backup root at mount time
[  100.691675][ T5381] BTRFS info (device loop3): has skinny extents
[  100.831827][ T5379] BTRFS info (device loop0): clearing free space tree
[  100.838692][ T5379] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  100.851672][ T5379] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  100.886388][ T4346] BTRFS warning (device loop3): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0xb6fb6650 level 0
[  100.904682][ T5379] BTRFS info (device loop0): creating free space tree
[  100.925035][ T5381] BTRFS warning (device loop3): couldn't read tree root
[  100.930145][ T5379] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  100.936937][ T4342] BTRFS warning (device loop3): checksum verify failed on 5324800 wanted 0x9f73850b found 0x7a216cc0 level 0
[  100.941785][ T5441] mmap: syz.4.342 (5441) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  100.950065][ T5379] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  100.977612][ T5381] BTRFS warning (device loop3): couldn't read tree root
[  100.978149][ T5379] BTRFS info (device loop0): checking UUID tree
[  100.997053][ T5381] BTRFS error (device loop3): parent transid verify failed on 5255168 wanted 5 found 7
[  101.067039][ T5381] BTRFS warning (device loop3): couldn't read tree root
[  101.118776][ T5381] BTRFS info (device loop3): enabling ssd optimizations
[  101.130655][ T5381] BTRFS info (device loop3): clearing free space tree
[  101.145320][ T5381] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  101.167279][ T5381] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  101.200017][ T5443] usbtmc 3-1:16.0: usb_clear_halt returned -32
[  101.215185][ T5381] BTRFS info (device loop3): checking UUID tree
[  101.382165][ T4289] usb 3-1: USB disconnect, device number 4
[  101.645562][ T5379] BTRFS info (device loop0): balance: start -d -m
[  101.657872][ T5379] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata
[  101.751351][ T5379] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata
[  101.968173][ T5379] BTRFS info (device loop0): found 14 extents, stage: move data extents
[  102.079797][ T5379] BTRFS info (device loop0): found 1 extents, stage: update data pointers
[  102.147033][ T5379] BTRFS info (device loop0): balance: ended with status: 0
[  102.253092][ T5468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.348'.
[  102.387158][ T5470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.349'.
[  103.004763][ T5487] loop3: detected capacity change from 0 to 128
[  103.081941][ T5489] netlink: 24 bytes leftover after parsing attributes in process `syz.0.352'.
[  103.148083][ T5490] netlink: 24 bytes leftover after parsing attributes in process `syz.0.352'.
[  103.198189][   T25] audit: type=1326 audit(1783748555.412:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.3.356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef48b5e59 code=0x7ffc0000
[  103.222466][   T25] audit: type=1326 audit(1783748555.412:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.3.356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef48b5e59 code=0x7ffc0000
[  103.251350][   T25] audit: type=1326 audit(1783748555.422:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.3.356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef48b5e59 code=0x7ffc0000
[  103.278204][   T25] audit: type=1326 audit(1783748555.422:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.3.356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef48b5e59 code=0x7ffc0000
[  103.305784][   T25] audit: type=1326 audit(1783748555.422:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.3.356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7ef48b5e59 code=0x7ffc0000
[  103.335895][   T25] audit: type=1326 audit(1783748555.422:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.3.356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef48b5e59 code=0x7ffc0000
[  103.367863][   T25] audit: type=1326 audit(1783748555.422:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.3.356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef48b5e59 code=0x7ffc0000
[  103.397407][   T25] audit: type=1326 audit(1783748555.422:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.3.356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef48b5e59 code=0x7ffc0000
[  103.427104][   T25] audit: type=1326 audit(1783748555.422:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.3.356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef48b5e59 code=0x7ffc0000
[  103.452774][   T25] audit: type=1326 audit(1783748555.422:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.3.356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f7ef48b5e59 code=0x7ffc0000
[  103.684822][ T5508] binder: 5507:5508 ioctl 40046205 0 returned -22
[  103.746633][ T5509] binder: 5507:5509 ioctl c0306201 0 returned -14
[  104.670649][ T2305] libceph: connect (1)[c::]:6789 error -101
[  104.677313][ T2305] libceph: mon0 (1)[c::]:6789 connect error
[  104.809498][ T4289] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  104.951654][ T2305] libceph: connect (1)[c::]:6789 error -101
[  104.957633][ T2305] libceph: mon0 (1)[c::]:6789 connect error
[  105.141538][ T5533] loop5: detected capacity change from 0 to 7
[  105.170376][ T5533]  loop5:
[  105.173363][ T5533] loop5: partition table partially beyond EOD, truncated
[  105.240663][ T4289] usb 4-1: unable to get BOS descriptor or descriptor too short
[  105.309608][ T4289] usb 4-1: unable to read config index 0 descriptor/start: -71
[  105.318112][ T4289] usb 4-1: can't read configurations, error -71
[  105.469819][ T2240] libceph: connect (1)[c::]:6789 error -101
[  105.476113][ T2240] libceph: mon0 (1)[c::]:6789 connect error
[  105.496988][ T5538] ceph: No mds server is up or the cluster is laggy
[  105.516778][ T2240] libceph: connect (1)[c::]:6789 error -101
[  105.523608][ T2240] libceph: mon0 (1)[c::]:6789 connect error
[  105.531692][ T5541] ceph: No mds server is up or the cluster is laggy
[  106.195004][ T5570] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  106.535779][ T5591] sch_tbf: burst 4 is lower than device lo mtu (65550) !
[  107.248550][ T5626] loop0: detected capacity change from 0 to 128
[  107.303194][ T5626] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4)
[  107.381716][ T4346] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4)
[  107.452560][ T5626] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4)
[  107.626305][ T5645] fuse: Bad value for 'fd'
[  107.845860][ T5668] netlink: 'syz.4.420': attribute type 10 has an invalid length.
[  107.876812][ T5668] team0: Port device wlan1 added
[  107.963796][ T5674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.423'.
[  107.995589][ T5678] sctp: [Deprecated]: syz.0.424 (pid 5678) Use of int in max_burst socket option.
[  107.995589][ T5678] Use struct sctp_assoc_value instead
[  108.315520][ T5687] lo speed is unknown, defaulting to 1000
[  108.450921][ T5691] loop2: detected capacity change from 0 to 4096
[  108.533158][ T5691] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  108.644668][ T5691] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.429: Invalid inode bitmap blk 206561009683748726 in block_group 0
[  108.918233][ T5709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.435'.
[  109.082892][ T5713] lo speed is unknown, defaulting to 1000
[  109.121331][ T4231] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  109.691601][ T4231] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  109.729588][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.745604][ T4231] usb 3-1: Product: syz
[  109.749976][ T4231] usb 3-1: Manufacturer: syz
[  109.754638][ T4231] usb 3-1: SerialNumber: syz
[  109.779556][ T4231] usb 3-1: config 0 descriptor??
[  109.787923][ T5725] lo speed is unknown, defaulting to 1000
[  109.821847][ T4231] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  110.105540][ T5725] chnl_net:caif_netlink_parms(): no params data found
[  110.286755][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.294166][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.302369][ T5725] device bridge_slave_0 entered promiscuous mode
[  110.311344][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.318572][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.327686][ T5725] device bridge_slave_1 entered promiscuous mode
[  110.352698][ T5725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  110.364672][ T5725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.395592][ T5725] team0: Port device team_slave_0 added
[  110.403929][ T5725] team0: Port device team_slave_1 added
[  110.425165][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.432590][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.465760][ T5725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  110.478302][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_1
[  110.485297][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.530867][ T5725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.603638][ T5725] device hsr_slave_0 entered promiscuous mode
[  110.618907][ T5725] device hsr_slave_1 entered promiscuous mode
[  110.628127][ T5725] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  110.659564][ T5725] Cannot create hsr debugfs directory
[  110.726900][ T5733] loop3: detected capacity change from 0 to 32768
[  110.779414][ T5733] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.442 (5733)
[  110.829825][ T5733] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  110.858834][ T5733] BTRFS info (device loop3): force clearing of disk cache
[  110.889243][ T5733] BTRFS info (device loop3): use zlib compression, level 3
[  110.908514][ T5725] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  110.915338][ T5733] BTRFS info (device loop3): enabling ssd optimizations
[  110.915358][ T5733] BTRFS info (device loop3): using spread ssd allocation scheme
[  110.949759][ T5733] BTRFS info (device loop3): using free space tree
[  110.956293][ T5733] BTRFS info (device loop3): has skinny extents
[  110.971059][ T5725] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  111.015188][ T5725] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  111.042049][ T5725] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  111.154484][ T5733] BTRFS info (device loop3): clearing free space tree
[  111.175129][ T5733] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  111.205717][ T5733] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  111.221386][ T5733] BTRFS info (device loop3): creating free space tree
[  111.232325][ T5733] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  111.242374][ T5733] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  111.255844][ T5733] BTRFS info (device loop3): checking UUID tree
[  111.323793][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.401064][ T4231] gspca_stk1135: reg_w 0xf err -71
[  111.407257][ T4231] gspca_stk1135: serial bus timeout: status=0x00
[  111.418325][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  111.426654][ T4231] gspca_stk1135: Sensor write failed
[  111.433364][ T4231] gspca_stk1135: serial bus timeout: status=0x00
[  111.440032][ T4231] gspca_stk1135: Sensor write failed
[  111.445337][ T4231] gspca_stk1135: serial bus timeout: status=0x00
[  111.452397][ T4231] gspca_stk1135: Sensor read failed
[  111.457616][ T4231] gspca_stk1135: serial bus timeout: status=0x00
[  111.463521][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  111.464074][ T4231] gspca_stk1135: Sensor read failed
[  111.477250][ T4231] gspca_stk1135: Detected sensor type unknown (0x0)
[  111.484145][ T4231] gspca_stk1135: serial bus timeout: status=0x00
[  111.522171][ T5725] 8021q: adding VLAN 0 to HW filter on device team0
[  111.529020][ T4231] gspca_stk1135: Sensor read failed
[  111.551950][ T4231] gspca_stk1135: serial bus timeout: status=0x00
[  111.588760][ T4231] gspca_stk1135: Sensor read failed
[  111.609437][ T4231] gspca_stk1135: serial bus timeout: status=0x00
[  111.646260][ T4231] gspca_stk1135: Sensor write failed
[  111.651810][ T4231] gspca_stk1135: serial bus timeout: status=0x00
[  111.678425][ T4231] gspca_stk1135: Sensor write failed
[  111.693723][ T4231] stk1135: probe of 3-1:0.0 failed with error -71
[  111.718808][ T4231] usb 3-1: USB disconnect, device number 5
[  111.739597][ T4464] Bluetooth: hci4: command 0x0409 tx timeout
[  111.750662][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  111.774031][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  111.801159][ T4348] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.808257][ T4348] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.844832][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  111.855844][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  111.865126][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  111.874468][ T4348] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.881558][ T4348] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.889935][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  111.898625][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  111.952317][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  111.979619][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  111.998426][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  112.019297][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  112.046462][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  112.065372][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  112.113199][ T5725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  112.166894][ T5733] BTRFS info (device loop3): balance: start -d -m
[  112.167421][ T5725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  112.184113][ T5733] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata
[  112.247355][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  112.266199][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  112.312071][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  112.341993][ T5733] BTRFS info (device loop3): relocating block group 5242880 flags data|metadata
[  112.487859][ T4342] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.549347][ T5783] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  112.571503][ T5733] BTRFS info (device loop3): found 12 extents, stage: move data extents
[  112.685425][ T4342] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.728118][ T5725] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.743922][ T5733] BTRFS info (device loop3): found 1 extents, stage: update data pointers
[  112.767708][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  112.809850][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  112.828769][ T4342] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.850463][ T5733] BTRFS info (device loop3): balance: ended with status: 0
[  112.896145][ T4342] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.108766][ T5805] xt_CT: You must specify a L4 protocol and not use inversions on it
[  113.235897][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  113.267473][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  113.340933][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  113.367484][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  113.393187][ T5725] device veth0_vlan entered promiscuous mode
[  113.462631][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  113.483090][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  113.539341][ T5725] device veth1_vlan entered promiscuous mode
[  113.560157][ T5821] netlink: 24 bytes leftover after parsing attributes in process `syz.2.460'.
