last executing test programs:

9m42.464839859s ago: executing program 0 (id=1960):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

9m41.560338528s ago: executing program 0 (id=1968):
r0 = socket$inet(0x2, 0x3, 0x1)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f00000000c0)=0xabb3, 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f00000004c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x40002)

9m41.445049953s ago: executing program 0 (id=1970):
set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6)
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f)

9m41.323164004s ago: executing program 0 (id=1973):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x38b1012, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0)

9m40.88172044s ago: executing program 0 (id=1974):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf2501000000140002007767310000000000000000000000000024000300a0"], 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000)

9m40.535137358s ago: executing program 0 (id=1980):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2)
ftruncate(r1, 0x1000006)
fcntl$addseals(r1, 0x409, 0x7)
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000140)={0x1, 0x2, [{r1, 0x0, 0x8000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x2000}]})

9m40.449941037s ago: executing program 32 (id=1980):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2)
ftruncate(r1, 0x1000006)
fcntl$addseals(r1, 0x409, 0x7)
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000140)={0x1, 0x2, [{r1, 0x0, 0x8000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x2000}]})

9m20.56463008s ago: executing program 3 (id=2258):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="df", 0x1}], 0x1}}], 0x1, 0x24088804)
sendto$inet6(r0, &(0x7f0000000100)="8c", 0x1, 0x81, &(0x7f0000000240)={0xa, 0x0, 0x0, @private0, 0x1}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x9, 0x4, 0x9}, 0x10)

9m20.034831352s ago: executing program 3 (id=2270):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="28000e00800000000802110000010802110000010802110000000000000000000000000064000000080026006c09000008000c006400000008000d"], 0x5c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c40)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @device_b}, @ext_ch_sw={0x4, 0x4, {{}, @void}}}}]}, 0x40}}, 0x0)

9m19.87344095s ago: executing program 3 (id=2274):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000180)=0x6, 0x2)

9m19.793636583s ago: executing program 3 (id=2276):
socket(0x10, 0x803, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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")
r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
write$cgroup_pid(r0, &(0x7f00000002c0), 0x12)

9m18.818148969s ago: executing program 3 (id=2278):
r0 = userfaultfd(0x80801)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000800000/0x1000)=nil, 0x1000})

9m18.473701843s ago: executing program 3 (id=2286):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x5, 0x7ffc0001}]})
r0 = epoll_create1(0x0)
epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x101)

9m18.249825098s ago: executing program 33 (id=2286):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x5, 0x7ffc0001}]})
r0 = epoll_create1(0x0)
epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x101)

5m35.345709278s ago: executing program 4 (id=4950):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
tgkill(r4, r4, 0x34)
ptrace(0x10, r4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x4)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5)
sendfile(r6, r5, 0x0, 0x8)
ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x4080)
r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0)

5m33.028458811s ago: executing program 4 (id=4959):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xfffffffffffffffd, {0x4, 0x1, 0x3, 0x8000009, 0x0, 0x80, {0x1, 0x80000000000, 0x1, 0xb, 0x3ff, 0xdbf, 0x10, 0x0, 0x80, 0x8000, 0x2, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x8, 0x801001a, 0x66d, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x90, 0x0, 0x4, {0x4, 0x3, 0x0, 0x7e34, 0xf, 0x2, {0x0, 0xfffffffffffffff7, 0x0, 0x1, 0x9, 0x1, 0x1, 0x68938043, 0x0, 0x2000, 0xf8}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00')

5m32.119258406s ago: executing program 4 (id=4984):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x3c, r1, 0x2799f5eec7981083, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0x80)

5m30.977077163s ago: executing program 4 (id=4986):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000180)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@errors_remount}, {@noinit_itable}, {@abort}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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")
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
waitid(0x1, r0, 0x0, 0x61000006, &(0x7f0000000340))
ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})

5m28.492324485s ago: executing program 4 (id=4992):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)

5m27.963369205s ago: executing program 4 (id=5002):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb88a845000014aaaa000001170000010203040506070800000c00020006002000080000000c0003000800170004"]}, 0x58}}, 0x4000000)

5m27.765011539s ago: executing program 34 (id=5002):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb88a845000014aaaa000001170000010203040506070800000c00020006002000080000000c0003000800170004"]}, 0x58}}, 0x4000000)

3m25.50894842s ago: executing program 5 (id=6457):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0xfffc, 0xfffc}, 0x8)

3m25.401907508s ago: executing program 5 (id=6459):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4001, 0x3, 0x460, 0x2e8, 0xb, 0x148, 0x0, 0x148, 0x3c8, 0x240, 0x240, 0x3c8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {0xff}, {}, 0x11}, 0x2e8, 0x288, 0x2e8, 0x0, {0xff0f000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'wlan1\x00', {0x58c5, 0xffff, 0x40, 0x3, 0x2, 0x9, 0x2, 0xf, 0x18}, {0x2}}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, 0x6, 0x3, [0x20, 0x2, 0x1e, 0xf, 0x2b, 0x1d, 0xe, 0x11, 0x3b, 0x36, 0x2b, 0xf, 0x5, 0x17, 0x3b, 0x17], 0x2, 0x7, 0x2}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x8fd67d86, 0xb, '\x00', {0xdf3f}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0)

3m25.332039499s ago: executing program 5 (id=6462):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x6, &(0x7f0000000300)=<r1=>0x0)
io_pgetevents(r1, 0x4, 0x4, &(0x7f0000000340)=[{}, {}, {}, {}], 0x0, 0x0)
r2 = eventfd2(0x0, 0x80800)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000080), 0x0}, 0x20)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r2}])

3m24.330200014s ago: executing program 5 (id=6476):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f00000000c0)={[{@nls={'nls', 0x3d, 'iso8859-4'}}, {@barrier}, {@part={'part', 0x3d, 0x1fb38dde}}, {@force}, {@umask={'umask', 0x3d, 0x8}}, {@nodecompose}, {@part={'part', 0x3d, 0x7}}, {@nobarrier}]}, 0xfe, 0x5e5, &(0x7f0000002900)="$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")
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)

3m24.191727791s ago: executing program 5 (id=6478):
r0 = socket(0x18, 0x0, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x7, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}})

3m23.952930394s ago: executing program 5 (id=6480):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4009}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x8084)

3m23.792456995s ago: executing program 35 (id=6480):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4009}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x8084)

849.391115ms ago: executing program 2 (id=8804):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000140)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x9ff, 0x63c, 0x1, 0x2, 0xd59f83, 0x19f2, 0x3f, 0x8, 0x3, 0x6, 0x2800, 0x2800, 0x2, 0xba2, 0x0, 0x2b, {0x8, 0xffffffff}, 0xd0, 0x9}})

747.456467ms ago: executing program 2 (id=8807):
r0 = socket$phonet(0x23, 0x2, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='veth0_to_bridge\x00', 0x10)
sendto$phonet(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x23, 0x26, 0x88, 0x6}, 0x10)

746.026818ms ago: executing program 6 (id=8809):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00')
getdents(r1, &(0x7f0000000f40)=""/243, 0xf3)

666.708655ms ago: executing program 2 (id=8810):
r0 = io_uring_setup(0x36c2, &(0x7f0000000100)={0x0, 0xb2d1, 0x1, 0x1, 0x383})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], &(0x7f0000000200)=[0xba], 0x1}, 0x20)

488.964964ms ago: executing program 6 (id=8812):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="880000001c000b07000000000000002502000000", @ANYRES32=r0, @ANYBLOB="8000200514000100fe88000000000000000000000000000108000f0001"], 0x88}}, 0x0)

441.325136ms ago: executing program 6 (id=8815):
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x1, @empty, 0x3}], 0x1c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_enter(0xffffffffffffffff, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x6]}, 0x8)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

370.484205ms ago: executing program 1 (id=8816):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x10)
connect$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x40, 0x1}, 0x1}}, 0x10)

370.30257ms ago: executing program 1 (id=8817):
r0 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
fchdir(r1)
mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x8)
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r4 = fanotify_init(0xf00, 0x0)
fanotify_mark(r4, 0x1, 0x5000003a, r3, 0x0)
r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
renameat2(r2, &(0x7f0000000040)='./file0\x00', r5, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
read$FUSE(r4, &(0x7f0000000f40)={0x2020}, 0x3c00)

323.800028ms ago: executing program 6 (id=8818):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x144, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in6=@local, @in6=@remote, 0x3, 0x4004, 0x4e24, 0x8001, 0x0, 0x80}, {@in6=@remote, 0x0, 0x32}, @in6=@loopback, {0x323, 0x80000001, 0x0, 0xc0, 0x4000, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x2}, {}, 0x70bd29, 0x3503, 0xa, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_dont_frag={0x4}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x200080d4)

235.063096ms ago: executing program 6 (id=8819):
r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2)
pread64(r0, &(0x7f00000002c0)=""/73, 0xffffffeb, 0x936)
ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0xb})

233.812122ms ago: executing program 1 (id=8820):
prlimit64(0x0, 0x7, &(0x7f0000000440)={0x4, 0x9b}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r0, 0x0, r0)

170.615221ms ago: executing program 2 (id=8821):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000200)=[{0x20, 0x7, 0x2, 0xfffff028}, {0x6, 0x0, 0xff, 0x5}]}, 0x10)

170.437083ms ago: executing program 1 (id=8822):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x400)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xfd}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df})

123.799622ms ago: executing program 2 (id=8823):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x6c92, 0x80, 0x0, 0x0, 0x4, 0xffffffffffffffff})

123.499996ms ago: executing program 6 (id=8824):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000080)=""/31)

54.954482ms ago: executing program 1 (id=8825):
r0 = fanotify_init(0x200, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e07022d0c"], 0xa)
r1 = timerfd_create(0x9, 0x0)
timerfd_settime(r1, 0x1, &(0x7f0000007000)={{0x77359400}, {0x0, 0x989680}}, 0x0)
io_uring_setup(0x5e0, &(0x7f0000000340)={0x0, 0xafd7, 0x0, 0x0, 0x2d2})
fanotify_mark(r0, 0x455, 0x8000053, 0xffffffffffffffff, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x40)

54.768163ms ago: executing program 2 (id=8826):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f00000002c0)=0x803, 0x4)
syz_emit_ethernet(0x9a, &(0x7f0000000200)={@link_local, @random=' u\b\x00', @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x8, [{@broadcast, 0x6a9d2469}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x2a5b}]}]}}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "fff522a45d565fd1bef2bde4487648f5ba27bbe6628c1000836849b5e92bda7c", "146a317637af5c94b1e2cab23b8908c4", {"1440048630554f6e84da74a7f80e383e", "2585ff3e812ec53f2f0d7d41bea87c5c"}}}}}}}, 0x0)
recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)

0s ago: executing program 1 (id=8827):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4)
bind$rds(r0, &(0x7f0000000100)={0x2, 0x4e29, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x1a000}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000)

kernel console output (not intermixed with test programs):

