last executing test programs:

5m53.724112313s ago: executing program 1 (id=2):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000180)={0x1}, 0x1)
r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f0000000000)={[{@compress_force}, {}, {@nodatasum}, {@nossd}, {}, {@noflushoncommit}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file2\x00', 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001e40)={0x2, 0x0, {0x7f, @usage=0x5, 0x0, 0x4, 0x40002, 0x3fe5, 0x25b, 0x13f, 0x10, @usage=0x6, 0x9, 0xfff, [0x100000000000070a, 0xfffffffffffffff7, 0x7, 0x20fc6d1e, 0x0, 0xb8]}, {0x6, @usage=0x80000001, 0x0, 0xc00000000000000, 0x100000001, 0xa, 0x0, 0x400000fc, 0x0, @struct={0x3ff, 0xfffffffe}, 0x0, 0x18000, [0x4, 0x4, 0x5, 0xf, 0x808, 0x200000000000044]}, {0x0, @usage=0x1, 0x0, 0x6, 0x6, 0x8, 0xf, 0x2, 0x4ba, @usage=0x2, 0x7, 0x3, [0x200, 0x3, 0x8, 0x9, 0x40000000009, 0x2]}, {0x9, 0x10001, 0x9}})
openat2(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x40880, 0x8, 0x20}, 0x18)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$VT_DISALLOCATE(r1, 0x5608)

5m50.940637051s ago: executing program 1 (id=14):
llistxattr(0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10)
listen(r0, 0xa)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x56, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000002, 0x20000000, 0x6, 0xe, 0x9, 0x4, 0xffff2d37, 0xffffff01, 0x31, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x1, 0x4, 0x5, 0x3, 0x800, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x846, 0x5, 0x7, 0x200, 0xffffffff, 0x7, 0x5, 0x3, 0x8f, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x7, 0x5, 0x4, 0x200001, 0x40], [0x10, 0x9, 0x8000012d, 0x8004, 0x8000005, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0x10, 0x3, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0xcf1, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x8, 0x401, 0x9, 0x2ae, 0xff, 0x3, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x89, 0x3, 0xd, 0x7, 0x47, 0x7ffd, 0x1, 0xfe000000, 0x7c, 0x2, 0x4, 0x9, 0x6, 0x3, 0x9, 0x1, 0x0, 0x3, 0xbc45, 0x3, 0x42, 0x401], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xd, 0x5, 0x7fff, 0x0, 0x5, 0x7, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x2, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xb, 0x1, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x3, 0x200, 0xffffff6a, 0x3, 0x1, 0x2950bfaf, 0x80001000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120201, 0x3, 0x1, 0x80a2ed, 0x4, 0x29], [0x2, 0xbb33, 0x7, 0xb, 0x5, 0x5, 0x6, 0xf3f, 0x0, 0xb9, 0xce7, 0x1ff, 0xf0f6, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x8, 0x7fff, 0xffff, 0xa420, 0x200001, 0x78b, 0x0, 0x2, 0x2, 0x60a7, 0x6, 0x16, 0xffffffff, 0xd4cf, 0x4, 0x4, 0xcc, 0x1, 0xfffff000, 0x5, 0x3, 0x92, 0x100, 0x3, 0x7, 0x3, 0x8, 0x6, 0x226, 0x827, 0x4005, 0x8, 0x30b1d694, 0xa1f, 0x9, 0x7, 0x5b, 0x6c1b, 0x0, 0x4, 0x5, 0xb0e, 0xd7, 0x3f6, 0xffff343f, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)

5m49.948461953s ago: executing program 1 (id=19):
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x7, 0x10, 0x7, 0x8000}, {0x7f, 0x1, 0xf3, 0x1}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000180)='GPL\x00', 0x9, 0x88, &(0x7f0000000000)=""/136}, 0x90)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00')
preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0xffffffff, 0x5)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1)
sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="130f000000000000f6ff06"], 0x18}}, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)
inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x1000002a)

5m48.566642886s ago: executing program 32 (id=19):
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x7, 0x10, 0x7, 0x8000}, {0x7f, 0x1, 0xf3, 0x1}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000180)='GPL\x00', 0x9, 0x88, &(0x7f0000000000)=""/136}, 0x90)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00')
preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0xffffffff, 0x5)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1)
sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="130f000000000000f6ff06"], 0x18}}, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)
inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x1000002a)

14.089900803s ago: executing program 5 (id=1992):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0x4008af25, 0x604000000000000)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xfffff000, 0xd, 0x0, &(0x7f0000000140)="1b22c0f264e51439725b0419a1", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x12}, 0x50)
futex(&(0x7f0000000240)=0x2, 0x4, 0x2, &(0x7f0000000280)={0x77359400}, &(0x7f00000002c0)=0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffe3}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, 0xffffffffffffffff)
r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x80000)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x6, 0x3, 0x4005, 0x4ddf, 0x7f})

13.86607395s ago: executing program 5 (id=1993):
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
syz_open_procfs(0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x183341, 0x19d)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003})
r1 = socket$inet(0x2, 0x1, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x20000080)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)

13.713880965s ago: executing program 5 (id=1997):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
recvmsg$kcm(r3, 0x0, 0x2002)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)

12.396896396s ago: executing program 5 (id=2002):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

9.944710165s ago: executing program 2 (id=2014):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x34, r4, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}]}]}, 0x34}}, 0x0)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x1fff, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0)

