last executing test programs:

3m50.331808798s ago: executing program 4 (id=95):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
bind$tipc(r2, 0x0, 0x0)

3m50.210479421s ago: executing program 4 (id=97):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000380)={0x1, 0x0, [{0x40000000, 0x3, 0x5, 0x8, 0x6, 0x0, 0x38000}]})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x7, 0xc, 0x6, 0xfffffffffffffffd, 0x8, 0x5, 0x4, 0x2, 0x8, 0x4, 0x3, 0x3, 0x1932be21, 0x100000000, 0x4, 0x4], 0xeeee0000, 0x40600})
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0xc000)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x1, 0x0, 0x8, 0x0, 0x10, 0x0, 0x4, 0x80, 0x9, 0x80, 0x0, 0xfffffffe, 0xfffffff8, 0x0, 0xff, 0xff, 0x6, '\x00', 0x0, 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m50.009767155s ago: executing program 4 (id=98):
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/679, 0x6)
fallocate(r0, 0x0, 0x0, 0x400001)
fcntl$addseals(r0, 0x409, 0xc)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80})

3m49.883433349s ago: executing program 4 (id=99):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0), 0x1, 0x434, &(0x7f0000000940)="$eJzs3E+IVVUcB/DfvTOjOY69MaKpCJQSLcJR37PaaosWbVwIQn+Ehnw64tMJ30RpQlogQkS0kAQhpmUE5aJFEUG0iaAWLQoiSagWYVghLdpNvHfvnXnoHahxxqvT5wN33rnnvbnfe7hwOQfu/QXwv7U2IrZFRF9EjEZELe9P8y2OZ1vnd8ca58Y7WxLT0zv/SCKJiGbj3HhxrCT/XJn/2y0Rcdu2JB7tvzq3feTogbFWq3k43980efC5Te0jRzfuPzi2r7mveaix9eF6fetDjUcWbqznR16Jen3bwAcb1p76+tPXv+uc71D+Xe84FlIyR+f2xQir0EBPOym53tx43jz9xidVnwMAcP2l+dy/vzv/r0VfZJO3C+efvlyLlwerPj8AAADg2k1P9+WfAAAAwNKVWPsDAADAElc8B9BsnBsvtuv17MHKByIubY+I4Sy/eL84+7a/+/5w5O+WDixC/r0XFuGg/0H78Wrzv9lVbf7q96rNn/qh2vxn1leb/8tP1eavW1Nt/umJiM+2ZwUQmo3lEdF7/0u7NQ8KyyJieV7TYMUC5a/5fPb+d+yq+186c//ri4hreRHr1NTFk2X9I49FXDoRcXd/WX4yk5/kNR3ma+O3J3aX9a++FDH9TsT66M1/f3w2dbY1d32ITXv3t5qbs7/l+Y2XnqyV9e/4Ihv/YJSPfzj/XV9PnYj5ODO4+6NVJf27RrP8++8rv/539oz/1rw2x/A88tfe1dpR1r/+tSx/zxzj773+q+eRW5j6rf1zWf+HW6/hoADAvKXduU2Sjs6003R0NJvv3R6DaWuiPfng3onnD+3J5kDDMZAWU61sPjKQdPa35HOTYr9+xX4jn0Ocqq3o7o8+O9HaU/XgAQAAYIkbivjxqVc/Hll5xfr/11q2/gcAAABufp31/z1Tb5/ttP8qfToSAAAAuNl11v+XT/7+ZVj/AwAAwJJl/Q8AAABLX7H+H5qj/t+qntp9m/P6w1/VBpYXtf4AAACAG19n/Z9+/8SF9pGjB8ZareZhDQ0NjZlG1XcoAABgoc1O+qs+EwAAAGDxpBeTiOhsG2rrhu5Y8+5I77fLkr+71QGWRcQLZ3e+9eLY5OThLZ3+P2f6J8/k/fV/FXh8ccYBAAAAFIp1erGOBwAAAAAAAAAAAAAAbnzXo5x41WMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg4fwTAAD//wB7l14=")
r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000005a00)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
r2 = dup(r1)
pwritev2(r2, &(0x7f0000000500)=[{&(0x7f00000000c0)="aa", 0x1}], 0x1, 0xd8c1, 0x0, 0x11)
io_setup(0x202, &(0x7f0000000200)=<r3=>0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000, 0x100000}])

3m49.362245552s ago: executing program 4 (id=102):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$igmp(0x2, 0x3, 0x2)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000008c0), 0x0, 0x0, 0x0, 0x1}}, 0x40)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1224)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x1, {0x0, 0x0, 0x4}, 0x1}, 0x18)
sendmsg$can_j1939(r0, &(0x7f0000000140)={&(0x7f0000000440)={0x1d, r2, 0x2, {0x0, 0xf0, 0x4}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x24004045}, 0x1)

3m48.218479731s ago: executing program 4 (id=107):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x80, 0x4)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

3m47.891244489s ago: executing program 32 (id=107):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x80, 0x4)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

3m8.961964188s ago: executing program 5 (id=306):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x169140, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x80000100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x8, 0x8, 0x4, 0x0, 0x8000], 0x8080000, 0x3c5200})
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m8.579129688s ago: executing program 5 (id=307):
add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffd)
r0 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000900)='syz \x00', 0x5)
bind$rxrpc(r0, &(0x7f0000000300)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0xc351, @loopback}}, 0x24)
listen(r0, 0xa)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000600)="0100000002000800ffffff7f010000000011223344556677aabbccddeeff0011", 0x20, 0xfffffffd)
setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000a00)='syz \x00', 0x5)
connect$rxrpc(r1, &(0x7f0000000700)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0xc351, @loopback}}, 0x24)
sendmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000d00)='hello', 0x5}], 0x1, &(0x7f0000000e00)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0)

3m8.385744003s ago: executing program 5 (id=309):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0)
mknodat$null(0xffffffffffffffff, 0x0, 0x1000, 0x103)
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x88, &(0x7f0000001a00)=ANY=[], 0x5, 0x1ec, &(0x7f00000000c0)="$eJzsmb+LE0EUx78zm0vOQwQbCxsLTzx/3GZ348k1KRTsBX93BrOG6CaRzQpJwCLY2FhaCLb+A5ap7WzEVgsVBJuUYiOMzOzsZPJjxRhR8d4HMvnumzdv5s0wbyEBQRB7lo8fvrx/fH738mkA+7GJkrZ/diY+3PJ/9/T+qSfVC89evH3+sn3gwWg2Xmm56ZV7/SSQYJ82CWE7bMrGmR50BRwntL4GhmNa3wTHVa1DMNzQ+o6lO9k0Ueje6kT1280o9GSzY+wVe64CgPGQoQ5gXa1OCGb1d/uDu7UoCuNZsSayeHNdy4ofbaBa3zmOqtk9IeR5XX/0cCifXW33wNO9BOCDw9e6AoZLWu+iBNd1zZb4Vv6HnUl852fyN+Lrivk7vz784PZv2P3/R2R3819Zz98SbNYiL7SxHBqPXs2P+rT67Gzqysgn+fkDKavCtejc32ysFrmoM1roIzteq25WAI5b9amgqkpKOWndK3f7g+1mq9YIG2E7CCpnvTOetxOUVSFK27m6983Uv3VVnzas+Gs5tbLIiujVkiT2e0AS++Y5SFu5bukXm8qavvvGQ46to2kMeWQq7ZwXXXasXH1LteXkLIcgCIIgCIIgCIIgCIIgCGJJjoBBqN9B1R9VIofgovL+HgAA//9RVFP2")
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf2, 0x5, 0x0, '\x00', 0x8001})
close_range(r0, r2, 0x0)

3m7.893024196s ago: executing program 5 (id=312):
socket$kcm(0x2, 0x1000000000000002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0xd231c4f959ad4808)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)

3m3.37593014s ago: executing program 5 (id=325):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file1\x00'})

3m3.137254866s ago: executing program 5 (id=327):
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r0 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1}, 0x80)
r1 = socket$kcm(0x1e, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r2 = socket$kcm(0x1e, 0x4, 0x0)
close(r0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef)

2m48.004963191s ago: executing program 33 (id=327):
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r0 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1}, 0x80)
r1 = socket$kcm(0x1e, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r2 = socket$kcm(0x1e, 0x4, 0x0)
close(r0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef)

2m46.357137923s ago: executing program 2 (id=426):
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000008c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xc200040, 0x0, 0x8, 0x0, 0x1ff, 0x0, 0x0, 0x8}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xb, {0x0, 0xd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
ioctl$TIOCSPTLCK(r2, 0x40806685, 0xfffffffffffffffe)

2m43.013165958s ago: executing program 2 (id=442):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3f9, 0x4)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x8, @loopback}, 0x1c)
listen(r1, 0x5)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x6e23, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, 0x4}, 0x1c)
r2 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x100000b}, 0x1c)
listen(r2, 0xb)
listen(r0, 0x50)

2m42.818114893s ago: executing program 2 (id=444):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0x5}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10)
bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10)
bind$tipc(r0, 0x0, 0x0)

2m42.573851509s ago: executing program 2 (id=445):
socket(0xa, 0x5, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000280), 0x4)
setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040)=0x7, 0x4)
r1 = fcntl$dupfd(r0, 0x406, r0)
write$cgroup_pid(r1, &(0x7f0000000000)=0xffffffffffffffff, 0x12)
read$FUSE(r1, &(0x7f0000002540)={0x2020}, 0x12)

2m41.568169814s ago: executing program 2 (id=448):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES8=0x0, @ANYRESHEX=r0, @ANYRES16], 0xfe, 0x1518, &(0x7f00000022c0)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x19)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

2m39.457734708s ago: executing program 2 (id=455):
unshare(0x4a000200)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000ffff2bbd7000fddbdf2700000000", @ANYRES32=0x0, @ANYBLOB="715a030063180100280012800b000100697036746e6c"], 0x48}, 0x1, 0x0, 0x0, 0x20048080}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28)
connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c)
r2 = fcntl$dupfd(r1, 0x406, r1)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)={0x67, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x1c}, @enc_lim={0x4, 0x1, 0x5}, @ra={0x5, 0x2, 0x6}]}, 0x18)
setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$unix(r2, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e)

2m24.344819812s ago: executing program 34 (id=455):
unshare(0x4a000200)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000ffff2bbd7000fddbdf2700000000", @ANYRES32=0x0, @ANYBLOB="715a030063180100280012800b000100697036746e6c"], 0x48}, 0x1, 0x0, 0x0, 0x20048080}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28)
connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c)
r2 = fcntl$dupfd(r1, 0x406, r1)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)={0x67, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x1c}, @enc_lim={0x4, 0x1, 0x5}, @ra={0x5, 0x2, 0x6}]}, 0x18)
setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$unix(r2, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e)

8.702128419s ago: executing program 7 (id=1217):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000400)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000400)={'wlan0\x00', 0x1})
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x2c}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000840)=@data_frame={@msdu=@type00={{}, {}, @device_a, @broadcast, @from_mac=@broadcast}, @a_msdu=[{@device_a, @device_b}, {@device_a, @device_a, 0x7e, "d7209640c472c9d21258eb47ad689e321351915517a08dfa6293fbc17f09c5bff203f1ab9df0fc5b22a2301163112ac8e46dd52e8d90e44ddc082e83378cf5fd1ee7c0535d357997a6f4e8cb346588dc8af6ed63c00b1771307656533b0d1d7bc5a5b4d54a432520d56641f59869349c5c819f39eaa272cd5f39dda03be3"}, {@device_b, @broadcast}, {@broadcast, @device_b, 0x1a, "1bc7454727973f2e55ddcfc0db6330979a77c940c4655f926f1d"}, {@device_b, @device_b}]}, 0xfc)
nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0)

8.218921631s ago: executing program 3 (id=1225):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}})

7.177369368s ago: executing program 3 (id=1230):
syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c0009800800014000", @ANYRESOCT=r3], 0xb0}}, 0x0)
sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x14, 0x1, 0xa, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x800)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x673, 0x8)

7.158359458s ago: executing program 7 (id=1232):
r0 = socket$netlink(0x10, 0x3, 0x10)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4)
syz_open_dev$dvb_demux(0x0, 0x0, 0x62400)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}})

5.229790867s ago: executing program 1 (id=1238):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001000010405000000030000000000", @ANYBLOB="0305000020008000080005"], 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x5, 0x1000000000, 0x5, 0x7fffffffffffffff, 0x80000000, 0x3, 0x2004d0, 0x0, 0xa19, 0x8, 0x5, 0x0, 0x3, 0x2, 0x5, 0x8000000000], 0x10000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xfec00000, 0x80a0000, 0x9, 0x7, 0xff, 0x10, 0x80, 0x7, 0x0, 0x8, 0x9}, {0x8080000, 0x10000, 0x10, 0x0, 0x2, 0x0, 0xfd, 0xfe, 0x7, 0xff}, {0xb000, 0x8080000, 0xf, 0x0, 0x27, 0xc4, 0x0, 0x0, 0x7, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x80a0000, 0xeeee8000, 0xb, 0x0, 0xfe, 0x6, 0x0, 0x80, 0x8, 0x3f, 0x6}, {0xb000, 0x30000, 0x9, 0x76, 0x2, 0x1, 0x2, 0x82, 0x0, 0xd, 0x6, 0x40}, {0xeeee8000, 0xeeee8000, 0x9, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4, 0xc}, {0x80a0000, 0x50000, 0xc, 0x8b, 0x0, 0x66, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x4000, 0x8cc}, {0xdddd1000, 0x40}, 0xddf8ffd3, 0x0, 0xddd8d000, 0x110, 0x7, 0xf801, 0x3000, [0x80000004, 0x0, 0x10000, 0x7f]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.877917956s ago: executing program 6 (id=1239):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'pimreg0\x00', &(0x7f0000000180)=@ethtool_rx_ntuple={0x35, {0xc, @usr_ip4_spec={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x7, 0xff, 0x1, 0x7f}, @sctp_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x4e20, 0x4e21, 0x3}, 0x3, 0x5, 0x10, 0x6e00000000000000, 0xfffffffffffffffe}}})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001400)=@raw={'raw\x00', 0x3c1, 0x3, 0x1398, 0x0, 0xc8, 0x8, 0x11b8, 0x5803, 0x12c8, 0x2e8, 0x2e8, 0x12c8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11b8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfd8f80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x3, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x13f8)

4.869078876s ago: executing program 1 (id=1249):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000100003042cbd70000000000000000000", @ANYRES32=r2, @ANYBLOB="46060900030705002c00128009000100626f6e64000000001c0002800800030005000000050006"], 0x4c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0)

4.868475116s ago: executing program 0 (id=1240):
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'sh\x00', 0x21, 0x3, 0x4f}, {@rand_addr=0x64010100, 0x4e23, 0x2004, 0xfffffffd, 0x12d5c, 0x12d5c}}, 0x44)
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db28709050201200003100d090585"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000480)={0xc, &(0x7f0000000100)={0x0, 0x23, 0x46, {0x46, 0x22, "fe18969e23fa69779860e8863f1ac030635289c1b623bd89c8fbfa74066f62af523667f80385ad4469fd194a1c185c290e51749adadd2064dfdd117abba9d854b6105bfd"}}, &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000dc0)={0x24, &(0x7f00000005c0)={0x40, 0xf, 0xce, "eb55102963bff67b4c16378f98e4107b886b866aab5490b5a1e66e0dea23a087b55c7b0e93480eb260b8de784ceeb24e9e903c865f34564b2f5e5f4953370837a455d49ce7754d41d0ff177e0d294fe1abaa0e285295595abaa8f7382b8bcee5f1d383bc018c8e67acf880ac4875ed93bb1d26f15824fed2658f00be9ea6f587b4480bfe8a1bc4a47130136a25b18508685365e4cf24cc6a8b82cc3af42fc2ca8a4059d7962fb02cc6e153a908f2d2c032ecac2cfa1c70166985a89f2622cfb420b329c82ba220825f3659fe0402"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000c80)={0x20, 0x80, 0x1c, {0x9, 0x4, 0x6, 0x800, 0xf, 0xcc, 0xc51, 0x2, 0x9, 0x1, 0x4, 0x4}}, &(0x7f0000000cc0)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000d00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000d40)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000d80)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="000709000000c41d21447228b2d6c2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$I2C(&(0x7f0000000080), 0x1, 0x402)
ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000200)={0x0, 0x7, 0x1, 0x0})

