last executing test programs:

5m21.516880339s ago: executing program 2 (id=906):
socket$netlink(0x10, 0x3, 0x5)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
r0 = socket(0x2, 0x3, 0x6)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ef915f210070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c2402080001030000eefe000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB="07cfc2e1c60de0"], 0x0)

5m20.013333252s ago: executing program 2 (id=925):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x8, &(0x7f00000001c0)=ANY=[], 0x1, 0x10600, &(0x7f0000020cc0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, 0x0)

5m18.946635385s ago: executing program 2 (id=932):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)

5m17.404762358s ago: executing program 2 (id=940):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x80401c, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5531, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)
creat(&(0x7f0000000380)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x2000000, 0x2000003})

5m14.267922786s ago: executing program 2 (id=965):
r0 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c)
r1 = dup(r0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001002dbd70000000000000000000000000000000ffffe00000024978f6dfe49d7a9241fba500000000004e240005000000000a00300000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000300000008000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008010000000000000001"], 0xb8}}, 0x50)
ftruncate(r2, 0x200004)
sendfile(r1, r2, 0x0, 0x80001d00c0d1)

5m13.11246897s ago: executing program 2 (id=972):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x22000003, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x2}]}, 0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c)

5m12.889434345s ago: executing program 32 (id=972):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x22000003, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x2}]}, 0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c)

4.133824821s ago: executing program 3 (id=4441):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x9, 0x81fd, 0x2001, 0x1}, 0x1c)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c)
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x7, 0x4)
recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000)

3.795751717s ago: executing program 4 (id=4446):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x4, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0)

3.701024749s ago: executing program 0 (id=4447):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0)
r1 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil)
shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
unshare(0x24020400)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)

3.540036542s ago: executing program 4 (id=4448):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

3.439898974s ago: executing program 3 (id=4449):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0)
r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0)

3.359495595s ago: executing program 3 (id=4451):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000300)=0x4, 0x4)

3.212415538s ago: executing program 0 (id=4462):
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffe}}, 0x10)
bind$tipc(r2, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x55459d45c9412840, {0x42, 0x1, 0x1}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)

3.063653381s ago: executing program 3 (id=4453):
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
socket$packet(0x11, 0x3, 0x300)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000500)={0x0, 0x1, 0x10, 0x3, 0x255, 0x0, r5}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4, 0x0, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x7ffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0xa6, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587b, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

2.949544653s ago: executing program 0 (id=4454):
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x1, 0x41, 0x40, 0x2}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791210000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

2.948903694s ago: executing program 4 (id=4455):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x80000)
sendmsg$alg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x48004)
read$alg(r2, &(0x7f0000000100)=""/50, 0x32)

2.764164637s ago: executing program 0 (id=4456):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
io_setup(0x5, &(0x7f0000000140)=<r1=>0x0)
r2 = eventfd2(0x0, 0x0)
io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}])
io_getevents(r1, 0x3, 0x3, &(0x7f0000000080)=[{}, {}, {}], 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040))
shutdown(r0, 0x0)

2.497105672s ago: executing program 4 (id=4460):
socket$packet(0x11, 0xa, 0x300)
r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x880, 0x1, 0x82}, &(0x7f0000000180)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x40, @link_local}, 0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r5, 0x3}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0xfffffffc}})
io_uring_enter(r0, 0x1, 0x25e8, 0x1, 0x0, 0x42)

2.283887976s ago: executing program 5 (id=4463):
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4810}, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r3, @ANYBLOB="0100000000000000000011"], 0xc4}}, 0x0)

2.07831644s ago: executing program 5 (id=4464):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000600000011000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x10}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

1.882757624s ago: executing program 5 (id=4466):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xaf9ba000)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10)
recvmmsg(r0, &(0x7f0000005940)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)

1.671901238s ago: executing program 0 (id=4468):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001880)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001740)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
sendmsg$inet(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)="5769d2", 0x3}, {&(0x7f0000000740)="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", 0xffe}], 0x2}, 0x4004)
recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0x8ec0}], 0x1}, 0x12)

1.53805222s ago: executing program 5 (id=4469):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff)
fcntl$setlease(r2, 0x400, 0x1)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

1.497017921s ago: executing program 0 (id=4471):
socket$unix(0x1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_uring_setup(0x1694, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

1.323971955s ago: executing program 4 (id=4472):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000008, 0x8013, r0, 0xf6690000)
close(0x3)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
recvfrom(r1, &(0x7f0000000080)=""/114, 0x72, 0x10000, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x40)

1.224100977s ago: executing program 1 (id=4473):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0xfffffffffffffde0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000)

1.135519098s ago: executing program 3 (id=4474):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000)
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000010c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbf8, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004042}, 0x20084084)

977.201681ms ago: executing program 1 (id=4475):
r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = inotify_init1(0x800)
inotify_add_watch(r2, &(0x7f0000000240)='.\x00', 0x60000526)
chdir(&(0x7f0000001180)='./bus\x00')
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115)
getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000)

769.289725ms ago: executing program 1 (id=4476):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="3801"], 0x138)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x2, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x6}}]}})
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r3, r3, 0x0, 0x2000007ff)

553.990789ms ago: executing program 3 (id=4477):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x10)

506.31002ms ago: executing program 1 (id=4478):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)
r2 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [@fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x13, 0x65}]}}}}}}}, 0x0)
r3 = fcntl$getown(0xffffffffffffffff, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x4, r3, 0x3, 0x0)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x5)
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r4, 0x4068aea3, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r1, 0x305, 0x70bd26, 0x0, {0x7}}, 0x14}}, 0x24044080)

333.731243ms ago: executing program 1 (id=4479):
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x6, 0x104}}, 0x10)
bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0xfffffffb}}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0)

182.116406ms ago: executing program 5 (id=4480):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

127.972827ms ago: executing program 4 (id=4481):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='hybla', 0x5)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000300)="51289c001e00cca9072e1f21dc867f59d038a0f9dc5b491af28acb49ed57cb078a3854ba6868de75dc4dd4d6a6a2d4a93d08d65b9b9d4c1909c16ea574ed6c7f963425e749ef6246edeed157020743116d90c2b00900859863e1c07ab839fb7830ecd04df21f1356b0ad0d9b157d22bcf0", 0x9d0aeebe0bd281d3, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

126.464678ms ago: executing program 1 (id=4482):
socket$netlink(0x10, 0x3, 0xa)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026008f0900000800b70000000000000000"], 0x3c}}, 0x0)
r4 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_FD(r4, 0x5, 0x0, 0x0, r4)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)

0s ago: executing program 5 (id=4483):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0xc}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x8080)

kernel console output (not intermixed with test programs):

