last executing test programs:

3m11.805845985s ago: executing program 4 (id=524):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
close(0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000002c0), 0x10000, r2, 0x0, 0x1c000000007400}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

3m11.529506934s ago: executing program 4 (id=526):
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000b0c0)={0x2020, 0x0, <r1=>0x0, 0x0, <r2=>0x0}, 0x2020)
open(&(0x7f00000000c0)='./file0\x00', 0x109281, 0x0)
write$FUSE_INIT(r0, &(0x7f0000002280)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x110002, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000007080)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
read$FUSE(r0, &(0x7f0000009080)={0x2020, 0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10)
syz_fuse_handle_req(r0, &(0x7f0000002380)="d37f438c8ff0a793bb0fd85e80a3add0f8f65f17e46f60227e8b09439e47ae441d91f7c50d52383be1a08cfa58969071ef9251774b2aa82db4b537beb0834e94c9f625097a9fd8ae5d86ccc28ae9a5fbf7a931329d6c0aa28650849abea29afd035f5eb12f8126d5b8c277c8c14f25965396c229226cf8b0c6da769454f1981c1b0a8180b80469005a03d24fee1d6f5543a43d7156a0da6f40f6e4344cdfe5f96f373459fabd8c1fb029f3cbb965f11e04c92468dc54884926996135312816573b5f052907705fb31ed724a8097b4eb9a547bd0a4f9c66421393b19fe59fbc07bc8c6319225509823784428ca5f20741130774b9090811966d1de850ef61c965ba07e2fe52380c4bee79f58db0931b3d0c06cfac96c9e8676eb0e10ddcecb47f17e8c4ea80d3f67a9e04f5edae06ec33863b9fb5edf40c87fbdc5a00936d260eb32c3df5a905d3041a54d0fade7b220027169911111af6142645e771ce84efdff5ef5f3fe5b1efdb67ba83dd9f94008f787ecee2ec9849c34a8699900b3151e799fb1704100f2075cf313f719efba77efdfdf5e37379232785af24729608cf1099a9eeb643813fe492fbd86788f43e231fe0a6f3f0bf302efeaffa32890b1e48818959d7d2aabb83f062e356a81605f55da96df097b11471c46947910bb3e5e40a5a5c92077231d68efaec50b848907d1e37e18d885f5bd95d939ade1852a5e2f516781e1868f0894c8c0872c84d9c80fcfe085ac88e2a8caf63b3444f6d5f63c4582e766f1fb06a204d7b8c266e29bb43e04f42dc241b0f6926ea4b0340f0b3ac232d92677f2ec099b17361d988b72311e5e93d6d93ca3bb711c5fb979684f67f6ba32901b8adb223fea467157c55e8d5540743af46d36e6670fe21254ed91e207044db3424d42a63d780f2269ca3417aeb73632fb93dd42b07eff0f5ed90707423066f834c2881ae5272af5b3c04c6b9cadb8b234d24c5341696960a23f242837d91d6751695e9f07577bb81aea171df43b27c44ca5b815e66f63848403320ffdf2926f500b16e7496b835ae7a09288847cbb232e2e271cd732e38309d41ffb55391dc4a157e0c02505f54430a70a9ac197f5573a0b11722aec13a9adea4d8e0022810ca28414964d40cbcbf9d2704aa82637e13d561c4fed2ed602be375e547a7fa7198e6a75293abb3903d0b8204ba21dd369a79159cdd810162c2a2ee722bf4e43b7679dfb8b4ac9e768fb3d391fc4f1839f2e91f1c62050b8154cafb6dd19a3f8716a5c072725c5dad281281605ac02632d041accf07bed8135f4cab566db7e01c6902be5728fb01cd6b17edb8870e3417897a604ec795c440334b1bf9b6180ac13d13298b80b8f4352b0bb36ac151607d6ebedae06f8a0582ecd3963a6df647c38c64402ab29ed79533efbe311df5c29d9f1928371e99094f3e7d8aa3d277fe0e3471c6746ca5dab72d6ec161e05b46829c7b437cbbfd82e8606153f23205f051002e23a17906056a50a0d402814df2bfc1de9906b2ab651770a482315e06146af144acf0beea22a5a9bc61931d293483d0f3bf04e62e89cce3e3ee781b3340f59f8a026228e6f3cab05f23ea71334eadcaa1068f1b67f1eee3ee1698e92bc68759a3534069de9132ef7d853f4e20dc1cac32b42a995da861ee19c52e8387528db1ff0245807a1fb19c1670bc3c56f44db0333d7568eef79964f00d6d242a3735cf372c844d6cfcd9bd8934f14dbd5cb907108190fb7ed919840429d4da052d95a242e93db7f07c2c1f8f141026e15a767cc9386b31a18ecc82c4603354236446e9c79ad6899049648b4244446dad02225c5837fb8b033ce4db1fb044df7131bc99316434f232b8049701d33235e581341c5bb08208703e4daa83c0d4e1ab73e8c0724d0e9d6be114927acd0b792ab9464dd3b67963ed235243ebbc16e6af057e984fffc2554582cdd6548d9a929a89b39650a12511ea208ea9553703ec994318d50cea6a632724b08b0af3c11a4ca9d95dba675112563fbd166463cde649917402548547d54cede66d711d805060beed06c79be0c682dde2548a899bb121926ac690ecf1220764874c37810abc3c64291fef538f8959ed50a4b9f6058b8c45735fc783f3ec592c022b066583950037fed74e12f0fc8f04db78cae682c706fdc3783a206167336ff9e4707ce741893beec04916626c4ed07db0a73bfa5d786e3f3585e4b7b37f3968f08f8971963fefa07b7311d4bef7b5a5d72d3c40297da80d995d866220e005713d69b5dec9a4481301e9aa6ba8a6bb1f911c1d9f827838edb81348231f3da450c1044c9c722d31a1fadccbbac0d82de32f2a46c0a083ec89e2baf21b2b1655702e7d58b950df5904f76f129d15c93f95550e3b52c72eb79a1e09aa253c35fce97977f881f61acc6268c2596b755f18d1c95be938b390565d780929c4c6ba4c8d417775facfffce5c0bcc1f075913f5477563d06b3583c3bdcc7330bd6d1a8bdcce29f8452668a9f2a613f21d5195ba1a1bf134e80be88ee8fdd994936b1b40a0f2e98723d8bc53aef7b5af884f5fccd3eaf2dda01278be0b26eccd63cf68278e06e59889b8b9327550b615df368d99bd6d19636477c4d592e365b0c8c43a23d434ec3d622184f325d6d1c8b704aeac87359d9c09012deb32db9bc034fbf10b4662d6618b4d849a9546f00ed3265c22807072482b0ea4eacad35e10bded78ddc4e4025c7ba521b709e4923cfa8b6964fff4ef513965c4c71a77447daf08f7ddd10f2319b57c8075046ed4820e135f883fd4358edf30fc9965b16885aeb0f82cef2556f67bd33c44edad1a2e3bafe648f5e3797a62931218a468f637832f7ec481526824ebb8de5c207733c54313add8a24131f6de8eb8ddab462b5ac7693f7b278b38728449c9d595af99ba5b1548fd942b7b8538456a261a3ee3a7d18fb3e6180b6cfc9adc76a1defa797b57bcbcb9cb47fdeb2316fd2d913dd4aa0239638fc5c3d29df965aec2ade1f556ad58c9159c9f1b6e05691f476c5ff73230eb74a891f7b285de923d1cab7cf1fe2c82cc6ebcee9dd0be04bbc4d01b2ba8c2525fc4120ffae3df6bfe44663ee532ceb5a21db4f2204386f84e2f51666af55cda90dba169a9cd1adeadd7c90322af2656c3166fee2dc39b2db56e2e18b6f7a24bb7b0494320d2000d629e93427d224587dedb5c196b1796fec0c526a8a0355951045677733b33cb42ec170f137b934c4c6e141a8f8ebbeb1970797a29225901780f96521939b2edf85b1a456e9f97d02782104583757126159f264d9ed95e801561d63f0ca075543813c732e75deb01e585fb5b7bdbd7311d9f346e512b36e972489988f53f42118bbfefd3a52ff1fb97f47eaab7f8baa8e1f397bf877588c1c898690885273e47c1bdce3f220f80828fb7489283d5529756514842974a55cd95aa5a75a18627897836311486300bde4fec1c312c735e5ba3419028cbeeaef709d97752a12f83650aec7305232f22f90b8718113f06b3cf48cae0b365c456aa17610a78454fb81020c84ab51e27891dfe6e3820bb8c4ce0a5f72c72f2523b10be64a3c05f76e7bcb7b6c9aab9e49bc0c2b6044b66c475988f0a078f53912a9c442a40243da943376c8f75e74eac306c61004f6a88a818e3e992c0ccadf44e48c95472359c79f04462598dd467cc140e665e57b9b98702096750b82f291ee11b80a9064dc4a0c790107ac0aca2166e4a964aeadab9ec1ed1ca686b36ff00f75a3a131c09e3297d0471b689475941d09e09c62d94840a6083b1e8d80c22c9e10f3575cf53fe80702e0ef82f43bb13a1128a4f76a1728da93d86a5c86fe831334442deb1e003c96cc40a65ee721e219c06c01e75176d1035ec855258d3fc565f0d6eb31910c3c4e4450c65755ca563f0d877861df816160dbccce49865e0c6e9dc7cc281481b9f6bb8dee95d6a572421f1b2dc1995e0a3fde00ae6073015ae4176519e586ef434df534667d30ab103b7815f5a992e51004471ecdbbd8d9d464e7c24124a928b5aa925458825024ad03ad526a5b08ba1b30fef04288035749c266612bdd5caf4ed5245f67f5fccaabc6b2d8994c395dc7f8ce00089f4eacefb18e65a2d9d04136cd9172ce5aedad596d11fdd4b599f7f544f92a398042821b7c1e6ffdf053a35f95f9997791bbf6a0ecbc69531d14b2fd6b18dce4267816ef2fc135b24d76be1b59e35fd76796e9fd92dcb38c08968d9be724eb8a22575e7a7e2649f2a27fb3fac57f6aa53917ae27cd8efc4b6469de6155c3b9654a70ca7fa318682d1fbbf7e3e9f85f3fdf91f96eba538c899f3aebb79fa0ff96f122859061c2aca2a2fbac5640807cc7dec2a5f37a84cfe69af9775a703281d271a38ce08adcfe26ad3df7d0a1065393791dcb526634ceb5c33061fd83b4e1c72fa175585e0f839c9651002896fc7a6ced33919105de91d17083c8f6985e24ffd0fb35dd558af58cab9003e1fb7f87075704396ff677ae7a99725ac2c50c3a9edb15cce24de9a734f81f5187099b2ec316c6cf536c628445799bfc13803c6e94fa844de4b294b6f9b7f96ecf666c1088eee0997dc3d925e45fe9157ff86699e68ad786e973468de54ca6c9156c2e30541e97fb7b845ec2acdbfab05a03009de8260b444c48c0e64940a441d56446b33c698631f480dbcd6f8726e4c287c262bbb6de251c930e717797af777283e0575e8e1304af50cdc493f429dcbfa518e592550e980bf4516ff177a725c59ed0f8d9384bf9bbfe024560062eaf58bc6dd4ad29d71a39f02e00f6ca44ea68b9019387add513c767693d5535e46b3ff697aaeaeffe8e85b86ae877586fd706fbdcc492208c1b61556b80af1f80b018391a4d42e030d89e57c8c8c323c23805551954bcfeffb2c08f9043f24db22a9285f9edb6c66e1091b9dd8e51a228dac137df945491c53014a79b3e033305b1678d7664afc79bd04b0c397c0fb4a12fe3116b24e4d42830e3fb611b337f449c1e0e9667b09690b37789e45cc3007f4a56539c782fa41cbc30f8b213f36e03a1bcee413ae9b4706561c5c68e0ad645423eb5e799ca52a0cbb7e9468a7a0e253b5ea76f6a79a5dc9d72d5aab07703a814922f1fbe1eba0336659ae0acc46b46088b895846435a02bbacd4663f652c0e1289411bada43f1335d48d8ca7a021a60c8a19a8a894aa3375758a140bd040e24aabb0736f79ad95f2090a78418360cfba57398dbf3645bd6c964e53923ded0751512e8cadb650ab833ec3167e8bf385bfbbba46e0845e745810d0133cea434ddab18ef066caea680f16604baf0ee56b1f631f5ccf754fc79285af9d17d99346f7bcd7048dcbb3f0fbd6c2aaa415821f73e4ef5c09fffa911a7ecda2961342d0db95a92d597e8755e41fda1e39c65efc82ca82b22172b3e2017ec5bfbbdbecccc318190eca29ca4dfe393afbbaede3fbc53aa54fde14a1d98a3f0e673bd710d73a978cd7b37901915811c1a8478c61c4021792bd07d42a0e4f7f367139fd78ad1b6cc23c94bfc98bf73c8891c5c69c00c0aa4ba3d76472543fd8d2fef44f4fa928906a60f726a7aed2c6435ea80ffa1d91efc4a605b48845a1e66a7a79c92a869549383256e7724f796aa893c3a86c8c501dcef329d79d7ad5836cd41d48d0ddee68cd5dce8e59724bcf7a0d6872deae7dd15939db46b978fdb77158c3076ecc720b3fe3fefff15b28f7f1304c375a435f20c714576dfc8c9f53af9b6dd7d7ba14d8fe4408f8ffbd61aa0f1194e3c57d63519f96e42fdc97e7adfd686fdbef39bdca9a2716b337e406a909f3b2eed19e24408e8dbe91b5aa98fa62b6fb6f9f13dee6a5da24b24cd2cd859029aabb2bace5492de4985a19c508d2062e6b580bac1a55a41aecabf0d63f48315a6497f11a5a09bdfd1649203eedcd03069cac0bde4f7691e57e2a054e1c192f6d78f2647af7cfffc4daad033521b87103c5bbb81eafb0ff72c4cfc7beab3cd7074ed50f23021e917e85a0ea2dec4dd0d7f8efa68f15a1296ca768fac34f630014743eeeed57f80165e268c1cef7d5d385edb955195a3e44b8b388dcab72083fc2dc23d71913bb98ef2a34ad6df1675b936e294ebba47dbd74daa8098fcb627a1e17616d8775cf1fdec8676d57ce31bd4bfbe821a03ef251f651ce97dbae57f99c6755470e9cdd17699c568ada69a64621dd5625d95b0b550c596292b1816b9516cc7d8f02f8be32afda1f4357419b28363ced9bf7429e7687531fb00de4d2e03fe4ca448e66ad17c58d909df244f4f7ed265164b42273187816e0872e6818b8bdf48097d108f4c67ffa10038f7d2a705b4489c9af1284a7b34dec3e5b56f350c880277fca26427e0746eece173de1ae1104b7822a9fd45b262e5f3ce16a64dfa69e84f077296144f0c119bd2aac2251f463b3e8177dc259088c8a1794953b248b95e7c6e6f91ed45a7d3bce7e91ec72b98c06ba6c625bfdefc69c7416d89a0b1f3bcab5aed96370d74c6812ef0338368756f83f4be0331cde6d11d9a917483f25beda96af71882c3d4d1b3785932fa0bc93d611c919dcb116699db1a3d26ad6826937a984fa121fac7a45ff220520f702ee942793dbf7023b98c9cca4f150bccd29f26aff58e2255aa73fb7a7abd24b501bd403f24900d42e88c57494ab5ef8bacc07ff9904b100d709cc9b1018cacfa42d839476b7aeceeb2236e2c1151d441b167036bef84069401d67a1473d5d11cc109bd39a1fca5d5aa347c4fd5f6f3c12a8f5d1ec344dc1717f5e8e1aae6d7b7c42aa633ffdcb46c32ac667d933cb9fdaf6d83eefe77d8733a59fcf394d063efa474df67697f881991a34fa79bb78f3b19e9b29cc7b03ca7390b0ca6064a961f3fed249db4ff2c01840373b6242034cbac645d59743f1a90f372ee0c17efade2cef03e3f0edc640dfb629c6b98dc2f28ce06aff3574a2cbdb4b06fba31b2dfe34bba7e34e02a786fa4473d5ba847f4f1e644c1bad62ebd5ca9306219ad6beacb8a54ba299e1bad887293f1b65ff956ea2a562e290df607a608503afee3ae180d600f1d14a9459cd5a399c7e2c7bbde19c11ac869d34ea5e990a759e346c3d538108a277894d6ec7bc6fcd65862a2d9d0696551a4a37379feafb313a09f2575c52641db9f46f4cc5e851f67ce633572b6ffcea7b7c24b44b40d32e55e4f3b426e464c07741648f30d51fe3eb162cadcecf21b7182cc915ffd887e85c385b5989f87910c5c990d639f8d2cd9234c534400088ef49733c94f39131fd51d784a407a07eae6d5359acfa35994ec3760ca3866404a5faed0fb210ce1b849868a6007c8e839ac7518172928277bf2dc43d163d2a0f6146cca1738ec3526762e8e2caf69606a3980bd08fba42ec7cbf48d315e45b834bfb14221de8259250c4ae9590520288c73bfc7d8076d3fe46b772491173ea0daa76cb5cb40637a038ce734d72c0c020494062843715e762d71a8f8518fa7d837391c06b62c96efc17651158657db8ea9a57634b0b5628b06fd5d568fb02185a63a6beb56013cfb4fd1695b102fb58f39161232af39f6d87c5ff6af247df3d549b7f6f81cddf4e3cb12b18634e69df5af55127f72670a3104ce5aba7877c32ee4b0cfa076247a95750e830a240b092baec2f473e83581e5799d69593247f0e78ad8e44c0e0d09fc55888107c4badcdb20b2c82d5915b3b03060e53d199b20b29ad6742655bf62343421f826daf1a3c0c493c96bf719bdf0a8dc9a4fc3f75bcebec3aebfd898ef161cd4e2e33a142c36f673cd8da72edae4f691a4271881d326d77fca0af396bc1eaf9e9d2a047562f91f0e87972e3ae5abb75e352f28c81351c4be6a34e5a01b8ed8461f14e21d1afc9260d838b43e9e2ae078d64b6c718232bcd2b26d3c57beb3c605e00c6f9c1031a3bae4b1872ba5d6c23199253929f1cf57a2e961d798ca9d315fa6b9855c8e7efcc24ccde498a3f1ba23755360044f024753f886f97016bd45a56d802f3e9e040a84f6c46cd5aa99fd4471b97cdb0bd8d265853fb79c42b4cad7eda49ca08d3cefffee2d3f1b5f083a06ea4be4b0acf84ca27e5a8d579d3135f3e59bd5b823b2bef7708189f54c8f0d576e4c6bdbf932b55bc792bb302cddc5c555e4903eff45b493f9498f7bf184035335ad1ba1547795a443c9afb30f932e7d1b042fe1690cd34d98e2331cbe38108be26f8ed615590e8bd99fd01b700b21e6ed61de92297d8b447c723089cee359ccd4517328d54ebc43a3f9173698c4362a6130508c9a0ea57b9a8a74a997a21e3e2a7223ad3debd80f70aff2eba5a862aa667052462bf6635eca2dd3350ef70fda58f8492d34c5b819c802f97b8765680c39fcab3b92f8a8be88a93b5bfc1dbba3fbfd3051c4443e766f4cc6a9d0f96b66a081e9316a44efe5973479ae74bf13c18711218f75d7f4e6f70b0a34ff2a1aec8d1e3181a65b4d5f21f0c19789a2ff90ae5e1298e707628e97e6a5048ac29d916193577506a7f5a9cfb0c73d16a67a2e1f872c8026891e98df07579877460c845bf967f87d75295ed29ddf626340f313bb35a04f9304e34773eda19650f25a08b2bd603297d9edd7f7d1b88d0b18e7bc35b0593961e7403a03550a20a0eab83cb00e659f5fccc189d14b28f11b8f55db517ab124b3718e70868d2131c74640bc682ee785a75cf960a79fead7965d0798d98e386598efb5ce92b0ceeec4e63e2eee3a15642ac72691517c4197a667de3e57a56e2d6e4ecb5a2bc401f90ec2239baf6a9a418267fe2228f7776c7f932a048cd9aada01c2e6d9466ecc434ba61eb97a0d6eb00e719940b3dca3ae25b94e9040ee238184eeaf46e51b61d855ce476d10dd9cb09df18c585304bc4f9e88060e4bdd6e624dd90d7ae8874c0af1e17e67d3bb27babd15880cc61f22b6a0b24df6d03faa13f0c918a7b960f47d939934d9ae90edc40251fb53c9fde3ee255e49c8541d995a644d35b46ab202e56ad1de3da1c5ee587f167b398392d0fba4a43eedeaccb0ba16f571055381fe3885490c71e0805b1b3186bf2652b9a9df69d8d1232cf704fddfb5e7d3ff78ba5ae3b843f4f9b82161e223343240c33a9cd21eb312806163ebb2e60bc98b68b3d95bdd923f6ea831083c13ca65e4a06e999b2d014d0ed218d72c5b776fd21ae21d14e23e9074de20d6d16520b1061aa4db3b5b8077b1c43aa375c68a6243ad582a148dc6878ceb2ab6792cac38ef21765df51171436a412f60f5dc68fba51aae8c4909efa690340fd8a63cbfa4af6235c1c904a20578f54b9c91b1fb8017d05321e0bb9eda1502c1506f3d2939977af87d1f9329e237c129d5cb65e093396f016eb0c2f0aa5cab92a00259f6056532ef188be500fec4cd4614e29daf5b41da2b4742b02999e651c42d2f405344a232e36278785dc7a681d0ee2014ce3214f44ff9d2c3e083e18c299cd7cc8ddea4b805c673cb7479a553f28349235d37874ae3da878a5b6321e501c2b77470dd15b35ace69b1b8e3ba20cce47acb8350f206d136dfdcea697bf558bf3426bb1e0ebcf2797a1c7a181fad43b8c68633b361d40868c279896eb1c628656a9b57dcde8444ff92f2cc1d2dfa1998054487d8fcf11b852019ac21ae0582b1c8f4ff90f31d862e20740d7b803b0f109a8d1506137ca58167e8be1d13e6a5590e2bf2af5cbb7e79db2f4cdec83983463e1e830f54f8534e4c660039c0d372c7c757be3498f6be9ff6b6d13b88ca0ee07a0fd4df8cb13de0fa094cd3b9eb87032a6aaa757a6391ccf98fa7f9d99065b4f747e70ca497af77fbad520c589445d3401c67972ff7e274571b8c35a17ae78de90c81f791a69d70975208153f94ac7199c45de1ca5746887ec677452fd1a018b7287ac45e14ecdf1876229964153cfe6b39f1d50a9be63a0eb10016607ff338751cf9bb97c917d532be1174d0410e26dcfab873769b71db87758c0ad015b1db4b7565e244925ea0dc24313ac65f0355abcfa96c786b8ab7b32166bbf4c7ddae0d3f63d1aad63a9b105e05825aa012e075ba3e1c20b757e1dce75f6fe14e891a20988d365cb5e69206a1b7d8caf2effc73eb577330cb56495fbeaa6b7aef3467a32f53634e468208a8e55d626f98a2b51d39b48341c27306e59c0fc5c8058719b526eac245ce857288976abdfc9be1d4f220817f879c15cf0a258f89cd8269113821b0a1073165923748c6e8e0331ae9e7df11e62a80bf28559850cce385a98e0f48209ebcf69e8938a7605e96f4ffcf580b6c1df742766458763dc91b34035c12396b06ca5995b8feee35e1a3891cca0402fb9e739d8f8aa1a637b7c8c2c458493a323fbe5a76f866e2d9adf0d1d76950bc527a969f61c8519508eb5a93447d212e209c724aa16a949d8be1b14c8711d4c85e728e9d50b5b78b76242f9d59d866a86da0f129201a5b665611360ab3f4b678746cbba1b47884d2bfe4d3e38bf441fac354654c5077620cdf5870fda1fd5ca2bf4780d474a27cb660dd9d7ea83d423240c7ffe743dbefa3b922ac6d5f9544a7d5477dc44761a1d47633f67fe220f37630d678daeb62360b5f4f5d40493169f6554897c5d05c4909834fb2ef1494f8bbbf9e986761b931a26b0ab76b88d4f9b9bd9a024dc39819e0a139eefba8f617401811b4a7b97212aa82965e6008447979d19bfeacceedd48a24d65b8a1705d686fa8c44100d27dca9bc764b74345e1da71bfd9604e2f5bfdd28097f90e98f91ca81b08e827f7a3e742e6c019691afb612042a375985b01b94b3eb61a484fc2ece84f53ba5738273c80047663ec335d31f1ce43c6205a78fe7712626e8e6ff691b5bb9fe1a41909db60d8644d73936c4eb663bbfef030499c8c7d31f4eacae3cbf736a1eba6f85008139ba7eaf5f1ef8804f617e56c820c24f139b7036887f2ed2de32fd63574d0359ad4026e67c550b4ae960a2ce234a20e076da3f91a7ed60bd59a38e1acd7941a66bf3e755a431cead3f01600c6e47564167340f3f853efae37b036988bf4b30849d9dd5d0d09b1799bf9fadca76c497a1345018c8724065291bd8cc633e06359b72040a7673ffe5e86c240d043963bf2d76a0fbf50243a63d45d7f3358e1b9d1f3cbffd7e60429afee778f305e7d8f07c3e49a104f3a4e92118ce84cd11839f507656757d6e89ff296cf792ca2f1429aa80c8092b970d6f065eda3fb25b6b8a699561f8fe5236bbbc96f15860e29326a5a2671a88545a65e587d986615998a124a97820a65f81779b3101086e6f261177a66858d788c5c66521408a9e70238719614aa6232a3ef7a33e99d3b1dcdc20c33e8124b1dabe50ce9e4eadf34685560039e7d7e08f038f2004da7703bc4a30a28409719092e6640e743ee8a4e75dea106314a26ed5cae5d02bf9c8b0e96020a6b7941db7f0c311476f377a992caccff7f1919062f9db36ba72b29e9dc0880fb8eb24f41e0a6cbaa487058c6fbe6b062b372e0b84c9fcfd64d84724b6cda7fb3f582abaa6757782b20f9c1fad78f98273129caaa9496c1dbbbd167b52bae60dc327d1e18d82450ff9b6b108a0f20cbee5", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)={0x78, 0x0, 0x10006, {0x8, 0x7, 0x0, {0x0, 0x5, 0x1, 0x4, 0x400000004, 0x401, 0xe767, 0x800, 0xe96, 0x8000, 0x2, r4, r2, 0x80000001, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3m8.20132928s ago: executing program 4 (id=569):
r0 = creat(&(0x7f0000000100)='./file0\x00', 0x7a)
close(r0)
execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x31, 0x4, 0xffffffffffffffff, 0x6, 0x8e335, 0x9})
r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0x0)
fchdir(r2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200)