9.943710185s ago: executing program 4 (id=2025):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x8}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

9.879740976s ago: executing program 2 (id=2015):
socket(0xa, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101400, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x300, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x1000000f, 0x80000006}, 0x0, 0x0)

8.821668221s ago: executing program 2 (id=2020):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e)
connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0xc0001, 0x0)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, r2)
ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000340)=0x1)
close(r2)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r4, 0xffffffffffffffff, 0x0)

8.772667142s ago: executing program 4 (id=2021):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r3, 0x13)
tkill(r3, 0x12)
waitid(0x1, r3, 0x0, 0x8, &(0x7f00000003c0))

8.650355686s ago: executing program 2 (id=2033):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005980)=ANY=[], 0x3, 0x5505, &(0x7f0000000340)="$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")
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r3, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x20, 0x4}, [], {}, [], {0x10, 0x7}}, 0x24, 0x2)

7.551198501s ago: executing program 4 (id=2024):
socket$nl_route(0x10, 0x3, 0x0)
fsopen(&(0x7f0000000080)='gadgetfs\x00', 0x0)
syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0)

5.090499509s ago: executing program 0 (id=2026):
syz_open_dev$dri(0x0, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

5.079425999s ago: executing program 3 (id=2027):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10)
sendto$inet(r1, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6)
r2 = fcntl$dupfd(r1, 0x406, r1)
sendmmsg$inet(r2, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001a00)="04", 0x1}, {0x0}], 0x2, &(0x7f0000001c40)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x8000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x2, 0x0)

4.974768203s ago: executing program 4 (id=2028):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r3 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="140012800b000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x44000)

4.962963583s ago: executing program 3 (id=2029):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x34, r4, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}]}]}, 0x34}}, 0x0)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x1fff, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0)

2.602395028s ago: executing program 5 (id=2030):
socket(0xa, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101400, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x300, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x1000000f, 0x80000006}, 0x0, 0x0)

2.601569438s ago: executing program 0 (id=2041):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x34, r4, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}]}]}, 0x34}}, 0x0)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x1fff, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0)

2.586532278s ago: executing program 2 (id=2042):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "b86290069962eb21", "c0ca6b79955b9fcb0f8045ab47a09c4b4a94ff7ad3d8b71e5492e37315f600d4", "e421626a", "85866235ad1782a2"}, 0x38)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
sendmsg$sock(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000800)="45f3fc01734be4dace625cdce1ea5770f7b6ebae98e83f3984a975eb9f0c886a9bba371b1e6d1da14af738897155123fe874c695ecbb8ed9583db78f8b1cf298b8aa88d4b0a68aa022e4d89e7a514adcc7f43e5e75c2ddfd51aab6e1a7b4824eb444e0630a9ea60d9f7aee048f1f699e4633fa5030af1e8c24c6aad8863973a6c1a0eaeb277f73c836653be35b99e6c2678b2afeaba065f209de87f27f1c9a03d19b7881c74db99e2b2e8d6769d87a9d", 0xb0}, {&(0x7f00000008c0)="dff95f2d34e0d4086448fd169e8bea26d66a768833c50eac291ec9fb81bedcf7872c89492ee390babe6c2953aa638513ebffa1394bad2e2a8c5067175034f4d6195c21db8eff31fa7e27c150f54be7a52b7ad84eef2d2f4a5e1dfdadd023d62ef53a4f204609f0a543d71d46ad11f5c2bdf9d444f92f857feda13be6a8c0035bf070ca10b07b", 0x86}, {&(0x7f0000000980)="2022e5b1280a3048817f01ca19f10357cb125ae96828855839c1aa08d1f11c50ac3c734a59e12316abc72a51988876f4a0172558492e5eaf7198e6159c34a79f7783c066bad0deda4d8edb2253a30dc64dc88347726bfbb5ff96b1864a2137490881df560b84be6d3b180f2cdb6ee2647c0e58d8b9971d6feea60922260d35a5dec20060b9102aaebf0a876403f822e240724ef1818b62ce172d3599079e2d6f89a8ff3a92d070e8342ba264bef1d00ee9f12ec57cf024259a4af27e27288f8a9abe5ccfacd3989c687ae274b0429cf42d30ca5e7144ee8d98eeecf2", 0xdc}, {&(0x7f0000000a80)="2a14001468be6b63db5b195406863ab3f7bb62e12bf40925ffad21597ba4ca6616a85e3c51b8b546e8c3191b15d6f6d8dbb3b1961a9ea71aa8f7f8161df4457f98271fc2a0dc642af9a31d9c796b2dcdfe3b04ad6b00448fbcffea00affb0e7316012881c013814a7d1c8f39300cd4be19f58ac3a9db8065ca96db6833600a3299e340613cf2fb3fac5c8a37d46a22bfb29a535ea74a4ae3332f181560d692508919fe5c0d1c9afb270e95b4a89d1411c5c448614794b3615b5dde97ac2aaed0a91cb3180f926b778a4d8bf56cff428288096f6b67c6bdce1c899a1eab4246e4", 0xe0}, {&(0x7f0000000bc0)="f4ff61f572ec7253e91dacb58ff963155b432532b291fc96aec349b9a6e4f244ce5548981a58032121b10123a9fff31081d345b5f28f64a547379640f920200e", 0x40}, {&(0x7f0000000c80)="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", 0xccf}, {0x0}], 0x7}, 0x80)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0)