9] team0: Port device team_slave_1 removed
[  196.632063][ T7619] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  196.648704][ T7619] batman_adv: batadv0: Removing interface: batadv_slave_0
[  196.673511][ T7619] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  196.695842][ T7619] batman_adv: batadv0: Removing interface: batadv_slave_1
[  196.828695][ T7624] team0: Port device xfrm0 added
[  198.331352][ T7670] loop5: detected capacity change from 0 to 32768
[  198.409401][ T7670] XFS (loop5): Mounting V5 Filesystem
[  198.517413][ T7670] XFS (loop5): Ending clean mount
[  198.708928][ T7029] XFS (loop5): Unmounting Filesystem
[  199.007265][ T7715] netlink: 'syz.0.1221': attribute type 4 has an invalid length.
[  199.077714][ T7719] netlink: 'syz.0.1221': attribute type 4 has an invalid length.
[  199.203551][ T7721] overlayfs: failed to clone upperpath
[  199.658735][ T5433] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  199.860470][ T5433] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11
[  199.902869][ T5433] usb 2-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 19
[  199.969227][ T5433] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  200.004894][ T5433] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.028931][ T5433] usb 2-1: Product: syz
[  200.033141][ T5433] usb 2-1: Manufacturer: syz
[  200.047781][ T5433] usb 2-1: SerialNumber: syz
[  200.178816][ T5069] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  200.378795][ T5069] usb 6-1: Using ep0 maxpacket: 32
[  200.389753][ T5069] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[  200.397858][ T5069] usb 6-1: config 0 has no interface number 0
[  200.436658][ T5069] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  200.455710][ T5069] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.483442][ T5069] usb 6-1: Product: syz
[  200.497933][ T5069] usb 6-1: Manufacturer: syz
[  200.508050][ T5069] usb 6-1: SerialNumber: syz
[  200.530721][ T5069] usb 6-1: config 0 descriptor??
[  200.550648][ T5069] smsc95xx v2.0.0
[  200.958097][ T5069] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  200.970746][ T5069] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  201.295974][ T5433] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[  201.302549][ T5433] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  201.310047][ T5433] cdc_ncm 2-1:1.0: setting rx_max = 2048
[  201.503869][ T5433] cdc_ncm 2-1:1.0: setting tx_max = 48
[  201.519690][ T5433] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  201.537783][ T5433] usb 2-1: USB disconnect, device number 12
[  201.547252][ T5433] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP)
[  201.786633][ T5069] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  201.797699][ T5069] smsc95xx: probe of 6-1:0.67 failed with error -71
[  201.807858][ T5069] usb 6-1: USB disconnect, device number 3
[  202.406859][ T7755] overlayfs: failed to clone upperpath
[  202.427658][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  202.465529][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  202.480478][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  202.499703][ T7759] device bridge_slave_0 left promiscuous mode
[  202.520762][ T7759] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.532111][ T7759] device bridge_slave_1 left promiscuous mode
[  202.538463][ T7759] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.567023][ T7759] bond0: (slave bond_slave_0): Releasing backup interface
[  202.596361][ T7759] bond0: (slave bond_slave_1): Releasing backup interface
[  202.648225][ T7759] team0: Port device team_slave_1 removed
[  202.659317][ T7759] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  202.666829][ T7759] batman_adv: batadv0: Removing interface: batadv_slave_0
[  202.682734][ T7759] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  202.693649][ T7759] batman_adv: batadv0: Removing interface: batadv_slave_1
[  202.786191][ T7761] team0: Port device xfrm0 added
[  203.565210][ T7806] overlayfs: failed to clone upperpath
[  203.745941][ T7814] loop5: detected capacity change from 0 to 256
[  203.804928][ T7814] FAT-fs (loop5): bogus number of reserved sectors
[  203.845149][ T7814] FAT-fs (loop5): Can't find a valid FAT filesystem
[  203.865381][ T7816] tipc: Started in network mode
[  203.889088][ T7816] tipc: Node identity 00002d003a2d003a0040ffffe0000001, cluster identity 4711
[  203.898005][ T7816] tipc: Enabling of bearer <udp:����> rejected, failed to enable media
[  204.342334][ T7830] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  204.397657][ T7830] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  204.451217][ T7830] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  204.525369][ T7830] team0: Port device xfrm0 removed
[  204.575872][ T7831] team0: Port device xfrm0 added
[  205.371702][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1274'.
[  205.406171][ T7862] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  205.415369][ T7862] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  205.424490][ T7862] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  205.433214][ T7862] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  205.444813][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1274'.
[  205.924872][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  205.953065][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  206.211411][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  206.243391][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  206.262791][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  206.325992][ T7894] team0: Port device xfrm0 removed
[  206.369876][ T7899] team0: Port device xfrm0 added
[  208.209771][ T7921] netlink: 'syz.3.1297': attribute type 1 has an invalid length.
[  208.303438][ T7921] device bond2 entered promiscuous mode
[  208.313592][ T7921] 8021q: adding VLAN 0 to HW filter on device bond2
[  208.457412][ T7921] 8021q: adding VLAN 0 to HW filter on device bond2
[  208.483044][ T7921] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  208.524684][ T7921] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  208.585307][ T7921] bond2: (slave ip6gre1): making interface the new active one
[  208.604673][ T7921] device ip6gre1 entered promiscuous mode
[  208.627382][ T7921] bond2: (slave ip6gre1): Enslaving as an active interface with an up link
[  208.689156][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  208.937428][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  208.970726][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  208.998467][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  209.094673][ T7940] team0: Port device xfrm0 removed
[  209.118398][ T7940] bond2: (slave ip6gre1): Releasing backup interface
[  209.148551][ T7940] device ip6gre1 left promiscuous mode
[  209.198167][ T7941] team0: Port device xfrm0 added
[  210.099814][ T7948] loop1: detected capacity change from 0 to 4096
[  210.226497][ T7952] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  210.257330][   T27] audit: type=1800 audit(43752.705:15): pid=7948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1305" name="file1" dev="loop1" ino=15 res=0 errno=0
[  210.338956][ T7956] NILFS error (device loop1): nilfs_readdir: zero-length directory entry
[  210.423427][ T7956] Remounting filesystem read-only
[  210.727913][ T4278] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  211.084776][ T7971] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1313'.
[  211.434892][ T7980] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  211.491402][ T7980] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  211.556072][ T7980] team0: Port device xfrm0 removed
[  211.631283][ T7981] team0: Port device xfrm0 added
[  212.216085][ T8008] overlayfs: failed to clone lowerpath
[  212.243512][ T8009] netlink: 'syz.5.1328': attribute type 1 has an invalid length.
[  212.388380][ T8009] device bond1 entered promiscuous mode
[  212.466054][ T8009] 8021q: adding VLAN 0 to HW filter on device bond1
[  212.549510][ T8017] 8021q: adding VLAN 0 to HW filter on device bond1
[  212.579120][ T8017] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  212.614223][ T8017] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  212.642097][ T8017] bond1: (slave ip6gre1): making interface the new active one
[  212.667503][ T8017] device ip6gre1 entered promiscuous mode
[  212.682627][ T8017] bond1: (slave ip6gre1): Enslaving as an active interface with an up link
[  212.702395][ T8019] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1331'.
[  212.792369][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  212.969055][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1336'.
[  213.049010][ T8039] tipc: Started in network mode
[  213.068756][ T8039] tipc: Node identity 7f, cluster identity 16
[  213.105474][ T8039] tipc: Node number set to 127
[  214.021754][ T8072] overlayfs: failed to clone upperpath
[  214.826060][ T8105] overlayfs: failed to clone upperpath
[  215.397658][ T8125] tipc: Cannot configure node identity twice
[  215.798625][    T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!!
[  215.908625][    T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!!
[  216.081625][ T8137] overlayfs: failed to clone upperpath
[  217.536259][   T27] audit: type=1326 audit(43692.869:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.1.1386" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fefbd59de99 code=0x0
[  217.759412][ T8144] loop5: detected capacity change from 0 to 40427
[  217.799373][ T8144] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  217.837655][ T8144] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  217.879926][ T8144] F2FS-fs (loop5): invalid crc value
[  217.922953][ T8144] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  218.220422][ T8144] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  218.254240][ T8144] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  218.638100][ T8207] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1400'.
[  218.765039][ T7029] syz-executor: attempt to access beyond end of device
[  218.765039][ T7029] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  220.017881][   T27] audit: type=1326 audit(43695.349:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8225 comm="syz.3.1408" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2da59de99 code=0x0
[  220.064188][ T8251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1418'.
[  220.106715][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1418'.
[  221.794808][ T8294] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  222.136479][ T8302] overlayfs: failed to clone upperpath
[  222.612951][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1432'.
[  222.644512][ T8313] device erspan0 entered promiscuous mode
[  222.672829][ T8313] device macvtap1 entered promiscuous mode
[  222.712415][ T8314] device erspan0 left promiscuous mode
[  222.750932][ T8316] loop5: detected capacity change from 0 to 2048
[  222.909922][ T8316] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  222.976216][ T8316] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #12: block 2: comm syz.5.1439: lblock 0 mapped to illegal pblock 2 (length 1)
[  223.173821][ T8326] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #12: block 2: comm syz.5.1439: lblock 0 mapped to illegal pblock 2 (length 1)
[  223.209700][   T27] audit: type=1326 audit(43698.553:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.4.1437" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8d919de99 code=0x0
[  223.368409][ T7029] EXT4-fs (loop5): unmounting filesystem.
[  223.388512][ T8330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1453'.
[  223.432832][ T8330] device erspan0 entered promiscuous mode
[  223.458804][ T8330] device macvtap1 entered promiscuous mode
[  223.533382][ T8334] device erspan0 left promiscuous mode
[  223.870454][ T8342] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1446'.
[  225.240430][   T27] audit: type=1326 audit(43700.583:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8371 comm="syz.5.1458" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe78079de99 code=0x0
[  225.988803][ T8394] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1466'.
[  227.761438][ T8428] loop1: detected capacity change from 0 to 512
[  227.799737][ T8428] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  227.854409][ T8428] EXT4-fs (loop1): 1 truncate cleaned up
[  227.888671][ T8428] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  228.115555][ T4278] EXT4-fs (loop1): unmounting filesystem.
[  228.447333][ T8446] netlink: 'syz.1.1488': attribute type 12 has an invalid length.
[  228.478958][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1487'.
[  228.950049][ T8453] loop2: detected capacity change from 0 to 7
[  228.962443][ T7176] Dev loop2: unable to read RDB block 7
[  228.968163][ T7176]  loop2: unable to read partition table
[  228.977637][ T7176] loop2: partition table beyond EOD, truncated
[  228.996008][ T8453] Dev loop2: unable to read RDB block 7
[  229.005293][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1500'.
[  229.011221][ T8453]  loop2: unable to read partition table
[  229.027688][ T8453] loop2: partition table beyond EOD, truncated
[  229.043445][ T8453] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  229.083236][ T3637] Dev loop2: unable to read RDB block 7
[  229.099381][ T3637]  loop2: unable to read partition table
[  229.107472][ T3637] loop2: partition table beyond EOD, truncated
[  229.829727][ T8482] loop5: detected capacity change from 0 to 1024
[  229.848426][ T8482] EXT4-fs: Ignoring removed nobh option
[  229.894178][ T8482] EXT4-fs: Ignoring removed bh option
[  229.939400][ T8482] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002]
[  229.950499][ T8482] System zones: 0-1, 3-12
[  229.975548][ T8482] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  230.151261][ T7029] EXT4-fs (loop5): unmounting filesystem.
[  230.308306][ T8490] netlink: 'syz.5.1501': attribute type 29 has an invalid length.
[  230.318200][ T8492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1502'.
[  230.364761][ T8490] netlink: 'syz.5.1501': attribute type 29 has an invalid length.
[  230.375115][ T8493] netlink: 'syz.5.1501': attribute type 29 has an invalid length.
[  230.403769][ T8495] netlink: 'syz.5.1501': attribute type 29 has an invalid length.
[  230.476880][ T8490] netlink: 'syz.5.1501': attribute type 29 has an invalid length.
[  232.783018][   T27] audit: type=1326 audit(43708.123:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.5.1534" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe78079de99 code=0x0
[  233.168781][ T8587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  233.532554][ T8603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1542'.
[  233.755003][ T8609] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  233.970321][ T8615] netlink: 'syz.5.1547': attribute type 1 has an invalid length.
[  234.065343][ T8615] device bond2 entered promiscuous mode
[  234.089264][ T8615] 8021q: adding VLAN 0 to HW filter on device bond2
[  234.196303][ T8625] 8021q: adding VLAN 0 to HW filter on device bond2
[  234.242133][ T8625] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address
[  234.281826][ T8625] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[  234.338812][ T8625] bond2: (slave xfrm1): making interface the new active one
[  234.359047][ T8625] device xfrm1 entered promiscuous mode
[  234.390859][ T8625] device xfrm1 left promiscuous mode
[  234.456758][ T8628] bridge0: port 1(vlan0) entered blocking state
[  234.464971][ T8628] bridge0: port 1(vlan0) entered disabled state
[  234.475954][ T8628] device vlan0 entered promiscuous mode
[  234.483993][ T8628] device bridge_slave_0 entered promiscuous mode
[  234.974965][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1561'.
[  235.176141][ T8656] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1563'.
[  236.071077][ T8677] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1570'.
[  236.226084][ T8683] Invalid argument reading file caps for ./file0
[  236.276290][ T8685] overlayfs: failed to clone upperpath
[  236.330852][ T8688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1575'.
[  236.409256][ T8688] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1575'.
[  236.687536][ T8709] overlayfs: failed to clone upperpath
[  237.148300][ T8723] overlayfs: overlapping lowerdir path
[  237.164567][ T8726] device syzkaller0 entered promiscuous mode
[  238.197317][ T8771] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1605'.