4.631523242s ago: executing program 6 (id=1241):
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0x1e}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10631d0984e7e6db7f", 0x1e}], 0x2)

4.553217414s ago: executing program 6 (id=1242):
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4004)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000180)=0x200802, 0x4)

4.548679974s ago: executing program 1 (id=1243):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}], 0x1, 0x2120, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10)
socket(0x1e, 0x80005, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)

4.33082075s ago: executing program 1 (id=1244):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3f, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b90703600000f007529e0ff065581f", 0x0, 0x104, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.233238643s ago: executing program 7 (id=1245):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181403, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
sendto$inet6(r1, &(0x7f0000000040)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4800)
r3 = fcntl$dupfd(r1, 0x406, r2)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000100)=0xeea, 0x4)
write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78, 0xfffffffffffffff5, 0x0, {0x2, 0x3, 0x0, {0x0, 0x6, 0x400000000000000b, 0x0, 0x7ff, 0x2, 0x2, 0xd, 0x5, 0xa000, 0xa40, 0x0, 0x0, 0x3001, 0x2}}}, 0xffffff03)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

4.124030525s ago: executing program 0 (id=1246):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0x2, 0x2, 0x8, 0x7}, 0x3b, [0x401, 0x20007ff, 0x401, 0x8, 0x10000, 0x45, 0x200, 0x401, 0x7, 0x290, 0xfc, 0x80000000, 0x8, 0x3, 0xfffffd05, 0x9, 0x50d6, 0x7ff, 0xa, 0x0, 0xd4, 0x4, 0x5, 0x1d231da2, 0x6, 0x5, 0x0, 0x9, 0x0, 0x3, 0x101, 0xfffffffd, 0x800, 0xfffffffa, 0x9, 0x2, 0x8, 0x9, 0xf94d, 0x7, 0x3, 0xffffff00, 0x0, 0x575c, 0x4002, 0x5a, 0x2, 0x0, 0x5, 0x5, 0x1ff, 0x2, 0x1, 0x3, 0x6, 0x670, 0x9, 0x8002, 0x2, 0x9b2, 0x0, 0x2, 0x1, 0x1], [0x4, 0x8000, 0xa, 0xfffff2e1, 0x9ca4, 0xffffffff, 0x0, 0x7f, 0x72a8, 0x400, 0x86, 0x2, 0x4, 0x56e, 0x6, 0x4, 0x1100, 0x88a, 0x2, 0x8, 0xb2, 0x106c, 0xa2b8, 0xc60, 0x6740, 0xf2f1, 0x5, 0x1, 0x5, 0xfffffffd, 0x3, 0x0, 0x8, 0x1, 0x81, 0x6, 0x6, 0x0, 0x183, 0x401, 0x6, 0xf, 0xd349, 0x9, 0x6, 0x0, 0x9, 0x0, 0x7fff, 0x2, 0xffffffb1, 0x4, 0x6, 0x6, 0x9, 0x1, 0x2, 0x800, 0x4, 0x3, 0x4, 0x7fffffff, 0xc257f131, 0x7], [0x4, 0x5, 0x8, 0x2, 0x5, 0x80, 0xfffffff7, 0x3, 0x7, 0xb5, 0x6, 0x100, 0x0, 0x1, 0x1, 0x7, 0x8a85, 0x4, 0x430fb4df, 0x7, 0x7, 0x8, 0x8, 0x2, 0x2, 0x9, 0x1000, 0x54e934b9, 0x37, 0x10001, 0x0, 0x8000, 0x32, 0x4, 0x6, 0x6, 0x5, 0xcf9, 0x6, 0x9, 0x2, 0xe, 0x0, 0x7f, 0xffffffff, 0x0, 0xfffffffd, 0x5, 0x0, 0xa, 0x7fffffff, 0xffffffc0, 0x5, 0x6, 0xfff, 0x101, 0x400007, 0x8, 0x2, 0x3, 0x5, 0x83, 0xfffffff8, 0xb6], [0x4, 0x2, 0x4, 0x1, 0x6, 0x4, 0x2, 0x9, 0x16, 0x0, 0x7fff, 0x7fff, 0xd, 0x1, 0x5, 0x5, 0x4, 0x9, 0x20000005, 0x8, 0x7, 0x2, 0x4689, 0xe97f, 0x80000000, 0x5, 0xcd3, 0xc0000000, 0x5, 0xfffff800, 0xe, 0x26419275, 0x80000001, 0x3, 0xfff, 0x8, 0xef7, 0x4ff, 0x1, 0xfffffff0, 0x7, 0x7b9, 0x52a, 0x5, 0x0, 0x6, 0x7fff, 0x7, 0x3ff, 0x0, 0x2, 0xb2a, 0x3, 0x189f, 0x9, 0x9, 0xffff, 0xd, 0xfb9, 0x77, 0x5, 0xfffffffa, 0x6e, 0x1]}, 0x45c)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d0200000000000000000000000038"], 0x51)
close(r2)
inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f00000005c0)='.\x00', 0x12000847)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)

4.051746497s ago: executing program 6 (id=1247):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4000000)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000)
r3 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
sendto$inet6(r3, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0)

3.034978793s ago: executing program 1 (id=1248):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000000000000014", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket(0x10, 0x803, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3, 0x3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

2.987417534s ago: executing program 7 (id=1250):
r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000300), &(0x7f0000000340)=0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
r2 = syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00')
fchdir(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
getdents64(0xffffffffffffffff, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x40016b042, 0x2a)

2.957968345s ago: executing program 0 (id=1251):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f8000000190001002abd7000000000007f000001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7f040000000000000000000000000000000400000000000000ffffffffffffffff070000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001"], 0xf8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8)

1.672289357s ago: executing program 6 (id=1252):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17)
r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
pwrite64(r1, 0x0, 0x0, 0x0)
r2 = syz_pidfd_open(0x0, 0x0)
process_madvise(r2, &(0x7f0000000600), 0x0, 0x15, 0x0)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x14)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x15)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x4)
munmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000)

1.670950047s ago: executing program 0 (id=1253):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010)

1.670757587s ago: executing program 3 (id=1254):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'pimreg0\x00', &(0x7f0000000180)=@ethtool_rx_ntuple={0x35, {0xc, @usr_ip4_spec={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x7, 0xff, 0x1, 0x7f}, @sctp_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x4e20, 0x4e21, 0x3}, 0x3, 0x5, 0x10, 0x6e00000000000000, 0xfffffffffffffffe}}})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001400)=@raw={'raw\x00', 0x3c1, 0x3, 0x1398, 0x0, 0xc8, 0x8, 0x11b8, 0x5803, 0x12c8, 0x2e8, 0x2e8, 0x12c8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11b8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfd8f80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x3, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x13f8)

1.556196121s ago: executing program 7 (id=1255):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c0007800800064000000001"], 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f00000015c0)='./file0\x00', 0x10, &(0x7f0000000380)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@commit={'commit', 0x3d, 0xd1}}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x67, 0x38, 0x2d, 0x32, 0x36, 0x25, 0x2d, 0x2d, 0x37]}}, {@check_int}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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")
io_setup(0x1, 0x0)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)

894.847797ms ago: executing program 3 (id=1256):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x8)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0xffffffffffffffc3, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x81}]}, 0x38}}, 0x8100)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010)

894.030767ms ago: executing program 1 (id=1266):
r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000300), &(0x7f0000000340)=0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
r2 = syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00')
fchdir(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
getdents64(0xffffffffffffffff, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x40016b042, 0x2a)

839.758418ms ago: executing program 0 (id=1257):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./rpc_pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./rpc_pipefs\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='1\n\x00', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f0000000340)='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='port=2049,proto=tcp,clientaddr=127.0.0.1\x00'])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/testfile\x00', 0x0, 0x0)
close(r1)

500.590117ms ago: executing program 3 (id=1258):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x100, 0x2, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r4, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
sendto$packet(r1, &(0x7f0000000240)="3b826a86871d9a3d70e7c44b615ec95585a8238e3651c99acb57b8", 0x1b, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r4, 0x1, 0x4, 0x6, @multicast}, 0x14)

300.551732ms ago: executing program 6 (id=1259):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1}, 0x4)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20a02, 0x0)

55.123218ms ago: executing program 3 (id=1260):
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x44)
ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0xa10, 0x80000, <r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$batadv(0x0, r0)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xfff3, 0xfff1}, {}, {0xc, 0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xd, 0x10}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x20080840)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

53.843248ms ago: executing program 7 (id=1261):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000100001"], 0x20}}, 0x0)
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r2, &(0x7f0000000100), 0x12)
listen(r2, 0x1)
write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e"], 0x88)

0s ago: executing program 0 (id=1262):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004)
recvmmsg(r6, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/4080, 0xff0}], 0x2}, 0xfff}], 0x1, 0x10022, 0x0)

kernel console output (not intermixed with test programs):

OHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[  112.212224][ T1108] usb 4-1: Using ep0 maxpacket: 8
[  112.412863][ T1108] usb 4-1: unable to get BOS descriptor or descriptor too short
[  112.563539][ T1108] usb 4-1: config 15 has an invalid interface number: 234 but max is 0
[  112.639266][ T1108] usb 4-1: config 15 has no interface number 0
[  112.738540][ T1108] usb 4-1: config 15 interface 234 has no altsetting 0
[  113.052457][ T1108] usb 4-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=20.aa
[  113.071995][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.080579][ T1108] usb 4-1: Product: syz
[  113.124138][ T1108] usb 4-1: Manufacturer: syz
[  113.139315][ T1108] usb 4-1: SerialNumber: syz
[  113.153160][ T5099] 9pnet: p9_fd_create_tcp (5099): problem connecting socket to 127.0.0.1
[  113.211971][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!!
[  113.229210][ T5099] 9pnet: p9_fd_create_tcp (5099): problem connecting socket to 127.0.0.1
[  113.241965][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!!
[  113.312488][ T5099] 9pnet: p9_fd_create_tcp (5099): problem connecting socket to 127.0.0.1
[  113.340661][ T5099] 9pnet: p9_fd_create_tcp (5099): problem connecting socket to 127.0.0.1
[  113.375586][ T5099] 9pnet: p9_fd_create_tcp (5099): problem connecting socket to 127.0.0.1
[  113.410393][ T5099] 9pnet: p9_fd_create_tcp (5099): problem connecting socket to 127.0.0.1
[  113.521095][ T5099] 9pnet: p9_fd_create_tcp (5099): problem connecting socket to 127.0.0.1
[  113.565879][ T5099] 9pnet: p9_fd_create_tcp (5099): problem connecting socket to 127.0.0.1
[  113.611593][ T5074] IPVS: nq: FWM 3 0x00000003 - no destination available
[  113.627023][ T5099] 9pnet: p9_fd_create_tcp (5099): problem connecting socket to 127.0.0.1
[  113.647044][ T5099] 9pnet: p9_fd_create_tcp (5099): problem connecting socket to 127.0.0.1
[  113.689952][ T5099] 9pnet: p9_fd_create_tcp (5099): problem connecting socket to 127.0.0.1
[  113.713529][ T1108] pl2303 4-1:15.234: required endpoints missing
[  113.731305][ T1108] usb 4-1: USB disconnect, device number 2
[  113.789606][ T5099] 9pnet: p9_fd_create_tcp (5099): problem connecting socket to 127.0.0.1
[  113.811482][ T5099] 9pnet: p9_fd_create_tcp (5099): problem connecting socket to 127.0.0.1
[  113.851437][ T5099] 9pnet: p9_fd_create_tcp (5099): problem connecting socket to 127.0.0.1
[  113.907113][ T5099] 9pnet: p9_fd_create_tcp (5099): problem connecting socket to 127.0.0.1
[  113.923248][ T5115] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  113.970678][ T5099] 9pnet: p9_fd_create_tcp (5099): problem connecting socket to 127.0.0.1
[  114.004432][ T5116] sch_tbf: burst 1520 is lower than device lo mtu (65550) !
[  114.015048][ T5099] 9pnet: p9_fd_create_tcp (5099): problem connecting socket to 127.0.0.1
[  114.056341][ T5099] 9pnet: p9_fd_create_tcp (5099): problem connecting socket to 127.0.0.1
[  114.115069][ T5099] 9pnet: p9_fd_create_tcp (5099): problem connecting socket to 127.0.0.1
[  114.139575][ T5118] loop1: detected capacity change from 0 to 512
[  114.299753][ T5118] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  114.764828][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  114.809203][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  114.869879][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  114.914247][ T5131] device bridge_slave_0 left promiscuous mode
[  114.927275][ T5131] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.976232][ T5131] device bridge_slave_1 left promiscuous mode
[  114.997993][ T5131] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.078708][ T5131] bond0: (slave bond_slave_0): Releasing backup interface
[  115.191120][ T5131] bond0: (slave bond_slave_1): Releasing backup interface
[  115.409324][ T5131] team0: Port device team_slave_0 removed
[  115.445834][ T5131] team0: Port device team_slave_1 removed
[  115.462962][ T5131] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.482387][ T5131] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.524908][ T5131] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.620538][ T5131] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.771578][ T5132] team0: Mode changed to "broadcast"
[  115.789832][ T5131] syz.3.219 (5131) used greatest stack depth: 20016 bytes left
[  115.805608][ T4267] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  115.836616][ T5149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.223'.
[  116.103863][ T4267] usb 2-1: Using ep0 maxpacket: 8
[  116.242378][ T4267] usb 2-1: config 0 has an invalid interface number: 131 but max is 0
[  116.260882][ T4267] usb 2-1: config 0 has no interface number 0
[  116.281127][ T4267] usb 2-1: config 0 interface 131 has no altsetting 0
[  116.477892][ T4267] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= a.10
[  116.492348][ T4267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.514482][ T4267] usb 2-1: Product: syz
[  116.519030][ T4267] usb 2-1: Manufacturer: syz
[  116.544495][ T4267] usb 2-1: SerialNumber: syz
[  116.558132][ T4267] usb 2-1: config 0 descriptor??
[  117.063785][ T4267] ims_pcu 2-1:0.131: Missing CDC union descriptor
[  117.070726][ T4267] ims_pcu: probe of 2-1:0.131 failed with error -22
[  117.142894][ T4267] usb 2-1: USB disconnect, device number 4
[  117.478715][ T5183] bridge0: port 3(vlan2) entered blocking state
[  117.502054][ T5183] bridge0: port 3(vlan2) entered disabled state
[  117.564952][ T5183] device vlan2 entered promiscuous mode
[  117.592082][ T5183] bridge0: mtu less than device minimum
[  118.959069][ T4752] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  119.426345][ T4752] usb 4-1: Using ep0 maxpacket: 16
[  119.913590][ T4752] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  119.940160][ T4752] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.996019][ T4752] usb 4-1: Product: syz
[  120.000251][ T4752] usb 4-1: Manufacturer: syz
[  120.011096][ T4752] usb 4-1: SerialNumber: syz
[  120.140844][ T5238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.245'.
[  120.307211][ T5238] loop2: detected capacity change from 0 to 1024
[  120.517922][ T5243] loop0: detected capacity change from 0 to 16
[  120.582210][ T5238] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  120.626590][ T5243] erofs: (device loop0): mounted with root inode @ nid 36.
[  120.918999][ T4752] snd-usb-audio: probe of 4-1:1.0 failed with error -71
[  120.991595][ T4752] usb 4-1: USB disconnect, device number 3
[  121.122133][ T4267] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  121.286304][   T26] audit: type=1326 audit(1785766525.424:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5258 comm="syz.2.253" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff20efd6019 code=0x0
[  121.536627][ T4267] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  121.571995][ T4267] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.622754][ T4267] usb 6-1: config 0 descriptor??
[  121.684448][ T4267] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  121.772999][ T5268] tipc: Failed to remove unknown binding: 66,0,0/0:3151367041/3151367042
[  121.825412][ T5270] tipc: Failed to remove unknown binding: 66,0,0/0:3151367041/3151367042
[  121.930200][ T5274] binder: 5273:5274 unknown command 0
[  121.973751][ T5274] binder: 5273:5274 ioctl c0306201 200000000080 returned -22
[  123.272451][ T4267] gspca_stv06xx: HDCS-1020 sensor detected
[  123.511962][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!!
[  123.521982][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!!
[  123.531972][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!!
[  123.541975][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!!
[  123.592814][ T4267] STV06xx: probe of 6-1:0.0 failed with error -71
[  123.698695][ T4267] usb 6-1: USB disconnect, device number 2
[  123.869776][ T5335] loop3: detected capacity change from 0 to 8192
[  125.043968][ T5343] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.272'.
[  126.025365][ T5347] loop0: detected capacity change from 0 to 736
[  126.591951][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #292!!!
[  126.671949][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #12!!!
[  126.897641][ T5347] rock: directory entry would overflow storage
[  126.919061][ T5347] rock: sig=0x3b10, size=4, remaining=3
[  126.951706][ T5371] loop1: detected capacity change from 0 to 8
[  127.549655][ T5388] netlink: 'syz.0.284': attribute type 10 has an invalid length.
[  127.610041][ T5388] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.617514][ T5388] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.796661][ T5388] team0: Port device bridge0 removed
[  127.826258][ T5388] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.834254][ T5388] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.843227][ T5388] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.850387][ T5388] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.913241][ T5388] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  128.186597][ T5403] kvm: pic: single mode not supported
[  128.505049][ T5418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.291'.
[  128.677229][ T5418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.291'.
[  129.033351][ T5434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.295'.
[  129.276656][ T4752] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  129.628754][ T5456] netlink: 'syz.0.300': attribute type 1 has an invalid length.
[  129.690918][ T5456] 8021q: adding VLAN 0 to HW filter on device bond1
[  129.730798][ T5459] bond1: (slave geneve2): making interface the new active one
[  129.764325][ T5459] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  129.773382][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  129.816479][ T4752] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[  129.862164][ T4752] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255
[  129.890505][ T4752] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  129.917143][ T4752] usb 6-1: config 0 has no interfaces?
[  129.941987][ T4752] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  129.951093][ T4752] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.022965][ T4752] usb 6-1: config 0 descriptor??
[  130.310353][ T4233] usb 6-1: USB disconnect, device number 3
[  131.638982][ T5508] loop5: detected capacity change from 0 to 16
[  131.774534][ T5508] erofs: (device loop5): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 25144)
[  132.168753][   T26] audit: type=1804 audit(1785766536.304:9): pid=5522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.311" name="bus" dev="ramfs" ino=39392 res=1 errno=0
[  132.224578][   T26] audit: type=1804 audit(1785766536.334:10): pid=5522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.311" name="bus" dev="ramfs" ino=39392 res=1 errno=0
[  132.976709][ T1424] ieee802154 phy0 wpan0: encryption failed: -22
[  132.983136][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[  133.162256][ T4267] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  133.613986][ T4267] usb 3-1: config 0 has no interfaces?
[  133.833066][ T4267] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  133.904775][ T4267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.996651][ T4267] usb 3-1: Product: syz
[  134.000962][ T4267] usb 3-1: Manufacturer: syz
[  134.061976][ T4267] usb 3-1: SerialNumber: syz
[  134.111155][ T4267] usb 3-1: config 0 descriptor??
[  134.687287][ T5559] netlink: 32 bytes leftover after parsing attributes in process `syz.1.317'.
[  135.802709][ T5580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.320'.
[  135.867364][ T4267] usb 3-1: USB disconnect, device number 5
[  135.882089][ T4753] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  136.122132][ T4753] usb 2-1: Using ep0 maxpacket: 32
[  136.243111][ T4753] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  136.279746][ T4753] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  136.346021][ T4753] usb 2-1: config 0 has no interface number 0
[  136.506510][ T5596] loop0: detected capacity change from 0 to 512
[  136.552225][ T4753] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02
[  136.568296][ T4753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.595057][ T4753] usb 2-1: Product: syz
[  136.605486][ T4753] usb 2-1: Manufacturer: syz
[  136.628405][ T4753] usb 2-1: SerialNumber: syz
[  136.653773][ T4753] usb 2-1: config 0 descriptor??
[  136.704526][ T4753] gspca_main: xirlink-cit-2.14.0 probing 0545:8080
[  136.729679][ T4753] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8
[  136.766179][ T5596] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000007,errors=continue,errors=remount-ro,. Quota mode: none.
[  136.956130][ T5596] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #12: comm syz.0.323: corrupted xattr block 8
[  137.121445][ T5596] EXT4-fs (loop0): Remounting filesystem read-only
[  137.524083][ T5632] loop2: detected capacity change from 0 to 256
[  137.541562][ T5628] device syzkaller0 entered promiscuous mode
[  137.557831][ T4267] Bluetooth: hci1: command 0x0411 tx timeout
[  137.588950][ T5628] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  137.651584][ T5632] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  137.689685][ T5632] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  137.732262][ T5632] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  138.980477][ T4267] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  139.578213][ T4267] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  139.590451][ T4267] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  139.625846][ T4267] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  139.666567][ T5724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.343'.
[  139.670616][ T4267] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  139.699499][ T4753] usb 2-1: USB disconnect, device number 5
[  139.728093][ T4267] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  139.993008][ T4267] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  140.010806][ T4267] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  140.027190][ T4267] usb 4-1: Product: syz
[  140.039797][ T4267] usb 4-1: Manufacturer: syz
[  140.114290][ T4267] cdc_wdm 4-1:1.0: skipping garbage
[  140.119704][ T4267] cdc_wdm 4-1:1.0: skipping garbage
[  140.179265][ T4267] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  140.211977][ T4267] cdc_wdm 4-1:1.0: Unknown control protocol
[  140.308537][ T5742] netlink: 'syz.2.347': attribute type 3 has an invalid length.
[  140.320805][ T5743] binder: 5740:5743 ioctl c0306201 200000000080 returned -14
[  140.339772][ T5742] netlink: 'syz.2.347': attribute type 3 has an invalid length.
[  140.356442][ T5743] binder: 5740:5743 ioctl c0306201 2000000003c0 returned -14
[  140.425768][ T5747] binder: BINDER_SET_CONTEXT_MGR already set
[  140.485169][ T5747] binder: 5745:5747 ioctl 4018620d 200000004a80 returned -16
[  140.575691][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  140.587532][ T4753] usb 4-1: USB disconnect, device number 4
[  140.602257][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  140.609785][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  140.615912][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  140.703229][ T5755] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  140.803969][ T5755] netlink: 'syz.2.350': attribute type 10 has an invalid length.
[  140.836446][ T5755] device syz_tun entered promiscuous mode
[  140.893117][ T5755] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  141.412047][ T4234] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  141.567967][ T5780] tipc: Failed to remove unknown binding: 66,0,0/0:8601691/8601692
[  141.679934][ T5759] loop0: detected capacity change from 0 to 32768
[  141.742369][ T4234] usb 3-1: not running at top speed; connect to a high speed hub
[  141.846734][ T4234] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  141.887064][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.952590][ T5759] XFS (loop0): Mounting V5 Filesystem
[  141.958343][ T5792] overlayfs: failed to get inode (-116)
[  141.975885][ T5792] overlayfs: failed to get inode (-116)
[  141.984319][ T4234] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected
[  142.005147][ T4234] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  142.029323][ T4234] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  142.322210][ T5798] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  142.537682][ T5759] XFS (loop0): Ending clean mount
[  142.569179][ T5759] XFS (loop0): Quotacheck needed: Please wait.
[  142.661671][ T5801] TC_ACT_REPEAT abuse ?
[  142.736640][ T5759] XFS (loop0): Quotacheck: Done.
[  142.997748][ T4192] XFS (loop0): Unmounting Filesystem
[  143.596105][ T4234] usb 3-1: USB disconnect, device number 6
[  143.642911][ T4234] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  143.700717][ T4234] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  143.736088][ T5821] loop3: detected capacity change from 0 to 1024
[  143.754654][ T4234] keyspan 3-1:1.0: device disconnected
[  143.920190][ T5829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.370'.
[  144.283375][ T5821] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  144.297234][ T5839] bridge0: port 4(wlan1) entered blocking state
[  144.320827][ T5839] bridge0: port 4(wlan1) entered disabled state
[  144.327053][ T5821] EXT4-fs (loop3): invalid journal inode
[  144.352036][ T5821] EXT4-fs (loop3): can't get journal size
[  144.369226][ T5839] device wlan1 entered promiscuous mode
[  144.377000][ T5821] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 17104912: comm syz.3.368: lblock 2 mapped to illegal pblock 17104912 (length 1)
[  144.399065][ T5839] bridge0: mtu less than device minimum
[  144.433186][ T5821] EXT4-fs (loop3): failed to initialize system zone (-117)
[  144.449738][ T5821] EXT4-fs (loop3): mount failed
[  144.938643][ T4234] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  145.302344][ T4234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  145.344792][ T4234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  145.385416][ T4234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  145.419141][ T4234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  145.602305][ T4234] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  145.628443][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.657173][ T4234] usb 3-1: Product: syz
[  145.668890][ T4234] usb 3-1: Manufacturer: syz
[  145.676356][ T4234] usb 3-1: SerialNumber: syz
[  145.703672][ T4234] usb 3-1: config 0 descriptor??
[  145.971062][ T4234] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  146.216944][ T4234] usb 3-1: USB disconnect, device number 7
[  146.897059][ T5898] loop1: detected capacity change from 0 to 256
[  146.931957][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.404'.
[  147.145337][ T5905] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.394'.
[  147.164531][ T5905] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.394'.
[  147.218506][ T4232] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  147.518246][ T5909] loop0: detected capacity change from 0 to 128
[  147.533273][ T4232] usb 3-1: Using ep0 maxpacket: 32
[  147.559301][ T5909] FAT-fs (loop0): bogus number of reserved sectors
[  147.566995][ T5909] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  147.577207][ T5909] FAT-fs (loop0): Can't find a valid FAT filesystem
[  147.688976][ T5909] loop0: detected capacity change from 0 to 512
[  147.723188][ T4232] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  147.731264][ T4232] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  147.751877][ T4232] usb 3-1: config 0 has no interface number 0
[  147.782880][ T5909] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 49, start 00000103)
[  147.821281][ T5909] FAT-fs (loop0): Filesystem has been set read-only
[  147.829227][ T5909] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000103)
[  147.994305][ T4232] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02
[  148.006059][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.034556][ T4232] usb 3-1: Product: syz
[  148.038792][ T4232] usb 3-1: Manufacturer: syz