667462][T20972] hsr_slave_1: left promiscuous mode
[  621.819357][T20984] netlink: 'syz.2.6533': attribute type 1 has an invalid length.
[  621.825760][T20984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6533'.
[  621.884400][T20988] kAFS: unparsable volume name
[  622.145877][T21002] netlink: 'syz.1.6542': attribute type 2 has an invalid length.
[  622.330528][   T34] audit: type=1326 audit(1789580871.045:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21013 comm="syz.1.6549" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff13d59e159 code=0x0
[  622.716935][T21038] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6560'.
[  622.992869][T21050] kAFS: unable to lookup cell '.,'
[  623.311437][T17317] Bluetooth: hci1: command tx timeout
[  623.675276][T21082] loop6: detected capacity change from 0 to 16
[  623.752086][T21082] erofs (device loop6): mounted with root inode @ nid 36.
[  623.767981][T21082] erofs (device loop6): failed to decompress (lz4) corrupted compressed data @ pa 2904 size 16 => 808
[  623.816651][T21082] erofs (device loop6): failed to decompress (lz4) corrupted compressed data @ pa 2904 size 16 => 808
[  623.838512][T21082] erofs (device loop6): read error -117 @ 0 of nid 89
[  623.884949][   T34] audit: type=1800 audit(1789580872.605:1170): pid=21082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6582" name="file2" dev="loop6" ino=89 res=0 errno=0
[  624.199156][T21102] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  624.353960][ T1376] ieee802154 phy0 wpan0: encryption failed: -22
[  624.356452][ T1376] ieee802154 phy1 wpan1: encryption failed: -22
[  625.430304][T21139] tmpfs: Bad value for 'mpol'
[  625.545423][T21144] vcan0: tx address claim with dest, not broadcast
[  625.790063][T21155] xt_CT: No such helper "pptp"
[  626.042235][T21164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6619'.
[  626.092099][ T5060] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  626.253919][ T5060] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  626.259685][ T5060] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  626.267409][ T5060] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  626.278154][ T5060] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  626.291666][T21158] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  626.313343][ T5060] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  626.702634][ T5060] usb 7-1: USB disconnect, device number 2
[  626.936073][T21199] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1)
[  627.181526][T21211] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6641'.
[  627.188398][T21211] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6641'.
[  627.363903][T21215] loop6: detected capacity change from 0 to 8
[  627.418421][T21215] SQUASHFS error: zlib decompression failed, data probably corrupt
[  627.430443][T21215] SQUASHFS error: Failed to read block 0x9b: -5
[  627.438308][T21215] SQUASHFS error: Unable to read metadata cache entry [99]
[  627.446051][T21215] SQUASHFS error: Unable to read inode 0x127
[  627.802175][T20916] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  627.964612][T20916] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  627.975518][T20916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  627.979252][T20916] usb 7-1: Product: syz
[  627.982648][T20916] usb 7-1: Manufacturer: syz
[  627.986132][T20916] usb 7-1: SerialNumber: syz
[  628.560793][T20916] usb 7-1: config 0 descriptor??
[  628.804705][T20916] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  629.216833][T20916] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  629.223130][T20916] usb 7-1: USB disconnect, device number 3
[  629.494068][T21261] netlink: 180 bytes leftover after parsing attributes in process `syz.1.6665'.
[  629.644588][T11253] libceph: connect (1)[c::]:6789 error -101
[  629.649000][T11253] libceph: mon0 (1)[c::]:6789 connect error
[  629.662850][T21269] ceph: No mds server is up or the cluster is laggy
[  631.819382][T21350] trusted_key: syz.1.6699 sent an empty control message without MSG_MORE.
[  633.065499][T21423] loop6: detected capacity change from 0 to 2048
[  633.137040][T21423] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  633.163354][T21423] EXT4-fs (loop6): stripe (227) is not aligned with cluster size (16), stripe is disabled
[  633.171991][T21423] EXT4-fs error (device loop6): __ext4_remount:6852: comm syz.6.6730: Abort forced by user
[  633.177844][T21423] EXT4-fs (loop6): Remounting filesystem read-only
[  633.183198][T21423] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000.
[  633.213684][T20791] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  633.375678][T21439] jffs2: notice: (21439) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  633.845938][T21465] netlink: 'syz.6.6747': attribute type 1 has an invalid length.
[  633.970181][T21465] bond1: entered promiscuous mode
[  633.973900][T21465] 8021q: adding VLAN 0 to HW filter on device bond1
[  634.982686][T21469] 8021q: adding VLAN 0 to HW filter on device bond1
[  635.677635][T21469] bond1: (slave gre1): The slave device specified does not support setting the MAC address
[  635.692553][T21469] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode
[  635.717177][T21469] bond1: (slave gre1): making interface the new active one
[  635.726831][T21469] gre1: entered promiscuous mode
[  635.734108][T21469] bond1: (slave gre1): Enslaving as an active interface with an up link
[  636.005102][T21477] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6751'.
[  636.997577][T21504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6762'.
[  637.379450][T21501] loop6: detected capacity change from 0 to 40427
[  637.392688][T21501] F2FS-fs: heap/no_heap options were deprecated
[  637.407733][T21501] F2FS-fs (loop6): Invalid segment/section count (24 != 24 * 3)
[  637.424783][T21501] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  637.436905][T21501] F2FS-fs (loop6): Image doesn't support compression
[  637.448344][T21501] F2FS-fs (loop6): invalid crc value
[  637.543543][T21501] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  637.585064][T21501] F2FS-fs (loop6): f2fs_disable_checkpoint starts, unusable: 0
[  637.598513][T21501] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  637.606282][T21501] F2FS-fs (loop6): Start checkpoint disabled!
[  637.673177][T21501] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0
[  637.685044][T21501] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  637.691829][T21501] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  639.806119][T21547] fuse: fd is not a fuse device
[  640.403216][T21584] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1)
[  641.307585][T21637] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6821'.
[  641.940574][T21668] gretap1: entered allmulticast mode
[  641.951516][T21668] team0: Port device gretap1 added
[  641.964377][T21668] bridge0: port 1(team0) entered blocking state
[  641.990100][T21668] bridge0: port 1(team0) entered disabled state
[  641.992393][T21668] team0: entered allmulticast mode
[  642.012538][ T5060] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  642.059653][T21668] team0: left allmulticast mode
[  642.166820][ T5060] usb 7-1: New USB device found, idVendor=1608, idProduct=0001, bcdDevice= 0.00
[  642.174821][ T5060] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  642.184119][ T5060] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  642.196902][ T5060] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  642.211028][T21665] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  642.219927][T21665] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  642.238455][ T5060] io_edgeport 7-1:1.0: Edgeport 4 port adapter converter detected
[  642.262234][ T5060] usb 7-1:   detected
[  642.489606][ T5060] usb 7-1: Edgeport 4 port adapter converter now attached to ttyUSB0
[  642.588119][ T5060] usb 7-1: Edgeport 4 port adapter converter now attached to ttyUSB1
[  642.620604][ T5060] usb 7-1: Edgeport 4 port adapter converter now attached to ttyUSB2
[  642.680873][ T5060] usb 7-1: Edgeport 4 port adapter converter now attached to ttyUSB3
[  643.251355][T20916] usb 7-1: USB disconnect, device number 4
[  643.253386][    C0] usb 7-1: edge_interrupt_callback - Error -19 submitting control urb
[  643.341520][T20916] edgeport_4 ttyUSB0: Edgeport 4 port adapter converter now disconnected from ttyUSB0
[  643.411463][T20916] edgeport_4 ttyUSB1: Edgeport 4 port adapter converter now disconnected from ttyUSB1
[  643.449351][T20916] edgeport_4 ttyUSB2: Edgeport 4 port adapter converter now disconnected from ttyUSB2
[  643.481981][T20916] edgeport_4 ttyUSB3: Edgeport 4 port adapter converter now disconnected from ttyUSB3
[  643.500730][T20916] io_edgeport 7-1:1.0: device disconnected
[  644.491241][T21733] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6865'.
[  644.531904][T21735] loop6: detected capacity change from 0 to 1024
[  644.537560][T21735] EXT4-fs: Ignoring removed bh option
[  644.576836][T21735] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  644.599511][T21735] EXT4-fs (loop6): shut down requested (2)
[  644.630476][T20791] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  644.738069][T21745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6869'.
[  646.490144][T21770] tipc: Resetting bearer <eth:syzkaller0>
[  646.549077][T21772] CIFS: iocharset name too long
[  646.687149][T21778] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6883'.
[  646.893199][ T9368] tipc: Resetting bearer <eth:syzkaller0>
[  646.956230][T21792] input: syz1 as /devices/virtual/input/input14
[  647.096752][T21799] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  647.170258][T21804] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6896'.
[  647.179596][T21804] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6896'.
[  647.265103][T21808] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3)
[  647.267266][T21808] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  647.276418][T21808] vhci_hcd vhci_hcd.0: Device attached
[  647.287664][T21809] vhci_hcd: connection closed
[  647.291785][T17423] vhci_hcd vhci_hcd.6: stop threads
[  647.303261][T17423] vhci_hcd vhci_hcd.6: release socket
[  647.306797][T17423] vhci_hcd vhci_hcd.6: disconnect device
[  647.407972][   T34] audit: type=1326 audit(1789581664.815:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21815 comm="syz.1.6901" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff13d59e159 code=0x0
[  649.023510][T21834] loop6: detected capacity change from 0 to 128
[  649.054760][T21834] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  649.074331][T21834] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  649.123461][T20791] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  649.164745][T21838] fuse: fd is not a fuse device
[  649.381726][T21847] loop6: detected capacity change from 0 to 2048
[  649.411441][T21847] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  649.472771][T21847] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  649.487227][T21847] EXT4-fs: Remounting fs w/o journal so ignoring data_err option
[  649.493559][T21847] EXT4-fs (loop6): can't disable delalloc during remount
[  649.647943][T20791] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  650.255255][T20916] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  650.397672][T20916] usb 7-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00
[  650.405326][T20916] usb 7-1: config 1 has an invalid interface number: 27 but max is 1
[  650.408669][T20916] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  650.412859][T20916] usb 7-1: config 1 has 3 interfaces, different from the descriptor's value: 2
[  650.416978][T20916] usb 7-1: config 1 has no interface number 2
[  650.419894][T20916] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64
[  650.424953][T20916] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  650.430010][T20916] usb 7-1: config 1 interface 1 has no altsetting 0
[  650.436425][T20916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  650.439560][T20916] usb 7-1: Product: syz
[  650.441357][T20916] usb 7-1: Manufacturer: syz
[  650.445858][T20916] usb 7-1: SerialNumber: syz
[  650.865152][T21862] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  651.454615][    C0] ATM dev 0: usbatm_complete: urb 0xffff88811485ab00 failed (-71)!
[  651.457041][    C0] ATM dev 0: usbatm_complete: urb 0xffff88811485a500 failed (-71)!
[  651.459379][    C0] ATM dev 0: usbatm_complete: urb 0xffff88811485ae00 failed (-71)!
[  651.461698][    C0] ATM dev 0: usbatm_complete: urb 0xffff88811485a100 failed (-71)!
[  651.556658][    C0] ATM dev 0: usbatm_complete: urb 0xffff88811485ab00 failed (-71)!
[  651.559175][    C0] ATM dev 0: usbatm_complete: urb 0xffff88811485a500 failed (-71)!
[  651.561725][    C0] ATM dev 0: usbatm_complete: urb 0xffff88811485ae00 failed (-71)!
[  651.564153][    C0] ATM dev 0: usbatm_complete: urb 0xffff88811485a100 failed (-71)!
[  651.661247][    C0] ATM dev 0: usbatm_complete: urb 0xffff88811485ab00 failed (-71)!
[  652.185315][    C0] usbatm_complete: 19 callbacks suppressed
[  652.185332][    C0] ATM dev 0: usbatm_complete: urb 0xffff88811485ab00 failed (-71)!
[  652.190625][    C0] ATM dev 0: usbatm_complete: urb 0xffff88811485a500 failed (-71)!
[  652.193581][    C0] ATM dev 0: usbatm_complete: urb 0xffff88811485ae00 failed (-71)!
[  652.196236][    C0] ATM dev 0: usbatm_complete: urb 0xffff88811485a100 failed (-71)!
[  652.289901][    C0] ATM dev 0: usbatm_complete: urb 0xffff88811485ab00 failed (-71)!
[  652.292439][    C0] ATM dev 0: usbatm_complete: urb 0xffff88811485a500 failed (-71)!
[  652.294859][    C0] ATM dev 0: usbatm_complete: urb 0xffff88811485ae00 failed (-71)!
[  652.297313][    C0] ATM dev 0: usbatm_complete: urb 0xffff88811485a100 failed (-71)!
[  652.399934][    C0] ATM dev 0: usbatm_complete: urb 0xffff88811485ab00 failed (-71)!
[  652.402997][    C0] ATM dev 0: usbatm_complete: urb 0xffff88811485a500 failed (-71)!
[  652.547222][T20916] speedtch 7-1:1.27: speedtch_bind: failed to claim interface  0 (-16)!
[  652.568341][T20916] speedtch 7-1:1.27: usbatm_usb_probe: bind failed: -16!
[  652.582871][T20916] speedtch 7-1:1.27: probe with driver speedtch failed with error -16
[  652.637368][ T5704] ATM dev 0: error -71 fetching device status
[  652.651587][T20916] usb 7-1: USB disconnect, device number 5
[  653.115805][T21908] ffs_data_put(): freeing
[  653.137040][T20791] ffs_data_put(): freeing
[  655.378506][T21948] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6958'.
[  655.597664][T21963] xt_connbytes: Forcing CT accounting to be enabled
[  656.025807][T21985] loop6: detected capacity change from 0 to 512
[  656.040464][T21985] EXT4-fs: Ignoring removed oldalloc option
[  656.078636][T21985] EXT4-fs (loop6): 1 truncate cleaned up
[  656.096394][T21985] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  656.146303][T21994] netlink: 4884 bytes leftover after parsing attributes in process `syz.2.6977'.
[  656.153353][T21994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6977'.
[  656.244918][T20791] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  656.488625][T22013] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6986'.
[  656.593627][T22019] trusted_key: encrypted_key: insufficient parameters specified
[  657.062516][T22036] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.6997'.
[  657.254252][T22051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7004'.
[  657.651427][T22067] loop6: detected capacity change from 0 to 32768
[  657.663858][T22067] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.7012 (22067)
[  657.718080][T22067] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  657.731786][T22067] BTRFS info (device loop6): using crc32c checksum algorithm
[  657.833464][T22067] BTRFS info (device loop6): enabling ssd optimizations
[  657.841860][T22067] BTRFS info (device loop6): turning on flush-on-commit
[  657.858853][T22067] BTRFS info (device loop6): enabling free space tree
[  657.869981][T22067] BTRFS info (device loop6): enabling auto defrag
[  657.879350][T22067] BTRFS info (device loop6): use lzo compression, level 1
[  657.890265][T22067] BTRFS info (device loop6): max_inline set to 4096
[  657.993024][T20791] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  658.812821][   T34] kauditd_printk_skb: 11 callbacks suppressed
[  658.812832][   T34] audit: type=1326 audit(1789581676.783:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22122 comm="syz.2.7031" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420cd9e159 code=0x7ffc0000
[  658.873606][   T34] audit: type=1326 audit(1789581676.783:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22122 comm="syz.2.7031" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420cd9e159 code=0x7ffc0000
[  658.893739][   T34] audit: type=1326 audit(1789581676.814:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22122 comm="syz.2.7031" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f420cd5e98e code=0x7ffc0000
[  659.000326][   T34] audit: type=1326 audit(1789581676.814:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22122 comm="syz.2.7031" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420cd9e159 code=0x7ffc0000
[  659.036127][   T34] audit: type=1326 audit(1789581676.814:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22122 comm="syz.2.7031" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420cd9e159 code=0x7ffc0000