[  113.610775][ T5816] netlink: 224 bytes leftover after parsing attributes in process `syz.2.460'.
[  113.751576][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  113.770059][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  113.850305][ T4234] Bluetooth: hci4: command 0x041b tx timeout
[  113.872237][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  113.905565][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  113.927860][ T5725] device veth0_macvtap entered promiscuous mode
[  113.996756][ T5725] device veth1_macvtap entered promiscuous mode
[  114.033519][ T5833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.463'.
[  114.131585][ T5725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.163604][ T5725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.184109][ T5725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.196229][ T5725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.215070][ T5725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.228009][ T5725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.244597][ T5725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.256214][ T5725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.275007][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.289826][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  114.317847][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  114.370162][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  114.402176][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  114.434148][ T5725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.471434][ T5725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.498524][ T5851] input: syz0 as /devices/virtual/input/input8
[  114.506436][ T5725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.528454][ T5725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.596211][ T5725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.631890][ T5725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.670633][ T5725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.684511][ T5725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.707260][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.779111][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  114.816703][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  114.853307][ T5725] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.875032][ T5725] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.904510][ T5725] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.933750][ T5725] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.218258][ T4348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.235564][ T4348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.279262][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  115.332628][ T4346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.366666][ T4346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.421276][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  115.819548][ T5905] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  115.835887][ T4464] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  115.922251][ T5835] Bluetooth: hci4: command 0x040f tx timeout
[  116.189645][ T4342] device hsr_slave_0 left promiscuous mode
[  116.209197][ T4342] device hsr_slave_1 left promiscuous mode
[  116.320404][ T4342] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.327936][ T4342] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.378768][ T4342] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.409860][ T4342] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.451907][ T4342] device bridge_slave_1 left promiscuous mode
[  116.465399][ T4342] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.516407][ T4342] device bridge_slave_0 left promiscuous mode
[  116.537747][ T4342] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.623091][ T4342] device veth1_macvtap left promiscuous mode
[  116.632956][ T4342] device veth0_macvtap left promiscuous mode
[  116.639033][ T4342] device veth1_vlan left promiscuous mode
[  116.677426][ T4342] device veth0_vlan left promiscuous mode
[  117.049286][ T5928] loop2: detected capacity change from 0 to 512
[  117.073169][ T4342] bond1 (unregistering): (slave geneve2): Releasing active interface
[  117.100203][ T4342] bond1 (unregistering): Released all slaves
[  117.204519][ T5928] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  117.260985][ T5928] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.281323][ T4342] team0 (unregistering): Port device team_slave_1 removed
[  117.300145][ T4342] team0 (unregistering): Port device team_slave_0 removed
[  117.315084][ T4342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  117.350823][ T4342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  117.516352][ T5928] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback.
[  117.571642][ T4342] bond0 (unregistering): Released all slaves
[  117.711624][ T5881] IPVS: Error connecting to the multicast addr
[  117.762512][ T4234] lo speed is unknown, defaulting to 1000
[  117.963433][ T5947] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  117.990171][ T4234] Bluetooth: hci4: command 0x0419 tx timeout
[  118.542095][ T5979] netlink: 40 bytes leftover after parsing attributes in process `syz.3.498'.
[  119.207922][ T5972] loop2: detected capacity change from 0 to 32768
[  119.286478][ T5972] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.496 (5972)
[  119.353256][ T5972] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  119.392634][ T5972] BTRFS info (device loop2): setting nodatasum
[  119.414464][ T5972] BTRFS info (device loop2): force zlib compression, level 3
[  119.453646][ T5972] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  119.502431][ T5972] BTRFS info (device loop2): use lzo compression, level 0
[  119.529992][ T5972] BTRFS info (device loop2): turning on flush-on-commit
[  119.559439][ T5972] BTRFS info (device loop2): enabling auto defrag
[  119.603900][ T5972] BTRFS info (device loop2): max_inline at 4096
[  119.624779][ T5972] BTRFS info (device loop2): using free space tree
[  119.655621][ T5972] BTRFS info (device loop2): has skinny extents
[  119.820392][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  119.973246][ T5972] BTRFS info (device loop2): enabling ssd optimizations
[  120.069831][ T4231] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  120.171425][ T6074] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  120.356644][ T6083] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  120.364513][ T6083] IPv6: NLM_F_CREATE should be set when creating new route
[  120.525278][ T4231] usb 4-1: config 0 has no interfaces?
[  120.531048][ T4231] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  120.569461][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.600513][ T4231] usb 4-1: config 0 descriptor??
[  120.984439][ T2240] usb 4-1: USB disconnect, device number 7
[  121.072713][ T6107] kvm: pic: single mode not supported
[  121.296862][ T6091] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.309672][ T6091] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.891537][ T6091] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  121.948278][ T6091] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.476771][ T6091] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.486541][ T6091] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.497116][ T6091] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.507412][ T6091] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.636882][ T6104] device bridge_slave_0 left promiscuous mode
[  122.653131][ T6104] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.667307][ T6104] device bridge_slave_1 left promiscuous mode
[  122.673627][ T6104] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.683902][ T6104] bond0: (slave bond_slave_0): Releasing backup interface
[  122.693630][ T6104] bond0: (slave bond_slave_1): Releasing backup interface
[  122.711060][ T6104] team0: Port device team_slave_0 removed
[  122.718401][ T6104] team0: Port device team_slave_1 removed
[  122.728706][ T6104] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.745486][ T6104] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.755772][ T6104] team0: Port device netdevsim0 removed
[  122.772270][ T6109] team0: Port device xfrm0 added
[  122.785248][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.524'.
[  122.796659][ T6128] Set syz0 is full, maxelem 0 reached
[  122.809558][ T6124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'.
[  123.546023][ T6161] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  123.740703][   T25] kauditd_printk_skb: 24 callbacks suppressed
[  123.740718][   T25] audit: type=1800 audit(1783748575.962:389): pid=6135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.534" name="/" dev="fuse" ino=4 res=0 errno=0
[  123.909867][ T6175] autofs4:pid:6175:autofs_fill_super: called with bogus options
[  123.915879][ T6144] loop3: detected capacity change from 0 to 32768
[  124.024660][ T6144] XFS (loop3): Mounting V5 Filesystem
[  124.097991][ T6193] loop2: detected capacity change from 0 to 128
[  124.173992][ T6193] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  124.277622][ T6144] XFS (loop3): Ending clean mount
[  124.407252][    T9] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  124.529833][ T4188] XFS (loop3): Unmounting Filesystem
[  124.561044][ T6211] loop2: detected capacity change from 0 to 256
[  125.007382][ T6232] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  125.007382][ T6232] The task syz.0.554 (6232) triggered the difference, watch for misbehavior.
[  125.046105][ T6231] netlink: 24 bytes leftover after parsing attributes in process `syz.4.555'.