[  148.067434][ T5913] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  148.089508][ T4232] usb 3-1: SerialNumber: syz
[  148.117212][ T5913] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  148.152600][ T4232] usb 3-1: config 0 descriptor??
[  148.218067][ T4232] gspca_main: xirlink-cit-2.14.0 probing 0545:8080
[  148.233945][ T4232] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9
[  148.469775][ T5918] netlink: 'syz.0.398': attribute type 10 has an invalid length.
[  148.492952][ T5918] device syz_tun entered promiscuous mode
[  148.544586][ T5918] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  148.806704][ T5923] tipc: Started in network mode
[  148.892770][ T5923] tipc: Node identity 4, cluster identity 4711
[  148.912438][ T5923] tipc: Node number set to 4
[  149.770767][ T5927] lo speed is unknown, defaulting to 1000
[  149.958615][ T1108] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  150.557560][ T1108] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  150.560466][ T4753] usb 3-1: USB disconnect, device number 8
[  150.566744][ T1108] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  150.566772][ T1108] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  150.566811][ T1108] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  150.686538][ T1108] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  150.708737][ T5933] bridge0: port 1(wlan1) entered blocking state
[  150.790608][ T5933] bridge0: port 1(wlan1) entered disabled state
[  150.828102][ T5933] device wlan1 entered promiscuous mode
[  150.915333][ T1108] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  150.928471][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  150.950620][ T1108] usb 2-1: Product: syz
[  150.955514][ T1108] usb 2-1: Manufacturer: syz
[  151.050826][ T1108] cdc_wdm 2-1:1.0: skipping garbage
[  151.074276][ T1108] cdc_wdm 2-1:1.0: skipping garbage
[  151.099065][ T1108] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  151.113239][ T1108] cdc_wdm 2-1:1.0: Unknown control protocol
[  151.463076][ T4234] usb 2-1: USB disconnect, device number 6
[  151.481984][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  151.488870][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  151.495125][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  152.430887][ T4235] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  152.513365][ T4613] bridge0: port 3(syz_tun) entered disabled state
[  152.618967][ T4613] device syz_tun left promiscuous mode
[  152.634319][ T4613] bridge0: port 3(syz_tun) entered disabled state
[  152.675791][ T4752] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  152.752955][ T5968] lo speed is unknown, defaulting to 1000
[  153.212123][ T4753] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  153.338944][ T5968] chnl_net:caif_netlink_parms(): no params data found
[  153.628071][ T5996] loop0: detected capacity change from 0 to 256
[  153.761583][ T5685] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.815081][ T4753] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  153.835320][ T4753] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  153.857760][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.877511][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.896693][ T5968] device bridge_slave_0 entered promiscuous mode
[  153.915836][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.927926][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.946824][ T5968] device bridge_slave_1 entered promiscuous mode
[  153.995651][ T4752] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  154.010472][ T5968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  154.036745][ T5968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  154.111216][ T5968] team0: Port device team_slave_0 added
[  154.129953][ T5968] team0: Port device team_slave_1 added
[  154.187943][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_0
[  154.207512][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.270425][ T5968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  154.312389][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_1
[  154.319513][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.396291][ T5968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  154.475728][ T5996] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  154.502019][ T5996] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  154.519653][ T4232] Bluetooth: hci1: command 0x0409 tx timeout
[  154.591014][ T5685] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.648551][ T5996] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  154.680114][ T5968] device hsr_slave_0 entered promiscuous mode
[  154.703275][ T5968] device hsr_slave_1 entered promiscuous mode
[  154.734577][ T5968] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  154.742285][ T5968] Cannot create hsr debugfs directory
[  154.815258][ T5685] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.073845][ T5685] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.774815][ T5968] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  155.801757][ T5968] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  155.830619][ T5968] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  155.857410][ T5968] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  156.310818][ T5968] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.410398][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  156.425736][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  156.466359][ T5968] 8021q: adding VLAN 0 to HW filter on device team0
[  156.515047][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  156.528947][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  156.582872][ T1286] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.590057][ T1286] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.613301][ T1108] Bluetooth: hci1: command 0x041b tx timeout
[  156.651468][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  156.689581][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  156.718827][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  156.757697][ T1286] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.764926][ T1286] bridge0: port 2(bridge_slave_1) entered forwarding state
[  156.846066][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  156.922581][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  157.032863][ T6051] 9pnet: p9_fd_create_tcp (6051): problem connecting socket to 127.0.0.1
[  157.043249][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  157.075167][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  157.096068][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  157.118062][ T6051] 9pnet: p9_fd_create_tcp (6051): problem connecting socket to 127.0.0.1
[  157.139188][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  157.169641][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  157.187748][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  157.203287][ T6051] 9pnet: p9_fd_create_tcp (6051): problem connecting socket to 127.0.0.1
[  157.231438][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  157.277967][ T6051] 9pnet: p9_fd_create_tcp (6051): problem connecting socket to 127.0.0.1
[  157.293592][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  157.313091][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  157.351543][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  157.373446][ T6051] 9pnet: p9_fd_create_tcp (6051): problem connecting socket to 127.0.0.1
[  157.454187][ T6051] 9pnet: p9_fd_create_tcp (6051): problem connecting socket to 127.0.0.1
[  157.493238][ T6051] 9pnet: p9_fd_create_tcp (6051): problem connecting socket to 127.0.0.1
[  157.538260][ T6051] 9pnet: p9_fd_create_tcp (6051): problem connecting socket to 127.0.0.1
[  157.596658][ T6051] 9pnet: p9_fd_create_tcp (6051): problem connecting socket to 127.0.0.1
[  157.661040][ T6051] 9pnet: p9_fd_create_tcp (6051): problem connecting socket to 127.0.0.1
[  157.740289][ T6051] 9pnet: p9_fd_create_tcp (6051): problem connecting socket to 127.0.0.1
[  157.772058][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  157.842397][ T6051] 9pnet: p9_fd_create_tcp (6051): problem connecting socket to 127.0.0.1
[  157.924626][ T5968] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.940533][ T6051] 9pnet: p9_fd_create_tcp (6051): problem connecting socket to 127.0.0.1
[  157.959007][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  157.970571][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  158.044484][ T6051] 9pnet: p9_fd_create_tcp (6051): problem connecting socket to 127.0.0.1
[  158.105198][ T6078] lo speed is unknown, defaulting to 1000
[  158.140387][ T6051] 9pnet: p9_fd_create_tcp (6051): problem connecting socket to 127.0.0.1
[  158.158742][ T6078] lo speed is unknown, defaulting to 1000
[  158.206759][ T6078] lo speed is unknown, defaulting to 1000
[  158.338606][ T6086] loop2: detected capacity change from 0 to 512
[  158.542171][ T6086] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.448: iget: bad i_size value: 38620345925642
[  158.641079][ T6086] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.448: couldn't read orphan inode 15 (err -117)
[  158.682378][ T4232] Bluetooth: hci1: command 0x040f tx timeout
[  159.183531][ T6086] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  159.572456][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  159.602416][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  159.807917][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  159.825275][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  159.843871][ T6086] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.448: bg 0: block 5: invalid block bitmap
[  159.906356][ T5968] device veth0_vlan entered promiscuous mode
[  159.913974][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  159.951239][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  160.004263][ T5968] device veth1_vlan entered promiscuous mode
[  160.037416][ T6086] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 344 with error 28
[  160.053533][ T6109] udc-core: couldn't find an available UDC or it's busy
[  160.060553][ T6109] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  160.066773][ T6086] EXT4-fs (loop2): This should not happen!! Data will be lost
[  160.066773][ T6086] 
[  160.093033][ T6086] EXT4-fs (loop2): Total free blocks count 0
[  160.099092][ T6086] EXT4-fs (loop2): Free/Dirty block details
[  160.142430][ T4265] lo speed is unknown, defaulting to 1000
[  160.150016][ T6086] EXT4-fs (loop2): free_blocks=0
[  160.172088][ T6086] EXT4-fs (loop2): dirty_blocks=344
[  160.185860][ T6086] EXT4-fs (loop2): Block reservation details
[  160.140278][ T6078] infiniband s
z1: set active
[  160.215363][ T6086] EXT4-fs (loop2): i_reserved_data_blocks=344
[  160.220747][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  160.223134][ T6078] infiniband s
z1: added lo
[  160.267972][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  160.301308][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  160.344171][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  160.386176][ T5968] device veth0_macvtap entered promiscuous mode
[  160.432704][ T5968] device veth1_macvtap entered promiscuous mode
[  160.500152][ T6078] RDS/IB: s
z1: added
[  160.506383][ T6078] smc: adding ib device s
z1 with port count 1
[  160.520161][ T6078] smc:    ib device s
z1 port 1 has pnetid 
[  160.567124][ T4234] lo speed is unknown, defaulting to 1000
[  160.600683][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  160.662562][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  160.719266][ T6078] lo speed is unknown, defaulting to 1000
[  160.749109][ T5968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  160.777442][ T1108] Bluetooth: hci1: command 0x0419 tx timeout
[  160.822098][ T5968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.881846][ T5968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  160.936578][ T5968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.973701][ T5968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.018956][ T5968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.060976][ T5968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.086421][ T5968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.172917][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_0
[  161.230596][ T6127] lo speed is unknown, defaulting to 1000
[  161.238548][ T6130] netlink: 24 bytes leftover after parsing attributes in process `syz.2.455'.
[  161.263432][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  161.287804][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  161.324133][ T5968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.375814][ T5968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.410690][ T5968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.438214][ T5968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.463868][ T5968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.486412][ T6151] loop0: detected capacity change from 0 to 256
[  161.489055][ T5968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.551702][ T5968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.584293][ T5968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.637956][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_1
[  161.687740][ T6127] lo speed is unknown, defaulting to 1000
[  161.695691][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  161.712457][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  161.757549][ T5968] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  161.791992][ T5968] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  161.800770][ T5968] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  161.870413][ T5968] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.023158][ T6151] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  162.052942][   T26] audit: type=1800 audit(1785766566.184:11): pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.461" name="file1" dev="loop0" ino=1048599 res=0 errno=0
[  162.142061][   T26] audit: type=1800 audit(1785766566.264:12): pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.461" name="file1" dev="loop0" ino=1048599 res=0 errno=0
[  162.187121][ T5672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.218140][ T5672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.239740][ T6078] lo speed is unknown, defaulting to 1000
[  162.267992][ T6161] FAT-fs (loop0): error, invalid FAT chain (i_pos 196, last_block 8200)
[  162.345996][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  162.417418][ T6161] FAT-fs (loop0): Filesystem has been set read-only
[  162.474744][ T1286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.488793][ T1286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.594921][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  162.754514][ T6148] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2057)
[  162.811091][ T6078] lo speed is unknown, defaulting to 1000
[  162.877308][ T6173] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  163.300418][ T6185] ODEBUG: Out of memory. ODEBUG disabled
[  163.408567][ T6078] lo speed is unknown, defaulting to 1000
[  164.049153][ T6078] lo speed is unknown, defaulting to 1000
[  164.056908][ T6195] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  164.092564][ T6195] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  164.336807][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.6.471'.
[  164.419132][ T6078] lo speed is unknown, defaulting to 1000
[  164.780322][ T6078] lo speed is unknown, defaulting to 1000
[  165.432760][ T5685] device hsr_slave_0 left promiscuous mode
[  165.476745][ T5685] device hsr_slave_1 left promiscuous mode
[  165.516022][ T5685] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  165.546354][ T5685] batman_adv: batadv0: Removing interface: batadv_slave_0
[  165.614283][ T5685] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  165.621879][ T5685] batman_adv: batadv0: Removing interface: batadv_slave_1
[  165.665695][ T5685] device batadv1 left promiscuous mode
[  165.672349][ T5685] bridge0: port 4(batadv1) entered disabled state
[  165.704338][ T6240] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  165.723582][ T5685] device bridge_slave_1 left promiscuous mode
[  165.740571][ T5685] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.755832][ T6240] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  165.778067][ T5685] device bridge_slave_0 left promiscuous mode
[  165.794993][ T5685] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.853779][ T5685] device veth1_macvtap left promiscuous mode
[  165.871719][ T5685] device veth0_macvtap left promiscuous mode
[  165.888336][ T5685] device veth1_vlan left promiscuous mode
[  165.913476][ T5685] device veth0_vlan left promiscuous mode
[  166.252219][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  167.674811][ T5685] team0 (unregistering): Port device team_slave_1 removed
[  167.774854][ T5685] team0 (unregistering): Port device team_slave_0 removed
[  167.881787][ T5685] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  167.972740][ T5685] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  168.344373][ T5685] bond0 (unregistering): Released all slaves
[  168.465564][ T6274] veth1_to_hsr: Caught tx_queue_len zero misconfig
[  168.814625][ T6282] udc-core: couldn't find an available UDC or it's busy
[  168.821787][ T6282] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  169.626707][ T6304] loop1: detected capacity change from 0 to 2048
[  171.464483][ T6328] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  172.033405][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.505'.
[  172.594250][ T4234] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  172.768191][ T6369] loop1: detected capacity change from 0 to 512
[  172.997321][ T6379] udc-core: couldn't find an available UDC or it's busy
[  173.025930][ T6379] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  173.078155][ T4234] usb 7-1: Using ep0 maxpacket: 8
[  173.332813][ T4234] usb 7-1: unable to get BOS descriptor or descriptor too short
[  173.440573][ T4234] usb 7-1: config 4 interface 0 has no altsetting 0
[  173.745445][ T6388] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  173.961735][ T4234] usb 7-1: string descriptor 0 read error: -22
[  173.970374][ T4234] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  173.988852][ T4234] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  174.087965][ T4234] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  174.173795][ T4234] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  174.222539][ T4234] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  174.230401][ T4234] usb 7-1: media controller created
[  174.278276][ T6347] usb 7-1: dvb_usb_au6610: wlen=0, aborting
[  174.339730][ T4234] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  174.502565][ T4234] zl10353_read_register: readreg error (reg=127, ret==0)
[  174.551561][ T6405] loop0: detected capacity change from 0 to 512
[  174.646197][ T4234] usb 7-1: USB disconnect, device number 2
[  175.020267][ T6405] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)!
[  175.040810][ T6405] EXT4-fs (loop0): group descriptors corrupted!
[  176.928556][ T6442] lo speed is unknown, defaulting to 1000
[  176.982884][ T6442] lo speed is unknown, defaulting to 1000
[  177.114396][ T6447] netlink: 12 bytes leftover after parsing attributes in process `syz.6.527'.
[  177.444834][ T6453] overlayfs: failed to clone upperpath
[  177.692528][ T6442] chnl_net:caif_netlink_parms(): no params data found
[  177.908951][ T6442] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.972016][ T6442] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.998722][ T6442] device bridge_slave_0 entered promiscuous mode
[  178.044801][ T6442] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.088103][ T6442] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.129491][ T6442] device bridge_slave_1 entered promiscuous mode
[  178.232907][ T6442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  178.275032][ T6472] netlink: 'syz.6.535': attribute type 1 has an invalid length.