3m7.901560629s ago: executing program 4 (id=576):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f00000001c0)='./file1\x00')
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x100)
setpgid(r0, r0)
setpgid(0x0, r0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x1)

3m7.705812785s ago: executing program 4 (id=579):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x84e56105723e644b}, @TCA_TBF_BURST={0x8, 0x6, 0x20000000}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x2, 0xa, 0x4}, {0x9c, 0x0, 0x7, 0x1, 0x6, 0x5}, 0x6, 0x71d, 0xa74}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)

3m7.211336221s ago: executing program 4 (id=587):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3a0, 0xe8, 0x1d0, 0xe8, 0x1d0, 0x2b8, 0x2b8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0x0, 0xa, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x4b8, 0x1}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x3, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'bridge_slave_0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071115e00000000008510000002000000850000000000000095000007000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge0\x00', <r3=>0x0})
syz_io_uring_setup(0x0, 0xfffffffffffffffc, 0x0, 0x0, &(0x7f0000000000))
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xcdcc}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x28001}, 0x8000)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@private2, 0x200000, 0x2, 0x0, 0xb, 0x96}, 0x20)

3m5.999128399s ago: executing program 32 (id=587):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3a0, 0xe8, 0x1d0, 0xe8, 0x1d0, 0x2b8, 0x2b8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0x0, 0xa, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x4b8, 0x1}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x3, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'bridge_slave_0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071115e00000000008510000002000000850000000000000095000007000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge0\x00', <r3=>0x0})
syz_io_uring_setup(0x0, 0xfffffffffffffffc, 0x0, 0x0, &(0x7f0000000000))
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xcdcc}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x28001}, 0x8000)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@private2, 0x200000, 0x2, 0x0, 0xb, 0x96}, 0x20)

11.257527222s ago: executing program 3 (id=1510):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0xf4db158ec847dc81, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4}, @FRA_SRC={0x8, 0x2, @remote}, @FRA_FLOW={0x8, 0xb, 0x800}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x44004)
r1 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000040)={'\be \x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", '\x00', "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000003cefd70f14003556000"]})
r2 = epoll_create(0x1ff)
r3 = socket$inet(0x2, 0x3, 0x8)
getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000100))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0xe0000004})
ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x2, 0x9, 0x4, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd})
ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0)

10.036859011s ago: executing program 3 (id=1517):
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x800, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x1a2, &(0x7f00000009c0)="$eJzsmL9OIlEUxr87A0PYbALtbrObLAlsscPMsBopNKG20ESjsZPISNBBDEwBNMansPYJrIkN76GFWlmInZXFmDtcnMsYgUT8F8+vOPPNvYfDuecmHwkgCOLLcnV5d3GSTsW5/o4UYmL9Wg1yFCm/k7j/e1ZZOj0ybs873cV8uB4D4HmTf38EQLegwhXvnjf86ZR4rkIZ6Ki8vw4GXehNKFgT2gbDhtA7kq7xfF3frji2vlVzSlwYPJg8WDzkwv31DhlKUn9M2m+02rtFx7HrryjGza9XUDAv9Sff12A2RjA/mFBgCp0Dw4rQc4gNZtMfiXT+n5GgvvrG5//c4kdiTE4UH6VVElMQDFzcxIHpVWbCWd/7gAva5MmBP3nHDGnJnyKSf2Td6n620Wr/q1SLZbts71lWbtb4bxgzVtY3Ih5H+l/c96dvUv3oM7ka09Asum7d7MfHd6sZg1u3wo7rHQCa738KMn/6XfNb0EJ1/d+DJPvNHxkVyRHtEgRBEARBEARBEARBEARBvIBfYP6/oEPknyxZy372QwAAAP//cvhuGQ==")
open(&(0x7f0000000140)='./file0\x00', 0x4f4e82, 0x82)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1)
madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1)
syz_open_procfs$namespace(0x0, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x4, 0x3f, 0x2003208, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010104}, 0x10)

7.993934115s ago: executing program 3 (id=1526):
r0 = memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe2(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80000)
splice(r2, 0x0, r4, 0x0, 0x38f9, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r5=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
splice(r3, 0x0, r0, 0x0, 0x7fffffffffffffff, 0x1)
write(r1, &(0x7f0000000040), 0xffffff4a)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="b00000000001050500000000000000000a000000440002802c00018014000300ff01000000000000000000000000000114000400ff020000000000000000000000000001140001"], 0xb0}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)

2.581510198s ago: executing program 1 (id=1551):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)=0x108, 0x1)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000000904"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000240)={0x40, 0x12, 0x4c, "03000000a2839d4b9369ec3c37620da1ca809968427ae32f1fc627ce180e63bdbf7370145c251d710638c6b02f342b526b46675b3bba0fcc0607175e578d1e21fca4a17a5aef4ee8d77c6f9c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000140))
syz_usb_control_io$uac2(r1, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x6, 0x4)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
sendto$inet6(r0, &(0x7f0000847fff)="8e", 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffd}, 0x1c)

2.564137548s ago: executing program 0 (id=1552):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48)
r1 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r4 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3})
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000240)={r5})

2.465598381s ago: executing program 3 (id=1554):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x9, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000440)=@xdp={0x2c, 0x300, r4, 0x13}, 0x80, &(0x7f0000000740)=[{&(0x7f00000005c0)="691e243e3a6328ceb31c80645b76", 0xe}], 0x1}, 0x20008110)

2.156051591s ago: executing program 2 (id=1556):
gettid()
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
dup2(r0, r1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x10, @empty, 0x4}], 0x1c)
sendto$inet6(r1, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x9, @remote, 0xa}, 0x1c)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0xb, 0x7fff0000}]})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x40}, 0x8)

2.060269604s ago: executing program 3 (id=1557):
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
timer_create(0x1, 0x0, &(0x7f0000000000))
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000100), 0x4)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x645, 0x9, 0xffffffffffffffff, 0x10000000, 0x10000, 0x3, 0x400004002004c2, 0x7ff, 0x1, 0x0, 0x404, 0x82, 0x3, 0xfffffffffffffff8, 0x6, 0x9], 0xeeee8000, 0x240456})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.029478065s ago: executing program 5 (id=1558):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x25, &(0x7f0000000340)=r5, 0x4)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000007c0)="27031c00", 0x4}], 0x1}, 0x24040849)

1.911027259s ago: executing program 5 (id=1559):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000002100)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x1, 0x5, 0x7}}, 0x30)
write$FUSE_DIRENTPLUS(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="b0000000000000", @ANYRES16=r0], 0xb0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',posixacl'])

1.910719999s ago: executing program 3 (id=1560):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000001140)={0x1, 0x2, 0x6, 0x10000})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x8, 0x1})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000380)=[{0x2, 0x2, 0x0, 0x80000003}]})

1.903936829s ago: executing program 1 (id=1569):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040098}, 0x880)

1.770428493s ago: executing program 1 (id=1561):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'wlan1\x00', 0x100})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000108c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f8", 0x14}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r5 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})

1.694575075s ago: executing program 5 (id=1562):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0xffffffff}, 0x1b)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x4}, 0x4}}, 0x10)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x1}}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfbfffffd}}, 0x10)
bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x20000003}}, 0x10)
bind$tipc(r1, 0x0, 0x0)

1.660912437s ago: executing program 5 (id=1563):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000010000020851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000076600020009000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)

1.607933778s ago: executing program 1 (id=1564):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1.54993461s ago: executing program 0 (id=1565):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xe2, 0x0, 0x7fff0000}]})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "3d8b00", "eb8e7ba12faf3700", "8000", "c16cb41f00bd22fc"}, 0x38)
sendto$inet6(r1, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137)
socket$inet6_tcp(0xa, 0x1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.328063937s ago: executing program 0 (id=1566):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x8)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0xffffffffffffffc3, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf1d, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x81}]}, 0x38}}, 0x8100)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010)

530.021292ms ago: executing program 2 (id=1567):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000015c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, &(0x7f00000005c0)=""/4096, 0x1000, 0x2, 0x11}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

529.589903ms ago: executing program 2 (id=1568):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
eventfd(0x1)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan0\x00', <r3=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6}, 0x10)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000200)={r3, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10)
close(0x3)

529.345183ms ago: executing program 5 (id=1570):
socket$kcm(0xa, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r1)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$unix(r1, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x3)

376.375467ms ago: executing program 5 (id=1571):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x90, 0x61, 0x11, 0x64}}, 0x0}, 0x94)
r0 = dup(0xffffffffffffffff)
syz_open_procfs(0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
madvise(&(0x7f00008a0000/0x2000)=nil, 0x2000, 0x15)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
wait4(r1, 0x0, 0x40000000, 0x0)
ptrace$setregset(0x4205, r1, 0x202, &(0x7f0000000080)={0x0})
syz_usb_connect(0x3, 0x0, 0x0, 0x0)

