last executing test programs:

7m53.714717777s ago: executing program 2 (id=728):
r0 = socket$kcm(0x29, 0x2, 0x0)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000000c0), 0xfe11)
close(r0)

7m53.714537841s ago: executing program 2 (id=729):
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0)
write$proc_mixer(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='IMIX\nDIGITAL3 \'Synth Capture Switch\' 00000000000000000000\nVOLUME \'Line\' 00000000000000000000\nBASS\nPHONEIN \'L'], 0x95)
close(r0)

7m53.638582135s ago: executing program 2 (id=730):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "18047d80edc79ded5baf17b8d4ef60c9b3b201ad412d10413208ddeec3ca63150ca2e8e880626d219622937291bf1a88f2a7e933b9de68b10c358ceb836b1269874d68178d5ca2a64891b8ac2b18bec75794ef929a921ba80fe335e76deda6606f266cad000e1e9f949c533252624fbdb25e28a005a01da7a07e844a72943d4959681afcb9a2b3b3c4b2b511416252a03ab78abf8be2fc6313a03763da61a574a9bc59b728aa3c02eedb176afb984194f31696e2b3357c5757fbf99bae1c8dde4cfedc5714471bdd688ce6ac6e3d2a149abd76a0fe9a448d792273206fc444294e3bae3fc553bc9bd6d0b67ea837b7a0b7f9ef00"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0x4, 0x4, 0x14, 0x12, 0x14, 0x6}}]}}]}, 0x14c}}, 0x0)

7m53.638382208s ago: executing program 2 (id=731):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@discard}, {@barrier}]}, 0x3, 0x481, &(0x7f00000004c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
setreuid(0x0, 0xee00)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

7m53.495146376s ago: executing program 2 (id=732):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='oom_score_adj\x00')
fcntl$setstatus(r0, 0x4, 0x40800)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9e, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

7m53.288355397s ago: executing program 2 (id=733):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="c0fbedd8c1c20fb9b8209a08efe4", 0x0, 0xfffe, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

7m53.221519662s ago: executing program 32 (id=733):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="c0fbedd8c1c20fb9b8209a08efe4", 0x0, 0xfffe, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

5m5.135216512s ago: executing program 1 (id=3267):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0xf, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8001}}, [0x7, 0x1, 0xffffffffffffffff, 0x6, 0x6, 0x400, 0x6, 0xd7, 0x8, 0x10, 0x6, 0x5, 0x2, 0x0, 0x1]}, &(0x7f0000000080)=0x100)

5m5.134910619s ago: executing program 1 (id=3268):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a9000000000000d1000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000080003c"], 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=@migrate={0xec, 0x21, 0x1, 0x0, 0x4, {{@in=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in=@multicast1, @in=@local, @in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x33, 0x4, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in=@loopback, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xec}}, 0x0)

5m4.475477844s ago: executing program 1 (id=3269):
unshare(0x2c020400)
r0 = msgget$private(0x0, 0x240)
msgsnd(r0, &(0x7f0000000880)={0x2, "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"}, 0xfd1, 0x0)
msgrcv(0x0, &(0x7f0000000000), 0xfffffcef, 0x0, 0x4800)

5m4.385103845s ago: executing program 1 (id=3273):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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")
r0 = open(&(0x7f0000000280)='./file1\x00', 0x4827e, 0x10)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0xc000)
fallocate(r0, 0x0, 0x0, 0x8800000)
creat(&(0x7f0000000380)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3)

5m4.041697133s ago: executing program 1 (id=3274):
unshare(0x20000400)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect(r0, 0x0, 0x0)

5m3.843594162s ago: executing program 1 (id=3275):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000000000000000800000091114e000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

5m3.720124862s ago: executing program 33 (id=3275):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000000000000000800000091114e000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

3m14.807281733s ago: executing program 4 (id=5384):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x44, r1, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x2000067}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x40c2010)

3m14.76175043s ago: executing program 4 (id=5385):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

3m14.703117158s ago: executing program 4 (id=5387):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000886400050004ee0b00218ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x4)

3m14.651545185s ago: executing program 4 (id=5388):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)

3m14.607891915s ago: executing program 4 (id=5389):
arch_prctl$ARCH_SET_GS(0x1001, 0xfffffffffffffffe)

3m14.163068211s ago: executing program 4 (id=5398):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x5b9, &(0x7f0000000680)="$eJzs3W2IHHcdB/Df7N6mebiaNLZqa2xOQ20gdPdyuYREfGGJD7UmtaL4IhTCkdvuhezdnrkN9LaCLb4pCiL4RgShYl9YEQ3kTaXU9kWLbxSU+kClxoAKIhStFERQV2YfrmszaYr3MHjz+cDc/ec/c/v/7y3fndmd/8wEUFgT6Y8kYjwiLkXEzv7sf68w0f/VOXRxLp2S6HY//Zekt97soYtzw1WHf7cj/TEWsTUidh9PYl/l6naXljvnZprN+vnBfK09v1hbWu7cdXZ+plFv1BcOH50+NnVk+uj02j3XyZ9uv+WPd9x35Ynn//7Pb/76yPfT/o4Plo0+j7UyEROD/0klbhqpH0si7l3rxnJS7r/UccdIXTKWY4d4y7rd3d9LX7+3R8S+Xv53Rjn6L95LTz/wt53xy3vy7iOwfrpD2Ytf7QKbVqm3D5yUqhHRL5dK1Wp/H/7m2F5qtpbaBx5sXViY7e8r74pK6cGzzfrk4LPCrqgk6fzBXvn1+ak3zB+K6O0DP1be1puvnmk1Zzf6zQ7oGY+4fOlzZ7bseEP+/1Tu5x/YvNL8/+KFp55Ny6+V8+4NsJHS/H/3tflPhPxD4cg/FJf8Q3HJPxSX/ENxyT8Ul/xDcck/FJf8Q3HJPxTXMP/3nzwZ95882e0Mzn9faDXOnptbPDY1WZ2/cKZ6pnV+sdpotRq9M3bmr/+4zVZr8eBUXHio1q4vtWtLy53T860LC+3TvfP6T9czLgUA5ODUla333rT3uZeSiHjkA9t6U2rLYLmswubW7SaR9znIQD589Ificqk2KC6f8YHkOsu3XmtBc+37AmyMUt4dAHJz562O/0FR+f4fisv3/1Bc9vEB3/9D8fj+H4pr/Br3/7px5N5dkxHxtoj4Sblyw/BeX8D/r/GIy5e//dnayn24FRQUFFYKeb9DAevt9dDn3RMgL7OHLs4Np41q85nGRrUEZHnl7v4goDT3ncHUXzK2cmygsk7jhF5+LGIifvjbx/fPldMpBu9D69AUkOGRRyPiXVnb/6R3bGDXYL3d/dXi5oi4JSLeERHvXGXbX/9Umv8X6qN18g8b563m/9aIuD0ibouId0fEnoh4zyrb/vmlNP+/2jZaJ/9QDJ9/Pu8eAHn5+FN59wDIyyljDKCwvvNw3j0A8vL0D/LuAZCXr7yYdw+g2J67OyIms47/lXrH+4cqg+sC3jC4FsC2iNgeETsG5xDeODhHcOfIMcPrOf3JiIm4/UejdY7/wcYZjv/rXDX+r7Qy/q8cEXtX0cYzHxz/clb9zJ40/088PBz/l05p+8OxgMD6euXRiNsy85+sjPlNIs1pxHv/xzYmvnDlyaz6F+9LH7fyM/mHfHS/FfH+yM7/UFqqtecXa0vLnbt69/Fu1BcOH50+NnVk+uh0rXeJkNrwQiEZTvz11QNZ9S9Ppfn/xmH5h3yk2//t18j/6P7/+1bRxvGvfelUVv3479P873n2zfNf+vOW5DO9+eF9CR6aabfPH4zYkpy4un5qFR2FTW6YkWGG0vzv35f9+X/34G/S7f/xiPhwur8QEf+KiH9HxEci4qMR8bGIuOdN2vzqnY0rWfW/ezLN/+PnbP8hH2n+Z6+z/U9//2MVbRzY/+MvZtV/aG+a/+pv/nDigbF0kn8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtbe03Dk302zWz69jIe/nCAAAAAAAAEXxnwAAAP//xOQ08g==")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="68000000000803000000000000000000000000060900010073797a3000000000050003002f0000001400048008000240000003880800014000000006060002"], 0x68}, 0x1, 0x0, 0x0, 0x81}, 0x8004)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000001080102"], 0x58}, 0x1, 0x0, 0x0, 0x4c040}, 0x40000040)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000816}, 0x80)

3m13.945418975s ago: executing program 34 (id=5398):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x5b9, &(0x7f0000000680)="$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")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="68000000000803000000000000000000000000060900010073797a3000000000050003002f0000001400048008000240000003880800014000000006060002"], 0x68}, 0x1, 0x0, 0x0, 0x81}, 0x8004)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000001080102"], 0x58}, 0x1, 0x0, 0x0, 0x4c040}, 0x40000040)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000816}, 0x80)

16.266819256s ago: executing program 5 (id=8710):
r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2}}}}}]}}, 0x0)
syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

13.620373368s ago: executing program 5 (id=8757):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000240)={@val={0x70}, @void, @eth={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2000, 0x86dd, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "a445aa20618a32bfe4e892dc935525b19db2b0f3dd0d1314", "cc2ec93e99545ca82fac746dcdecd68bf79e4d713d6424d1bbf85e112e610dc5"}}}}}}}, 0x6e)

13.417765581s ago: executing program 5 (id=8762):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCGICOUNT(r0, 0x545d, 0x0)

13.337993299s ago: executing program 5 (id=8764):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x1}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)

13.275277925s ago: executing program 5 (id=8766):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioprio_set$pid(0x2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4)
syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0))
mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x8000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x4}}, './mnt\x00'})

12.385717033s ago: executing program 5 (id=8772):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)

581.529962ms ago: executing program 0 (id=8951):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="340100001700010029bd700000000000ac1414bb00000000000000000000000000000000000000002001000000000000000000000000000120010000000000000000000000000001e000000200000000000000000000000000000000000000000200008084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000200000000400000000000060000000000000000000000000000000000000000000000000000000000000000000000000009000000ba6b6e000201000000000000000400000000000000000000000000000c0008"], 0x134}}, 0x0)

581.298911ms ago: executing program 0 (id=8952):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0xb)

567.409103ms ago: executing program 0 (id=8953):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000180), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="05"], 0x20000078}}, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0xfd, 0x5ae9}, {0x6, 0x2, 0x3, 0x3}]}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x7, 0x0, 0x0, {}, {}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "8bc7e9385559d457"}}, 0x48}}, 0x0)

515.49404ms ago: executing program 0 (id=8954):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000240)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/events/sched/enable\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)

473.704284ms ago: executing program 0 (id=8955):
r0 = fsopen(&(0x7f0000000000)='udf\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000001c0)='io#harset', 0x0)
read(r0, 0x0, 0x0)

409.869116ms ago: executing program 0 (id=8956):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f00000105c0)='./file1\x00', 0x0, &(0x7f0000010280)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=adaptive,heap,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00', @ANYRES32, @ANYRES16], 0x5, 0x105c9, &(0x7f0000020bc0)="$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")
sched_setscheduler(0x0, 0x1, 0x0)
lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x2)

281.194097ms ago: executing program 3 (id=8958):
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)

230.169006ms ago: executing program 3 (id=8959):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0)

228.321634ms ago: executing program 3 (id=8960):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x1, 0x1, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x198e, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8)

164.077385ms ago: executing program 3 (id=8961):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
recvmmsg(r0, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000003, 0x0)

132.563639ms ago: executing program 3 (id=8962):
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x44}}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

0s ago: executing program 3 (id=8963):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xfbf0283703c70d89, 0x4008132, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f00000af000/0x3000)=nil, 0x3000, 0x100000a)

0s ago: executing program 3 (id=8964):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x63293d8f}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @tail_call, @map_idx={0x18, 0x9, 0x5, 0x0, 0x5}, @ldst={0x1, 0x3, 0x4, 0x6, 0x6, 0xfffffffffffffffe, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94)

kernel console output (not intermixed with test programs):