[  178.302858][ T6442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  178.959079][ T4233] Bluetooth: hci5: command 0x0409 tx timeout
[  179.119942][ T6442] team0: Port device team_slave_0 added
[  179.623341][ T6442] team0: Port device team_slave_1 added
[  179.766579][ T6442] batman_adv: batadv0: Adding interface: batadv_slave_0
[  179.801942][ T6442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.874623][ T6442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  179.900260][ T6442] batman_adv: batadv0: Adding interface: batadv_slave_1
[  179.916970][ T6442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.978252][ T6442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  180.112515][ T6442] device hsr_slave_0 entered promiscuous mode
[  180.155078][ T6442] device hsr_slave_1 entered promiscuous mode
[  180.184863][ T6442] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  180.209560][ T6442] Cannot create hsr debugfs directory
[  180.733012][ T6442] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  180.775298][ T6442] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  180.785292][ T6442] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  180.848309][ T6442] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  181.080241][ T4233] Bluetooth: hci5: command 0x041b tx timeout
[  181.208310][ T6442] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.280682][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  181.302365][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  181.343333][ T6442] 8021q: adding VLAN 0 to HW filter on device team0
[  181.394725][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  181.429311][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  181.456963][ T5672] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.464165][ T5672] bridge0: port 1(bridge_slave_0) entered forwarding state
[  181.515837][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  181.560487][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  181.584377][ T5672] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.591698][ T5672] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.629552][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  181.637564][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  181.682799][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  181.707223][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  181.780831][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  181.821443][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  181.867063][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  181.932855][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  181.964960][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  181.992857][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  182.062778][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  182.073118][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  182.122664][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  182.158901][ T6442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  182.555377][ T5683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  182.591691][ T5683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  182.616663][ T6442] 8021q: adding VLAN 0 to HW filter on device batadv0
[  183.134247][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  183.153137][ T4233] Bluetooth: hci5: command 0x040f tx timeout
[  183.195900][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  183.259478][ T5683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  183.268695][ T5683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  183.307461][ T5683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  183.337054][ T5683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  183.386651][ T6442] device veth0_vlan entered promiscuous mode
[  183.415738][ T6442] device veth1_vlan entered promiscuous mode
[  183.503292][ T5683] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  183.522027][ T5683] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  183.553221][ T5683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  183.582389][ T5683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  183.612915][ T6442] device veth0_macvtap entered promiscuous mode
[  183.636485][ T6442] device veth1_macvtap entered promiscuous mode
[  183.705288][ T6442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.734335][ T6442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.762240][ T6442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.810039][ T6442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.848440][ T6442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.859396][ T6442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.917783][ T6442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.928391][ T6442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.998603][ T6442] batman_adv: batadv0: Interface activated: batadv_slave_0
[  184.010641][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  184.021053][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  184.051830][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  184.080401][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  184.135712][ T6442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.167697][ T6442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.221940][ T6442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.282005][ T6442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.626764][ T6442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.761503][ T6442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.809180][ T6442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.871934][ T6442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.923939][ T6442] batman_adv: batadv0: Interface activated: batadv_slave_1
[  184.945980][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  184.979735][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  185.036275][ T6442] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.046281][ T6442] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.099206][ T6442] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.132131][ T6442] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.238325][    T7] Bluetooth: hci5: command 0x0419 tx timeout
[  185.425688][ T1286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.446958][ T1286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.495866][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  185.538005][ T5683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.566088][ T5683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.582533][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  186.183762][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.549'.
[  186.626339][ T6127] bond0: (slave syz_tun): Releasing backup interface
[  186.739382][ T6578] loop0: detected capacity change from 0 to 1024
[  187.945706][ T4234] libceph: connect (1)[c::]:6789 error -101
[  187.962568][ T4234] libceph: mon0 (1)[c::]:6789 connect error
[  188.100219][ T6600] ceph: No mds server is up or the cluster is laggy
[  188.110610][ T4234] libceph: connect (1)[c::]:6789 error -101
[  188.116949][ T4234] libceph: mon0 (1)[c::]:6789 connect error
[  188.444500][ T4237] libceph: connect (1)[c::]:6789 error -101
[  188.450596][ T4237] libceph: mon0 (1)[c::]:6789 connect error
[  191.290038][ T6644] loop7: detected capacity change from 0 to 4096
[  191.420245][ T4265] Bluetooth: hci3: command 0x0406 tx timeout
[  191.427707][ T4265] Bluetooth: hci2: command 0x0406 tx timeout
[  192.181640][ T6671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.563'.
[  192.917271][ T6685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.557'.
[  193.429042][ T6693] loop0: detected capacity change from 0 to 2048
[  193.587522][ T6693] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=2362, location=2362
[  193.960633][ T6693] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  194.029516][ T6693] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  194.161203][ T6693] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  194.443015][   T26] audit: type=1800 audit(1785766598.584:13): pid=6693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.565" name="file1" dev="loop0" ino=1346 res=0 errno=0
[  194.474689][ T1424] ieee802154 phy0 wpan0: encryption failed: -22
[  194.481342][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[  195.046786][ T6722] overlayfs: failed to clone upperpath
[  195.423136][ T6644] ntfs3: loop7: Mark volume as dirty due to NTFS errors
[  195.474336][ T6644] ntfs3: loop7: Failed to load $Extend.
[  195.480764][ T6728] fuse: Bad value for 'fd'
[  196.409036][ T6734] bridge0: port 3(syz_tun) entered blocking state
[  196.433750][ T6734] bridge0: port 3(syz_tun) entered disabled state
[  196.497197][ T6734] device syz_tun entered promiscuous mode
[  196.503673][ T6734] bridge0: port 3(syz_tun) entered blocking state
[  196.510239][ T6734] bridge0: port 3(syz_tun) entered forwarding state
[  196.733084][ T6732] process 'syz.3.574' launched './file0/file0' with NULL argv: empty string added
[  196.912319][ T6742] netlink: 12 bytes leftover after parsing attributes in process `syz.6.579'.
[  197.966687][ T6759] IPVS: sh: FWM 3 0x00000003 - no destination available
[  198.038997][ T6761] netlink: 64 bytes leftover after parsing attributes in process `syz.3.587'.
[  199.689306][ T6776] loop0: detected capacity change from 0 to 32768
[  199.859365][ T6776] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.575 (6776)
[  200.021827][ T6776] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  200.030951][ T6776] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  200.073863][ T6776] BTRFS info (device loop0): trying to use backup root at mount time
[  200.083505][ T6776] BTRFS info (device loop0): setting nodatasum
[  200.089764][ T6776] BTRFS info (device loop0): enabling ssd optimizations
[  200.151985][ T6776] BTRFS info (device loop0): using spread ssd allocation scheme
[  200.194204][ T6776] BTRFS info (device loop0): turning on flush-on-commit
[  200.201228][ T6776] BTRFS info (device loop0): force zlib compression, level 3
[  200.285350][ T6776] BTRFS info (device loop0): using free space tree
[  200.317858][ T6776] BTRFS info (device loop0): has skinny extents
[  201.034797][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.592'.
[  201.196217][ T6802] fuse: Bad value for 'fd'
[  201.233635][ T6800] device team1 entered promiscuous mode
[  201.658516][   T26] audit: type=1800 audit(1785766605.794:14): pid=6776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.575" name="file1" dev="loop0" ino=260 res=0 errno=0
[  202.735218][ T6843] tipc: Started in network mode
[  202.781142][ T6843] tipc: Node identity 10101, cluster identity 4711
[  202.816776][ T6843] tipc: Node number set to 65793
[  202.855890][ T6843] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  203.228740][ T6848] fuse: Bad value for 'fd'
[  203.341225][ T6847] loop1: detected capacity change from 0 to 4096
[  203.857920][ T6869] netlink: 24 bytes leftover after parsing attributes in process `syz.6.615'.
[  204.048119][ T6874] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  204.559624][ T6890] netlink: 24 bytes leftover after parsing attributes in process `syz.3.623'.
[  204.724089][ T6895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.622'.
[  205.027084][   T26] audit: type=1326 audit(1785766609.164:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.3.627" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d5f832019 code=0x0
[  205.626793][ T6893] loop0: detected capacity change from 0 to 32768
[  205.785802][ T6912] netlink: 12 bytes leftover after parsing attributes in process `syz.6.629'.
[  206.900357][ T6893] 
[  206.900357][ T6893]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  206.900357][ T6893] 
[  207.020648][   T26] audit: type=1800 audit(1785766611.154:16): pid=6893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.624" name="file1" dev="loop0" ino=4 res=0 errno=0
[  207.064910][ T6893] udc-core: couldn't find an available UDC or it's busy
[  207.086488][ T6893] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  207.166032][ T6893] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt
[  207.166032][ T6893] 
[  207.218759][ T6893] xtLookup: xtSearch returned -5
[  207.224344][ T6893] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt
[  207.224344][ T6893] 
[  207.287209][ T6893] xtLookup: xtSearch returned -5
[  207.352706][ T6893] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt
[  207.352706][ T6893] 
[  207.387288][ T6893] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt
[  207.387288][ T6893] 
[  207.414799][ T6893] xtLookup: xtSearch returned -5
[  207.419836][ T6893] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt
[  207.419836][ T6893] 
[  208.028364][ T5672] 
[  208.028364][ T5672]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  208.028364][ T5672] 
[  208.068873][ T5672] 
[  208.068873][ T5672]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  208.068873][ T5672] 
[  208.095966][ T6949] netlink: 12 bytes leftover after parsing attributes in process `syz.7.640'.
[  208.138550][ T4192] 
[  208.138550][ T4192]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  208.138550][ T4192] 
[  208.195408][  T277] 
[  208.195408][  T277]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  208.195408][  T277] 
[  208.257134][ T4192] 
[  208.257134][ T4192]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  208.257134][ T4192] 
[  209.031274][ T6975] vxcan1: Caught tx_queue_len zero misconfig
[  209.112070][ T6975] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.652'.
[  209.701120][ T6990] loop1: detected capacity change from 0 to 512
[  210.419849][ T6990] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  210.451634][ T6990] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  210.750595][ T6990] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 23: comm syz.1.655: lblock 5 mapped to illegal pblock 23 (length 1)
[  210.931975][ T6990] Quota error (device loop1): qtree_read_dquot: Error while reading quota structure for id 0
[  210.969887][ T6990] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.655: Failed to acquire dquot type 0
[  211.083844][ T7006] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #2: block 4: comm syz.1.655: lblock 0 mapped to illegal pblock 4 (length 1)
[  211.595479][ T7016] netlink: 84 bytes leftover after parsing attributes in process `syz.6.665'.
[  211.848743][   T26] audit: type=1326 audit(1785766615.984:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7019 comm="syz.6.666" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8415c05019 code=0x0
[  212.570956][ T7025] loop7: detected capacity change from 0 to 256
[  212.887304][ T7029] netlink: 'syz.6.670': attribute type 2 has an invalid length.
[  212.983272][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  214.292663][ T7066] tipc: Failed to remove unknown binding: 66,0,0/65793:3915235829/3915235831
[  214.342033][ T7066] tipc: Failed to remove unknown binding: 66,0,0/65793:3915235829/3915235830
[  214.652940][ T7039] device syz_tun left promiscuous mode
[  215.553267][ T7039] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.561343][ T7039] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.474147][ T7039] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  217.562007][ T7039] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  217.826838][ T7101] gfs2: gfs2 mount does not exist
[  219.872079][ T7039] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  219.881443][ T7039] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  219.907357][ T7039] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  219.954707][ T7039] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  220.206047][ T7088] device geneve2 entered promiscuous mode
[  220.223460][ T7115] netlink: 24 bytes leftover after parsing attributes in process `syz.3.701'.
[  220.656308][ T7131] lo speed is unknown, defaulting to 1000
[  220.663804][ T7131] lo speed is unknown, defaulting to 1000
[  220.805511][ T7128] loop1: detected capacity change from 0 to 2048
[  220.815256][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.710'.
[  220.912744][ T7135] netlink: 'syz.6.709': attribute type 4 has an invalid length.
[  221.032195][ T7138] bond0: (slave syz_tun): Releasing backup interface
[  221.229759][ T7128] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  221.289371][ T7147] mmap: syz.6.714 (7147) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  221.339442][ T7148] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  221.473152][ T7147] cgroup: Setting release_agent not allowed
[  221.843330][ T7155] device bridge0 entered promiscuous mode
[  221.990213][ T4747] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[  222.269975][   T26] audit: type=1326 audit(1785766626.404:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7159 comm="syz.3.719" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d5f832019 code=0x0
[  222.528178][ T4747] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  222.549520][ T4747] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  222.595835][ T4747] usb 8-1: config 0 interface 0 has no altsetting 0
[  222.621958][ T4747] usb 8-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  222.677197][ T4747] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.735616][ T4747] usb 8-1: config 0 descriptor??
[  222.756694][ T7170] netlink: 'syz.0.722': attribute type 1 has an invalid length.
[  222.863846][ T7173] bond2: (slave geneve3): Error -99 calling set_mac_address
[  223.272718][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.724'.
[  223.284860][ T7180] tipc: Resetting bearer <eth:syz_tun>
[  223.316105][ T4747] hid-steam 0003:28DE:1102.0005: item fetching failed at offset 0/5
[  223.324978][ T4747] hid-steam 0003:28DE:1102.0005: steam_probe:parse of hid interface failed
[  223.349510][ T4747] hid-steam: probe of 0003:28DE:1102.0005 failed with error -22
[  223.484163][ T7180] tipc: Disabling bearer <eth:syz_tun>
[  223.531962][ T7182] netlink: 'syz.6.725': attribute type 13 has an invalid length.
[  223.580198][ T4747] usb 8-1: USB disconnect, device number 2
[  223.600115][ T7182] netlink: 'syz.6.725': attribute type 17 has an invalid length.
[  223.695513][ T7182] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  223.786129][ T7182] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  224.216426][ T7182] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  224.411527][ T7182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  225.242436][ T7186] bond0: (slave bridge0): Releasing backup interface
[  225.453066][ T7186] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.513724][ T7186] bridge0: mtu less than device minimum
[  225.519630][ T7186] device bridge_slave_1 left promiscuous mode
[  225.538404][ T7186] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.605463][ T7186] bridge0: mtu less than device minimum
[  225.620072][ T7186] bond0: (slave bond_slave_0): Releasing backup interface
[  225.660888][ T7186] bond0: (slave bond_slave_1): Releasing backup interface
[  225.717524][ T7186] team0: Port device team_slave_0 removed
[  225.797921][ T7186] team0: Port device team_slave_1 removed
[  225.804267][ T7186] batman_adv: batadv0: Removing interface: batadv_slave_0
[  225.839598][ T7186] batman_adv: batadv0: Removing interface: batadv_slave_1
[  225.885593][ T7186] device wlan1 left promiscuous mode
[  225.891099][ T7186] bridge0: port 4(wlan1) entered disabled state
[  225.914447][ T7186] device vlan2 left promiscuous mode
[  225.920510][ T7186] device bridge_slave_0 left promiscuous mode
[  225.954084][ T7186] bridge0: mtu less than device minimum
[  225.959914][ T7186] bridge0: port 3(vlan2) entered disabled state
[  226.032394][ T7186] bond1: (slave geneve2): Releasing active interface
[  226.583298][ T7194] loop1: detected capacity change from 0 to 32768
[  226.987136][ T7194] XFS (loop1): Mounting V5 Filesystem
[  228.927527][ T7236] netlink: 104 bytes leftover after parsing attributes in process `syz.6.739'.
[  228.996657][ T7194] XFS (loop1): Ending clean mount