369.111677ms ago: executing program 0 (id=1572):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x1000, &(0x7f0000004000/0x1000)=nil})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000000)={0x0, 0xe000, 0x8})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xd98e6161ce3c5512})
r3 = socket$kcm(0x2, 0xa, 0x2)
r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0x980912})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast})
write$tun(r0, &(0x7f0000000440)=ANY=[], 0x6e)

307.33932ms ago: executing program 2 (id=1573):
openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
linkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
syz_read_part_table(0x5c6, &(0x7f0000000bc0)="$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")
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c)
getdents64(r0, &(0x7f0000000100)=""/134, 0x86)

249.403961ms ago: executing program 1 (id=1574):
socket$kcm(0x29, 0x2, 0x0)
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084)
recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)

146.936865ms ago: executing program 1 (id=1575):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
sendmmsg$sock(r2, &(0x7f0000003440)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000480)="baa6", 0x2}], 0x1}}], 0x1, 0x4000000)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x3)

141.875035ms ago: executing program 0 (id=1576):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f00000000c0)=0x189)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
socket$nl_generic(0x10, 0x3, 0x10)
memfd_create(&(0x7f0000000300)='\b\xb9F\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd8n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\xca\x04\xb2C\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x02\x00\x00\x00\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb\xc3\xce\xbb\xfb\xcf\xf4\xb5\xf0\x14\x8b]V\xc1O\xac\xe3V\xfe\x98\xd8\\p\xc1\x83\xb8\xb2\xc9\xa5\x03\xd5v\x05\xae\xd9\x05\xcc\xa7\xee*AV\xa2\xea4R\xc7aB\xd0]U\n B\xa1\x13\xf7\xcd\xe1~ \x01\x1f\x19\v\xbbH\xb8n\\\x88 \xda&K\xfe\xb7\x98+\xc2\xd6\x90\xc3A\x00&L\xbew\r\x9f\xf0\xef\xa1NP\x935\xdd\"\xf5\xe4\'\x99KR\xdbX\x82Wn i\x95i\x83\xbb\x8a\x9a\xb6\xa3G\xa2{iW\xda\xb4\")\x12mq\x7f\a\x89\xa3\xde3\x98\xb3~\xfc', 0x7)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x19, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000ffffff", @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})

136.420795ms ago: executing program 2 (id=1577):
close(0xffffffffffffffff)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
socket(0x29, 0x3, 0xff)

42.463358ms ago: executing program 0 (id=1578):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x44, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x14}}, {0x14, 0x4, @remote}}}]}]}, 0x44}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)

0s ago: executing program 2 (id=1579):
openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
socket(0x15, 0x80000, 0x1d8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmsg(r0, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x2}}, 0x2e)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x4c, &(0x7f0000000080)={@random="a70b49c5294f", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @empty, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "00000000ffff"}}}}}}}, 0x0)
recvmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}, 0x3}, {{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x1d5}], 0x2, 0x45833af92e4b39ff, 0x0)

kernel console output (not intermixed with test programs):