[  659.055809][   T34] audit: type=1326 audit(1789581676.825:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22122 comm="syz.2.7031" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f420cd5e98e code=0x7ffc0000
[  659.080423][   T34] audit: type=1326 audit(1789581676.825:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22122 comm="syz.2.7031" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f420cd5e98e code=0x7ffc0000
[  659.101702][   T34] audit: type=1326 audit(1789581677.035:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22122 comm="syz.2.7031" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420cd9e159 code=0x7ffc0000
[  659.127836][   T34] audit: type=1326 audit(1789581677.035:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22122 comm="syz.2.7031" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420cd9e159 code=0x7ffc0000
[  659.161151][   T34] audit: type=1326 audit(1789581677.035:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22122 comm="syz.2.7031" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f420cd5e98e code=0x7ffc0000
[  659.248810][T22130] xt_ecn: cannot match TCP bits for non-tcp packets
[  659.630633][T22140] 8021q: adding VLAN 0 to HW filter on device bond2
[  662.507947][T22209] IPv6: NLM_F_CREATE should be specified when creating new route
[  662.531732][T22211] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  662.564519][T22207] loop6: detected capacity change from 0 to 2048
[  662.661781][T22207] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  662.762173][T22218] openvswitch: netlink: IP tunnel TTL not specified.
[  662.954006][T20791] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  663.191367][T22228] loop6: detected capacity change from 0 to 512
[  663.213335][T22228] EXT4-fs (loop6): orphan cleanup on readonly fs
[  663.230129][T22228] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.7074: ea_inode with extended attributes
[  663.255902][T22228] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  663.263311][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  663.268152][    C0] EXT4-fs (loop6): initial error at time 1789581681: ext4_xattr_inode_iget:441: inode 11
[  663.271149][    C0] EXT4-fs (loop6): last error at time 1789581681: ext4_xattr_inode_iget:441: inode 11
[  663.320292][T22228] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.7074: error while reading EA inode 11 err=-117
[  663.339349][T22228] loop6: lost filesystem error report for type 5 error -117
[  663.339821][T22228] EXT4-fs (loop6): 1 orphan inode deleted
[  663.357715][T22228] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  663.465595][T20791] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  663.808408][T20916] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  663.960548][T20916] usb 7-1: Using ep0 maxpacket: 32
[  663.969045][T20916] usb 7-1: New USB device found, idVendor=04cb, idProduct=0121, bcdDevice=bc.b3
[  663.990449][T20916] usb 7-1: config 245 has an invalid interface number: 175 but max is 0
[  664.002795][T20916] usb 7-1: config 245 has no interface number 0
[  664.011726][T20916] usb 7-1: config 245 interface 175 has no altsetting 0
[  664.027679][T20916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  664.039162][T20916] usb 7-1: Product: syz
[  664.040449][T20916] usb 7-1: Manufacturer: syz
[  664.051200][T20916] usb 7-1: SerialNumber: syz
[  664.094986][T22264] fuse: fd is not a fuse device
[  664.262081][T22267] tipc: Resetting bearer <eth:syz_tun>
[  664.316281][T20916] gspca_main: finepix-2.14.0 probing 04cb:0121
[  664.472448][T22267] tipc: Resetting bearer <eth:syzkaller0>
[  664.480477][T20916] usb 7-1: USB disconnect, device number 6
[  664.487283][T22267] tipc: Resetting bearer <eth:syzkaller0>
[  665.700821][T22303] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7111'.
[  665.710912][T22291] loop6: detected capacity change from 0 to 32768
[  668.481137][T22330] lo speed is unknown, defaulting to 1000
[  669.442301][ T5704] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  670.303290][ T5704] usb 7-1: Using ep0 maxpacket: 16
[  670.307045][ T5704] usb 7-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00
[  670.315727][ T5704] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 160, changing to 11
[  670.376345][ T5704] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  670.391153][ T5704] usb 7-1: config 0 interface 0 has no altsetting 0
[  670.398806][ T5704] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  670.410148][ T5704] usb 7-1: config 0 descriptor??
[  671.059312][ T5704] wacom 0003:056A:0057.0007: hidraw0: USB HID v0.00 Joystick [HID 056a:0057] on usb-dummy_hcd.6-1/input0
[  672.422414][ T5704] usb 7-1: USB disconnect, device number 7
[  672.605611][T22347] overlayfs: failed to resolve './file0': -2
[  672.780226][T22357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7134'.
[  673.179652][ T5704] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  673.323144][ T5704] usb 7-1: Using ep0 maxpacket: 8
[  673.328996][ T5704] usb 7-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  673.340352][ T5704] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  673.349468][ T5704] usb 7-1: Product: syz
[  673.354070][ T5704] usb 7-1: Manufacturer: syz
[  673.356711][ T5704] usb 7-1: SerialNumber: syz
[  673.361953][ T5704] usb 7-1: config 0 descriptor??
[  673.372243][ T5704] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  673.377680][ T5704] pctv452e: pctv452e_power_ctrl: 1
[  673.377680][ T5704] 
[  673.382645][ T5704] usb 7-1: selecting invalid altsetting 3
[  673.386498][ T5704] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  673.386498][ T5704] 
[  673.396552][ T5704] dvb-usb: bulk message failed: -22 (5/0)
[  673.410225][ T5704] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  673.426022][ T5704] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600)
[  673.442014][ T5704] usb 7-1: media controller created
[  673.445755][ T5704] dvb-usb: bulk message failed: -22 (8/0)
[  673.461455][ T5704] pctv452e: I2C error -22; AA 01  A0 01 14 -> aa 01 31 04 a0 01 14
[  673.482142][ T5704] dvb-usb: MAC address reading failed.
[  673.569733][ T5704] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  673.726494][ T5704] DVB: Unable to find symbol stb0899_attach()
[  673.731384][ T5704] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[  673.818244][ T5704] rc_core: IR keymap rc-tt-1500 not found
[  673.824918][ T5704] Registered IR keymap rc-empty
[  673.835741][ T5704] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0
[  673.851281][ T5704] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input19
[  673.967656][ T5704] dvb-usb: schedule remote query interval to 100 msecs.
[  673.979424][ T5704] pctv452e: pctv452e_power_ctrl: 0
[  673.979424][ T5704] 
[  673.989804][ T5704] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[  674.008679][ T5704] usb 7-1: USB disconnect, device number 8
[  674.186514][T22396] netlink: 'syz.6.7151': attribute type 97 has an invalid length.
[  674.370766][ T5704] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[  675.164951][T22441] netlink: 'syz.1.7169': attribute type 32 has an invalid length.
[  676.158775][T20916] libceph: mon0 (1)127.0.0.1:1 socket error on write
[  676.214394][T20916] libceph: mon0 (1)127.0.0.1:1 socket error on write
[  676.469549][T20916] libceph: mon0 (1)127.0.0.1:1 socket error on write
[  676.612795][T22481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7186'.
[  676.619465][T22481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7186'.
[  676.698233][T22457] ceph: No mds server is up or the cluster is laggy
[  676.863162][T22493] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7192'.
[  676.938520][T22495] fuse: fd is not a fuse device
[  676.951236][T22495] overlayfs: failed to clone upperpath
[  676.965882][T22499] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7194'.
[  676.978411][T22499] netlink: 'syz.6.7194': attribute type 30 has an invalid length.
[  676.988504][T22499] netlink: 'syz.6.7194': attribute type 29 has an invalid length.
[  677.000900][T22499] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7194'.
[  677.025098][T22501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7196'.
[  678.476368][ T5704] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  678.618892][ T5704] usb 7-1: Using ep0 maxpacket: 8
[  678.621330][ T5704] usb 7-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[  678.625140][ T5704] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  678.631240][ T5704] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.634442][ T5704] usb 7-1: Product: syz
[  678.635932][ T5704] usb 7-1: Manufacturer: syz
[  678.637463][ T5704] usb 7-1: SerialNumber: syz
[  678.642622][ T5704] usb 7-1: config 0 descriptor??
[  678.646766][ T5704] gspca_main: stk014-2.14.0 probing 05e1:0893
[  678.650657][ T5704] usb 7-1: selecting invalid altsetting 1
[  679.060141][T20916] usb 7-1: USB disconnect, device number 9
[  679.064548][T22562] IPv6: sit4: Disabled Multicast RS
[  679.072159][T22562] sit4: entered allmulticast mode
[  679.135376][T22566] cgroup: noprefix used incorrectly
[  679.441035][T22582] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes
[  679.550008][T22587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7232'.
[  679.730077][T22595] loop6: detected capacity change from 0 to 512
[  679.735048][T22597] Cannot find del_set index 4 as target
[  679.741575][T22595] EXT4-fs (loop6): Test dummy encryption mode enabled
[  679.762169][T22595] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  679.814042][T22595] EXT4-fs (loop6): 1 truncate cleaned up
[  679.822269][T22595] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  679.844701][T22595] EXT4-fs error (device loop6): ext4_lookup:1785: inode #14: comm syz.6.7235: invalid fast symlink length 39
[  679.859999][T22595] EXT4-fs (loop6): Remounting filesystem read-only
[  679.907878][T20791] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  680.012125][T22612] loop6: detected capacity change from 0 to 512
[  680.025145][T22612] EXT4-fs: Ignoring removed nobh option
[  680.043523][T22612] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  680.079732][T22612] EXT4-fs (loop6): 1 truncate cleaned up
[  680.088975][T22612] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  680.134635][T20791] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  680.227036][T22623] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7248'.
[  680.585623][T22635] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  680.601848][T22635] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  680.795550][T22644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7258'.
[  680.965361][T22652] loop6: detected capacity change from 0 to 128
[  680.984576][T22652] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  681.016241][T22652] ext4 filesystem being mounted at /196/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  681.081717][T22652] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  681.529067][T22666] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7267'.
[  682.370356][T22673] loop6: detected capacity change from 0 to 32768
[  682.388891][T22673] OCFS2: ERROR (device loop6): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #20: OCFS2_VALID_FL not set
[  682.422590][T22673] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  682.440736][T22673] OCFS2: File system is now read-only.
[  682.447336][T22673] (syz.6.7269,22673,0):ocfs2_read_locked_inode:633 ERROR: status = -30
[  682.457227][T22673] (syz.6.7269,22673,0):_ocfs2_get_system_file_inode:141 ERROR: status = -30
[  682.470950][T22673] (syz.6.7269,22673,0):ocfs2_init_global_system_inodes:465 ERROR: status = -30
[  682.479440][T22673] (syz.6.7269,22673,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs?
[  682.479466][T22673] (syz.6.7269,22673,0):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[  682.489975][T22681] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1)
[  682.497945][T22673] (syz.6.7269,22673,0):ocfs2_initialize_super:2194 ERROR: status = -30
[  682.507995][T22673] (syz.6.7269,22673,0):ocfs2_fill_super:1177 ERROR: status = -30
[  682.930196][T22698] overlayfs: failed to clone upperpath
[  683.091422][T22706] jffs2: notice: (22706) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  683.199226][T22693] loop6: detected capacity change from 0 to 32768
[  683.225004][T22693] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  683.288953][T20791] ocfs2: Unmounting device (7,6) on (node local)
[  683.321985][ T1376] ieee802154 phy0 wpan0: encryption failed: -22
[  683.324761][ T1376] ieee802154 phy1 wpan1: encryption failed: -22
[  683.457742][T22725] loop6: detected capacity change from 0 to 256
[  685.338289][T22738] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7296'.
[  685.345387][T22738] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7296'.
[  685.369651][T22738] erspan0: entered promiscuous mode
[  685.394015][T22738] gretap0: entered promiscuous mode
[  685.411396][T22738] debugfs: 'hsr0' already exists in 'hsr'
[  685.423490][T22738] Cannot create hsr debugfs directory
[  688.261750][T22799] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7325'.
[  688.295571][T22799] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7325'.
[  688.397529][T22806] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7329'.
[  689.310307][T22840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7344'.
[  689.313305][T22840] netlink: 'syz.1.7344': attribute type 25 has an invalid length.
[  689.317511][T22840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7344'.
[  689.489152][ T5704] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  689.569898][T22850] netlink: Setting conntrack mark requires 'commit' flag.
[  689.577042][T22850] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  689.643440][ T5704] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  689.672085][ T5704] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  689.685319][ T5704] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253
[  689.703971][ T5704] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  689.716774][ T5704] usb 7-1: Product: syz
[  689.722889][ T5704] usb 7-1: Manufacturer: syz
[  689.728485][ T5704] usb 7-1: SerialNumber: syz
[  689.740951][ T5704] usb 7-1: config 0 descriptor??
[  689.763262][ T5704] gspca_main: sunplus-2.14.0 probing 055f:c630
[  690.206986][T22868] netlink: 112 bytes leftover after parsing attributes in process `syz.2.7358'.
[  690.212624][T22868] netlink: 112 bytes leftover after parsing attributes in process `syz.2.7358'.
[  691.336019][ T5704] gspca_sunplus: reg_r err -110
[  691.351513][ T5704] sunplus 7-1:0.0: probe with driver sunplus failed with error -110
[  691.600916][T22886] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7366'.
[  691.721855][T22890] netlink: 'syz.1.7368': attribute type 83 has an invalid length.
[  692.100017][T22903] fuse: fd is not a fuse device
[  692.215457][T22906] jffs2: notice: (22906) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  692.671605][ T5704] usb 7-1: USB disconnect, device number 10
[  692.844945][T22930] loop6: detected capacity change from 0 to 512
[  692.876173][T22930] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  692.881098][T22930] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  692.915600][T20791] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  694.439259][T22978] netlink: 'syz.6.7406': attribute type 5 has an invalid length.
[  694.524448][T22982] loop6: detected capacity change from 0 to 1764
[  694.970740][   T34] kauditd_printk_skb: 8 callbacks suppressed
[  694.970752][   T34] audit: type=1800 audit(1789581714.744:1191): pid=23005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.7418" name="(" dev="sda1" ino=1944 res=0 errno=0
[  695.114340][T23010] loop6: detected capacity change from 0 to 4096
[  695.161219][   T34] audit: type=1326 audit(1789581714.943:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23013 comm="syz.2.7423" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420cd9e159 code=0x7ffc0000
[  695.191070][   T34] audit: type=1326 audit(1789581714.943:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23013 comm="syz.2.7423" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420cd9e159 code=0x7ffc0000
[  695.206068][   T34] audit: type=1326 audit(1789581714.943:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23013 comm="syz.2.7423" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420cd9e159 code=0x7ffc0000
[  695.223195][   T34] audit: type=1326 audit(1789581714.954:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23013 comm="syz.2.7423" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420cd9e159 code=0x7ffc0000
[  695.254217][   T34] audit: type=1326 audit(1789581714.954:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23013 comm="syz.2.7423" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420cd9e159 code=0x7ffc0000
[  695.287089][   T34] audit: type=1326 audit(1789581714.954:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23013 comm="syz.2.7423" exe="/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f420cd9e159 code=0x7ffc0000
[  695.304899][   T34] audit: type=1326 audit(1789581714.954:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23013 comm="syz.2.7423" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420cd9e159 code=0x7ffc0000
[  695.320390][   T34] audit: type=1326 audit(1789581714.954:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23013 comm="syz.2.7423" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420cd9e159 code=0x7ffc0000