[  239.385157][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1620'.
[  240.068731][ T4317] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  240.270286][ T4317] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.290213][ T4317] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  240.308864][ T4317] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.344047][ T4317] usb 6-1: config 0 descriptor??
[  240.363338][ T4317] pwc: Askey VC010 type 2 USB webcam detected.
[  240.643074][ T8855] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1640'.
[  240.772732][ T4317] pwc: recv_control_msg error -32 req 02 val 2b00
[  240.792732][ T4317] pwc: recv_control_msg error -32 req 02 val 2700
[  240.812610][ T4317] pwc: recv_control_msg error -32 req 02 val 2c00
[  240.833206][ T4317] pwc: recv_control_msg error -32 req 04 val 1000
[  240.852926][ T4317] pwc: recv_control_msg error -32 req 04 val 1300
[  241.065431][ T4317] pwc: recv_control_msg error -71 req 02 val 2000
[  241.082731][ T4317] pwc: recv_control_msg error -71 req 02 val 2100
[  241.106475][ T4317] pwc: recv_control_msg error -71 req 04 val 1500
[  241.146190][ T4317] pwc: recv_control_msg error -71 req 02 val 2500
[  241.176232][ T4317] pwc: recv_control_msg error -71 req 02 val 2400
[  241.199676][ T4317] pwc: recv_control_msg error -71 req 02 val 2600
[  241.211300][ T4317] pwc: recv_control_msg error -71 req 02 val 2900
[  241.218495][ T4317] pwc: recv_control_msg error -71 req 02 val 2800
[  241.235627][ T4317] pwc: recv_control_msg error -71 req 04 val 1100
[  241.249683][ T4317] pwc: recv_control_msg error -71 req 04 val 1200
[  241.296443][ T4317] pwc: Registered as video103.
[  241.307688][ T4317] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input6
[  241.375300][ T4317] usb 6-1: USB disconnect, device number 4
[  243.918924][ T8948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1674'.
[  247.304817][ T9074] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1715'.
[  248.255857][ T9098] loop1: detected capacity change from 0 to 1024
[  248.309896][ T9098] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  248.573197][ T4278] EXT4-fs (loop1): unmounting filesystem.
[  248.908756][ T9128] overlayfs: failed to clone upperpath
[  248.914054][ T9131] netlink: 'syz.1.1727': attribute type 1 has an invalid length.
[  248.962681][ T9131] device bond1 entered promiscuous mode
[  248.981043][ T9131] 8021q: adding VLAN 0 to HW filter on device bond1
[  249.012646][ T9131] device macvlan2 entered promiscuous mode
[  249.027530][ T9131] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  249.441491][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1734'.
[  250.879179][ T9202] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1753'.
[  250.946437][ T9204] netlink: 'syz.0.1754': attribute type 1 has an invalid length.
[  250.971762][ T9204] device bond3 entered promiscuous mode
[  250.977718][ T9204] 8021q: adding VLAN 0 to HW filter on device bond3
[  250.999206][ T9204] device macvlan0 entered promiscuous mode
[  251.008547][ T9204] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  251.613286][ T9211] loop1: detected capacity change from 0 to 8192
[  251.650731][ T9221] loop5: detected capacity change from 0 to 1024
[  251.662080][ T9211]  loop1: p1 p2 p3 p4
[  251.666428][ T9211] loop1: partition table partially beyond EOD, truncated
[  251.688419][ T9211] loop1: p3 start 331777 is beyond EOD, truncated
[  251.706233][ T9211] loop1: p4 size 262144 extends beyond EOD, truncated
[  251.797734][ T9221] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  251.870134][    T7] kernel write not supported for file bpf-prog (pid: 7 comm: kworker/0:0)
[  252.024465][ T9239] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  252.030949][ T9239] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  252.211597][ T7029] EXT4-fs (loop5): unmounting filesystem.
[  252.469449][ T9251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1772'.
[  252.682276][ T7140] udevd[7140]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  252.682509][ T7215] udevd[7215]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  252.712165][ T7176] udevd[7176]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  252.950459][ T9265] netlink: 'syz.4.1777': attribute type 1 has an invalid length.
[  252.990824][ T9265] device bond1 entered promiscuous mode
[  252.996580][ T9265] 8021q: adding VLAN 0 to HW filter on device bond1
[  253.044028][ T9248] loop5: detected capacity change from 0 to 32768
[  253.078428][ T9265] device macvlan2 entered promiscuous mode
[  253.091964][ T9265] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  253.105023][ T9248] XFS (loop5): Mounting V5 Filesystem
[  253.216903][ T9248] XFS (loop5): Ending clean mount
[  253.465053][ T7029] XFS (loop5): Unmounting Filesystem
[  254.767588][ T9318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1793'.
[  255.502187][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  255.508558][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  255.582186][ T9359] loop1: detected capacity change from 0 to 256
[  255.626772][ T9359] FAT-fs (loop1): bogus number of reserved sectors
[  255.647211][ T9359] FAT-fs (loop1): Can't find a valid FAT filesystem
[  255.704959][ T9363] tipc: Started in network mode
[  255.739121][ T9363] tipc: Node identity 00002d003a2d003a0040ffffe0000001, cluster identity 4711
[  255.793070][ T9363] tipc: Enabling of bearer <udp:����> rejected, failed to enable media
[  256.007506][ T9370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1812'.
[  257.181966][ T9422] loop1: detected capacity change from 0 to 1024
[  257.225474][ T9422] EXT4-fs: Ignoring removed orlov option
[  257.297034][ T9422] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  257.485431][ T9439] EXT4-fs error (device loop1): xattr_find_entry:297: inode #15: comm syz.1.1830: corrupted xattr entries
[  257.716048][ T9449] netlink: 'syz.3.1840': attribute type 1 has an invalid length.
[  257.729636][ T4278] EXT4-fs (loop1): unmounting filesystem.
[  257.801838][ T5069] kernel write not supported for file bpf-prog (pid: 5069 comm: kworker/1:11)
[  257.856016][ T9449] device bond3 entered promiscuous mode
[  257.910488][ T9449] 8021q: adding VLAN 0 to HW filter on device bond3
[  257.979976][ T9453] device macvlan0 entered promiscuous mode
[  258.000848][ T9453] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  260.188688][ T5069] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  260.388713][ T5069] usb 2-1: Using ep0 maxpacket: 32
[  260.395589][ T5069] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  260.431953][ T5069] usb 2-1: config 0 has no interface number 0
[  260.464156][ T5069] usb 2-1: config 0 interface 12 has no altsetting 0
[  260.476845][ T5069] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  260.504537][ T5069] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.538826][ T5069] usb 2-1: Product: syz
[  260.543018][ T5069] usb 2-1: Manufacturer: syz
[  260.547621][ T5069] usb 2-1: SerialNumber: syz
[  260.576531][ T5069] usb 2-1: config 0 descriptor??
[  262.004254][ T5069] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71
[  262.023647][ T5069] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  262.044708][ T5069] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  262.070093][ T5069] f81534: probe of 2-1:0.12 failed with error -71
[  262.107598][ T5069] usb 2-1: USB disconnect, device number 13
[  263.474518][ T9565] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  264.953339][ T9607] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1898'.
[  265.660972][ T9628] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  265.969223][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1911'.
[  266.000488][ T9644] tipc: Cannot configure node identity twice
[  272.313571][ T9842] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.1985'.
[  272.418139][ T9822] loop1: detected capacity change from 0 to 40427
[  272.463590][ T9822] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  272.477405][ T9822] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  272.521169][ T9822] F2FS-fs (loop1): invalid crc value
[  272.568449][ T9822] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  272.761497][ T9822] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  272.768579][ T9822] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  272.841586][ T9856] loop5: detected capacity change from 0 to 8192
[  272.911498][ T9856]  loop5: p1 p2 p3 p4
[  272.934115][ T9856] loop5: partition table partially beyond EOD, truncated
[  272.992933][ T9856] loop5: p3 start 331777 is beyond EOD, truncated
[  273.065307][ T9856] loop5: p4 size 262144 extends beyond EOD, truncated
[  273.205816][ T4278] syz-executor: attempt to access beyond end of device
[  273.205816][ T4278] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  273.780943][ T7140] udevd[7140]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  273.797661][ T7176] udevd[7176]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  273.810514][ T7215] udevd[7215]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  275.258718][    T7] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  275.486930][    T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  275.513566][    T7] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  275.533985][    T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.554064][    T7] usb 6-1: config 0 descriptor??
[  275.768166][    T7] usbhid 6-1:0.0: can't add hid device: -71
[  275.783856][    T7] usbhid: probe of 6-1:0.0 failed with error -71
[  275.811120][    T7] usb 6-1: USB disconnect, device number 5
[  276.338683][    T7] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  276.533439][    T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  276.558347][    T7] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  276.582454][    T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.627797][    T7] usb 6-1: config 0 descriptor??
[  277.459548][    T7] aiptek 6-1:0.0: Aiptek using 400 ms programming speed
[  277.467245][    T7] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input7
[  277.779349][    T7] usb 6-1: USB disconnect, device number 6
[  277.785260][    C0] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  277.831998][ T9972] sctp: [Deprecated]: syz.0.2038 (pid 9972) Use of struct sctp_assoc_value in delayed_ack socket option.
[  277.831998][ T9972] Use struct sctp_sack_info instead
[  277.926761][ T9976] sctp: [Deprecated]: syz.0.2038 (pid 9976) Use of struct sctp_assoc_value in delayed_ack socket option.
[  277.926761][ T9976] Use struct sctp_sack_info instead
[  279.099764][   T27] audit: type=1326 audit(43754.443:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10010 comm="syz.1.2054" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fefbd59de99 code=0x0
[  279.265941][T10020] sctp: [Deprecated]: syz.3.2047 (pid 10020) Use of struct sctp_assoc_value in delayed_ack socket option.
[  279.265941][T10020] Use struct sctp_sack_info instead
[  279.291814][T10020] sctp: [Deprecated]: syz.3.2047 (pid 10020) Use of struct sctp_assoc_value in delayed_ack socket option.
[  279.291814][T10020] Use struct sctp_sack_info instead
[  279.511436][T10032] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2052'.
[  280.135465][   T52] block nbd1: Attempted send on invalid socket
[  280.142227][   T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  280.160896][T10052] XFS (nbd1): SB validate failed with error -5.
[  280.246418][T10062] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  280.351702][   T93] block nbd1: Attempted send on invalid socket
[  280.357936][   T93] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  280.368739][T10060] XFS (nbd1): SB validate failed with error -5.
[  280.914218][T10090] overlayfs: failed to clone upperpath
[  281.388518][T10102] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  282.340891][T10130] netlink: 'syz.4.2089': attribute type 1 has an invalid length.
[  282.383203][T10130] 8021q: adding VLAN 0 to HW filter on device bond2
[  282.427195][T10130] bond2: (slave veth9): Enslaving as a backup interface with a down link
[  282.443285][T10134] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2090'.
[  282.490134][T10134] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2090'.
[  282.544162][T10139] bridge0: port 1(vlan3) entered blocking state
[  282.552290][T10139] bridge0: port 1(vlan3) entered disabled state
[  282.560632][T10139] device vlan3 entered promiscuous mode
[  282.566434][T10139] device bridge_slave_0 entered promiscuous mode
[  282.671406][   T27] audit: type=1326 audit(43758.013:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10142 comm="syz.5.2092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78079de99 code=0x7ffc0000
[  282.745508][   T27] audit: type=1326 audit(43758.013:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10142 comm="syz.5.2092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78079de99 code=0x7ffc0000
[  282.788679][   T27] audit: type=1326 audit(43758.013:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10142 comm="syz.5.2092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78079de99 code=0x7ffc0000
[  282.842899][   T27] audit: type=1326 audit(43758.013:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10142 comm="syz.5.2092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78079de99 code=0x7ffc0000
[  282.904194][   T27] audit: type=1326 audit(43758.043:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10142 comm="syz.5.2092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe78079de99 code=0x7ffc0000
[  282.996980][   T27] audit: type=1326 audit(43758.073:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10142 comm="syz.5.2092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78079de99 code=0x7ffc0000
[  283.031293][   T27] audit: type=1326 audit(43758.073:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10142 comm="syz.5.2092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78079de99 code=0x7ffc0000
[  283.107630][   T27] audit: type=1326 audit(43758.123:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10142 comm="syz.5.2092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78079de99 code=0x7ffc0000
[  283.193968][   T27] audit: type=1326 audit(43758.123:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10142 comm="syz.5.2092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe78079de99 code=0x7ffc0000
[  283.402219][ T4322] Bluetooth: hci5: Frame reassembly failed (-84)
[  284.180854][T10166] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2102'.
[  284.511347][T10172] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2105'.
[  285.418886][ T4286] Bluetooth: hci5: command 0x1003 tx timeout
[  285.427590][ T4280] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  287.609297][T10260] Cannot find add_set index 0 as target
[  287.933124][T10274] 9pnet_fd: Insufficient options for proto=fd
[  288.618044][T10309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2156'.
[  288.930891][T10322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2164'.
[  289.117213][T10327] netlink: 'syz.4.2166': attribute type 4 has an invalid length.
[  289.135727][    T7] libceph: connect (1)[c::]:6789 error -22
[  289.142952][    T7] libceph: mon0 (1)[c::]:6789 connect error
[  289.152821][T10329] ceph: No mds server is up or the cluster is laggy
[  289.241351][T10330] netlink: 'syz.4.2166': attribute type 4 has an invalid length.
[  289.378877][ T4317] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  289.412214][T10343] overlayfs: failed to clone upperpath
[  289.543166][T10348] loop5: detected capacity change from 0 to 512
[  289.579002][ T4317] usb 2-1: Using ep0 maxpacket: 32
[  289.602026][ T4317] usb 2-1: New USB device found, idVendor=0582, idProduct=0075, bcdDevice= 0.40
[  289.635498][T10348] EXT4-fs (loop5): corrupt root inode, run e2fsck
[  289.648755][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.671525][T10348] EXT4-fs (loop5): mount failed
[  289.673286][ T4317] usb 2-1: Product: syz
[  289.704347][ T4317] usb 2-1: Manufacturer: syz
[  289.722051][ T4317] usb 2-1: SerialNumber: syz
[  290.008951][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2180'.
[  290.012532][T10367] loop5: detected capacity change from 0 to 16
[  290.066100][ T4317] snd-usb-audio: probe of 2-1:1.0 failed with error -2
[  290.085152][T10367] erofs: (device loop5): mounted with root inode @ nid 36.
[  290.146629][ T4317] usb 2-1: USB disconnect, device number 14