1] loop4: detected capacity change from 0 to 64
[  113.291067][ T4895] Zero length message leads to an empty skb
[  113.408894][ T4893] loop0: detected capacity change from 0 to 4096
[  113.441855][ T4899] netlink: 168 bytes leftover after parsing attributes in process `syz.3.191'.
[  113.594293][ T4903] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  113.629660][ T4905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.194'.
[  113.714348][   T26] audit: type=1800 audit(1781622562.279:9): pid=4893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.189" name="file1" dev="loop0" ino=15 res=0 errno=0
[  113.760405][ T4905] netlink: 'syz.3.194': attribute type 1 has an invalid length.
[  113.920729][ T4915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.196'.
[  114.589517][ T4937] loop0: detected capacity change from 0 to 1024
[  114.631642][ T4381] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  114.671581][ T4937] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  114.717999][ T4937] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[  114.753334][ T4946] loop2: detected capacity change from 0 to 1024
[  114.774752][ T4937] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  114.877776][ T4946] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  114.892956][ T4381] usb 5-1: Using ep0 maxpacket: 8
[  114.925992][ T4946] overlayfs: missing 'lowerdir'
[  115.053090][ T4381] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.077613][ T4381] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  115.105575][ T4960] Set syz0 is full, maxelem 0 reached
[  115.217154][ T4381] usb 5-1: New USB device found, idVendor=056a, idProduct=8928, bcdDevice=16.90
[  115.237251][ T4381] usb 5-1: New USB device strings: Mfr=61, Product=0, SerialNumber=0
[  115.253176][ T4381] usb 5-1: Manufacturer: syz
[  115.263626][ T4381] usb 5-1: config 0 descriptor??
[  115.272694][ T4946] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.211: corrupted xattr entries
[  115.315083][ T4381] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  115.461633][ T4384] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  115.851631][ T4384] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  116.433408][ T4384] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  116.521617][ T4990] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  116.556787][ T4241] usb 5-1: USB disconnect, device number 4
[  116.656849][ T4384] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  116.680687][ T4384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.699294][ T4384] usb 4-1: Product: syz
[  116.706802][ T4384] usb 4-1: Manufacturer: syz
[  116.719333][ T4384] usb 4-1: SerialNumber: syz
[  116.781987][ T4384] usb 4-1: config 0 descriptor??
[  116.902299][    C0] bridge0: port 3(syz_tun) entered forwarding state
[  117.011285][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  117.471324][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  117.481299][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  117.491322][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  117.501304][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  117.511306][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  117.521305][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  117.531296][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  117.541299][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  117.551298][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  117.701486][ T4960] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  118.657690][ T5023] loop4: detected capacity change from 0 to 1024
[  118.749840][ T5023] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  118.805574][ T5023] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000e11d, mo2=0002]
[  118.837032][ T5023] System zones: 0-1, 2-3, 4-36, 98-101, 102-102
[  118.864269][ T5023] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,nodelalloc,,errors=continue. Quota mode: writeback.
[  119.149813][ T4241] usb 4-1: USB disconnect, device number 3
[  119.250260][ T5041] capability: warning: `syz.3.239' uses deprecated v2 capabilities in a way that may be insecure
[  119.751005][ T5057] loop3: detected capacity change from 0 to 2048
[  119.769558][ T5055] device syzkaller0 entered promiscuous mode
[  119.799445][ T5062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.247'.
[  119.839378][ T5057] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  119.884740][ T5057] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  120.221682][ T4553] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  120.268163][ T5077] loop4: detected capacity change from 0 to 2048
[  120.334702][ T5077]  loop4: p1 p2 p3
[  120.334702][ T5077]  p1: <netbsd: p5 (ignored 752 more) >
[  120.365061][ T5077] loop4: p2 size 458752 extends beyond EOD, truncated
[  120.393284][ T5077] loop4: p3 start 65280 is beyond EOD, truncated
[  120.473764][ T4553] usb 4-1: Using ep0 maxpacket: 16
[  120.560471][ T4719] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  120.591663][ T4553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  120.669914][ T4719] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  120.692021][ T4719] Buffer I/O error on dev loop4, logical block 0, async page read
[  120.741400][    C1] bridge0: port 3(syz_tun) entered forwarding state
[  120.763932][ T4553] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  120.790672][ T4553] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.805617][ T4553] usb 4-1: Product: syz
[  120.809864][ T4553] usb 4-1: Manufacturer: syz
[  120.816451][ T4553] usb 4-1: SerialNumber: syz
[  120.822020][ T4303] udevd[4303]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  120.839514][ T4719] udevd[4719]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  120.872559][ T4553] usb 4-1: config 0 descriptor??
[  120.925088][ T4553] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  120.940115][ T4553] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  121.102798][ T5099] loop0: detected capacity change from 0 to 512
[  121.165127][ T5099] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  121.236157][ T5099] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3894: comm syz.0.258: Allocating blocks 41-42 which overlap fs metadata
[  121.251982][ T4553] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  121.275046][ T5099] EXT4-fs (loop0): Remounting filesystem read-only
[  121.292028][ T5099] Quota error (device loop0): write_blk: dquota write failed
[  121.310370][ T5099] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5
[  121.341095][ T5099] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3894: comm syz.0.258: Allocating blocks 41-42 which overlap fs metadata
[  121.357108][ T5099] EXT4-fs (loop0): Remounting filesystem read-only
[  121.366222][ T5099] Quota error (device loop0): write_blk: dquota write failed
[  121.374047][ T5099] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  121.396677][ T5099] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.258: Failed to acquire dquot type 1
[  121.409730][ T5099] EXT4-fs (loop0): Remounting filesystem read-only
[  121.417723][ T4553] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  121.441798][ T5099] EXT4-fs error (device loop0): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  121.452635][ T4553] em28xx 4-1:0.0: board has no eeprom
[  121.475390][ T5099] EXT4-fs (loop0): Remounting filesystem read-only
[  121.486227][ T5099] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.258: corrupted inode contents
[  121.508884][ T5099] EXT4-fs (loop0): Remounting filesystem read-only
[  121.519415][ T5099] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #12: comm syz.0.258: mark_inode_dirty error
[  121.571342][ T4553] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  121.589971][ T4553] em28xx 4-1:0.0: dvb set to bulk mode.
[  121.593510][ T5099] EXT4-fs (loop0): Remounting filesystem read-only
[  121.603466][ T4242] em28xx 4-1:0.0: Binding DVB extension
[  121.619229][ T4553] usb 4-1: USB disconnect, device number 4
[  121.625945][ T5099] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.258: corrupted inode contents
[  121.648093][ T4553] em28xx 4-1:0.0: Disconnecting em28xx
[  121.657651][ T5099] EXT4-fs (loop0): Remounting filesystem read-only
[  121.684706][ T5099] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #12: comm syz.0.258: mark_inode_dirty error
[  121.696368][ T5112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.260'.
[  121.726621][ T5099] EXT4-fs (loop0): Remounting filesystem read-only
[  121.768046][ T5099] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.258: corrupted inode contents
[  121.808311][ T4242] em28xx 4-1:0.0: Registering input extension
[  121.823846][ T5099] EXT4-fs (loop0): Remounting filesystem read-only
[  121.834013][ T4553] em28xx 4-1:0.0: Closing input extension
[  121.862298][ T5099] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  121.887312][ T5099] EXT4-fs (loop0): Remounting filesystem read-only
[  121.909739][ T4553] em28xx 4-1:0.0: Freeing device
[  121.917699][ T5099] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.258: corrupted inode contents
[  121.952046][ T5099] EXT4-fs (loop0): Remounting filesystem read-only
[  121.958740][ T5099] EXT4-fs error (device loop0): ext4_truncate:4286: inode #12: comm syz.0.258: mark_inode_dirty error
[  122.013373][ T5099] EXT4-fs (loop0): Remounting filesystem read-only
[  122.020132][ T5099] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  122.051873][ T5099] EXT4-fs (loop0): Remounting filesystem read-only
[  122.063905][ T5099] EXT4-fs (loop0): 1 truncate cleaned up
[  122.080003][ T5099] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,errors=remount-ro,noinit_itable,abort,noauto_da_alloc,max_dir_size_kb=0x0000000000000006,resgid=0x00000000000000002. Quota mode: writeback.
[  122.335231][ T5122] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.264'.
[  122.361766][ T5122] netlink: zone id is out of range
[  122.371026][ T5122] netlink: del zone limit has 8 unknown bytes
[  122.765015][ T5131] vivid-006: disconnect
[  122.871835][ T5138] vivid-006: reconnect
[  123.107165][ T5152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.278'.
[  124.563518][ T5196] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[  125.520757][ T5211] 9pnet: p9_fd_create_unix (5211): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  125.721683][ T4241] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  126.576739][ T5213] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  126.835637][ T5216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.301'.
[  126.861689][ T4241] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  126.885277][ T4241] usb 4-1: config 0 has no interfaces?
[  126.911597][ T4241] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  126.932139][ T4241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.973511][ T4241] usb 4-1: config 0 descriptor??
[  128.399313][ T5252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.314'.
[  128.451683][ T5252] device lo entered promiscuous mode
[  128.487601][ T5252] device tunl0 entered promiscuous mode
[  128.508641][ T5252] device gre0 entered promiscuous mode
[  128.545743][ T5252] device gretap0 entered promiscuous mode
[  128.574249][ T5252] device erspan0 entered promiscuous mode
[  128.595319][ T5252] device ip_vti0 entered promiscuous mode
[  128.626711][ T5252] device ip6_vti0 entered promiscuous mode
[  128.665937][ T4384] usb 4-1: USB disconnect, device number 5
[  128.707784][ T5252] device sit0 entered promiscuous mode
[  128.796544][ T5252] device ip6tnl0 entered promiscuous mode
[  128.850348][ T5252] device ip6gre0 entered promiscuous mode
[  129.003804][ T5252] device ip6gretap0 entered promiscuous mode
[  129.159070][ T5252] device bond0 entered promiscuous mode
[  129.252912][ T5252] device bond_slave_0 entered promiscuous mode
[  129.338935][ T5252] device bond_slave_1 entered promiscuous mode
[  129.377274][ T5252] device dummy0 entered promiscuous mode
[  129.453969][ T5252] device nlmon0 entered promiscuous mode
[  129.516759][ T5252] device caif0 entered promiscuous mode
[  129.556777][ T5252] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  129.733986][ T5258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.314'.
[  131.045271][ T5303] overlayfs: failed to clone lowerpath
[  131.045869][ T4381] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  131.096995][ T5305] overlayfs: failed to clone lowerpath
[  131.347495][ T5310] Invalid ELF header type: 3 != 1
[  131.371460][ T4381] usb 5-1: Using ep0 maxpacket: 8
[  131.528148][ T4381] usb 5-1: config 0 has an invalid interface number: 31 but max is 0
[  131.539012][ T4381] usb 5-1: config 0 has no interface number 0
[  131.702996][ T5297] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.710932][ T5297] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.747152][ T4381] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  131.761835][ T4381] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.785124][ T4381] usb 5-1: Product: syz
[  131.800481][ T4381] usb 5-1: Manufacturer: syz
[  131.810963][ T4381] usb 5-1: SerialNumber: syz
[  131.847060][ T4381] usb 5-1: config 0 descriptor??
[  131.855324][ T5302] loop2: detected capacity change from 0 to 32768
[  131.922884][ T5302] (syz.2.328,5302,1):ocfs2_slot_map_physical_size:223 ERROR: Slot map file is too small!  (size 2, needed 8)
[  132.247567][ T5321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'.
[  132.763568][ T5297] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.836433][ T5297] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.921712][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.928738][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  133.445614][ T5297] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.455164][ T5297] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.464434][ T5297] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.474284][ T5297] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.623664][ T5299] netlink: 16 bytes leftover after parsing attributes in process `syz.4.325'.
[  133.680178][ T5297] syz.0.326 (5297) used greatest stack depth: 20432 bytes left
[  133.739280][ T4381] usb 5-1: USB disconnect, device number 5
[  133.904255][ T5335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.344'.
[  133.961433][ T4556] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  133.981728][ T5331] loop3: detected capacity change from 0 to 32768
[  134.042400][ T5331] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.346 (5331)
[  134.062578][ T5331] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  134.072473][ T5331] BTRFS info (device loop3): force zlib compression, level 3
[  134.079904][ T5331] BTRFS info (device loop3): allowing degraded mounts
[  134.087829][ T5331] BTRFS info (device loop3): setting nodatasum
[  134.094953][ T5331] BTRFS info (device loop3): allowing degraded mounts
[  134.102246][ T5331] BTRFS info (device loop3): using free space tree
[  134.109047][ T5331] BTRFS info (device loop3): has skinny extents
[  134.341394][ T5331] BTRFS info (device loop3): balance: start -susage=1,usage=1..0,drange=6..6,vrange=8..15,limit=2,stripes=7..3
[  134.351805][ T4556] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  134.356832][ T5331] BTRFS info (device loop3): balance: ended with status: 0
[  134.376366][ T4556] usb 3-1: config 0 has no interfaces?
[  134.388742][ T4556] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  134.388775][ T4556] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.417068][ T4556] usb 3-1: config 0 descriptor??
[  134.849688][ T5361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'.
[  134.860896][ T5361] device lo entered promiscuous mode
[  134.884426][ T5361] device tunl0 entered promiscuous mode
[  134.917983][ T5361] device gre0 entered promiscuous mode
[  134.960333][ T5361] device gretap0 entered promiscuous mode
[  135.014634][ T5361] device erspan0 entered promiscuous mode
[  135.045991][ T5361] device ip_vti0 entered promiscuous mode
[  135.078590][ T5361] device ip6_vti0 entered promiscuous mode
[  135.098708][ T5361] device sit0 entered promiscuous mode
[  135.124304][ T5361] device ip6tnl0 entered promiscuous mode
[  135.133227][ T5361] device ip6gre0 entered promiscuous mode
[  135.141145][ T5361] device syz_tun entered promiscuous mode
[  135.149939][ T5361] device ip6gretap0 entered promiscuous mode
[  135.187532][ T5361] device bridge0 entered promiscuous mode
[  135.214721][ T5361] device vcan0 entered promiscuous mode
[  135.228402][ T5361] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  135.258852][ T5361] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  135.290382][ T5361] device bond0 entered promiscuous mode
[  135.324734][ T5361] device bond_slave_0 entered promiscuous mode
[  135.350392][ T5361] device bond_slave_1 entered promiscuous mode
[  135.359053][ T5361] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.368180][ T5361] device team0 entered promiscuous mode
[  135.375052][ T5361] device team_slave_0 entered promiscuous mode
[  135.382576][ T5361] device team_slave_1 entered promiscuous mode
[  135.392720][ T5361] 8021q: adding VLAN 0 to HW filter on device team0
[  135.406780][ T5361] device dummy0 entered promiscuous mode
[  135.414621][ T5361] device nlmon0 entered promiscuous mode
[  135.432226][ T5361] device caif0 entered promiscuous mode
[  135.460686][ T5361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  135.526259][ T5366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.339'.
[  135.598375][ T5366] device team_slave_0 left promiscuous mode
[  135.647607][ T5366] team0 (unregistering): Port device team_slave_0 removed
[  135.703068][ T5366] device team_slave_1 left promiscuous mode
[  135.736377][ T5366] team0 (unregistering): Port device team_slave_1 removed
[  136.460257][ T5361] syz.0.339 (5361) used greatest stack depth: 19856 bytes left
[  136.666485][ T5387] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  136.703763][ T4239] usb 3-1: USB disconnect, device number 4
[  137.311852][ T4239] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  137.570929][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  137.572243][ T4204] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  137.578331][ T4239] usb 3-1: Using ep0 maxpacket: 8
[  137.632784][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  137.716928][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  137.724745][ T4239] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[  137.748511][ T4239] usb 3-1: config 0 has no interface number 0
[  137.752205][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  137.807441][ T5403] overlayfs: failed to clone upperpath
[  137.828793][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  137.841438][ T4204] usb 5-1: Using ep0 maxpacket: 32
[  137.871591][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  137.919086][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  137.938679][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  137.961526][ T4204] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.972177][ T4239] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  137.985962][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  137.995619][ T4204] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.006966][ T4239] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.031082][ T4204] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  138.035237][ T4239] usb 3-1: Product: syz
[  138.051611][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  138.060331][ T4239] usb 3-1: Manufacturer: syz
[  138.071847][ T4239] usb 3-1: SerialNumber: syz
[  138.089390][ T4239] usb 3-1: config 0 descriptor??
[  138.095306][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  138.105282][ T5411] tipc: Failed to remove unknown binding: 66,1,1/2093805629:1311167630/1311167632
[  138.120695][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  138.129072][ T5411] tipc: Failed to remove unknown binding: 66,1,1/2093805629:1311167630/1311167632
[  138.147660][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  138.158629][ T5411] tipc: Failed to remove unknown binding: 66,1,1/2093805629:1311167630/1311167632
[  138.168371][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  138.256097][ T5413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'.
[  138.270270][ T5413] device lo entered promiscuous mode
[  138.277082][ T5413] device tunl0 entered promiscuous mode
[  138.288810][ T5413] device gre0 entered promiscuous mode
[  138.305147][ T5413] device gretap0 entered promiscuous mode
[  138.336838][ T5413] device erspan0 entered promiscuous mode
[  138.353301][ T4204] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  138.388256][ T4204] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  138.398334][ T5413] device ip_vti0 entered promiscuous mode
[  138.415319][ T5413] device ip6_vti0 entered promiscuous mode
[  138.426021][ T5413] device sit0 entered promiscuous mode
[  138.433959][ T5413] device ip6tnl0 entered promiscuous mode
[  138.447447][ T5413] device ip6gre0 entered promiscuous mode
[  138.461156][ T5413] device syz_tun entered promiscuous mode
[  138.476486][ T5413] device ip6gretap0 entered promiscuous mode
[  138.485021][ T4204] usb 5-1: Product: syz
[  138.496828][ T5413] device vcan0 entered promiscuous mode
[  138.503883][ T4204] usb 5-1: Manufacturer: syz
[  138.511538][ T5413] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  138.530533][ T5413] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  138.542664][ T4204] usb 5-1: SerialNumber: syz
[  138.552308][ T5413] device bond0 entered promiscuous mode
[  138.570099][ T5413] device team0 entered promiscuous mode
[  138.586978][ T5413] device xfrm0 entered promiscuous mode
[  138.616187][ T5413] device dummy0 entered promiscuous mode
[  138.635463][ T4204] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input8
[  138.650867][ T5413] device nlmon0 entered promiscuous mode
[  138.690463][ T5413] device caif0 entered promiscuous mode
[  138.709621][ T5413] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  138.771430][ T5391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.349'.
[  138.792705][ T5416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.358'.
[  138.826993][ T5416] tipc: Resetting bearer <eth:team0>
[  138.850160][ T4239] usb 3-1: USB disconnect, device number 5
[  138.859230][ T4204] usb 5-1: USB disconnect, device number 6
[  138.978618][ T4204] appletouch 5-1:1.0: input: appletouch disconnected
[  139.007533][ T5416] tipc: Disabling bearer <eth:team0>
[  139.027376][ T5416] device xfrm0 left promiscuous mode
[  139.058260][ T5416] team0 (unregistering): Port device xfrm0 removed
[  139.243689][ T4239] hid-generic 0005:0007:0007.0002: hidraw0: BLUETOOTH HID v0.03 Device [syz0] on aa:aa:aa:aa:aa:aa
[  139.341122][ T5426] fido_id[5426]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory
[  139.393343][ T5428] sctp: [Deprecated]: syz.0.363 (pid 5428) Use of struct sctp_assoc_value in delayed_ack socket option.
[  139.393343][ T5428] Use struct sctp_sack_info instead
[  139.454615][ T5429] sctp: [Deprecated]: syz.0.363 (pid 5429) Use of struct sctp_assoc_value in delayed_ack socket option.
[  139.454615][ T5429] Use struct sctp_sack_info instead
[  139.832862][ T5445] tipc: Failed to remove unknown binding: 66,1,1/0:4124640468/4124640470
[  139.877395][ T5445] tipc: Failed to remove unknown binding: 66,1,1/0:4124640468/4124640470
[  139.892179][ T5445] tipc: Failed to remove unknown binding: 66,1,1/0:4124640468/4124640470
[  140.071055][ T5450] device syz_tun left promiscuous mode
[  140.111571][ T5450] bridge0: port 3(syz_tun) entered disabled state
[  140.202789][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  140.223233][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  140.246380][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  140.304619][ T5450] device bridge_slave_0 left promiscuous mode
[  140.351288][ T5450] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.366821][ T5450] device bridge_slave_1 left promiscuous mode
[  140.408225][ T5450] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.462873][ T5450] bond0: (slave bond_slave_0): Releasing backup interface
[  140.519889][ T5450] bond0: (slave bond_slave_1): Releasing backup interface
[  140.690636][ T5450] team0: Port device team_slave_0 removed
[  141.788341][ T5450] team0: Port device team_slave_1 removed
[  141.806008][ T5450] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.827953][ T5450] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.856490][ T5450] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.867590][ T5450] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.918589][ T5453] team0: Port device xfrm0 added