[  695.352494][   T34] audit: type=1326 audit(1789581714.954:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23013 comm="syz.2.7423" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420cd9e159 code=0x7ffc0000
[  695.463528][T23024] xt_TCPMSS: Only works on TCP SYN packets
[  697.181025][T23062] netlink: 'syz.2.7446': attribute type 14 has an invalid length.
[  698.089116][T20916] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  698.232829][T20916] usb 7-1: Using ep0 maxpacket: 16
[  698.235663][T20916] usb 7-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  698.240414][T20916] usb 7-1: config 8 has an invalid interface number: 223 but max is 0
[  698.244383][T20916] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  698.247910][T20916] usb 7-1: config 8 has no interface number 0
[  698.258602][T20916] usb 7-1: config 8 interface 223 altsetting 0 bulk endpoint 0xC has invalid maxpacket 32
[  698.275603][T20916] usb 7-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  698.300905][T20916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  698.304525][T20916] usb 7-1: Product: syz
[  698.312936][T20916] usb 7-1: Manufacturer: syz
[  698.318159][T20916] usb 7-1: SerialNumber: syz
[  698.351632][T23097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7460'.
[  698.356879][T23084] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  698.373723][T23097] 8021q: VLANs not supported on ip6_vti0
[  698.608063][T20916] usb 7-1: USB disconnect, device number 11
[  698.735367][T23102] IPVS: set_ctl: invalid protocol: 576 0.32.0.0:8192
[  698.774417][T23104] netlink: 'syz.2.7464': attribute type 1 has an invalid length.
[  698.831509][T23104] bond3: entered promiscuous mode
[  698.839246][T23104] 8021q: adding VLAN 0 to HW filter on device bond3
[  698.861739][T23104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7464'.
[  698.884853][T23104] 8021q: adding VLAN 0 to HW filter on device bond3
[  698.890913][T23104] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address
[  698.902262][T23104] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  698.917025][T23104] bond3: (slave wireguard0): making interface the new active one
[  698.924865][T23104] wireguard0: entered promiscuous mode
[  698.934816][T23104] bond3: (slave wireguard0): Enslaving as an active interface with an up link
[  699.183959][T23126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7473'.
[  700.331946][T23179] loop6: detected capacity change from 0 to 1764
[  700.339678][T23179] iso9660: Unexpected value for 'showassoc'
[  700.363166][T23179] smb3: Unknown parameter 'overriderockperm'
[  700.416541][T23181] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7499'.
[  700.645685][T23188] loop6: detected capacity change from 0 to 32768
[  700.655101][T23188] syz.6.7501: attempt to access beyond end of device
[  700.655101][T23188] loop6: rw=8388608, sector=17179869440, nr_sectors = 8 limit=32768
[  700.675924][T23188] Read error 10 at 0x0
[  700.679565][T23188] read_mapping_page failed!
[  700.684241][T23188] jfs_mount: diMount failed w/rc = -5
[  700.688835][T23188] Mount JFS Failure: -5
[  700.692803][T23188] jfs_mount failed w/return code = -5
[  701.064895][T23206] netlink: 'syz.6.7510': attribute type 11 has an invalid length.
[  701.164199][T23212] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  701.516452][T23230] overlayfs: failed to clone lowerpath
[  701.842185][ T5704] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  701.991063][ T5704] usb 7-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=9d.fb
[  702.003287][ T5704] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  702.009053][ T5704] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  702.013323][ T5704] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  702.022635][ T5704] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  702.030165][ T5704] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  702.034705][ T5704] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  702.040117][ T5704] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  702.049444][ T5704] usb 7-1: config 0 descriptor??
[  702.062359][ T5704] appledisplay 7-1:0.0: Submitting URB failed
[  702.068528][ T5704] appledisplay 7-1:0.0: probe with driver appledisplay failed with error -5
[  702.260163][ T5704] usb 7-1: USB disconnect, device number 12
[  702.358108][T23253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7533'.
[  702.361203][T23253] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  702.838328][T23283] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7547'.
[  703.191428][T23303] loop6: detected capacity change from 0 to 512
[  703.216376][T23303] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  703.224284][T23303] System zones: 0-2, 18-18, 34-34
[  703.228465][T23303] EXT4-fs (loop6): too many log groups per flexible block group
[  703.236637][T23303] EXT4-fs (loop6): failed to initialize mballoc (-12)
[  703.238954][T23303] EXT4-fs (loop6): mount failed
[  704.114685][T23307] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  704.147948][T23309] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  704.153793][T23308] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  706.472125][ T5060] usb 7-1: new low-speed USB device number 13 using dummy_hcd
[  706.583864][T23422] overlayfs: failed to clone upperpath
[  706.625108][ T5060] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  706.636918][ T5060] usb 7-1: config 0 has no interfaces?
[  706.642195][ T5060] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  706.664367][ T5060] usb 7-1: config 0 descriptor??
[  706.866061][ T5060] usb 7-1: USB disconnect, device number 13
[  707.290035][T23423] syz.1.7611 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  707.298753][T23423] CPU: 0 UID: 0 PID: 23423 Comm: syz.1.7611 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  707.298768][T23423] Tainted: [L]=SOFTLOCKUP
[  707.298771][T23423] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  707.298777][T23423] Call Trace:
[  707.298781][T23423]  <TASK>
[  707.298786][T23423]  dump_stack_lvl+0xe8/0x150
[  707.298803][T23423]  dump_header+0xd3/0x4b0
[  707.298815][T23423]  oom_kill_process+0x3ab/0x970
[  707.298828][T23423]  out_of_memory+0x1064/0x1480
[  707.298836][T23423]  ? try_charge_memcg+0xbce/0x1590
[  707.298855][T23423]  ? __pfx_out_of_memory+0x10/0x10
[  707.298862][T23423]  ? do_raw_spin_unlock+0x4d/0x200
[  707.298876][T23423]  try_charge_memcg+0xc78/0x1590
[  707.298893][T23423]  ? __pfx_try_charge_memcg+0x10/0x10
[  707.298903][T23423]  ? percpu_ref_tryget+0x15/0x180
[  707.298918][T23423]  ? charge_memcg+0x20/0x2b0
[  707.298930][T23423]  charge_memcg+0x19c/0x2b0
[  707.298941][T23423]  ? mem_cgroup_swapin_charge_folio+0x2b/0x390
[  707.298952][T23423]  mem_cgroup_swapin_charge_folio+0x25a/0x390
[  707.298964][T23423]  swap_cache_alloc_folio+0x4de/0x990
[  707.298980][T23423]  swap_cache_read_folio+0x44/0x120
[  707.298990][T23423]  swap_cluster_readahead+0x3a0/0x640
[  707.299002][T23423]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  707.299015][T23423]  ? rcu_is_watching+0x16/0xb0
[  707.299023][T23423]  ? get_vma_policy+0x27b/0x3c0
[  707.299036][T23423]  swapin_readahead+0x19a/0xc10
[  707.299047][T23423]  ? swap_table_get+0x1e/0x260
[  707.299055][T23423]  ? swap_table_get+0x1e/0x260
[  707.299064][T23423]  ? __pfx_swapin_readahead+0x10/0x10
[  707.299074][T23423]  ? swap_table_get+0x1e/0x260
[  707.299081][T23423]  ? swap_table_get+0x1e/0x260
[  707.299089][T23423]  ? swap_table_get+0x1e/0x260
[  707.299097][T23423]  ? swap_table_get+0x216/0x260
[  707.299106][T23423]  ? swap_cache_get_folio+0x2e7/0x2f0
[  707.299117][T23423]  do_swap_page+0x455/0x5060
[  707.299130][T23423]  ? __pte_offset_map+0x29/0x240
[  707.299142][T23423]  ? __lock_acquire+0x683/0x2cf0
[  707.299153][T23423]  ? do_swap_page+0x124/0x5060
[  707.299161][T23423]  ? __pfx_do_swap_page+0x10/0x10
[  707.299169][T23423]  ? __pte_offset_map+0x1ae/0x240
[  707.299179][T23423]  ? pte_offset_map_rw_nolock+0xea/0x160
[  707.299189][T23423]  handle_mm_fault+0x124c/0x3080
[  707.299203][T23423]  ? handle_mm_fault+0xec/0x3080
[  707.299215][T23423]  ? __pfx_handle_mm_fault+0x10/0x10
[  707.299223][T23423]  ? lock_vma_under_rcu+0x45a/0x500
[  707.299243][T23423]  do_user_addr_fault+0xa4f/0x1340
[  707.299259][T23423]  ? trace_page_fault_user+0x84/0x1e0
[  707.299271][T23423]  exc_page_fault+0x6a/0xc0
[  707.299282][T23423]  asm_exc_page_fault+0x26/0x30
[  707.299291][T23423] RIP: 0033:0x7ff13d5592b8
[  707.299300][T23423] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00
[  707.299306][T23423] RSP: 002b:00007ffc73d1c890 EFLAGS: 00010246
[  707.299315][T23423] RAX: 0000000000000000 RBX: 000055557ee94500 RCX: 00007ff13d55e98e
[  707.299320][T23423] RDX: 00007ffc73d1c8e0 RSI: 0000000000000000 RDI: 0000000000000000
[  707.299325][T23423] RBP: 00007ff13d827da0 R08: 0000000000000000 R09: 0000000000000000
[  707.299329][T23423] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000ad939
[  707.299334][T23423] R13: 00007ff13d825fac R14: 00000000000ad62b R15: 00007ffc73d1ca10
[  707.299346][T23423]  </TASK>
[  707.299350][T23423] memory: usage 307200kB, limit 307200kB, failcnt 3088
[  708.781313][T23423] memory+swap: usage 307844kB, limit 9007199254740988kB, failcnt 0
[  709.769248][T23423] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0
[  709.940395][T23423] Memory cgroup stats for /syz1:
[  709.940841][T23423] cache 0
[  709.975701][T23423] rss 0
[  709.992981][T23423] rss_huge 0
[  709.994389][T23423] shmem 0
[  710.008007][T23423] mapped_file 0
[  710.015336][T23423] dirty 0
[  710.016360][T23423] writeback 0
[  710.023075][T23438] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  710.028780][T23423] workingset_refault_anon 88
[  710.040344][T23423] workingset_refault_file 512
[  710.054068][T23423] swap 659456
[  710.061234][T23423] swapcached 13631488
[  710.062476][T23423] pgpgin 999673
[  710.090474][T23423] pgpgout 1000181
[  710.110706][T23423] pgfault 958580
[  710.111910][T23423] pgmajfault 64
[  710.117785][T23423] inactive_anon 8192
[  710.118998][T23423] active_anon 4096
[  710.135368][T23423] inactive_file 0
[  710.147949][T23423] active_file 0
[  710.149321][T23423] unevictable 0
[  710.164413][T23423] hierarchical_memory_limit 314572800
[  710.172817][T23423] hierarchical_memsw_limit 9223372036854771712
[  710.189092][T23423] total_cache 0
[  710.190503][T23423] total_rss 0
[  710.204512][T23423] total_rss_huge 0
[  710.217375][T23423] total_shmem 0
[  710.223448][T23423] total_mapped_file 0
[  710.241095][T23423] total_dirty 0
[  710.242363][T23423] total_writeback 0
[  710.267648][T23423] total_workingset_refault_anon 88
[  710.285510][T23423] total_workingset_refault_file 512
[  710.292715][T23423] total_swap 659456
[  710.294035][T23423] total_swapcached 13631488
[  710.303776][T23423] total_pgpgin 999673
[  710.305060][T23423] total_pgpgout 1000181
[  710.316794][T23423] total_pgfault 958580
[  710.318084][T23423] total_pgmajfault 64
[  710.326059][T23423] total_inactive_anon 8192
[  710.327458][T23423] total_active_anon 4096
[  710.355994][T23423] total_inactive_file 0
[  710.357358][T23423] total_active_file 0
[  710.371432][T23423] total_unevictable 0
[  710.372712][T23423] anon_cost 0
[  710.387476][T23423] file_cost 0
[  710.388596][T23423] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.731,pid=7485,uid=0
[  710.426254][T23423] Memory cgroup out of memory: Killed process 7485 (syz.1.731) total-vm:104300kB, anon-rss:1256kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000
[  710.830235][T23460] loop6: detected capacity change from 0 to 2048
[  710.835299][T23460] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  711.989608][T23488] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7639'.
[  712.697335][T23497] netlink: zone id is out of range
[  712.704039][T23497] netlink: zone id is out of range
[  712.711768][T23497] netlink: zone id is out of range
[  712.718940][T23497] netlink: zone id is out of range
[  712.724305][T23497] netlink: zone id is out of range
[  712.740333][T23497] netlink: zone id is out of range
[  712.753380][T23497] netlink: zone id is out of range
[  712.761655][T23497] netlink: zone id is out of range
[  712.766778][T23497] netlink: zone id is out of range
[  712.954385][T23501] loop6: detected capacity change from 0 to 4096
[  712.962453][T23503] process '/newroot/2821/file0' started with executable stack
[  713.032776][T23501] ntfs3(loop6): ino=19, mi_enum_attr
[  713.044550][T23501] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  713.097552][T23501] ntfs3(loop6): ino=5, "/" fiemap is not supported for compressed file
[  713.493606][ T5060] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  713.636179][ T5060] usb 7-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[  713.646682][ T5060] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  713.657061][ T5060] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  713.667089][ T5060] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  713.676758][ T5060] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  713.687804][ T5060] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  713.720001][T23517] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  713.733574][T23517] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  713.747867][ T5060] pl2303 7-1:1.0: pl2303 converter detected
[  713.854193][ T5060] pl2303 7-1:1.0: pl2303_vendor_read - failed to read [8484]: -110
[  713.858179][ T5060] pl2303 7-1:1.0: pl2303_vendor_write - failed to write [0404]: -32
[  713.864428][ T5060] pl2303 7-1:1.0: pl2303_vendor_read - failed to read [8484]: -32
[  713.870296][ T5060] pl2303 7-1:1.0: pl2303_vendor_read - failed to read [8383]: -32
[  713.880301][ T5060] pl2303 7-1:1.0: pl2303_vendor_read - failed to read [8484]: -32
[  713.886894][ T5060] pl2303 7-1:1.0: pl2303_vendor_write - failed to write [0404]: -32
[  713.892898][ T5060] pl2303 7-1:1.0: pl2303_vendor_read - failed to read [8484]: -32
[  713.898737][ T5060] pl2303 7-1:1.0: pl2303_vendor_read - failed to read [8383]: -32
[  713.905029][ T5060] pl2303 7-1:1.0: pl2303_vendor_write - failed to write [0000]: -32
[  713.913533][ T5060] pl2303 7-1:1.0: pl2303_vendor_write - failed to write [0001]: -32
[  713.918925][ T5060] pl2303 7-1:1.0: pl2303_vendor_write - failed to write [0002]: -32
[  713.937109][ T5060] usb 7-1: pl2303 converter now attached to ttyUSB0
[  713.976237][ T5060] usb 7-1: USB disconnect, device number 14
[  713.998711][ T5060] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  714.012805][ T5060] pl2303 7-1:1.0: device disconnected
[  714.203831][T23547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7666'.
[  714.704175][T23566] program syz.6.7674 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  715.096810][T23580] loop6: detected capacity change from 0 to 512
[  715.276382][T23580] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  715.299186][T23580] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[  715.312414][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  715.314459][    C0] EXT4-fs (loop6): initial error at time 1789581736: ext4_mb_generate_buddy:1317
[  715.317237][    C0] EXT4-fs (loop6): last error at time 1789581736: ext4_mb_generate_buddy:1317
[  715.385006][T23580] EXT4-fs (loop6): 1 truncate cleaned up
[  715.410194][T23580] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  715.732886][T20791] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  716.057354][T23597] bridge0: port 2(bridge_slave_1) entered disabled state
[  716.060368][T23597] bridge0: port 1(bridge_slave_0) entered disabled state
[  716.360264][T23611] xt_TPROXY: Can be used only with -p tcp or -p udp
[  716.454868][T23611] loop6: detected capacity change from 0 to 512
[  716.462248][T23611] EXT4-fs: Ignoring removed oldalloc option
[  716.504495][T23611] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (53686!=18645)
[  716.546658][T23611] EXT4-fs (loop6): group descriptors corrupted!
[  717.763068][T23661] bridge3: entered promiscuous mode
[  717.769866][T23661] bridge3: entered allmulticast mode
[  717.877206][T23666] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7719'.
[  718.112101][ T5060] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  718.149954][T23684] net_ratelimit: 11 callbacks suppressed
[  718.149972][T23684] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1)
[  718.271225][ T5060] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  718.283388][ T5060] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  718.295585][ T5060] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  718.331345][ T5060] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  718.344071][ T5060] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  718.347473][ T5060] usb 7-1: Product: syz
[  718.349087][ T5060] usb 7-1: Manufacturer: syz
[  718.353676][ T5060] usb 7-1: SerialNumber: syz
[  718.362460][ T5060] usb 7-1: config 0 descriptor??
[  718.373483][T23669] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  718.375947][T23669] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  718.390845][ T5060] usb 7-1: ucan: probing device on interface #0
[  719.360659][ T5060] usb 7-1: ucan: could not read protocol version, ret=-110
[  719.367937][ T5060] usb 7-1: ucan: probe failed; try to update the device firmware
[  719.481916][T23693] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7731'.
[  719.488956][T23693] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7731'.