2.577937459s ago: executing program 3 (id=2043):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005980)=ANY=[], 0x3, 0x5505, &(0x7f0000000340)="$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")
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r3, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x20, 0x4}, [], {}, [], {0x10, 0x7}}, 0x24, 0x2)

2.568639969s ago: executing program 4 (id=2044):
openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
socket(0x15, 0x80000, 0x1d8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmsg(r0, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x2}}, 0x2e)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x4c, &(0x7f0000000080)={@random="a70b49c5294f", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @empty, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "00000000ffff"}}}}}}}, 0x0)
recvmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}, 0x3}, {{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x1d5}], 0x2, 0x45833af92e4b39ff, 0x0)

2.053163865s ago: executing program 5 (id=2031):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)
listen(0xffffffffffffffff, 0x7f)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x30}], 0x1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)

2.052995475s ago: executing program 2 (id=2032):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0x118, 0xb, 0x148, 0x0, 0x148, 0x1a8, 0x230, 0x242, 0x1a8, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0xff000000, 0xffffffff, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0xe8, 0x118, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@helper={{0x48}, {0x1, 'syz1\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0xfc}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00', {}, {}, 0x89, 0x1, 0x3a}, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0)

589.603802ms ago: executing program 3 (id=2034):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0x28, 0x5, 0x0)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040), 0x10)
listen(r1, 0x4)
connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0)
r2 = accept4$unix(r1, 0x0, 0x0, 0x800)
recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0x1ffd4, 0x12, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0)
recvmmsg(r3, &(0x7f0000000740)=[{{&(0x7f00000000c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000240)=""/140, 0x8c}], 0x5, 0x0, 0x7}}], 0x4000000000000b7, 0x2, 0x0)

551.783593ms ago: executing program 0 (id=2035):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000002c0)={0x41, 0x0, 0x2}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0)

460.429036ms ago: executing program 0 (id=2036):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x11, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
close(r4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084)

392.756998ms ago: executing program 3 (id=2037):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x8)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0x10, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010)

376.704218ms ago: executing program 4 (id=2038):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r5, r4, 0x7}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20)
write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x200000714f, 0x0)
sendmmsg$inet6(r3, &(0x7f0000005ec0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000540)="c8603ee1", 0x4}], 0x1}}], 0x1, 0x1)

198.257624ms ago: executing program 0 (id=2039):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x44, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x14}}, {0x14, 0x4, @remote}}}]}]}, 0x44}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)

149.22µs ago: executing program 0 (id=2040):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x7ad3db81}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x64049}, 0x40000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80)

0s ago: executing program 3 (id=2045):
socket$nl_route(0x10, 0x3, 0x0)
r0 = epoll_create1(0x80000)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
write$cgroup_int(r2, 0x0, 0x0)
close(r1)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$sock(r3, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @empty, 0x3}, 0x80, 0x0}, 0x4085)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xa002a008})

kernel console output (not intermixed with test programs):