[  290.408839][ T4338] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  290.608865][ T4338] usb 6-1: Using ep0 maxpacket: 32
[  290.616278][ T4338] usb 6-1: unable to get BOS descriptor or descriptor too short
[  290.639870][ T4338] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  290.661469][ T4338] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  290.709679][ T4338] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  290.743301][ T4338] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.761526][ T4338] usb 6-1: Product: syz
[  290.775204][ T4338] usb 6-1: Manufacturer: syz
[  290.789007][ T4338] usb 6-1: SerialNumber: syz
[  291.220281][ T4338] usb 6-1: unit 0 not found!
[  291.447332][ T4338] usb 6-1: USB disconnect, device number 7
[  291.701609][ T7176] udevd[7176]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  291.818982][ T4286] Bluetooth: hci4: command 0x0411 tx timeout
[  292.234767][T10443] IPVS: persistence engine module ip_vs_pe_ not found
[  292.634474][T10460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  292.654414][T10460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  292.996089][T10474] netlink: 'syz.0.2219': attribute type 4 has an invalid length.
[  293.039110][T10474] netlink: 'syz.0.2219': attribute type 4 has an invalid length.
[  293.667876][T10508] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2230'.
[  294.191753][T10535] block device autoloading is deprecated and will be removed.
[  294.744439][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2249'.
[  295.687285][T10591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2259'.
[  295.774068][T10597] overlayfs: failed to clone upperpath
[  296.413415][T10583] loop1: detected capacity change from 0 to 32768
[  296.514491][T10583] XFS (loop1): Mounting V5 Filesystem
[  296.654557][T10583] XFS (loop1): Ending clean mount
[  296.840012][T10635] Invalid ELF header magic: != ELF
[  296.933676][ T4278] XFS (loop1): Unmounting Filesystem
[  297.390120][T10655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2285'.
[  298.572243][T10682] overlayfs: failed to clone upperpath
[  299.576093][T10672] Set syz1 is full, maxelem 65536 reached
[  299.742408][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2306'.
[  299.852746][T10704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2304'.
[  300.676205][T10716] loop1: detected capacity change from 0 to 32768
[  301.356749][T10762] netlink: 'syz.4.2329': attribute type 4 has an invalid length.
[  301.402336][T10762] netlink: 'syz.4.2329': attribute type 4 has an invalid length.
[  301.750299][T10777] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2337'.
[  301.789506][T10777] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms
[  301.830872][T10779] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2337'.
[  301.841251][T10779] bond2: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms
[  302.103383][T10793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2344'.
[  302.171909][T10798] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2345'.
[  302.897434][T10838] netlink: 2036 bytes leftover after parsing attributes in process `syz.3.2358'.
[  302.944662][T10838] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2358'.
[  303.144045][T10822] loop1: detected capacity change from 0 to 32768
[  303.251098][T10822] XFS (loop1): Mounting V5 Filesystem
[  303.306332][T10862] overlayfs: failed to clone upperpath
[  303.326057][T10822] XFS (loop1): Ending clean mount
[  303.381470][T10822] XFS (loop1): Quotacheck needed: Please wait.
[  303.453063][T10822] XFS (loop1): Quotacheck: Done.
[  303.502504][   T27] kauditd_printk_skb: 25 callbacks suppressed
[  303.502518][   T27] audit: type=1800 audit(44034.841:56): pid=10822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2354" name="bus" dev="loop1" ino=6155 res=0 errno=0
[  303.539923][   T27] audit: type=1800 audit(44034.881:57): pid=10822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2354" name="bus" dev="loop1" ino=6155 res=0 errno=0
[  303.621364][   T27] audit: type=1800 audit(44034.961:58): pid=10822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2354" name="file1" dev="loop1" ino=6150 res=0 errno=0
[  303.820932][T10878] rtc_cmos 00:00: Alarms can be up to one day in the future
[  304.241527][ T4278] XFS (loop1): Unmounting Filesystem
[  305.188932][T10911] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2387'.
[  305.914430][T10941] loop5: detected capacity change from 0 to 2048
[  305.969228][T10941] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  306.004823][T10941] UDF-fs: Scanning with blocksize 512 failed
[  306.047589][T10941] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  306.648970][T10954] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2401'.
[  306.766003][T10958] loop1: detected capacity change from 0 to 8
[  306.927224][T10956] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  307.017608][T10968] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2406'.
[  307.054098][T10968] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms
[  307.098543][T10973] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2406'.
[  307.118735][T10973] bond4: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms
[  307.654396][T10999] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2414'.
[  307.856421][T11007] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2417'.
[  307.881852][T11007] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  307.890804][T11007] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  307.899760][T11007] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  307.908463][T11007] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  307.921210][T11007] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2417'.
[  307.977249][T11012] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2421'.
[  308.008112][T11012] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms
[  308.185205][T11015] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2421'.
[  308.205246][T11015] bond4: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms
[  308.609443][T11039] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  308.654970][T11039] CIFS mount error: No usable UNC path provided in device string!
[  308.654970][T11039] 
[  308.669908][T11039] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  308.873211][T11045] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2436'.
[  310.868865][ T5069] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  311.074380][ T5069] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  311.114474][ T5069] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  311.142463][ T5069] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  311.161911][ T5069] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  311.183602][ T5069] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  311.196252][ T5069] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  311.205432][ T5069] usb 2-1: Manufacturer: syz
[  311.250704][ T5069] usb 2-1: config 0 descriptor??
[  311.370759][T11117] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  311.418480][T11122] __nla_validate_parse: 1 callbacks suppressed
[  311.418502][T11122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2465'.
[  311.444289][T11120] netlink: 'syz.5.2466': attribute type 1 has an invalid length.
[  311.468148][T11122] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2465'.
[  311.494777][T11120] 8021q: adding VLAN 0 to HW filter on device bond3
[  311.635494][T11125] bond3: (slave veth5): Enslaving as a backup interface with a down link
[  311.667355][ T5069] appleir 0003:05AC:8243.0002: unknown main item tag 0x0
[  311.684583][ T5069] appleir 0003:05AC:8243.0002: No inputs registered, leaving
[  311.736764][ T5069] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  312.220906][T11146] netlink: 'syz.3.2473': attribute type 1 has an invalid length.
[  312.286420][T11146] device bond5 entered promiscuous mode
[  312.307450][T11146] 8021q: adding VLAN 0 to HW filter on device bond5
[  312.366918][T11149] 8021q: adding VLAN 0 to HW filter on device bond5
[  312.373888][T11149] bond5: (slave xfrm1): The slave device specified does not support setting the MAC address
[  312.384258][T11149] bond5: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[  312.396374][ T4317] usb 2-1: USB disconnect, device number 15
[  312.396887][T11149] bond5: (slave xfrm1): making interface the new active one
[  312.414560][T11149] device xfrm1 entered promiscuous mode
[  312.422429][T11149] device xfrm1 left promiscuous mode
[  312.844924][T11158] netlink: 'syz.3.2487': attribute type 4 has an invalid length.
[  312.920940][T11161] netlink: 'syz.3.2487': attribute type 4 has an invalid length.
[  313.264106][T11175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2482'.
[  313.341849][T11178] netlink: 64583 bytes leftover after parsing attributes in process `syz.1.2494'.
[  314.181106][T11199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2492'.
[  314.219120][T11199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2492'.
[  314.717234][T11223] tipc: Failed to remove unknown binding: 66,0,0/127:1796918336/1796918337
[  315.670061][ T5435] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  315.826369][T11254] loop5: detected capacity change from 0 to 512
[  315.894643][T11254] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  315.895130][ T5435] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  315.942962][T11254] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2518: invalid indirect mapped block 9 (level 0)
[  315.969707][T11254] EXT4-fs (loop5): 1 truncate cleaned up
[  315.975386][T11254] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  316.008685][ T5435] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  316.036902][ T5435] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  316.100972][ T5435] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.114304][T11254] EXT4-fs (loop5): shut down requested (2)
[  316.137659][ T5435] usb 2-1: config 0 descriptor??
[  316.206010][ T7029] EXT4-fs (loop5): unmounting filesystem.
[  316.393070][   T27] audit: type=1326 audit(44047.731:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11263 comm="syz.5.2520" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe78079de99 code=0x0
[  316.568359][ T5435] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  316.580517][ T5435] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  316.596595][ T5435] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  316.613944][ T5435] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  316.631389][ T5435] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  316.648691][ T5435] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  316.655669][ T5435] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  316.694536][ T5435] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[  316.821991][ T5435] cp2112 0003:10C4:EA90.0003: Part Number: 0x00 Device Version: 0x00
[  316.945271][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  316.951666][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  317.087878][T11282] overlayfs: failed to clone upperpath
[  317.385739][T11296] netlink: 'syz.5.2533': attribute type 1 has an invalid length.
[  317.419048][T11296] 8021q: adding VLAN 0 to HW filter on device bond4
[  317.474592][T11296] bond4: (slave syz_tun): Enslaving as a backup interface with an up link
[  317.657787][ T5070] usb 2-1: USB disconnect, device number 16
[  317.714695][T11300] fido_id[11300]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  317.780112][T11296] bond4 (unregistering): (slave syz_tun): Releasing backup interface
[  317.820780][T11296] bond4 (unregistering): Released all slaves
[  318.468187][T11327] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2547'.
[  318.512903][T11327] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2547'.
[  319.354670][T11361] loop5: detected capacity change from 0 to 512
[  320.292774][T11368] loop5: detected capacity change from 0 to 32768
[  320.335091][T11372] syz.1.2564 (11372): drop_caches: 2
[  320.643382][T11389] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2570'.
[  320.684070][T11393] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2572'.
[  320.849219][T11371] syz.1.2564 (11371): drop_caches: 2
[  320.907838][T11401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2574'.
[  320.961151][T11368] XFS (loop5): Mounting V5 Filesystem
[  321.105833][T11368] XFS (loop5): Starting recovery (logdev: internal)
[  321.145943][T11368] XFS (loop5): Ending recovery (logdev: internal)
[  321.349017][ T7029] XFS (loop5): Unmounting Filesystem
[  321.774572][T11446] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2583'.
[  323.727020][T11498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  323.771942][T11498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  324.196444][T11506] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2609'.
[  326.615081][T11566] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2642'.
[  327.451930][T11604] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2644'.
[  327.736844][T11616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2648'.
[  328.300988][T11634] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2656'.
[  328.633315][T11641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2659'.
[  328.722360][T11641] 8021q: adding VLAN 0 to HW filter on device bond3
[  328.827728][T11645] 8021q: adding VLAN 0 to HW filter on device bond3
[  328.885693][T11645] bond3: (slave ip_vti0): The slave device specified does not support setting the MAC address
[  328.906014][T11645] bond3: (slave ip_vti0): Error -95 calling set_mac_address
[  328.932810][T11652] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2662'.
[  328.961204][T11654] bridge0: port 1(syz_tun) entered blocking state
[  328.978772][T11654] bridge0: port 1(syz_tun) entered disabled state
[  329.006388][T11654] device syz_tun entered promiscuous mode
[  329.184661][T11658] loop1: detected capacity change from 0 to 1024
[  329.203939][T11658] EXT4-fs: Ignoring removed orlov option
[  329.218249][T11658] EXT4-fs: Ignoring removed mblk_io_submit option
[  329.272752][T11658] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  329.292005][T11666] loop5: detected capacity change from 0 to 512
[  329.302062][T11662] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000
[  329.324651][T11666] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  329.348035][T11658] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  329.432752][T11666] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  329.471366][T11666] EXT4-fs (loop5): fragment/cluster size (4096) != block size (1024)
[  329.552488][ T7176] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  329.636515][   T27] audit: type=1326 audit(44316.968:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11674 comm="syz.3.2671" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2da59de99 code=0x7fc00000
[  329.709638][ T4278] EXT4-fs (loop1): unmounting filesystem.
[  329.779912][T11683] loop5: detected capacity change from 0 to 512
[  329.819033][ T7176] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  329.877212][T11683] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.2673: iget: bad i_size value: 38620345925642
[  330.004929][T11683] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.2673: couldn't read orphan inode 15 (err -117)
[  330.133273][T11683] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  330.288584][T11697] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.2673: bg 0: block 5: invalid block bitmap
[  330.325895][   T27] audit: type=1326 audit(44317.658:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11674 comm="syz.3.2671" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff2da597c17 code=0x7fc00000
[  330.394233][T11697] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 236 with error 28
[  330.422478][   T27] audit: type=1326 audit(44317.658:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11674 comm="syz.3.2671" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff2da53f219 code=0x7fc00000
[  330.453146][T11697] EXT4-fs (loop5): This should not happen!! Data will be lost
[  330.453146][T11697] 
[  330.454491][   T27] audit: type=1326 audit(44317.658:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11674 comm="syz.3.2671" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff2da53f2dd code=0x7fc00000
[  330.481827][T11697] EXT4-fs (loop5): Total free blocks count 0
[  330.510049][T11701] 9pnet_fd: Insufficient options for proto=fd