[  229.095259][ T7238] file system registered
[  229.125468][ T4188] XFS (loop1): Unmounting Filesystem
[  229.319347][ T6442] ffs_data_put(): freeing
[  229.613748][ T7247] netlink: 168 bytes leftover after parsing attributes in process `syz.0.744'.
[  229.623304][   T26] audit: type=1326 audit(1785766633.764:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.7.742" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef2d2a1019 code=0x0
[  229.711945][   T26] audit: type=1326 audit(1785766633.844:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.7.742" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2d2a1019 code=0x7ffc0000
[  229.877487][   T26] audit: type=1326 audit(1785766633.844:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.7.742" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2d2a1019 code=0x7ffc0000
[  229.989085][   T26] audit: type=1326 audit(1785766633.844:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.7.742" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2d2a1019 code=0x7ffc0000
[  230.083713][   T26] audit: type=1326 audit(1785766633.844:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.7.742" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fef2d2a1019 code=0x7ffc0000
[  230.147728][   T26] audit: type=1326 audit(1785766633.844:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.7.742" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2d2a1019 code=0x7ffc0000
[  230.237756][   T26] audit: type=1326 audit(1785766633.844:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.7.742" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2d2a1019 code=0x7ffc0000
[  230.331060][   T26] audit: type=1326 audit(1785766633.844:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.7.742" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2d2a1019 code=0x7ffc0000
[  230.422733][   T26] audit: type=1326 audit(1785766633.844:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.7.742" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2d2a1019 code=0x7ffc0000
[  230.523797][   T26] audit: type=1326 audit(1785766633.844:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.7.742" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fef2d242399 code=0x7ffc0000
[  230.827049][ T7258] netlink: 16 bytes leftover after parsing attributes in process `syz.6.748'.
[  230.943461][ T7267] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  231.671274][ T7282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.758'.
[  232.979385][ T7309] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  233.011999][ T7309] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  233.694191][ T7319] netlink: 'syz.0.771': attribute type 1 has an invalid length.
[  233.850524][ T7319] 8021q: adding VLAN 0 to HW filter on device bond3
[  234.582787][ T7339] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  234.685473][ T7341] netlink: 156 bytes leftover after parsing attributes in process `syz.3.774'.
[  234.901787][ T7344] netlink: 'syz.3.775': attribute type 11 has an invalid length.
[  235.586810][ T7363] loop7: detected capacity change from 0 to 1024
[  237.393587][ T7412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.799'.
[  237.433915][ T7412] 8021q: adding VLAN 0 to HW filter on device bond4
[  237.456421][   T26] kauditd_printk_skb: 62 callbacks suppressed
[  237.456442][   T26] audit: type=1804 audit(1785766641.594:91): pid=7409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.798" name="/newroot/134/file0" dev="fuse" ino=1 res=1 errno=0
[  237.506427][ T7412] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link
[  237.515819][ T5683] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready
[  237.859224][ T7426] netlink: 'syz.6.804': attribute type 1 has an invalid length.
[  237.965364][ T7426] device bond1 entered promiscuous mode
[  237.977869][ T7426] 8021q: adding VLAN 0 to HW filter on device bond1
[  238.165206][   T21] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  238.492758][   T21] usb 8-1: Using ep0 maxpacket: 16
[  238.793778][ T7433] 9pnet: p9_errstr2errno: server reported unknown error 00000000,group_id
[  238.890359][ T7437] bond1: (slave bridge2): making interface the new active one
[  238.922451][ T7437] device bridge2 entered promiscuous mode
[  238.991038][ T7437] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  238.994725][   T21] usb 8-1: config 0 interface 0 has no altsetting 0
[  239.022877][   T21] usb 8-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00
[  239.050225][   T21] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.059517][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  239.071499][ T7439] netlink: 'syz.1.807': attribute type 4 has an invalid length.
[  239.112259][ T7439] rdma_rxe: ignoring netdev event = 23 for lo
[  239.141113][   T21] usb 8-1: config 0 descriptor??
[  239.144499][ T7439] rdma_rxe: lo changed mtu to 4
[  239.170473][ T7439] rdma_rxe: ignoring netdev event = 10 for lo
[  239.183802][ T7439] infiniband s
z1: set down
[  239.218363][ T4747] lo speed is unknown, defaulting to 1000
[  239.237978][ T7446] device wlan1 left promiscuous mode
[  239.264983][ T7446] bridge0: port 1(wlan1) entered disabled state
[  239.422845][ T1111] lo speed is unknown, defaulting to 1000
[  239.500086][ T7457] netlink: 'syz.3.816': attribute type 4 has an invalid length.
[  239.591969][ T6865] lo speed is unknown, defaulting to 1000
[  239.630024][ T7457] netlink: 'syz.3.816': attribute type 4 has an invalid length.
[  239.657826][   T21] pantherlord 0003:0810:0002.0006: unknown main item tag 0x1
[  239.666386][   T21] pantherlord 0003:0810:0002.0006: unknown main item tag 0x0
[  239.674922][   T21] pantherlord 0003:0810:0002.0006: unknown main item tag 0x0
[  239.682858][   T21] pantherlord 0003:0810:0002.0006: unknown main item tag 0x0
[  239.690392][   T21] pantherlord 0003:0810:0002.0006: unknown main item tag 0x0
[  239.709993][   T21] pantherlord 0003:0810:0002.0006: unknown main item tag 0x3
[  239.730880][   T21] pantherlord 0003:0810:0002.0006: hidraw0: USB HID v0.81 Device [HID 0810:0002] on usb-dummy_hcd.7-1/input0
[  239.753855][   T21] pantherlord 0003:0810:0002.0006: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula <anssi.hannula@gmail.com>
[  240.150868][   T21] usb 8-1: USB disconnect, device number 3
[  240.636535][ T4747] lo speed is unknown, defaulting to 1000
[  240.785739][ T7470] xt_NFQUEUE: number of queues (8) out of range (got 65537)
[  240.793664][ T7474] netlink: 1320 bytes leftover after parsing attributes in process `syz.3.817'.
[  240.805441][ T7467] fido_id[7467]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  241.252647][ T7490] loop7: detected capacity change from 0 to 4096
[  241.318660][ T7491] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  241.578346][ T7495] netlink: 12 bytes leftover after parsing attributes in process `syz.7.828'.
[  241.673277][ T7495] 8021q: adding VLAN 0 to HW filter on device bond1
[  241.978382][ T7508] loop0: detected capacity change from 0 to 1024
[  242.070247][ T7508] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  242.172233][ T7508] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  243.981868][    C0] sched: RT throttling activated
[  245.017127][ T7508] EXT4-fs warning (device loop0): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop0.
[  245.614092][ T7537] netlink: 20 bytes leftover after parsing attributes in process `syz.6.840'.
[  245.748414][ T7546] netlink: 24 bytes leftover after parsing attributes in process `syz.6.845'.
[  245.772619][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  245.784000][ T7544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  245.797549][   T26] audit: type=1326 audit(1785766649.934:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7534 comm="syz.3.841" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5f832019 code=0x7fc00000
[  245.830379][   T26] audit: type=1326 audit(1785766649.964:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7534 comm="syz.3.841" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0d5f832019 code=0x7fc00000
[  245.998746][   T13] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  246.159725][ T7563] Set syz0 is full, maxelem 0 reached
[  246.169233][ T7563] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  246.229914][   T26] audit: type=1326 audit(1785766650.364:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.7.851" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2d2a1019 code=0x50000
[  246.281998][   T13] usb 2-1: Using ep0 maxpacket: 8
[  246.287242][   T26] audit: type=1326 audit(1785766650.364:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.7.851" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2d2a1019 code=0x50000
[  246.342013][   T26] audit: type=1326 audit(1785766650.364:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.7.851" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2d2a1019 code=0x50000
[  246.381944][   T26] audit: type=1326 audit(1785766650.364:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.7.851" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2d2a1019 code=0x50000
[  246.415814][   T26] audit: type=1326 audit(1785766650.364:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.7.851" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2d2a1019 code=0x50000
[  246.451948][   T26] audit: type=1326 audit(1785766650.374:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.7.851" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2d2a1019 code=0x50000
[  246.489572][   T26] audit: type=1326 audit(1785766650.374:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.7.851" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2d2a1019 code=0x50000
[  246.517740][   T26] audit: type=1326 audit(1785766650.374:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.7.851" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2d2a1019 code=0x50000
[  246.645371][   T13] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  246.669662][   T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[  246.689665][   T13] usb 2-1: Product: syz
[  246.698082][   T13] usb 2-1: Manufacturer: syz
[  246.705498][   T13] usb 2-1: SerialNumber: syz
[  246.738258][   T13] usb 2-1: config 0 descriptor??
[  246.820715][   T13] gspca_main: sq905-2.14.0 probing 2770:9120
[  247.244259][   T13] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71)
[  247.251792][   T13] sq905: probe of 2-1:0.0 failed with error -71
[  247.299788][   T13] usb 2-1: USB disconnect, device number 7
[  247.707098][   T13] kernel read not supported for file [userfaultfd] (pid: 13 comm: kworker/0:1)
[  248.787745][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.861'.
[  248.846590][ T7586] device bond0 entered promiscuous mode
[  248.873640][ T7586] device batadv0 entered promiscuous mode
[  248.919350][ T7586] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  248.963157][ T7586] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  248.986887][ T7586] 8021q: adding VLAN 0 to HW filter on device hsr1
[  249.071663][ T7588] 8021q: adding VLAN 0 to HW filter on device bond1
[  249.160469][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.860'.
[  249.466606][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.860'.
[  250.054536][ T7593] 8021q: adding VLAN 0 to HW filter on device bond0
[  250.099127][ T7593] bond1: (slave bond0): making interface the new active one
[  250.117644][ T7593] bond1: (slave bond0): Enslaving as an active interface with an up link
[  250.126373][ T7594] netlink: 14 bytes leftover after parsing attributes in process `syz.0.861'.
[  250.148203][ T7594] device bond0 left promiscuous mode
[  250.177061][ T7594] bond0 (unregistering): Released all slaves
[  250.205751][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  250.240297][ T7603] netlink: 'syz.6.865': attribute type 10 has an invalid length.
[  250.315589][ T7603] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  250.373407][   T21] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  250.408367][ T7611] tipc: Failed to remove unknown binding: 66,0,0/0:2711361242/2711361244
[  250.439076][ T7611] tipc: Failed to remove unknown binding: 66,0,0/0:2711361242/2711361243
[  250.460863][ T7611] tipc: Failed to remove unknown binding: 66,0,0/0:2711361242/2711361244
[  250.478584][ T7611] tipc: Failed to remove unknown binding: 66,0,0/0:2711361242/2711361243
[  250.791943][   T21] usb 8-1: Using ep0 maxpacket: 32
[  250.912852][   T21] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  250.933175][   T21] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.959595][   T21] usb 8-1: config 0 descriptor??
[  250.980633][ T7625] netlink: 20 bytes leftover after parsing attributes in process `syz.6.873'.
[  251.022120][   T21] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  251.030207][ T7625] device ip6gre1 entered promiscuous mode
[  251.232663][   T21] gspca_vc032x: reg_r err -32
[  251.237588][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[  251.246977][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[  251.259266][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[  251.269954][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[  251.276372][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[  251.282661][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[  251.288197][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[  251.295180][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[  251.304818][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[  251.311544][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[  251.319536][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[  251.325950][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[  251.331440][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[  251.338099][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[  251.344534][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[  251.350078][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[  251.356829][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[  251.363201][   T21] gspca_vc032x: I2c Bus Busy Wait 00
[  251.369549][   T21] gspca_vc032x: Unknown sensor...
[  251.375974][   T21] vc032x: probe of 8-1:0.0 failed with error -22
[  251.543599][ T7642] device bond0 entered promiscuous mode
[  251.549440][ T7642] device bond_slave_0 entered promiscuous mode
[  251.592739][ T7642] device bond_slave_1 entered promiscuous mode
[  251.622660][ T7642] device wlan1 entered promiscuous mode
[  251.644357][ T7642] device batadv0 entered promiscuous mode
[  251.668770][ T7642] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  251.731208][ T7642] Cannot create hsr debugfs directory
[  251.749643][ T7642] 8021q: adding VLAN 0 to HW filter on device hsr1
[  251.760085][ T7642] device bond0 left promiscuous mode
[  251.772147][ T7642] device bond_slave_0 left promiscuous mode
[  251.779893][ T7642] device bond_slave_1 left promiscuous mode
[  251.791815][ T7642] device wlan1 left promiscuous mode
[  251.809026][ T7642] device batadv0 left promiscuous mode
[  252.033268][ T7662] Cannot find del_set index 2 as target
[  253.147080][   T21] usb 8-1: USB disconnect, device number 4
[  253.198299][ T7669] netlink: 12 bytes leftover after parsing attributes in process `syz.6.886'.
[  253.415751][ T7669] 8021q: adding VLAN 0 to HW filter on device bond2
[  253.969168][ T7689] tipc: Started in network mode
[  253.997845][ T7689] tipc: Node identity 7f000001, cluster identity 4711
[  254.039362][ T7689] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  254.120601][ T7689] netlink: 104 bytes leftover after parsing attributes in process `syz.6.892'.
[  254.195478][ T7689] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  254.623350][ T7708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.898'.
[  255.932987][ T1424] ieee802154 phy0 wpan0: encryption failed: -22
[  255.939377][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[  256.129447][ T7740] netlink: 20 bytes leftover after parsing attributes in process `syz.1.908'.
[  256.217200][   T26] kauditd_printk_skb: 3243 callbacks suppressed
[  256.217217][   T26] audit: type=1326 audit(1785766660.354:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7742 comm="syz.3.909" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5f832019 code=0x7ffc0000
[  256.279122][ T7747] netlink: 4 bytes leftover after parsing attributes in process `syz.6.910'.
[  256.315680][   T26] audit: type=1326 audit(1785766660.374:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7742 comm="syz.3.909" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5f832019 code=0x7ffc0000
[  256.436809][   T26] audit: type=1326 audit(1785766660.374:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7742 comm="syz.3.909" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5f832019 code=0x7ffc0000
[  256.539815][   T26] audit: type=1326 audit(1785766660.374:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7742 comm="syz.3.909" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f0d5f832019 code=0x7ffc0000
[  256.678628][   T26] audit: type=1326 audit(1785766660.394:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7742 comm="syz.3.909" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5f832019 code=0x7ffc0000
[  256.729449][   T26] audit: type=1326 audit(1785766660.394:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7742 comm="syz.3.909" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5f832019 code=0x7ffc0000
[  256.771359][   T26] audit: type=1326 audit(1785766660.394:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7742 comm="syz.3.909" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5f832019 code=0x7ffc0000
[  256.867978][ T7762] Cannot find del_set index 2 as target
[  257.067360][   T26] audit: type=1326 audit(1785766660.394:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7742 comm="syz.3.909" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5f832019 code=0x7ffc0000
[  257.736130][   T26] audit: type=1326 audit(1785766660.394:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7742 comm="syz.3.909" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0d5f832019 code=0x7ffc0000
[  257.877835][   T26] audit: type=1326 audit(1785766660.394:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7742 comm="syz.3.909" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5f832019 code=0x7ffc0000
[  259.929768][ T7782] netlink: 20 bytes leftover after parsing attributes in process `syz.7.921'.
[  260.070362][ T7790] tipc: Cannot configure node identity twice
[  260.094608][ T7790] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  260.364977][ T7803] netlink: 8 bytes leftover after parsing attributes in process `syz.6.927'.
[  261.038220][ T7811] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  261.575143][ T7806] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.582649][ T7806] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.149306][ T7806] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  262.211229][ T7806] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  262.737754][ T7806] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  262.747844][ T7806] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  262.757634][ T7806] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  262.767470][ T7806] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  262.911464][ T7810] dummy0: Caught tx_queue_len zero misconfig
[  262.928749][ T4267] tipc: Node number set to 2130706433
[  262.963200][ T7817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.943'.
[  263.055517][ T7830] netlink: 12 bytes leftover after parsing attributes in process `syz.7.935'.
[  263.297418][ T7843] tipc: Started in network mode
[  263.312357][ T7843] tipc: Node identity 10101, cluster identity 4711
[  263.319202][ T7843] tipc: Node number set to 65793
[  263.350532][ T7846] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  263.572472][ T7855] tipc: Started in network mode
[  263.579053][ T7855] tipc: Node identity 10101, cluster identity 4711
[  263.589049][ T7855] tipc: Node number set to 65793
[  263.601001][ T7854] device vlan2 entered promiscuous mode
[  263.613746][ T7855] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  263.848413][ T7863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.948'.