lready exists on: batadv_slave_1
[   92.979329][ T4340] asix: probe of 3-1:0.34 failed with error -71
[   92.985997][ T4371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.018703][ T4340] usb 3-1: USB disconnect, device number 3
[   93.025871][ T4371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.069533][ T4371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.126237][ T4371] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.201832][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   93.220726][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   93.272253][ T4371] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.281717][ T4371] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.310057][ T4371] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.320952][ T4371] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.508535][ T4522] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   93.600322][ T4459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.608412][ T4459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.671891][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   93.744690][ T4459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.766628][ T4459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.768742][ T4522] usb 5-1: Using ep0 maxpacket: 32
[   93.815672][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   93.911744][ T4522] usb 5-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.118494][ T4522] usb 5-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   94.131857][ T4522] usb 5-1: config 0 interface 0 has no altsetting 0
[   94.138579][ T4522] usb 5-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00
[   94.147640][ T4522] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.189676][ T4522] usb 5-1: config 0 descriptor??
[   95.060633][ T4522] hid-generic 0003:0458:5014.0001: item fetching failed at offset 5/39
[   95.139058][ T4522] hid-generic: probe of 0003:0458:5014.0001 failed with error -22
[   95.200818][ T4692] Set syz0 is full, maxelem 0 reached
[   95.208406][ T4692] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   95.238624][ T4684] netlink: 'syz.5.21': attribute type 1 has an invalid length.
[   95.330727][ T4689] 8021q: VLANs not supported on gre0
[   95.396603][ T4700] capability: warning: `syz.0.93' uses deprecated v2 capabilities in a way that may be insecure
[   95.409741][ T4663] udc-core: couldn't find an available UDC or it's busy
[   95.416734][ T4663] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   95.434851][   T13] usb 5-1: USB disconnect, device number 3
[   95.816107][ T4717] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   96.293242][ T4748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.105'.
[   96.551526][ T4734] loop4: detected capacity change from 0 to 2048
[   96.561492][ T4759] tipc: Started in network mode
[   96.580555][ T4759] tipc: Node identity 4, cluster identity 4711
[   96.594694][ T4759] tipc: Node number set to 4
[   96.712302][ T4734]  loop4: p1 p2 p3
[   96.712302][ T4734]  p1: <netbsd: p5 (ignored 752 more) >
[   96.785477][ T4769] syz.3.111 uses obsolete (PF_INET,SOCK_PACKET)
[   96.812659][ T4734] loop4: p2 size 458752 extends beyond EOD, truncated
[   96.846035][ T4734] loop4: p3 start 65280 is beyond EOD, truncated
[   97.221884][ T4778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.112'.
[   97.265580][ T4261] udevd[4261]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[   97.291620][ T4326] udevd[4326]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   97.307320][ T4778] device lo entered promiscuous mode
[   97.335914][ T4778] device tunl0 entered promiscuous mode
[   97.367997][ T4778] device gre0 entered promiscuous mode
[   97.395885][ T4778] device gretap0 entered promiscuous mode
[   97.403664][ T4781] loop4: detected capacity change from 0 to 512
[   97.416883][ T4778] device erspan0 entered promiscuous mode
[   97.436692][ T4778] device ip_vti0 entered promiscuous mode
[   97.490862][ T4778] device ip6_vti0 entered promiscuous mode
[   97.522792][ T4778] device sit0 entered promiscuous mode
[   97.543906][ T4261] udevd[4261]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[   97.559629][ T4778] device ip6tnl0 entered promiscuous mode
[   97.581894][ T4326] udevd[4326]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   97.739383][ T4778] device ip6gre0 entered promiscuous mode
[   97.746002][ T4778] device syz_tun entered promiscuous mode
[   97.753337][ T4778] device ip6gretap0 entered promiscuous mode
[   97.761963][ T4778] device bridge0 entered promiscuous mode
[   97.769880][ T4778] device vcan0 entered promiscuous mode
[   97.771499][ T4781] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.113: invalid indirect mapped block 4294967295 (level 1)
[   97.775575][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   97.800680][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   97.808289][ T4778] device bond0 entered promiscuous mode
[   97.816291][ T4778] device bond_slave_0 entered promiscuous mode
[   97.823084][ T4778] device bond_slave_1 entered promiscuous mode
[   97.873161][ T4778] device team0 entered promiscuous mode
[   97.915415][ T4778] device team_slave_0 entered promiscuous mode
[   97.935993][ T4781] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.113: invalid indirect mapped block 4294967295 (level 1)
[   97.953877][ T4778] device team_slave_1 entered promiscuous mode
[   97.974346][ T4778] device dummy0 entered promiscuous mode
[   98.015771][ T4778] device nlmon0 entered promiscuous mode
[   98.047725][ T4781] EXT4-fs (loop4): 2 truncates cleaned up
[   98.062676][ T4778] device caif0 entered promiscuous mode
[   98.092130][ T4778] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   98.113800][ T4781] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000004004,barrier=0x0000000000000005,,errors=continue. Quota mode: writeback.
[   98.159367][ T4780] netlink: 4 bytes leftover after parsing attributes in process `syz.5.112'.
[   98.281442][ T4764] loop0: detected capacity change from 0 to 32768
[   98.385971][ T4780] device team_slave_0 left promiscuous mode
[   98.417776][ T4764] (syz.0.109,4764,1):ocfs2_slot_map_physical_size:223 ERROR: Slot map file is too small!  (size 2, needed 8)
[   98.490443][ T4780] team0 (unregistering): Port device team_slave_0 removed
[   98.525822][ T4780] device team_slave_1 left promiscuous mode