[  330.546175][   T27] audit: type=1326 audit(44317.658:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11674 comm="syz.3.2671" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff2da59de99 code=0x7fc00000
[  330.546609][T11697] EXT4-fs (loop5): Free/Dirty block details
[  330.627015][T11697] EXT4-fs (loop5): free_blocks=0
[  330.651500][T11697] EXT4-fs (loop5): dirty_blocks=236
[  330.671328][T11697] EXT4-fs (loop5): Block reservation details
[  330.694785][T11697] EXT4-fs (loop5): i_reserved_data_blocks=236
[  330.754296][T11709] EXT4-fs (loop5): shut down requested (0)
[  330.891858][   T27] audit: type=1326 audit(44318.228:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11713 comm="syz.0.2685" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e1ed9de99 code=0x0
[  331.248063][T11730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2690'.
[  331.284793][T11730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2690'.
[  331.322124][T11730] netlink: 'syz.4.2690': attribute type 15 has an invalid length.
[  331.379635][T11730] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0
[  331.388279][T11730] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0
[  331.397144][T11730] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0
[  331.405880][T11730] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0
[  331.444412][T11730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2690'.
[  331.477356][T11730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2690'.
[  331.509456][T11730] netlink: 'syz.4.2690': attribute type 15 has an invalid length.
[  331.529741][T11730] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 60387 - 0
[  331.538947][T11730] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 60387 - 0
[  331.547742][T11730] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 60387 - 0
[  331.556579][T11730] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 60387 - 0
[  331.583482][T11744] netlink: 2036 bytes leftover after parsing attributes in process `syz.1.2694'.
[  331.607151][T11744] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2694'.
[  331.821917][T11751] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2699'.
[  331.995004][T11761] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2702'.
[  331.998000][T11759] overlayfs: failed to clone upperpath
[  332.026832][T11761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2702'.
[  332.201239][T11765] overlayfs: failed to clone upperpath
[  332.372190][T11771] netlink: 'syz.5.2707': attribute type 1 has an invalid length.
[  332.407955][T11771] 8021q: adding VLAN 0 to HW filter on device bond4
[  332.440557][T11771] bond4: (slave dummy0): Enslaving as a backup interface with an up link
[  332.483486][T11771] netlink: 'syz.5.2707': attribute type 10 has an invalid length.
[  332.514006][T11771] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2707'.
[  332.537894][ T4322] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  332.631584][T11771] device dummy0 entered promiscuous mode
[  332.659712][T11771] bond4: (slave dummy0): Removing an active aggregator
[  332.688810][T11771] bond4: (slave dummy0): Releasing backup interface
[  333.142237][T11812] bridge3: port 1(vlan0) entered blocking state
[  333.156725][T11812] bridge3: port 1(vlan0) entered disabled state
[  333.340703][ T5435] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  333.548962][ T5435] usb 2-1: Using ep0 maxpacket: 32
[  333.560391][ T5435] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  333.585627][ T5435] usb 2-1: config 0 has no interface number 0
[  333.620471][ T5435] usb 2-1: config 0 interface 184 has no altsetting 0
[  333.644982][ T5435] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  333.671747][ T5435] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.695363][ T5435] usb 2-1: Product: syz
[  333.708389][ T5435] usb 2-1: Manufacturer: syz
[  333.726776][ T5435] usb 2-1: SerialNumber: syz
[  333.757641][ T5435] usb 2-1: config 0 descriptor??
[  333.772162][ T5435] smsc75xx v1.0.0
[  334.076689][T11830] netdevsim netdevsim4 netdevsim0: set [0, 2] type 1 family 0 port 8472 - 0
[  334.085785][T11830] netdevsim netdevsim4 netdevsim1: set [0, 2] type 1 family 0 port 8472 - 0
[  334.094567][T11830] netdevsim netdevsim4 netdevsim2: set [0, 2] type 1 family 0 port 8472 - 0
[  334.103325][T11830] netdevsim netdevsim4 netdevsim3: set [0, 2] type 1 family 0 port 8472 - 0
[  334.644184][T11853] batman_adv: batadv0: Adding interface: dummy0
[  334.656661][T11853] batman_adv: batadv0: Interface activated: dummy0
[  334.718378][T11853] batadv0: mtu less than device minimum
[  334.734343][T11853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  334.747306][T11853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  334.759630][T11853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  334.771941][T11853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  334.784224][T11853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  334.796480][T11853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  334.808771][T11853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  334.821090][T11853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  335.265310][ T5435] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71
[  335.300751][ T5435] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  335.320584][ T5435] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  335.341010][ T5435] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  335.351283][ T5435] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  335.364035][ T5435] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  335.376908][ T5435] smsc75xx: probe of 2-1:0.184 failed with error -71
[  335.398404][ T5435] usb 2-1: USB disconnect, device number 17
[  335.883886][T11896] netlink: 'syz.1.2753': attribute type 1 has an invalid length.
[  336.028234][T11899] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  336.052911][T11899] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  336.066105][T11899] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  336.113291][T11904] device syz_tun left promiscuous mode
[  336.114774][T11889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  336.119034][T11904] bridge0: port 1(syz_tun) entered disabled state
[  337.083905][T11939] netlink: 'syz.5.2769': attribute type 4 has an invalid length.
[  337.207992][T11939] netlink: 'syz.5.2769': attribute type 4 has an invalid length.
[  337.449945][   T27] audit: type=1326 audit(44324.788:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11951 comm="syz.1.2772" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefbd59de99 code=0x7ffc0000
[  337.530955][   T27] audit: type=1326 audit(44324.818:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11951 comm="syz.1.2772" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefbd59de99 code=0x7ffc0000
[  337.617923][   T27] audit: type=1326 audit(44324.818:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11951 comm="syz.1.2772" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefbd59de99 code=0x7ffc0000
[  337.728738][   T27] audit: type=1326 audit(44324.818:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11951 comm="syz.1.2772" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fefbd59de99 code=0x7ffc0000
[  337.806345][   T27] audit: type=1326 audit(44324.868:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11951 comm="syz.1.2772" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefbd59de99 code=0x7ffc0000
[  337.919032][   T27] audit: type=1326 audit(44324.918:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11951 comm="syz.1.2772" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefbd59de99 code=0x7ffc0000
[  338.002137][   T27] audit: type=1326 audit(44324.988:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11951 comm="syz.1.2772" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefbd59de99 code=0x7ffc0000
[  338.095501][   T27] audit: type=1326 audit(44324.988:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11951 comm="syz.1.2772" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fefbd59de99 code=0x7ffc0000
[  338.153496][   T27] audit: type=1326 audit(44324.988:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11951 comm="syz.1.2772" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefbd59de99 code=0x7ffc0000
[  338.177738][   T27] audit: type=1326 audit(44324.988:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11951 comm="syz.1.2772" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefbd59de99 code=0x7ffc0000
[  338.233729][T11969] __nla_validate_parse: 5 callbacks suppressed
[  338.233745][T11969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2776'.
[  338.395877][T11969] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2776'.
[  338.886800][T11989] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2782'.
[  338.920711][T11984] loop5: detected capacity change from 0 to 4096
[  339.017749][T11991] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  339.488082][T12008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2789'.
[  339.722383][T12013] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2792'.
[  340.432910][T12034] overlayfs: failed to clone upperpath
[  340.486975][T12036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2801'.
[  340.730940][T12036] device bond5 entered promiscuous mode
[  340.777263][T12036] 8021q: adding VLAN 0 to HW filter on device bond5
[  340.845027][T12038] device bridge3 entered promiscuous mode
[  340.888479][T12038] bond5: (slave bridge3): Enslaving as an active interface with an up link
[  340.924379][T12042] bond5: (slave bridge3): Error: Slave device does not support XDP
[  340.955441][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready
[  341.389962][T12057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2809'.
[  341.431051][T12062] netlink: 'syz.5.2810': attribute type 1 has an invalid length.
[  341.470041][T12062] 8021q: adding VLAN 0 to HW filter on device bond5
[  341.558537][T12061] bond5: (slave erspan0): making interface the new active one
[  341.583121][T12061] bond5: (slave erspan0): Enslaving as an active interface with an up link
[  341.636099][T12067] netlink: 'syz.4.2811': attribute type 4 has an invalid length.
[  341.686899][T12062] device bond5 entered promiscuous mode
[  341.693642][T12062] device erspan0 entered promiscuous mode
[  341.728413][T12068] netlink: 'syz.4.2811': attribute type 4 has an invalid length.
[  343.343021][T12107] 9pnet_fd: Insufficient options for proto=fd
[  345.162710][T12177] netlink: 'syz.0.2854': attribute type 1 has an invalid length.
[  345.292304][T12177] 8021q: adding VLAN 0 to HW filter on device bond5
[  345.405516][T12181] bond5: (slave syz_tun): Enslaving as an active interface with an up link
[  345.428996][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready
[  345.639808][T12202] overlayfs: failed to clone upperpath
[  345.814884][T12208] overlayfs: failed to clone upperpath
[  345.843517][T12184] bond5 (unregistering): (slave syz_tun): Removing an active aggregator
[  345.868965][T12184] bond5 (unregistering): (slave syz_tun): Releasing backup interface
[  345.887929][T12184] bond5 (unregistering): Released all slaves
[  346.007123][T12213] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2868'.
[  346.668061][T12237] loop5: detected capacity change from 0 to 128
[  346.763406][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  346.781860][T12237] FAT-fs (loop5): Filesystem has been set read-only
[  346.798719][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  346.837465][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  346.877248][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  346.890050][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  346.941411][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  346.991126][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.046358][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.080792][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.125834][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.154928][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.173980][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.198710][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.210718][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.228239][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.245983][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.263617][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.282099][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.309028][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.331091][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.353389][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.370954][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.385206][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.398278][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.414901][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.431375][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.458703][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.506473][   T27] kauditd_printk_skb: 22 callbacks suppressed
[  347.506486][   T27] audit: type=1326 audit(44334.838:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12254 comm="syz.0.2882" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e1ed9de99 code=0x0
[  347.540403][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.573318][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.594458][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.605008][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.613825][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.623171][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.631877][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.641832][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.654652][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.666476][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.675514][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.684959][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.694515][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.703243][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.711979][T12237] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  347.725864][   T27] audit: type=1800 audit(44335.058:99): pid=12237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2877" name="file1" dev="loop5" ino=1048606 res=0 errno=0
[  348.951210][T12291] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2896'.
[  349.428233][T12318] overlayfs: failed to clone upperpath
[  349.886596][T12331] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2910'.
[  349.902739][T12327] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2910'.
[  353.215738][T12416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2945'.
[  353.657536][T12429] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2950'.
[  353.710717][T12429] unsupported nlmsg_type 40
[  353.814516][T12433] overlayfs: failed to clone upperpath
[  354.176358][T12457] overlayfs: failed to get inode (-116)
[  354.204063][T12457] overlayfs: failed to get inode (-116)
[  354.498775][ T5069] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  354.691397][ T5069] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  354.709342][ T5069] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  354.729118][ T5069] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  354.739275][ T5069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.769239][ T5069] usb 6-1: config 0 descriptor??
[  355.189049][ T5069] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  355.196064][ T5069] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  355.213505][ T5069] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  355.231605][ T5069] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  355.239050][ T5069] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  355.246022][ T5069] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  355.253514][ T5069] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  355.269646][ T5069] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0
[  355.387287][ T5069] cp2112 0003:10C4:EA90.0004: Part Number: 0x00 Device Version: 0x00
[  355.591111][T12489] overlayfs: failed to clone upperpath
[  355.925076][T12505] overlayfs: failed to clone upperpath
[  355.990596][T12460] cp2112 0003:10C4:EA90.0004: Error starting transaction: -38
[  356.012348][ T5069] cp2112 0003:10C4:EA90.0004: error reading lock byte: -71
[  356.036078][ T5069] usb 6-1: USB disconnect, device number 8