[  263.861391][ T7863] l2tp_ppp: sess 2/0: no socket in recv
[  264.063747][ T7871] netlink: 20 bytes leftover after parsing attributes in process `syz.3.961'.
[  264.181637][ T7875] ip6tnl0: Caught tx_queue_len zero misconfig
[  265.526006][ T7896] netlink: 'syz.1.958': attribute type 4 has an invalid length.
[  265.542919][ T7896] rdma_rxe: ignoring netdev event = 23 for lo
[  265.550007][ T7896] rdma_rxe: lo changed mtu to 1075109892
[  265.580753][ T7896] rdma_rxe: ignoring netdev event = 23 for lo
[  265.617722][ T7896] rdma_rxe: lo changed mtu to 0
[  265.644895][ T7900] netlink: 64 bytes leftover after parsing attributes in process `syz.6.960'.
[  265.763521][ T7904] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  265.783685][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.963'.
[  265.843139][ T7908] device bond0 entered promiscuous mode
[  265.850389][ T7908] device bond_slave_0 entered promiscuous mode
[  265.858049][ T7908] device bond_slave_1 entered promiscuous mode
[  265.866993][ T7908] device bond0 left promiscuous mode
[  265.882734][ T7908] device bond_slave_0 left promiscuous mode
[  265.897484][ T7908] device bond_slave_1 left promiscuous mode
[  265.931949][ T7910] netlink: 14 bytes leftover after parsing attributes in process `syz.1.963'.
[  265.976914][ T7910] bond1: (slave bond0): Releasing active interface
[  266.029236][ T7910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  266.057738][ T7910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  266.103500][ T7910] bond0 (unregistering): Released all slaves
[  266.132868][ T7903] tipc: Disabling bearer <eth:syz_tun>
[  266.272379][ T7916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.965'.
[  266.310564][ T7917] device vlan3 entered promiscuous mode
[  267.575961][ T7936] netlink: 'syz.0.975': attribute type 4 has an invalid length.
[  267.602827][ T7941] bridge0: port 3(syz_tun) entered blocking state
[  267.618029][ T7941] bridge0: port 3(syz_tun) entered disabled state
[  267.626808][ T7941] device syz_tun entered promiscuous mode
[  267.643164][ T7941] bridge0: port 3(syz_tun) entered blocking state
[  267.649849][ T7941] bridge0: port 3(syz_tun) entered forwarding state
[  267.842352][   T26] kauditd_printk_skb: 44 callbacks suppressed
[  267.842419][   T26] audit: type=1804 audit(1785766671.924:3399): pid=7939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.976" name="/newroot/58/file0" dev="fuse" ino=1 res=1 errno=0
[  268.521459][ T7941] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  268.699594][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.7.980'.
[  268.815048][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.984'.
[  268.859975][ T7961] device bond0 entered promiscuous mode
[  268.931578][ T7961] device batadv0 entered promiscuous mode
[  268.946962][ T7974] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  268.985864][ T7961] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  269.000897][ T7961] Cannot create hsr debugfs directory
[  269.017567][ T7961] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  269.028973][ T7961] 8021q: adding VLAN 0 to HW filter on device hsr1
[  269.041499][ T7977] Set syz0 is full, maxelem 0 reached
[  269.060297][ T7971] netlink: 14 bytes leftover after parsing attributes in process `syz.3.984'.
[  269.115528][ T7981] udc-core: couldn't find an available UDC or it's busy
[  269.155616][ T7981] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  269.193682][ T7977] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  269.203236][ T7971] device bond0 left promiscuous mode
[  269.209213][ T7971] bond0 (unregistering): Released all slaves
[  269.221207][ T5683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  269.233700][ T7980] netlink: 'syz.7.992': attribute type 4 has an invalid length.
[  269.283904][   T26] audit: type=1804 audit(1785766673.414:3400): pid=7983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.991" name="/newroot/169/file0" dev="fuse" ino=1 res=1 errno=0
[  269.361528][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.7.995'.
[  269.378994][   T26] audit: type=1326 audit(1785766673.514:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.6.994" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8415c05019 code=0x0
[  269.511411][ T7998] bridge0: port 3(syz_tun) entered blocking state
[  269.543285][ T7998] bridge0: port 3(syz_tun) entered disabled state
[  269.559759][ T7998] device syz_tun entered promiscuous mode
[  270.797908][ T8014] overlayfs: failed to clone upperpath
[  270.917945][ T8025] loop0: detected capacity change from 0 to 256
[  271.000533][ T8022] netlink: 'syz.7.1005': attribute type 2 has an invalid length.
[  271.345747][ T8036] tipc: Failed to remove unknown binding: 66,0,0/65793:3106033613/3106033615
[  271.391370][ T8036] tipc: Failed to remove unknown binding: 66,0,0/65793:3106033613/3106033614
[  271.597090][ T8045] loop1: detected capacity change from 0 to 1024
[  271.640610][ T8045] EXT4-fs (loop1): Ignoring removed bh option
[  271.667408][ T8045] EXT4-fs (loop1): Ignoring removed bh option
[  271.708155][ T8045] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,bh,min_batch_time=0x0000000000000008,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none.
[  272.425310][ T8056] udc-core: couldn't find an available UDC or it's busy
[  272.443007][ T8056] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  272.865367][ T8070] netlink: 'syz.3.1022': attribute type 2 has an invalid length.
[  272.924412][ T8072] netlink: 'syz.1.1024': attribute type 27 has an invalid length.
[  272.954875][ T8072] netlink: 'syz.1.1024': attribute type 4 has an invalid length.
[  273.013580][ T8072] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1024'.
[  273.497764][ T8101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1032'.
[  273.512599][ T8093] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  273.525672][ T8101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1032'.
[  273.535389][ T8093] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  273.583787][ T8096] netlink: 'syz.6.1034': attribute type 49 has an invalid length.
[  273.773328][ T4233] TC_ACT_REPEAT abuse ?
[  274.082524][   T21] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  274.352497][   T21] usb 2-1: Using ep0 maxpacket: 16
[  274.472215][   T21] usb 2-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config
[  274.490015][   T21] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  274.586428][ T8120] netlink: 'syz.0.1040': attribute type 2 has an invalid length.
[  274.658895][   T21] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  274.670613][   T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.682700][   T21] usb 2-1: Product: syz
[  274.689979][   T21] usb 2-1: Manufacturer: syz
[  274.695419][   T21] usb 2-1: SerialNumber: syz
[  274.860110][ T8132] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1046'.
[  275.042889][   T21] usb 2-1: 0:2 : does not exist
[  275.099799][ T8139] gfs2: gfs2 mount does not exist
[  275.115543][   T21] usb 2-1: USB disconnect, device number 8
[  275.142746][ T8141] udc-core: couldn't find an available UDC or it's busy
[  275.170069][ T8141] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  275.273289][ T8143] 8021q: adding VLAN 0 to HW filter on device bond3
[  275.291657][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1052'.
[  275.309168][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1052'.
[  275.384236][ T4473] udevd[4473]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  275.447601][ T8143] bond3: (slave bond0): Error -16 calling set_mac_address
[  275.520885][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1055'.
[  275.534037][ T8147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1055'.
[  275.548218][ T8147] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  275.558006][ T8147] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  275.567989][ T8147] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  275.577611][ T8147] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  275.603578][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1055'.
[  275.682738][ T8147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1055'.
[  275.861478][ T8149] netlink: 'syz.1.1055': attribute type 10 has an invalid length.
[  276.332927][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  276.957886][ T8171] loop7: detected capacity change from 0 to 2048
[  277.493551][ T8182] cgroup: Setting release_agent not allowed
[  277.541267][ T8186] gfs2: gfs2 mount does not exist
[  277.642743][ T4267] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  277.918617][ T4267] usb 2-1: Using ep0 maxpacket: 16
[  278.063261][ T4267] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x82 has invalid maxpacket 16
[  278.144569][ T4267] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x3 has invalid maxpacket 16
[  278.318646][ T4267] usb 2-1: config 1 interface 0 has no altsetting 0
[  278.440672][ T4233] Bluetooth: hci1: command 0x0406 tx timeout
[  278.485195][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1070'.
[  278.628918][ T8202] device bond0 entered promiscuous mode
[  278.662765][ T8202] device bond_slave_0 entered promiscuous mode
[  278.682910][ T4267] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  278.705622][ T8202] device bond_slave_1 entered promiscuous mode
[  278.717441][ T4267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.737735][ T8202] device wlan1 entered promiscuous mode
[  278.770665][ T4267] usb 2-1: Product: syz
[  278.797553][ T4267] usb 2-1: Manufacturer: syz
[  278.810134][ T4267] usb 2-1: SerialNumber: syz
[  278.935482][ T8202] device batadv0 entered promiscuous mode
[  278.976406][ T8175] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  278.989053][ T8202] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  279.008022][ T8175] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  279.056025][ T8202] Cannot create hsr debugfs directory
[  279.101177][ T8202] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  279.181551][ T8202] 8021q: adding VLAN 0 to HW filter on device hsr1
[  279.255330][ T8206] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1070'.
[  279.433464][ T4267] usb 2-1: bad CDC descriptors
[  279.575381][ T4267] usb 2-1: USB disconnect, device number 9
[  279.722749][ T8206] device bond0 left promiscuous mode
[  279.738087][ T8206] device bond_slave_0 left promiscuous mode
[  279.744784][ T8206] device bond_slave_1 left promiscuous mode
[  279.750987][ T8206] device wlan1 left promiscuous mode
[  279.790698][ T8206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  279.841342][ T8206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  279.893151][ T8206] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  279.922353][ T8206] bond0 (unregistering): Released all slaves
[  279.941665][ T8207] netlink: 'syz.3.1071': attribute type 10 has an invalid length.
[  279.950847][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  279.974239][ T8214] netlink: 'syz.0.1073': attribute type 27 has an invalid length.
[  279.983263][ T8214] netlink: 'syz.0.1073': attribute type 4 has an invalid length.
[  279.991215][ T8214] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1073'.
[  280.097113][ T8216] tipc: Failed to remove unknown binding: 66,0,0/65793:2447888181/2447888183
[  280.124990][ T8216] tipc: Failed to remove unknown binding: 66,0,0/65793:2447888181/2447888182
[  280.139790][ T8216] tipc: Failed to remove unknown binding: 66,0,0/65793:2447888181/2447888183
[  280.176464][ T8216] tipc: Failed to remove unknown binding: 66,0,0/65793:2447888181/2447888182
[  280.249160][ T8222] loop0: detected capacity change from 0 to 512
[  280.370266][ T8225] IPVS: ovf: FWM 3 0x00000003 - no destination available
[  280.385739][ T8225] TC_ACT_REPEAT abuse ?
[  280.440625][ T8222] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  280.482077][ T8222] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  280.659183][ T8222] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #16: block 42: comm syz.0.1079: lblock 0 mapped to illegal pblock 42 (length 1)
[  280.688166][ T8234] gfs2: gfs2 mount does not exist
[  280.709819][ T8222] EXT4-fs error (device loop0): move_extent_per_page:426: inode #16: comm syz.0.1079: Unable to copy data block, data will be lost.
[  280.739505][ T8220] EXT4-fs error (device loop0): ext4_discard_preallocations:5134: comm syz.0.1079: Error -117 loading buddy information for 4294876380
[  280.917027][ T5668] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm kworker/u4:11: Invalid inode table block 35 in block_group 0
[  280.977364][ T5668] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm kworker/u4:11: Invalid inode table block 35 in block_group 0
[  281.137516][ T8245] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  281.235870][ T8245] device syz_tun left promiscuous mode
[  281.273127][ T8245] bridge0: port 3(syz_tun) entered disabled state
[  281.316357][ T8245] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  281.334865][ T8245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  281.353622][ T8245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  281.385388][ T8245] device bridge_slave_0 left promiscuous mode
[  281.399420][ T8245] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.421599][ T8245] device bridge_slave_1 left promiscuous mode
[  281.431285][ T8245] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.454591][   T21] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  281.529895][ T8245] team0: Port device team_slave_0 removed
[  281.564025][ T8245] team0: Port device team_slave_1 removed
[  281.575406][ T8245] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  281.584316][ T8245] batman_adv: batadv0: Removing interface: batadv_slave_0
[  281.596754][ T8245] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  281.611190][ T8245] batman_adv: batadv0: Removing interface: batadv_slave_1
[  281.649205][ T8245] bond1: (slave bridge2): Releasing backup interface
[  281.667471][ T8245] device bridge2 left promiscuous mode
[  281.712917][   T21] usb 8-1: Using ep0 maxpacket: 16
[  281.751474][ T8251] 8021q: adding VLAN 0 to HW filter on device bond0
[  281.780038][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1092'.
[  281.830502][ T8260] netlink: 'syz.0.1091': attribute type 10 has an invalid length.
[  281.842740][   T21] usb 8-1: config 1 interface 0 altsetting 127 bulk endpoint 0x82 has invalid maxpacket 16
[  281.906692][   T21] usb 8-1: config 1 interface 0 altsetting 127 bulk endpoint 0x3 has invalid maxpacket 16
[  281.962663][   T21] usb 8-1: config 1 interface 0 has no altsetting 0
[  282.029733][ T8265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1094'.
[  282.077029][ T8265] device team1 entered promiscuous mode
[  282.101346][ T8267] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1095'.
[  282.124585][ T8270] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1095'.
[  282.124866][   T21] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  282.155380][   T21] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.190216][   T21] usb 8-1: Product: syz
[  282.198516][   T21] usb 8-1: Manufacturer: syz
[  282.204123][   T21] usb 8-1: SerialNumber: syz
[  282.253028][ T8247] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  282.260174][ T8247] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  282.522857][ T8284] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  282.582797][   T21] usb 8-1: bad CDC descriptors
[  282.626018][   T21] usb 8-1: USB disconnect, device number 5
[  282.983343][ T8302] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1105'.
[  283.373589][ T4236] TC_ACT_REPEAT abuse ?
[  283.448194][ T4236] TC_ACT_REPEAT abuse ?
[  284.036998][ T8315] loop7: detected capacity change from 0 to 2048
[  284.056481][ T8318] device syz_tun left promiscuous mode
[  284.076407][ T8318] bridge0: port 3(syz_tun) entered disabled state
[  284.167493][ T8315] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  284.253397][ T8318] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  284.287388][ T8318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  284.318782][ T8318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  284.384853][ T8318] device bridge_slave_0 left promiscuous mode
[  284.420519][ T8318] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.468110][ T8318] device bridge_slave_1 left promiscuous mode
[  284.534217][ T8318] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.057687][ T8318] team0: Port device team_slave_0 removed
[  286.040867][ T8318] team0: Port device team_slave_1 removed
[  286.091254][ T8318] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  286.141774][ T8318] batman_adv: batadv0: Removing interface: batadv_slave_0
[  286.160067][ T8318] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  286.176999][ T8318] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.225992][ T4236] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  286.702307][ T4236] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  287.105235][ T8319] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1108'.
[  287.115713][ T4748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  287.151232][ T8319] device team1 entered promiscuous mode
[  287.337308][ T8364] loop0: detected capacity change from 0 to 2048
[  287.377920][ T8366] netlink: 1320 bytes leftover after parsing attributes in process `syz.7.1123'.
[  287.506045][ T8364] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  287.772548][ T4748] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  288.052776][ T4748] usb 2-1: Using ep0 maxpacket: 8
[  288.173969][ T4748] usb 2-1: config index 0 descriptor too short (expected 74, got 45)
[  288.391640][ T4748] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  288.407516][ T4748] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  288.426448][ T4748] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  288.441360][ T4748] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  288.455224][ T8379] loop7: detected capacity change from 0 to 1024
[  288.464842][ T4748] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  288.482287][ T8379] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option
[  288.489652][ T8379] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  288.522523][ T4748] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  288.531672][ T4748] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.559131][ T4237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.593064][ T8379] EXT4-fs (loop7): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,dioread_nolock,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none.
[  288.802855][ T4748] usb 2-1: GET_CAPABILITIES returned 0
[  288.810922][ T4748] usbtmc 2-1:16.0: can't read capabilities
[  288.895168][ T8389] netlink: 1320 bytes leftover after parsing attributes in process `syz.6.1140'.
[  289.053093][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.890020][ T4746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.968572][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1128'.
[  289.996366][ T4237] usb 2-1: USB disconnect, device number 10
[  290.149593][ T8395] device bond0 entered promiscuous mode
[  290.169437][ T8395] device bond_slave_0 entered promiscuous mode
[  290.176418][ T8395] device bond_slave_1 entered promiscuous mode
[  290.197001][ T8395] device batadv0 entered promiscuous mode
[  290.205997][ T8395] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  290.206158][ T8395] Cannot create hsr debugfs directory
[  290.206286][ T8395] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  290.206309][ T8395] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  290.206857][ T8395] 8021q: adding VLAN 0 to HW filter on device hsr1
[  290.225801][ T8402] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1128'.
[  290.228322][ T8402] device bond0 left promiscuous mode
[  290.228343][ T8402] device bond_slave_0 left promiscuous mode
[  290.228477][ T8402] device bond_slave_1 left promiscuous mode
[  290.244253][ T8402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  290.247458][ T8402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  290.265361][ T8402] bond0 (unregistering): Released all slaves