[   98.591942][ T4780] team0 (unregistering): Port device team_slave_1 removed
[   98.678305][ T4795] (unnamed net_device) (uninitialized): up delay (7) is not a multiple of miimon (10), value rounded to 0 ms
[   98.679043][   T13] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   98.707639][ T4795] (unnamed net_device) (uninitialized): down delay (2) is not a multiple of miimon (10), value rounded to 0 ms
[   98.770693][ T4795] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[   99.120248][   T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   99.138722][   T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   99.141107][   T13] usb 5-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00
[   99.169191][   T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.213752][   T13] usb 5-1: config 0 descriptor??
[   99.261771][   T13] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[   99.418972][   T21] usb 1-1: Using ep0 maxpacket: 8
[   99.564875][   T21] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[   99.575680][   T21] usb 1-1: config 0 has no interface number 0
[   99.596002][   T13] usb 5-1: USB disconnect, device number 4
[   99.800568][   T21] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   99.844816][ T4819] netlink: 32 bytes leftover after parsing attributes in process `syz.5.117'.
[   99.857954][ T4819] netlink: 32 bytes leftover after parsing attributes in process `syz.5.117'.
[  100.227003][   T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.267460][   T21] usb 1-1: Product: syz
[  100.309004][   T21] usb 1-1: Manufacturer: syz
[  100.352358][   T21] usb 1-1: SerialNumber: syz
[  100.369594][   T21] usb 1-1: config 0 descriptor??
[  100.630102][ T4800] netlink: 16 bytes leftover after parsing attributes in process `syz.0.115'.
[  100.746427][   T21] usb 1-1: USB disconnect, device number 2
[  100.863857][ T4843] loop4: detected capacity change from 0 to 512
[  100.922852][ T4843] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  100.989278][ T4843] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3894: comm syz.4.121: Allocating blocks 41-42 which overlap fs metadata
[  101.021914][ T4843] EXT4-fs (loop4): Remounting filesystem read-only
[  101.048995][ T4843] Quota error (device loop4): write_blk: dquota write failed
[  101.056950][ T4843] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5
[  101.066785][ T4843] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3894: comm syz.4.121: Allocating blocks 41-42 which overlap fs metadata
[  101.099262][ T4843] EXT4-fs (loop4): Remounting filesystem read-only
[  101.124409][ T4843] Quota error (device loop4): write_blk: dquota write failed
[  101.133048][ T4843] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  101.153584][ T4843] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.121: Failed to acquire dquot type 1
[  101.188895][ T4843] EXT4-fs (loop4): Remounting filesystem read-only
[  101.248943][ T4843] EXT4-fs error (device loop4): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  101.345592][ T4843] EXT4-fs (loop4): Remounting filesystem read-only
[  101.391825][ T4843] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.121: corrupted inode contents
[  101.500389][ T4843] EXT4-fs (loop4): Remounting filesystem read-only
[  101.517682][ T4843] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #12: comm syz.4.121: mark_inode_dirty error
[  101.569065][ T4843] EXT4-fs (loop4): Remounting filesystem read-only
[  101.601300][ T4843] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.121: corrupted inode contents
[  101.654795][ T4843] EXT4-fs (loop4): Remounting filesystem read-only
[  101.678778][ T4843] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #12: comm syz.4.121: mark_inode_dirty error
[  101.740626][ T4843] EXT4-fs (loop4): Remounting filesystem read-only
[  101.764982][ T4843] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.121: corrupted inode contents
[  101.845017][ T4843] EXT4-fs (loop4): Remounting filesystem read-only
[  101.878678][ T4843] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  101.919208][ T4843] EXT4-fs (loop4): Remounting filesystem read-only
[  101.949066][ T4843] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.121: corrupted inode contents
[  102.032457][ T4843] EXT4-fs (loop4): Remounting filesystem read-only
[  102.039147][ T4843] EXT4-fs error (device loop4): ext4_truncate:4286: inode #12: comm syz.4.121: mark_inode_dirty error
[  102.112282][ T4843] EXT4-fs (loop4): Remounting filesystem read-only
[  102.148864][ T4843] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  102.208535][ T4843] EXT4-fs (loop4): Remounting filesystem read-only
[  102.220296][ T4843] EXT4-fs (loop4): 1 truncate cleaned up
[  102.265404][ T4843] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,errors=remount-ro,noinit_itable,abort,noauto_da_alloc,max_dir_size_kb=0x0000000000000006,resgid=0x00000000000000002. Quota mode: writeback.
[  102.298251][ T4872] loop2: detected capacity change from 0 to 32768
[  102.342407][ T4872] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.129 (4872)
[  102.427065][ T4872] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  102.483743][ T4872] BTRFS info (device loop2): setting nodatasum
[  102.515168][ T4872] BTRFS info (device loop2): force zlib compression, level 3
[  102.544531][ T4872] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  102.580498][ T4872] BTRFS info (device loop2): use lzo compression, level 0
[  102.602284][ T4872] BTRFS info (device loop2): turning on flush-on-commit
[  102.626745][ T4872] BTRFS info (device loop2): enabling auto defrag
[  102.655712][ T4872] BTRFS info (device loop2): max_inline at 4096
[  102.676049][ T4872] BTRFS info (device loop2): force zlib compression, level 3
[  102.709635][ T4872] BTRFS info (device loop2): using free space tree
[  102.731259][ T4872] BTRFS info (device loop2): has skinny extents
[  103.045304][ T4872] BTRFS info (device loop2): enabling ssd optimizations
[  103.098248][   T26] audit: type=1800 audit(1781622578.223:4): pid=4872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.129" name="file1" dev="loop2" ino=260 res=0 errno=0
[  103.172790][   T26] audit: type=1800 audit(1781622578.273:5): pid=4918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.129" name="file1" dev="loop2" ino=260 res=0 errno=0