[  356.167316][T12511] fido_id[12511]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  356.317299][T12522] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  356.850017][T12538] overlayfs: failed to clone upperpath
[  356.940219][T12541] 8021q: VLANs not supported on syzkaller0
[  358.018452][T12577] fuse: Bad value for 'fd'
[  358.765201][ T4338] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  358.970447][ T4338] usb 6-1: Using ep0 maxpacket: 32
[  358.978487][ T4338] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  359.004474][ T4338] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  359.021288][ T4338] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  359.036018][ T4338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.050646][ T4338] usb 6-1: config 0 descriptor??
[  359.069374][ T4338] hub 6-1:0.0: USB hub found
[  359.268434][ T4338] hub 6-1:0.0: 1 port detected
[  360.244357][ T4338] hub 6-1:0.0: activate --> -90
[  360.319824][T12627] overlayfs: failed to clone upperpath
[  360.590535][ T5435] usb 6-1: USB disconnect, device number 9
[  360.653394][T12639] x_tables: unsorted entry at hook 2
[  363.795007][T12760] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3077'.
[  364.938011][T12801] device sit0 entered promiscuous mode
[  364.972119][T12801] netlink: 'syz.0.3093': attribute type 1 has an invalid length.
[  365.010007][T12801] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3093'.
[  365.323055][T12810] device gretap2 entered promiscuous mode
[  365.740079][T12826] netlink: 'syz.1.3103': attribute type 15 has an invalid length.
[  365.768286][T12826] netlink: 11594 bytes leftover after parsing attributes in process `syz.1.3103'.
[  365.791074][T12826] netlink: 'syz.1.3103': attribute type 11 has an invalid length.
[  365.828710][T12826] netlink: 'syz.1.3103': attribute type 15 has an invalid length.
[  365.836580][T12826] netlink: 'syz.1.3103': attribute type 16 has an invalid length.
[  365.868756][T12826] netlink: 'syz.1.3103': attribute type 21 has an invalid length.
[  365.876612][T12826] netlink: 'syz.1.3103': attribute type 25 has an invalid length.
[  365.938666][T12826] netlink: 'syz.1.3103': attribute type 27 has an invalid length.
[  365.957415][T12826] netlink: 'syz.1.3103': attribute type 28 has an invalid length.
[  365.975399][T12826] netlink: 'syz.1.3103': attribute type 29 has an invalid length.
[  365.998852][T12828] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3104'.
[  366.164619][T12837] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3108'.
[  366.211235][T12837] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3108'.
[  366.244245][T12837] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3108'.
[  366.263644][T12837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3108'.
[  366.292427][T12837] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3108'.
[  366.972590][T12862] overlayfs: failed to clone upperpath
[  367.560625][T12885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3124'.
[  367.633251][T12887] loop5: detected capacity change from 0 to 16
[  367.679180][T12887] erofs: (device loop5): mounted with root inode @ nid 36.
[  367.737485][T12887] syz.5.3126: attempt to access beyond end of device
[  367.737485][T12887] loop5: rw=524288, sector=8, nr_sectors = 24 limit=16
[  367.768082][T12887] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[4096]
[  367.812074][   T27] audit: type=1800 audit(44355.148:100): pid=12887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3126" name="file2" dev="loop5" ino=89 res=0 errno=0
[  367.876483][T12887] syz.5.3126: attempt to access beyond end of device
[  367.876483][T12887] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16
[  367.935542][T12887] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[4096]
[  367.966633][T12887] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[4096]
[  368.010096][T12891] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[4096]
[  368.180620][T12903] overlayfs: failed to resolve './file1': -2
[  369.695040][T12913] loop5: detected capacity change from 0 to 32768
[  369.890842][T12913] (syz.5.3138,12913,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  370.046032][T12913] (syz.5.3138,12913,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  370.162819][T12913] JBD2: Ignoring recovery information on journal
[  370.293610][T12913] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  370.648058][ T7029] ocfs2: Unmounting device (7,5) on (node local)
[  371.339997][T12966] __nla_validate_parse: 1 callbacks suppressed
[  371.340012][T12966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3157'.
[  371.732759][T12974] loop5: detected capacity change from 0 to 128
[  371.768891][T12974] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  371.856382][   T27] audit: type=1800 audit(44359.188:101): pid=12974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3162" name="file2" dev="loop5" ino=1048608 res=0 errno=0
[  371.893674][T12974] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100)
[  371.936788][T12974] FAT-fs (loop5): Filesystem has been set read-only
[  371.960053][T12974] syz.5.3162: attempt to access beyond end of device
[  371.960053][T12974] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128
[  372.363782][T12998] fuse: Bad value for 'fd'
[  372.578299][T13006] loop5: detected capacity change from 0 to 512
[  372.618464][T13006] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  372.662407][T13006] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  372.738172][T13006] EXT4-fs (loop5): 1 truncate cleaned up
[  372.765074][T13006] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  373.088795][ T7029] EXT4-fs (loop5): unmounting filesystem.
[  373.208068][T13025] netlink: 2036 bytes leftover after parsing attributes in process `syz.3.3179'.
[  373.265330][T13025] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3179'.
[  373.544892][T13037] net_ratelimit: 11 callbacks suppressed
[  373.544905][T13037] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  375.582411][T13106] 9pnet: p9_errstr2errno: server reported unknown error 0x00000
[  375.632397][T13109] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3212'.
[  375.661766][T13109] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms
[  375.729560][T13110] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3212'.
[  375.747714][T13110] bond5: Unable to set peer notification delay as MII monitoring is disabled
[  377.789696][T13174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3235'.
[  377.812978][T13174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3235'.
[  377.891892][T13176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3236'.
[  378.004498][T13176] HTB: quantum of class 80150007 is big. Consider r2q change.
[  378.265172][T13195] overlayfs: failed to clone upperpath
[  378.381682][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  378.388047][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  378.488326][T13207] batman_adv: batadv0: Interface deactivated: dummy0
[  378.502241][T13207] batman_adv: batadv0: Removing interface: dummy0
[  378.513410][T13207] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  378.526741][T13207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  378.539988][T13207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  378.576026][T13207] team0: Port device xfrm0 removed
[  378.609341][T13207] bond2: (slave gretap1): Releasing active interface
[  378.647157][T13209] validate_nla: 2 callbacks suppressed
[  378.647214][T13209] netlink: 'syz.4.3246': attribute type 1 has an invalid length.
[  378.720556][T13209] 8021q: adding VLAN 0 to HW filter on device bond4
[  378.776776][T13211] bond4: (slave veth17): Enslaving as an active interface with a down link
[  378.802920][T13212] device veth0_virt_wifi entered promiscuous mode
[  378.835118][T13212] bond4: (slave veth0_virt_wifi): making interface the new active one
[  378.844911][T13212] bond4: (slave veth0_virt_wifi): Enslaving as an active interface with an up link
[  378.856052][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready
[  380.573642][T13270] overlayfs: failed to clone upperpath
[  380.816800][T13282] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffd
[  380.984963][T13291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3278'.
[  381.200197][T13297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3280'.
[  381.341839][T13301] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3282'.
[  381.419456][T13303] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3283'.
[  382.372456][T13351] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3303'.
[  382.679570][T13360] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  382.679570][T13360] The task syz.1.3304 (13360) triggered the difference, watch for misbehavior.
[  386.386964][T13453] netlink: 'syz.1.3341': attribute type 1 has an invalid length.
[  386.405620][T13453] netlink: 'syz.1.3341': attribute type 2 has an invalid length.
[  386.424725][T13453] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3341'.
[  387.374180][T13488] fuse: Bad value for 'fd'
[  387.825702][   T27] audit: type=1326 audit(44375.158:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13499 comm="syz.5.3360" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe78079de99 code=0x0
[  389.732899][ T4286] Bluetooth: Frame is too long (len 14, expected len 4)
[  390.540365][T13619] netlink: 264 bytes leftover after parsing attributes in process `syz.5.3401'.
[  391.502160][T13652] overlayfs: failed to clone upperpath
[  391.790974][   T27] audit: type=1326 audit(44379.128:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13664 comm="syz.1.3421" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fefbd59de99 code=0x0
[  392.254526][T13680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3427'.
[  392.628747][ T5435] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  392.834325][ T5435] usb 6-1: Using ep0 maxpacket: 8
[  392.843206][ T5435] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  392.861763][ T5435] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  392.881996][ T5435] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  392.898640][ T5435] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  392.918846][ T5435] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  392.952776][ T5435] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  392.971669][ T5435] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.200875][ T5435] usb 6-1: usb_control_msg returned -32
[  393.216674][ T5435] usbtmc 6-1:16.0: can't read capabilities
[  393.519550][T13682] usbtmc 6-1:16.0: usb_control_msg returned -71
[  393.527079][ T5068] usb 6-1: USB disconnect, device number 10
[  393.549619][T13729] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -19
[  393.739921][T13741] overlayfs: failed to clone upperpath
[  393.888280][T13746] lo speed is unknown, defaulting to 1000
[  393.894654][T13746] lo speed is unknown, defaulting to 1000
[  393.914340][T13746] lo speed is unknown, defaulting to 1000
[  393.937781][T13746] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  393.974576][T13746] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  394.037815][T13746] lo speed is unknown, defaulting to 1000
[  394.053891][T13746] lo speed is unknown, defaulting to 1000
[  394.066681][T13746] lo speed is unknown, defaulting to 1000
[  394.076297][T13746] lo speed is unknown, defaulting to 1000
[  394.091240][T13746] lo speed is unknown, defaulting to 1000
[  394.104625][T13746] lo speed is unknown, defaulting to 1000
[  394.226106][T13753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3458'.
[  394.688021][T13770] loop5: detected capacity change from 0 to 512
[  394.753624][T13770] EXT4-fs (loop5): 1 truncate cleaned up
[  394.786622][T13770] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  394.926849][T13770] EXT4-fs error (device loop5): ext4_validate_block_bitmap:420: comm syz.5.3464: bg 0: bad block bitmap checksum
[  394.968289][T13238] udevd[13238]: incorrect ext4 checksum on /dev/loop5
[  395.079413][ T7029] EXT4-fs (loop5): unmounting filesystem.
[  395.227872][T13784] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  395.574108][ T5068] libceph: connect (1)[c::]:6789 error -22
[  395.580487][ T5068] libceph: mon0 (1)[c::]:6789 connect error
[  395.591235][T13798] ceph: No mds server is up or the cluster is laggy
[  395.876714][T13815] overlayfs: upper fs does not support file handles, falling back to index=off.
[  396.145561][T13826] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  396.156732][T13826] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  396.361979][    T7] tipc: Node number set to 3664630468
[  396.972938][T13858] overlayfs: failed to clone upperpath
[  398.404097][T13900] loop5: detected capacity change from 0 to 1024
[  398.442208][T13900] EXT4-fs: Ignoring removed nomblk_io_submit option
[  398.484990][T13900] EXT4-fs: inline encryption not supported
[  398.515063][T13900] EXT4-fs: Ignoring removed nomblk_io_submit option
[  398.549183][T13900] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  398.667858][T13900] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  398.820813][ T7029] EXT4-fs (loop5): unmounting filesystem.
[  400.285623][T13955] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  400.322553][T13955] syzkaller0: mtu less than device minimum
[  400.564852][   T27] audit: type=1326 audit(44387.898:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13960 comm="syz.4.3534" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d919de99 code=0x7ffc0000
[  400.625985][   T27] audit: type=1326 audit(44387.928:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13960 comm="syz.4.3534" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d919de99 code=0x7ffc0000
[  400.726955][   T27] audit: type=1326 audit(44387.928:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13960 comm="syz.4.3534" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d919de99 code=0x7ffc0000
[  400.774041][   T27] audit: type=1326 audit(44387.928:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13960 comm="syz.4.3534" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d919de99 code=0x7ffc0000
[  400.810602][   T27] audit: type=1326 audit(44387.928:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13960 comm="syz.4.3534" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fe8d919de99 code=0x7ffc0000
[  400.842553][   T27] audit: type=1326 audit(44387.928:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13960 comm="syz.4.3534" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d919de99 code=0x7ffc0000
[  400.894925][   T27] audit: type=1326 audit(44387.928:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13960 comm="syz.4.3534" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d919de99 code=0x7ffc0000
[  400.957329][   T27] audit: type=1326 audit(44387.928:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13960 comm="syz.4.3534" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d919de99 code=0x7ffc0000
[  400.992815][   T27] audit: type=1326 audit(44387.928:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13960 comm="syz.4.3534" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d919de99 code=0x7ffc0000
[  401.031607][   T27] audit: type=1326 audit(44387.928:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13960 comm="syz.4.3534" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fe8d919de99 code=0x7ffc0000
[  401.209441][    T9] wlan1: Trigger new scan to find an IBSS to join
[  401.413957][    T7] tipc: Node number set to 3664630468
[  403.164240][T14028] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3560'.
[  403.254792][T14028] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3560'.
[  403.303806][T14028] netlink: 'syz.4.3560': attribute type 6 has an invalid length.
[  403.347924][T14028] netlink: 'syz.4.3560': attribute type 5 has an invalid length.
[  403.408767][T14028] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3560'.
[  403.584061][T14038] fuse: Bad value for 'fd'
[  404.288444][ T4335] wlan1: Trigger new scan to find an IBSS to join
[  404.363557][T14063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3574'.
[  405.760536][ T5068] libceph: connect (1)[c::]:6789 error -101
[  405.768043][ T5068] libceph: mon0 (1)[c::]:6789 connect error
[  405.778982][T14084] ceph: No mds server is up or the cluster is laggy
[  406.227184][ T4335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  406.362496][ T5068] libceph: connect (1)[c::]:6789 error -101