 414.283208][T20245] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  414.466186][T20256] loop5: detected capacity change from 0 to 4096
[  414.473741][T20256] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  414.481905][T20256] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096)
[  414.482951][T11816] udevd[11816]: incorrect nilfs2 checksum on /dev/loop5
[  414.489421][T20256] NILFS (loop5): invalid segment: Checksum error in segment payload
[  414.492682][T20256] NILFS (loop5): unable to fall back to spare super block
[  414.495418][T20256] NILFS (loop5): error -22 while searching super root
[  414.588367][T13628] net_ratelimit: 81 callbacks suppressed
[  414.588434][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  414.588463][T13628] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  414.594846][T20260] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  414.706590][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  414.706643][T13628] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  414.817049][   T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  414.817101][   T12] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  414.915991][ T6213] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  414.926595][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  414.926671][T13628] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  415.035929][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  415.038671][T13628] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  415.065879][ T6213] usb 6-1: Using ep0 maxpacket: 16
[  415.068934][ T6213] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  415.074137][ T6213] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  415.078963][ T6213] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  415.086087][ T6213] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.089499][ T6213] usb 6-1: Product: syz
[  415.089543][ T6213] usb 6-1: Manufacturer: syz
[  415.089555][ T6213] usb 6-1: SerialNumber: syz
[  415.100421][ T6213] usb 6-1: config 0 descriptor??
[  415.107788][ T6213] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  415.111476][ T6213] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[  415.533564][T20288] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6153'.
[  415.715280][ T6213] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  415.718176][ T6213] em28xx 6-1:0.0: Config register raw data: 0xfffffffb
[  415.856489][T20292] jffs2: notice: (20292) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  416.328322][ T6213] em28xx 6-1:0.0: Unknown AC97 audio processor detected!
[  416.332312][ T6213] em28xx 6-1:0.0: couldn't setup AC97 register 2
[  416.337878][ T6213] em28xx 6-1:0.0: couldn't setup AC97 register 4
[  416.341807][ T6213] em28xx 6-1:0.0: couldn't setup AC97 register 6
[  416.557879][ T6213] em28xx 6-1:0.0: couldn't setup AC97 register 54
[  416.567162][ T6213] em28xx 6-1:0.0: couldn't setup AC97 register 56
[  416.579541][ T6213] usb 6-1: USB disconnect, device number 9
[  416.664216][T20350] fuse: fd is not a fuse device
[  416.793471][T20359] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0
[  417.149890][T20373] jffs2: notice: (20373) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  417.309160][T20389] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6201'.
[  417.315092][T20389] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6201'.
[  417.320540][T20389] netlink: 'syz.3.6201': attribute type 32 has an invalid length.
[  417.320603][T20389] netlink: 500 bytes leftover after parsing attributes in process `syz.3.6201'.
[  417.483351][T20405] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6209'.
[  417.509073][T20405] bond3: option arp_missed_max: mode dependency failed, not supported in mode balance-tlb(5)
[  417.513766][T20405] bond3 (unregistering): Released all slaves
[  417.656283][ T5705] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  417.806033][ T5705] usb 6-1: Using ep0 maxpacket: 16
[  417.806657][ T5705] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  417.807695][ T5705] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  417.807714][ T5705] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  417.809333][ T5705] usb 6-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0
[  417.809351][ T5705] usb 6-1: Manufacturer: syz
[  417.811476][ T5705] usb 6-1: config 0 descriptor??
[  417.977249][T20444] netlink: 'syz.3.6228': attribute type 1 has an invalid length.
[  417.998929][T20444] 8021q: adding VLAN 0 to HW filter on device bond7
[  418.009159][T20444] bond7: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6)
[  418.227091][ T5705] hid_parser_main: 4047 callbacks suppressed
[  418.228834][ T5705] creative-sb0540 0003:041E:3100.0011: unknown main item tag 0x2
[  418.257075][ T5705] creative-sb0540 0003:041E:3100.0011: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[  418.429186][   T10] usb 6-1: USB disconnect, device number 10
[  418.536159][T20496] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6253'.
[  419.304766][T20528] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6269'.
[  419.636073][ T6213] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  419.666067][ T5703] net_ratelimit: 83 callbacks suppressed
[  419.666180][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  419.666222][ T5703] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  419.776053][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  419.779086][T13628] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  419.799786][ T6213] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  419.804087][ T6213] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  419.804171][ T6213] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  419.804217][ T6213] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.818755][T20533] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  419.824996][ T6213] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  419.895979][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  419.896563][ T5703] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  420.006294][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  420.006347][ T5703] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  420.117317][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  420.117510][T13628] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  420.145589][ T5705] usb 6-1: USB disconnect, device number 11
[  421.624717][T20613] Bluetooth: MGMT ver 1.23
[  421.760442][T20616] fuse: fd is not a fuse device
[  421.789981][T20619] netlink: 'syz.0.6305': attribute type 39 has an invalid length.
[  421.790089][T20619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6305'.
[  421.790442][T20619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6305'.
[  422.007915][T20639] kAFS: unable to lookup cell ''
[  422.067538][T20643] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  422.190009][T20651] fuse: fd is not a fuse device
[  422.558083][T20678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6333'.
[  422.656188][T20686] x_tables: duplicate underflow at hook 4
[  422.837316][T20706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6348'.
[  422.960638][T20720] 9p: Bad value for 'rfdno'
[  423.323821][T20742] loop5: detected capacity change from 0 to 1024
[  423.332331][T20742] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  423.337254][T20742] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  423.351304][T20742] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  423.362797][T20742] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 48: comm syz.5.6364: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=65540, size=1024 fake=0
[  423.385571][T20742] EXT4-fs (loop5): Remounting filesystem read-only
[  423.434403][T18528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  423.786410][ T5705] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  423.935755][ T5705] usb 6-1: Using ep0 maxpacket: 16
[  423.936644][ T5705] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  423.937688][ T5705] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  423.937705][ T5705] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  423.941076][ T5705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.941090][ T5705] usb 6-1: Product: syz
[  423.941096][ T5705] usb 6-1: Manufacturer: syz
[  423.941103][ T5705] usb 6-1: SerialNumber: syz
[  423.947494][ T5705] usb 6-1: 0:2 : does not exist
[  424.153309][ T5705] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  424.182870][ T5705] usb 6-1: USB disconnect, device number 12
[  424.234767][T11816] udevd[11816]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  424.726473][ T5703] net_ratelimit: 86 callbacks suppressed
[  424.729296][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  424.733164][ T5703] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  424.845960][ T5467] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  424.846013][ T5467] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  424.955942][   T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  424.955988][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  425.066145][ T5467] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  425.069514][ T5467] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  425.149233][T20803] loop5: detected capacity change from 0 to 512
[  425.182598][T20803] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  425.187373][ T5467] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  425.187391][ T5467] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  425.356888][T18528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  426.020319][T20843] overlayfs: failed to clone upperpath
[  426.096459][T20847] sctp: [Deprecated]: syz.5.6413 (pid 20847) Use of struct sctp_assoc_value in delayed_ack socket option.
[  426.096459][T20847] Use struct sctp_sack_info instead
[  426.304157][T20858] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6419'.
[  426.546235][T20870] futex_wake_op: syz.5.6416 tries to shift op by -1; fix this program
[  426.923912][T20881] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6427'.
[  426.923983][T20881] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6427'.
[  426.947661][T20881] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6427'.
[  426.947726][T20881] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6427'.
[  427.207852][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  427.207935][   T33] audit: type=1800 audit(427.093:1562): pid=20887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6430" name="file1" dev="overlay" ino=931 res=0 errno=0
[  427.359403][T20894] loop5: detected capacity change from 0 to 16
[  427.368922][T20894] erofs (device loop5): mounted with root inode @ nid 36.
[  427.646746][T20908] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0
[  429.090569][T20946] netlink: 'syz.5.6456': attribute type 1 has an invalid length.
[  429.239036][T20958] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6462'.
[  429.386418][T13628] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0
[  429.386683][T13628] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0
[  429.386753][T13628] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0
[  429.386801][T13628] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0
[  429.443436][   T10] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  429.606657][   T10] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  429.611529][   T10] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  429.617023][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.619557][   T10] usb 6-1: Product: syz
[  429.620971][   T10] usb 6-1: Manufacturer: syz
[  429.622702][   T10] usb 6-1: SerialNumber: syz
[  429.631225][   T10] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  429.725555][T20982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6474'.
[  429.735917][ T5703] net_ratelimit: 69 callbacks suppressed
[  429.736101][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  429.736141][ T5703] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  429.784908][T20985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6474'.
[  429.846419][ T5467] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  429.846485][ T5467] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  429.855125][   T10] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  429.873702][   T10] usb 6-1: USB disconnect, device number 13
[  429.950708][   T33] audit: type=1800 audit(429.843:1563): pid=20993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6479" name="file1" dev="tmpfs" ino=13231 res=0 errno=0
[  429.966114][ T5467] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  429.966160][ T5467] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  430.076005][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  430.076081][T13628] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  430.195966][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  430.199267][ T5703] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  430.950986][T21037] bond8: entered allmulticast mode
[  430.958551][T21037] 8021q: adding VLAN 0 to HW filter on device bond8
[  430.972758][T21037] macvlan0: entered promiscuous mode
[  430.974542][T21037] macvlan0: entered allmulticast mode
[  430.977580][T21037] bond8: entered promiscuous mode
[  430.987835][T21037] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  431.025628][T21037] bond8: left promiscuous mode
[  431.297528][T21059] loop5: detected capacity change from 0 to 256
[  431.359101][T21059] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  431.865319][T21103] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6531'.
[  431.986384][ T6213] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  432.157880][ T6213] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  432.159959][ T6213] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  432.160001][ T6213] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[  432.160023][ T6213] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  432.160056][ T6213] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.579513][ T6213] cxacru 6-1:1.0: send of cm 0x91 failed (-71)
[  432.579597][ T6213] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71
[  432.579649][ T6213] ATM dev 0: usbatm_atm_init: atm_start failed: -71!
[  432.627024][ T6213] cxacru 6-1:1.0: probe with driver cxacru failed with error -71
[  432.631417][ T6213] usb 6-1: USB disconnect, device number 14
[  432.662881][T21139] bridge0: Device is already in use.
[  432.851641][T21150] fuse: fd is not a fuse device
[  433.152801][T21165] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  433.163331][T21165] cramfs: block size(16384) > page size(4096) not supported by filesystem
[  433.167850][T21165] cramfs: wrong magic
[  434.352903][T21204] /dev/nullb0: Can't lookup blockdev
[  434.835800][ T5703] net_ratelimit: 88 callbacks suppressed
[  434.835864][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  434.835894][ T5703] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  434.956277][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  434.956341][ T5703] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  435.067482][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  435.067608][ T5703] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  435.177272][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  435.177324][ T5703] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  435.285822][   T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  435.285863][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  436.536734][T21292] ptrace attach of "/syz-executor exec"[5592] was attempted by "                                                                                "[21292]
[  437.535894][ T5705] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  437.685874][ T5705] usb 6-1: Using ep0 maxpacket: 32
[  437.686675][ T5705] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  437.688180][ T5705] usb 6-1: config 0 has an invalid interface number: 35 but max is 0
[  437.688200][ T5705] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  437.688214][ T5705] usb 6-1: config 0 has no interface number 0
[  437.688243][ T5705] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  437.690971][ T5705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.690992][ T5705] usb 6-1: Product: syz
[  437.691004][ T5705] usb 6-1: Manufacturer: syz
[  437.691015][ T5705] usb 6-1: SerialNumber: syz
[  437.693349][ T5705] usb 6-1: config 0 descriptor??
[  437.701543][ T5705] radio-si470x 6-1:0.35: could not find interrupt in endpoint
[  437.701599][ T5705] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5
[  437.898651][ T5705] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  438.123834][ T5705] radio-raremono 6-1:0.35: V4L2 device registered as radio48
[  438.310876][ T6209] usb 6-1: USB disconnect, device number 15
[  438.311296][ T6209] radio-raremono 6-1:0.35: Thanko's Raremono disconnected
[  438.736815][T21383] bond9: option all_slaves_active: invalid value (8)
[  438.738368][T21383] bond9 (unregistering): Released all slaves
[  438.979344][T21397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6666'.
[  438.979403][T21397] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6666'.
[  439.034977][T21403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6669'.
[  439.906434][   T12] net_ratelimit: 75 callbacks suppressed
[  439.907472][   T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  439.907504][   T12] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  440.016210][   T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  440.019583][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  440.109256][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  440.109326][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  440.125856][   T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  440.125910][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  440.236568][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  440.236777][ T5703] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  440.348644][   T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  440.348713][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  440.405083][T21461] Bluetooth: hci0: unsupported parameter 5135
[  440.405142][T21461] Bluetooth: hci0: unsupported parameter 8192
[  440.405548][T21461] Bluetooth: hci0: unsupported parameter 5135
[  440.405564][T21461] Bluetooth: hci0: unsupported parameter 8192
[  440.571640][T21473] tls_set_device_offload: netdev not found
[  440.842638][T21499] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6712'.
[  440.842695][T21499] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6712'.
[  441.041846][T21517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6721'.
[  442.286037][T21595] fuse: fd is not a fuse device
[  442.300283][T21593] bridge0: port 2(bridge_slave_1) entered disabled state
[  442.300666][T21593] bridge0: port 1(bridge_slave_0) entered disabled state
[  442.340099][T21598] fuse: fd is not a fuse device
[  442.376678][T21593] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  442.382322][T21593] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  442.449498][T21601] fuse: fd is not a fuse device
[  442.489527][T21603] /dev/nullb0: Can't lookup blockdev
[  442.490411][T21603] /dev/nullb0: Can't lookup blockdev
[  442.517127][   T13] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.520749][   T13] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.524341][   T13] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.528069][   T13] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.968489][T21622] netlink: 'syz.5.6768': attribute type 2 has an invalid length.
[  443.456130][T21644] loop5: detected capacity change from 0 to 512
[  443.456789][T21644] EXT4-fs: Ignoring removed mblk_io_submit option
[  443.456814][T21644] EXT4-fs: Ignoring removed orlov option