[  720.784518][ T5704] usb 7-1: USB disconnect, device number 15
[  724.640069][   T34] kauditd_printk_skb: 154 callbacks suppressed
[  724.640079][   T34] audit: type=1326 audit(1789581745.891:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23794 comm="syz.6.7778" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25b59e159 code=0x7ffc0000
[  724.681761][   T34] audit: type=1326 audit(1789581745.912:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23794 comm="syz.6.7778" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25b59e159 code=0x7ffc0000
[  724.721915][   T34] audit: type=1326 audit(1789581745.912:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23794 comm="syz.6.7778" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25b59e159 code=0x7ffc0000
[  724.769009][   T34] audit: type=1326 audit(1789581745.912:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23794 comm="syz.6.7778" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25b59e159 code=0x7ffc0000
[  724.902331][   T34] audit: type=1326 audit(1789581745.912:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23794 comm="syz.6.7778" exe="/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff25b59e159 code=0x7ffc0000
[  725.904731][   T34] audit: type=1326 audit(1789581745.912:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23794 comm="syz.6.7778" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25b59e159 code=0x7ffc0000
[  726.869223][   T34] audit: type=1326 audit(1789581745.912:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23794 comm="syz.6.7778" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25b59e159 code=0x7ffc0000
[  727.188839][   T34] audit: type=1326 audit(1789581745.923:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23794 comm="syz.6.7778" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25b59e159 code=0x7ffc0000
[  727.233314][   T34] audit: type=1326 audit(1789581745.923:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23794 comm="syz.6.7778" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25b59e159 code=0x7ffc0000
[  727.283477][   T34] audit: type=1326 audit(1789581745.923:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23794 comm="syz.6.7778" exe="/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7ff25b59e159 code=0x7ffc0000
[  729.813547][T23845] xt_recent: Unsupported userspace flags (000000c5)
[  734.150609][T23927] overlayfs: failed to clone upperpath
[  734.677906][ T5704] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  734.835194][ T5704] usb 7-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98
[  734.847020][ T5704] usb 7-1: New USB device strings: Mfr=0, Product=229, SerialNumber=0
[  734.857061][ T5704] usb 7-1: Product: syz
[  734.870406][ T5704] usb 7-1: config 0 descriptor??
[  734.888091][ T5704] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected
[  734.904937][ T5704] ftdi_sio ttyUSB0: unknown device type: 0xc698
[  735.099089][ T5704] usb 7-1: USB disconnect, device number 16
[  735.107073][ T5704] ftdi_sio 7-1:0.0: device disconnected
[  735.735193][T23981] netlink: 'syz.1.7857': attribute type 21 has an invalid length.
[  735.746203][T23981] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7857'.
[  735.760681][T23981] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7857'.
[  736.239282][T23995] overlayfs: failed to clone upperpath
[  736.684478][T24009] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7866'.
[  736.851353][T24016] nvmet_tcp: enabling port 1 (127.0.0.1:4420)
[  736.861373][T24018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7871'.
[  736.867040][T24018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7871'.
[  737.206333][T24030] ip_tables: iptables: counters copy to user failed while replacing table
[  737.612337][ T5704] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  737.765535][ T5704] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  737.784131][ T5704] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  737.797479][T24048] netlink: 'syz.1.7886': attribute type 10 has an invalid length.
[  737.800887][ T5704] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[  737.815766][ T5704] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  737.828001][ T5704] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  737.860032][T24050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7887'.
[  737.877124][T24050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7887'.
[  737.906270][T24050] netlink: 'syz.2.7887': attribute type 6 has an invalid length.
[  737.971954][T24050] vxlan0: entered promiscuous mode
[  737.985803][T24052] fuse: fd is not a fuse device
[  738.007266][T24050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7887'.
[  738.018775][T24050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7887'.
[  738.023098][T17423] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  738.028275][T17423] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  738.032141][T24050] netlink: 'syz.2.7887': attribute type 6 has an invalid length.
[  738.034954][T17423] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  738.059070][T17423] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  738.335524][ T5704] cxacru_cm: 5 callbacks suppressed
[  738.335547][ T5704] cxacru 7-1:1.0: send of cm 0x91 failed (-71)
[  738.357582][ T5704] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71
[  738.368446][ T5704] ATM dev 0: usbatm_atm_init: atm_start failed: -71!
[  738.379366][ T5704] cxacru 7-1:1.0: probe with driver cxacru failed with error -71
[  738.409420][ T5704] usb 7-1: USB disconnect, device number 17
[  738.559440][T24067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7894'.
[  739.628884][T24081] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  739.736426][T24081] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  739.921811][T24082] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  740.334394][T24106] input: syz1 as /devices/virtual/input/input20
[  740.532818][T24113] loop6: detected capacity change from 0 to 512
[  740.568350][T24113] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  740.592144][T24113] ext4 filesystem being mounted at /353/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  740.615112][   T34] audit: type=1800 audit(1789581762.667:1370): pid=24113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.7916" name="file1" dev="loop6" ino=15 res=0 errno=0
[  740.668048][T20791] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  741.214414][ T5060] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  741.286590][T24144] netlink: 'syz.1.7928': attribute type 1 has an invalid length.
[  741.354578][ T5060] usb 7-1: Using ep0 maxpacket: 16
[  741.359054][ T5060] usb 7-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  741.370101][ T5060] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  741.378125][ T5060] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  741.386842][ T5060] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  741.397277][ T5060] usb 7-1: config 0 descriptor??
[  741.458359][T24152] bridge_slave_1: invalid flags given to default FDB implementation
[  741.768016][T24160] __nla_validate_parse: 3 callbacks suppressed
[  741.768035][T24160] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7936'.
[  741.808081][ T5060] petalynx 0003:18B1:0037.0008: unknown main item tag 0x7
[  741.813171][ T5060] petalynx 0003:18B1:0037.0008: unknown main item tag 0x0
[  741.817291][ T5060] petalynx 0003:18B1:0037.0008: unknown main item tag 0x0
[  741.824806][ T5060] petalynx 0003:18B1:0037.0008: unknown main item tag 0x0
[  741.829062][ T5060] petalynx 0003:18B1:0037.0008: unknown main item tag 0x0
[  741.832025][ T5060] petalynx 0003:18B1:0037.0008: unknown main item tag 0x6
[  741.834329][ T5060] petalynx 0003:18B1:0037.0008: global environment stack underflow
[  741.836827][ T5060] petalynx 0003:18B1:0037.0008: item 0 0 1 11 parsing failed
[  741.839470][ T5060] petalynx 0003:18B1:0037.0008: parse failed
[  741.846693][ T1376] ieee802154 phy0 wpan0: encryption failed: -22
[  741.848693][ T1376] ieee802154 phy1 wpan1: encryption failed: -22
[  741.860732][ T5060] petalynx 0003:18B1:0037.0008: probe with driver petalynx failed with error -22
[  741.995297][ T5060] usb 7-1: USB disconnect, device number 18
[  742.325318][T24172] netlink: 'syz.2.7942': attribute type 3 has an invalid length.
[  743.478832][T24216] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7961'.
[  743.860886][T24230] loop6: detected capacity change from 0 to 164
[  744.307356][ T5704] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  744.450399][ T5704] usb 7-1: Using ep0 maxpacket: 32
[  744.453824][ T5704] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  744.458825][ T5704] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[  744.462951][ T5704] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  744.467032][ T5704] usb 7-1: config 0 has no interface number 0
[  744.473894][ T5704] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  744.477818][ T5704] usb 7-1: Product: syz
[  744.481371][ T5704] usb 7-1: Manufacturer: syz
[  744.483397][ T5704] usb 7-1: SerialNumber: syz
[  744.487223][ T5704] usb 7-1: config 0 descriptor??
[  744.501716][ T5704] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  744.505662][ T5704] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -22
[  744.625387][T24245] netlink: 400 bytes leftover after parsing attributes in process `syz.2.7974'.
[  744.629082][T24245] netlink: 400 bytes leftover after parsing attributes in process `syz.2.7974'.
[  744.703699][ T5704] usb 7-1: USB disconnect, device number 19
[  745.687921][T24282] futex_wake_op: syz.2.7991 tries to shift op by 36; fix this program
[  745.902316][T24288] jffs2: notice: (24288) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  746.335276][T24320] loop6: detected capacity change from 0 to 16
[  746.512449][T24331] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8013'.
[  746.515295][T24331] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8013'.
[  746.603130][ T5060] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  746.756821][ T5060] usb 7-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  746.762659][ T5060] usb 7-1: config 0 has an invalid interface number: 5 but max is 0
[  746.766985][ T5060] usb 7-1: config 0 has no interface number 0
[  746.769553][ T5060] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  746.780362][ T5060] usb 7-1: config 0 descriptor??
[  746.791730][ T5060] ums-realtek 7-1:0.5: USB Mass Storage device detected
[  746.914314][T24339] raw_sendmsg: syz.1.8016 forgot to set AF_INET. Fix it!
[  746.981120][ T5060] usb 7-1: USB disconnect, device number 20
[  747.084468][T24345] bond3: option min_links: invalid value (18446744073709551612)
[  747.090483][T24345] bond3: option min_links: allowed values 0 - 2147483647
[  747.101043][T24345] bond3 (unregistering): Released all slaves
[  747.493444][T24354] fuse: fd is not a fuse device
[  747.740099][T24364] loop6: detected capacity change from 0 to 8
[  747.745980][T24362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8026'.
[  747.998603][T24372] loop6: detected capacity change from 0 to 2048
[  748.006346][T24372] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=3932051, location=3932051
[  748.037070][T24372] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  748.262769][T24384] loop6: detected capacity change from 0 to 4096
[  748.351758][T24384] ntfs3(loop6): Failed to load $Extend (-22).
[  748.353972][T24384] ntfs3(loop6): Failed to initialize $Extend.
[  748.699159][ T5593] Bluetooth: hci1: command 0x0406 tx timeout
[  748.797769][T24404] loop6: detected capacity change from 0 to 1024
[  749.221163][T24408] netlink: 'syz.6.8048': attribute type 21 has an invalid length.
[  749.231001][T24408] netlink: 156 bytes leftover after parsing attributes in process `syz.6.8048'.
[  749.609391][T24412] loop6: detected capacity change from 0 to 4096
[  749.707366][T24412] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  751.330520][T24424] overlayfs: missing 'lowerdir'
[  751.333042][T24424] overlay: Unknown parameter '/'
[  751.702993][ T5060] usb 7-1: new full-speed USB device number 21 using dummy_hcd
[  751.875934][ T5060] usb 7-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00
[  751.892988][ T5060] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  751.907368][ T5060] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  751.922345][ T5060] usb 7-1: config 0 interface 0 has no altsetting 0
[  751.930080][ T5060] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  751.942093][ T5060] usb 7-1: config 0 descriptor??
[  752.572314][ T5060] usb 7-1: USB disconnect, device number 21
[  754.105152][T24450] 9pnet: p9_errstr2errno: server reported unknown error 
[  754.261142][T24440] loop6: detected capacity change from 0 to 65536
[  754.318331][T24440] XFS (loop6): Deprecated V4 format (crc=0) not supported by kernel.
[  755.243507][ T5704] IPVS: starting estimator thread 0...
[  755.331132][T24487] IPVS: using max 80 ests per chain, 192000 per kthread
[  755.990486][T24496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8085'.
[  756.453560][T11253] usb 7-1: new full-speed USB device number 22 using dummy_hcd
[  756.608790][T11253] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  756.655380][T11253] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  756.682887][T11253] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  756.705816][T11253] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  756.734892][T11253] usb 7-1: config 0 descriptor??
[  757.415617][T11253] usb 7-1: string descriptor 0 read error: -22
[  757.632197][T11253] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.000A/input/input24
[  757.867425][T11253] uclogic 0003:256C:006D.000A: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.6-1/input0
[  757.897267][T11253] usb 7-1: USB disconnect, device number 22
[  758.247251][T24527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8098'.
[  758.613670][T24535] FAULT_INJECTION: forcing a failure.
[  758.613670][T24535] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  758.633698][T24535] CPU: 0 UID: 0 PID: 24535 Comm: syz.6.8103 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  758.633744][T24535] Tainted: [L]=SOFTLOCKUP
[  758.633751][T24535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  758.633762][T24535] Call Trace:
[  758.633769][T24535]  <TASK>
[  758.633776][T24535]  dump_stack_lvl+0xe8/0x150
[  758.633805][T24535]  should_fail_ex+0x410/0x560
[  758.633827][T24535]  _copy_from_user+0x2d/0xb0
[  758.633847][T24535]  __se_sys_sendfile64+0xac/0x1a0
[  758.633870][T24535]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  758.633896][T24535]  do_syscall_64+0x166/0x520
[  758.633917][T24535]  ? trace_irq_disable+0x3b/0x140
[  758.633934][T24535]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  758.633952][T24535]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  758.633966][T24535] RIP: 0033:0x7ff25b59e159
[  758.633980][T24535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  758.633993][T24535] RSP: 002b:00007ff25c3b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  758.634010][T24535] RAX: ffffffffffffffda RBX: 00007ff25b825fa0 RCX: 00007ff25b59e159
[  758.634019][T24535] RDX: 0000200000000640 RSI: ffffffffffffffff RDI: ffffffffffffffff
[  758.634029][T24535] RBP: 00007ff25b63506b R08: 0000000000000000 R09: 0000000000000000
[  758.634037][T24535] R10: 000000000000044d R11: 0000000000000246 R12: 0000000000000000
[  758.634046][T24535] R13: 00007ff25b826038 R14: 00007ff25b825fa0 R15: 00007fff76cc2fe8
[  758.634065][T24535]  </TASK>
[  759.080850][T24543] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  759.259906][T24553] loop6: detected capacity change from 0 to 512
[  759.324881][T24553] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  759.363876][T24553] EXT4-fs error (device loop6): ext4_get_verity_descriptor_location:337: inode #15: comm syz.6.8112: verity file corrupted; can't find descriptor
[  759.378643][T24553] fs-verity (loop6, inode 15): Error -117 getting verity descriptor size
[  759.430715][T20791] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  759.583565][T24559] netlink: 'syz.6.8114': attribute type 34 has an invalid length.
[  759.591726][T24560] 9p: Bad value for 'rfdno'
[  760.272385][ T5704] usb 7-1: new full-speed USB device number 23 using dummy_hcd
[  760.420158][ T5704] usb 7-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be
[  760.433113][ T5704] usb 7-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  760.439379][ T5704] usb 7-1: Product: syz
[  760.441399][ T5704] usb 7-1: Manufacturer: syz
[  760.443445][ T5704] usb 7-1: SerialNumber: syz
[  760.453022][ T5704] usb 7-1: config 0 descriptor??
[  760.678954][ T5704] peak_usb 7-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[  760.693595][ T5704] peak_usb 7-1:0.0: unable to read PCAN-Chip USB firmware info (err -71)
[  760.744863][T24580] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  760.778113][ T5704] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -71
[  760.792064][ T5704] usb 7-1: USB disconnect, device number 23
[  760.809422][T24582] bond0: option mode: unable to set because the bond device has slaves
[  761.981516][T24626] autofs: Unknown parameter 'no9 PG!8E	'
[  762.453971][ T5462] netdevsim netdevsim12 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  762.679938][T24642] UBIFS error (pid: 24642): cannot open "ubi0_0", error -19
[  762.766666][T24647] netlink: 'syz.2.8154': attribute type 1 has an invalid length.