[  125.220926][ T6241] tipc: Failed to remove unknown binding: 66,0,0/0:4044067738/4044067740
[  125.280128][ T6241] tipc: Failed to remove unknown binding: 66,0,0/0:4044067738/4044067739
[  125.314160][ T6243] capability: warning: `syz.4.558' uses deprecated v2 capabilities in a way that may be insecure
[  125.348973][ T6249] binder: 6247:6249 ioctl c0306201 200000000080 returned -14
[  125.420183][ T6249] binder: 6247:6249 ioctl c0306201 2000000003c0 returned -14
[  127.065931][ T6309] loop2: detected capacity change from 0 to 32768
[  127.140127][ T6309] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop2 scanned by syz.2.578 (6309)
[  127.199117][ T6309] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  127.259545][ T6309] BTRFS info (device loop2): using free space tree
[  127.266092][ T6309] BTRFS info (device loop2): has skinny extents
[  127.528035][ T6309] BTRFS info (device loop2): enabling ssd optimizations
[  127.573911][   T25] audit: type=1800 audit(1783748579.792:390): pid=6309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.578" name="file1" dev="loop2" ino=260 res=0 errno=0
[  127.638786][ T6309] BTRFS info (device loop2): balance: start -sconvert=raid0,soft
[  127.660973][ T6309] BTRFS info (device loop2): relocating block group 1048576 flags system
[  127.772211][ T6309] BTRFS info (device loop2): balance: ended with status: 0
[  127.785086][ T6371] tipc: Failed to remove unknown binding: 66,0,0/0:770934182/770934183
[  127.802924][ T6371] tipc: Failed to remove unknown binding: 66,0,0/0:770934182/770934183
[  128.083085][ T4181] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 14 /dev/loop2 scanned by udevd (4181)
[  128.139500][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  129.485534][ T6445] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  129.574422][ T6445] overlayfs: failed to set xattr on upper
[  129.629811][ T6445] overlayfs: ...falling back to index=off,metacopy=off.
[  130.049383][    C1] sched: RT throttling activated
[  130.389669][ T5835] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  130.824724][ T5835] usb 6-1: config 0 has no interfaces?
[  130.830448][ T5835] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  130.856783][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.916285][ T5835] usb 6-1: config 0 descriptor??
[  131.058973][ T6500] overlayfs: failed to clone lowerpath
[  131.287266][ T2305] usb 6-1: USB disconnect, device number 2
[  131.663103][ T6525] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  131.745150][ T6532] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  131.937332][ T6539] loop5: detected capacity change from 0 to 4096
[  131.984749][ T6539] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  132.019186][ T6546] overlayfs: failed to clone upperpath
[  132.052299][ T6539] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  132.164597][ T6527] loop3: detected capacity change from 0 to 32768
[  132.195397][ T6527] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.636 (6527)
[  132.261460][ T6527] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  132.304844][ T6527] BTRFS info (device loop3): setting nodatasum
[  132.317768][ T6527] BTRFS info (device loop3): force zlib compression, level 3
[  132.346282][ T6527] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  132.406295][ T6527] BTRFS info (device loop3): use lzo compression, level 0
[  132.431583][ T6527] BTRFS info (device loop3): turning on flush-on-commit
[  132.438573][ T6527] BTRFS info (device loop3): enabling auto defrag
[  132.479038][ T6527] BTRFS info (device loop3): max_inline at 4096
[  132.497006][ T6527] BTRFS info (device loop3): using free space tree
[  132.518007][ T6527] BTRFS info (device loop3): has skinny extents
[  132.622748][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.629197][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  132.698239][ T6527] BTRFS info (device loop3): enabling ssd optimizations
[  132.835534][ T6583] netlink: 'syz.2.650': attribute type 1 has an invalid length.
[  132.860820][ T6583] 8021q: adding VLAN 0 to HW filter on device bond2
[  132.896403][ T6583] bond2: (slave geneve2): making interface the new active one
[  132.907082][ T6583] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  132.916703][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  132.933040][ T6583] syz.2.650 (6583) used greatest stack depth: 19280 bytes left
[  133.372469][ T6599] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  133.379772][ T6599] IPv6: NLM_F_CREATE should be set when creating new route
[  133.434298][ T6601] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  133.489416][ T1107] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  133.775587][ T6605] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.782980][ T6605] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.899723][ T1107] usb 3-1: config 0 has no interfaces?
[  133.901670][ T6609] loop5: detected capacity change from 0 to 40427
[  133.905357][ T1107] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  133.923309][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.932619][ T1107] usb 3-1: config 0 descriptor??
[  134.004439][ T6609] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  134.037054][ T6609] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  134.078685][ T6609] F2FS-fs (loop5): Found nat_bits in checkpoint
[  134.198934][ T6609] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  134.214776][ T1107] usb 3-1: USB disconnect, device number 6
[  134.236186][ T6609] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  134.291153][ T6605] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.375041][ T6605] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  134.523199][ T6609] attempt to access beyond end of device
[  134.523199][ T6609] loop5: rw=2049, want=45104, limit=40427
[  134.718771][ T6630] loop3: detected capacity change from 0 to 2048
[  134.726764][ T6605] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.735265][ T6605] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.744731][ T6605] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.753337][ T6605] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.857518][ T6630] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  135.011858][ T6641] UDF-fs: error (device loop3): udf_read_inode: (ino 1347) failed !bh
[  135.311001][ T6651] netlink: 32 bytes leftover after parsing attributes in process `syz.2.667'.
[  135.382017][ T6651] netlink: 32 bytes leftover after parsing attributes in process `syz.2.667'.
[  135.821996][ T6661] autofs4:pid:6661:autofs_fill_super: called with bogus options
[  136.018037][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.5.686'.
[  136.253103][ T6685] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  136.260419][ T6685] IPv6: NLM_F_CREATE should be set when creating new route
[  136.371960][ T6688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.678'.
[  136.399621][ T6688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.678'.
[  137.031015][ T6685] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.038396][ T6685] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.318820][ T6715] overlayfs: failed to resolve './file0': -2
[  137.926414][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.983754][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.321091][ T6730] autofs4:pid:6730:autofs_fill_super: called with bogus options
[  138.726435][ T6685] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.735408][ T6685] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.744799][ T6685] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.753854][ T6685] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.831897][ T6736] netlink: 12 bytes leftover after parsing attributes in process `syz.5.692'.
[  139.703966][ T6774] IPv6: addrconf: prefix option has invalid lifetime
[  139.841103][ T6773] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  140.186663][ T6797] loop3: detected capacity change from 0 to 1024
[  140.225607][ T6795] 0x000000000000-0x000000020003 : ""
[  140.259860][ T6795] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x20000
[  140.302018][ T6797] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  140.345758][ T6795] ftl_cs: FTL header not found.
[  140.377192][ T6797] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.533966][ T6797] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  140.577818][ T6818] netlink: 32 bytes leftover after parsing attributes in process `syz.0.716'.
[  140.586903][ T6818] netlink: 32 bytes leftover after parsing attributes in process `syz.0.716'.
[  140.632736][ T6797] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #15: comm syz.3.711: mark_inode_dirty error
[  140.697445][ T6797] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Out of memory
[  140.711936][ T4647] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  140.766065][ T6797] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #15: comm syz.3.711: mark_inode_dirty error
[  140.838530][ T6797] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Out of memory
[  140.916228][ T6797] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #15: comm syz.3.711: mark_inode_dirty error
[  140.989716][ T4647] usb 6-1: Using ep0 maxpacket: 8
[  140.999816][ T6797] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: block 3: comm syz.3.711: lblock 3 mapped to illegal pblock 3 (length 1)
[  141.056392][ T6797] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[  141.124312][ T6797] EXT4-fs (loop3): This should not happen!! Data will be lost
[  141.124312][ T6797] 
[  141.189619][ T4647] usb 6-1: unable to get BOS descriptor or descriptor too short
[  141.289621][ T4647] usb 6-1: config 6 has an invalid interface number: 212 but max is 0
[  141.316030][ T4647] usb 6-1: config 6 has no interface number 0
[  141.341564][ T4647] usb 6-1: config 6 interface 212 has no altsetting 0
[  141.546922][ T6854] device ip6gre1 entered promiscuous mode
[  141.559531][ T4647] usb 6-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=b6.51
[  141.571375][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.727'.
[  141.575007][ T4647] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.589164][ T4647] usb 6-1: Product: syz
[  141.606713][ T4647] usb 6-1: Manufacturer: syz
[  141.614855][ T4647] usb 6-1: SerialNumber: syz
[  141.742355][ T4474] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  141.757319][ T4474] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  141.782537][ T5454] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  141.985236][ T4647] gspca_main: konica-2.14.0 probing 04c8:0720
[  142.318706][ T4466] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  142.779700][ T5454] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  143.458708][ T6953] loop3: detected capacity change from 0 to 736
[  143.574499][ T6953] rock: directory entry would overflow storage
[  143.587377][ T6953] rock: sig=0x3b10, size=4, remaining=3
[  143.805485][ T6972] netlink: 24 bytes leftover after parsing attributes in process `syz.3.751'.
[  145.366261][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  145.739494][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  145.862240][ T7026] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  145.882757][ T7026] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  146.086716][ T7044] netlink: 'syz.2.769': attribute type 10 has an invalid length.
[  146.169217][ T7044] device wlan1 entered promiscuous mode
[  146.196596][ T7044] team0: Port device wlan1 added
[  147.248701][ T7064] sch_tbf: burst 4 is lower than device lo mtu (65550) !
[  147.314253][ T5454] libceph: connect (1)[c::]:6789 error -101
[  147.320676][ T5454] libceph: mon0 (1)[c::]:6789 connect error
[  147.591702][ T5454] libceph: connect (1)[c::]:6789 error -101
[  147.619061][ T5454] libceph: mon0 (1)[c::]:6789 connect error
[  148.279686][ T7068] ceph: No mds server is up or the cluster is laggy
[  148.649790][ T4647] gspca_konica: reg_r err -71
[  148.755031][ T4466] libceph: connect (1)[c::]:6789 error -101
[  148.769564][ T4466] libceph: mon0 (1)[c::]:6789 connect error
[  148.779054][ T7071] ceph: No mds server is up or the cluster is laggy
[  148.828983][ T4466] libceph: connect (1)[c::]:6789 error -101
[  148.852010][ T4466] libceph: mon0 (1)[c::]:6789 connect error
[  149.342454][ T7129] netlink: 20 bytes leftover after parsing attributes in process `syz.3.789'.
[  149.374742][ T7130] loop5: detected capacity change from 0 to 1024
[  149.513512][ T7130] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002]
[  149.534062][ T7130] System zones: 0-1, 3-8
[  149.575894][ T7130] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouid32,jqfmt=vfsv1,noquota,debug,journal_dev=0x0000000000000009,nodioread_nolock,,errors=continue. Quota mode: none.