[  443.460698][T21644] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal
[  443.700717][T21658] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6785'.
[  443.861745][T21666] netlink: 63 bytes leftover after parsing attributes in process `syz.3.6789'.
[  443.893810][T21669] x_tables: unsorted underflow at hook 2
[  444.037905][T21679] netlink: 'syz.3.6795': attribute type 16 has an invalid length.
[  444.369371][T21699] xt_recent: Unsupported userspace flags (000000c5)
[  444.508369][ T6209] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  444.886096][ T6209] usb 6-1: Using ep0 maxpacket: 16
[  444.889274][ T6209] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  444.893093][ T6209] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  444.895748][ T6209] usb 6-1: config 0 has no interface number 0
[  444.900566][ T6209] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  444.903237][ T6209] usb 6-1: Product: syz
[  444.904639][ T6209] usb 6-1: Manufacturer: syz
[  444.906338][ T6209] usb 6-1: SerialNumber: syz
[  444.909393][ T6209] usb 6-1: config 0 descriptor??
[  444.913046][ T6209] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  444.986308][T21708] netlink: 'syz.0.6807': attribute type 9 has an invalid length.
[  444.996409][   T13] net_ratelimit: 90 callbacks suppressed
[  444.996466][   T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  444.996494][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  445.078726][T21712] IPv6: NLM_F_CREATE should be specified when creating new route
[  445.108384][ T5467] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  445.108600][ T5467] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  445.122591][ T6209] gspca_spca1528: reg_w err -71
[  445.136772][ T6209] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71
[  445.143018][ T6209] usb 6-1: USB disconnect, device number 16
[  445.212008][T21718] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6812'.
[  445.218880][   T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  445.218949][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  445.336040][   T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  445.336084][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  445.446283][   T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  445.446884][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  445.670171][T21734] loop5: detected capacity change from 0 to 2048
[  445.703166][T21734]  loop5: p1 p4
[  445.703166][T21734]  p1: <minix: p5 p6 >
[  445.703222][T21734] loop5: partition table partially beyond EOD, truncated
[  445.710416][T21734] loop5: p4 start 184549376 is beyond EOD, truncated
[  445.712612][T21734] loop5: p6 start 184549376 is beyond EOD, truncated
[  445.780592][T11816] udevd[11816]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  445.781582][T20543] udevd[20543]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory
[  445.801643][T20543] udevd[20543]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory
[  445.803390][T11816] udevd[11816]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  445.941731][T21743] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found
[  446.139473][T21753] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6825'.
[  446.235956][ T6209] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  446.388934][ T6209] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  446.395137][ T6209] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  446.400089][ T6209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.407644][ T6209] usb 6-1: config 0 descriptor??
[  446.412134][ T6209] pwc: Askey VC010 type 2 USB webcam detected.
[  446.820120][ T6209] pwc: recv_control_msg error -32 req 02 val 2b00
[  446.824584][ T6209] pwc: recv_control_msg error -32 req 02 val 2700
[  446.827598][ T6209] pwc: recv_control_msg error -32 req 02 val 2c00
[  446.830595][ T6209] pwc: recv_control_msg error -32 req 04 val 1000
[  446.833080][ T6209] pwc: recv_control_msg error -32 req 04 val 1300
[  446.837954][ T6209] pwc: recv_control_msg error -32 req 04 val 1400
[  446.840663][ T6209] pwc: recv_control_msg error -32 req 02 val 2000
[  447.044900][ T6209] pwc: recv_control_msg error -71 req 04 val 1500
[  447.047293][ T6209] pwc: recv_control_msg error -71 req 02 val 2500
[  447.050301][ T6209] pwc: recv_control_msg error -71 req 02 val 2400
[  447.053292][ T6209] pwc: recv_control_msg error -71 req 02 val 2600
[  447.057270][ T6209] pwc: recv_control_msg error -71 req 02 val 2900
[  447.060630][ T6209] pwc: recv_control_msg error -71 req 02 val 2800
[  447.063280][ T6209] pwc: recv_control_msg error -71 req 04 val 1100
[  447.066596][ T6209] pwc: recv_control_msg error -71 req 04 val 1200
[  447.083435][ T6209] pwc: Registered as video103.
[  447.091303][ T6209] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input15
[  447.119448][ T6209] usb 6-1: USB disconnect, device number 17
[  447.275826][T21788] netlink: 'syz.3.6841': attribute type 2 has an invalid length.
[  447.495163][T21800] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6847'.
[  447.594180][T21805] netlink: 'syz.3.6849': attribute type 1 has an invalid length.
[  447.594235][T21805] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6849'.
[  447.994009][T21830] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6861'.
[  448.081611][T21838] fuse: fd is not a fuse device
[  448.410787][T21860] xt_hashlimit: invalid interval
[  449.376141][   T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  449.423916][T21883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6882'.
[  449.453451][T21887] fuse: fd is not a fuse device
[  449.528018][   T10] usb 6-1: Using ep0 maxpacket: 8
[  449.528691][   T10] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  449.530905][   T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  449.530922][   T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  449.530948][   T10] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6
[  449.530964][   T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10
[  449.530979][   T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024
[  449.531003][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.538731][   T10] hub 6-1:1.0: bad descriptor, ignoring hub
[  449.538753][   T10] hub 6-1:1.0: probe with driver hub failed with error -5
[  449.539197][   T10] cdc_wdm 6-1:1.0: skipping garbage
[  449.539209][   T10] cdc_wdm 6-1:1.0: skipping garbage
[  449.554154][   T10] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22
[  449.849910][T21921] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6901'.
[  449.856103][   T10] usb 6-1: USB disconnect, device number 18
[  450.016120][   T12] net_ratelimit: 81 callbacks suppressed
[  450.016206][   T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  450.016246][   T12] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  450.135989][ T5467] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  450.136058][ T5467] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  450.266921][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  450.269875][ T5703] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  450.342771][T21938] : renamed from vlan0
[  450.377536][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  450.377875][T13628] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  450.486033][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  450.488964][T13628] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  451.069744][T21950] overlayfs: failed to clone upperpath
[  451.926861][T21961] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6913'.
[  452.690409][T21999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6934'.
[  452.993130][T22010] 9p: Bad value for 'rfdno'
[  453.159269][T22018] fuse: fd is not a fuse device
[  453.535175][T22034] TCP: TCP_TX_DELAY enabled
[  455.076063][ T5703] net_ratelimit: 76 callbacks suppressed
[  455.076129][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  455.076170][ T5703] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  455.186093][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  455.186206][T13628] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  455.298217][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  455.298270][T13628] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  455.436086][   T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  455.436160][   T12] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  455.546153][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  455.548766][T13628] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  455.811758][T22089] overlayfs: failed to clone upperpath
[  456.169554][T22116] loop5: detected capacity change from 0 to 2048
[  456.203128][T22116] NILFS (loop5): invalid segment: Magic number mismatch
[  456.208919][T22116] NILFS (loop5): trying rollback from an earlier position
[  456.216252][T22116] NILFS (loop5): recovery complete
[  456.225350][T22117] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  456.243104][T22116] NILFS (loop5): nilfs_sufile_do_free: segment 9 is already clean
[  456.919168][T22111] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  457.217961][   T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  457.366655][   T10] usb 6-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00
[  457.371099][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.096121][   T10] rtsx_usb 6-1:1.0: probe with driver rtsx_usb failed with error -110
[  458.143954][ T6212] usb 6-1: USB disconnect, device number 19
[  458.576228][ T6212] usb 6-1: new low-speed USB device number 20 using dummy_hcd
[  458.726575][ T6212] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  458.734571][ T6212] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  458.734667][ T6212] usb 6-1: config 1 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  458.734711][ T6212] usb 6-1: config 1 interface 0 has no altsetting 0
[  458.752412][ T6212] usb 6-1: string descriptor 0 read error: -22
[  458.752535][ T6212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  458.769824][T22178] netlink: 'syz.3.7015': attribute type 1 has an invalid length.
[  458.769882][T22178] iwpm_parse_nlmsg: Invalid attribute (msg type Register Pid response ret = -22)
[  458.942205][T22174] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7013'.
[  458.974952][ T6212] usb 6-1: USB disconnect, device number 20
[  459.219426][   T33] audit: type=1326 audit(459.113:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22188 comm="syz.0.7020" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00439e159 code=0x7ffc0000
[  459.219607][   T33] audit: type=1326 audit(459.113:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22188 comm="syz.0.7020" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00439e159 code=0x7ffc0000
[  459.235011][   T33] audit: type=1326 audit(459.123:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22188 comm="syz.0.7020" exe="/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb00439e159 code=0x7ffc0000
[  459.235308][   T33] audit: type=1326 audit(459.123:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22188 comm="syz.0.7020" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00439e159 code=0x7ffc0000
[  459.235339][   T33] audit: type=1326 audit(459.123:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22188 comm="syz.0.7020" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00439e159 code=0x7ffc0000
[  459.246719][   T33] audit: type=1326 audit(459.123:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22188 comm="syz.0.7020" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb00439e159 code=0x7ffc0000
[  459.248537][   T33] audit: type=1326 audit(459.143:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22188 comm="syz.0.7020" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00439e159 code=0x7ffc0000
[  459.250330][   T33] audit: type=1326 audit(459.143:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22188 comm="syz.0.7020" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00439e159 code=0x7ffc0000
[  459.251669][   T33] audit: type=1326 audit(459.143:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22188 comm="syz.0.7020" exe="/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fb00439e159 code=0x7ffc0000
[  459.251825][   T33] audit: type=1326 audit(459.143:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22188 comm="syz.0.7020" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00439e159 code=0x7ffc0000
[  459.504395][T22205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7028'.
[  460.086544][T13628] net_ratelimit: 81 callbacks suppressed
[  460.086629][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  460.086668][T13628] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  460.159339][T22252] FAULT_INJECTION: forcing a failure.
[  460.159339][T22252] name failslab, interval 1, probability 0, space 0, times 0
[  460.159417][T22252] CPU: 0 UID: 0 PID: 22252 Comm: syz.5.7049 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  460.159458][T22252] Tainted: [L]=SOFTLOCKUP
[  460.159465][T22252] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  460.159474][T22252] Call Trace:
[  460.159480][T22252]  <TASK>
[  460.159486][T22252]  dump_stack_lvl+0xe8/0x150
[  460.159512][T22252]  should_fail_ex+0x410/0x560
[  460.159535][T22252]  should_failslab+0xa8/0x100
[  460.159554][T22252]  ? __pfx_snmp_seq_show+0x10/0x10
[  460.159573][T22252]  __kmalloc_cache_noprof+0xa3/0x600
[  460.159598][T22252]  ? single_open+0x5a/0x240
[  460.159611][T22252]  ? single_open+0x5a/0x240
[  460.159625][T22252]  ? __pfx_get_proc_net+0x10/0x10
[  460.159643][T22252]  ? __pfx_snmp_seq_show+0x10/0x10
[  460.159662][T22252]  single_open+0x5a/0x240
[  460.159682][T22252]  single_open_net+0x74/0xc0
[  460.159701][T22252]  proc_reg_open+0x244/0x530
[  460.159718][T22252]  ? __pfx_proc_reg_open+0x10/0x10
[  460.159733][T22252]  do_dentry_open+0x816/0x1380
[  460.159756][T22252]  vfs_open+0x3b/0x340
[  460.159771][T22252]  ? path_openat+0x1428/0x1d60
[  460.159795][T22252]  path_openat+0x1443/0x1d60
[  460.159830][T22252]  do_file_open+0x23e/0x4a0
[  460.159856][T22252]  ? __pfx_do_file_open+0x10/0x10
[  460.159885][T22252]  ? __pfx_kfree_link+0x10/0x10
[  460.159913][T22252]  ? _raw_spin_unlock+0x28/0x50
[  460.159934][T22252]  ? alloc_fd+0x651/0x6c0
[  460.159959][T22252]  do_sys_openat2+0x115/0x200
[  460.160026][T22252]  ? __se_sys_futex+0x3a8/0x450
[  460.160048][T22252]  ? __pfx_do_sys_openat2+0x10/0x10
[  460.160072][T22252]  ? rcu_is_watching+0x16/0xb0
[  460.160093][T22252]  __x64_sys_openat+0x138/0x170
[  460.160114][T22252]  do_syscall_64+0x166/0x520
[  460.160140][T22252]  ? trace_irq_disable+0x3b/0x140
[  460.160156][T22252]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.160175][T22252]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.160192][T22252] RIP: 0033:0x7f2bf755e98e
[  460.160209][T22252] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  460.160224][T22252] RSP: 002b:00007f2bf83c4ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  460.160242][T22252] RAX: ffffffffffffffda RBX: 00007f2bf83c56c0 RCX: 00007f2bf755e98e
[  460.160254][T22252] RDX: 0000000000000002 RSI: 00007f2bf83c4f90 RDI: ffffffffffffff9c
[  460.160264][T22252] RBP: 00007f2bf763506b R08: 0000000000000000 R09: 0000000000000000
[  460.160274][T22252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  460.160283][T22252] R13: 00007f2bf7826038 R14: 00007f2bf7825fa0 R15: 00007ffc4485b378
[  460.160306][T22252]  </TASK>
[  460.205888][   T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  460.205913][   T12] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  460.230275][T22256] loop5: detected capacity change from 0 to 1024
[  460.270283][T22256] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  460.302920][T18528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  460.323657][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  460.324026][T13628] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  460.329024][T22261] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7053'.
[  460.446233][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  460.446295][T13628] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  460.520162][T22269] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7056'.
[  460.555982][   T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  460.556026][   T12] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  460.587804][ T6214] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  460.755821][ T6214] usb 6-1: Using ep0 maxpacket: 16
[  460.758657][ T6214] usb 6-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[  460.764761][ T6214] usb 6-1: config 0 has an invalid interface number: 126 but max is 0
[  460.764871][ T6214] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  460.764955][ T6214] usb 6-1: config 0 has no interface number 0
[  460.765007][ T6214] usb 6-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  460.765047][ T6214] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024
[  460.765113][ T6214] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  460.765154][ T6214] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 28524, setting to 1024
[  460.765193][ T6214] usb 6-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[  460.765232][ T6214] usb 6-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  460.765285][ T6214] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  460.806695][ T6214] usb 6-1: config 0 descriptor??
[  460.809241][T22263] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  460.811263][T22263] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  460.832181][ T6214] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  461.022295][ T6212] usb 6-1: USB disconnect, device number 21
[  461.339213][T22290] 9p: Bad value for 'rfdno'
[  461.464262][T22294] gretap3: entered allmulticast mode
[  461.469484][T22294] team0: Port device gretap3 added
[  461.472351][T22294] bridge0: port 4(team0) entered blocking state
[  461.472854][T22294] bridge0: port 4(team0) entered disabled state
[  461.473259][T22294] team0: entered allmulticast mode
[  461.473273][T22294] team_slave_0: entered allmulticast mode
[  461.476417][T22294] team_slave_1: entered allmulticast mode
[  461.485516][T22294] team0: left allmulticast mode
[  461.487175][T22294] team_slave_0: left allmulticast mode
[  461.487192][T22294] team_slave_1: left allmulticast mode
[  461.887233][ T6212] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  462.037901][ T6212] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  462.041750][ T6212] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  462.044593][ T6212] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253
[  462.049453][ T6212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  462.051978][ T6212] usb 6-1: Product: syz
[  462.053333][ T6212] usb 6-1: Manufacturer: syz
[  462.056455][ T6212] usb 6-1: SerialNumber: syz
[  462.066685][ T6212] usb 6-1: config 0 descriptor??
[  462.079681][ T6212] gspca_main: sunplus-2.14.0 probing 055f:c630
[  463.076944][ T6212] gspca_sunplus: reg_r err -71
[  463.077023][ T6212] sunplus 6-1:0.0: probe with driver sunplus failed with error -71
[  463.082789][ T6212] usb 6-1: USB disconnect, device number 22
[  463.946615][T22398] netlink: 168 bytes leftover after parsing attributes in process `syz.5.7117'.
[  464.203990][T22415] netlink: 'syz.3.7126': attribute type 62 has an invalid length.
[  464.324000][T22421] loop5: detected capacity change from 0 to 512
[  464.328910][T22421] EXT4-fs: Ignoring removed mblk_io_submit option
[  464.328971][T22421] EXT4-fs: Ignoring removed nobh option
[  464.328996][T22421] EXT4-fs: Ignoring removed nobh option
[  464.355002][T22421] EXT4-fs error (device loop5): ext4_xattr_inode_iget:473: comm syz.5.7129: EA inode 11 has unexpected i_nlink=1026 ref_count=1
[  464.355046][T22421] loop5: lost filesystem error report for type 5 error -117
[  464.359688][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  464.359703][    C0] EXT4-fs (loop5): initial error at time 464: ext4_xattr_inode_iget:473