[  290.733525][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.767135][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.776068][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  291.603920][ T8408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  291.766792][ T8408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  291.804131][ T8410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1132'.
[  291.845300][ T8408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  291.881190][ T8410] tipc: Resetting bearer <eth:syz_tun>
[  292.031822][ T8410] tipc: Disabling bearer <eth:syz_tun>
[  292.055126][ T8416] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[  292.197937][ T4236] kernel read not supported for file [userfaultfd] (pid: 4236 comm: kworker/0:5)
[  292.333002][ T8421] netlink: 'syz.0.1150': attribute type 13 has an invalid length.
[  292.386027][ T8421] netlink: 'syz.0.1150': attribute type 17 has an invalid length.
[  292.454164][ T8421] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  292.510667][ T8421] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  292.706080][ T8421] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  292.733443][ T8421] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  292.760636][ T8421] 8021q: adding VLAN 0 to HW filter on device team0
[  292.889289][ T8421] net_ratelimit: 5 callbacks suppressed
[  292.889300][ T8421] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  295.064953][ T8445] netlink: 'syz.1.1158': attribute type 13 has an invalid length.
[  295.282937][ T8445] netlink: 'syz.1.1158': attribute type 17 has an invalid length.
[  295.291001][ T8445] rdma_rxe: ignoring netdev event = 14 for lo
[  295.332793][ T8445] infiniband s
z1: set active
[  295.387467][ T8445] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  295.444463][ T4236] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  295.475990][ T8445] infiniband s
z1: set active
[  295.487096][ T8445] rdma_rxe: ignoring netdev event = 30 for lo
[  295.495950][ T8445] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  295.516622][ T8445] infiniband s
z1: set active
[  295.538367][ T8458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  295.599713][ T8445] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  295.617022][ T8445] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  295.639512][   T21] lo speed is unknown, defaulting to 1000
[  295.661617][   T13] lo speed is unknown, defaulting to 1000
[  295.671478][ T4233] lo speed is unknown, defaulting to 1000
[  295.681390][   T21] lo speed is unknown, defaulting to 1000
[  295.712642][ T4236] usb 8-1: Using ep0 maxpacket: 8
[  295.810493][ T8468] netlink: 'syz.6.1165': attribute type 1 has an invalid length.
[  295.842992][ T4236] usb 8-1: config index 0 descriptor too short (expected 74, got 45)
[  295.851959][ T8468] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.1165'.
[  295.868026][ T4236] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  295.901177][ T4236] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  295.939061][ T4236] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  296.018941][ T4236] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  296.040530][ T4236] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  296.067144][ T4236] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  296.116119][ T4236] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.452996][ T4236] usb 8-1: GET_CAPABILITIES returned 0
[  296.459105][ T4236] usbtmc 8-1:16.0: can't read capabilities
[  296.740080][ T4236] usb 8-1: USB disconnect, device number 6
[  297.899195][ T8489] udc-core: couldn't find an available UDC or it's busy
[  297.937722][ T8489] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  298.913262][ T8500] netlink: 'syz.3.1166': attribute type 13 has an invalid length.
[  298.922353][ T8500] netlink: 'syz.3.1166': attribute type 17 has an invalid length.
[  299.153422][ T8502] loop1: detected capacity change from 0 to 32768
[  299.266800][ T8502] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1177 (8502)
[  299.333209][ T8500] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  299.372847][ T8502] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  299.382619][ T8502] BTRFS info (device loop1): force clearing of disk cache
[  299.389849][ T8502] BTRFS info (device loop1): enabling auto defrag
[  299.396508][ T8502] BTRFS info (device loop1): max_inline at 0
[  299.403643][ T8502] BTRFS error (device loop1): support for check_integrity* not compiled in!
[  300.210606][ T8502] BTRFS error (device loop1): open_ctree failed: -22
[  300.353963][ T4473] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (4473)
[  304.438738][ T4267] Bluetooth: hci5: command 0x0406 tx timeout
[  304.539892][ T8555] netlink: 'syz.7.1184': attribute type 11 has an invalid length.
[  304.580511][ T8559] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1191'.
[  306.182276][ T8569] netlink: 'syz.7.1185': attribute type 13 has an invalid length.
[  306.261711][ T8569] netlink: 'syz.7.1185': attribute type 17 has an invalid length.
[  306.317965][ T8569] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  306.384872][ T8569] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  306.431656][ T8584] netlink: 'syz.3.1186': attribute type 1 has an invalid length.
[  306.480462][ T8584] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1186'.
[  307.192520][ T8587] xt_TPROXY: Can be used only with -p tcp or -p udp
[  307.577791][ T8569] bridge0: port 3(syz_tun) entered blocking state
[  307.584415][ T8569] bridge0: port 3(syz_tun) entered forwarding state
[  307.693507][ T8569] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  307.743363][ T8569] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  307.765605][ T8569] 8021q: adding VLAN 0 to HW filter on device team0
[  307.787395][ T8569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  307.851622][ T5683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  308.356200][ T8633] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING
[  308.712041][ T8640] xt_TPROXY: Can be used only with -p tcp or -p udp
[  309.954778][ T8649] netlink: 'syz.3.1211': attribute type 13 has an invalid length.
[  310.131482][ T8649] netlink: 'syz.3.1211': attribute type 17 has an invalid length.
[  310.555882][ T8649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  310.708438][ T8655] udc-core: couldn't find an available UDC or it's busy
[  310.727113][ T8655] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  310.958245][ T8660] loop7: detected capacity change from 0 to 128
[  311.206652][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  311.230164][ T8666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  311.415874][ T8678] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING
[  311.466066][ T8673] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  311.568958][ T8681] loop1: detected capacity change from 0 to 128
[  311.668221][ T8681] EXT4-fs warning (device loop1): ext4_fill_super:4027: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  311.717723][ T8681] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  311.908394][ T4473] udevd[4473]: incorrect ext4 checksum on /dev/loop1
[  313.330187][ T8718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1237'.
[  314.554433][ T8719] bond0: (slave veth3): Enslaving as an active interface with a down link
[  314.664813][ T8724] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  314.978526][ T8729] udc-core: couldn't find an available UDC or it's busy
[  315.008913][ T8729] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  315.060762][ T8734] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING
[  315.074503][ T8729] udc-core: couldn't find an available UDC or it's busy
[  315.097508][ T8729] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  315.217460][ T8737] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  315.885252][ T8754] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  316.895698][ T8761] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1251'.
[  317.298909][ T1424] ieee802154 phy0 wpan0: encryption failed: -22
[  317.308468][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[  317.763877][ T8754] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  317.905637][ T8754] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  317.997829][ T8763] netlink: 'syz.1.1248': attribute type 13 has an invalid length.
[  318.007798][ T8763] netlink: 'syz.1.1248': attribute type 17 has an invalid length.
[  318.027282][ T8763] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  318.064907][ T8763] infiniband s
z1: set active
[  318.226446][ T8775] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING
[  318.250212][ T8763] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  318.318245][ T8763] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  318.333135][ T8763] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  318.366256][ T4267] lo speed is unknown, defaulting to 1000
[  318.378840][ T8774] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1253'.
[  319.054956][ T8787] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1256'.
[  319.116567][ T8781] loop7: detected capacity change from 0 to 32768
[  319.264103][ T8781] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm
[  319.336517][ T8781] BTRFS info (device loop7): force clearing of disk cache
[  319.353313][ T8781] BTRFS info (device loop7): enabling auto defrag
[  319.378082][ T8781] BTRFS info (device loop7): max_inline at 0
[  319.392697][ T8781] BTRFS error (device loop7): support for check_integrity* not compiled in!
[  319.426046][ T8781] BTRFS error (device loop7): open_ctree failed: -22
[  319.454551][ T8789] svc: failed to register nfsdv3 RPC service (errno 101).
[  319.477696][ T8789] svc: failed to register nfsaclv3 RPC service (errno 101).
[  319.566085][ T4473] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by udevd (4473)
[  319.865081][ T4192] ==================================================================
[  319.873766][ T4192] BUG: KASAN: use-after-free in nfsd_shutdown_threads+0x89/0x1a0
[  319.881555][ T4192] Write of size 4 at addr ffff888023e29850 by task syz-executor/4192
[  319.889698][ T4192] 
[  319.892060][ T4192] CPU: 0 PID: 4192 Comm: syz-executor Not tainted syzkaller #0
[  319.899650][ T4192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  319.909936][ T4192] Call Trace:
[  319.913292][ T4192]  <TASK>
[  319.916261][ T4192]  dump_stack_lvl+0x188/0x250
[  319.920990][ T4192]  ? show_regs_print_info+0x20/0x20
[  319.926279][ T4192]  ? load_image+0x410/0x410
[  319.930845][ T4192]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  319.936973][ T4192]  ? rcu_lock_release+0x5/0x20
[  319.942092][ T4192]  print_address_description+0x60/0x2d0
[  319.947686][ T4192]  ? nfsd_shutdown_threads+0x89/0x1a0
[  319.953120][ T4192]  kasan_report+0xdf/0x130
[  319.957588][ T4192]  ? nfsd_shutdown_threads+0x89/0x1a0
[  319.963011][ T4192]  kasan_check_range+0x235/0x290
[  319.968002][ T4192]  nfsd_shutdown_threads+0x89/0x1a0
[  319.973244][ T4192]  nfsd_umount+0x3e/0xc0
[  319.977534][ T4192]  deactivate_locked_super+0x93/0xf0
[  319.982884][ T4192]  cleanup_mnt+0x426/0x4d0
[  319.987354][ T4192]  task_work_run+0x125/0x1a0
[  319.991998][ T4192]  exit_to_user_mode_loop+0x10f/0x130
[  319.997415][ T4192]  exit_to_user_mode_prepare+0xee/0x180
[  320.003149][ T4192]  syscall_exit_to_user_mode+0x16/0x40
[  320.008673][ T4192]  do_syscall_64+0x58/0xa0
[  320.013138][ T4192]  ? clear_bhb_loop+0x30/0x80
[  320.017860][ T4192]  ? clear_bhb_loop+0x30/0x80
[  320.022599][ T4192]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  320.029465][ T4192] RIP: 0033:0x7fc89b753257
[  320.033929][ T4192] Code: a2 c7 05 9c 44 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  320.053833][ T4192] RSP: 002b:00007fff2ed7d828 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  320.062519][ T4192] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc89b753257
[  320.070715][ T4192] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff2ed7d8e0
[  320.078738][ T4192] RBP: 00007fff2ed7d8e0 R08: 00007fff2ed7e8e0 R09: 00000000ffffffff
[  320.086757][ T4192] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff2ed7e970
[  320.094821][ T4192] R13: 00007fc89b7e845c R14: 000000000004e0c3 R15: 00007fff2ed7e9b0
[  320.102990][ T4192]  </TASK>
[  320.106139][ T4192] 
[  320.108580][ T4192] Allocated by task 8789:
[  320.113021][ T4192]  __kasan_kmalloc+0xaf/0xe0
[  320.117849][ T4192]  __svc_create+0x60/0x9d0
[  320.122490][ T4192]  svc_create_pooled+0x62f/0x810
[  320.127678][ T4192]  nfsd_create_serv+0x2f9/0x700
[  320.132590][ T4192]  nfsd_svc+0x132/0x9e0
[  320.136831][ T4192]  write_threads+0x2ea/0x350
[  320.141473][ T4192]  nfsctl_transaction_write+0x105/0x150
[  320.147055][ T4192]  vfs_write+0x304/0xd70
[  320.151344][ T4192]  ksys_write+0x153/0x260
[  320.155716][ T4192]  do_syscall_64+0x4c/0xa0
[  320.160168][ T4192]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  320.166101][ T4192] 
[  320.168447][ T4192] Freed by task 8789:
[  320.172454][ T4192]  kasan_set_track+0x4b/0x70
[  320.177081][ T4192]  kasan_set_free_info+0x1f/0x40
[  320.182059][ T4192]  ____kasan_slab_free+0xd5/0x110
[  320.187120][ T4192]  slab_free_freelist_hook+0xec/0x170
[  320.192670][ T4192]  kfree+0xef/0x2a0
[  320.196517][ T4192]  nfsd_svc+0x7cf/0x9e0
[  320.200834][ T4192]  write_threads+0x2ea/0x350
[  320.205462][ T4192]  nfsctl_transaction_write+0x105/0x150
[  320.211078][ T4192]  vfs_write+0x304/0xd70
[  320.215449][ T4192]  ksys_write+0x153/0x260
[  320.219819][ T4192]  do_syscall_64+0x4c/0xa0
[  320.224418][ T4192]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  320.230357][ T4192] 
[  320.232824][ T4192] The buggy address belongs to the object at ffff888023e29800
[  320.232824][ T4192]  which belongs to the cache kmalloc-512 of size 512
[  320.247432][ T4192] The buggy address is located 80 bytes inside of
[  320.247432][ T4192]  512-byte region [ffff888023e29800, ffff888023e29a00)
[  320.260667][ T4192] The buggy address belongs to the page:
[  320.266346][ T4192] page:ffffea00008f8a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23e28
[  320.276547][ T4192] head:ffffea00008f8a00 order:2 compound_mapcount:0 compound_pincount:0
[  320.284919][ T4192] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  320.292974][ T4192] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888016c41c80
[  320.301741][ T4192] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  320.310361][ T4192] page dumped because: kasan: bad access detected
[  320.316931][ T4192] page_owner tracks the page as allocated
[  320.322683][ T4192] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1f2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_MEMALLOC|__GFP_HARDWALL), pid 8784, ts 319130813002, free_ts 318260655370
[  320.344265][ T4192]  get_page_from_freelist+0x24f6/0x2670
[  320.349863][ T4192]  __alloc_pages+0x1ee/0x480
[  320.354496][ T4192]  new_slab+0xc0/0x4b0
[  320.358608][ T4192]  ___slab_alloc+0x807/0xdd0
[  320.363248][ T4192]  __kmalloc_node_track_caller+0x13d/0x3a0
[  320.369102][ T4192]  __alloc_skb+0x22c/0x750
[  320.373561][ T4192]  __netdev_alloc_skb+0x110/0x4c0
[  320.378618][ T4192]  __ieee80211_beacon_get+0xa8f/0x1ff0
[  320.384119][ T4192]  ieee80211_beacon_get_tim+0x48/0x840
[  320.389620][ T4192]  mac80211_hwsim_beacon_tx+0x104/0x900
[  320.395216][ T4192]  __iterate_interfaces+0x225/0x4c0
[  320.401158][ T4192]  ieee80211_iterate_active_interfaces_atomic+0xb3/0x140
[  320.408230][ T4192]  mac80211_hwsim_beacon+0x9b/0x180
[  320.413487][ T4192]  __hrtimer_run_queues+0x4ea/0xb60
[  320.418733][ T4192]  hrtimer_run_softirq+0x176/0x240
[  320.424148][ T4192]  handle_softirqs+0x336/0x830
[  320.429094][ T4192] page last free stack trace:
[  320.434294][ T4192]  free_unref_page_prepare+0x637/0x6c0
[  320.439803][ T4192]  free_unref_page+0x8f/0x2a0
[  320.444528][ T4192]  __unfreeze_partials+0x188/0x1e0
[  320.449691][ T4192]  put_cpu_partial+0x12d/0x190
[  320.454501][ T4192]  qlist_free_all+0x35/0x90
[  320.459138][ T4192]  kasan_quarantine_reduce+0x150/0x160
[  320.464639][ T4192]  __kasan_slab_alloc+0x2f/0xc0
[  320.469564][ T4192]  slab_post_alloc_hook+0x4c/0x380
[  320.474722][ T4192]  kmem_cache_alloc_trace+0x165/0x290
[  320.480167][ T4192]  nsim_fib_event_work+0x1171/0x3380
[  320.485497][ T4192]  process_one_work+0x867/0xff0
[  320.490399][ T4192]  worker_thread+0xd93/0x12a0
[  320.495127][ T4192]  kthread+0x42e/0x520
[  320.499251][ T4192]  ret_from_fork+0x1f/0x30
[  320.503897][ T4192] 
[  320.506263][ T4192] Memory state around the buggy address:
[  320.511938][ T4192]  ffff888023e29700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  320.520144][ T4192]  ffff888023e29780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  320.528423][ T4192] >ffff888023e29800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  320.536519][ T4192]                                                  ^
[  320.543234][ T4192]  ffff888023e29880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  320.551335][ T4192]  ffff888023e29900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  320.559426][ T4192] ==================================================================
[  320.567523][ T4192] Disabling lock debugging due to kernel taint
[  320.575361][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.583923][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.592604][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.601543][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.610943][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.681578][ T4192] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  320.688852][ T4192] CPU: 0 PID: 4192 Comm: syz-executor Tainted: G    B             syzkaller #0
[  320.698005][ T4192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  320.708094][ T4192] Call Trace:
[  320.711393][ T4192]  <TASK>
[  320.714343][ T4192]  dump_stack_lvl+0x188/0x250
[  320.719053][ T4192]  ? show_regs_print_info+0x20/0x20
[  320.724275][ T4192]  ? load_image+0x410/0x410
[  320.728805][ T4192]  panic+0x2f8/0x850
[  320.732823][ T4192]  ? bpf_jit_dump+0xd0/0xd0
[  320.737408][ T4192]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  320.743507][ T4192]  ? _raw_spin_unlock+0x40/0x40
[  320.748411][ T4192]  ? nfsd_shutdown_threads+0x89/0x1a0
[  320.753804][ T4192]  check_panic_on_warn+0x80/0xa0
[  320.758761][ T4192]  ? nfsd_shutdown_threads+0x89/0x1a0
[  320.764154][ T4192]  end_report+0x6d/0xf0
[  320.768333][ T4192]  kasan_report+0x102/0x130
[  320.772863][ T4192]  ? nfsd_shutdown_threads+0x89/0x1a0
[  320.778265][ T4192]  kasan_check_range+0x235/0x290
[  320.783234][ T4192]  nfsd_shutdown_threads+0x89/0x1a0
[  320.788454][ T4192]  nfsd_umount+0x3e/0xc0
[  320.792731][ T4192]  deactivate_locked_super+0x93/0xf0
[  320.798157][ T4192]  cleanup_mnt+0x426/0x4d0
[  320.802792][ T4192]  task_work_run+0x125/0x1a0
[  320.807608][ T4192]  exit_to_user_mode_loop+0x10f/0x130
[  320.813004][ T4192]  exit_to_user_mode_prepare+0xee/0x180
[  320.818579][ T4192]  syscall_exit_to_user_mode+0x16/0x40
[  320.824066][ T4192]  do_syscall_64+0x58/0xa0
[  320.828630][ T4192]  ? clear_bhb_loop+0x30/0x80
[  320.833325][ T4192]  ? clear_bhb_loop+0x30/0x80
[  320.838057][ T4192]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  320.843979][ T4192] RIP: 0033:0x7fc89b753257
[  320.848428][ T4192] Code: a2 c7 05 9c 44 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  320.868235][ T4192] RSP: 002b:00007fff2ed7d828 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  320.876679][ T4192] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc89b753257
[  320.884932][ T4192] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff2ed7d8e0
[  320.892966][ T4192] RBP: 00007fff2ed7d8e0 R08: 00007fff2ed7e8e0 R09: 00000000ffffffff
[  320.901135][ T4192] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff2ed7e970
[  320.909406][ T4192] R13: 00007fc89b7e845c R14: 000000000004e0c3 R15: 00007fff2ed7e9b0
[  320.918139][ T4192]  </TASK>
[  320.921431][ T4192] Kernel Offset: disabled
[  320.925829][ T4192] Rebooting in 86400 seconds..