[  149.638396][ T7130] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  149.654690][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.794'.
[  149.659516][ T4466] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  149.750573][   T25] audit: type=1800 audit(1783748601.972:391): pid=7130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.788" name="file1" dev="loop5" ino=15 res=0 errno=0
[  149.958128][ T4344] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: comm kworker/u4:10: lblock 0 mapped to illegal pblock 0 (length 6)
[  149.991621][ T4344] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  150.004118][ T4344] EXT4-fs (loop5): This should not happen!! Data will be lost
[  150.004118][ T4344] 
[  150.017292][ T4344] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:10: lblock 8 mapped to illegal pblock 8 (length 8)
[  150.031965][ T4466] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  150.043046][ T4466] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  150.053593][ T4466] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  150.064848][ T4344] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  150.092306][ T4466] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  150.102545][ T4344] EXT4-fs (loop5): This should not happen!! Data will be lost
[  150.102545][ T4344] 
[  150.279732][ T4466] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  150.309340][ T4466] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.318470][ T4466] usb 3-1: Product: syz
[  150.359567][ T4466] usb 3-1: Manufacturer: syz
[  150.379517][ T4466] usb 3-1: SerialNumber: syz
[  150.437633][ T4466] usb 3-1: config 0 descriptor??
[  151.275517][ T4466] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  151.307342][ T4647] konica: probe of 6-1:6.212 failed with error -71
[  151.317870][ T4647] usb 6-1: USB disconnect, device number 3
[  151.364557][ T4643] usb 3-1: USB disconnect, device number 7
[  151.421926][ T7172] netlink: 'syz.0.804': attribute type 10 has an invalid length.
[  151.467336][ T7172] team0: Device wlan1 is of different type
[  151.511162][ T7178] bridge0: port 3(team0) entered disabled state
[  151.517681][ T7178] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.525674][ T7178] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.609132][ T7187] device team0 left promiscuous mode
[  151.614592][ T7187] device team_slave_0 left promiscuous mode
[  151.650745][ T7187] device team_slave_1 left promiscuous mode
[  151.657009][ T7187] device netdevsim0 left promiscuous mode
[  151.663726][ T7187] device bridge1 left promiscuous mode
[  151.670905][ T7187] device wlan1 left promiscuous mode
[  151.678683][ T7187] bridge0: port 3(team0) entered disabled state
[  151.690765][ T7187] device bridge_slave_1 left promiscuous mode
[  151.696948][ T7187] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.707071][ T7187] device bridge_slave_0 left promiscuous mode
[  151.713691][ T7187] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.806164][ T7188] netlink: 'syz.0.811': attribute type 1 has an invalid length.
[  151.832014][ T7188] 8021q: adding VLAN 0 to HW filter on device bond1
[  152.958848][ T7234] overlayfs: failed to clone upperpath
[  152.969568][ T7233] loop2: detected capacity change from 0 to 1024
[  153.165645][ T7233] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002]
[  153.179824][ T7233] System zones: 0-1, 3-8
[  153.211945][ T7233] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,jqfmt=vfsv1,noquota,debug,journal_dev=0x0000000000000009,nodioread_nolock,,errors=continue. Quota mode: none.
[  153.267558][ T7233] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  153.337075][   T25] audit: type=1800 audit(1783748605.552:392): pid=7233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.827" name="file1" dev="loop2" ino=15 res=0 errno=0
[  153.547216][ T4344] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: comm kworker/u4:10: lblock 0 mapped to illegal pblock 0 (length 6)
[  153.567114][ T4344] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  153.586668][ T4344] EXT4-fs (loop2): This should not happen!! Data will be lost
[  153.586668][ T4344] 
[  153.605828][ T4344] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:10: lblock 8 mapped to illegal pblock 8 (length 8)
[  153.627014][ T4344] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  153.647183][ T4344] EXT4-fs (loop2): This should not happen!! Data will be lost
[  153.647183][ T4344] 
[  153.739508][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  154.147570][ T7272] loop2: detected capacity change from 0 to 512
[  154.186895][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.5.851'.
[  154.326384][ T7272] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  154.362986][ T7272] EXT4-fs (loop2): orphan cleanup on readonly fs
[  154.391129][ T7272] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.839: bad orphan inode 15
[  154.419633][ T7272] ext4_test_bit(bit=14, block=18) = 1
[  154.425051][ T7272] is_bad_inode(inode)=0
[  154.474995][ T7272] NEXT_ORPHAN(inode)=1023
[  154.505538][ T7272] max_ino=32
[  154.508767][ T7272] i_nlink=0
[  154.529914][ T7272] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.839: bg 0: block 161: padding at end of block bitmap is not set
[  154.556750][ T7272] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  154.567554][ T7272] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  154.577804][ T7286] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  154.926712][ T7304] binder: BINDER_SET_CONTEXT_MGR already set
[  154.937444][ T7304] binder: 7303:7304 ioctl 4018620d 200000000040 returned -16
[  156.633393][ T7323] overlayfs: failed to clone upperpath
[  156.888687][ T7333] kvm: pic: single mode not supported
[  157.112196][ T7349] syz.4.868 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  157.115493][ T7347] loop3: detected capacity change from 0 to 1024
[  157.473431][ T7347] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002]
[  157.550578][ T7347] System zones: 0-1, 3-8
[  157.887684][ T7349] device bond1 left promiscuous mode
[  157.896967][ T7347] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,jqfmt=vfsv1,noquota,debug,journal_dev=0x0000000000000009,nodioread_nolock,,errors=continue. Quota mode: none.
[  157.929459][ T7349] device bridge1 left promiscuous mode
[  157.996898][ T7347] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.179430][   T25] audit: type=1800 audit(1783748610.372:393): pid=7347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.865" name="file1" dev="loop3" ino=15 res=0 errno=0
[  158.200063][    C0] vkms_vblank_simulate: vblank timer overrun
[  158.280018][ T7363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.870'.
[  158.719135][ T4348] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: comm kworker/u4:12: lblock 0 mapped to illegal pblock 0 (length 6)
[  158.773803][ T4348] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  158.823496][ T4348] EXT4-fs (loop3): This should not happen!! Data will be lost
[  158.823496][ T4348] 
[  158.860543][ T4348] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:12: lblock 8 mapped to illegal pblock 8 (length 8)
[  158.920154][ T4348] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  158.940234][ T4348] EXT4-fs (loop3): This should not happen!! Data will be lost
[  158.940234][ T4348] 
[  160.188070][ T7355] loop5: detected capacity change from 0 to 65536
[  161.996022][ T4643] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  162.263613][ T4643] usb 3-1: Using ep0 maxpacket: 16
[  162.356459][ T7424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.898'.
[  162.403611][ T4643] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  162.437322][ T4643] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  162.659620][ T4643] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  162.672702][ T4643] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.684175][ T4643] usb 3-1: Product: syz
[  162.688343][ T4643] usb 3-1: Manufacturer: syz
[  162.694385][ T4643] usb 3-1: SerialNumber: syz
[  162.701400][ T4643] usb 3-1: config 0 descriptor??
[  162.740931][ T4643] hub 3-1:0.0: bad descriptor, ignoring hub
[  162.747090][ T4643] hub: probe of 3-1:0.0 failed with error -5
[  162.774428][ T4643] snd-usb-audio: probe of 3-1:0.0 failed with error -2
[  162.807165][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  162.996903][ T7414] kvm: pic: non byte write
[  163.139599][ T5454] usb 3-1: USB disconnect, device number 8
[  163.636024][ T7444] tipc: Failed to remove unknown binding: 66,0,0/0:3550443578/3550443579
[  163.645777][ T7444] tipc: Failed to remove unknown binding: 66,0,0/0:3550443578/3550443579
[  163.836240][ T7454] bond2: (slave ip6gretap1): making interface the new active one
[  163.849576][ T4643] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  163.865291][ T7454] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  164.243708][ T4643] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7
[  164.255021][ T4643] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 65, changing to 10
[  164.270859][ T4643] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 41463, setting to 1024
[  164.285724][ T4643] usb 4-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c
[  164.304512][ T4643] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.396786][ T4643] appletouch 4-1:32.0: Could not find int-in endpoint
[  164.407386][ T4643] appletouch: probe of 4-1:32.0 failed with error -5
[  164.428650][ T4643] usbhid 4-1:32.0: couldn't find an input interrupt endpoint
[  164.645983][ T7440] bridge0: port 3(syz_tun) entered blocking state
[  164.652961][ T7440] bridge0: port 3(syz_tun) entered disabled state
[  164.685766][ T7440] device syz_tun entered promiscuous mode
[  164.712049][ T5454] usb 4-1: USB disconnect, device number 8
[  164.763382][ T7492] (unnamed net_device) (uninitialized): up delay (9) is not a multiple of miimon (5), value rounded to 5 ms
[  164.805637][ T7492] device ip6gretap1 entered promiscuous mode
[  164.812362][ T7492] bond3: (slave ip6gretap1): no link monitoring support
[  164.821438][ T7492] bond3: (slave ip6gretap1): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details
[  164.843482][ T7492] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  166.303292][ T5454] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  166.589630][ T5454] usb 3-1: Using ep0 maxpacket: 32
[  166.734813][ T5454] usb 3-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.753251][ T5454] usb 3-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  166.774383][ T5454] usb 3-1: config 0 interface 0 has no altsetting 0
[  166.786615][ T5454] usb 3-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00
[  166.817648][ T5454] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.832283][ T5454] usb 3-1: config 0 descriptor??
[  167.599620][ T7529] udc-core: couldn't find an available UDC or it's busy
[  167.648632][ T7529] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  167.782059][ T5454] hid-generic 0003:0458:5014.0002: item fetching failed at offset 5/39
[  167.795063][ T5454] hid-generic: probe of 0003:0458:5014.0002 failed with error -22
[  167.929187][ T5454] usb 3-1: USB disconnect, device number 9
[  168.594316][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.941'.