[  464.359714][    C0] EXT4-fs (loop5): last error at time 464: ext4_xattr_inode_iget:473
[  464.378156][T22421] EXT4-fs (loop5): 1 orphan inode deleted
[  464.382743][T22421] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  464.411996][T18528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  465.138002][ T5703] net_ratelimit: 81 callbacks suppressed
[  465.138760][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  465.156002][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  465.176133][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  465.195878][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  465.215908][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  465.237072][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  465.256301][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  465.275946][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  465.296041][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  465.315935][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  465.790027][T22440] geneve1: entered promiscuous mode
[  466.004004][T22438] loop5: detected capacity change from 0 to 32768
[  466.021972][T22438] XFS (loop5): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  466.062234][T22462] netlink: 228 bytes leftover after parsing attributes in process `syz.0.7141'.
[  466.147112][T22438] XFS (loop5): Starting recovery (logdev: internal)
[  466.165976][   T12] netdevsim netdevsim4 eth9: set [1, 0] type 2 family 0 port 6081 - 0
[  466.166032][   T12] netdevsim netdevsim1 eth8: set [1, 0] type 2 family 0 port 6081 - 0
[  466.166084][   T12] netdevsim netdevsim1 eth7: set [1, 0] type 2 family 0 port 6081 - 0
[  466.166116][   T12] netdevsim netdevsim1 eth6: set [1, 0] type 2 family 0 port 6081 - 0
[  466.166148][   T12] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 6081 - 0
[  466.166180][   T12] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  466.166215][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  466.166278][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  466.166310][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  466.177155][ T5703] netdevsim netdevsim4 eth12: set [1, 0] type 2 family 0 port 6081 - 0
[  466.177190][ T5703] netdevsim netdevsim4 eth11: set [1, 0] type 2 family 0 port 6081 - 0
[  466.177215][ T5703] netdevsim netdevsim4 eth10: set [1, 0] type 2 family 0 port 6081 - 0
[  466.177818][T22438] XFS (loop5): Ending recovery (logdev: internal)
[  466.296009][T18528] XFS (loop5): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  466.406593][T22476] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  466.411794][T22476] bond9 (unregistering): Released all slaves
[  466.744741][T22502] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7156'.
[  467.666429][T22531] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7170'.
[  468.285017][T22546] xt_hashlimit: size too large, truncated to 1048576
[  468.845615][T22571] netlink: 'syz.3.7184': attribute type 1 has an invalid length.
[  468.848424][T22571] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.7184'.
[  468.851625][T22571] netlink: 'syz.3.7184': attribute type 1 has an invalid length.
[  468.854185][T22571] netlink: 2016 bytes leftover after parsing attributes in process `syz.3.7184'.
[  468.884491][T22569] 9pnet: p9_errstr2errno: server reported unknown error 0x0
[  469.144430][T22594] jffs2: notice: (22594) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  469.534390][T22612] xt_l2tp: v2 tid > 0xffff: 262144
[  470.185908][ T5467] net_ratelimit: 94 callbacks suppressed
[  470.185960][ T5467] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  470.186019][ T5467] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  470.296248][ T5467] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  470.296292][ T5467] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  470.406380][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  470.412202][T13628] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  470.516096][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  470.516142][T13628] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  470.627358][   T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  470.627415][   T12] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  470.662887][T22675] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7229'.
[  471.862194][T22694] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  473.149604][T22635] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  473.371005][T22724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7250'.
[  473.573015][   T33] kauditd_printk_skb: 28 callbacks suppressed
[  473.573088][   T33] audit: type=1800 audit(473.463:1602): pid=22740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7258" name="nullb0" dev="tmpfs" ino=2289 res=0 errno=0
[  473.743498][T22757] overlayfs: failed to clone upperpath
[  473.948229][T22762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7268'.
[  474.928545][T22812] fuse: fd is not a fuse device
[  475.034254][   T56] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  475.047456][ T6214] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  475.205889][ T6214] usb 6-1: Using ep0 maxpacket: 32
[  475.209222][ T6214] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  475.216003][ T6214] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.218651][ T6214] usb 6-1: Product: syz
[  475.220327][ T6214] usb 6-1: Manufacturer: syz
[  475.221953][ T6214] usb 6-1: SerialNumber: syz
[  475.226258][T13628] net_ratelimit: 80 callbacks suppressed
[  475.226364][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  475.226383][T13628] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  475.228507][ T6214] usb 6-1: config 0 descriptor??
[  475.239211][ T6214] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  475.336156][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  475.338142][T13628] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  475.446157][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  475.448880][T13628] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  475.556644][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  475.559803][T13628] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  475.623013][T22827] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7298'.
[  475.666038][   T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  475.668615][   T12] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  476.337596][T22863] CIFS: bad ip= option (1270.0.1)
[  476.337892][T22863] CIFS: Attempting to mount (null)
[  476.338526][T22863] CIFS: VFS: Error connecting to socket. Aborting operation.
[  476.338560][T22863] CIFS: VFS: cifs_mount failed w/return code = -22
[  477.263390][ T6214] gspca_ov534_9: reg_r err -71
[  477.467069][ T6214] gspca_ov534_9: Unknown sensor 0000
[  477.467199][ T6214] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22
[  477.478722][ T6214] usb 6-1: USB disconnect, device number 23
[  477.504182][T22916] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7334'.
[  477.505015][T22916] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7334'.
[  477.749361][T22922] all: renamed from bridge_slave_0 (while UP)
[  478.766772][T22944] netlink: 788 bytes leftover after parsing attributes in process `syz.0.7346'.
[  478.771352][T22944] bond0: entered allmulticast mode
[  478.773145][T22944] geneve4: entered allmulticast mode
[  479.028009][T22958] loop5: detected capacity change from 0 to 32768
[  479.037322][T22958] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.7351 (22958)
[  479.045196][T22958] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  479.049052][T22958] BTRFS info (device loop5): using sha256 checksum algorithm
[  479.086467][T22958] BTRFS info (device loop5): enabling ssd optimizations
[  479.089365][T22958] BTRFS info (device loop5): turning on async discard
[  479.091701][T22958] BTRFS info (device loop5): enabling free space tree
[  479.119847][T22958] BTRFS warning (device loop5): can't clear the free_space_tree,compat_ro:1 feature bits while mounted
[  479.134433][T18528] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  479.690336][T22999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7363'.
[  480.076640][    T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  480.226754][    T9] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00
[  480.231336][    T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  480.238840][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  480.238911][    T9] usb 6-1: Product: syz
[  480.239179][    T9] usb 6-1: Manufacturer: syz
[  480.258104][    T9] usb 6-1: selecting invalid altsetting 1
[  480.258995][    T9] dvb_ttusb_budget: ttusb_init_controller: error
[  480.259010][    T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  480.297323][    T9] DVB: Unable to find symbol cx22700_attach()
[  480.314694][    T9] DVB: Unable to find symbol tda10046_attach()
[  480.314744][    T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  480.339951][   T12] net_ratelimit: 82 callbacks suppressed
[  480.340034][   T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  480.340069][   T12] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  480.445975][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  480.446027][T13628] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  480.457195][T23013] dvb_ttusb_budget: failed urb submission (0: err = -2)!
[  480.457853][    T9] usb 6-1: USB disconnect, device number 24
[  480.566667][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  480.566728][T13628] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  480.686689][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  480.686733][T13628] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  480.796045][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  480.796101][ T5703] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  481.515349][T23046] veth0_virt_wifi: entered promiscuous mode
[  481.515839][ T5705] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  481.674865][ T5705] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  481.682082][ T5705] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  481.682135][ T5705] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  481.682166][ T5705] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  481.682203][ T5705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.701153][ T5705] usb 6-1: config 0 descriptor??
[  482.113854][ T5705] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0
[  482.114005][ T5705] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0
[  482.114020][ T5705] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0
[  482.114033][ T5705] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0
[  482.114046][ T5705] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0
[  482.114058][ T5705] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0
[  482.114071][ T5705] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0
[  482.114084][ T5705] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0
[  482.114096][ T5705] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0
[  482.114110][ T5705] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0
[  482.145071][ T5705] pyra 0003:1E7D:2CF6.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0
[  482.321721][ T6213] usb 6-1: USB disconnect, device number 25
[  482.749936][T23075] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  483.260825][T23097] lo: entered promiscuous mode
[  483.540015][T23101] loop5: detected capacity change from 0 to 32768
[  483.559297][T23101] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  483.594793][T23101] XFS (loop5): Ending clean mount
[  484.047910][T18528] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  484.597148][ T6213] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  484.926355][ T6213] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  484.930486][ T6213] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.935536][ T6213] usb 6-1: config 0 descriptor??
[  485.141616][ T6213] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  485.396134][ T5467] net_ratelimit: 77 callbacks suppressed
[  485.396198][ T5467] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  485.396227][ T5467] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  485.506206][ T5467] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  485.506248][ T5467] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  485.523848][ T6213] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2
[  485.523894][ T6213] [drm] Initialized udl on minor 2
[  485.624362][   T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  485.624506][   T12] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  485.679846][ T6213] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  485.706472][ T6213] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  485.712080][ T6213] usb 6-1: USB disconnect, device number 26
[  485.728132][   T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  485.731740][   T12] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  485.835929][   T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  485.836003][   T12] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  486.291128][T23176] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7438'.
[  486.304051][T23176] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7438'.
[  486.549490][T23192] loop5: detected capacity change from 0 to 4096
[  486.866425][T23207] RDS: rds_bind could not find a transport for fe80::26, load rds_tcp or rds_rdma?
[  487.235808][ T5705] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  487.252650][T23227] netlink: 'syz.3.7463': attribute type 10 has an invalid length.
[  487.252706][T23227] syz_tun: entered promiscuous mode
[  487.254960][T23227] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  487.293190][T23229] netlink: 'syz.3.7464': attribute type 1 has an invalid length.
[  487.293240][T23229] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7464'.
[  487.391868][ T5705] usb 6-1: Using ep0 maxpacket: 16
[  487.392771][ T5705] usb 6-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[  487.394213][ T5705] usb 6-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  487.394242][ T5705] usb 6-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  487.394263][ T5705] usb 6-1: config 0 interface 0 has no altsetting 0
[  487.394292][ T5705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.413743][ T5705] usb 6-1: config 0 descriptor??
[  487.840518][ T5705] kye 0003:0458:5015.0013: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  487.840902][ T5705] hid_parser_main: 14 callbacks suppressed
[  487.842259][ T5705] kye 0003:0458:5015.0013: unknown main item tag 0x0
[  487.842306][ T5705] kye 0003:0458:5015.0013: unknown main item tag 0x0
[  487.842517][ T5705] kye 0003:0458:5015.0013: unknown main item tag 0x0
[  487.842531][ T5705] kye 0003:0458:5015.0013: unknown main item tag 0x0
[  487.842544][ T5705] kye 0003:0458:5015.0013: unknown main item tag 0x0
[  487.842556][ T5705] kye 0003:0458:5015.0013: unknown main item tag 0x0
[  487.842569][ T5705] kye 0003:0458:5015.0013: unknown main item tag 0x0
[  487.842581][ T5705] kye 0003:0458:5015.0013: unknown main item tag 0x0
[  487.842594][ T5705] kye 0003:0458:5015.0013: unknown main item tag 0x0
[  487.842606][ T5705] kye 0003:0458:5015.0013: unknown main item tag 0x0
[  487.858003][ T5705] kye 0003:0458:5015.0013: hidraw0: USB HID v0.81 Device [HID 0458:5015] on usb-dummy_hcd.5-1/input0
[  487.858036][ T5705] kye 0003:0458:5015.0013: tablet-enabling feature report not found
[  487.858049][ T5705] kye 0003:0458:5015.0013: tablet enabling failed
[  488.039743][ T5705] usb 6-1: USB disconnect, device number 27
[  488.644220][T23275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7482'.
[  488.652257][T23275] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7482'.
[  488.702987][T23277] loop5: detected capacity change from 0 to 4096
[  488.709448][T23277] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  488.722815][T23279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7484'.
[  488.793634][T23281] xt_hashlimit: max too large, truncated to 1048576
[  489.109367][T23300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7491'.
[  489.586586][T23341] loop5: detected capacity change from 0 to 512
[  489.595543][T23341] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  489.613169][T23341] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.7511: bad orphan inode 131083
[  489.613214][T23341] loop5: lost filesystem error report for type 5 error -117
[  489.616948][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  489.616962][    C1] EXT4-fs (loop5): initial error at time 489: ext4_orphan_get:1429
[  489.616973][    C1] EXT4-fs (loop5): last error at time 489: ext4_orphan_get:1429
[  489.630400][T23341] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  489.668423][T18528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  489.788533][T23349] loop5: detected capacity change from 0 to 4096
[  489.795442][T23349] ntfs3(loop5): ino=0, mi_enum_attr
[  489.823952][T23349] ntfs3(loop5): ino=0, mi_enum_attr
[  489.826869][T23349] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  489.830065][T23349] ntfs3(loop5): ino=0, mi_enum_attr
[  490.061255][T23366] /dev/nullb0: Can't open blockdev
[  490.119953][T23370] loop5: detected capacity change from 0 to 512
[  490.139663][T23370] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.7525: iget: bad i_size value: 38620345925642
[  490.139736][T23370] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  490.140134][T23370] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.7525: couldn't read orphan inode 15 (err -117)
[  490.140157][T23370] loop5: lost filesystem error report for type 5 error -117
[  490.142850][T23370] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  490.148721][T23372] bridge0: entered promiscuous mode
[  490.148763][T23372] bridge0: entered allmulticast mode
[  490.351082][T18528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  490.394394][T23382] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7529'.
[  490.458396][ T7168] IPVS: starting estimator thread 0...
[  490.487884][ T5467] net_ratelimit: 83 callbacks suppressed
[  490.490756][ T5467] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  490.494305][ T5467] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  490.565938][T23389] IPVS: using max 65 ests per chain, 156000 per kthread
[  490.595911][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  490.595982][ T5703] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  490.705806][ T5467] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  490.705884][ T5467] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  490.816184][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  490.816763][ T5703] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  490.925893][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  490.925948][ T5703] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  491.367969][T23430] netlink: 88 bytes leftover after parsing attributes in process `syz.5.7553'.
[  491.482757][T23440] kAFS: No cell specified
[  491.773332][   T56] Bluetooth: hci2: unexpected event for opcode 0x1405
[  491.909456][T23470] loop5: detected capacity change from 0 to 256
[  492.204746][T23484] loop5: detected capacity change from 0 to 512
[  492.214994][T23484] EXT4-fs: Ignoring removed bh option
[  492.221134][T23484] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  492.227199][T23484] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  492.230741][T23484] EXT4-fs (loop5): orphan cleanup on readonly fs
[  492.246958][T23484] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.7578: attempt to clear invalid blocks 1024 len 1
[  492.247041][T23484] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  492.255714][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  492.255764][    C0] EXT4-fs (loop5): initial error at time 492: ext4_clear_blocks:876: inode 11