[  763.154868][ T5060] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  763.229714][T24664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8163'.
[  763.303613][ T5060] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  763.316437][ T5060] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  763.334307][ T5060] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  763.357412][ T5060] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  763.375262][ T5060] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  763.393310][ T5060] usb 7-1: config 0 descriptor??
[  763.831592][ T5060] plantronics 0003:047F:FFFF.000B: ignoring exceeding usage max
[  763.837285][ T5060] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  763.840362][ T5060] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  763.900336][ T5060] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  764.029909][T11253] usb 7-1: USB disconnect, device number 24
[  764.254329][T24679] bond0: (slave wlan0): Enslaving as an active interface with an up link
[  764.745952][T24693] overlayfs: failed to clone upperpath
[  764.757505][T24693] Invalid ELF header magic: != ELF
[  765.034106][T24703] netlink: 104 bytes leftover after parsing attributes in process `syz.6.8182'.
[  766.601003][T24728] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  769.690036][T24750] loop6: detected capacity change from 0 to 16
[  769.704862][T24750] erofs (device loop6): mounted with root inode @ nid 36.
[  770.334580][T24775] cgroup: Invalid name
[  770.468369][T24782] loop6: detected capacity change from 0 to 1024
[  770.482063][T24782] hfsplus: (loop6): Attributes File (cnid 0x8) map record invalid or bitmap corruption detected, forcing read-only.
[  770.501163][T24782] hfsplus: Run fsck.hfsplus to repair.
[  770.764474][T24790] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8221'.
[  771.238756][ T5704] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  771.400039][ T5704] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  771.405441][ T5704] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  771.413117][ T5704] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  771.420272][ T5704] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  771.423979][ T5704] usb 7-1: SerialNumber: syz
[  771.630308][ T5704] usb 7-1: 0:2 : does not exist
[  771.655109][ T5704] usb 7-1: USB disconnect, device number 25
[  771.690462][T23793] udevd[23793]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  772.649766][T24839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8246'.
[  772.661897][T24841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8245'.
[  772.775948][T24847] netlink: 'syz.6.8249': attribute type 1 has an invalid length.
[  772.847598][T24847] 8021q: adding VLAN 0 to HW filter on device bond2
[  772.921321][T24851] 8021q: adding VLAN 0 to HW filter on device bond2
[  772.939718][T24851] bond2: (slave gre2): The slave device specified does not support setting the MAC address
[  772.967147][T24851] bond2: (slave gre2): Error -95 calling set_mac_address
[  773.021330][T24847] gretap1: entered promiscuous mode
[  773.094881][T24847] bond2: (slave gretap1): making interface the new active one
[  773.105212][T24847] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  773.446632][ T5704] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  773.568113][T24881] vlan3: entered promiscuous mode
[  773.570417][T24881] hsr0: entered promiscuous mode
[  773.572761][T24881] vlan3: entered allmulticast mode
[  773.574835][T24881] hsr0: entered allmulticast mode
[  773.576782][T24881] hsr_slave_0: entered allmulticast mode
[  773.579078][T24881] hsr_slave_1: entered allmulticast mode
[  773.591096][ T5704] usb 7-1: Using ep0 maxpacket: 8
[  773.600126][ T5704] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  773.606709][ T5704] usb 7-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  773.613283][ T5704] usb 7-1: config 0 interface 0 has no altsetting 0
[  773.615937][ T5704] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  773.633019][ T5704] usb 7-1: config 0 descriptor??
[  774.028110][ T5704] isku 0003:1E7D:319C.000C: unknown main item tag 0x0
[  774.039786][ T5704] isku 0003:1E7D:319C.000C: unknown main item tag 0x0
[  774.047046][ T5704] isku 0003:1E7D:319C.000C: unknown main item tag 0x0
[  774.051586][ T5704] isku 0003:1E7D:319C.000C: unknown main item tag 0x0
[  774.056614][ T5704] isku 0003:1E7D:319C.000C: unknown main item tag 0x0
[  774.060654][ T5704] isku 0003:1E7D:319C.000C: unknown main item tag 0x0
[  774.064359][T24885] ip_tables: iptables: counters copy to user failed while replacing table
[  774.068668][ T5704] isku 0003:1E7D:319C.000C: unknown main item tag 0x0
[  774.071433][ T5704] isku 0003:1E7D:319C.000C: unknown main item tag 0x0
[  774.076664][ T5704] isku 0003:1E7D:319C.000C: unknown main item tag 0x0
[  774.080972][ T5704] isku 0003:1E7D:319C.000C: unknown main item tag 0x0
[  774.096827][ T5704] isku 0003:1E7D:319C.000C: hidraw0: USB HID v0.09 Device [HID 1e7d:319c] on usb-dummy_hcd.6-1/input0
[  774.219410][ T5704] usb 7-1: USB disconnect, device number 26
[  774.931373][T24901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8274'.
[  774.952885][T24901] netlink: 83 bytes leftover after parsing attributes in process `syz.1.8274'.
[  775.320064][T24913] FAULT_INJECTION: forcing a failure.
[  775.320064][T24913] name failslab, interval 1, probability 0, space 0, times 0
[  775.328241][T24913] CPU: 0 UID: 0 PID: 24913 Comm: syz.6.8280 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  775.328266][T24913] Tainted: [L]=SOFTLOCKUP
[  775.328273][T24913] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  775.328281][T24913] Call Trace:
[  775.328290][T24913]  <TASK>
[  775.328297][T24913]  dump_stack_lvl+0xe8/0x150
[  775.328322][T24913]  should_fail_ex+0x410/0x560
[  775.328341][T24913]  should_failslab+0xa8/0x100
[  775.328367][T24913]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  775.328388][T24913]  ? skb_ext_add+0x148/0x8e0
[  775.328403][T24913]  ? skb_ext_add+0x148/0x8e0
[  775.328421][T24913]  ? __pfx___find_rr_leaf+0x10/0x10
[  775.328440][T24913]  skb_ext_add+0x148/0x8e0
[  775.328463][T24913]  secpath_set+0x58/0x1d0
[  775.328479][T24913]  xfrm6_input_addr+0x83/0x690
[  775.328496][T24913]  ? ip6t_do_table+0x13c4/0x15b0
[  775.328546][T24913]  ip6_parse_tlv+0x614/0x1f20
[  775.328569][T24913]  ipv6_destopt_rcv+0x593/0xbe0
[  775.328584][T24913]  ? __pfx_ipv6_destopt_rcv+0x10/0x10
[  775.328595][T24913]  ip6_protocol_deliver_rcu+0xe8c/0x1680
[  775.328608][T24913]  ? __pfx_nf_nat_ipv6_local_in+0x10/0x10
[  775.328623][T24913]  ip6_input_finish+0x191/0x370
[  775.328633][T24913]  NF_HOOK+0x336/0x3c0
[  775.328642][T24913]  ? __pfx_ip6_input_finish+0x10/0x10
[  775.328650][T24913]  ? NF_HOOK+0x9e/0x3c0
[  775.328659][T24913]  ? __pfx_NF_HOOK+0x10/0x10
[  775.328668][T24913]  ? __pfx_ip6_input_finish+0x10/0x10
[  775.328677][T24913]  ? ipv6_chk_mcast_addr+0x2e/0x860
[  775.328691][T24913]  ip6_input+0x16a/0x270
[  775.328698][T24913]  ? ip6_input+0x23/0x270
[  775.328707][T24913]  ip6_mc_input+0x64d/0xbc0
[  775.328716][T24913]  ? lock_acquire+0x106/0x350
[  775.328729][T24913]  ? __pfx_ip6_mc_input+0x10/0x10
[  775.328738][T24913]  ? ip6_rcv_finish+0x265/0x280
[  775.328747][T24913]  NF_HOOK+0x336/0x3c0
[  775.328755][T24913]  ? __pfx_sock_wfree+0x10/0x10
[  775.328765][T24913]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  775.328772][T24913]  ? NF_HOOK+0x9e/0x3c0
[  775.328779][T24913]  ? __pfx_NF_HOOK+0x10/0x10
[  775.328786][T24913]  ? ip6_rcv_core+0xa1/0x1870
[  775.328795][T24913]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  775.328805][T24913]  ? netif_receive_skb+0x102/0xbf0
[  775.328818][T24913]  netif_receive_skb+0x278/0xbf0
[  775.328832][T24913]  ? __pfx_netif_receive_skb+0x10/0x10
[  775.328845][T24913]  ? rcu_is_watching+0x16/0xb0
[  775.328853][T24913]  ? tun_rx_batched+0x185/0x790
[  775.328866][T24913]  tun_rx_batched+0x1de/0x790
[  775.328878][T24913]  ? __pfx_tun_rx_batched+0x10/0x10
[  775.328888][T24913]  ? tun_get_user+0x2717/0x4380
[  775.328898][T24913]  ? tun_get_user+0x2717/0x4380
[  775.328908][T24913]  ? tun_get_user+0x23cb/0x4380
[  775.328918][T24913]  ? tun_get_user+0x23cb/0x4380
[  775.328927][T24913]  ? __local_bh_enable_ip+0xd6/0x140
[  775.328937][T24913]  ? tun_get_user+0x2717/0x4380
[  775.328946][T24913]  ? tun_get_user+0x2717/0x4380
[  775.328956][T24913]  tun_get_user+0x2b44/0x4380
[  775.328973][T24913]  ? aa_file_perm+0x4ed/0x15f0
[  775.328983][T24913]  ? __pfx_tun_get_user+0x10/0x10
[  775.328994][T24913]  ? __lock_acquire+0x683/0x2cf0
[  775.329009][T24913]  ? ref_tracker_alloc+0x341/0x4b0
[  775.329020][T24913]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  775.329029][T24913]  ? tun_get+0x1c/0x2f0
[  775.329038][T24913]  ? tun_get+0x1c/0x2f0
[  775.329049][T24913]  ? tun_get+0x1c/0x2f0
[  775.329058][T24913]  ? tun_get+0x1c/0x2f0
[  775.329069][T24913]  tun_chr_write_iter+0x113/0x200
[  775.329081][T24913]  vfs_write+0x612/0xba0
[  775.329092][T24913]  ? __pfx_vfs_write+0x10/0x10
[  775.329103][T24913]  ? __fget_files+0x2a/0x420
[  775.329114][T24913]  ksys_write+0x150/0x270
[  775.329122][T24913]  ? __pfx_ksys_write+0x10/0x10
[  775.329134][T24913]  do_syscall_64+0x166/0x520
[  775.329145][T24913]  ? trace_irq_disable+0x3b/0x140
[  775.329162][T24913]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.329173][T24913]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.329182][T24913] RIP: 0033:0x7ff25b55e98e
[  775.329192][T24913] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  775.329199][T24913] RSP: 002b:00007ff25c3b4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  775.329210][T24913] RAX: ffffffffffffffda RBX: 00007ff25c3b56c0 RCX: 00007ff25b55e98e
[  775.329216][T24913] RDX: 0000000000000072 RSI: 0000200000000a40 RDI: 00000000000000c8
[  775.329222][T24913] RBP: 00007ff25b63506b R08: 0000000000000000 R09: 0000000000000000
[  775.329228][T24913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  775.329233][T24913] R13: 00007ff25b826038 R14: 00007ff25b825fa0 R15: 00007fff76cc2fe8
[  775.329245][T24913]  </TASK>
[  776.310479][T24933] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8289'.
[  776.410487][T24937] CIFS: Attempting to mount //127.0.0.1/share/file0
[  776.420507][T24937] CIFS: VFS: Error connecting to socket. Aborting operation.
[  776.429735][T24937] CIFS: VFS: cifs_mount failed w/return code = -111
[  776.531969][T24941] netlink: 'syz.6.8293': attribute type 21 has an invalid length.
[  776.545280][T24941] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8293'.
[  776.695923][T24946] netlink: 'syz.1.8295': attribute type 1 has an invalid length.
[  776.709616][T24946] netlink: 'syz.1.8295': attribute type 1 has an invalid length.
[  776.928589][T11253] usb 7-1: new full-speed USB device number 27 using dummy_hcd
[  777.172445][T11253] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  777.177197][T11253] usb 7-1: config 0 has an invalid interface number: 214 but max is 0
[  777.180383][T11253] usb 7-1: config 0 has no interface number 0
[  777.183475][T11253] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  777.194065][T11253] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  777.959320][T11253] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  777.968463][T11253] usb 7-1: Manufacturer: syz
[  777.977996][T11253] usb 7-1: SerialNumber: syz
[  777.992611][T11253] usb 7-1: config 0 descriptor??
[  777.996678][T24957] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8288'.
[  778.005903][T24958] new mount options do not match the existing superblock, will be ignored
[  778.619662][T11253] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.214/input/input25
[  779.172915][T11253] usb 7-1: USB disconnect, device number 27
[  779.859592][T24991] jffs2: notice: (24991) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  780.688660][T25015] xt_hashlimit: size too large, truncated to 1048576
[  781.369061][T25054] JFS: charset not found
[  781.746545][T25056] loop6: detected capacity change from 0 to 32768
[  782.707584][T25073] zero sized request
[  783.265740][T25077] loop6: detected capacity change from 0 to 512
[  783.340558][T25077] EXT4-fs (loop6): Test dummy encryption mode enabled
[  783.373647][T25077] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  783.402697][T25077] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.8353: bad orphan inode 131083
[  783.413624][T25077] loop6: lost filesystem error report for type 5 error -117
[  783.418688][T25077] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  783.503910][T25086] netlink: 'syz.1.8358': attribute type 2 has an invalid length.
[  783.512650][T25086] netlink: 'syz.1.8358': attribute type 1 has an invalid length.
[  783.528209][T25086] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8358'.
[  783.539855][T25086] netlink: 'syz.1.8358': attribute type 2 has an invalid length.
[  783.580649][T25086] netlink: 'syz.1.8358': attribute type 1 has an invalid length.
[  783.596541][T25086] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8358'.
[  783.609638][T25086] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2
[  783.676056][T20791] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  785.632599][   T34] audit: type=1326 audit(1789581809.929:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25163 comm="syz.1.8395" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff13d59e159 code=0x0
[  785.735788][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  785.738001][    C0] EXT4-fs (loop4): initial error at time 1789580737: ext4_mb_mark_diskspace_used:4222
[  785.740966][    C0] EXT4-fs (loop4): last error at time 1789580737: ext4_mb_mark_diskspace_used:4222
[  786.037710][T25177] loop6: detected capacity change from 0 to 32768
[  786.443788][T25189] FAULT_INJECTION: forcing a failure.
[  786.443788][T25189] name failslab, interval 1, probability 0, space 0, times 0
[  786.457414][T25189] CPU: 0 UID: 0 PID: 25189 Comm: syz.6.8407 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  786.457431][T25189] Tainted: [L]=SOFTLOCKUP
[  786.457436][T25189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  786.457442][T25189] Call Trace:
[  786.457446][T25189]  <TASK>
[  786.457451][T25189]  dump_stack_lvl+0xe8/0x150
[  786.457469][T25189]  should_fail_ex+0x410/0x560
[  786.457503][T25189]  should_failslab+0xa8/0x100
[  786.457522][T25189]  __kmalloc_cache_noprof+0xa8/0x660
[  786.457536][T25189]  ? alloc_bprm+0x79/0x640
[  786.457549][T25189]  ? alloc_bprm+0x79/0x640
[  786.457559][T25189]  alloc_bprm+0x79/0x640
[  786.457568][T25189]  do_execveat_common+0x172/0x670
[  786.457579][T25189]  __x64_sys_execveat+0xc7/0xf0
[  786.457589][T25189]  do_syscall_64+0x166/0x520
[  786.457600][T25189]  ? trace_irq_disable+0x3b/0x140
[  786.457610][T25189]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  786.457620][T25189]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  786.457627][T25189] RIP: 0033:0x7ff25b59e159
[  786.457636][T25189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  786.457643][T25189] RSP: 002b:00007ff25c3b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[  786.457653][T25189] RAX: ffffffffffffffda RBX: 00007ff25b825fa0 RCX: 00007ff25b59e159
[  786.457659][T25189] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  786.457666][T25189] RBP: 00007ff25b63506b R08: 0000000000001000 R09: 0000000000000000
[  786.457671][T25189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  786.457676][T25189] R13: 00007ff25b826038 R14: 00007ff25b825fa0 R15: 00007fff76cc2fe8
[  786.457687][T25189]  </TASK>
[  787.280331][T25226] CIFS: Unable to determine destination address
[  787.701145][T25264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8423'.
[  788.026363][T25223] loop6: detected capacity change from 0 to 32768
[  788.044029][T25223] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.8418 (25223)
[  788.223897][T25223] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  788.241939][T25223] BTRFS info (device loop6): using xxhash64 checksum algorithm
[  788.262510][T25279] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  788.369749][T25223] BTRFS info (device loop6): setting nodatasum
[  788.382219][T25223] BTRFS info (device loop6): allowing degraded mounts
[  788.494437][T25223] BTRFS info (device loop6): turning on async discard
[  788.505200][T25223] BTRFS info (device loop6): enabling free space tree
[  788.511634][T25223] BTRFS info (device loop6): force zlib compression, level 3
[  788.673855][T25303] netlink: 'syz.2.8430': attribute type 1 has an invalid length.
[  788.735837][T20791] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  790.053028][T25338] loop6: detected capacity change from 0 to 512
[  790.067708][T25338] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  790.086673][T25338] EXT4-fs (loop6): 1 truncate cleaned up
[  790.090400][T25338] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  790.112406][T20791] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  790.418620][T25344] loop6: detected capacity change from 0 to 32768
[  790.427529][T25344] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.8449 (25344)
[  790.432908][T25344] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  790.436043][T25344] BTRFS info (device loop6): using sha256 checksum algorithm
[  790.586296][T25344] BTRFS info (device loop6): enabling ssd optimizations
[  790.588853][T25344] BTRFS info (device loop6): turning on sync discard