[  141.968487][ T5454] tipc: Started in network mode
[  141.985402][ T5454] tipc: Node identity de5c1450075, cluster identity 4711
[  142.003305][ T5454] tipc: Enabled bearer <eth:team0>, priority 0
[  142.305880][ T4239] hid-generic 0005:0007:0007.0003: hidraw0: BLUETOOTH HID v0.03 Device [syz0] on aa:aa:aa:aa:aa:aa
[  142.410843][ T5469] kvm [5467]: vcpu0, guest rIP: 0x208 disabled perfctr wrmsr: 0xc2 data 0x60000001343
[  142.591009][ T5474] fido_id[5474]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory
[  142.800589][ T5481] loop2: detected capacity change from 0 to 512
[  142.830814][ T5482] kvm: pic: non byte write
[  142.852861][ T5483] kvm: vcpu 0: requested 1920 ns lapic timer period limited to 200000 ns
[  142.933154][ T5482] kvm: pic: non byte write
[  143.028894][ T4204] tipc: Node number set to 3641447504
[  143.229455][ T5481] EXT4-fs (loop2): Test dummy encryption mode enabled
[  143.242275][ T5481] EXT4-fs (loop2): Test dummy encryption mode enabled
[  143.270601][ T5481] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  143.300587][ T5492] tipc: Failed to remove unknown binding: 66,1,1/0:984346932/984346934
[  143.320709][ T5494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.383'.
[  143.331465][ T5481] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,dioread_nolock,jqfmt=vfsv1,nojournal_checksum,minixdf,barrier=0x0000000000000a18,errors=remount-ro,lazytime,test_dummy_encryption,min_batch_time=0x0000000000000004,. Quota mode: none.
[  143.360890][ T5494] device lo entered promiscuous mode
[  143.398559][ T5492] tipc: Failed to remove unknown binding: 66,1,1/0:984346932/984346934
[  143.405698][ T5494] device tunl0 entered promiscuous mode
[  143.413702][ T5494] device gre0 entered promiscuous mode
[  143.420070][ T5494] device gretap0 entered promiscuous mode
[  143.427621][ T5494] device erspan0 entered promiscuous mode
[  143.435779][ T5494] device ip_vti0 entered promiscuous mode
[  143.442866][ T5494] device ip6_vti0 entered promiscuous mode
[  143.449771][ T5494] device sit0 entered promiscuous mode
[  143.456519][ T5494] device ip6tnl0 entered promiscuous mode
[  143.463576][ T5494] device ip6gre0 entered promiscuous mode
[  143.470415][ T5494] device syz_tun entered promiscuous mode
[  143.476584][ T5492] tipc: Failed to remove unknown binding: 66,1,1/0:984346932/984346934
[  143.481341][ T5494] device ip6gretap0 entered promiscuous mode
[  143.522606][ T5494] device bridge0 entered promiscuous mode
[  143.546811][ T5494] device vcan0 entered promiscuous mode
[  143.563399][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  143.594135][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  143.611557][ T5494] device bond0 entered promiscuous mode
[  143.626784][ T5494] device team0 entered promiscuous mode
[  143.645911][ T5494] device xfrm0 entered promiscuous mode
[  143.651494][ T5370] usb 3-1: new low-speed USB device number 6 using dummy_hcd
[  143.664889][ T5494] device dummy0 entered promiscuous mode
[  143.671935][ T5494] device nlmon0 entered promiscuous mode
[  143.678719][ T5494] device caif0 entered promiscuous mode
[  143.685450][ T5494] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  143.706367][ T5498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.383'.
[  143.716208][ T5498] tipc: Resetting bearer <eth:team0>
[  143.794733][ T5498] tipc: Disabling bearer <eth:team0>
[  143.804904][ T5505] virtio-fs: tag </dev/nullb0> not found
[  143.812008][ T5498] device xfrm0 left promiscuous mode
[  143.855530][ T5498] team0 (unregistering): Port device xfrm0 removed
[  143.964416][ T5509] bridge0: port 3(syz_tun) entered disabled state
[  143.980255][ T5509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  143.990896][ T5509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  144.009044][ T5509] device bridge_slave_0 left promiscuous mode
[  144.017268][ T5370] usb 3-1: config index 0 descriptor too short (expected 6427, got 27)
[  144.033489][ T5509] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.044440][ T5370] usb 3-1: config 0 has an invalid interface number: 21 but max is 0
[  144.061379][ T5370] usb 3-1: config 0 has no interface number 0
[  144.067812][ T5370] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[  144.088562][ T5370] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  144.106861][ T5370] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.138990][ T5370] usb 3-1: config 0 descriptor??
[  144.162416][ T5509] device bridge_slave_1 left promiscuous mode
[  144.171743][ T5481] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  144.189658][ T5509] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.214860][ T5509] bond0: (slave bond_slave_0): Releasing backup interface
[  144.228699][ T5509] device bond_slave_0 left promiscuous mode
[  144.255810][ T5509] bond0: (slave bond_slave_1): Releasing backup interface
[  144.267418][ T5509] device bond_slave_1 left promiscuous mode
[  144.287206][ T5509] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.294944][ T5509] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.305346][ T5509] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.313552][ T5509] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.791498][ T4204] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  144.802445][ T5552] virtio-fs: tag </dev/nullb0> not found
[  144.852503][ T5370] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input9
[  145.051410][ T4204] usb 1-1: Using ep0 maxpacket: 16
[  145.066177][ T5370] usb 3-1: USB disconnect, device number 6
[  145.081336][    C0] keyspan_remote 3-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[  145.191692][ T4204] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  145.240670][ T5557] netlink: 156 bytes leftover after parsing attributes in process `syz.1.410'.
[  145.250289][ T4204] usb 1-1: config 0 has no interfaces?
[  145.259902][ T5557] netlink: 156 bytes leftover after parsing attributes in process `syz.1.410'.
[  145.270885][ T5557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.410'.
[  145.401669][ T4204] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  145.454321][ T4204] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  145.464225][ T4204] usb 1-1: Product: syz
[  145.468505][ T4204] usb 1-1: SerialNumber: syz
[  145.488758][ T4204] usb 1-1: config 0 descriptor??
[  145.553158][ T5565] netlink: 100 bytes leftover after parsing attributes in process `syz.1.403'.
[  145.773141][ T5533] loop2: detected capacity change from 0 to 7
[  145.811167][ T5533] Dev loop2: unable to read RDB block 7
[  145.821399][ T5533]  loop2: unable to read partition table
[  145.827426][ T5533] loop2: partition table beyond EOD, truncated
[  145.840252][ T5571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'.
[  145.866038][ T5533] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  145.898882][ T5571] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  145.902364][ T3560] Dev loop2: unable to read RDB block 7
[  145.931398][ T3560]  loop2: unable to read partition table
[  145.950092][ T5571] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  145.963723][ T3560] loop2: partition table beyond EOD, truncated
[  145.991197][ T5370] usb 1-1: USB disconnect, device number 6
[  146.022193][ T5577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.405'.
[  146.256743][ T5563] loop4: detected capacity change from 0 to 32768
[  146.301333][ T5563] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.402 (5563)
[  146.370112][ T5563] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  146.399612][ T5563] BTRFS info (device loop4): setting nodatacow, compression disabled
[  146.418369][ T5563] BTRFS info (device loop4): turning on flush-on-commit
[  146.436154][ T5563] BTRFS info (device loop4): trying to use backup root at mount time
[  146.447137][ T5563] BTRFS info (device loop4): max_inline at 0
[  146.456866][ T5563] BTRFS info (device loop4): using free space tree
[  146.465814][ T5563] BTRFS info (device loop4): has skinny extents
[  146.719906][  T155] BTRFS warning (device loop4): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0
[  146.742385][ T5563] BTRFS warning (device loop4): failed to read root (objectid=2): -5
[  146.759418][  T155] BTRFS warning (device loop4): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0
[  146.780778][ T5563] BTRFS warning (device loop4): couldn't read tree root
[  146.790816][ T5563] BTRFS error (device loop4): parent transid verify failed on 5255168 wanted 5 found 7
[  146.801542][ T5604] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  146.822172][ T5563] BTRFS warning (device loop4): couldn't read tree root
[  146.862111][ T5563] BTRFS info (device loop4): enabling ssd optimizations
[  146.872433][ T5563] BTRFS info (device loop4): clearing free space tree
[  146.879576][ T5563] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  146.896462][ T5563] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  146.934547][ T5563] BTRFS info (device loop4): creating free space tree
[  146.947711][ T5563] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  146.968983][ T5563] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  147.616239][ T5618] loop0: detected capacity change from 0 to 4096
[  147.753117][ T5618] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  147.855299][   T26] audit: type=1800 audit(1781622596.419:10): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.415" name="file1" dev="loop0" ino=15 res=0 errno=0
[  148.530792][ T5653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.425'.
[  148.600689][ T5655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.428'.
[  148.799680][ T5665] loop0: detected capacity change from 0 to 8
[  148.912208][ T5665] SQUASHFS error: xz decompression failed, data probably corrupt
[  148.920673][ T5665] SQUASHFS error: Failed to read block 0x108: -5
[  148.927342][ T5665] SQUASHFS error: Unable to read metadata cache entry [106]
[  148.935203][ T5665] SQUASHFS error: Unable to read inode 0x11f
[  149.740293][ T5668] loop0: detected capacity change from 0 to 64
[  149.886536][ T5668] hfs: request for non-existent node 131072 in B*Tree
[  149.894162][ T5668] hfs: request for non-existent node 131072 in B*Tree
[  149.906555][ T5670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.432'.
[  149.917831][ T5668] hfs: request for non-existent node 131072 in B*Tree
[  149.924869][ T5668] hfs: request for non-existent node 131072 in B*Tree
[  149.970474][ T5668] hfs: request for non-existent node 131072 in B*Tree
[  149.981601][ T5668] hfs: request for non-existent node 131072 in B*Tree
[  150.009742][ T5672] hfs: request for non-existent node 131072 in B*Tree
[  150.027315][ T5672] hfs: request for non-existent node 131072 in B*Tree
[  150.059314][ T5668] hfs: request for non-existent node 131072 in B*Tree
[  150.121501][ T5668] hfs: request for non-existent node 131072 in B*Tree
[  150.152253][ T5668] hfs: request for non-existent node 131072 in B*Tree
[  150.181571][ T5668] hfs: request for non-existent node 131072 in B*Tree
[  150.209856][ T5668] hfs: request for non-existent node 12 in B*Tree
[  150.232340][ T5668] hfs: request for non-existent node 12 in B*Tree
[  150.616336][ T5679] device wg1 entered promiscuous mode
[  151.177751][ T5674] loop3: detected capacity change from 0 to 40427
[  151.295944][ T5691] netlink: 'syz.1.440': attribute type 1 has an invalid length.
[  151.333378][ T5674] F2FS-fs (loop3): invalid crc value
[  151.392353][ T5674] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  151.437612][ T5691] 8021q: adding VLAN 0 to HW filter on device bond2
[  151.461676][ T5696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.441'.
[  151.492761][ T5674] F2FS-fs (loop3): Start checkpoint disabled!
[  151.551170][ T5674] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  151.569529][ T5699] bond2: (slave veth5): Enslaving as an active interface with a down link
[  151.615070][ T5691] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  151.916113][ T4697] attempt to access beyond end of device
[  151.916113][ T4697] loop3: rw=2049, want=45104, limit=40427
[  154.429987][ T5760] netlink: 'syz.0.457': attribute type 1 has an invalid length.
[  154.543023][ T5760] 8021q: adding VLAN 0 to HW filter on device bond1
[  154.694855][ T5762] bond1: (slave veth3): Enslaving as an active interface with a down link
[  154.710041][ T5767] netlink: 'syz.1.459': attribute type 3 has an invalid length.
[  154.804108][ T5767] netlink: 'syz.1.459': attribute type 3 has an invalid length.
[  155.329776][ T5790] loop4: detected capacity change from 0 to 4096
[  155.925926][ T5803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.472'.
[  156.171443][ T4556] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  156.449848][ T5821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.477'.
[  156.461379][ T4556] usb 4-1: Using ep0 maxpacket: 8
[  156.591683][ T4556] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  156.611686][ T4556] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  156.661488][ T4556] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.703598][ T4556] usb 4-1: config 0 descriptor??
[  156.967518][ T4556] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  157.547526][ T5831] (unnamed net_device) (uninitialized): up delay (7) is not a multiple of miimon (10), value rounded to 0 ms
[  157.571694][ T5831] (unnamed net_device) (uninitialized): down delay (2) is not a multiple of miimon (10), value rounded to 0 ms
[  157.601608][ T5831] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  157.745181][ T5836] bridge0: port 1(syz_tun) entered blocking state
[  157.777356][ T5836] bridge0: port 1(syz_tun) entered disabled state
[  157.824191][ T4556] usb 4-1: USB disconnect, device number 6
[  157.824347][ T5836] bridge0: port 1(syz_tun) entered blocking state
[  157.836695][ T5836] bridge0: port 1(syz_tun) entered forwarding state
[  157.849809][ T5840] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  157.951493][ T5839] bridge0: port 1(syz_tun) entered learning state
[  158.167471][   T26] audit: type=1800 audit(1781622606.729:11): pid=5790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.467" name="file1" dev="loop4" ino=33 res=0 errno=0
[  158.265963][ T5827] ODEBUG: Out of memory. ODEBUG disabled
[  158.762084][ T5854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.490'.
[  159.750196][ T5873] VFS: Mount too revealing
[  159.769222][ T5876] Illegal XDP return value 4294967294, expect packet loss!
[  160.497541][ T5901] overlayfs: failed to clone upperpath
[  161.415685][ T5900] loop2: detected capacity change from 0 to 32768
[  161.598575][ T5900] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  161.634090][ T5900] JBD2: Ignoring recovery information on journal
[  161.717177][ T5900] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  161.791352][ T5900] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #65 has bad signature INODE01
[  161.818890][ T5900] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  161.874541][ T5900] OCFS2: File system is now read-only.
[  161.891897][ T5900] (syz.2.509,5900,1):ocfs2_search_one_group:1684 ERROR: status = -30
[  161.976987][ T5900] (syz.2.509,5900,1):ocfs2_claim_suballoc_bits:1920 ERROR: status = -30
[  161.994248][ T5931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'.
[  162.041535][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  162.059995][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  162.079354][ T5900] (syz.2.509,5900,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[  162.170536][ T5900] (syz.2.509,5900,1):ocfs2_claim_new_inode:2226 ERROR: status = -30
[  162.241407][ T5900] (syz.2.509,5900,1):ocfs2_claim_new_inode:2241 ERROR: status = -30
[  162.306932][ T5900] (syz.2.509,5900,0):ocfs2_mknod_locked:639 ERROR: status = -30
[  162.334538][ T5900] (syz.2.509,5900,0):ocfs2_symlink:1941 ERROR: status = -30
[  162.370508][ T5900] (syz.2.509,5900,0):ocfs2_symlink:2065 ERROR: status = -30
[  163.566118][ T4195] ocfs2: Unmounting device (7,2) on (node local)
[  164.213522][ T5971] overlayfs: failed to clone upperpath
[  164.250098][   T26] audit: type=1804 audit(1781622612.809:12): pid=5969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.528" name=FDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="hugetlbfs" ino=39867 res=1 errno=0
[  164.352249][   T26] audit: type=1804 audit(1781622612.809:13): pid=5969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.528" name=FDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="hugetlbfs" ino=39867 res=1 errno=0
[  164.461146][ T5979] bridge0: port 1(syz_tun) entered disabled state
[  164.468185][ T5976] netlink: 64 bytes leftover after parsing attributes in process `syz.0.538'.
[  164.523567][ T5979] bridge0: port 1(syz_tun) entered disabled state
[  164.972707][ T6005] 9pnet: Insufficient options for proto=fd
[  165.025631][ T6007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.548'.
[  165.683788][ T6042] tipc: Started in network mode
[  165.702510][ T6042] tipc: Node identity 52633f49f1f8, cluster identity 4711
[  165.730263][ T6042] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.777358][ T6048] device syzkaller0 entered promiscuous mode
[  165.792079][ T6041] tipc: Resetting bearer <eth:syzkaller0>
[  165.858187][ T6041] tipc: Disabling bearer <eth:syzkaller0>
[  165.944438][ T6052] netlink: 20 bytes leftover after parsing attributes in process `syz.2.565'.
[  166.078679][ T6054] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  166.114227][    C1] vkms_vblank_simulate: vblank timer overrun
[  166.680436][ T6081] kvm [6080]: vcpu0, guest rIP: 0x208 disabled perfctr wrmsr: 0xc2 data 0x60000001343
[  167.069942][ T6097] netlink: 'syz.3.583': attribute type 1 has an invalid length.
[  167.356365][  T155] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.674845][  T155] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.825918][  T155] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.959168][  T155] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.122510][ T6135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.599'.
[  169.704721][  T155] tipc: Left network mode
[  169.910658][ T6154] netlink: 20 bytes leftover after parsing attributes in process `syz.2.603'.
[  170.015771][ T6138] loop3: detected capacity change from 0 to 32768
[  170.047419][ T6138] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop3 scanned by syz.3.600 (6138)
[  170.118666][ T6152] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  170.126954][ T6152] IPv6: NLM_F_CREATE should be set when creating new route
[  170.140362][ T6138] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  170.179673][ T6138] BTRFS info (device loop3): using free space tree
[  170.192401][ T6132] chnl_net:caif_netlink_parms(): no params data found
[  170.217161][ T6152] netlink: 20 bytes leftover after parsing attributes in process `syz.2.603'.
[  170.226922][ T6138] BTRFS info (device loop3): has skinny extents
[  170.441813][ T6176] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.449647][ T6176] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.533700][ T6176] device bridge0 left promiscuous mode
[  170.593246][ T6138] BTRFS info (device loop3): enabling ssd optimizations
[  170.673892][   T26] audit: type=1800 audit(1781622619.239:14): pid=6138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.600" name="file1" dev="loop3" ino=260 res=0 errno=0
[  170.696740][ T6190] device bridge_slave_1 left promiscuous mode
[  170.713262][ T6190] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.726291][ T6138] BTRFS info (device loop3): balance: start -sconvert=raid0,soft
[  170.737121][ T6190] device bridge_slave_0 left promiscuous mode
[  170.743836][ T6190] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.793372][ T6138] BTRFS info (device loop3): relocating block group 1048576 flags system
[  170.898194][ T6132] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.921465][ T6132] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.946828][ T6138] BTRFS info (device loop3): balance: ended with status: 0
[  170.962392][ T6132] device bridge_slave_0 entered promiscuous mode
[  170.988888][ T6132] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.996825][ T6132] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.006740][ T6132] device bridge_slave_1 entered promiscuous mode
[  171.032285][ T6132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  171.047061][ T6132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  171.126106][ T6132] team0: Port device team_slave_0 added
[  171.223473][ T5371] Bluetooth: hci3: command 0x0409 tx timeout
[  171.402464][ T6132] team0: Port device team_slave_1 added
[  171.430648][ T6132] batman_adv: batadv0: Adding interface: batadv_slave_0
[  171.462140][ T6132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.537528][ T6132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  171.594268][ T6132] batman_adv: batadv0: Adding interface: batadv_slave_1
[  171.603087][ T6132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.632432][ T6132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  171.703026][ T6132] device hsr_slave_0 entered promiscuous mode
[  171.709959][ T6132] device hsr_slave_1 entered promiscuous mode
[  171.719110][ T6132] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  171.726883][ T6132] Cannot create hsr debugfs directory
[  171.977069][  T155] device hsr_slave_0 left promiscuous mode
[  171.987914][  T155] device hsr_slave_1 left promiscuous mode
[  172.004698][  T155] device veth1_macvtap left promiscuous mode
[  172.012585][  T155] device veth1_vlan left promiscuous mode
[  172.018669][  T155] device veth0_vlan left promiscuous mode
[  172.342483][  T155] bond0 (unregistering): Released all slaves
[  172.399952][ T6132] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  172.420178][ T6132] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  172.463507][ T6132] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  172.480685][ T6132] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  172.610141][ T6132] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.668371][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  172.678618][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  172.690606][ T6132] 8021q: adding VLAN 0 to HW filter on device team0
[  172.717943][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  172.728641][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  172.737597][ T4216] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.744741][ T4216] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.754367][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  172.775478][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  172.787908][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  172.800977][ T4216] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.808304][ T4216] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.820512][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  172.829763][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  172.870949][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  172.893225][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  172.913874][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  172.933931][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  172.946287][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  172.978993][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  172.993182][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  173.012555][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  173.032439][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  173.059395][ T6132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  173.274105][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  173.289808][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  173.311739][ T4204] Bluetooth: hci3: command 0x041b tx timeout
[  173.319956][ T6132] 8021q: adding VLAN 0 to HW filter on device batadv0
[  173.658150][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  173.682060][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  173.716095][ T6132] device veth0_vlan entered promiscuous mode
[  173.726155][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  173.746823][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  173.773074][ T6132] device veth1_vlan entered promiscuous mode
[  173.791190][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  173.803840][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  173.833375][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  173.876097][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  173.889460][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  173.908332][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  173.924132][ T6132] device veth0_macvtap entered promiscuous mode