[  492.255839][    C0] EXT4-fs (loop5): last error at time 492: ext4_clear_blocks:876: inode 11
[  492.257073][T23484] EXT4-fs (loop5): Remounting filesystem read-only
[  492.258534][T23484] EXT4-fs (loop5): 1 truncate cleaned up
[  492.259430][T23484] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  492.314336][T18528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  492.434081][T23494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7583'.
[  494.860177][T23575] netlink: 'syz.3.7620': attribute type 1 has an invalid length.
[  494.894401][T23575] 8021q: adding VLAN 0 to HW filter on device bond9
[  494.915442][T23575] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  494.939043][T23575] bond9: entered promiscuous mode
[  494.939084][T23575] bond9: entered allmulticast mode
[  495.022548][T23586] loop5: detected capacity change from 0 to 128
[  495.588112][T13628] net_ratelimit: 83 callbacks suppressed
[  495.588230][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  495.588272][T13628] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  495.608636][T23639] fuse: fd is not a fuse device
[  495.699473][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  495.699544][T13628] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  495.815957][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  495.816010][ T5703] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  495.927221][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  495.927274][T13628] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  496.014855][T23664] netlink: 'syz.5.7658': attribute type 1 has an invalid length.
[  496.047277][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  496.047330][ T5703] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  496.201303][T23670] jffs2: notice: (23670) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  496.466908][   T56] Bluetooth: hci2: unexpected event for opcode 0x0809
[  496.555922][ T6214] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  496.706000][ T6214] usb 6-1: Using ep0 maxpacket: 8
[  496.708939][ T6214] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  496.714217][ T6214] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  496.719627][ T6214] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  496.719654][ T6214] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  496.719671][ T6214] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  496.719707][ T6214] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.948173][ T6214] usb 6-1: GET_CAPABILITIES returned 0
[  496.950570][ T6214] usbtmc 6-1:16.0: can't read capabilities
[  497.068728][T23703] /dev/nullb0: Can't lookup blockdev
[  497.097445][T23705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7677'.
[  497.151696][T23677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  497.151969][T23677] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  497.160493][    T9] usb 6-1: USB disconnect, device number 28
[  497.815631][T23731] loop5: detected capacity change from 0 to 512
[  497.850091][T23731] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  497.910911][T18528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  498.041680][T23749] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7697'.
[  498.043664][T23748] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7696'.
[  498.059566][T23751] netlink: 392 bytes leftover after parsing attributes in process `syz.0.7698'.
[  498.129318][T23756] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7699'.
[  498.132258][T23756] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7699'.
[  498.441751][T23780] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7712'.
[  498.585909][ T5705] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  498.736589][ T5705] usb 6-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00
[  498.737911][ T5705] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  498.737962][ T5705] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[  498.737980][ T5705] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64
[  498.738001][ T5705] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  498.738017][ T5705] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  498.738047][ T5705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  498.741121][T23774] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  498.741181][T23774] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  498.741294][T23774] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  498.742974][ T5705] mos7720 6-1:1.0: Moschip 2 port adapter converter detected
[  498.948388][ T5705] usb 6-1: mos7720: usb_control_msg() failed: -71
[  498.964480][ T5705] usb 6-1: Moschip 2 port adapter converter now attached to ttyUSB0
[  498.973434][ T5705] usb 6-1: Moschip 2 port adapter converter now attached to ttyUSB1
[  499.026413][ T5705] usb 6-1: USB disconnect, device number 29
[  499.026485][    C0] usb 6-1: mos7720_interrupt_callback - Error -19 submitting control urb
[  499.045539][ T5705] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0
[  499.057081][ T5705] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1
[  499.057612][ T5705] mos7720 6-1:1.0: device disconnected
[  499.098963][T23789] netlink: 'syz.3.7715': attribute type 23 has an invalid length.
[  499.317379][   T56] Bluetooth: hci2: unexpected event for opcode 0x042e
[  499.704036][T23806] input: syz0 as /devices/virtual/input/input16
[  499.918437][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  500.013787][T23808] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  500.140191][T23820] netlink: 'syz.5.7728': attribute type 16 has an invalid length.
[  500.147548][T23820] netlink: 'syz.5.7728': attribute type 3 has an invalid length.
[  500.150254][T23820] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.7728'.
[  500.515060][T23847] input: syz0 as /devices/virtual/input/input17
[  500.623631][T13628] net_ratelimit: 81 callbacks suppressed
[  500.623724][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  500.623860][T13628] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  500.732884][   T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  500.733277][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  500.845952][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  500.848717][T13628] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  500.956303][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  500.956364][T13628] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  501.066000][   T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  501.066059][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  501.290442][T23881] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7756'.
[  501.290499][T23881] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7756'.
[  501.388086][    T9] hid_parser_main: 26 callbacks suppressed
[  501.388277][    T9] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0
[  501.432963][    T9] hid-generic 0000:0000:0000.0014: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  501.515588][T23893] tipc: Failed to remove unknown binding: 66,0,0/0:2676129065/2676129067
[  501.522822][T23893] tipc: Failed to remove unknown binding: 66,0,0/0:2676129065/2676129066
[  501.527801][T23893] tipc: Failed to remove unknown binding: 66,0,0/0:2676129065/2676129067
[  501.531301][T23893] tipc: Failed to remove unknown binding: 66,0,0/0:2676129065/2676129066
[  501.547071][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  501.547156][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  501.820670][T23911] netlink: 'syz.3.7770': attribute type 1 has an invalid length.
[  501.841929][T23911] 8021q: adding VLAN 0 to HW filter on device bond10
[  501.849949][T23911] lo: entered allmulticast mode
[  501.852824][T23911] bond10: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  501.861519][T23911] 8021q: adding VLAN 0 to HW filter on device bond10
[  501.875394][T23911] bond10: (slave lo): making interface the new active one
[  501.878585][T23911] bond10: (slave lo): Enslaving as an active interface with an up link
[  502.416584][T23932] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7779'.
[  502.650650][T23947] 9p: Bad value for 'wfdno'
[  502.910955][T23965] CIFS: VFS: UNC: missing delimiter between hostname and share name
[  502.914703][T23965] CIFS: VFS: Malformed UNC in devname
[  502.966696][   T33] audit: type=1326 audit(502.863:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23968 comm="syz.5.7796" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2bf759e159 code=0x0
[  503.183824][T23980] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7800'.
[  503.691892][   T56] Bluetooth: hci2: unexpected event for opcode 0x0c22
[  505.391486][T24053] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7834'.
[  505.707045][ T5703] net_ratelimit: 108 callbacks suppressed
[  505.709306][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  505.712659][ T5703] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  505.825783][ T5467] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  505.825834][ T5467] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  505.935916][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  505.936005][ T5703] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  506.056027][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  506.056096][ T5703] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  506.444518][ T5467] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  506.444571][ T5467] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  507.339776][T24109] netlink: 'syz.5.7859': attribute type 2 has an invalid length.
[  507.433478][T24115] ip6t_srh: unknown srh match flags  4000
[  508.036326][T24136] syz.5.7872 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  508.261578][T24152] jffs2: notice: (24152) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  509.167661][T24195] netlink: 'syz.0.7899': attribute type 10 has an invalid length.
[  509.171583][T24195] team0: Port device dummy0 added
[  509.274544][T24203] netlink: 'syz.5.7902': attribute type 1 has an invalid length.
[  509.393133][T24215] loop5: detected capacity change from 0 to 1024
[  509.395077][T24215] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  509.426383][T24219] netlink: 'syz.0.7911': attribute type 10 has an invalid length.
[  509.426439][T24219] macvlan1: entered promiscuous mode
[  509.426472][T24219] macvlan1: entered allmulticast mode
[  509.669220][T24237] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  510.001386][T24254] xt_l2tp: missing protocol rule (udp|l2tpip)
[  510.458810][T24263] overlayfs: failed to clone upperpath
[  510.464263][T24263] overlayfs: failed to clone upperpath
[  510.542333][T24270] loop5: detected capacity change from 0 to 256
[  510.544824][T24270] exfat: Deprecated parameter 'utf8'
[  510.544861][T24270] exfat: Deprecated parameter 'utf8'
[  510.552595][T24270] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  510.715832][T13628] net_ratelimit: 96 callbacks suppressed
[  510.715897][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  510.715926][T13628] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  510.736107][T24280] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7940'.
[  510.828199][   T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  510.828238][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  510.995454][   T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  510.995499][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  511.168088][    T9] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  511.172440][   T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  511.172456][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  511.276163][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  511.276287][   T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  511.316371][    T9] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  511.320169][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.337870][    T9] usb 6-1: config 0 descriptor??
[  511.345253][    T9] cp210x 6-1:0.0: cp210x converter detected
[  511.997401][    T9] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71
[  512.007289][    T9] cp210x 6-1:0.0: GPIO initialisation failed: -71
[  512.017213][    T9] usb 6-1: cp210x converter now attached to ttyUSB0
[  512.022703][    T9] usb 6-1: USB disconnect, device number 30
[  512.034660][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  512.038787][    T9] cp210x 6-1:0.0: device disconnected
[  512.486802][T24351] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7973'.
[  512.490614][T24351] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7973'.
[  513.768108][T24386] loop5: detected capacity change from 0 to 32768
[  513.788453][T24386] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  513.830377][T24386] XFS (loop5): Ending clean mount
[  513.977302][T18528] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  515.645339][T24473] autofs: Bad value for 'fd'
[  515.786240][T13628] net_ratelimit: 105 callbacks suppressed
[  515.786305][T13628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  515.808749][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  515.808811][ T5703] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  515.865798][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  515.866211][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  515.884175][T24493] netlink: 'syz.5.8032': attribute type 7 has an invalid length.
[  515.887049][T24492] IPVS: length: 153 != 24
[  515.888824][T24493] netlink: 'syz.5.8032': attribute type 5 has an invalid length.
[  515.891637][T24493] netlink: 17 bytes leftover after parsing attributes in process `syz.5.8032'.
[  515.916020][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  515.916073][ T5703] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  515.940060][   T33] audit: type=1326 audit(515.833:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24495 comm="syz.5.8034" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf759e159 code=0x7ffc0000
[  515.948608][   T33] audit: type=1326 audit(515.843:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24495 comm="syz.5.8034" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf759e159 code=0x7ffc0000
[  515.960093][   T33] audit: type=1326 audit(515.843:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24495 comm="syz.5.8034" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf759e159 code=0x7ffc0000
[  515.982685][   T33] audit: type=1326 audit(515.843:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24495 comm="syz.5.8034" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf759e159 code=0x7ffc0000
[  515.982711][   T33] audit: type=1326 audit(515.853:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24495 comm="syz.5.8034" exe="/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f2bf759e159 code=0x7ffc0000
[  515.982730][   T33] audit: type=1326 audit(515.853:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24495 comm="syz.5.8034" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf759e159 code=0x7ffc0000
[  515.982750][   T33] audit: type=1326 audit(515.853:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24495 comm="syz.5.8034" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf759e159 code=0x7ffc0000
[  515.982767][   T33] audit: type=1326 audit(515.853:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24495 comm="syz.5.8034" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf759e159 code=0x7ffc0000
[  515.982784][   T33] audit: type=1326 audit(515.853:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24495 comm="syz.5.8034" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf759e159 code=0x7ffc0000
[  515.982802][   T33] audit: type=1326 audit(515.853:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24495 comm="syz.5.8034" exe="/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f2bf759e159 code=0x7ffc0000
[  516.023697][T24498] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  516.023697][T24498] The task syz.0.8035 (24498) triggered the difference, watch for misbehavior.
[  516.028823][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  516.028842][ T5703] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  516.115951][ T5467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.640363][T24533] device-mapper: table: 248:0: ultipath: unknown target type
[  516.643607][T24533] device-mapper: ioctl: error adding target to table
[  516.647804][T24533] device-mapper: ioctl: The device has no table.
[  516.651741][T24533] device-mapper: ioctl: The device has no table.
[  516.776500][T24541] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8054'.
[  516.776624][T24541] netlink: 'syz.5.8054': attribute type 4 has an invalid length.
[  518.206243][    T9] usb 6-1: new full-speed USB device number 31 using dummy_hcd
[  518.359731][    T9] usb 6-1: not running at top speed; connect to a high speed hub
[  518.362356][    T9] usb 6-1: New USB device found, idVendor=0e41, idProduct=4151, bcdDevice= 0.40
[  518.366012][    T9] usb 6-1: config 0 has no interfaces?
[  518.370133][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.372758][    T9] usb 6-1: Product: syz
[  518.374206][    T9] usb 6-1: Manufacturer: syz
[  518.376912][    T9] usb 6-1: SerialNumber: syz
[  518.381469][    T9] usb 6-1: config 0 descriptor??
[  518.598914][ T6213] usb 6-1: USB disconnect, device number 31
[  519.919050][T24673] syz_tun: entered allmulticast mode
[  519.926529][T24672] syz_tun: left allmulticast mode
[  520.189360][T24679] loop5: detected capacity change from 0 to 256
[  520.208180][T24679] FAT-fs (loop5): IO charset none not found
[  520.729085][T24726] fuse: fd is not a fuse device
[  520.732625][T24726] overlayfs: failed to clone upperpath
[  520.895844][ T5703] net_ratelimit: 107 callbacks suppressed
[  520.895915][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  520.895944][ T5703] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  521.005910][   T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  521.005977][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  521.065825][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.069513][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.101210][T24762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8156'.
[  521.116451][   T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  521.116492][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  521.226654][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  521.226730][ T5703] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  521.377443][T24778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8158'.
[  521.378221][T24778] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8158'.
[  521.378345][T24778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8158'.
[  521.378370][T24778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8158'.
[  521.387667][T24778] sctp: [Deprecated]: syz.3.8158 (pid 24778) Use of int in max_burst socket option deprecated.
[  521.387667][T24778] Use struct sctp_assoc_value instead
[  521.874570][T24783] loop5: detected capacity change from 0 to 32768
[  521.881273][T24783] BTRFS error: failed to parse compression option 'zlib:nobarrier'
[  522.073125][T24786] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8165'.
[  522.181812][T24790] fuse: fd is not a fuse device
[  522.288442][T24797] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8171'.
[  522.575240][T24811] loop5: detected capacity change from 0 to 8192
[  523.098578][T24849] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8193'.
[  523.098639][T24849] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8193'.
[  523.492863][T24890] CIFS: Attempting to mount //127.0.0.1/share
[  523.499344][T24890] CIFS: VFS: Error connecting to socket. Aborting operation.
[  523.499418][T24890] CIFS: VFS: cifs_mount failed w/return code = -111