[  406.375020][ T5068] libceph: mon0 (1)[c::]:6789 connect error
[  406.385799][T14117] ceph: No mds server is up or the cluster is laggy
[  407.923368][T14166] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  408.434078][T14193] netlink: 'syz.5.3629': attribute type 1 has an invalid length.
[  408.463954][T14193] 8021q: adding VLAN 0 to HW filter on device bond6
[  408.483032][T14193] device bond6 entered promiscuous mode
[  408.500664][T14193] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3629'.
[  408.509843][T14193] netlink: 'syz.5.3629': attribute type 1 has an invalid length.
[  408.518431][T14193] device bond6 left promiscuous mode
[  408.524631][T14193] 8021q: adding VLAN 0 to HW filter on device bond6
[  409.574261][T14248] netlink: 'syz.1.3648': attribute type 11 has an invalid length.
[  410.769009][ T4338] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  410.972664][ T4338] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  410.996159][ T4338] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  411.012753][ T4338] usb 6-1: Product: syz
[  411.017156][ T4338] usb 6-1: Manufacturer: syz
[  411.024786][ T4338] usb 6-1: SerialNumber: syz
[  411.172048][T14300] lo speed is unknown, defaulting to 1000
[  411.178119][T14300] lo speed is unknown, defaulting to 1000
[  411.193836][T14300] lo speed is unknown, defaulting to 1000
[  411.207307][T14300] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  411.246700][T14300] lo speed is unknown, defaulting to 1000
[  411.247316][ T4338] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  411.255618][T14300] lo speed is unknown, defaulting to 1000
[  411.285376][T14300] lo speed is unknown, defaulting to 1000
[  411.293495][ T4338] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  411.308178][T14300] lo speed is unknown, defaulting to 1000
[  411.336139][T14300] lo speed is unknown, defaulting to 1000
[  411.360892][T14300] lo speed is unknown, defaulting to 1000
[  411.641424][    T7] libceph: connect (1)[c::]:6789 error -101
[  411.647565][    T7] libceph: mon0 (1)[c::]:6789 connect error
[  411.674432][T14319] ceph: No mds server is up or the cluster is laggy
[  412.092599][T14336] 9pnet: p9_errstr2errno: server reported unknown error �@c0x0000000000000006
[  412.337762][T14347] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3687'.
[  412.361259][ T4338] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -71
[  412.392110][ T4338] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  412.410297][ T4338] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  412.433906][ T4338] lan78xx: probe of 6-1:1.0 failed with error -71
[  412.452478][ T4338] usb 6-1: USB disconnect, device number 11
[  412.985713][ T6021] wlan1: Trigger new scan to find an IBSS to join
[  413.098184][T14375] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3695'.
[  413.114853][T14375] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3695'.
[  413.142467][T14375] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3695'.
[  414.345474][T14424] rdma_rxe: rxe_register_device failed with error -23
[  414.354666][T14424] rdma_rxe: failed to add syzkaller0
[  414.434780][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3715'.
[  414.598833][ T5069] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  414.799086][ T5069] usb 6-1: Using ep0 maxpacket: 32
[  414.810119][ T5069] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  414.843024][ T5069] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  414.862753][ T5069] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  414.872364][ T5069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.888468][ T5069] usb 6-1: config 0 descriptor??
[  415.308378][ T5069] ft260 0003:0403:6030.0005: unknown main item tag 0x0
[  415.327350][ T5069] ft260 0003:0403:6030.0005: unknown main item tag 0x0
[  415.337596][ T5069] ft260 0003:0403:6030.0005: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0
[  415.474778][T14457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3726'.
[  415.505869][ T5069] ft260 0003:0403:6030.0005: chip code: 0000 0000
[  415.933148][ T5069] ft260 0003:0403:6030.0005: failed to retrieve status: -32
[  415.955211][ T4335] wlan1: Trigger new scan to find an IBSS to join
[  416.147723][T14422] i2c i2c-1: adapter quirk: comb msg only to same addr (addr 0x05d6, size 0, write)
[  416.164655][ T5069] usb 6-1: USB disconnect, device number 12
[  416.301738][ T4286] Bluetooth: hci4: command 0x0406 tx timeout
[  416.497613][T14475] IPVS: length: 217 != 24
[  418.003243][ T4335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  419.704258][T14558] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3767'.
[  419.762019][T14558] device team1 entered promiscuous mode
[  419.798232][T14558] 8021q: adding VLAN 0 to HW filter on device team1
[  419.816671][T14563] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3767'.
[  419.903390][T14563] device team2 entered promiscuous mode
[  419.938850][T14563] 8021q: adding VLAN 0 to HW filter on device team2
[  420.346035][T14583] netlink: 'syz.1.3776': attribute type 4 has an invalid length.
[  420.417921][T14587] netlink: 'syz.1.3776': attribute type 4 has an invalid length.
[  420.676986][T14595] IPv6: Can't replace route, no match found
[  420.853985][T14599] lo speed is unknown, defaulting to 1000
[  421.145419][T14614] loop5: detected capacity change from 0 to 128
[  421.190676][T14614] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  421.927320][T14651] lo speed is unknown, defaulting to 1000
[  424.888205][T14736] overlayfs: failed to clone upperpath
[  425.099333][T14744] overlayfs: failed to clone upperpath
[  425.677499][T14764] netlink: 'syz.0.3847': attribute type 11 has an invalid length.
[  426.253888][T14790] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  426.743408][T14799] loop5: detected capacity change from 0 to 512
[  426.893338][T14799] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  426.938621][T14799] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #2: comm syz.5.3855: corrupted inode contents
[  426.968064][T14799] EXT4-fs error (device loop5): ext4_dirty_inode:6156: inode #2: comm syz.5.3855: mark_inode_dirty error
[  426.983158][T14799] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #2: comm syz.5.3855: corrupted inode contents
[  427.014775][T14799] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.3855: mark_inode_dirty error
[  427.066755][T14799] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #18: comm syz.5.3855: directory missing '.'
[  427.186953][ T7029] EXT4-fs (loop5): unmounting filesystem.
[  427.314164][T14815] loop5: detected capacity change from 0 to 764
[  427.394466][ T4280] Bluetooth: Frame is too long (len 14, expected len 4)
[  427.414779][T14815] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  427.627046][T14824] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  427.758934][T14827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3867'.
[  427.774664][   T27] kauditd_printk_skb: 1687 callbacks suppressed
[  427.774675][   T27] audit: type=1326 audit(44671.115:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14828 comm="syz.5.3868" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe78079de99 code=0x0
[  428.149367][T14837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3869'.
[  428.378899][T14847] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  428.391871][T14847] batman_adv: batadv0: Adding interface: gretap1
[  428.398647][T14847] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  428.425115][T14847] batman_adv: batadv0: Interface activated: gretap1
[  428.683770][T14864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3875'.
[  429.994348][T14909] overlayfs: failed to clone upperpath
[  430.027832][ T5068] kernel read not supported for file [userfaultfd] (pid: 5068 comm: kworker/1:10)
[  430.218782][T14923] netlink: 'syz.5.3898': attribute type 1 has an invalid length.
[  430.266189][T14923] 8021q: adding VLAN 0 to HW filter on device bond7
[  430.442919][T14923] bond7: (slave geneve2): making interface the new active one
[  430.506930][T14923] bond7: (slave geneve2): Enslaving as an active interface with an up link
[  430.524791][T14932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3900'.
[  430.547530][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready
[  430.771868][T14941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3904'.
[  430.972598][T14945] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3905'.
[  430.985787][T14949] fuse: Bad value for 'fd'
[  431.015547][T14945] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  431.065309][T14945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  431.476041][T14959] ������: renamed from veth0_vlan
[  432.258625][   T27] audit: type=1326 audit(44675.605:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14979 comm="syz.5.3917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78079de99 code=0x7ffc0000
[  432.312927][   T27] audit: type=1326 audit(44675.625:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14979 comm="syz.5.3917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78079de99 code=0x7ffc0000
[  432.363300][   T27] audit: type=1326 audit(44675.625:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14979 comm="syz.5.3917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78079de99 code=0x7ffc0000
[  432.416995][   T27] audit: type=1326 audit(44675.625:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14979 comm="syz.5.3917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78079de99 code=0x7ffc0000
[  432.473184][   T27] audit: type=1326 audit(44675.625:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14979 comm="syz.5.3917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fe78079de99 code=0x7ffc0000
[  432.537641][   T27] audit: type=1326 audit(44675.625:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14979 comm="syz.5.3917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78079de99 code=0x7ffc0000
[  432.591587][   T27] audit: type=1326 audit(44675.635:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14979 comm="syz.5.3917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78079de99 code=0x7ffc0000
[  432.625684][   T27] audit: type=1326 audit(44675.635:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14979 comm="syz.5.3917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78079de99 code=0x7ffc0000
[  432.680954][   T27] audit: type=1326 audit(44675.635:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14979 comm="syz.5.3917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78079de99 code=0x7ffc0000
[  432.784573][   T27] kauditd_printk_skb: 135 callbacks suppressed
[  432.784587][   T27] audit: type=1326 audit(44676.125:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14979 comm="syz.5.3917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78079de99 code=0x7ffc0000
[  432.845438][   T27] audit: type=1326 audit(44676.125:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14979 comm="syz.5.3917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78079de99 code=0x7ffc0000
[  432.891346][   T27] audit: type=1326 audit(44676.125:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14979 comm="syz.5.3917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe78079de99 code=0x7ffc0000
[  432.936215][   T27] audit: type=1326 audit(44676.125:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14979 comm="syz.5.3917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78079de99 code=0x7ffc0000
[  432.981591][   T27] audit: type=1326 audit(44676.125:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14979 comm="syz.5.3917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78079de99 code=0x7ffc0000
[  433.026925][   T27] audit: type=1326 audit(44676.125:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14979 comm="syz.5.3917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78079de99 code=0x7ffc0000
[  433.076902][   T27] audit: type=1326 audit(44676.125:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14979 comm="syz.5.3917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe78079de99 code=0x7ffc0000
[  433.137061][   T27] audit: type=1326 audit(44676.125:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14979 comm="syz.5.3917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78079de99 code=0x7ffc0000
[  433.202839][   T27] audit: type=1326 audit(44676.125:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14979 comm="syz.5.3917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78079de99 code=0x7ffc0000
[  433.253670][   T27] audit: type=1326 audit(44676.125:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14979 comm="syz.5.3917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78079de99 code=0x7ffc0000
[  435.029585][T15061] lo speed is unknown, defaulting to 1000
[  435.509383][T15094] 8021q: adding VLAN 0 to HW filter on device bond5
[  435.548576][T15094] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  435.558511][T15094] bond5: (slave macvlan2): Enslaving as a backup interface with a down link
[  435.673894][T15101] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.3954'.
[  435.731677][T15101] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3954'.
[  435.788292][T15108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3958'.
[  435.824551][T15108] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  435.833724][T15108] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  435.842652][T15108] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  435.851450][T15108] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  435.892352][T15113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3958'.
[  436.370201][T15134] lo speed is unknown, defaulting to 1000
[  438.057811][T15190] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3991'.
[  438.751774][T15228] netlink: 'syz.3.4004': attribute type 1 has an invalid length.
[  438.819578][   T27] kauditd_printk_skb: 254 callbacks suppressed
[  438.819593][   T27] audit: type=1326 audit(44938.158:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15233 comm="syz.5.4006" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe78079de99 code=0x0
[  438.838168][T15228] 8021q: adding VLAN 0 to HW filter on device bond6
[  438.902455][T15237] netlink: 'syz.0.4007': attribute type 1 has an invalid length.
[  438.924140][T15237] 8021q: adding VLAN 0 to HW filter on device bond6
[  438.949384][T15228] bond6: (slave geneve2): making interface the new active one
[  438.968376][T15228] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  438.982827][T15237] bond6: Error: No native XDP support for the current bonding mode
[  439.001309][ T6019] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready
[  439.701570][   T27] audit: type=1326 audit(44939.038:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15272 comm="syz.3.4019" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2da59de99 code=0x7ffc0000
[  439.776964][   T27] audit: type=1326 audit(44939.048:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15272 comm="syz.3.4019" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7ff2da59de99 code=0x7ffc0000
[  439.820412][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  439.826778][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  439.880833][   T27] audit: type=1326 audit(44939.048:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15272 comm="syz.3.4019" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2da59de99 code=0x7ffc0000
[  439.914997][T15279] netlink: 'syz.4.4021': attribute type 1 has an invalid length.
[  439.964352][T15279] 8021q: adding VLAN 0 to HW filter on device bond6
[  440.033827][   T27] audit: type=1326 audit(44939.048:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15272 comm="syz.3.4019" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2da59de99 code=0x7ffc0000
[  440.078177][T15279] bond6: (slave geneve2): making interface the new active one
[  440.088279][T15279] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  440.101561][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready
[  440.110446][T15279] syz.4.4021 (15279) used greatest stack depth: 18576 bytes left
[  440.165047][   T27] audit: type=1326 audit(44939.048:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15272 comm="syz.3.4019" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff2da59de99 code=0x7ffc0000
[  440.207405][T15292] 9pnet_fd: Insufficient options for proto=fd
[  440.220186][   T27] audit: type=1326 audit(44939.048:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15272 comm="syz.3.4019" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2da59de99 code=0x7ffc0000