[  173.932929][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  173.956100][ T6132] device veth1_macvtap entered promiscuous mode
[  173.990964][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.003556][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.021978][ T6132] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.029541][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  174.052998][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  174.066553][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.087807][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.100278][ T6132] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.110039][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  174.134526][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  174.154810][ T6132] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.171014][ T6132] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.180219][ T6132] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.196422][ T6132] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.317547][ T4216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.338226][ T4216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.367201][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  174.383395][ T4697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.417652][ T4697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.427028][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  175.381600][ T4204] Bluetooth: hci3: command 0x040f tx timeout
[  176.107039][ T6330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.612'.
[  177.117899][ T6369] overlayfs: failed to clone upperpath
[  177.471391][   T23] Bluetooth: hci3: command 0x0419 tx timeout
[  179.084796][ T6426] loop2: detected capacity change from 0 to 512
[  179.120503][   T26] audit: type=1804 audit(1781622627.679:15): pid=6421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.641" name="/newroot/3/file0" dev="fuse" ino=1 res=1 errno=0
[  179.152876][ T4204] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  179.179579][ T6426] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.643: invalid indirect mapped block 4294967295 (level 1)
[  179.288913][ T6426] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.643: invalid indirect mapped block 4294967295 (level 1)
[  179.310196][ T6435] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  179.329108][ T6426] EXT4-fs (loop2): 2 truncates cleaned up
[  179.359809][ T6426] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000004004,barrier=0x0000000000000005,,errors=continue. Quota mode: writeback.
[  179.452811][ T4204] usb 4-1: Using ep0 maxpacket: 32
[  179.581500][ T4204] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  179.599794][ T4204] usb 4-1: config 0 has no interface number 0
[  179.752033][    T7] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  179.791889][ T4204] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  179.801203][ T4204] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.820407][ T4204] usb 4-1: Product: syz
[  179.831311][ T4204] usb 4-1: Manufacturer: syz
[  179.836073][ T4204] usb 4-1: SerialNumber: syz
[  179.854285][ T4204] usb 4-1: config 0 descriptor??
[  179.893553][ T4204] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  179.911332][ T4204] usb 4-1: selecting invalid altsetting 1
[  179.917226][ T4204] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  179.935555][ T4204] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  179.951480][ T4204] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  179.959843][ T4204] usb 4-1: media controller created
[  179.994560][ T4204] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  180.122195][    T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  180.133242][    T7] usb 3-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00
[  180.144837][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.161436][ T4204] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[  180.169306][    T7] usb 3-1: config 0 descriptor??
[  180.183512][ T4204] zl10353_read_register: readreg error (reg=127, ret==-32)
[  180.217539][    T7] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  180.449167][ T4541] usb 3-1: USB disconnect, device number 7
[  181.231456][ T6410] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  181.246989][ T6457] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  181.246989][ T6457] The task syz.1.652 (6457) triggered the difference, watch for misbehavior.
[  181.271623][ T4204] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  181.338804][ T4204] usb 4-1: USB disconnect, device number 7
[  182.945301][ T6496] bond1: (slave veth3): making interface the new active one
[  183.019868][ T6496] bond1: (slave veth3): Enslaving as an active interface with an up link
[  183.097116][ T6505] netlink: 12 bytes leftover after parsing attributes in process `syz.5.663'.
[  183.162432][ T6505] 8021q: adding VLAN 0 to HW filter on device bond1
[  183.870297][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  184.539994][ T6529] overlayfs: failed to clone upperpath
[  187.284221][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.292694][ T6548] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.320071][ T6589] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  187.358805][ T6589] kvm: pic: non byte write
[  188.403242][ T6548] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  188.543285][ T6548] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  189.032185][ T6548] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.052755][ T6548] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.065203][ T6548] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.077217][ T6548] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.230769][ T6619] Bluetooth: (null): Invalid header checksum
[  190.152104][    T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  190.432106][    T7] usb 6-1: Using ep0 maxpacket: 32
[  190.552247][    T7] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  190.579151][    T7] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  190.626668][    T7] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  190.852306][    T7] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  190.887873][    T7] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  190.938312][    T7] usb 6-1: Product: syz
[  190.961947][    T7] usb 6-1: Manufacturer: syz
[  190.988964][    T7] usb 6-1: SerialNumber: syz
[  191.065383][    T7] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input10
[  191.397912][ T4556] usb 6-1: USB disconnect, device number 2
[  191.508844][ T4556] appletouch 6-1:1.0: input: appletouch disconnected
[  192.218080][ T6705] netlink: 'syz.1.723': attribute type 1 has an invalid length.
[  192.395509][ T6709] bond3: (slave geneve2): Error -99 calling set_mac_address
[  193.075608][ T6736] device bridge0 left promiscuous mode
[  193.094144][ T6736] device bridge_slave_1 left promiscuous mode
[  193.132298][ T6736] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.170701][ T6736] device bridge_slave_0 left promiscuous mode
[  193.251922][ T6736] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.219086][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.743'.
[  194.346281][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  194.352839][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  195.227015][ T6802] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  196.207205][ T6837] netlink: 'syz.2.755': attribute type 1 has an invalid length.
[  196.287247][ T6837] 8021q: adding VLAN 0 to HW filter on device bond1
[  196.309057][ T6844] device dummy0 left promiscuous mode
[  196.456234][ T6844] bond1: (slave dummy0): making interface the new active one
[  196.512814][ T6844] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  196.580877][ T6843] bond1: (slave veth3): Enslaving as an active interface with a down link
[  197.031513][ T4556] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  197.321351][ T4556] usb 6-1: Using ep0 maxpacket: 32
[  197.481527][ T4556] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[  197.496004][ T4556] usb 6-1: config 0 has no interface number 0
[  197.503362][ T4556] usb 6-1: config 0 interface 184 has no altsetting 0
[  197.663613][ T4556] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  197.675103][ T4556] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.683517][ T4556] usb 6-1: Product: syz
[  197.688015][ T4556] usb 6-1: Manufacturer: syz
[  197.693159][ T4556] usb 6-1: SerialNumber: syz
[  197.709194][ T4556] usb 6-1: config 0 descriptor??
[  197.753627][ T4556] smsc75xx v1.0.0
[  198.164668][ T6842] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  198.174471][ T6842] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  198.184869][ T6842] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  198.194327][ T6842] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  198.391507][ T4556] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  198.408570][ T4556] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[  198.429275][ T4556] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  198.440309][ T4556] smsc75xx: probe of 6-1:0.184 failed with error -32
[  198.548196][ T6837] netlink: 'syz.2.755': attribute type 10 has an invalid length.
[  198.566414][ T6837] netlink: 40 bytes leftover after parsing attributes in process `syz.2.755'.
[  198.576764][ T6837] device dummy0 entered promiscuous mode
[  198.584522][ T6837] bond1: (slave dummy0): Releasing active interface
[  198.592266][ T6837] bond1: (slave dummy0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  199.101153][ T6901] VFS: Mount too revealing
[  199.323814][ T6920] loop3: detected capacity change from 0 to 64
[  199.441114][ T6920] hfs: request for non-existent node 131072 in B*Tree
[  199.467290][ T6920] hfs: request for non-existent node 131072 in B*Tree
[  199.497251][ T6924] hfs: request for non-existent node 131072 in B*Tree
[  199.524765][ T6924] hfs: request for non-existent node 131072 in B*Tree
[  199.545434][ T6920] hfs: request for non-existent node 131072 in B*Tree
[  199.557385][ T6920] hfs: request for non-existent node 131072 in B*Tree
[  199.585405][ T6920] hfs: request for non-existent node 131072 in B*Tree
[  199.592989][ T6920] hfs: request for non-existent node 131072 in B*Tree
[  199.619610][ T6920] hfs: request for non-existent node 131072 in B*Tree
[  199.643107][ T6920] hfs: request for non-existent node 131072 in B*Tree
[  199.667794][ T6920] hfs: request for non-existent node 131072 in B*Tree
[  199.677350][ T6920] hfs: request for non-existent node 131072 in B*Tree
[  199.689630][ T6920] hfs: request for non-existent node 12 in B*Tree
[  199.696914][ T6920] hfs: request for non-existent node 12 in B*Tree
[  199.845359][ T4556] usb 6-1: USB disconnect, device number 3
[  201.542001][    T7] Bluetooth: hci1: command 0x0406 tx timeout
[  201.542214][ T4556] Bluetooth: hci0: command 0x0406 tx timeout
[  201.553977][    T7] Bluetooth: hci2: command 0x0406 tx timeout
[  203.105482][ T6975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.794'.
[  203.627450][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.5.797'.
[  203.661638][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.5.797'.
[  203.862041][   T26] audit: type=1326 audit(1781622652.419:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.1.800" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f365d052e59 code=0x0
[  204.591272][ T4384] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  204.833066][ T4384] usb 4-1: Using ep0 maxpacket: 32
[  204.999712][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.5.811'.
[  205.039202][ T7032] batman_adv: batadv0: Removing interface: batadv_slave_0
[  205.073869][ T7032] batman_adv: batadv0: Removing interface: batadv_slave_1
[  205.115699][ T4384] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  205.126253][ T4384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.140004][ T4384] usb 4-1: Product: syz
[  205.147746][ T4384] usb 4-1: Manufacturer: syz
[  205.158383][ T4384] usb 4-1: SerialNumber: syz
[  205.179568][ T4384] usb 4-1: config 0 descriptor??
[  205.229298][ T4384] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  205.462903][ T7027] loop2: detected capacity change from 0 to 32768
[  205.482191][ T7040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.813'.
[  205.506830][ T7027] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.810 (7027)
[  205.545152][ T7027] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  205.574719][ T7027] BTRFS info (device loop2): setting nodatasum
[  205.580958][ T7027] BTRFS info (device loop2): force zlib compression, level 3
[  205.619631][ T7027] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  205.648700][ T7027] BTRFS info (device loop2): use lzo compression, level 0
[  205.658869][ T7027] BTRFS info (device loop2): turning on flush-on-commit
[  205.679232][ T7027] BTRFS info (device loop2): enabling auto defrag
[  205.691966][ T7027] BTRFS info (device loop2): max_inline at 4096
[  205.698303][ T7027] BTRFS info (device loop2): force zlib compression, level 3
[  205.711890][ T4382] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  205.722122][ T7027] BTRFS info (device loop2): using free space tree
[  205.739030][ T7027] BTRFS info (device loop2): has skinny extents
[  205.850728][   T26] audit: type=1804 audit(1781622654.409:17): pid=7058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.815" name=FDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="hugetlbfs" ino=45304 res=1 errno=0
[  205.896122][   T26] audit: type=1804 audit(1781622654.439:18): pid=7058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.815" name=FDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="hugetlbfs" ino=45304 res=1 errno=0
[  205.996648][ T4382] usb 6-1: Using ep0 maxpacket: 8
[  206.053822][ T7027] BTRFS info (device loop2): enabling ssd optimizations
[  206.121695][ T4382] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  206.137343][   T26] audit: type=1800 audit(1781622654.699:19): pid=7027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.810" name="file1" dev="loop2" ino=260 res=0 errno=0
[  206.141581][ T4382] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  206.181821][ T4382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.210983][ T4382] usb 6-1: config 0 descriptor??
[  206.245648][   T26] audit: type=1800 audit(1781622654.739:20): pid=7027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.810" name="file1" dev="loop2" ino=260 res=0 errno=0
[  206.307610][   T26] audit: type=1800 audit(1781622654.829:21): pid=7081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.810" name="file1" dev="loop2" ino=260 res=0 errno=0
[  206.474940][ T4382] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  207.623702][ T4384] gspca_topro: reg_w err -110
[  207.662088][ T4384] gspca_topro: Sensor soi763a
[  207.915951][ T7102] (unnamed net_device) (uninitialized): up delay (7) is not a multiple of miimon (10), value rounded to 0 ms
[  207.940672][ T7102] (unnamed net_device) (uninitialized): down delay (2) is not a multiple of miimon (10), value rounded to 0 ms
[  207.983080][ T7102] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  208.033937][ T5635] usb 4-1: USB disconnect, device number 8
[  208.135851][ T5370] usb 6-1: USB disconnect, device number 4
[  208.589472][ T7110] bond2: (slave ip6gretap1): making interface the new active one
[  208.810804][ T7110] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  209.099740][ T7133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.833'.
[  209.161950][ T7133] 8021q: adding VLAN 0 to HW filter on device bond3
[  209.180247][ T7139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.832'.
[  209.359488][ T7147] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.835'.
[  209.393604][ T7147] netlink: 24 bytes leftover after parsing attributes in process `syz.5.835'.
[  209.631356][ T4556] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  210.031503][ T4556] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  210.048189][ T4556] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  210.093803][ T4556] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  210.114142][ T4556] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  210.351737][ T4556] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  210.373662][ T4556] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.404707][ T4556] usb 3-1: Product: syz
[  210.413881][ T4556] usb 3-1: Manufacturer: syz
[  210.424204][ T4556] usb 3-1: SerialNumber: syz
[  210.451243][ T4556] usb 3-1: config 0 descriptor??
[  210.479922][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.5.840'.
[  210.502986][ T4556] ums-isd200 3-1:0.0: USB Mass Storage device detected
[  210.576967][ T7162] bond1: (slave ip6gretap1): making interface the new active one
[  210.600001][ T7162] device ip6gretap1 entered promiscuous mode
[  210.622327][ T7162] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  210.868163][ T7169] (unnamed net_device) (uninitialized): up delay (7) is not a multiple of miimon (10), value rounded to 0 ms
[  210.895647][ T7169] (unnamed net_device) (uninitialized): down delay (2) is not a multiple of miimon (10), value rounded to 0 ms
[  210.917371][ T7169] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  210.932520][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.844'.
[  211.086398][ T7178] netlink: 4 bytes leftover after parsing attributes in process `syz.5.846'.
[  211.099124][ T4556] scsi host1: usb-storage 3-1:0.0
[  211.122697][ T4556] usb 3-1: USB disconnect, device number 8
[  211.158451][ T7178] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  211.168206][ T7178] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  211.177191][ T7178] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  211.186018][ T7178] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  211.219859][ T7178] netlink: 4 bytes leftover after parsing attributes in process `syz.5.846'.
[  211.283044][ T7185] binder: BINDER_SET_CONTEXT_MGR already set
[  211.313373][ T7185] binder: 7184:7185 ioctl 4018620d 200000000040 returned -16
[  211.395334][ T4204] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  211.496124][ T7201] netlink: 1320 bytes leftover after parsing attributes in process `syz.3.849'.
[  211.578169][ T4556] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  211.614029][ T4556] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  212.205695][ T7246] device batadv_slave_1 entered promiscuous mode
[  212.363894][ T7260] loop5: detected capacity change from 0 to 64
[  212.449800][ T7260] hfs: request for non-existent node 131072 in B*Tree
[  212.463470][ T7260] hfs: request for non-existent node 131072 in B*Tree
[  212.504793][ T7260] hfs: request for non-existent node 131072 in B*Tree
[  212.519012][ T7260] hfs: request for non-existent node 131072 in B*Tree
[  212.533665][ T7260] hfs: request for non-existent node 131072 in B*Tree
[  212.565614][ T7260] hfs: request for non-existent node 131072 in B*Tree
[  212.585207][ T4556] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  212.595384][ T7264] hfs: request for non-existent node 131072 in B*Tree
[  212.606166][ T7264] hfs: request for non-existent node 131072 in B*Tree
[  212.612587][ T4556] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  212.632314][ T7260] hfs: request for non-existent node 131072 in B*Tree
[  212.658928][ T7260] hfs: request for non-existent node 131072 in B*Tree
[  212.672035][ T7260] hfs: request for non-existent node 131072 in B*Tree
[  212.678880][ T7260] hfs: request for non-existent node 131072 in B*Tree
[  212.701005][ T7260] hfs: request for non-existent node 12 in B*Tree
[  212.711629][ T7260] hfs: request for non-existent node 12 in B*Tree
[  212.841592][ T4556] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  213.200779][ T7268] loop3: detected capacity change from 0 to 32768
[  213.353795][ T7268] XFS (loop3): Mounting V5 Filesystem
[  213.459370][ T7268] XFS (loop3): Ending clean mount
[  213.723539][ T7302] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  213.878684][ T4196] XFS (loop3): Unmounting Filesystem
[  214.872520][ T7351] netlink: 'syz.1.899': attribute type 10 has an invalid length.
[  214.892601][ T7351] device dummy0 left promiscuous mode
[  214.910684][ T7351] device dummy0 entered promiscuous mode
[  214.928003][ T7351] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  215.016606][ T7356] overlayfs: failed to clone upperpath
[  215.119093][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.902'.
[  215.437910][ T7378] device batadv_slave_1 entered promiscuous mode
[  215.615050][ T7385] netlink: 'syz.0.912': attribute type 39 has an invalid length.
[  215.692046][ T4382] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  215.953185][ T4382] usb 3-1: Using ep0 maxpacket: 32
[  216.053620][ T5370] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  216.072048][ T4382] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  216.090848][ T4382] usb 3-1: config 0 has no interface number 0
[  216.421479][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  216.422140][ T4382] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  216.632541][ T5370] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  216.722010][ T5370] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  216.748866][ T4382] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.870009][ T5370] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  216.886726][ T4382] usb 3-1: Product: syz
[  216.948948][ T4382] usb 3-1: Manufacturer: syz
[  217.253014][ T4382] usb 3-1: SerialNumber: syz
[  217.357090][ T4382] usb 3-1: config 0 descriptor??
[  217.404109][ T4382] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  217.421839][ T4382] usb 3-1: selecting invalid altsetting 1
[  217.427720][ T4382] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  217.439615][ T4382] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  217.450959][ T4382] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  217.467955][ T4382] usb 3-1: media controller created
[  217.499593][ T4382] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  217.511600][ T5370] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  217.522635][ T5370] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.530858][ T5370] usb 4-1: Product: syz
[  217.549404][ T5370] usb 4-1: Manufacturer: syz
[  217.555310][ T5370] usb 4-1: SerialNumber: syz
[  217.591062][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.924'.
[  217.606354][ T5370] usb 4-1: config 0 descriptor??
[  217.633285][ T7417] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  217.642947][ T7417] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  217.652626][ T7417] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  217.662419][ T7417] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  217.718901][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.924'.
[  217.751598][ T4382] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[  217.766866][ T4382] zl10353_read_register: readreg error (reg=127, ret==-32)
[  217.925534][ T5370] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  218.838223][ T7380] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  218.882651][ T4382] usb 3-1: USB disconnect, device number 9
[  219.234867][ T4382] usb 4-1: USB disconnect, device number 9
[  219.473381][ T7479] netlink: 'syz.3.947': attribute type 4 has an invalid length.
[  222.436571][ T7539] device syzkaller1 entered promiscuous mode
[  224.040137][ T7561] loop2: detected capacity change from 0 to 32768
[  224.165732][ T7561] XFS (loop2): Mounting V5 Filesystem
[  224.234147][ T7561] XFS (loop2): Ending clean mount
[  224.421456][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  224.769242][ T4195] XFS (loop2): Unmounting Filesystem
[  224.908299][ T7594] netlink: 'syz.0.981': attribute type 10 has an invalid length.
[  225.502408][ T7612] netlink: 'syz.0.986': attribute type 4 has an invalid length.
[  227.391135][ T7648] netlink: 'syz.1.998': attribute type 4 has an invalid length.
[  227.705859][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1001'.
[  227.855036][ T7667] loop2: detected capacity change from 0 to 256
[  228.294810][ T4556] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  228.671551][ T4556] usb 4-1: config 0 has no interfaces?
[  228.871684][ T4556] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  228.891319][ T4556] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.918683][ T4556] usb 4-1: Product: syz
[  228.945125][ T4556] usb 4-1: Manufacturer: syz
[  228.949801][ T4556] usb 4-1: SerialNumber: syz
[  228.988281][ T4556] usb 4-1: config 0 descriptor??
[  229.046299][ T7701] overlayfs: failed to clone upperpath