[  524.906212][    T9] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  525.176750][    T9] usb 6-1: Using ep0 maxpacket: 16
[  525.179411][    T9] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  525.180542][    T9] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[  525.180584][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  525.180620][    T9] usb 6-1: config 0 has no interface number 0
[  525.183472][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  525.183515][    T9] usb 6-1: Product: syz
[  525.183547][    T9] usb 6-1: Manufacturer: syz
[  525.183580][    T9] usb 6-1: SerialNumber: syz
[  525.189776][    T9] usb 6-1: config 0 descriptor??
[  525.241232][    T9] uvcvideo 6-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  525.241301][    T9] uvcvideo 6-1:0.105: No valid video chain found.
[  525.422639][    T9] usb 6-1: USB disconnect, device number 32
[  525.459897][T24935] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8232'.
[  526.008284][T10969] net_ratelimit: 433 callbacks suppressed
[  526.008337][T10969] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  526.008367][T10969] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  526.023157][T24955] IPv6: sit1: Disabled Multicast RS
[  526.025620][T24955] sit1: entered allmulticast mode
[  526.117870][T10969] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  526.117915][T10969] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  526.232057][T10969] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  526.232121][T10969] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  526.265822][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.266079][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.335936][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.336026][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  526.369481][T24970] __nla_validate_parse: 1 callbacks suppressed
[  526.371844][T24970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8249'.
[  526.430438][T24963] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  526.599335][T24987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8256'.
[  526.599388][T24987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8256'.
[  528.206241][ T6213] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  528.375813][ T6213] usb 6-1: Using ep0 maxpacket: 32
[  528.376926][ T6213] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  528.378467][ T6213] usb 6-1: config 0 has an invalid interface number: 146 but max is 0
[  528.378490][ T6213] usb 6-1: config 0 has no interface number 0
[  528.378522][ T6213] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  528.378538][ T6213] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  528.378559][ T6213] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  528.378580][ T6213] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  528.378637][ T6213] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[  528.378657][ T6213] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  528.378674][ T6213] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  528.378692][ T6213] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  528.378708][ T6213] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  528.385144][ T6213] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  528.385168][ T6213] usb 6-1: Product: syz
[  528.385181][ T6213] usb 6-1: Manufacturer: syz
[  528.385193][ T6213] usb 6-1: SerialNumber: syz
[  528.396741][ T6213] usb 6-1: config 0 descriptor??
[  528.399034][T25042] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  528.402961][ T6213] usb 6-1: can only deal with bulk endpoints; endpoint 1 is not bulk.
[  528.402981][ T6213] usb 6-1: couldn't find an output bulk endpoint. Bailing out.
[  528.430349][   T56] Bluetooth: hci2: command 0x0406 tx timeout
[  528.517089][T25057] overlayfs: failed to clone upperpath
[  528.608623][ T6213] usb 6-1: USB disconnect, device number 33
[  528.799330][T25076] netlink: 'syz.3.8298': attribute type 12 has an invalid length.
[  528.799406][T25076] netlink: 'syz.3.8298': attribute type 29 has an invalid length.
[  528.799853][T25076] netlink: 148 bytes leftover after parsing attributes in process `syz.3.8298'.
[  529.549577][T25112] virtio-fs: tag </dev/md0> not found
[  530.102690][   T56] Bluetooth: hci2: unexpected event for opcode 0x080d
[  530.431451][    T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  530.687654][    T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  530.755500][T25158] netlink: 'syz.3.8332': attribute type 1 has an invalid length.
[  530.760043][T25158] netlink: 'syz.3.8332': attribute type 1 has an invalid length.
[  531.071320][ T5467] net_ratelimit: 134 callbacks suppressed
[  531.071410][ T5467] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  531.071439][ T5467] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  531.071540][ T5467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  531.071690][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  531.175914][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  531.179487][T13628] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  531.199954][    T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  531.286574][ T5467] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  531.287736][ T5467] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  531.396274][T13628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  531.399462][T13628] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  531.465786][T25145] ceph: No mds server is up or the cluster is laggy
[  531.875598][T25205] macvlan0: entered promiscuous mode
[  533.317702][T25249] loop5: detected capacity change from 0 to 2048
[  533.324652][   T56] Bluetooth: hci2: unexpected event for opcode 0x0c5b
[  533.334577][T25254] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  533.353837][T25256] netlink: 'syz.0.8375': attribute type 2 has an invalid length.
[  533.353934][T25256] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8375'.
[  533.366150][T25249] syz.5.8372: attempt to access beyond end of device
[  533.366150][T25249] loop5: rw=8388608, sector=2198922592328, nr_sectors = 2 limit=2048
[  533.380136][T25258] netlink: 'syz.0.8376': attribute type 1 has an invalid length.
[  533.386928][T25249] NILFS (loop5): I/O error reading meta-data file (ino=6, block-offset=1)
[  533.410288][T25254] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  533.410342][T25254] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4)
[  533.452573][T25254] Remounting filesystem read-only
[  533.477977][T25264] loop5: detected capacity change from 0 to 1024
[  533.479609][T25264] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  533.504635][T25264] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  533.548794][T18528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  533.648505][   T33] kauditd_printk_skb: 140 callbacks suppressed
[  533.648570][   T33] audit: type=1326 audit(533.543:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25274 comm="syz.0.8383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00439e159 code=0x7ffc0000
[  533.648614][   T33] audit: type=1326 audit(533.543:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25274 comm="syz.0.8383" exe="/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fb00439e159 code=0x7ffc0000
[  533.648657][   T33] audit: type=1326 audit(533.543:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25274 comm="syz.0.8383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00439e159 code=0x7ffc0000
[  533.648701][   T33] audit: type=1326 audit(533.543:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25274 comm="syz.0.8383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00439e159 code=0x7ffc0000
[  533.761756][T25281] loop5: detected capacity change from 0 to 2048
[  533.763149][T25281] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  533.775094][T11816] udevd[11816]: incorrect nilfs2 checksum on /dev/loop5
[  533.776951][T25284] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  533.940238][T25294] netlink: 'syz.0.8392': attribute type 29 has an invalid length.
[  533.943375][T25294] netlink: 'syz.0.8392': attribute type 29 has an invalid length.
[  534.307590][T25288] loop5: detected capacity change from 0 to 131072
[  534.310280][T25288] F2FS-fs (loop5): Invalid segment/section count (458783, 24 x 150994945)
[  534.310297][T25288] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  534.329538][T25288] F2FS-fs (loop5): invalid crc value
[  534.366794][T25288] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  534.370607][T25288] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  534.370667][T25288] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  534.617373][T25325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  535.028887][T25341] pimreg3: entered allmulticast mode
[  535.299394][T25360] bridge4: entered promiscuous mode
[  535.351458][T25347] loop5: detected capacity change from 0 to 40427
[  535.352470][T25347] F2FS-fs: heap/no_heap options were deprecated
[  535.356309][T25347] F2FS-fs (loop5): build fault injection rate: 19
[  535.356325][T25347] F2FS-fs (loop5): build fault injection type: 0x3bfe8c
[  535.356841][T25347] F2FS-fs (loop5): invalid crc value
[  535.380080][T25347] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9a1/0x1820
[  535.435523][T25347] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[  535.447512][T25347] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  535.454852][T25347] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  535.501371][T25347] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0
[  535.532131][T25347] syz.5.8416: attempt to access beyond end of device
[  535.532131][T25347] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  535.560266][T25347] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of do_checkpoint+0x233b/0x3f20
[  535.580079][T25347] F2FS-fs (loop5): Stopped filesystem due to reason: 0
[  535.590906][T25385] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  535.808189][    T9] kernel read not supported for file /swaps (pid: 9 comm: kworker/0:0)
[  535.908223][T25402] loop5: detected capacity change from 0 to 4096
[  535.929056][T25402] EXT4-fs (loop5): Test dummy encryption mode enabled
[  535.936859][T25402] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  535.982742][T18528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  536.085837][ T5703] net_ratelimit: 111 callbacks suppressed
[  536.085907][ T5703] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  536.085948][ T5703] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  536.121421][   T33] audit: type=1326 audit(537.012:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25411 comm="syz.5.8446" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2bf759e159 code=0x0
[  536.205886][ T5467] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  536.205929][ T5467] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  536.286578][ T5467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.325826][T10969] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  536.325870][T10969] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  536.431708][T25433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8456'.
[  536.431762][T25433] netlink: 31 bytes leftover after parsing attributes in process `syz.0.8456'.
[  536.431790][T25433] netlink: 'syz.0.8456': attribute type 3 has an invalid length.
[  536.431813][T25433] netlink: 'syz.0.8456': attribute type 2 has an invalid length.
[  536.431835][T25433] netlink: 31 bytes leftover after parsing attributes in process `syz.0.8456'.
[  536.445599][ T5467] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  536.445746][ T5467] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  536.556867][T10969] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  537.385790][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  538.615280][T25505] bridge0: port 3(netdevsim0) entered blocking state
[  538.616400][T25505] bridge0: port 3(netdevsim0) entered disabled state
[  538.616499][T25505] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  538.633260][T25505] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  538.665251][T25505] netlink: 'syz.5.8488': attribute type 10 has an invalid length.
[  538.683443][T25505] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  538.783095][T25513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  538.793379][T25513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  539.291582][T25517] loop5: detected capacity change from 0 to 512
[  539.302250][T25517] EXT4-fs: Ignoring removed oldalloc option
[  539.320783][T25517] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  539.329234][T25517] EXT4-fs (loop5): filesystem is read-only
[  539.329273][T25517] EXT4-fs (loop5): orphan cleanup on readonly fs
[  539.346714][T25517] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.8494: bg 0: block 64: padding at end of block bitmap is not set
[  539.351519][T25517] loop5: lost filesystem error report for type 5 error -117
[  539.355761][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  539.355798][    C1] EXT4-fs (loop5): initial error at time 540: ext4_validate_block_bitmap:445
[  539.355841][    C1] EXT4-fs (loop5): last error at time 540: ext4_validate_block_bitmap:445
[  539.366514][T25517] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  539.374573][T25517] loop5: lost filesystem error report for type 5 error -117
[  539.375070][T25517] EXT4-fs (loop5): 1 orphan inode deleted
[  539.383082][T25517] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  539.397839][T25520] 9p: Unknown Cache mode or invalid value 777777777777777777
[  539.418628][T18528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  539.581951][T25535] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  539.634815][   T33] audit: type=1326 audit(540.522:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25540 comm="syz.0.8505" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb00439e159 code=0x0
[  539.645053][   T33] audit: type=1800 audit(540.532:1760): pid=25543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8504" name="syzkaller0" dev="sda1" ino=1946 res=0 errno=0
[  539.980139][T25561] overlayfs: failed to clone lowerpath
[  540.221376][T25567] netlink: 'syz.0.8515': attribute type 3 has an invalid length.
[  540.221425][T25567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8515'.
[  540.240439][T25568] syz_tun: entered allmulticast mode
[  540.243523][T25566] syz_tun: left allmulticast mode
[  541.116561][T10969] net_ratelimit: 107 callbacks suppressed
[  541.116640][T10969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.116792][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.124190][ T5467] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  541.128445][ T5467] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  541.236921][   T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  541.240275][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  541.346237][   T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  541.346335][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  541.456631][   T12] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  541.456853][   T12] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  541.760097][T25621] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  542.246399][ T6213] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  542.396022][ T6213] usb 6-1: Using ep0 maxpacket: 32
[  542.398301][ T6213] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  542.402328][ T6213] usb 6-1: config 0 has an invalid interface number: 188 but max is 0
[  542.405094][ T6213] usb 6-1: config 0 has no interface number 0
[  542.407281][ T6213] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  542.413058][ T6213] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.416359][ T6213] usb 6-1: Product: syz
[  542.418189][ T6213] usb 6-1: Manufacturer: syz
[  542.420253][ T6213] usb 6-1: SerialNumber: syz
[  542.423984][ T6213] usb 6-1: config 0 descriptor??
[  542.428143][T25637] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  542.634985][T25637] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  542.847764][ T6213] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  542.852200][ T6213] asix 6-1:0.188: probe with driver asix failed with error -61
[  542.862361][ T6213] usb 6-1: USB disconnect, device number 34
[  543.701144][T25704] netlink: 'syz.5.8577': attribute type 4 has an invalid length.
[  543.898461][T25718] loop5: detected capacity change from 0 to 512
[  543.900237][T25718] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  543.913309][T25719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8585'.
[  543.918437][T25718] EXT4-fs (loop5): 1 truncate cleaned up
[  543.932448][T25718] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  543.985257][T18528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  544.150010][T25728] loop5: detected capacity change from 0 to 1024
[  544.211746][T25731] netlink: 'syz.5.8589': attribute type 34 has an invalid length.
[  544.211793][T25731] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8589'.
[  546.135763][ T5467] net_ratelimit: 109 callbacks suppressed
[  546.138572][ T5467] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  546.141427][ T5467] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  546.246877][   T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  546.246950][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  546.346709][T20161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.347024][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.365869][   T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  546.365932][   T13] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  546.420207][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.475863][   T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  547.135806][ T6214] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  547.285779][ T6214] usb 6-1: Using ep0 maxpacket: 16
[  547.287272][ T6214] usb 6-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00
[  547.288785][ T6214] usb 6-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11
[  547.288811][ T6214] usb 6-1: config 0 interface 0 has no altsetting 0
[  547.288838][ T6214] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  547.293458][ T6214] usb 6-1: config 0 descriptor??
[  547.314200][T25821] process '/newroot/2932/file0' started with executable stack
[  547.352455][T25824] netlink: 'syz.0.8628': attribute type 21 has an invalid length.
[  547.352642][T25824] netlink: 'syz.0.8628': attribute type 6 has an invalid length.
[  547.352656][T25824] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8628'.
[  547.692384][T25846] overlayfs: failed to clone upperpath
[  547.720668][ T6214] bigben 0003:146B:0902.0015: unexpected rdesc, please submit for review
[  547.721201][ T6214] bigben 0003:146B:0902.0015: unknown main item tag 0x3
[  547.721219][ T6214] bigben 0003:146B:0902.0015: unknown main item tag 0x3
[  547.721232][ T6214] bigben 0003:146B:0902.0015: unexpected long global item
[  547.721548][ T6214] bigben 0003:146B:0902.0015: parse failed
[  547.721593][ T6214] bigben 0003:146B:0902.0015: probe with driver bigben failed with error -22
[  547.734778][T25848] ip6t_srh: unknown srh invflags 4000
[  547.798520][T25855] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8639'.
[  547.798587][T25855] netlink: 'syz.0.8639': attribute type 8 has an invalid length.
[  547.798627][T25855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8639'.
[  547.930086][ T6214] usb 6-1: USB disconnect, device number 35
[  548.018549][T25862] batman_adv: batadv0: Interface deactivated: ipvlan2