[  168.617918][ T7572] loop3: detected capacity change from 0 to 512
[  168.680036][ T7572] EXT4-fs (loop3): Ignoring removed orlov option
[  168.732694][ T7572] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,init_itable=0x0000000000000007,orlov,,errors=continue. Quota mode: writeback.
[  168.749860][ T7572] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.877002][ T7584] loop5: detected capacity change from 0 to 512
[  169.072955][ T7584] EXT4-fs (loop5): Ignoring removed orlov option
[  169.099500][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  169.120743][ T7584] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,init_itable=0x0000000000000007,orlov,,errors=continue. Quota mode: writeback.
[  169.279925][ T7584] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.039845][ T4466] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  171.122158][ T7624] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.958'.
[  171.212303][ T7632] overlayfs: failed to clone lowerpath
[  171.283879][ T4466] usb 6-1: Using ep0 maxpacket: 32
[  171.404161][ T4466] usb 6-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  171.429722][ T4466] usb 6-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  171.468008][ T4466] usb 6-1: config 0 interface 0 has no altsetting 0
[  171.478322][ T4466] usb 6-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00
[  171.498418][ T4466] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.525748][ T4466] usb 6-1: config 0 descriptor??
[  171.946510][ T7644] netlink: 156 bytes leftover after parsing attributes in process `syz.2.964'.
[  171.978677][ T7644] netlink: 156 bytes leftover after parsing attributes in process `syz.2.964'.
[  172.018917][ T7644] netlink: 48 bytes leftover after parsing attributes in process `syz.2.964'.
[  172.035345][ T4466] hid-generic 0003:0458:5014.0003: item fetching failed at offset 5/39
[  172.044909][ T4466] hid-generic: probe of 0003:0458:5014.0003 failed with error -22
[  172.302348][ T7614] udc-core: couldn't find an available UDC or it's busy
[  172.331027][ T7614] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  172.370976][ T4643] usb 6-1: USB disconnect, device number 4
[  173.032132][ T7686] device syz_tun left promiscuous mode
[  173.058962][ T7686] bridge0: port 3(syz_tun) entered disabled state
[  173.076219][ T7686] device bridge_slave_0 left promiscuous mode
[  173.102141][ T7686] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.160102][ T7686] device bridge_slave_1 left promiscuous mode
[  173.166372][ T7686] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.186031][ T7686] bond0: (slave bond_slave_0): Releasing backup interface
[  173.202416][ T7686] bond0: (slave bond_slave_1): Releasing backup interface
[  173.252267][ T7686] team0: Port device team_slave_0 removed
[  173.269852][ T7686] team0: Port device team_slave_1 removed
[  173.275852][ T7686] batman_adv: batadv0: Removing interface: batadv_slave_0
[  173.290466][ T7686] batman_adv: batadv0: Removing interface: batadv_slave_1
[  173.302632][ T7686] team0: Port device bond1 removed
[  173.318847][ T7686] bond2: (slave geneve2): Releasing active interface
[  173.343846][ T7689] team0: Port device xfrm0 added
[  173.718683][ T7706] netlink: 'syz.5.984': attribute type 2 has an invalid length.
[  174.413911][ T7730] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  174.600584][ T4466] kernel read not supported for file [userfaultfd] (pid: 4466 comm: kworker/1:11)
[  175.326377][ T7752] netlink: 52 bytes leftover after parsing attributes in process `syz.5.997'.
[  175.441101][ T7752] netlink: 76 bytes leftover after parsing attributes in process `syz.5.997'.
[  175.470565][ T7752] netlink: 52 bytes leftover after parsing attributes in process `syz.5.997'.
[  175.612663][ T7768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1002'.
[  175.659442][ T5835] Bluetooth: hci0: command 0x0406 tx timeout
[  175.673985][ T4466] Bluetooth: hci3: command 0x0406 tx timeout
[  175.685077][ T7775] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1004'.
[  175.693105][ T4466] Bluetooth: hci1: command 0x0406 tx timeout
[  175.701151][ T4466] Bluetooth: hci2: command 0x0406 tx timeout
[  176.116048][ T7808] netlink: 'syz.0.1015': attribute type 1 has an invalid length.
[  176.615321][ T7812] bond3: (slave geneve2): Error -99 calling set_mac_address
[  176.891437][ T7821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1019'.
[  177.051788][ T7830] netlink: 'syz.2.1023': attribute type 39 has an invalid length.
[  177.419640][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  178.823801][ T7882] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1041'.
[  179.719664][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1046'.
[  179.776274][ T7894] loop3: detected capacity change from 0 to 128
[  179.796472][ T7893] netlink: 'syz.5.1044': attribute type 39 has an invalid length.
[  179.860526][ T7898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1047'.
[  179.866264][ T7894] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  179.899294][ T7898] team0: Port device team_slave_0 removed
[  179.938655][ T7894] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  180.386198][ T7914] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1052'.
[  180.411633][ T7919] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1052'.
[  180.458388][ T7914] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1052'.
[  180.663285][ T7936] fuse: Bad value for 'fd'
[  182.010790][ T7950] gfs2: gfs2 mount does not exist
[  182.070207][ T7951] netlink: 'syz.3.1065': attribute type 2 has an invalid length.
[  183.703565][ T8004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1087'.
[  183.867001][ T8013] netlink: 'syz.4.1080': attribute type 2 has an invalid length.
[  183.880212][ T8011] loop2: detected capacity change from 0 to 2048
[  183.990864][ T8011] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  184.939219][ T8042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1089'.
[  185.070609][ T8045] loop5: detected capacity change from 0 to 128
[  185.224097][ T8045] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  185.304033][ T8045] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  185.613996][ T8070] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  186.328667][ T8092] loop3: detected capacity change from 0 to 1024
[  186.864260][ T8096] IPVS: Error connecting to the multicast addr
[  186.901049][ T8100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1111'.
[  187.003685][ T8105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1115'.
[  187.366307][ T8126] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.1117'.
[  187.398524][ T8126] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1117'.
[  187.489067][   T25] audit: type=1326 audit(1783748639.702:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8130 comm="syz.5.1124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b91e0e59 code=0x7ffc0000
[  187.513183][    C0] vkms_vblank_simulate: vblank timer overrun
[  187.574595][   T25] audit: type=1326 audit(1783748639.712:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8130 comm="syz.5.1124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b91e0e59 code=0x7ffc0000
[  187.598696][    C0] vkms_vblank_simulate: vblank timer overrun
[  187.639492][   T25] audit: type=1326 audit(1783748639.712:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8130 comm="syz.5.1124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b91e0e59 code=0x7ffc0000
[  187.663612][    C0] vkms_vblank_simulate: vblank timer overrun
[  188.374888][   T25] audit: type=1326 audit(1783748639.712:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8130 comm="syz.5.1124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f84b91e0e59 code=0x7ffc0000
[  188.399169][    C0] vkms_vblank_simulate: vblank timer overrun
[  188.433001][   T25] audit: type=1326 audit(1783748639.712:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8130 comm="syz.5.1124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b91e0e59 code=0x7ffc0000
[  188.519110][   T25] audit: type=1326 audit(1783748639.712:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8130 comm="syz.5.1124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b91e0e59 code=0x7ffc0000
[  188.604788][   T25] audit: type=1326 audit(1783748639.712:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8130 comm="syz.5.1124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b91e0e59 code=0x7ffc0000
[  188.688246][   T25] audit: type=1326 audit(1783748639.712:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8130 comm="syz.5.1124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b91e0e59 code=0x7ffc0000
[  188.769627][   T25] audit: type=1326 audit(1783748639.712:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8130 comm="syz.5.1124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f84b91e0e59 code=0x7ffc0000
[  188.828710][   T25] audit: type=1326 audit(1783748639.712:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8130 comm="syz.5.1124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f84b91dabd7 code=0x7ffc0000
[  188.933208][ T8152] loop3: detected capacity change from 0 to 128
[  189.014062][ T8152] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  189.099019][ T8152] ext4 filesystem being mounted at /205/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  189.158865][ T8124] loop2: detected capacity change from 0 to 65536
[  189.281933][ T8124] XFS (loop2): Mounting V5 Filesystem
[  189.377338][ T8124] XFS (loop2): Ending clean mount
[  189.438626][ T8124] XFS (loop2): Quotacheck needed: Please wait.
[  189.535795][ T8124] XFS (loop2): Quotacheck: Done.
[  189.755892][ T4192] XFS (loop2): Unmounting Filesystem
[  190.209592][ T8192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1144'.
[  190.260901][ T8192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  192.752912][ T8231] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1156'.
[  193.678457][ T8245] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer.
[  193.750916][ T8249] device syzkaller0 entered promiscuous mode
[  193.935016][ T8253] netlink: 'syz.5.1164': attribute type 4 has an invalid length.
[  194.008320][ T8254] kvm: pic: level sensitive irq not supported
[  194.015044][ T8256] netlink: 'syz.5.1164': attribute type 4 has an invalid length.
[  194.063648][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  194.071120][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  196.545830][ T8298] device syzkaller0 entered promiscuous mode
[  197.739975][ T4474] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  197.988932][ T8370] sctp: [Deprecated]: syz.3.1209 (pid 8370) Use of struct sctp_assoc_value in delayed_ack socket option.
[  197.988932][ T8370] Use struct sctp_sack_info instead
[  198.019901][ T4474] usb 6-1: Using ep0 maxpacket: 16
[  198.149736][ T4474] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  198.168625][ T4474] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  198.247443][ T8392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1217'.
[  198.364141][ T4474] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  198.376012][ T4474] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.384682][ T4474] usb 6-1: Product: syz
[  198.388923][ T4474] usb 6-1: Manufacturer: syz
[  198.394068][ T4474] usb 6-1: SerialNumber: syz
[  198.504676][ T8401] netlink: 'syz.4.1221': attribute type 4 has an invalid length.
[  198.524656][ T8401] netlink: 'syz.4.1221': attribute type 4 has an invalid length.