[  229.370039][ T4556] usb 4-1: USB disconnect, device number 10
[  232.100652][ T7741] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  234.110455][ T4382] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  234.170647][ T4382] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  235.234690][ T7784] loop3: detected capacity change from 0 to 32768
[  235.285415][ T7784] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1044 (7784)
[  235.315401][ T7787] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  235.329980][ T7784] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  235.338890][ T7784] BTRFS info (device loop3): turning on sync discard
[  235.345696][ T7784] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  235.355436][ T7784] BTRFS info (device loop3): use zstd compression, level 3
[  235.363061][ T7784] BTRFS info (device loop3): turning on async discard
[  235.369896][ T7784] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  235.380787][ T7784] BTRFS info (device loop3): trying to use backup root at mount time
[  235.389352][ T7784] BTRFS info (device loop3): enabling auto defrag
[  235.396076][ T7784] BTRFS info (device loop3): using free space tree
[  235.402669][ T7784] BTRFS info (device loop3): has skinny extents
[  235.568743][ T7798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1048'.
[  235.668371][ T4594] BTRFS warning (device loop3): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0
[  235.710952][ T7784] BTRFS warning (device loop3): failed to read root (objectid=2): -5
[  235.721323][ T4216] BTRFS warning (device loop3): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0
[  235.770151][ T7784] BTRFS warning (device loop3): couldn't read tree root
[  235.781497][ T7784] BTRFS error (device loop3): parent transid verify failed on 5255168 wanted 5 found 7
[  235.791399][ T7784] BTRFS warning (device loop3): couldn't read tree root
[  235.810931][ T7784] BTRFS info (device loop3): enabling ssd optimizations
[  235.818933][ T7784] BTRFS info (device loop3): clearing free space tree
[  235.826164][ T7784] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  235.836085][ T7784] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  235.863788][ T7784] BTRFS info (device loop3): creating free space tree
[  235.871587][ T7784] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  235.881766][ T7784] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  235.938895][ T7784] Invalid argument reading file caps for ./file0
[  236.525603][ T7838] overlayfs: workdir and upperdir must reside under the same mount
[  236.953192][ T7858] tmpfs: Bad value for 'mpol'
[  238.129151][ T7867] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1064'.
[  238.204603][ T7872] netlink: 'syz.0.1067': attribute type 1 has an invalid length.
[  238.263425][ T7872] 8021q: adding VLAN 0 to HW filter on device bond2
[  238.351664][ T7867] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1064'.
[  238.416756][ T7878] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  238.444688][ T7878] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  238.485802][ T7878] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  238.525072][ T7878] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  238.567568][ T7878] bond2: (slave geneve2): making interface the new active one
[  238.609785][ T7878] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  238.644515][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  238.656669][ T7878] syz.0.1067 (7878) used greatest stack depth: 19416 bytes left
[  239.141398][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  240.029814][ T7898] loop3: detected capacity change from 0 to 256
[  240.100911][ T7898] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  240.161864][ T7898] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  240.205944][ T7898] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  240.437061][   T26] audit: type=1804 audit(1781622688.999:22): pid=7911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1073" name="/newroot/207/bus/file0/bus" dev="loop3" ino=1048593 res=1 errno=0
[  240.469490][ T7913] overlayfs: failed to clone upperpath
[  240.508691][   T26] audit: type=1804 audit(1781622689.039:23): pid=7898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1073" name="/newroot/207/bus/file0/bus" dev="loop3" ino=1048593 res=1 errno=0
[  240.861592][ T7923] loop3: detected capacity change from 0 to 1024
[  241.328019][ T7929] loop2: detected capacity change from 0 to 4096
[  241.433540][ T7931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1083'.
[  241.557590][ T7934] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  242.704330][ T7945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1088'.
[  242.832629][ T7947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1089'.
[  243.851144][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1093'.
[  243.904036][   T23] libceph: connect (1)[c::]:6789 error -22
[  243.910920][   T23] libceph: mon0 (1)[c::]:6789 connect error
[  243.919382][ T7958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1093'.
[  243.934295][ T7960] ceph: No mds server is up or the cluster is laggy
[  243.953143][   T23] libceph: connect (1)[c::]:6789 error -22
[  243.959357][   T23] libceph: mon0 (1)[c::]:6789 connect error
[  244.047137][ T7969] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  244.245092][   T23] libceph: connect (1)[c::]:6789 error -22
[  244.251169][   T23] libceph: mon0 (1)[c::]:6789 connect error
[  244.791539][ T7992] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1105'.
[  247.912035][ T8008] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  247.988012][ T8008] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  248.140436][ T8029] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1117'.
[  248.341427][ T4547] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  248.591528][ T4547] usb 4-1: Using ep0 maxpacket: 16
[  248.698537][ T8008] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  248.707844][ T8008] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  248.717602][ T4547] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  248.726096][ T8008] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  248.735470][ T4547] usb 4-1: config 0 has no interface number 0
[  248.742253][ T4547] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  248.752783][ T8008] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  248.762289][ T4547] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  248.941453][ T4547] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  248.950569][ T4547] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.966918][ T4547] usb 4-1: Product: syz
[  248.971151][ T4547] usb 4-1: Manufacturer: syz
[  248.976625][ T4547] usb 4-1: SerialNumber: syz
[  248.989057][ T4547] usb 4-1: config 0 descriptor??
[  249.012219][ T8027] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  249.020596][ T8027] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  249.130756][ T8011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1110'.
[  249.171550][ T8037] netlink: 'syz.0.1120': attribute type 2 has an invalid length.
[  249.358540][ T8027] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  249.379707][ T8027] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  250.271109][ T4547] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  250.798018][ T8075] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1133'.
[  252.311029][ T8096] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6132] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8096]
[  252.691417][ T4547] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[  252.759728][ T4547] asix: probe of 4-1:0.34 failed with error -71
[  252.885580][ T4547] usb 4-1: USB disconnect, device number 11
[  253.059624][ T8102] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1142'.
[  253.170759][ T8104] device vlan2 entered promiscuous mode
[  253.272365][ T8102] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1142'.
[  253.417232][ T8116] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1147'.
[  253.438467][ T8116] device ip6gre1 entered promiscuous mode
[  253.458370][ T8116] netlink: 'syz.1.1147': attribute type 6 has an invalid length.
[  253.472284][ T8116] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1147'.
[  253.665353][ T1111] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  254.661804][ T1111] usb 3-1: Using ep0 maxpacket: 16
[  254.783266][ T1111] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  254.800310][ T1111] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  254.814924][ T1111] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  254.825127][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.836042][ T1111] usb 3-1: config 0 descriptor??
[  254.874108][ T1111] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  255.785760][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  255.792297][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  256.422802][ T1111] usb 3-1: USB disconnect, device number 10
[  256.455904][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1154'.
[  256.601573][ T8141] overlayfs: failed to resolve './file0': -2
[  257.484332][ T8147] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1157'.
[  257.542170][   T26] audit: type=1326 audit(1781622706.079:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8144 comm="syz.1.1158" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f365d052e59 code=0x0
[  257.743757][ T8148] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1157'.
[  258.770884][ T8162] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1164'.
[  259.497952][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1166'.
[  261.357954][ T8216] tipc: Started in network mode
[  261.392062][ T8216] tipc: Node identity ac14140f, cluster identity 4711
[  261.754181][ T8216] tipc: New replicast peer: 255.255.255.255
[  261.860611][ T8216] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  262.207851][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  262.316583][ T8216] tipc: Enabled bearer <udp:syz2>, priority 10
[  262.341499][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  262.491387][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  262.610362][ T8227] loop2: detected capacity change from 0 to 128
[  262.631386][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  262.771421][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  263.435754][   T23] tipc: Node number set to 2886997007
[  263.491707][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  263.771389][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  264.051789][ T8227] overlayfs: upper fs needs to support d_type.
[  264.067300][ T8227] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  264.075738][ T8227] overlayfs: failed to set xattr on upper
[  264.082064][ T8227] overlayfs: ...falling back to index=off,metacopy=off.
[  264.301369][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  265.381451][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  265.429873][ T8245] loop3: detected capacity change from 0 to 4096
[  265.459931][ T8245] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  265.491860][ T8245] ntfs3: loop3: RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only
[  265.954537][ T8262] tipc: New replicast peer: 255.255.255.255
[  265.976917][ T8262] tipc: Enabled bearer <udp:syz2>, priority 10
[  266.299139][ T8278] overlayfs: failed to resolve './file0': -2
[  266.931369][    C1] net_ratelimit: 4 callbacks suppressed
[  266.931388][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  267.461292][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  267.574809][ T8287] device syzkaller0 entered promiscuous mode
[  267.702751][ T8297] tipc: Started in network mode
[  267.708928][ T8297] tipc: Node identity ac14140f, cluster identity 4711
[  267.716412][ T8297] tipc: New replicast peer: 255.255.255.255
[  267.732176][ T8297] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  267.739831][ T8297] tipc: Enabled bearer <udp:syz2>, priority 10
[  267.871364][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  267.951261][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  267.959849][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  268.012305][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  268.101790][ T1111] Bluetooth: hci4: command 0x0406 tx timeout
[  268.161280][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  268.301256][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  268.441247][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  268.501250][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  269.067513][ T4541] tipc: Node number set to 2886997007
[  269.118052][ T8319] /dev/loop0: Can't open blockdev
[  269.610383][ T8345] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1226'.
[  269.948738][ T8357] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1232'.
[  271.124211][ T8387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1239'.
[  271.288085][ T8391] loop2: detected capacity change from 0 to 512
[  271.658085][ T8391] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000004,,errors=continue. Quota mode: writeback.
[  271.716799][ T8391] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  272.101022][    C1] net_ratelimit: 11 callbacks suppressed
[  272.101042][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  272.114549][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  272.660992][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  273.140969][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  273.148834][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  273.262119][ T8412] netlink: 'syz.3.1243': attribute type 1 has an invalid length.
[  273.338830][ T8412] 8021q: adding VLAN 0 to HW filter on device bond1
[  273.359058][ T8416] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1243'.
[  273.444452][ T8418] Set syz0 is full, maxelem 0 reached
[  273.507156][ T8416] device bond1 entered promiscuous mode
[  273.711128][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  274.180920][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  274.188710][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  275.941060][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  280.583800][    C1] net_ratelimit: 2 callbacks suppressed
[  280.583819][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  280.597579][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  280.605705][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  281.474423][ T8446] loop2: detected capacity change from 0 to 512
[  281.537933][ T8446] EXT4-fs (loop2): orphan cleanup on readonly fs
[  281.616400][ T8446] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated!
[  281.625720][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  281.626097][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  281.626330][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  281.651378][ T8446] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota
[  281.662290][ T8446] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.1257: Failed to acquire dquot type 0
[  281.711061][ T8446] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated!
[  281.736345][ T8456] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1261'.
[  281.746314][ T8446] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota
[  281.769281][ T8446] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.1257: Failed to acquire dquot type 0
[  281.806299][ T8446] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1257: bg 0: block 64: padding at end of block bitmap is not set
[  281.875125][ T8446] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  281.918093][ T8446] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated!
[  281.935422][ T8459] overlayfs: failed to clone upperpath
[  281.941842][ T8446] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota
[  281.962899][ T8446] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.1257: Failed to acquire dquot type 0
[  282.032126][ T8446] EXT4-fs (loop2): 1 orphan inode deleted
[  282.047302][ T8446] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000003,nolazytime,,errors=continue. Quota mode: writeback.
[  282.684633][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  282.693276][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  282.701172][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  282.982653][ T8473] netlink: 'syz.5.1269': attribute type 10 has an invalid length.
[  283.007898][ T8453] loop3: detected capacity change from 0 to 40427
[  283.053161][ T8473] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  283.125200][ T8453] F2FS-fs (loop3): invalid crc value
[  283.271699][ T8453] F2FS-fs (loop3): Found nat_bits in checkpoint
[  283.427725][ T8499] UBIFS error (pid: 8499): cannot open "c:::", error -22
[  283.461230][ T8453] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  283.819444][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  283.958982][ T8453] attempt to access beyond end of device
[  283.958982][ T8453] loop3: rw=10241, want=47152, limit=40427
[  283.987378][ T8453] attempt to access beyond end of device
[  283.987378][ T8453] loop3: rw=10241, want=49208, limit=40427
[  284.011148][ T8453] attempt to access beyond end of device
[  284.011148][ T8453] loop3: rw=10241, want=51256, limit=40427
[  284.033938][ T8453] attempt to access beyond end of device
[  284.033938][ T8453] loop3: rw=10241, want=53248, limit=40427
[  284.048705][ T8453] attempt to access beyond end of device
[  284.048705][ T8453] loop3: rw=10241, want=45064, limit=40427
[  284.102769][ T8453] attempt to access beyond end of device
[  284.102769][ T8453] loop3: rw=10241, want=65560, limit=40427
[  285.456504][ T8523] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1285'.
[  287.950640][    C1] net_ratelimit: 5 callbacks suppressed
[  287.950660][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  287.964380][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  287.972488][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  289.092567][ T8560] bond1: option mode: unable to set because the bond device has slaves
[  289.226341][ T8560] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1296'.
[  289.337583][ T8560] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1296'.
[  289.522131][ T8560] bond1: (slave bond0): Error -16 calling set_mac_address
[  290.130564][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  290.138462][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  290.146452][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  291.218783][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  291.226881][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  291.235209][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  292.295924][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  292.994497][ T4237] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  293.357260][    C1] net_ratelimit: 2 callbacks suppressed
[  293.357282][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  293.945304][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  293.953337][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  294.425689][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  295.000136][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  295.008018][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  295.265455][ T1111] Bluetooth: hci3: command 0x0406 tx timeout
[  295.390274][ T4237] usb 4-1: Using ep0 maxpacket: 16
[  295.445655][ T8614] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1314'.
[  295.471920][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  295.510409][ T4237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  295.558690][ T8614] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1314'.
[  295.690360][ T4237] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  295.726721][ T4237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.808431][ T4237] usb 4-1: Product: syz
[  295.824558][ T4237] usb 4-1: Manufacturer: syz
[  295.837041][ T4237] usb 4-1: SerialNumber: syz
[  295.966616][ T4237] usb 4-1: config 0 descriptor??
[  295.990412][ T4237] usb 4-1: can't set config #0, error -71
[  296.016999][ T4237] usb 4-1: USB disconnect, device number 12
[  296.056443][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  296.064367][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  296.664551][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  299.399988][    C1] net_ratelimit: 5 callbacks suppressed
[  299.400009][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  299.413721][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  299.421526][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  299.839696][ T8656] netlink: 628 bytes leftover after parsing attributes in process `syz.3.1325'.
[  300.421026][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  300.428770][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  300.795845][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  301.477183][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  301.484993][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  301.627701][ T8683] netlink: 'syz.2.1334': attribute type 4 has an invalid length.
[  301.879517][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  302.018504][ T8694] device syzkaller0 entered promiscuous mode
[  302.886603][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  304.601656][    C1] net_ratelimit: 2 callbacks suppressed
[  304.601677][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  304.615300][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  304.623125][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  306.270109][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  306.278038][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  306.286824][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  306.356107][ T8734] overlayfs: failed to clone upperpath
[  306.379332][ T8735] netlink: 'syz.0.1350': attribute type 10 has an invalid length.
[  306.824033][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1354'.
[  308.401193][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  308.409111][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  308.417135][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  308.432065][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1354'.
[  308.848408][ T8744] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  308.857588][ T8744] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  308.866598][ T8744] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  308.875793][ T8744] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  308.916725][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): vxlan0: link becomes ready
[  308.954458][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1354'.
[  308.972579][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1354'.
[  309.610034][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  309.617822][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  309.625641][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  310.304566][ T8780] overlayfs: failed to clone upperpath
[  310.647301][ T8787] fuse: Bad value for 'fd'
[  312.015602][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  312.023680][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  312.031557][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  312.249918][ T8801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1369'.
[  312.311872][ T8801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1369'.
[  313.172231][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  313.180075][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  313.187931][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  313.464491][   T26] audit: type=1326 audit(2000000047.562:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz.1.1370" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365d052e59 code=0x7fc00000
[  314.687521][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  314.695617][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  314.703644][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  315.007210][ T8813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1372'.
[  315.038378][ T8819] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1383'.
[  315.284866][ T8825] 8021q: adding VLAN 0 to HW filter on device bond2
[  315.293603][ T8825] bond0: (slave bond2): Enslaving as an active interface with an up link