[  548.024974][T25862] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  548.155945][   T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  548.156017][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  548.156142][   T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  548.156179][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  548.156223][   T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  548.156262][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  548.156306][   T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  548.156325][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  548.203096][T25872] netlink: 'syz.3.8647': attribute type 28 has an invalid length.
[  548.203143][T25872] netlink: 'syz.3.8647': attribute type 3 has an invalid length.
[  548.203175][T25872] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8647'.
[  549.195915][    T9] usb 6-1: new full-speed USB device number 36 using dummy_hcd
[  549.388566][    T9] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  549.393204][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  549.393265][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  549.393304][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  549.418220][    T9] usb 6-1: config 0 descriptor??
[  549.425868][T25889] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  549.556646][T25920] netlink: 'syz.3.8670': attribute type 2 has an invalid length.
[  549.580618][T25922] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8671'.
[  549.581059][T25922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8671'.
[  549.581080][T25922] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8671'.
[  549.641750][    T9] usbhid 6-1:0.0: can't add hid device: -71
[  549.641883][    T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  549.650143][    T9] usb 6-1: USB disconnect, device number 36
[  549.760159][T25932] overlayfs: failed to clone upperpath
[  550.704319][T25958] loop5: detected capacity change from 0 to 32768
[  550.732691][T25958] JBD2: Ignoring recovery information on journal
[  550.763209][T25958] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  550.843122][T18528] ocfs2: Unmounting device (7,5) on (node local)
[  551.067942][T25978] loop5: detected capacity change from 0 to 256
[  551.068581][T25978] exfat: Deprecated parameter 'utf8'
[  551.068604][T25978] exfat: Deprecated parameter 'namecase'
[  551.068646][T25978] exfat: Deprecated parameter 'namecase'
[  551.068657][T25978] exfat: Deprecated parameter 'utf8'
[  551.072854][T25978] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  551.073024][T25978] exFAT-fs (loop5): failed to test first cluster bit of root dir(5)
[  551.157153][ T5467] net_ratelimit: 120 callbacks suppressed
[  551.157962][ T5467] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  551.157979][ T5467] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  551.188253][T25986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8699'.
[  551.225899][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  551.226583][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  551.265981][ T5467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  551.266163][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  551.266313][ T5467] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  551.266327][ T5467] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  551.363223][T25999] loop5: detected capacity change from 0 to 4096
[  551.385863][T10969] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  551.385950][T10969] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  551.480319][T26002] netlink: 'syz.5.8707': attribute type 12 has an invalid length.
[  551.480365][T26002] netlink: 'syz.5.8707': attribute type 29 has an invalid length.
[  551.480396][T26002] netlink: 148 bytes leftover after parsing attributes in process `syz.5.8707'.
[  551.480408][T26002] netlink: 'syz.5.8707': attribute type 1 has an invalid length.
[  551.480414][T26002] netlink: 'syz.5.8707': attribute type 2 has an invalid length.
[  551.480420][T26002] netlink: 11 bytes leftover after parsing attributes in process `syz.5.8707'.
[  551.875967][    T9] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  552.025753][    T9] usb 6-1: Using ep0 maxpacket: 16
[  552.027920][    T9] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  552.033531][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.033574][    T9] usb 6-1: Product: syz
[  552.033644][    T9] usb 6-1: Manufacturer: syz
[  552.033652][    T9] usb 6-1: SerialNumber: syz
[  552.283382][   T56] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  552.905443][T26060] bond0: (slave geneve1): Enslaving as an active interface with an up link
[  552.912592][T26060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  552.922245][T26060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  552.927536][T26060] bond0 (unregistering): (slave netdevsim1): Releasing backup interface
[  552.937614][T26060] bond0 (unregistering): (slave syz_tun): Releasing backup interface
[  552.944875][T26060] bond0 (unregistering): (slave geneve1): Releasing backup interface
[  552.950649][T26060] bond0 (unregistering): Released all slaves
[  553.621704][T26092] __nla_validate_parse: 1 callbacks suppressed
[  553.622408][T26092] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8749'.
[  553.677588][    T9] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71
[  553.682687][    T9] usb 6-1: USB disconnect, device number 37
[  554.033316][T26104] smbdirect: ib_dev[syz5]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  554.033404][T26104] smbdirect: ib_dev[syz5]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  554.033474][T26104] smbdirect: ib_dev[syz5]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  554.042015][T26104] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98
[  555.072587][T26140] netlink: 'syz.0.8771': attribute type 2 has an invalid length.
[  556.216074][ T5467] net_ratelimit: 111 callbacks suppressed
[  556.216146][ T5467] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  556.216176][ T5467] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  556.265876][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  556.268616][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  556.326184][T10969] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  556.326246][T10969] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  556.348698][T26186] fuse: fd is not a fuse device
[  556.425894][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  556.426420][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  556.446116][ T5467] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  556.446184][ T5467] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  557.269688][T26233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8813'.
[  557.853225][T26252] netlink: 'syz.0.8821': attribute type 1 has an invalid length.
[  557.868342][T26252] 8021q: adding VLAN 0 to HW filter on device bond3
[  557.909209][T26252] vlan0: entered allmulticast mode
[  557.909303][T26252] bond3: entered allmulticast mode
[  558.168803][   T56] Bluetooth: hci2: unexpected event for opcode 0x2012
[  559.021333][T26273] IPv6: NLM_F_CREATE should be specified when creating new route
[  559.235138][T26295] netlink: 'syz.3.8842': attribute type 9 has an invalid length.
[  560.216317][T26320] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8853'.
[  561.286128][T10969] net_ratelimit: 109 callbacks suppressed
[  561.286188][T10969] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  561.286218][T10969] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  561.395932][T25613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.396119][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.396280][T25613] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  561.396310][T25613] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  561.517885][T10969] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  561.518013][T10969] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  561.626019][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.626583][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  562.186334][   T56] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  562.186533][   T56] Bluetooth: hci2: Injecting HCI hardware error event
[  562.208627][ T5597] Bluetooth: hci2: hardware error 0x00
[  562.515002][   T33] audit: type=1326 audit(563.402:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26383 comm="syz.3.8883" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182499e159 code=0x7ffc0000
[  562.523829][   T33] audit: type=1326 audit(563.402:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26383 comm="syz.3.8883" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182499e159 code=0x7ffc0000
[  562.532403][   T33] audit: type=1326 audit(563.402:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26383 comm="syz.3.8883" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182499e159 code=0x7ffc0000
[  562.541055][   T33] audit: type=1326 audit(563.442:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26383 comm="syz.3.8883" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182499e159 code=0x7ffc0000
[  562.550125][   T33] audit: type=1326 audit(563.442:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26383 comm="syz.3.8883" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182499e159 code=0x7ffc0000
[  562.550197][   T33] audit: type=1326 audit(563.442:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26383 comm="syz.3.8883" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f182499e159 code=0x7ffc0000
[  562.576665][   T33] audit: type=1326 audit(563.472:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26389 comm="syz.3.8883" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f182495e98e code=0x7ffc0000
[  562.599111][   T33] audit: type=1326 audit(563.492:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26383 comm="syz.3.8883" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f182495e98e code=0x7ffc0000
[  562.609109][   T33] audit: type=1326 audit(563.502:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26383 comm="syz.3.8883" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f182495e98e code=0x7ffc0000
[  562.618886][   T33] audit: type=1326 audit(563.512:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26383 comm="syz.3.8883" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f182495e98e code=0x7ffc0000
[  563.010557][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  563.013215][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  563.365276][T26405] fuse: fd is not a fuse device
[  563.452095][T26411] netlink: 'syz.0.8895': attribute type 4 has an invalid length.
[  563.839969][T26436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8901'.
[  563.964187][T26448] netlink: 'syz.3.8904': attribute type 3 has an invalid length.
[  563.964247][T26448] netlink: 'syz.3.8904': attribute type 3 has an invalid length.
[  564.269290][ T5597] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  565.792533][T26526] syz_tun: entered allmulticast mode
[  565.808523][T26526] dvmrp6: entered allmulticast mode
[  565.813757][T26526] dvmrp6: left allmulticast mode
[  565.879947][T26525] syz_tun: left allmulticast mode
[  565.992874][T26532] netlink: 'syz.3.8935': attribute type 10 has an invalid length.
[  566.030549][T26544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8939'.
[  566.336088][T25613] net_ratelimit: 110 callbacks suppressed
[  566.336765][T25613] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  566.336788][T25613] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  566.456088][T25613] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  566.456211][T25613] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  566.565993][T10969] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  566.566048][T10969] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  566.568317][T10969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  566.686707][ T5467] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  566.690007][ T5467] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  566.700757][T26561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8947'.
[  566.796156][T25613] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms
[  567.907453][T26598] ------------[ cut here ]------------
[  567.909306][T26598] UBSAN: array-index-out-of-bounds in kernel/bpf/disasm.c:306:6
[  567.912174][T26598] index 3 is out of range for type 'const char *const[3]'
[  567.915523][T26598] CPU: 1 UID: 0 PID: 26598 Comm: syz.3.8964 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  567.915567][T26598] Tainted: [L]=SOFTLOCKUP
[  567.915572][T26598] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  567.915580][T26598] Call Trace:
[  567.915588][T26598]  <TASK>
[  567.915594][T26598]  dump_stack_lvl+0xe8/0x150
[  567.915612][T26598]  ubsan_epilogue+0xa/0x30
[  567.915622][T26598]  __ubsan_handle_out_of_bounds+0xe8/0xf0
[  567.915653][T26598]  print_bpf_insn+0x21f1/0x2910
[  567.915667][T26598]  ? __pfx_disasm_print+0x10/0x10
[  567.915680][T26598]  ? __pfx_print_bpf_insn+0x10/0x10
[  567.915694][T26598]  ? vscnprintf+0x5c/0x90
[  567.915707][T26598]  ? bpf_verifier_vlog+0x3c7/0x900
[  567.915723][T26598]  diag_print_insn_context+0x433/0xd00
[  567.915741][T26598]  ? __pfx_diag_print_insn_context+0x10/0x10
[  567.915755][T26598]  ? __pfx_diag_write+0x10/0x10
[  567.915766][T26598]  ? __pfx_disasm_print+0x10/0x10
[  567.915776][T26598]  ? __pfx_disasm_kfunc_name+0x10/0x10
[  567.915789][T26598]  ? diag_print_wrapped_prefixed+0x207/0x240
[  567.915803][T26598]  bpf_diag_source+0x639/0x18d0
[  567.915814][T26598]  ? vsnprintf+0xe42/0xef0
[  567.915830][T26598]  ? vscnprintf+0x5c/0x90
[  567.915842][T26598]  ? bpf_verifier_vlog+0x3c7/0x900
[  567.915855][T26598]  ? __pfx_bpf_diag_source+0x10/0x10
[  567.915871][T26598]  ? __pfx_diag_write+0x10/0x10
[  567.915884][T26598]  ? kfree+0x1c5/0x650
[  567.915894][T26598]  ? bpf_diag_program_structure+0x28a/0x430
[  567.915907][T26598]  bpf_diag_program_structure+0x31c/0x430
[  567.915920][T26598]  ? verbose+0x11d/0x1a0
[  567.915934][T26598]  ? __pfx_bpf_diag_program_structure+0x10/0x10
[  567.915946][T26598]  ? bpf_prepare_btf_info+0x639/0x1200
[  567.915955][T26598]  ? rcu_is_watching+0x16/0xb0
[  567.915968][T26598]  check_subprogs+0x66b/0x740
[  567.915982][T26598]  bpf_check+0x17ba/0x2e10
[  567.915995][T26598]  ? ktime_get_with_offset+0x93/0x2d0
[  567.916006][T26598]  ? __pfx_bpf_check+0x10/0x10
[  567.916015][T26598]  ? bpf_obj_name_cpy+0x194/0x1e0
[  567.916028][T26598]  bpf_prog_load+0x14d6/0x1c20
[  567.916045][T26598]  ? __pfx_bpf_prog_load+0x10/0x10
[  567.916063][T26598]  ? do_raw_spin_lock+0x70/0x2f0
[  567.916075][T26598]  __sys_bpf+0xd0d/0xd90
[  567.916087][T26598]  ? do_raw_spin_lock+0x70/0x2f0
[  567.916097][T26598]  ? __pfx___sys_bpf+0x10/0x10
[  567.916108][T26598]  ? hook_file_ioctl+0x1f2/0x600
[  567.916120][T26598]  ? do_raw_spin_lock+0x70/0x2f0
[  567.916138][T26598]  ? kfree+0x4d/0x650
[  567.916148][T26598]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  567.916163][T26598]  ? __pfx_kcov_ioctl+0x10/0x10
[  567.916178][T26598]  __x64_sys_bpf+0xba/0xd0
[  567.916192][T26598]  do_syscall_64+0x166/0x520
[  567.916201][T26598]  ? trace_irq_disable+0x3b/0x140
[  567.916209][T26598]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  567.916220][T26598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  567.916229][T26598] RIP: 0033:0x7f182499e159
[  567.916240][T26598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  567.916248][T26598] RSP: 002b:00007f18257f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  567.916259][T26598] RAX: ffffffffffffffda RBX: 00007f1824c25fa0 RCX: 00007f182499e159
[  567.916266][T26598] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005
[  567.916273][T26598] RBP: 00007f1824a3506b R08: 0000000000000000 R09: 0000000000000000
[  567.916279][T26598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  567.916285][T26598] R13: 00007f1824c26038 R14: 00007f1824c25fa0 R15: 00007ffc1ada11c8
[  567.916299][T26598]  </TASK>
[  568.007783][T26598] ---[ end trace ]---
[  568.007795][T26598] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[  568.048556][T26598] CPU: 1 UID: 0 PID: 26598 Comm: syz.3.8964 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  568.052826][T26598] Tainted: [L]=SOFTLOCKUP
[  568.054536][T26598] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  568.058144][T26598] Call Trace:
[  568.059520][T26598]  <TASK>
[  568.060736][T26598]  vpanic+0x56d/0xa60
[  568.062375][T26598]  ? __pfx_vpanic+0x10/0x10
[  568.064209][T26598]  ? irqentry_exit+0x218/0x910
[  568.066152][T26598]  panic+0xc5/0xd0
[  568.067694][T26598]  ? __pfx_panic+0x10/0x10
[  568.069441][T26598]  ? __pfx__printk+0x10/0x10
[  568.071300][T26598]  ? console_srcu_read_lock+0x30/0x60
[  568.073449][T26598]  check_panic_on_warn+0x89/0xb0
[  568.075451][T26598]  __ubsan_handle_out_of_bounds+0xe8/0xf0
[  568.077224][T26598]  print_bpf_insn+0x21f1/0x2910
[  568.078815][T26598]  ? __pfx_disasm_print+0x10/0x10
[  568.080591][T26598]  ? __pfx_print_bpf_insn+0x10/0x10
[  568.082430][T26598]  ? vscnprintf+0x5c/0x90
[  568.083982][T26598]  ? bpf_verifier_vlog+0x3c7/0x900
[  568.085782][T26598]  diag_print_insn_context+0x433/0xd00
[  568.087672][T26598]  ? __pfx_diag_print_insn_context+0x10/0x10
[  568.089788][T26598]  ? __pfx_diag_write+0x10/0x10
[  568.091356][T26598]  ? __pfx_disasm_print+0x10/0x10
[  568.093190][T26598]  ? __pfx_disasm_kfunc_name+0x10/0x10
[  568.095072][T26598]  ? diag_print_wrapped_prefixed+0x207/0x240
[  568.097224][T26598]  bpf_diag_source+0x639/0x18d0
[  568.098892][T26598]  ? vsnprintf+0xe42/0xef0
[  568.100307][T26598]  ? vscnprintf+0x5c/0x90
[  568.101857][T26598]  ? bpf_verifier_vlog+0x3c7/0x900
[  568.103564][T26598]  ? __pfx_bpf_diag_source+0x10/0x10
[  568.105349][T26598]  ? __pfx_diag_write+0x10/0x10
[  568.107030][T26598]  ? kfree+0x1c5/0x650
[  568.108638][T26598]  ? bpf_diag_program_structure+0x28a/0x430
[  568.110641][T26598]  bpf_diag_program_structure+0x31c/0x430
[  568.112773][T26598]  ? verbose+0x11d/0x1a0
[  568.114313][T26598]  ? __pfx_bpf_diag_program_structure+0x10/0x10
[  568.116557][T26598]  ? bpf_prepare_btf_info+0x639/0x1200
[  568.118450][T26598]  ? rcu_is_watching+0x16/0xb0
[  568.119922][T26598]  check_subprogs+0x66b/0x740
[  568.121325][T26598]  bpf_check+0x17ba/0x2e10
[  568.122755][T26598]  ? ktime_get_with_offset+0x93/0x2d0
[  568.124529][T26598]  ? __pfx_bpf_check+0x10/0x10
[  568.126260][T26598]  ? bpf_obj_name_cpy+0x194/0x1e0
[  568.128040][T26598]  bpf_prog_load+0x14d6/0x1c20
[  568.129789][T26598]  ? __pfx_bpf_prog_load+0x10/0x10
[  568.131448][T26598]  ? do_raw_spin_lock+0x70/0x2f0
[  568.133409][T26598]  __sys_bpf+0xd0d/0xd90
[  568.134778][T26598]  ? do_raw_spin_lock+0x70/0x2f0
[  568.136616][T26598]  ? __pfx___sys_bpf+0x10/0x10
[  568.138308][T26598]  ? hook_file_ioctl+0x1f2/0x600
[  568.140026][T26598]  ? do_raw_spin_lock+0x70/0x2f0
[  568.141802][T26598]  ? kfree+0x4d/0x650
[  568.143181][T26598]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  568.145142][T26598]  ? __pfx_kcov_ioctl+0x10/0x10
[  568.146836][T26598]  __x64_sys_bpf+0xba/0xd0
[  568.148389][T26598]  do_syscall_64+0x166/0x520
[  568.149992][T26598]  ? trace_irq_disable+0x3b/0x140
[  568.151498][T26598]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.153597][T26598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.155714][T26598] RIP: 0033:0x7f182499e159
[  568.157336][T26598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  568.164154][T26598] RSP: 002b:00007f18257f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  568.167209][T26598] RAX: ffffffffffffffda RBX: 00007f1824c25fa0 RCX: 00007f182499e159
[  568.170221][T26598] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005
[  568.173018][T26598] RBP: 00007f1824a3506b R08: 0000000000000000 R09: 0000000000000000
[  568.175616][T26598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  568.177889][T26598] R13: 00007f1824c26038 R14: 00007f1824c25fa0 R15: 00007ffc1ada11c8
[  568.180192][T26598]  </TASK>
[  568.181846][T26598] Kernel Offset: disabled
[  568.183157][T26598] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:47:41  Registers:
info registers vcpu 0