[  103.276400][   T26] audit: type=1800 audit(1781622578.383:6): pid=4918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.129" name="file1" dev="loop2" ino=260 res=0 errno=0
[  103.497050][ T4926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.140'.
[  103.904903][ T4933] tipc: Failed to remove unknown binding: 66,0,0/0:793391052/793391053
[  103.957582][ T4937] tipc: Failed to remove unknown binding: 66,0,0/0:793391052/793391053
[  104.294597][ T4949] loop0: detected capacity change from 0 to 2048
[  104.366482][ T4949] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  104.481854][ T4949] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  104.555245][ T4947] loop2: detected capacity change from 0 to 40427
[  104.606295][ T4947] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  104.615765][ T4947] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  104.628542][ T4947] F2FS-fs (loop2): invalid crc value
[  104.638612][ T4341] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  104.667741][ T4947] F2FS-fs (loop2): Found nat_bits in checkpoint
[  104.762035][ T4947] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  104.769524][ T4947] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  104.888577][ T4930] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  105.119989][ T4191] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  105.120059][ T4191] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  105.138805][ T4930] usb 1-1: Using ep0 maxpacket: 16
[  105.174222][ T4957] attempt to access beyond end of device
[  105.174222][ T4957] loop2: rw=10241, want=45104, limit=40427
[  105.188642][ T4957] attempt to access beyond end of device
[  105.188642][ T4957] loop2: rw=2049, want=45112, limit=40427
[  105.212369][ T4957] syz.2.147 (4957) used greatest stack depth: 21008 bytes left
[  105.238562][ T4191] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  105.238593][ T4191] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  105.258170][ T4962] tipc: Failed to remove unknown binding: 66,1,1/4:1370111667/1370111669
[  105.260947][ T4191] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  105.272651][ T4962] tipc: Failed to remove unknown binding: 66,1,1/4:1370111667/1370111669
[  105.292411][ T4962] tipc: Failed to remove unknown binding: 66,1,1/4:1370111667/1370111669
[  105.299802][ T4930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  105.318889][ T4341] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  105.327979][ T4341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.336240][ T4191] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  105.336259][ T4191] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  105.371705][ T4341] usb 5-1: Product: syz
[  105.390708][ T4341] usb 5-1: Manufacturer: syz
[  105.396448][ T4341] usb 5-1: SerialNumber: syz
[  105.405609][ T4341] usb 5-1: config 0 descriptor??
[  105.469633][ T4341] hub 5-1:0.0: bad descriptor, ignoring hub
[  105.485849][ T4341] hub: probe of 5-1:0.0 failed with error -5
[  105.489441][ T4930] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  105.523849][ T4930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.554510][ T4930] usb 1-1: Product: syz
[  105.568539][ T4930] usb 1-1: Manufacturer: syz
[  105.582217][ T4930] usb 1-1: SerialNumber: syz
[  105.609392][ T4930] usb 1-1: config 0 descriptor??
[  105.665688][ T4930] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  105.689822][ T4930] em28xx 1-1:0.0: DVB interface 0 found: bulk
[  105.708717][ T4341] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  105.758606][ T4341] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  105.809128][ T4341] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  105.818122][ T4341] usb 5-1: media controller created
[  105.824406][ T4968] sch_tbf: burst 21990 is lower than device lo mtu (65550) !
[  105.922082][ T4341] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  105.953062][ T4939] dib0700: tx buffer length is larger than 4. Not supported.
[  105.988803][ T4930] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  106.148700][ T4930] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  106.164251][ T4930] em28xx 1-1:0.0: board has no eeprom
[  106.175659][ T4341] DVB: Unable to find symbol dib7000p_attach()
[  106.185791][ T4341] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  106.328728][ T4930] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  106.338318][ T4930] em28xx 1-1:0.0: dvb set to bulk mode.
[  106.390120][ T4520] em28xx 1-1:0.0: Binding DVB extension
[  106.407130][ T4930] usb 1-1: USB disconnect, device number 3
[  106.418557][ T4341] rc_core: IR keymap rc-dib0700-rc5 not found
[  106.424698][ T4341] Registered IR keymap rc-empty
[  106.438017][ T4930] em28xx 1-1:0.0: Disconnecting em28xx
[  106.511852][ T4341] dvb-usb: could not initialize remote control.
[  106.518172][ T4341] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[  106.561987][ T4520] em28xx 1-1:0.0: Registering input extension
[  106.571301][ T4930] em28xx 1-1:0.0: Closing input extension
[  106.610478][ T4341] usb 5-1: USB disconnect, device number 5
[  106.677037][ T4930] em28xx 1-1:0.0: Freeing device
[  106.717028][ T4990] "syz.4.159" (4990) uses obsolete ecb(arc4) skcipher
[  106.732679][ T4341] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[  107.025904][ T4930] hid-generic 0005:0007:0007.0002: hidraw0: BLUETOOTH HID v0.03 Device [syz0] on aa:aa:aa:aa:aa:aa
[  107.226112][ T5008] fido_id[5008]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory
[  107.265547][ T5013] virtio-fs: tag </dev/nullb0> not found
[  107.899230][ T5011] loop0: detected capacity change from 0 to 32768
[  108.033146][ T5011] XFS (loop0): Mounting V5 Filesystem
[  108.221930][ T5051] loop4: detected capacity change from 0 to 64
[  108.241122][ T5011] XFS (loop0): Ending clean mount
[  108.576742][ T4188] XFS (loop0): Unmounting Filesystem
[  108.648805][ T5044] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.658406][ T5044] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.698519][ T4520] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  108.966914][ T4520] usb 3-1: Using ep0 maxpacket: 16
[  109.254484][ T4520] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  109.264463][ T4520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.278618][ T4520] usb 3-1: Product: syz
[  109.283148][ T4520] usb 3-1: Manufacturer: syz