[  316.346758][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  316.354550][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  316.362448][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  317.221259][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  317.228208][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  317.427472][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  317.435280][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  317.443029][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  317.763945][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1380'.
[  318.048353][ T4383] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  318.418412][ T4383] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  318.433179][ T4383] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  318.501976][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  318.518420][ T4383] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  318.527930][ T4383] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  318.540577][ T4383] usb 4-1: SerialNumber: syz
[  318.880150][ T4383] usb 4-1: 0:2 : does not exist
[  318.963091][ T4383] usb 4-1: USB disconnect, device number 13
[  318.982536][ T8829] udevd[8829]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory
[  319.247576][ T8859] udevd[8859]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  320.594655][    C1] net_ratelimit: 5 callbacks suppressed
[  320.594675][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  320.608263][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  320.616160][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  320.705320][ T8890] kernel read not supported for file /!selinuxwk1�m�9ɞ*T����#j����Y��mV�vm(p�-QZ#�{�� (pid: 8890 comm: syz.2.1394)
[  321.628672][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  321.636571][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  321.644372][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  323.038825][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  323.046894][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  323.051230][ T8912] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  323.055152][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  324.111788][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  324.187358][ T8949] netlink: 'syz.2.1410': attribute type 11 has an invalid length.
[  325.361191][   T26] audit: type=1326 audit(2000000059.463:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8958 comm="syz.2.1416" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0aac376e59 code=0x0
[  326.260676][ T8971] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  326.310335][    C1] net_ratelimit: 5 callbacks suppressed
[  326.310353][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  326.323729][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  326.331466][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  326.339607][ T8972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1420'.
[  327.916364][ T9000] netlink: 'syz.2.1432': attribute type 27 has an invalid length.
[  327.931218][ T9000] netlink: 'syz.2.1432': attribute type 4 has an invalid length.
[  327.940022][ T9000] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1432'.
[  328.388660][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  328.396598][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  328.404543][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  328.412430][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  329.371836][ T9016] loop3: detected capacity change from 0 to 64
[  329.495870][ T9021] netlink: 'syz.0.1437': attribute type 4 has an invalid length.
[  329.582733][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  329.590857][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  329.598601][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  329.727901][ T9021] netlink: 'syz.0.1437': attribute type 4 has an invalid length.
[  330.667962][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  330.710161][ T9032] netlink: 1319 bytes leftover after parsing attributes in process `syz.0.1441'.
[  330.877711][ T9042] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.1446'.
[  331.241930][   T26] audit: type=1326 audit(2000000065.343:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9055 comm="syz.1.1453" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f365d052e59 code=0x0
[  331.313319][   T26] audit: type=1326 audit(2000000065.393:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9055 comm="syz.1.1453" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365d052e59 code=0x7ffc0000
[  331.395351][   T26] audit: type=1326 audit(2000000065.393:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9055 comm="syz.1.1453" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365d052e59 code=0x7ffc0000
[  331.527594][   T26] audit: type=1326 audit(2000000065.403:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9055 comm="syz.1.1453" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f365cff41d9 code=0x7ffc0000
[  331.586392][   T26] audit: type=1326 audit(2000000065.403:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9055 comm="syz.1.1453" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f365d052e59 code=0x7ffc0000
[  331.645713][   T26] audit: type=1326 audit(2000000065.403:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9055 comm="syz.1.1453" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365d052e59 code=0x7ffc0000
[  331.707078][   T26] audit: type=1326 audit(2000000065.403:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9055 comm="syz.1.1453" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365d052e59 code=0x7ffc0000
[  331.765442][   T26] audit: type=1326 audit(2000000065.393:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9055 comm="syz.1.1453" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365d052e59 code=0x7ffc0000
[  331.827874][    C1] net_ratelimit: 2 callbacks suppressed
[  331.827893][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  331.841297][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  331.849008][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  331.878604][   T26] audit: type=1326 audit(2000000065.403:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9055 comm="syz.1.1453" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365d052e59 code=0x7ffc0000
[  331.931758][   T26] audit: type=1326 audit(2000000065.403:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9055 comm="syz.1.1453" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365d052e59 code=0x7ffc0000
[  333.022951][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  333.030727][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  333.038637][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  333.937983][ T9085] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1462'.
[  334.106855][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  334.114725][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  334.122582][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  334.734350][ T9100] delete_channel: no stack
[  334.742125][ T9100] delete_channel: no stack
[  335.447813][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  335.943236][ T9113] device wlan1 entered promiscuous mode
[  337.173372][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1473'.
[  337.698990][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1473'.
[  337.865870][    C1] net_ratelimit: 5 callbacks suppressed
[  337.865893][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  337.879321][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  337.887030][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  338.901276][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  338.909509][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  338.917394][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  339.484423][ T9160] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1489'.
[  339.532358][ T9160] unsupported nlmsg_type 40
[  340.027310][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  340.035252][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  340.043023][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  341.077919][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  343.886945][    C1] net_ratelimit: 5 callbacks suppressed
[  343.886963][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  343.900607][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  343.910869][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  345.747215][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  345.755438][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  345.763200][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  345.822408][ T9241] overlayfs: failed to clone upperpath
[  345.840542][ T9246] loop3: detected capacity change from 0 to 16
[  345.975555][ T9246] erofs: (device loop3): mounted with root inode @ nid 36.
[  346.051640][ T9246] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1517'.
[  346.108086][ T9246] 0�X���: renamed from caif0
[  346.169719][ T9246] device 
60�X��� left promiscuous mode
[  346.186993][ T9246] A link change request failed with some changes committed already. Interface 
60�X��� may have been left with an inconsistent configuration, please check.
[  347.366467][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  347.374280][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  347.382201][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  347.557201][ T9274] device wlan1 entered promiscuous mode
[  347.742536][ T9276] netlink: 'syz.0.1530': attribute type 11 has an invalid length.
[  348.746117][   T26] kauditd_printk_skb: 61 callbacks suppressed
[  348.746142][   T26] audit: type=1326 audit(2000000082.844:98): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=unconfined pid=9287 comm="syz.2.1534" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0aac376e59 code=0x0
[  350.076697][    C1] net_ratelimit: 3 callbacks suppressed
[  350.076715][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  350.090299][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  350.098976][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  351.266659][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  351.274476][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  351.282323][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  351.546615][ T9320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1543'.
[  351.837788][ T4547] Process accounting resumed
[  351.855194][ T9336] Process accounting resumed
[  352.029365][ T9343] device syzkaller0 entered promiscuous mode
[  352.043353][ T9342] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1553'.
[  352.346699][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  352.354512][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  352.362582][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  352.715310][ T9366] device wlan1 entered promiscuous mode
[  353.386604][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  353.863875][ T9382] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1566'.
[  353.917214][ T9377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1564'.
[  354.480206][    C0] ==================================================================
[  354.489094][    C0] BUG: KASAN: use-after-free in __nft_trace_packet+0x135/0x150
[  354.497157][    C0] Read of size 2 at addr ffff88805cd42bc0 by task ksoftirqd/0/14
[  354.504911][    C0] 
[  354.507268][    C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0
[  354.514683][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  354.524987][    C0] Call Trace:
[  354.528397][    C0]  <TASK>
[  354.531390][    C0]  dump_stack_lvl+0x188/0x250
[  354.536310][    C0]  ? show_regs_print_info+0x20/0x20
[  354.541661][    C0]  ? _printk+0xda/0x130
[  354.546034][    C0]  ? __nft_trace_packet+0x135/0x150
[  354.551537][    C0]  ? load_image+0x400/0x400
[  354.556068][    C0]  ? nft_synproxy_do_eval+0x304/0x570
[  354.561545][    C0]  print_address_description+0x60/0x2d0
[  354.567211][    C0]  ? __nft_trace_packet+0x135/0x150
[  354.572548][    C0]  kasan_report+0xdf/0x130
[  354.577266][    C0]  ? __nft_trace_packet+0x135/0x150
[  354.582544][    C0]  __nft_trace_packet+0x135/0x150
[  354.587619][    C0]  nft_do_chain+0x12a5/0x14f0
[  354.592459][    C0]  ? ip_vs_conn_out_get+0xa06/0xa60
[  354.597797][    C0]  ? nft_fwd_dup_netdev_offload+0x120/0x120
[  354.603823][    C0]  ? tcp_conn_schedule+0x498/0x850
[  354.609174][    C0]  ? ip_vs_in+0xbe1/0x1d20
[  354.613732][    C0]  ? nf_nat_inet_fn+0x8a3/0xad0
[  354.618811][    C0]  nft_do_chain_inet+0x25c/0x340
[  354.624226][    C0]  ? nft_do_chain_arp+0xf0/0xf0
[  354.629131][    C0]  ? nf_nat_ipv4_local_in+0x209/0x5b0
[  354.634557][    C0]  ? nft_do_chain_arp+0xf0/0xf0
[  354.639455][    C0]  nf_hook_slow+0xb9/0x200
[  354.644069][    C0]  ? NF_HOOK+0x390/0x390
[  354.649250][    C0]  NF_HOOK+0x1f2/0x390
[  354.653374][    C0]  ? NF_HOOK+0x390/0x390
[  354.657750][    C0]  ? ip_local_deliver+0x1a0/0x1a0
[  354.662896][    C0]  ? ip_rcv_finish_core+0xd8b/0x1bc0
[  354.668250][    C0]  ? NF_HOOK+0x390/0x390
[  354.672810][    C0]  ? ip_local_deliver+0x11e/0x1a0
[  354.678106][    C0]  ? ip_rcv_core+0xb60/0xb60
[  354.682905][    C0]  NF_HOOK+0x303/0x390
[  354.687496][    C0]  ? ip_rcv_core+0xb60/0xb60
[  354.692203][    C0]  ? ip_local_deliver+0x1a0/0x1a0
[  354.697347][    C0]  ? ip_rcv_core+0xb60/0xb60
[  354.702056][    C0]  ? ip_local_deliver_finish+0x320/0x320
[  354.708009][    C0]  ? ip_local_deliver_finish+0x320/0x320
[  354.714137][    C0]  __netif_receive_skb+0xcc/0x290
[  354.720178][    C0]  process_backlog+0x370/0x790
[  354.725240][    C0]  ? rps_trigger_softirq+0x210/0x210
[  354.730555][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  354.736819][    C0]  ? lock_chain_count+0x20/0x20
[  354.741704][    C0]  __napi_poll+0xc0/0x430
[  354.746060][    C0]  ? net_rx_action+0x307/0xa10
[  354.752756][    C0]  net_rx_action+0x4d4/0xa10
[  354.757662][    C0]  ? net_tx_action+0x880/0x880
[  354.762456][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  354.771700][    C0]  ? detach_timer+0x2b0/0x2b0
[  354.779272][    C0]  ? lockdep_hardirqs_on_prepare+0x770/0x770
[  354.785309][    C0]  handle_softirqs+0x339/0x830
[  354.790368][    C0]  ? run_ksoftirqd+0xa4/0x100
[  354.795081][    C0]  ? do_softirq+0x210/0x210
[  354.799860][    C0]  ? run_ksoftirqd+0x81/0x100
[  354.804587][    C0]  ? ksoftirqd_should_run+0x20/0x20
[  354.809917][    C0]  ? lockdep_hardirqs_off+0x70/0x100
[  354.815333][    C0]  ? ksoftirqd_should_run+0x20/0x20
[  354.820556][    C0]  run_ksoftirqd+0xa4/0x100
[  354.825095][    C0]  ? ksoftirqd_should_run+0x20/0x20
[  354.830405][    C0]  ? preempt_schedule_thunk+0x16/0x18
[  354.835830][    C0]  ? smpboot_thread_fn+0x5bc/0x970
[  354.841191][    C0]  smpboot_thread_fn+0x4f6/0x970
[  354.846345][    C0]  kthread+0x436/0x520
[  354.850449][    C0]  ? cpu_report_death+0x180/0x180
[  354.855690][    C0]  ? kthread_blkcg+0xd0/0xd0
[  354.860603][    C0]  ret_from_fork+0x1f/0x30
[  354.865091][    C0]  </TASK>
[  354.868240][    C0] 
[  354.870591][    C0] Allocated by task 14:
[  354.874790][    C0]  __kasan_slab_alloc+0x9c/0xd0
[  354.879685][    C0]  slab_post_alloc_hook+0x4c/0x380
[  354.885026][    C0]  kmem_cache_alloc_node+0x12d/0x2d0
[  354.890425][    C0]  __alloc_skb+0xf4/0x750
[  354.894845][    C0]  synproxy_send_client_synack+0x16f/0xde0
[  354.900675][    C0]  nft_synproxy_eval_v4+0x347/0x4e0
[  354.905990][    C0]  nft_synproxy_do_eval+0x304/0x570
[  354.911382][    C0]  nft_do_chain+0x48c/0x14f0
[  354.916313][    C0]  nft_do_chain_inet+0x25c/0x340
[  354.922130][    C0]  nf_hook_slow+0xb9/0x200
[  354.926576][    C0]  NF_HOOK+0x1f2/0x390
[  354.931283][    C0]  NF_HOOK+0x303/0x390
[  354.935455][    C0]  __netif_receive_skb+0xcc/0x290
[  354.940529][    C0]  process_backlog+0x370/0x790
[  354.945453][    C0]  __napi_poll+0xc0/0x430
[  354.949821][    C0]  net_rx_action+0x4d4/0xa10
[  354.954452][    C0]  handle_softirqs+0x339/0x830
[  354.959543][    C0]  run_ksoftirqd+0xa4/0x100
[  354.964088][    C0]  smpboot_thread_fn+0x4f6/0x970
[  354.969244][    C0]  kthread+0x436/0x520
[  354.973437][    C0]  ret_from_fork+0x1f/0x30
[  354.977988][    C0] 
[  354.980338][    C0] Freed by task 14:
[  354.984251][    C0]  kasan_set_track+0x4b/0x70
[  354.988955][    C0]  kasan_set_free_info+0x1f/0x40
[  354.994135][    C0]  ____kasan_slab_free+0xd5/0x110
[  354.999199][    C0]  slab_free_freelist_hook+0xea/0x170
[  355.004683][    C0]  kmem_cache_free+0x8f/0x210
[  355.009391][    C0]  nft_synproxy_eval_v4+0x34f/0x4e0
[  355.014616][    C0]  nft_synproxy_do_eval+0x304/0x570
[  355.019835][    C0]  nft_do_chain+0x48c/0x14f0
[  355.024647][    C0]  nft_do_chain_inet+0x25c/0x340
[  355.029614][    C0]  nf_hook_slow+0xb9/0x200
[  355.034066][    C0]  NF_HOOK+0x1f2/0x390
[  355.038178][    C0]  NF_HOOK+0x303/0x390
[  355.042374][    C0]  __netif_receive_skb+0xcc/0x290
[  355.047439][    C0]  process_backlog+0x370/0x790
[  355.052227][    C0]  __napi_poll+0xc0/0x430
[  355.056595][    C0]  net_rx_action+0x4d4/0xa10
[  355.061241][    C0]  handle_softirqs+0x339/0x830
[  355.066152][    C0]  run_ksoftirqd+0xa4/0x100
[  355.070873][    C0]  smpboot_thread_fn+0x4f6/0x970
[  355.076393][    C0]  kthread+0x436/0x520
[  355.080498][    C0]  ret_from_fork+0x1f/0x30
[  355.084971][    C0] 
[  355.087321][    C0] The buggy address belongs to the object at ffff88805cd42b40
[  355.087321][    C0]  which belongs to the cache skbuff_head_cache of size 232
[  355.103664][    C0] The buggy address is located 128 bytes inside of
[  355.103664][    C0]  232-byte region [ffff88805cd42b40, ffff88805cd42c28)
[  355.118092][    C0] The buggy address belongs to the page:
[  355.123858][    C0] page:ffffea0001735080 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5cd42
[  355.134034][    C0] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[  355.142505][    C0] raw: 00fff00000000200 dead000000000100 dead000000000122 ffff888144bf1140
[  355.151216][    C0] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000
[  355.159908][    C0] page dumped because: kasan: bad access detected
[  355.166443][    C0] page_owner tracks the page as allocated
[  355.172325][    C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 20, ts 313717447511, free_ts 313607891048
[  355.189812][    C0]  get_page_from_freelist+0x1bbd/0x1ca0
[  355.195561][    C0]  __alloc_pages+0x1ee/0x480
[  355.200190][    C0]  new_slab+0xc0/0x4b0
[  355.204393][    C0]  ___slab_alloc+0x80a/0xdd0
[  355.209011][    C0]  kmem_cache_alloc_node+0x1c3/0x2d0
[  355.214323][    C0]  __alloc_skb+0xf4/0x750
[  355.218798][    C0]  synproxy_send_client_synack+0x16f/0xde0
[  355.224891][    C0]  nft_synproxy_eval_v4+0x347/0x4e0
[  355.230204][    C0]  nft_synproxy_do_eval+0x304/0x570
[  355.235429][    C0]  nft_do_chain+0x48c/0x14f0
[  355.240149][    C0]  nft_do_chain_inet+0x25c/0x340
[  355.245107][    C0]  nf_hook_slow+0xb9/0x200
[  355.249895][    C0]  NF_HOOK+0x1f2/0x390
[  355.253985][    C0]  NF_HOOK+0x303/0x390
[  355.258153][    C0]  __netif_receive_skb+0xcc/0x290
[  355.263553][    C0]  process_backlog+0x370/0x790
[  355.268336][    C0] page last free stack trace:
[  355.273023][    C0]  free_unref_page_prepare+0x637/0x6c0
[  355.278538][    C0]  free_unref_page_list+0x119/0x820
[  355.283846][    C0]  release_pages+0x186c/0x1be0
[  355.288702][    C0]  tlb_finish_mmu+0x1b4/0x370
[  355.293446][    C0]  exit_mmap+0x3d0/0x640
[  355.297987][    C0]  __mmput+0x115/0x3b0
[  355.302350][    C0]  exit_mm+0x5f7/0x770
[  355.306451][    C0]  do_exit+0x5a9/0x20c0
[  355.310637][    C0]  do_group_exit+0x12e/0x300
[  355.315248][    C0]  __x64_sys_exit_group+0x3b/0x40
[  355.320307][    C0]  do_syscall_64+0x4c/0xa0
[  355.324749][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  355.330742][    C0] 
[  355.333082][    C0] Memory state around the buggy address:
[  355.338732][    C0]  ffff88805cd42a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc
[  355.346829][    C0]  ffff88805cd42b00: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[  355.355674][    C0] >ffff88805cd42b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  355.364154][    C0]                                            ^
[  355.370534][    C0]  ffff88805cd42c00: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc
[  355.378790][    C0]  ffff88805cd42c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  355.387010][    C0] ==================================================================
[  355.395155][    C0] Disabling lock debugging due to kernel taint
[  355.401634][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  355.408869][    C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Tainted: G    B             syzkaller #0
[  355.417678][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  355.428741][    C0] Call Trace:
[  355.432061][    C0]  <TASK>
[  355.435185][    C0]  dump_stack_lvl+0x188/0x250
[  355.439909][    C0]  ? show_regs_print_info+0x20/0x20
[  355.445257][    C0]  ? load_image+0x400/0x400
[  355.450076][    C0]  panic+0x2e5/0x810
[  355.454114][    C0]  ? bpf_jit_dump+0xd0/0xd0
[  355.456949][    C1] net_ratelimit: 5 callbacks suppressed
[  355.456992][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  355.459091][    C0]  ? _raw_spin_unlock_irqrestore+0xbc/0x120
[  355.459120][    C0]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  355.465594][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  355.472445][    C0]  ? _raw_spin_unlock+0x40/0x40
[  355.472473][    C0]  ? print_memory_metadata+0x314/0x400
[  355.479287][    C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  355.484460][    C0]  ? __nft_trace_packet+0x135/0x150
[  355.516013][    C0]  check_panic_on_warn+0x80/0xa0
[  355.521003][    C0]  ? __nft_trace_packet+0x135/0x150
[  355.526251][    C0]  end_report+0x6d/0xf0
[  355.530493][    C0]  kasan_report+0x102/0x130
[  355.535131][    C0]  ? __nft_trace_packet+0x135/0x150
[  355.540373][    C0]  __nft_trace_packet+0x135/0x150
[  355.545449][    C0]  nft_do_chain+0x12a5/0x14f0
[  355.550170][    C0]  ? ip_vs_conn_out_get+0xa06/0xa60
[  355.555420][    C0]  ? nft_fwd_dup_netdev_offload+0x120/0x120
[  355.561452][    C0]  ? tcp_conn_schedule+0x498/0x850
[  355.566646][    C0]  ? ip_vs_in+0xbe1/0x1d20
[  355.571287][    C0]  ? nf_nat_inet_fn+0x8a3/0xad0
[  355.576535][    C0]  nft_do_chain_inet+0x25c/0x340
[  355.581618][    C0]  ? nft_do_chain_arp+0xf0/0xf0
[  355.587305][    C0]  ? nf_nat_ipv4_local_in+0x209/0x5b0
[  355.592873][    C0]  ? nft_do_chain_arp+0xf0/0xf0
[  355.597910][    C0]  nf_hook_slow+0xb9/0x200
[  355.602411][    C0]  ? NF_HOOK+0x390/0x390
[  355.607016][    C0]  NF_HOOK+0x1f2/0x390
[  355.611478][    C0]  ? NF_HOOK+0x390/0x390
[  355.615943][    C0]  ? ip_local_deliver+0x1a0/0x1a0
[  355.621358][    C0]  ? ip_rcv_finish_core+0xd8b/0x1bc0
[  355.626861][    C0]  ? NF_HOOK+0x390/0x390
[  355.631298][    C0]  ? ip_local_deliver+0x11e/0x1a0
[  355.636371][    C0]  ? ip_rcv_core+0xb60/0xb60
[  355.641028][    C0]  NF_HOOK+0x303/0x390
[  355.645137][    C0]  ? ip_rcv_core+0xb60/0xb60
[  355.649955][    C0]  ? ip_local_deliver+0x1a0/0x1a0
[  355.655699][    C0]  ? ip_rcv_core+0xb60/0xb60
[  355.660476][    C0]  ? ip_local_deliver_finish+0x320/0x320
[  355.666154][    C0]  ? ip_local_deliver_finish+0x320/0x320
[  355.671982][    C0]  __netif_receive_skb+0xcc/0x290
[  355.677431][    C0]  process_backlog+0x370/0x790
[  355.682515][    C0]  ? rps_trigger_softirq+0x210/0x210
[  355.688533][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  355.694812][    C0]  ? lock_chain_count+0x20/0x20
[  355.701762][    C0]  __napi_poll+0xc0/0x430
[  355.706335][    C0]  ? net_rx_action+0x307/0xa10
[  355.711635][    C0]  net_rx_action+0x4d4/0xa10
[  355.716460][    C0]  ? net_tx_action+0x880/0x880
[  355.722252][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  355.728388][    C0]  ? detach_timer+0x2b0/0x2b0
[  355.733143][    C0]  ? lockdep_hardirqs_on_prepare+0x770/0x770
[  355.739274][    C0]  handle_softirqs+0x339/0x830
[  355.744315][    C0]  ? run_ksoftirqd+0xa4/0x100
[  355.749239][    C0]  ? do_softirq+0x210/0x210
[  355.753885][    C0]  ? run_ksoftirqd+0x81/0x100
[  355.759212][    C0]  ? ksoftirqd_should_run+0x20/0x20
[  355.764471][    C0]  ? lockdep_hardirqs_off+0x70/0x100
[  355.769974][    C0]  ? ksoftirqd_should_run+0x20/0x20
[  355.775546][    C0]  run_ksoftirqd+0xa4/0x100
[  355.780113][    C0]  ? ksoftirqd_should_run+0x20/0x20
[  355.785377][    C0]  ? preempt_schedule_thunk+0x16/0x18
[  355.790902][    C0]  ? smpboot_thread_fn+0x5bc/0x970
[  355.796390][    C0]  smpboot_thread_fn+0x4f6/0x970
[  355.801578][    C0]  kthread+0x436/0x520
[  355.806196][    C0]  ? cpu_report_death+0x180/0x180
[  355.811554][    C0]  ? kthread_blkcg+0xd0/0xd0
[  355.816295][    C0]  ret_from_fork+0x1f/0x30
[  355.820862][    C0]  </TASK>
[  355.824320][    C0] Kernel Offset: disabled
[  355.828749][    C0] Rebooting in 86400 seconds..