[  790.591019][T25344] BTRFS info (device loop6): enabling free space tree
[  790.593370][T25344] BTRFS info (device loop6): use zlib compression, level 3
[  790.619194][   T34] audit: type=1800 audit(1789581815.147:1372): pid=25344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.8449" name="file1" dev="loop6" ino=260 res=0 errno=0
[  791.053429][T20791] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  791.063431][T25373] sock: sock_set_timeout: `syz.1.8456' (pid 25373) tries to set negative timeout
[  791.931708][   T34] audit: type=1326 audit(1789581816.532:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25392 comm="syz.6.8465" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25b59e159 code=0x7ffc0000
[  791.953851][   T34] audit: type=1326 audit(1789581816.532:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25392 comm="syz.6.8465" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25b59e159 code=0x7ffc0000
[  791.999600][   T34] audit: type=1326 audit(1789581816.532:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25392 comm="syz.6.8465" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25b59e159 code=0x7ffc0000
[  792.027074][   T34] audit: type=1326 audit(1789581816.532:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25392 comm="syz.6.8465" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25b59e159 code=0x7ffc0000
[  792.070692][   T34] audit: type=1326 audit(1789581816.532:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25392 comm="syz.6.8465" exe="/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7ff25b59e159 code=0x7ffc0000
[  792.102279][   T34] audit: type=1326 audit(1789581816.532:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25392 comm="syz.6.8465" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25b59e159 code=0x7ffc0000
[  792.123661][   T34] audit: type=1326 audit(1789581816.532:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25392 comm="syz.6.8465" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25b59e159 code=0x7ffc0000
[  792.169011][   T34] audit: type=1326 audit(1789581816.532:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25392 comm="syz.6.8465" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff25b59e159 code=0x7ffc0000
[  792.209495][   T34] audit: type=1326 audit(1789581816.532:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25392 comm="syz.6.8465" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff25b59e159 code=0x7ffc0000
[  792.232682][T25408] FAULT_INJECTION: forcing a failure.
[  792.232682][T25408] name failslab, interval 1, probability 0, space 0, times 0
[  792.244683][T25408] CPU: 0 UID: 0 PID: 25408 Comm: syz.6.8470 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  792.244706][T25408] Tainted: [L]=SOFTLOCKUP
[  792.244711][T25408] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  792.244720][T25408] Call Trace:
[  792.244726][T25408]  <TASK>
[  792.244734][T25408]  dump_stack_lvl+0xe8/0x150
[  792.244759][T25408]  should_fail_ex+0x410/0x560
[  792.244774][T25408]  should_failslab+0xa8/0x100
[  792.244819][T25408]  __kmalloc_noprof+0xfe/0x720
[  792.244838][T25408]  ? __register_sysctl_table+0xc02/0x1370
[  792.244855][T25408]  ? __register_sysctl_table+0xc02/0x1370
[  792.244875][T25408]  __register_sysctl_table+0xc02/0x1370
[  792.244895][T25408]  register_pidns_sysctls+0xff/0x1e0
[  792.244917][T25408]  copy_pid_ns+0x51e/0x900
[  792.244938][T25408]  ? __pfx_copy_pid_ns+0x10/0x10
[  792.244953][T25408]  ? rcu_is_watching+0x16/0xb0
[  792.244967][T25408]  ? __pfx_copy_mnt_ns+0x10/0x10
[  792.244985][T25408]  ? copy_ipcs+0x2a9/0x6c0
[  792.244995][T25408]  ? copy_utsname+0x184/0x620
[  792.245010][T25408]  create_new_namespaces+0x2ad/0x6b0
[  792.245026][T25408]  ? security_capable+0x7e/0x2c0
[  792.245043][T25408]  unshare_nsproxy_namespaces+0x149/0x190
[  792.245059][T25408]  ksys_unshare+0x5a7/0x950
[  792.245078][T25408]  ? __pfx_ksys_unshare+0x10/0x10
[  792.245088][T25408]  ? rcu_is_watching+0x16/0xb0
[  792.245105][T25408]  __x64_sys_unshare+0x38/0x50
[  792.245121][T25408]  do_syscall_64+0x166/0x520
[  792.245136][T25408]  ? trace_irq_disable+0x3b/0x140
[  792.245152][T25408]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  792.245166][T25408]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  792.245174][T25408] RIP: 0033:0x7ff25b59e159
[  792.245183][T25408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  792.245191][T25408] RSP: 002b:00007ff25c3b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  792.245200][T25408] RAX: ffffffffffffffda RBX: 00007ff25b825fa0 RCX: 00007ff25b59e159
[  792.245206][T25408] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000
[  792.245211][T25408] RBP: 00007ff25b63506b R08: 0000000000000000 R09: 0000000000000000
[  792.245215][T25408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  792.245220][T25408] R13: 00007ff25b826038 R14: 00007ff25b825fa0 R15: 00007fff76cc2fe8
[  792.245232][T25408]  </TASK>
[  792.246535][T25408] sysctl could not get directory: /kernel -12
[  792.525384][T25416] loop6: detected capacity change from 0 to 512
[  792.598145][T25416] EXT4-fs (loop6): 1 truncate cleaned up
[  792.627116][T25416] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  792.673354][T20791] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  793.547658][T25455] x_tables: duplicate entry at hook 2
[  793.570194][T25457] ip_tables: iptables: counters copy to user failed while replacing table
[  796.723739][T17317] Bluetooth: Wrong link type (-22)
[  797.918333][T25569] FAULT_INJECTION: forcing a failure.
[  797.918333][T25569] name failslab, interval 1, probability 0, space 0, times 0
[  797.945009][T25569] CPU: 0 UID: 0 PID: 25569 Comm: syz.6.8539 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  797.945027][T25569] Tainted: [L]=SOFTLOCKUP
[  797.945030][T25569] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  797.945036][T25569] Call Trace:
[  797.945041][T25569]  <TASK>
[  797.945046][T25569]  dump_stack_lvl+0xe8/0x150
[  797.945065][T25569]  should_fail_ex+0x410/0x560
[  797.945078][T25569]  should_failslab+0xa8/0x100
[  797.945094][T25569]  __kmalloc_cache_noprof+0xa8/0x660
[  797.945108][T25569]  ? nfc_allocate_device+0x129/0x560
[  797.945121][T25569]  ? nfc_allocate_device+0x129/0x560
[  797.945134][T25569]  ? __pfx_nci_transceive+0x10/0x10
[  797.945142][T25569]  nfc_allocate_device+0x129/0x560
[  797.945153][T25569]  ? __init_swait_queue_head+0xa8/0x150
[  797.945164][T25569]  nci_allocate_device+0x1da/0x380
[  797.945179][T25569]  virtual_ncidev_open+0x75/0x1a0
[  797.945191][T25569]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  797.945199][T25569]  misc_open+0x2d5/0x350
[  797.945211][T25569]  chrdev_open+0x4d9/0x600
[  797.945225][T25569]  ? __pfx_chrdev_open+0x10/0x10
[  797.945235][T25569]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  797.945247][T25569]  ? __pfx_chrdev_open+0x10/0x10
[  797.945256][T25569]  do_dentry_open+0x816/0x1380
[  797.945273][T25569]  vfs_open+0x3b/0x340
[  797.945284][T25569]  ? path_openat+0x1428/0x1d60
[  797.945296][T25569]  path_openat+0x1443/0x1d60
[  797.945314][T25569]  do_file_open+0x23e/0x4a0
[  797.945326][T25569]  ? __pfx_do_file_open+0x10/0x10
[  797.945344][T25569]  ? _raw_spin_unlock+0x28/0x50
[  797.945354][T25569]  ? alloc_fd+0x651/0x6c0
[  797.945369][T25569]  do_sys_openat2+0x115/0x200
[  797.945379][T25569]  ? __se_sys_futex+0x3a8/0x450
[  797.945388][T25569]  ? __pfx_do_sys_openat2+0x10/0x10
[  797.945400][T25569]  ? rcu_is_watching+0x16/0xb0
[  797.945410][T25569]  __x64_sys_openat+0x138/0x170
[  797.945423][T25569]  do_syscall_64+0x166/0x520
[  797.945433][T25569]  ? trace_irq_disable+0x3b/0x140
[  797.945443][T25569]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  797.945479][T25569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  797.945488][T25569] RIP: 0033:0x7ff25b59e159
[  797.945498][T25569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  797.945507][T25569] RSP: 002b:00007ff25c3b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  797.945517][T25569] RAX: ffffffffffffffda RBX: 00007ff25b825fa0 RCX: 00007ff25b59e159
[  797.945524][T25569] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c
[  797.945529][T25569] RBP: 00007ff25b63506b R08: 0000000000000000 R09: 0000000000000000
[  797.945535][T25569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  797.945541][T25569] R13: 00007ff25b826038 R14: 00007ff25b825fa0 R15: 00007fff76cc2fe8
[  797.945554][T25569]  </TASK>
[  799.626567][T25635] loop6: detected capacity change from 0 to 4096
[  799.645344][T25635] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  799.692709][T25635] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 129: 0xbe != 0x00
[  799.707012][T25635] UDF-fs: error (device loop6): udf_read_inode: (ino 1408) failed !bh
[  799.726060][T25635] UDF-fs: error (device loop6): udf_fill_super: Error in udf_iget, block=96, partition=0
[  800.137757][T25657] nvme_tcp: queue 0: data digest mismatch host: disabled ctrl: enabled
[  800.373148][ T1376] ieee802154 phy0 wpan0: encryption failed: -22
[  800.375761][ T1376] ieee802154 phy1 wpan1: encryption failed: -22
[  800.916882][T25683] x_tables: duplicate underflow at hook 4
[  801.040197][T25689] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8575'.
[  801.044157][T25689] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8575'.
[  801.085266][T25691] SET target dimension over the limit!
[  801.119314][T25693] loop6: detected capacity change from 0 to 64
[  801.150273][T25693] syz.6.8577: attempt to access beyond end of device
[  801.150273][T25693] loop6: rw=8388608, sector=1024, nr_sectors = 2 limit=64
[  801.158786][T25693] buffer_io_error: 322 callbacks suppressed
[  801.158805][T25693] Buffer I/O error on dev loop6, logical block 512, async page read
[  801.163500][T25693] syz.6.8577: attempt to access beyond end of device
[  801.163500][T25693] loop6: rw=8388608, sector=113152, nr_sectors = 2 limit=64
[  801.169050][T25693] Buffer I/O error on dev loop6, logical block 56576, async page read
[  801.221227][T25695] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8578'.
[  801.231053][T25695] netlink: 52 bytes leftover after parsing attributes in process `syz.6.8578'.
[  801.300552][T25699] cgroup: Unknown subsys name 'cpuset'
[  801.722698][T25726] overlayfs: failed to clone upperpath
[  801.761112][ T5060] Process accounting resumed
[  801.812395][T25724] Process accounting resumed
[  801.945800][T25734] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8595'.
[  802.059045][T25740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8598'.
[  802.287788][T25744] loop6: detected capacity change from 0 to 40427
[  802.294826][T25744] F2FS-fs (loop6): Invalid SB checksum offset: 0
[  802.298090][T25744] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  802.307758][T25744] F2FS-fs (loop6): invalid crc value
[  802.394033][T25744] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  802.450224][T25744] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[  802.454209][T25744] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  802.665159][T20791] syz-executor: attempt to access beyond end of device
[  802.665159][T20791] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  802.744411][T20791] CPU: 0 UID: 0 PID: 20791 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  802.744463][T20791] Tainted: [L]=SOFTLOCKUP
[  802.744469][T20791] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  802.744476][T20791] Call Trace:
[  802.744482][T20791]  <TASK>
[  802.744488][T20791]  dump_stack_lvl+0xe8/0x150
[  802.744508][T20791]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  802.744529][T20791]  f2fs_write_end_io+0x1215/0x16f0
[  802.744550][T20791]  ? blkg_put+0x22/0x240
[  802.744577][T20791]  __submit_merged_bio+0x258/0x6a0
[  802.744592][T20791]  ? rcu_is_watching+0x16/0xb0
[  802.744605][T20791]  __submit_merged_write_cond+0x3c9/0x4e0
[  802.744637][T20791]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  802.744656][T20791]  f2fs_write_data_pages+0x2a27/0x36f0
[  802.744667][T20791]  ? __lock_acquire+0x683/0x2cf0
[  802.744690][T20791]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  802.744701][T20791]  ? is_bpf_text_address+0x26/0x2b0
[  802.744718][T20791]  ? arch_stack_walk+0xfb/0x150
[  802.744737][T20791]  ? add_lock_to_list+0xc7/0x100
[  802.744745][T20791]  ? lockdep_unlock+0x5c/0xd0
[  802.744754][T20791]  ? __lock_acquire+0x13e8/0x2cf0
[  802.744774][T20791]  ? do_raw_spin_lock+0x12b/0x2f0
[  802.744787][T20791]  ? do_raw_spin_unlock+0x4d/0x200
[  802.744795][T20791]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  802.744807][T20791]  do_writepages+0x338/0x560
[  802.744823][T20791]  ? do_raw_spin_unlock+0x4d/0x200
[  802.744833][T20791]  filemap_fdatawrite+0x1e9/0x2f0
[  802.744847][T20791]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  802.744874][T20791]  ? do_raw_spin_unlock+0x4d/0x200
[  802.744884][T20791]  f2fs_sync_dirty_inodes+0x30e/0x830
[  802.744903][T20791]  f2fs_write_checkpoint+0xa3d/0x2710
[  802.744910][T20791]  ? __lock_acquire+0x683/0x2cf0
[  802.744931][T20791]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  802.744951][T20791]  ? try_to_wake_up+0x8b6/0x14d0
[  802.744968][T20791]  kill_f2fs_super+0x2dd/0x700
[  802.744983][T20791]  ? __pfx_kill_f2fs_super+0x10/0x10
[  802.744999][T20791]  ? call_rcu+0x64d/0x8b0
[  802.745006][T20791]  ? lockdep_hardirqs_on+0x7b/0x110
[  802.745021][T20791]  deactivate_locked_super+0xbc/0x110
[  802.745035][T20791]  cleanup_mnt+0x3d3/0x460
[  802.745045][T20791]  task_work_run+0x1d9/0x270
[  802.745058][T20791]  ? __pfx_task_work_run+0x10/0x10
[  802.745072][T20791]  exit_to_user_mode_loop+0x204/0x770
[  802.745088][T20791]  ? rcu_is_watching+0x16/0xb0
[  802.745097][T20791]  do_syscall_64+0x328/0x520
[  802.745107][T20791]  ? trace_irq_disable+0x3b/0x140
[  802.745117][T20791]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  802.745127][T20791]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  802.745135][T20791] RIP: 0033:0x7ff25b59f397
[  802.745143][T20791] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  802.745150][T20791] RSP: 002b:00007fff76cc2258 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  802.745160][T20791] RAX: 0000000000000000 RBX: 00007ff25b6344bb RCX: 00007ff25b59f397
[  802.745166][T20791] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff76cc2310
[  802.745170][T20791] RBP: 00007fff76cc2310 R08: 00007fff76cc3310 R09: 00000000ffffffff
[  802.745175][T20791] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff76cc33a0
[  802.745180][T20791] R13: 00007ff25b6344bb R14: 00000000000c5f87 R15: 00007fff76cc33e0
[  802.745191][T20791]  </TASK>
[  802.966683][T20791] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  803.519760][T25780] loop6: detected capacity change from 0 to 64
[  803.698416][T25784] loop6: detected capacity change from 0 to 1024
[  803.711710][T25784] hfsplus: Filesystem is marked locked, mounting read-only.
[  803.979610][ T5704] usb 7-1: new full-speed USB device number 28 using dummy_hcd
[  804.123283][ T5704] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  804.128926][ T5704] usb 7-1: config 10 has too many interfaces: 175, using maximum allowed: 32
[  804.133819][ T5704] usb 7-1: config 10 has an invalid descriptor of length 207, skipping remainder of the config
[  804.153611][ T5704] usb 7-1: config 10 has 0 interfaces, different from the descriptor's value: 175
[  804.168157][ T5704] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  804.620162][ T5704] usb 7-1: string descriptor 0 read error: -71
[  804.628452][ T5704] usb 7-1: USB disconnect, device number 28
[  804.813179][T25812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8631'.
[  805.105585][T25824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8637'.
[  805.125464][T25824] IPv6: sit5: Disabled Multicast RS
[  805.136610][T25824] sit5: entered allmulticast mode
[  805.471607][T11253] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[  805.627691][T11253] usb 7-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00
[  805.632370][T11253] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  805.640117][T11253] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  805.651662][T11253] usb 7-1: config 0 descriptor??
[  805.660494][T25827] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  806.071001][T11253] hid_parser_main: 34 callbacks suppressed
[  806.071016][T11253] wacom 0003:056A:0003.000D: unknown main item tag 0x0
[  806.078574][T11253] wacom 0003:056A:0003.000D: unknown main item tag 0x0
[  806.081568][T11253] wacom 0003:056A:0003.000D: unknown main item tag 0x0
[  806.083909][T11253] wacom 0003:056A:0003.000D: unknown main item tag 0x0
[  806.086772][T11253] wacom 0003:056A:0003.000D: unknown main item tag 0x0
[  806.092224][T11253] wacom 0003:056A:0003.000D: unknown main item tag 0x0
[  806.096589][T11253] wacom 0003:056A:0003.000D: unknown main item tag 0x0
[  806.105915][T11253] wacom 0003:056A:0003.000D: unknown main item tag 0x0
[  806.111155][T11253] wacom 0003:056A:0003.000D: unknown main item tag 0x0
[  806.115812][T11253] wacom 0003:056A:0003.000D: unknown main item tag 0x0
[  806.123204][T11253] wacom 0003:056A:0003.000D: reserved main item tag 0xd
[  806.127664][T11253] wacom 0003:056A:0003.000D: unexpected long global item
[  806.133753][T11253] wacom 0003:056A:0003.000D: parse failed
[  806.138451][T11253] wacom 0003:056A:0003.000D: probe with driver wacom failed with error -22
[  806.873949][T25861] ceph: No mds server is up or the cluster is laggy
[  806.880337][T11253] usb 7-1: USB disconnect, device number 29