[  198.729966][ T4474] usb 6-1: 0:2 : does not exist
[  198.749022][ T4474] usb 6-1: USB disconnect, device number 5
[  198.765877][ T8410] xt_hashlimit: size too large, truncated to 1048576
[  199.001665][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  201.100063][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  202.854771][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1254'.
[  202.898482][ T8488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  204.135555][ T8525] overlayfs: failed to clone upperpath
[  204.276804][ T8538] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1272'.
[  204.348941][ T8538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1272'.
[  204.450017][ T8545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  204.553365][ T8545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  204.647690][ T8550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  204.739004][ T8557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1277'.
[  205.787946][ T8593] bond4: (slave ip6gretap1): no link monitoring support
[  205.840944][ T8593] bond4: (slave ip6gretap1): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details
[  205.861699][    C0] vkms_vblank_simulate: vblank timer overrun
[  205.953282][ T8593] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link
[  206.043464][ T8599] autofs4:pid:8599:autofs_fill_super: pipe file descriptor does not contain proper ops
[  206.122655][ T8606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1292'.
[  206.266994][ T8614] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1296'.
[  206.607023][ T8640] device bridge_slave_0 left promiscuous mode
[  206.629585][ T8640] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.667502][ T8640] device bridge_slave_1 left promiscuous mode
[  206.690182][ T8640] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.709152][ T8640] bond0: (slave bond_slave_0): Releasing backup interface
[  206.748309][ T8640] bond0: (slave bond_slave_1): Releasing backup interface
[  206.795624][ T8640] team0: Port device team_slave_1 removed
[  206.825571][ T8640] batman_adv: batadv0: Removing interface: batadv_slave_0
[  206.835932][ T8640] batman_adv: batadv0: Removing interface: batadv_slave_1
[  206.855572][ T8640] team0: Port device wlan1 removed
[  206.878977][ T8640] bond1: (slave bridge1): Releasing backup interface
[  206.908364][ T8640] bond2: (slave geneve2): Releasing active interface
[  206.944011][ T8640] bond4: (slave ip6gretap1): Releasing backup interface
[  207.000464][ T8643] team0: Port device xfrm0 added
[  207.016044][ T8644] tipc: Started in network mode
[  207.034219][ T8644] tipc: Node identity ca1f8c9f9f1c, cluster identity 4711
[  207.047519][ T8644] tipc: Enabled bearer <eth:team0>, priority 0
[  207.054806][ T8649] netlink: 'syz.2.1308': attribute type 3 has an invalid length.
[  207.069576][ T8649] netlink: 'syz.2.1308': attribute type 3 has an invalid length.
[  207.387759][ T8668] overlayfs: failed to clone upperpath
[  207.604565][ T8677] device veth3 entered promiscuous mode
[  208.051782][ T5454] tipc: Node number set to 1426295967
[  208.636652][ T8707] netlink: 'syz.5.1329': attribute type 1 has an invalid length.
[  208.665906][ T8707] 8021q: adding VLAN 0 to HW filter on device bond1
[  208.685403][ T8707] bond1: (slave dummy0): Enslaving as a backup interface with an up link
[  208.700050][ T8707] netlink: 'syz.5.1329': attribute type 10 has an invalid length.
[  208.708047][ T8707] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1329'.
[  208.730612][ T8707] device dummy0 entered promiscuous mode
[  208.738149][ T8707] bond1: (slave dummy0): Releasing backup interface
[  209.537936][ T8724] kvm: pic: single mode not supported
[  209.537954][ T8724] kvm: pic: level sensitive irq not supported
[  209.551013][ T8724] kvm: pic: level sensitive irq not supported
[  209.557679][ T8724] kvm: pic: single mode not supported
[  209.564353][ T8724] kvm: pic: level sensitive irq not supported
[  209.576054][ T8724] kvm: pic: single mode not supported
[  209.582390][ T8724] kvm: pic: level sensitive irq not supported
[  209.598714][ T8724] kvm: pic: level sensitive irq not supported
[  209.605359][ T8724] kvm: pic: single mode not supported
[  209.749930][ T4643] libceph: connect (1)[c::]:6789 error -101
[  209.767642][ T4643] libceph: mon0 (1)[c::]:6789 connect error
[  209.796288][ T8735] ceph: No mds server is up or the cluster is laggy
[  209.950517][ T8743] loop2: detected capacity change from 0 to 1024
[  210.178556][ T8743] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[  210.507913][ T8743] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  210.653563][ T8743] EXT4-fs (loop2): orphan cleanup on readonly fs
[  210.702853][ T8743] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.1342: Freeing blocks not in datazone - block = 0, count = 4096
[  210.740264][ T8751] device wg1 entered promiscuous mode
[  210.765809][ T8743] EXT4-fs (loop2): Remounting filesystem read-only
[  210.777412][ T8743] EXT4-fs (loop2): 1 orphan inode deleted
[  210.815986][ T8743] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,barrier=0x0000000000000000,barrier=0x0000000000000009,init_itable=0x0000000000007ab4,jqfmt=vfsv0,. Quota mode: writeback.
[  210.913955][ T8743] EXT4-fs error (device loop2): ext4_get_group_desc:277: comm syz.2.1342: block_group >= groups_count - block_group = 32, groups_count = 1
[  210.935799][ T8743] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4452: inode #1025: comm syz.2.1342: unable to read itable block
[  211.117152][ T8768] loop2: detected capacity change from 0 to 1024
[  211.190416][ T8768] EXT4-fs (loop2): Ignoring removed nobh option
[  211.202438][ T8768] EXT4-fs (loop2): Ignoring removed bh option
[  211.244952][ T8768] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002]
[  211.259680][ T8768] System zones: 0-1, 3-12
[  211.268474][ T8768] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,noquota,jqfmt=vfsv1,sysvgroups,errors=remount-ro,stripe=0x0000000000000011,bh,debug,. Quota mode: none.
[  211.308088][ T8777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1354'.
[  211.394913][ T8768] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.1350: Invalid inode table block 5 in block_group 0
[  211.408702][ T8768] EXT4-fs (loop2): Remounting filesystem read-only
[  211.435931][ T4335] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm kworker/u4:6: Invalid inode table block 5 in block_group 0
[  211.468691][ T4335] EXT4-fs (loop2): Remounting filesystem read-only
[  211.586586][ T8783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1355'.
[  211.633159][ T8783] 8021q: adding VLAN 0 to HW filter on device bond4
[  211.737640][ T8796] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1361'.
[  211.860357][ T8806] batman_adv: batadv0: Adding interface: dummy0
[  211.879212][ T8806] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.926117][ T8806] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  212.045168][ T8815] loop3: detected capacity change from 0 to 128
[  212.278402][ T8815] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  212.300195][ T8815] ext4 filesystem being mounted at /248/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  213.060526][ T8834] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1374'.
[  213.114191][ T8834] device bond2 entered promiscuous mode
[  213.128463][ T8841] device bridge3 entered promiscuous mode
[  213.161927][ T8841] bond2: (slave bridge3): Enslaving as an active interface with an up link
[  213.369959][ T5454] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  213.516328][ T8855] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  213.640051][ T5454] usb 3-1: Using ep0 maxpacket: 16
[  213.909987][ T5454] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping
[  213.927759][ T8876] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1387'.
[  214.123674][ T5454] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  214.197671][ T5454] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.346857][ T5454] usb 3-1: Product: syz
[  214.430963][ T5454] usb 3-1: Manufacturer: syz
[  214.593515][ T5454] usb 3-1: SerialNumber: syz
[  214.675856][ T5454] usb 3-1: config 0 descriptor??
[  214.686454][ T8884] overlayfs: failed to clone upperpath
[  214.989058][ T8901] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1396'.
[  215.044960][ T8901] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1396'.
[  215.068626][ T8901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1396'.
[  215.195625][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1399'.
[  215.212124][ T8910] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  215.228000][ T8910] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  215.294911][ T8912] netlink: 'syz.0.1400': attribute type 1 has an invalid length.
[  215.347883][ T8912] device bond4 entered promiscuous mode
[  215.359906][ T8912] 8021q: adding VLAN 0 to HW filter on device bond4
[  215.397324][ T8916] device veth3 entered promiscuous mode
[  215.406668][ T8916] bond4: (slave veth3): making interface the new active one
[  215.415395][ T8916] bond4: (slave veth3): Enslaving as an active interface with an up link
[  215.425168][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready
[  215.716550][ T8921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1412'.
[  216.743891][ T5454] usb 3-1: USB disconnect, device number 10
[  216.859371][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!!
[  216.899371][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!!
[  216.919364][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[  216.969368][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!!
[  217.009363][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[  217.319369][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!!
[  217.369360][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[  217.614275][ T8961] Set syz0 is full, maxelem 0 reached
[  217.620828][ T8961] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  217.674653][ T8963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1415'.
[  217.838917][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1420'.
[  218.055350][ T8971] bond5: (slave veth3): Enslaving as an active interface with a down link
[  218.139360][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[  218.219374][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!!
[  218.473822][ T8996] loop3: detected capacity change from 0 to 2048
[  218.576240][ T8996] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  218.593221][ T8996] ext4 filesystem being mounted at /261/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  218.716815][ T8996] fs-verity: sha512 using implementation "sha512-avx2"
[  221.635064][ T9061] 8021q: adding VLAN 0 to HW filter on device bond3
[  221.655804][ T9063] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  221.665389][ T9063] bond3: (slave macvlan2): Enslaving as a backup interface with a down link
[  221.681812][ T9065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1450'.
[  221.697547][ T9065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1450'.
[  221.716235][ T9068] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1451'.
[  221.780884][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1451'.
[  221.888932][ T9072] md2: error: bitmap file must open for write
[  223.574320][ T9074] device vlan3 entered promiscuous mode
[  223.587226][ T9076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1454'.
[  224.347426][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1468'.
[  226.194639][ T9137] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1474'.
[  226.285819][ T9138] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1474'.
[  226.833520][ T9148] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1477'.