[  109.288046][ T4520] usb 3-1: SerialNumber: syz
[  109.306081][ T4520] usb 3-1: config 0 descriptor??
[  109.350539][ T4520] visor 3-1:0.0: Sony Clie 3.5 converter detected
[  109.590081][ T5044] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  109.654787][ T5044] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  109.814681][ T4520] usb 3-1: Sony Clie 3.5 converter now attached to ttyUSB0
[  110.247294][ T5044] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.261372][ T5044] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.270647][ T5044] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.279736][ T5044] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.452434][    C0] Unknown status report in ack skb
[  110.498131][ T4524] usb 3-1: USB disconnect, device number 4
[  110.535671][ T4524] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0
[  110.587670][ T4524] visor 3-1:0.0: device disconnected
[  111.334964][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  111.355397][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  111.376528][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  111.399288][ T5116] device bridge_slave_0 left promiscuous mode
[  111.419291][ T5116] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.463355][ T5116] device bridge_slave_1 left promiscuous mode
[  111.498812][ T5116] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.559519][ T5116] bond0: (slave bond_slave_0): Releasing backup interface
[  111.625293][ T5116] bond0: (slave bond_slave_1): Releasing backup interface
[  111.765390][ T5116] team0: Port device team_slave_0 removed
[  111.804754][ T5116] team0: Port device team_slave_1 removed
[  111.819566][ T5116] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.830618][ T5116] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.850634][ T5116] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.870803][ T5116] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.937611][ T5100] bond1: (slave veth3): Enslaving as an active interface with a down link
[  111.983734][ T5111] netlink: 12 bytes leftover after parsing attributes in process `syz.5.189'.
[  112.016038][ T5111] device bond1 entered promiscuous mode
[  112.047248][ T5111] 8021q: adding VLAN 0 to HW filter on device bond1
[  112.076569][ T5118] team0: Port device xfrm0 added
[  112.149508][ T5118] syz.0.195 (5118) used greatest stack depth: 20464 bytes left
[  112.172132][ T5122] tipc: Started in network mode
[  112.178047][ T5122] tipc: Node identity da404c365995, cluster identity 4711
[  112.211121][ T5122] tipc: Enabled bearer <eth:team0>, priority 0
[  112.377528][ T5133] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  113.216889][ T5136] loop0: detected capacity change from 0 to 32768
[  113.232407][ T4231] tipc: Node number set to 2211793974
[  113.311967][ T5136] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.200 (5136)
[  113.387562][ T5136] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  113.459239][ T5136] BTRFS info (device loop0): setting nodatacow, compression disabled
[  113.467394][ T5136] BTRFS info (device loop0): turning on flush-on-commit
[  113.504194][ T5136] BTRFS info (device loop0): trying to use backup root at mount time
[  113.523330][ T5136] BTRFS info (device loop0): max_inline at 0
[  113.536281][ T5136] BTRFS info (device loop0): using free space tree
[  113.569610][ T5136] BTRFS info (device loop0): has skinny extents
[  113.613958][ T5168] Illegal XDP return value 514474300, expect packet loss!
[  113.788780][  T154] BTRFS warning (device loop0): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0
[  113.818914][ T5136] BTRFS warning (device loop0): failed to read root (objectid=2): -5
[  113.827642][  T144] BTRFS warning (device loop0): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0
[  113.841428][ T5136] BTRFS warning (device loop0): couldn't read tree root
[  113.852451][ T5136] BTRFS error (device loop0): parent transid verify failed on 5255168 wanted 5 found 7
[  113.862930][ T5136] BTRFS warning (device loop0): couldn't read tree root
[  113.913288][ T5136] BTRFS info (device loop0): enabling ssd optimizations
[  113.928941][ T5136] BTRFS info (device loop0): clearing free space tree
[  113.935821][ T5136] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  113.948603][ T5136] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  114.037414][ T5136] BTRFS info (device loop0): creating free space tree
[  114.066587][ T5136] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  114.103816][ T5136] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  114.689937][ T4232] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  114.929676][ T4232] usb 6-1: Using ep0 maxpacket: 16
[  115.048885][ T4232] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  115.093371][ T4232] usb 6-1: config 0 has no interfaces?
[  115.248850][ T4232] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  115.268185][ T4232] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  115.307545][ T4232] usb 6-1: Product: syz
[  115.328638][ T4232] usb 6-1: SerialNumber: syz
[  115.364900][ T4232] usb 6-1: config 0 descriptor??
[  115.450418][ T5236] overlayfs: failed to resolve './file1': -2
[  115.649430][ T5209] loop2: detected capacity change from 0 to 7
[  115.745316][ T5209] Dev loop2: unable to read RDB block 7
[  115.759849][ T5242] sctp: [Deprecated]: syz.0.215 (pid 5242) Use of struct sctp_assoc_value in delayed_ack socket option.
[  115.759849][ T5242] Use struct sctp_sack_info instead
[  115.776423][ T5209]  loop2: unable to read partition table
[  115.786002][ T5209] loop2: partition table beyond EOD, truncated
[  115.819764][ T5209] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  115.820186][ T5245] sctp: [Deprecated]: syz.0.215 (pid 5245) Use of struct sctp_assoc_value in delayed_ack socket option.
[  115.820186][ T5245] Use struct sctp_sack_info instead
[  115.881681][ T3561] Dev loop2: unable to read RDB block 7
[  115.904479][ T3561]  loop2: unable to read partition table
[  115.925022][ T3561] loop2: partition table beyond EOD, truncated
[  115.948209][ T5228] usb 6-1: USB disconnect, device number 2
[  116.985514][ T5287] netlink: 156 bytes leftover after parsing attributes in process `syz.3.232'.
[  117.004501][ T4232] hid-generic 0005:0007:0007.0003: hidraw0: BLUETOOTH HID v0.03 Device [syz0] on aa:aa:aa:aa:aa:aa