[  808.811231][T25927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  809.605966][ T1283] usb 7-1: new full-speed USB device number 30 using dummy_hcd
[  809.758849][ T1283] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  809.766751][ T1283] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  809.771697][ T1283] usb 7-1: Product: syz
[  809.772970][ T1283] usb 7-1: Manufacturer: syz
[  809.777735][ T1283] usb 7-1: SerialNumber: syz
[  809.783610][ T1283] usb 7-1: config 0 descriptor??
[  809.792595][ T1283] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  811.412606][T25981] netlink: 'syz.1.8708': attribute type 1 has an invalid length.
[  811.910297][ T1283] gspca_stk1135: reg_w 0x203 err -71
[  811.922222][ T1283] gspca_stk1135: serial bus timeout: status=0x00
[  811.934104][ T1283] gspca_stk1135: Sensor write failed
[  811.940543][ T1283] gspca_stk1135: serial bus timeout: status=0x00
[  811.946124][ T1283] gspca_stk1135: Sensor write failed
[  811.955009][ T1283] gspca_stk1135: serial bus timeout: status=0x00
[  811.962944][ T1283] gspca_stk1135: Sensor read failed
[  811.968433][ T1283] gspca_stk1135: serial bus timeout: status=0x00
[  811.975482][ T1283] gspca_stk1135: Sensor read failed
[  811.981579][ T1283] gspca_stk1135: Detected sensor type unknown (0x0)
[  811.994532][ T1283] gspca_stk1135: serial bus timeout: status=0x00
[  812.002809][ T1283] gspca_stk1135: Sensor read failed
[  812.009106][ T1283] gspca_stk1135: serial bus timeout: status=0x00
[  812.020841][ T1283] gspca_stk1135: Sensor read failed
[  812.028966][ T1283] gspca_stk1135: serial bus timeout: status=0x00
[  812.036286][ T1283] gspca_stk1135: Sensor write failed
[  812.043595][ T1283] gspca_stk1135: serial bus timeout: status=0x00
[  812.050313][ T1283] gspca_stk1135: Sensor write failed
[  812.059115][ T1283] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71
[  812.079692][ T1283] usb 7-1: USB disconnect, device number 30
[  812.323910][T26003] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  812.336107][T26003] bond3 (unregistering): Released all slaves
[  812.467880][T26011] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  812.593274][T26017] loop6: detected capacity change from 0 to 4096
[  812.605803][T26017] NILFS (loop6): invalid segment: Checksum error in segment payload
[  812.617556][T26017] NILFS (loop6): trying rollback from an earlier position
[  812.635228][T26017] NILFS (loop6): recovery complete
[  812.642594][T26018] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  812.710539][T26020] loop6: detected capacity change from 0 to 2048
[  812.722761][T26020] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  812.736088][T26020] UDF-fs: error (device loop6): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[  813.534944][T26046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8736'.
[  813.538936][T26046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8736'.
[  813.888026][T26062] loop6: detected capacity change from 0 to 2048
[  813.902149][T26062] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  814.195566][T26080] loop6: detected capacity change from 0 to 512
[  814.229802][T26080] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  814.238616][T26080] ext4 filesystem being mounted at /565/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  814.256854][T26080] EXT4-fs error (device loop6): ext4_get_first_dir_block:3537: inode #12: comm syz.6.8751: Attempting to read directory block (0) that is past i_size (3)
[  814.300451][T20791] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  814.359560][T26085] FAULT_INJECTION: forcing a failure.
[  814.359560][T26085] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  814.366985][T26085] CPU: 0 UID: 0 PID: 26085 Comm: syz.6.8752 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  814.366999][T26085] Tainted: [L]=SOFTLOCKUP
[  814.367002][T26085] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  814.367009][T26085] Call Trace:
[  814.367013][T26085]  <TASK>
[  814.367017][T26085]  dump_stack_lvl+0xe8/0x150
[  814.367058][T26085]  should_fail_ex+0x410/0x560
[  814.367073][T26085]  _copy_from_user+0x2d/0xb0
[  814.367085][T26085]  __se_sys_rt_tgsigqueueinfo+0xdf/0x510
[  814.367102][T26085]  ? __pfx___se_sys_rt_tgsigqueueinfo+0x10/0x10
[  814.367114][T26085]  ? __se_sys_futex+0x3a8/0x450
[  814.367125][T26085]  ? ksys_write+0x242/0x270
[  814.367140][T26085]  do_syscall_64+0x166/0x520
[  814.367151][T26085]  ? trace_irq_disable+0x3b/0x140
[  814.367160][T26085]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  814.367171][T26085]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  814.367180][T26085] RIP: 0033:0x7ff25b59e159
[  814.367189][T26085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  814.367196][T26085] RSP: 002b:00007ff25c3b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000129
[  814.367206][T26085] RAX: ffffffffffffffda RBX: 00007ff25b825fa0 RCX: 00007ff25b59e159
[  814.367212][T26085] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000000
[  814.367217][T26085] RBP: 00007ff25b63506b R08: 0000000000000000 R09: 0000000000000000
[  814.367222][T26085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  814.367228][T26085] R13: 00007ff25b826038 R14: 00007ff25b825fa0 R15: 00007fff76cc2fe8
[  814.367241][T26085]  </TASK>
[  814.460209][T26087] loop6: detected capacity change from 0 to 2048
[  814.494745][T26088] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  814.634756][T26090] loop6: detected capacity change from 0 to 512
[  814.639243][T26090] EXT4-fs: Ignoring removed nomblk_io_submit option
[  814.650672][T26090] EXT4-fs: Ignoring removed oldalloc option
[  814.655783][T26090] EXT4-fs: old and new quota format mixing
[  814.920047][T26103] batman_adv: batadv0: Adding interface: dummy0
[  814.928969][T26103] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  814.967072][T26103] batman_adv: batadv0: Interface activated: dummy0
[  815.029710][T26103] netlink: 'syz.6.8761': attribute type 10 has an invalid length.
[  815.120658][T26107] batadv0: mtu less than device minimum
[  815.130146][T26107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  815.136659][T26107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  815.141180][T26107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  815.145718][T26107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  815.151239][T26107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  815.154870][T26107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  815.158657][T26107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  815.162313][T26107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  815.165897][T26107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  815.210706][T26118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8765'.
[  815.308704][T26103] 8021q: adding VLAN 0 to HW filter on device batadv0
[  815.318448][T26103] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  815.825385][T26155] Option 'dnserror' to dns_resolver key: bad/missing value
[  817.371179][T26188] syzkaller0: entered promiscuous mode
[  817.379120][T26188] syzkaller0: entered allmulticast mode
[  817.423302][T26193] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8801'.
[  817.802428][T26210] FAULT_INJECTION: forcing a failure.
[  817.802428][T26210] name failslab, interval 1, probability 0, space 0, times 0
[  817.810279][T26214] netlink: 'syz.1.8811': attribute type 5 has an invalid length.
[  817.818928][T26210] CPU: 0 UID: 0 PID: 26210 Comm: syz.6.8809 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  817.818944][T26210] Tainted: [L]=SOFTLOCKUP
[  817.818948][T26210] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  817.818954][T26210] Call Trace:
[  817.818958][T26210]  <TASK>
[  817.818963][T26210]  dump_stack_lvl+0xe8/0x150
[  817.818980][T26210]  should_fail_ex+0x410/0x560
[  817.818992][T26210]  should_failslab+0xa8/0x100
[  817.819008][T26210]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  817.819026][T26210]  ? security_inode_alloc+0x39/0x310
[  817.819035][T26210]  ? security_inode_alloc+0x39/0x310
[  817.819046][T26210]  security_inode_alloc+0x39/0x310
[  817.819056][T26210]  inode_init_always_gfp+0x97e/0xd30
[  817.819071][T26210]  ? __pfx_proc_alloc_inode+0x10/0x10
[  817.819083][T26210]  alloc_inode+0x82/0x1b0
[  817.819096][T26210]  new_inode+0x1f/0x170
[  817.819108][T26210]  ? proc_pid_make_inode+0x19/0x130
[  817.819122][T26210]  proc_pid_make_inode+0x21/0x130
[  817.819134][T26210]  proc_map_files_instantiate+0x78/0x170
[  817.819147][T26210]  proc_fill_cache+0x2a8/0x390
[  817.819157][T26210]  ? __pfx_proc_map_files_instantiate+0x10/0x10
[  817.819167][T26210]  ? __pfx_proc_fill_cache+0x10/0x10
[  817.819181][T26210]  proc_map_files_readdir+0x81a/0xa80
[  817.819194][T26210]  ? __pfx_proc_map_files_readdir+0x10/0x10
[  817.819212][T26210]  ? iterate_dir+0x209/0x4d0
[  817.819222][T26210]  ? down_read_killable+0x1bb/0x3b0
[  817.819236][T26210]  iterate_dir+0x2e2/0x4d0
[  817.819247][T26210]  __se_sys_getdents+0xf1/0x270
[  817.819258][T26210]  ? __pfx___se_sys_getdents+0x10/0x10
[  817.819267][T26210]  ? ksys_write+0x242/0x270
[  817.819274][T26210]  ? __pfx_filldir+0x10/0x10
[  817.819283][T26210]  ? rcu_is_watching+0x16/0xb0
[  817.819298][T26210]  do_syscall_64+0x166/0x520
[  817.819309][T26210]  ? trace_irq_disable+0x3b/0x140
[  817.819320][T26210]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  817.819331][T26210]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  817.819339][T26210] RIP: 0033:0x7ff25b59e159
[  817.819347][T26210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  817.819355][T26210] RSP: 002b:00007ff25c3b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  817.819367][T26210] RAX: ffffffffffffffda RBX: 00007ff25b825fa0 RCX: 00007ff25b59e159
[  817.819372][T26210] RDX: 00000000000000f3 RSI: 0000200000000f40 RDI: 0000000000000004
[  817.819377][T26210] RBP: 00007ff25b63506b R08: 0000000000000000 R09: 0000000000000000
[  817.819382][T26210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  817.819411][T26210] R13: 00007ff25b826038 R14: 00007ff25b825fa0 R15: 00007fff76cc2fe8
[  817.819425][T26210]  </TASK>
[  817.995118][T26220] netlink: 80 bytes leftover after parsing attributes in process `syz.6.8812'.
[  818.607329][ T1283] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[  818.758915][ T1283] usb 7-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00
[  818.769824][ T1283] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  818.773836][ T1283] usb 7-1: Product: syz
[  818.775592][ T1283] usb 7-1: Manufacturer: syz
[  818.777413][ T1283] usb 7-1: SerialNumber: syz
[  818.789361][ T1283] ums_eneub6250 7-1:1.0: USB Mass Storage device detected
[  818.796570][ T1283] scsi host6: usb-storage 7-1:1.0
[  818.808836][ T5060] ------------[ cut here ]------------
[  818.811121][ T5060] URB ffff888114620100 submitted while active
[  818.813110][ T5060] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#0: kworker/0:3/5060
[  818.816321][ T5060] Modules linked in:
[  818.818822][ T5060] CPU: 0 UID: 0 PID: 5060 Comm: kworker/0:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  818.822946][ T5060] Tainted: [L]=SOFTLOCKUP
[  818.824413][ T5060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  818.827547][ T5060] Workqueue: events_freezable usb_stor_scan_dwork
[  818.829638][ T5060] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[  818.831435][ T5060] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 59 d4 d2 fa 49 83 3e 00 74 40 e8 3e 1c 65 fa 48 8d 3d 47 d5 03 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 23 1c 65 fa eb 05 e8 1c 1c
[  818.837548][ T5060] RSP: 0018:ffffc900029af898 EFLAGS: 00010293
[  818.839513][ T5060] RAX: ffffffff8761e8f2 RBX: ffff888114620100 RCX: ffff888102371e00
[  818.842165][ T5060] RDX: 0000000000000000 RSI: ffff888114620100 RDI: ffffffff9065be40
[  818.844877][ T5060] RBP: dffffc0000000000 R08: 0000000000000002 R09: 0000000000000000
[  818.847702][ T5060] R10: ffffc900029af980 R11: fffff52000535f3b R12: ffff888114620168
[  818.850546][ T5060] R13: ffff8880218050a0 R14: ffff888114620108 R15: 0000000000000c00
[  818.853107][ T5060] FS:  0000000000000000(0000) GS:ffff88818d939000(0000) knlGS:0000000000000000
[  818.856235][ T5060] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  818.858528][ T5060] CR2: 00007ff25b5eb840 CR3: 0000000021a50000 CR4: 00000000000006f0
[  818.861029][ T5060] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  818.863535][ T5060] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  818.866492][ T5060] Call Trace:
[  818.867715][ T5060]  <TASK>
[  818.868771][ T5060]  ? __raw_spin_lock_init+0x45/0x100
[  818.870531][ T5060]  ? __init_swait_queue_head+0xa8/0x150
[  818.872358][ T5060]  usb_stor_msg_common+0x2a2/0x500
[  818.874244][ T5060]  ? __pfx_usb_stor_msg_common+0x10/0x10
[  818.876333][ T5060]  usb_stor_Bulk_max_lun+0x2fd/0x5b0
[  818.878109][ T5060]  usb_stor_scan_dwork+0xf4/0x2c0
[  818.879994][ T5060]  ? process_scheduled_works+0xa1a/0x14c0
[  818.881803][ T5060]  process_scheduled_works+0xa88/0x14c0
[  818.883759][ T5060]  ? __pfx_process_scheduled_works+0x10/0x10
[  818.886042][ T5060]  ? assign_work+0x3cf/0x5d0
[  818.887837][ T5060]  worker_thread+0xa47/0xfb0
[  818.889486][ T5060]  ? __kthread_parkme+0x71/0x1f0
[  818.891207][ T5060]  kthread+0x38b/0x480
[  818.892575][ T5060]  ? __pfx_worker_thread+0x10/0x10
[  818.894256][ T5060]  ? __pfx_kthread+0x10/0x10
[  818.895786][ T5060]  ret_from_fork+0x514/0xb70
[  818.897306][ T5060]  ? __pfx_ret_from_fork+0x10/0x10
[  818.899323][ T5060]  ? __switch_to+0xc89/0x1420
[  818.900829][ T5060]  ? __pfx_kthread+0x10/0x10
[  818.902277][ T5060]  ret_from_fork_asm+0x1a/0x30
[  818.904259][ T5060]  </TASK>
[  818.905321][ T5060] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  818.907620][ T5060] CPU: 0 UID: 0 PID: 5060 Comm: kworker/0:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  818.911586][ T5060] Tainted: [L]=SOFTLOCKUP
[  818.913155][ T5060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  818.916250][ T5060] Workqueue: events_freezable usb_stor_scan_dwork
[  818.918254][ T5060] Call Trace:
[  818.919300][ T5060]  <TASK>
[  818.920231][ T5060]  vpanic+0x56d/0xa60
[  818.921489][ T5060]  ? __pfx__printk+0x10/0x10
[  818.922935][ T5060]  ? __pfx_vpanic+0x10/0x10
[  818.924322][ T5060]  ? is_bpf_text_address+0x292/0x2b0
[  818.925961][ T5060]  ? is_bpf_text_address+0x26/0x2b0
[  818.927673][ T5060]  panic+0xc5/0xd0
[  818.928869][ T5060]  ? __pfx_panic+0x10/0x10
[  818.930268][ T5060]  ? ret_from_fork_asm+0x1a/0x30
[  818.931828][ T5060]  __warn+0x315/0x4c0
[  818.933094][ T5060]  ? usb_submit_urb+0x79/0x18b0
[  818.934628][ T5060]  ? usb_submit_urb+0x79/0x18b0
[  818.936140][ T5060]  __report_bug+0x276/0x570
[  818.937577][ T5060]  ? lockdep_hardirqs_on+0x7b/0x110
[  818.939148][ T5060]  ? usb_submit_urb+0x79/0x18b0
[  818.940651][ T5060]  ? __pfx___report_bug+0x10/0x10
[  818.942156][ T5060]  ? __schedule+0x17ea/0x5630
[  818.943637][ T5060]  ? lockdep_unlock+0x5c/0xd0
[  818.945081][ T5060]  ? __lock_acquire+0x13e8/0x2cf0
[  818.946651][ T5060]  report_bug_entry+0x19b/0x290
[  818.948105][ T5060]  ? usb_submit_urb+0x7c/0x18b0
[  818.949579][ T5060]  ? usb_submit_urb+0x81/0x18b0
[  818.951040][ T5060]  handle_bug+0xce/0x200
[  818.952346][ T5060]  exc_invalid_op+0x1a/0x50
[  818.953761][ T5060]  asm_exc_invalid_op+0x1a/0x20
[  818.955264][ T5060] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[  818.956967][ T5060] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 59 d4 d2 fa 49 83 3e 00 74 40 e8 3e 1c 65 fa 48 8d 3d 47 d5 03 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 23 1c 65 fa eb 05 e8 1c 1c
[  818.962723][ T5060] RSP: 0018:ffffc900029af898 EFLAGS: 00010293
[  818.964577][ T5060] RAX: ffffffff8761e8f2 RBX: ffff888114620100 RCX: ffff888102371e00
[  818.966967][ T5060] RDX: 0000000000000000 RSI: ffff888114620100 RDI: ffffffff9065be40
[  818.969481][ T5060] RBP: dffffc0000000000 R08: 0000000000000002 R09: 0000000000000000
[  818.971930][ T5060] R10: ffffc900029af980 R11: fffff52000535f3b R12: ffff888114620168
[  818.974255][ T5060] R13: ffff8880218050a0 R14: ffff888114620108 R15: 0000000000000c00
[  818.976638][ T5060]  ? usb_submit_urb+0x72/0x18b0
[  818.978132][ T5060]  ? usb_submit_urb+0x72/0x18b0
[  818.979757][ T5060]  ? __raw_spin_lock_init+0x45/0x100
[  818.981343][ T5060]  ? __init_swait_queue_head+0xa8/0x150
[  818.983027][ T5060]  usb_stor_msg_common+0x2a2/0x500
[  818.984606][ T5060]  ? __pfx_usb_stor_msg_common+0x10/0x10
[  818.986360][ T5060]  usb_stor_Bulk_max_lun+0x2fd/0x5b0
[  818.988042][ T5060]  usb_stor_scan_dwork+0xf4/0x2c0
[  818.989655][ T5060]  ? process_scheduled_works+0xa1a/0x14c0
[  818.991424][ T5060]  process_scheduled_works+0xa88/0x14c0
[  818.993184][ T5060]  ? __pfx_process_scheduled_works+0x10/0x10
[  818.995558][ T5060]  ? assign_work+0x3cf/0x5d0
[  818.997169][ T5060]  worker_thread+0xa47/0xfb0
[  818.998699][ T5060]  ? __kthread_parkme+0x71/0x1f0
[  819.000240][ T5060]  kthread+0x38b/0x480
[  819.001482][ T5060]  ? __pfx_worker_thread+0x10/0x10
[  819.003008][ T5060]  ? __pfx_kthread+0x10/0x10
[  819.004496][ T5060]  ret_from_fork+0x514/0xb70
[  819.005964][ T5060]  ? __pfx_ret_from_fork+0x10/0x10
[  819.007573][ T5060]  ? __switch_to+0xc89/0x1420
[  819.009072][ T5060]  ? __pfx_kthread+0x10/0x10
[  819.010570][ T5060]  ret_from_fork_asm+0x1a/0x30
[  819.012088][ T5060]  </TASK>
[  819.013493][ T5060] Kernel Offset: disabled
[  819.014779][ T5060] Rebooting in 86400 seconds..