[  227.113461][ T9161] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  228.049297][ T9211] "syz.5.1504" (9211) uses obsolete ecb(arc4) skcipher
[  228.733061][ T9235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1513'.
[  229.445937][ T9257] team0: Port device xfrm0 removed
[  229.484017][ T9257] bond2: (slave ip6gretap1): Releasing active interface
[  229.559269][ T9257] bond4: (slave veth3): Releasing backup interface
[  229.677157][   T25] kauditd_printk_skb: 156 callbacks suppressed
[  229.677171][   T25] audit: type=1326 audit(1783748681.892:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9266 comm="syz.4.1525" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d6ec81e59 code=0x0
[  229.680285][ T9261] team0: Mode changed to "loadbalance"
[  229.892164][ T9272] lo speed is unknown, defaulting to 1000
[  229.897966][ T9272] lo speed is unknown, defaulting to 1000
[  229.925507][   T25] audit: type=1107 audit(1783748682.142:561): pid=9274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  229.975723][ T9273] ½
[  230.062602][    C0] vkms_vblank_simulate: vblank timer overrun
[  230.077685][ T9272] lo speed is unknown, defaulting to 1000
[  230.130480][ T9272] infiniband syś2: RDMA CMA: cma_listen_on_dev, error -98
[  230.207923][ T9279] sch_fq: defrate 0 ignored.
[  230.256721][ T9272] lo speed is unknown, defaulting to 1000
[  230.298264][ T9272] lo speed is unknown, defaulting to 1000
[  230.327715][ T9272] lo speed is unknown, defaulting to 1000
[  230.359721][ T9272] lo speed is unknown, defaulting to 1000
[  230.366325][ T9272] lo speed is unknown, defaulting to 1000
[  231.552807][ T9301] netlink: 'syz.0.1536': attribute type 1 has an invalid length.
[  231.622599][ T9301] 8021q: adding VLAN 0 to HW filter on device bond5
[  231.811618][ T9301] bond5: (slave ip6gretap2): making interface the new active one
[  231.861110][ T9301] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link
[  231.904673][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready
[  231.985995][ T5454] Bluetooth: hci4: command 0x0406 tx timeout
[  232.268813][ T9313] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1541'.
[  232.966458][ T9345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1552'.
[  233.104006][ T9349] netlink: 'syz.2.1554': attribute type 10 has an invalid length.
[  233.195016][ T9351] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  233.727833][ T9363] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1560'.
[  233.994794][ T9380] sch_fq: defrate 0 ignored.
[  234.622178][ T9391] netlink: 'syz.4.1569': attribute type 10 has an invalid length.
[  234.654705][ T9391] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  234.799866][ T9397] device syzkaller0 entered promiscuous mode
[  235.111211][ T9410] netlink: 'syz.3.1576': attribute type 1 has an invalid length.
[  235.646991][ T9410] 8021q: adding VLAN 0 to HW filter on device bond4
[  235.721808][ T9417] bond4: (slave ip6gretap2): making interface the new active one
[  235.753994][ T9417] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link
[  235.784013][    C1] ==================================================================
[  235.792693][    C1] BUG: KASAN: use-after-free in __nft_trace_packet+0x135/0x150
[  235.800273][    C1] Read of size 2 at addr ffff88807c030e40 by task ksoftirqd/1/20
[  235.808018][    C1] 
[  235.810330][    C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0
[  235.817590][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  235.827624][    C1] Call Trace:
[  235.830885][    C1]  <TASK>
[  235.833802][    C1]  dump_stack_lvl+0x188/0x250
[  235.838478][    C1]  ? show_regs_print_info+0x20/0x20
[  235.843660][    C1]  ? _printk+0xda/0x130
[  235.847880][    C1]  ? __nft_trace_packet+0x135/0x150
[  235.853060][    C1]  ? load_image+0x410/0x410
[  235.857552][    C1]  print_address_description+0x60/0x2d0
[  235.863156][    C1]  ? __nft_trace_packet+0x135/0x150
[  235.868338][    C1]  kasan_report+0xdf/0x130
[  235.872739][    C1]  ? __nft_trace_packet+0x135/0x150
[  235.877925][    C1]  __nft_trace_packet+0x135/0x150
[  235.882943][    C1]  nft_do_chain+0x1299/0x14d0
[  235.887613][    C1]  ? nft_fwd_dup_netdev_offload+0x120/0x120
[  235.893484][    C1]  ? ip_vs_service_find+0xaaf/0xf70
[  235.898678][    C1]  ? nf_nat_inet_fn+0x8a0/0xad0
[  235.903511][    C1]  nft_do_chain_inet+0x25c/0x340
[  235.908432][    C1]  ? nft_do_chain_arp+0xf0/0xf0
[  235.913274][    C1]  ? nf_nat_ipv4_local_in+0x229/0x5d0
[  235.918626][    C1]  ? nft_do_chain_arp+0xf0/0xf0
[  235.923457][    C1]  nf_hook_slow+0xb9/0x200
[  235.927851][    C1]  ? NF_HOOK+0x390/0x390
[  235.932070][    C1]  NF_HOOK+0x1f2/0x390
[  235.936116][    C1]  ? NF_HOOK+0x390/0x390
[  235.940334][    C1]  ? ip_local_deliver+0x180/0x180
[  235.945334][    C1]  ? NF_HOOK+0x390/0x390
[  235.949556][    C1]  ? ip_local_deliver+0x107/0x180
[  235.954554][    C1]  ? ip_rcv_core+0xb30/0xb30
[  235.959122][    C1]  NF_HOOK+0x303/0x390
[  235.963165][    C1]  ? ip_rcv_core+0xb30/0xb30
[  235.967732][    C1]  ? ip_local_deliver+0x180/0x180
[  235.972749][    C1]  ? ip_rcv_core+0xb30/0xb30
[  235.977314][    C1]  ? ip_rcv_core+0x72c/0xb30
[  235.981883][    C1]  ? ip_local_deliver_finish+0x320/0x320
[  235.987491][    C1]  ? ip_local_deliver_finish+0x320/0x320
[  235.993102][    C1]  __netif_receive_skb+0xcc/0x290
[  235.998107][    C1]  process_backlog+0x366/0x770
[  236.002852][    C1]  ? rps_trigger_softirq+0x210/0x210
[  236.008112][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  236.014069][    C1]  ? lock_chain_count+0x20/0x20
[  236.018899][    C1]  __napi_poll+0xbb/0x430
[  236.023206][    C1]  net_rx_action+0x522/0xa80
[  236.027774][    C1]  ? net_tx_action+0x880/0x880
[  236.032512][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  236.038470][    C1]  ? lock_chain_count+0x20/0x20
[  236.043302][    C1]  handle_softirqs+0x336/0x830
[  236.048043][    C1]  ? run_ksoftirqd+0xa4/0x100
[  236.052695][    C1]  ? do_softirq+0x210/0x210
[  236.057173][    C1]  ? run_ksoftirqd+0x81/0x100
[  236.061825][    C1]  ? ksoftirqd_should_run+0x20/0x20
[  236.066999][    C1]  ? lockdep_hardirqs_off+0x70/0x100
[  236.072261][    C1]  ? ksoftirqd_should_run+0x20/0x20
[  236.077435][    C1]  run_ksoftirqd+0xa4/0x100
[  236.081913][    C1]  ? ksoftirqd_should_run+0x20/0x20
[  236.087086][    C1]  ? preempt_schedule_thunk+0x16/0x18
[  236.092438][    C1]  ? smpboot_thread_fn+0x5d9/0x990
[  236.097527][    C1]  smpboot_thread_fn+0x520/0x990
[  236.102446][    C1]  kthread+0x42e/0x520
[  236.106506][    C1]  ? cpu_report_death+0x180/0x180
[  236.111506][    C1]  ? kthread_blkcg+0xd0/0xd0
[  236.116073][    C1]  ret_from_fork+0x1f/0x30
[  236.120470][    C1]  </TASK>
[  236.123464][    C1] 
[  236.125763][    C1] Allocated by task 20:
[  236.129888][    C1]  __kasan_slab_alloc+0x92/0xc0
[  236.134715][    C1]  slab_post_alloc_hook+0x4c/0x380
[  236.139804][    C1]  kmem_cache_alloc_node+0x184/0x2c0
[  236.145061][    C1]  __alloc_skb+0xf4/0x750
[  236.149371][    C1]  synproxy_send_client_synack+0x16c/0xd90
[  236.155156][    C1]  nft_synproxy_eval_v4+0x378/0x520
[  236.160332][    C1]  nft_synproxy_do_eval+0x32e/0x550
[  236.165510][    C1]  nft_do_chain+0x491/0x14d0
[  236.170072][    C1]  nft_do_chain_inet+0x25c/0x340
[  236.175002][    C1]  nf_hook_slow+0xb9/0x200
[  236.179392][    C1]  NF_HOOK+0x1f2/0x390
[  236.183434][    C1]  NF_HOOK+0x303/0x390
[  236.187472][    C1]  __netif_receive_skb+0xcc/0x290
[  236.192472][    C1]  process_backlog+0x366/0x770
[  236.197209][    C1]  __napi_poll+0xbb/0x430
[  236.201508][    C1]  net_rx_action+0x522/0xa80
[  236.206071][    C1]  handle_softirqs+0x336/0x830
[  236.210807][    C1]  run_ksoftirqd+0xa4/0x100
[  236.215300][    C1]  smpboot_thread_fn+0x520/0x990
[  236.220225][    C1]  kthread+0x42e/0x520
[  236.224268][    C1]  ret_from_fork+0x1f/0x30
[  236.228658][    C1] 
[  236.230956][    C1] Freed by task 20:
[  236.234733][    C1]  kasan_set_track+0x4b/0x70
[  236.239293][    C1]  kasan_set_free_info+0x1f/0x40
[  236.244226][    C1]  ____kasan_slab_free+0xd5/0x110