[  440.277301][   T27] audit: type=1326 audit(44939.048:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15272 comm="syz.3.4019" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2da59de99 code=0x7ffc0000
[  440.301891][   T27] audit: type=1326 audit(44939.048:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15272 comm="syz.3.4019" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff2da59de99 code=0x7ffc0000
[  440.328303][   T27] audit: type=1326 audit(44939.048:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15272 comm="syz.3.4019" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2da59de99 code=0x7ffc0000
[  440.933833][T15320] netlink: 'syz.0.4039': attribute type 1 has an invalid length.
[  441.016963][T15320] 8021q: adding VLAN 0 to HW filter on device bond7
[  441.155110][T15325] bond7: (slave geneve2): making interface the new active one
[  441.214132][T15325] bond7: (slave geneve2): Enslaving as an active interface with an up link
[  441.262393][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready
[  441.504079][T15331] netlink: 'syz.1.4042': attribute type 1 has an invalid length.
[  441.593393][T15331] 8021q: adding VLAN 0 to HW filter on device bond6
[  441.650779][T15340] bond6: (slave gretap1): Enslaving as a backup interface with an up link
[  441.706326][   T46] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  441.746680][T15331] bond6: (slave dummy0): Enslaving as a backup interface with an up link
[  441.755168][T15340] netlink: 'syz.1.4042': attribute type 10 has an invalid length.
[  441.763455][T15340] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4042'.
[  441.774306][T15340] device dummy0 entered promiscuous mode
[  441.785076][T15340] bond6: (slave dummy0): Releasing backup interface
[  441.803580][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready
[  441.888013][   T46] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  442.012606][T15363] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  442.038534][T15363] batman_adv: batadv0: Adding interface: gretap2
[  442.056253][T15363] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  442.131503][T15363] batman_adv: batadv0: Interface activated: gretap2
[  444.648580][T15431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4076'.
[  444.694898][ T4338] libceph: connect (1)[c::]:6789 error -97
[  444.701285][ T4338] libceph: mon0 (1)[c::]:6789 connect error
[  444.736882][T15436] ceph: No mds server is up or the cluster is laggy
[  447.707101][T15540] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  448.321638][T15557] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  448.498167][T15568] lo speed is unknown, defaulting to 1000
[  449.754226][T15613] overlayfs: failed to clone upperpath
[  449.946393][T15623] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  450.402942][T15651] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4153'.
[  450.444276][T15647] lo speed is unknown, defaulting to 1000
[  451.571858][T15714] netlink: 'syz.4.4178': attribute type 1 has an invalid length.
[  451.630776][T15714] 8021q: adding VLAN 0 to HW filter on device bond7
[  451.697859][T15718] bond7: (slave gretap2): Enslaving as a backup interface with an up link
[  451.754746][T15466] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  451.863584][T15722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4179'.
[  451.904523][T15466] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  451.915805][T15714] bond7: (slave dummy0): Enslaving as a backup interface with an up link
[  451.968168][T15718] netlink: 'syz.4.4178': attribute type 10 has an invalid length.
[  452.005717][T15718] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4178'.
[  452.034034][T15718] device dummy0 entered promiscuous mode
[  452.047525][T15718] bond7: (slave dummy0): Releasing backup interface
[  452.067164][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready
[  452.713565][T15753] 9pnet_fd: p9_fd_create_tcp (15753): problem connecting socket to 127.0.0.1
[  452.879471][T15762] device syzkaller0 left promiscuous mode
[  453.380060][T15787] overlayfs: failed to clone upperpath
[  454.550083][T15828] lo speed is unknown, defaulting to 1000
[  457.943886][T15936] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4261'.
[  459.944321][T15987] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4281'.
[  459.980170][T15987] device ip6gre1 entered promiscuous mode
[  460.107651][T15987] netlink: 'syz.1.4281': attribute type 6 has an invalid length.
[  460.128106][T15987] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4281'.
[  460.258068][   T27] kauditd_printk_skb: 16 callbacks suppressed
[  460.258083][   T27] audit: type=1326 audit(47537.601:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16000 comm="syz.0.4286" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1ed9de99 code=0x7ffc0000
[  460.293856][   T27] audit: type=1326 audit(47537.631:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16000 comm="syz.0.4286" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1ed9de99 code=0x7ffc0000
[  460.347628][   T27] audit: type=1326 audit(47537.641:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16000 comm="syz.0.4286" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1ed9de99 code=0x7ffc0000
[  460.420616][   T27] audit: type=1326 audit(47537.641:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16000 comm="syz.0.4286" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1ed9de99 code=0x7ffc0000
[  460.473078][   T27] audit: type=1326 audit(47537.661:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16000 comm="syz.0.4286" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f9e1ed9de99 code=0x7ffc0000
[  460.535700][   T27] audit: type=1326 audit(47537.661:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16000 comm="syz.0.4286" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1ed9de99 code=0x7ffc0000
[  460.561663][   T27] audit: type=1326 audit(47537.661:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16000 comm="syz.0.4286" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1ed9de99 code=0x7ffc0000
[  460.594452][   T27] audit: type=1326 audit(47537.661:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16000 comm="syz.0.4286" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9e1ed9de99 code=0x7ffc0000
[  460.680483][   T27] audit: type=1326 audit(47537.661:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16000 comm="syz.0.4286" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9e1ed9de99 code=0x7ffc0000
[  461.567470][T16047] netlink: 'syz.5.4304': attribute type 12 has an invalid length.
[  461.999754][T16054] lo speed is unknown, defaulting to 1000
[  462.561237][T16076] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4314'.
[  462.691230][T16079] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  462.714168][T16082] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4316'.
[  463.010390][T16090] device bond7 entered promiscuous mode
[  463.201576][T16105] lo speed is unknown, defaulting to 1000
[  465.590857][ T4393] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.763617][ T4393] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.933601][ T4393] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.023519][T16173] overlayfs: failed to clone upperpath
[  466.228454][ T4393] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.523533][T16189] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4358'.
[  466.552986][T16192] netlink: 'syz.5.4359': attribute type 1 has an invalid length.
[  466.613260][T16192] 8021q: adding VLAN 0 to HW filter on device bond8
[  468.721830][T16248] overlayfs: failed to clone upperpath
[  469.517567][T16266] tipc: Started in network mode
[  469.522766][T16266] tipc: Node identity 080211000001, cluster identity 4711
[  469.560373][T16266] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  469.633389][ T4393] device hsr_slave_0 left promiscuous mode
[  469.675374][ T4393] device hsr_slave_1 left promiscuous mode
[  469.690782][ T4393] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  469.710960][ T4393] batman_adv: batadv0: Removing interface: batadv_slave_0
[  469.737328][ T4393] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  469.766127][ T4393] batman_adv: batadv0: Removing interface: batadv_slave_1
[  469.797914][ T4393] device bridge_slave_1 left promiscuous mode
[  469.817117][ T4393] bridge0: port 2(bridge_slave_1) entered disabled state
[  469.837251][ T4393] device bridge_slave_0 left promiscuous mode
[  469.850296][ T4393] bridge0: port 1(bridge_slave_0) entered disabled state
[  469.958793][ T4393] device veth1_macvtap left promiscuous mode
[  469.979116][ T4393] device veth0_macvtap left promiscuous mode
[  470.000823][ T4393] device veth1_vlan left promiscuous mode
[  470.031639][ T4393] device veth0_vlan left promiscuous mode
[  470.567947][T16304] fuse: Bad value for 'fd'
[  471.668634][T16337] tipc: Failed to remove unknown binding: 66,0,0/3664630468:3232562716/3232562717
[  471.707818][T16337] tipc: Failed to remove unknown binding: 66,0,0/3664630468:3232562716/3232562717
[  472.249204][   T27] audit: type=1326 audit(47549.594:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16348 comm="syz.0.4406" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e1ed9de99 code=0x0
[  472.282178][ T4393] team0 (unregistering): Port device team_slave_1 removed
[  472.342037][ T4393] team0 (unregistering): Port device team_slave_0 removed
[  472.416261][ T4393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  472.474784][ T4393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  473.409780][ T4393] bond0 (unregistering): Released all slaves
[  473.585737][ T5432] tipc: Node number set to 134418688
[  473.728824][T16367] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.4401'.
[  473.755511][T16367] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4401'.
[  475.341574][T16419] sctp: [Deprecated]: syz.0.4416 (pid 16419) Use of int in max_burst socket option deprecated.
[  475.341574][T16419] Use struct sctp_assoc_value instead
[  475.764109][T16404] lo speed is unknown, defaulting to 1000
[  478.619863][T16510] cgroup: fork rejected by pids controller in /syz1
[  480.584969][T16664] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4461'.
[  480.648630][T16664] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4461'.
[  480.697188][T16668] netlink: 176 bytes leftover after parsing attributes in process `syz.5.4463'.
[  480.713395][T16664] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4461'.
[  480.972063][T16676] lo speed is unknown, defaulting to 1000
[  482.473253][T16718] netlink: 'syz.3.4477': attribute type 1 has an invalid length.
[  482.716623][T16724] bond7: (slave dummy0): making interface the new active one
[  482.796229][T16724] bond7: (slave dummy0): Enslaving as an active interface with an up link
[  482.839392][T16725] device bond7 entered promiscuous mode
[  482.870730][T16725] device dummy0 entered promiscuous mode
[  482.886658][T16717] device bond7 left promiscuous mode
[  482.897597][T16734] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4482'.
[  482.953601][T16717] device dummy0 left promiscuous mode
[  482.983564][   T57] ------------[ cut here ]------------
[  482.989431][   T57] WARNING: CPU: 1 PID: 57 at net/mac80211/ibss.c:500 ieee80211_ibss_csa_beacon+0x5b4/0x680
[  482.999635][   T57] Modules linked in:
[  483.003517][   T57] CPU: 1 PID: 57 Comm: kworker/u4:4 Not tainted syzkaller #0
[  483.010974][   T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  483.021456][   T57] Workqueue: phy10 ieee80211_csa_finalize_work
[  483.027860][   T57] RIP: 0010:ieee80211_ibss_csa_beacon+0x5b4/0x680
[  483.034328][   T57] Code: f7 c6 05 ac 26 63 04 01 48 c7 c7 b0 b4 a6 8b be fd 01 00 00 48 c7 c2 40 b5 a6 8b e8 d6 2a bb f7 e9 69 fe ff ff e8 1c a8 d8 f7 <0f> 0b b8 ea ff ff ff e9 7a ff ff ff e8 0b a8 d8 f7 0f 0b e9 b4 fa
[  483.053951][   T57] RSP: 0018:ffffc90001587b70 EFLAGS: 00010293
[  483.060045][   T57] RAX: ffffffff89a97984 RBX: ffff8880553d0740 RCX: ffff888019b40000
[  483.068005][   T57] RDX: 0000000000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf42e0
[  483.075991][   T57] RBP: 1ffff1100f9492b5 R08: ffffffff90b10307 R09: 1ffffffff2162060
[  483.083976][   T57] R10: dffffc0000000000 R11: fffffbfff2162061 R12: dffffc0000000000
[  483.091960][   T57] R13: ffff88807ca49ac8 R14: ffff88807ca48c80 R15: 0000000000000000
[  483.099945][   T57] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  483.108861][   T57] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  483.115464][   T57] CR2: 00007fefbd5eb580 CR3: 000000007eba4000 CR4: 00000000003506e0
[  483.123471][   T57] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  483.131495][   T57] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  483.139497][   T57] Call Trace:
[  483.142764][   T57]  <TASK>
[  483.145682][   T57]  ? ieee80211_ibss_finish_csa+0x299/0x390
[  483.151513][   T57]  ieee80211_csa_finalize+0x4ef/0xc60
[  483.156879][   T57]  ieee80211_csa_finalize_work+0xf2/0x130
[  483.162626][   T57]  ? process_one_work+0x7b4/0x1160
[  483.167792][   T57]  process_one_work+0x8ab/0x1160
[  483.172752][   T57]  ? worker_detach_from_pool+0x240/0x240
[  483.178380][   T57]  ? _raw_spin_lock_irq+0xb7/0xf0
[  483.183492][   T57]  ? _raw_spin_lock_irqsave+0x100/0x100
[  483.189071][   T57]  ? wq_worker_running+0x97/0x190
[  483.194134][   T57]  worker_thread+0xaf5/0x12a0
[  483.198851][   T57]  kthread+0x29d/0x330
[  483.203024][   T57]  ? worker_clr_flags+0x1a0/0x1a0
[  483.208039][   T57]  ? kthread_blkcg+0xd0/0xd0
[  483.212641][   T57]  ret_from_fork+0x1f/0x30
[  483.217071][   T57]  </TASK>
[  483.220109][   T57] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  483.227373][   T57] CPU: 1 PID: 57 Comm: kworker/u4:4 Not tainted syzkaller #0
[  483.234728][   T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  483.244766][   T57] Workqueue: phy10 ieee80211_csa_finalize_work
[  483.250910][   T57] Call Trace:
[  483.254173][   T57]  <TASK>
[  483.257089][   T57]  dump_stack_lvl+0x188/0x24e
[  483.261770][   T57]  ? memcpy+0x3c/0x60
[  483.265785][   T57]  ? show_regs_print_info+0x12/0x12
[  483.270985][   T57]  ? load_image+0x410/0x410
[  483.275513][   T57]  panic+0x2d3/0x710
[  483.279402][   T57]  ? bpf_jit_dump+0xd0/0xd0
[  483.283893][   T57]  ? ret_from_fork+0x1f/0x30
[  483.288471][   T57]  __warn+0x2f8/0x4f0
[  483.292436][   T57]  ? ieee80211_ibss_csa_beacon+0x5b4/0x680
[  483.298228][   T57]  ? ieee80211_ibss_csa_beacon+0x5b4/0x680
[  483.304022][   T57]  report_bug+0x2ba/0x4f0
[  483.308400][   T57]  ? ieee80211_ibss_csa_beacon+0x5b4/0x680
[  483.314196][   T57]  handle_bug+0x3a/0x70
[  483.318341][   T57]  exc_invalid_op+0x16/0x40
[  483.322835][   T57]  asm_exc_invalid_op+0x16/0x20
[  483.327672][   T57] RIP: 0010:ieee80211_ibss_csa_beacon+0x5b4/0x680
[  483.334077][   T57] Code: f7 c6 05 ac 26 63 04 01 48 c7 c7 b0 b4 a6 8b be fd 01 00 00 48 c7 c2 40 b5 a6 8b e8 d6 2a bb f7 e9 69 fe ff ff e8 1c a8 d8 f7 <0f> 0b b8 ea ff ff ff e9 7a ff ff ff e8 0b a8 d8 f7 0f 0b e9 b4 fa
[  483.353670][   T57] RSP: 0018:ffffc90001587b70 EFLAGS: 00010293
[  483.359721][   T57] RAX: ffffffff89a97984 RBX: ffff8880553d0740 RCX: ffff888019b40000
[  483.367672][   T57] RDX: 0000000000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf42e0
[  483.375625][   T57] RBP: 1ffff1100f9492b5 R08: ffffffff90b10307 R09: 1ffffffff2162060
[  483.383586][   T57] R10: dffffc0000000000 R11: fffffbfff2162061 R12: dffffc0000000000
[  483.391541][   T57] R13: ffff88807ca49ac8 R14: ffff88807ca48c80 R15: 0000000000000000
[  483.399500][   T57]  ? ieee80211_ibss_csa_beacon+0x5b4/0x680
[  483.405303][   T57]  ? ieee80211_ibss_finish_csa+0x299/0x390
[  483.411097][   T57]  ieee80211_csa_finalize+0x4ef/0xc60
[  483.416454][   T57]  ieee80211_csa_finalize_work+0xf2/0x130
[  483.422157][   T57]  ? process_one_work+0x7b4/0x1160
[  483.427252][   T57]  process_one_work+0x8ab/0x1160
[  483.432186][   T57]  ? worker_detach_from_pool+0x240/0x240
[  483.437803][   T57]  ? _raw_spin_lock_irq+0xb7/0xf0
[  483.442808][   T57]  ? _raw_spin_lock_irqsave+0x100/0x100
[  483.448335][   T57]  ? wq_worker_running+0x97/0x190
[  483.453348][   T57]  worker_thread+0xaf5/0x12a0
[  483.458019][   T57]  kthread+0x29d/0x330
[  483.462066][   T57]  ? worker_clr_flags+0x1a0/0x1a0
[  483.467070][   T57]  ? kthread_blkcg+0xd0/0xd0
[  483.471644][   T57]  ret_from_fork+0x1f/0x30
[  483.476051][   T57]  </TASK>
[  483.479315][   T57] Kernel Offset: disabled
[  483.483751][   T57] Rebooting in 86400 seconds..