CPU#0
RAX=dd361acd5139f100 RBX=dffffc0000000000 RCX=ffff8881a79f0000 RDX=8000000001000001
RSI=0000000001000001 RDI=0000000000000001 RBP=ffffc90000007db0 RSP=ffffc90000007cd8
R8 =0000000001000001 R9 =1ffffffff20f4192 R10=dffffc0000000000 R11=fffffbfff20f4193
R12=1ffff1102420518c R13=ffff888121028c78 R14=0000000000000000 R15=ffffc90006f8f050
RIP=ffffffff81b26550 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb0051d76c0 ffffffff 00c00000
GS =0000 ffff88818d6e6000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f18257556c8 CR3=000000010ba84000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=ccd6f117587d1b3b 2ba6796c83e19da5 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff89e8c500 RBX=0000000000000000 RCX=ffff888199ed1e00 RDX=0000000000000102
RSI=0000000000000100 RDI=0000000000000000 RBP=1ffff110370eab5b RSP=ffffc90000a18b70
R8 =0000000000000100 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff52000143170
R12=ffff8881b8755ada R13=ffff8881a70f83a8 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff81c7ae78 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f18257f66c0 ffffffff 00c00000
GS =0000 ffff8882a8ce6000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000563bc744f468 CR3=0000000189ac0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=09c00320080009b8 0300080009b0030f
XMM02=d80300080009d003 0fffffffffffff04 XMM03=00080009e8030008 0009e00300080009
XMM04=ff040a80030fffff ffffffff0409f003 XMM05=0102a81000088004 0a1000060102a400
XMM06=08000aa0031fffff fff608000a980320 XMM07=08000a90030fffff ffffffff040a8003
XMM08=0fffffffffffff04 09f00300080009e8 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