[  236.249223][    C1]  slab_free_freelist_hook+0xec/0x170
[  236.254566][    C1]  kmem_cache_free+0x8f/0x210
[  236.259218][    C1]  nft_synproxy_eval_v4+0x380/0x520
[  236.264388][    C1]  nft_synproxy_do_eval+0x32e/0x550
[  236.269562][    C1]  nft_do_chain+0x491/0x14d0
[  236.274131][    C1]  nft_do_chain_inet+0x25c/0x340
[  236.279040][    C1]  nf_hook_slow+0xb9/0x200
[  236.283428][    C1]  NF_HOOK+0x1f2/0x390
[  236.287470][    C1]  NF_HOOK+0x303/0x390
[  236.291508][    C1]  __netif_receive_skb+0xcc/0x290
[  236.296505][    C1]  process_backlog+0x366/0x770
[  236.301247][    C1]  __napi_poll+0xbb/0x430
[  236.305550][    C1]  net_rx_action+0x522/0xa80
[  236.310114][    C1]  handle_softirqs+0x336/0x830
[  236.314849][    C1]  run_ksoftirqd+0xa4/0x100
[  236.319321][    C1]  smpboot_thread_fn+0x520/0x990
[  236.324248][    C1]  kthread+0x42e/0x520
[  236.328286][    C1]  ret_from_fork+0x1f/0x30
[  236.332682][    C1] 
[  236.334979][    C1] The buggy address belongs to the object at ffff88807c030dc0
[  236.334979][    C1]  which belongs to the cache skbuff_head_cache of size 232
[  236.349523][    C1] The buggy address is located 128 bytes inside of
[  236.349523][    C1]  232-byte region [ffff88807c030dc0, ffff88807c030ea8)
[  236.362766][    C1] The buggy address belongs to the page:
[  236.368394][    C1] page:ffffea0001f00c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c030
[  236.378515][    C1] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[  236.386036][    C1] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888144bf0140
[  236.394601][    C1] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000
[  236.403152][    C1] page dumped because: kasan: bad access detected
[  236.409554][    C1] page_owner tracks the page as allocated
[  236.415245][    C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 20, ts 235782459638, free_ts 233723046061
[  236.432661][    C1]  get_page_from_freelist+0x24f6/0x2670
[  236.438185][    C1]  __alloc_pages+0x1ee/0x480
[  236.442748][    C1]  new_slab+0xc0/0x4b0
[  236.446793][    C1]  ___slab_alloc+0x807/0xdd0
[  236.451354][    C1]  kmem_cache_alloc_node+0x118/0x2c0
[  236.456626][    C1]  __alloc_skb+0xf4/0x750
[  236.460933][    C1]  synproxy_send_client_synack+0x16c/0xd90
[  236.466711][    C1]  nft_synproxy_eval_v4+0x378/0x520
[  236.471888][    C1]  nft_synproxy_do_eval+0x32e/0x550
[  236.477057][    C1]  nft_do_chain+0x491/0x14d0
[  236.481620][    C1]  nft_do_chain_inet+0x25c/0x340
[  236.486530][    C1]  nf_hook_slow+0xb9/0x200
[  236.490924][    C1]  NF_HOOK+0x1f2/0x390
[  236.494966][    C1]  NF_HOOK+0x303/0x390
[  236.499009][    C1]  __netif_receive_skb+0xcc/0x290
[  236.504003][    C1]  process_backlog+0x366/0x770
[  236.508743][    C1] page last free stack trace:
[  236.513385][    C1]  free_unref_page_prepare+0x637/0x6c0
[  236.518817][    C1]  free_unref_page+0x8f/0x2a0
[  236.523463][    C1]  __unfreeze_partials+0x188/0x1e0
[  236.528545][    C1]  put_cpu_partial+0x12d/0x190
[  236.533286][    C1]  qlist_free_all+0x35/0x90
[  236.537760][    C1]  kasan_quarantine_reduce+0x150/0x160
[  236.543191][    C1]  __kasan_slab_alloc+0x2f/0xc0
[  236.548029][    C1]  slab_post_alloc_hook+0x4c/0x380
[  236.553131][    C1]  kmem_cache_alloc+0x15d/0x280
[  236.557951][    C1]  getname_flags+0xb7/0x4f0
[  236.562436][    C1]  __x64_sys_symlinkat+0x78/0xa0
[  236.567359][    C1]  do_syscall_64+0x4c/0xa0
[  236.571751][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  236.577620][    C1] 
[  236.579922][    C1] Memory state around the buggy address:
[  236.585526][    C1]  ffff88807c030d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc
[  236.593567][    C1]  ffff88807c030d80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[  236.601607][    C1] >ffff88807c030e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  236.609638][    C1]                                            ^
[  236.615761][    C1]  ffff88807c030e80: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc
[  236.623794][    C1]  ffff88807c030f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  236.631841][    C1] ==================================================================
[  236.639875][    C1] Disabling lock debugging due to kernel taint
[  236.646075][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  236.653247][    C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Tainted: G    B             syzkaller #0
[  236.661898][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  236.671931][    C1] Call Trace:
[  236.675205][    C1]  <TASK>
[  236.678131][    C1]  dump_stack_lvl+0x188/0x250
[  236.682792][    C1]  ? show_regs_print_info+0x20/0x20
[  236.687967][    C1]  ? load_image+0x410/0x410
[  236.692445][    C1]  panic+0x2f8/0x850
[  236.696325][    C1]  ? bpf_jit_dump+0xd0/0xd0
[  236.700802][    C1]  ? _raw_spin_unlock_irqrestore+0xbc/0x120
[  236.706686][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  236.712559][    C1]  ? _raw_spin_unlock+0x40/0x40
[  236.717385][    C1]  ? print_memory_metadata+0x314/0x400
[  236.722818][    C1]  ? __nft_trace_packet+0x135/0x150
[  236.727993][    C1]  check_panic_on_warn+0x80/0xa0
[  236.732906][    C1]  ? __nft_trace_packet+0x135/0x150
[  236.738079][    C1]  end_report+0x6d/0xf0
[  236.742212][    C1]  kasan_report+0x102/0x130
[  236.746695][    C1]  ? __nft_trace_packet+0x135/0x150
[  236.751888][    C1]  __nft_trace_packet+0x135/0x150
[  236.756891][    C1]  nft_do_chain+0x1299/0x14d0
[  236.761544][    C1]  ? nft_fwd_dup_netdev_offload+0x120/0x120
[  236.767416][    C1]  ? ip_vs_service_find+0xaaf/0xf70
[  236.772597][    C1]  ? nf_nat_inet_fn+0x8a0/0xad0
[  236.777433][    C1]  nft_do_chain_inet+0x25c/0x340
[  236.782351][    C1]  ? nft_do_chain_arp+0xf0/0xf0
[  236.787184][    C1]  ? nf_nat_ipv4_local_in+0x229/0x5d0
[  236.792534][    C1]  ? nft_do_chain_arp+0xf0/0xf0
[  236.797363][    C1]  nf_hook_slow+0xb9/0x200
[  236.801854][    C1]  ? NF_HOOK+0x390/0x390
[  236.806073][    C1]  NF_HOOK+0x1f2/0x390
[  236.810120][    C1]  ? NF_HOOK+0x390/0x390
[  236.814335][    C1]  ? ip_local_deliver+0x180/0x180
[  236.819337][    C1]  ? NF_HOOK+0x390/0x390
[  236.823566][    C1]  ? ip_local_deliver+0x107/0x180
[  236.828564][    C1]  ? ip_rcv_core+0xb30/0xb30
[  236.833125][    C1]  NF_HOOK+0x303/0x390
[  236.837165][    C1]  ? ip_rcv_core+0xb30/0xb30
[  236.841728][    C1]  ? ip_local_deliver+0x180/0x180
[  236.846723][    C1]  ? ip_rcv_core+0xb30/0xb30
[  236.851282][    C1]  ? ip_rcv_core+0x72c/0xb30
[  236.855843][    C1]  ? ip_local_deliver_finish+0x320/0x320
[  236.861449][    C1]  ? ip_local_deliver_finish+0x320/0x320
[  236.867057][    C1]  __netif_receive_skb+0xcc/0x290
[  236.872056][    C1]  process_backlog+0x366/0x770
[  236.876797][    C1]  ? rps_trigger_softirq+0x210/0x210
[  236.882053][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  236.888093][    C1]  ? lock_chain_count+0x20/0x20
[  236.892918][    C1]  __napi_poll+0xbb/0x430
[  236.897307][    C1]  net_rx_action+0x522/0xa80
[  236.901869][    C1]  ? net_tx_action+0x880/0x880
[  236.906603][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  236.912559][    C1]  ? lock_chain_count+0x20/0x20
[  236.917384][    C1]  handle_softirqs+0x336/0x830
[  236.922210][    C1]  ? run_ksoftirqd+0xa4/0x100
[  236.926884][    C1]  ? do_softirq+0x210/0x210
[  236.931358][    C1]  ? run_ksoftirqd+0x81/0x100
[  236.936020][    C1]  ? ksoftirqd_should_run+0x20/0x20
[  236.941194][    C1]  ? lockdep_hardirqs_off+0x70/0x100
[  236.946628][    C1]  ? ksoftirqd_should_run+0x20/0x20
[  236.952335][    C1]  run_ksoftirqd+0xa4/0x100
[  236.956832][    C1]  ? ksoftirqd_should_run+0x20/0x20
[  236.962004][    C1]  ? preempt_schedule_thunk+0x16/0x18
[  236.967352][    C1]  ? smpboot_thread_fn+0x5d9/0x990
[  236.972548][    C1]  smpboot_thread_fn+0x520/0x990
[  236.977463][    C1]  kthread+0x42e/0x520
[  236.981502][    C1]  ? cpu_report_death+0x180/0x180
[  236.986501][    C1]  ? kthread_blkcg+0xd0/0xd0
[  236.991066][    C1]  ret_from_fork+0x1f/0x30
[  236.995462][    C1]  </TASK>
[  236.998697][    C1] Kernel Offset: disabled
[  237.003018][    C1] Rebooting in 86400 seconds..