[  117.038406][ T5291] netlink: 156 bytes leftover after parsing attributes in process `syz.3.232'.
[  117.084562][ T5287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.232'.
[  117.224030][ T5295] fido_id[5295]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory
[  117.324559][ T5303] overlayfs: failed to clone upperpath
[  117.908687][ T5321] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  118.320287][ T5334] loop2: detected capacity change from 0 to 4096
[  118.481612][ T5334] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  118.538012][ T5348] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  118.565626][   T26] audit: type=1800 audit(1781622593.693:7): pid=5334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.243" name="file1" dev="loop2" ino=15 res=0 errno=0
[  120.052396][ T5402] netlink: 12 bytes leftover after parsing attributes in process `syz.5.258'.
[  120.090273][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready
[  120.193194][  T144] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex
[  120.244951][  T144] bond1: (slave veth3): making interface the new active one
[  120.310746][  T144] device veth3 entered promiscuous mode
[  120.378879][  T144] bond1: active interface up!
[  120.392043][ T5412] fuse: Bad value for 'fd'
[  120.403150][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  120.932672][ T5398] loop2: detected capacity change from 0 to 40427
[  121.024169][ T5398] F2FS-fs (loop2): invalid crc value
[  121.082700][ T5398] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  121.289640][ T5398] F2FS-fs (loop2): Start checkpoint disabled!
[  121.333424][ T5398] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  121.541907][    T9] attempt to access beyond end of device
[  121.541907][    T9] loop2: rw=2049, want=45104, limit=40427
[  122.312342][ T5425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.262'.
[  122.642965][ T5430] loop5: detected capacity change from 0 to 512
[  123.056194][ T5430] EXT4-fs (loop5): Test dummy encryption mode enabled
[  123.070695][ T5430] EXT4-fs (loop5): Test dummy encryption mode enabled
[  123.113856][ T5430] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  123.151580][ T5430] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,dioread_nolock,jqfmt=vfsv1,nojournal_checksum,minixdf,barrier=0x0000000000000a18,errors=remount-ro,lazytime,test_dummy_encryption,min_batch_time=0x0000000000000004,. Quota mode: none.
[  123.519360][ T1111] usb 6-1: new low-speed USB device number 3 using dummy_hcd
[  123.653720][ T5467] loop2: detected capacity change from 0 to 4096
[  123.948812][ T1111] usb 6-1: config index 0 descriptor too short (expected 6427, got 27)
[  123.961006][ T1111] usb 6-1: config 0 has an invalid interface number: 21 but max is 0
[  123.969733][ T1111] usb 6-1: config 0 has no interface number 0
[  123.975975][ T1111] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[  123.986713][ T1111] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  123.996936][ T1111] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.015673][ T1111] usb 6-1: config 0 descriptor??
[  124.050722][ T5430] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  124.174770][ T5475] loop0: detected capacity change from 0 to 64
[  124.374712][ T5475] hfs: request for non-existent node 131072 in B*Tree
[  124.383329][ T5475] hfs: request for non-existent node 131072 in B*Tree
[  124.573480][ T5475] hfs: request for non-existent node 131072 in B*Tree
[  124.710057][ T5475] hfs: request for non-existent node 131072 in B*Tree
[  125.279032][ T1111] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.21/input/input7
[  125.381374][ T5490] hfs: request for non-existent node 131072 in B*Tree
[  125.409489][ T5495] netlink: 'syz.3.284': attribute type 3 has an invalid length.
[  125.452253][ T5495] netlink: 'syz.3.284': attribute type 3 has an invalid length.
[  125.461714][ T5490] hfs: request for non-existent node 131072 in B*Tree
[  125.499029][ T5499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.283'.
[  125.512204][ T5488] hfs: request for non-existent node 131072 in B*Tree
[  125.551785][ T4232] usb 6-1: USB disconnect, device number 3
[  125.558493][    C1] keyspan_remote 6-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[  125.574038][ T5488] hfs: request for non-existent node 131072 in B*Tree
[  125.902086][ T5518] device wg1 entered promiscuous mode
[  126.635828][ T5531] loop2: detected capacity change from 0 to 136
[  126.808207][ T5536] fuse: Bad value for 'fd'
[  126.908585][ T4524] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  127.164090][ T4524] usb 6-1: Using ep0 maxpacket: 16
[  127.291743][ T4524] usb 6-1: config 0 has an invalid interface number: 34 but max is 0
[  127.311519][ T4524] usb 6-1: config 0 has no interface number 0
[  127.329045][ T4524] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  127.358606][ T4524] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  127.528776][ T4524] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  127.547759][ T4524] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.566210][ T4524] usb 6-1: Product: syz
[  127.576336][ T4524] usb 6-1: Manufacturer: syz
[  127.583358][ T4524] usb 6-1: SerialNumber: syz
[  127.609398][ T4524] usb 6-1: config 0 descriptor??
[  127.629767][ T5533] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  127.636891][ T5533] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  127.742928][ T5581] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  127.873469][ T5533] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  127.885559][ T5533] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  128.128773][ T4524] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  129.742594][ T5603] tipc: Failed to remove unknown binding: 66,0,0/0:1406058630/1406058631
[  129.771552][ T5603] tipc: Failed to remove unknown binding: 66,0,0/0:1406058630/1406058631
[  130.348907][ T4524] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  130.370151][ T4524] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  130.407750][ T4524] asix: probe of 6-1:0.34 failed with error -71
[  130.433622][ T4524] usb 6-1: USB disconnect, device number 4
[  130.518143][ T5631] device wg1 entered promiscuous mode
[  132.708268][ T5661] sctp: [Deprecated]: syz.5.338 (pid 5661) Use of struct sctp_assoc_value in delayed_ack socket option.
[  132.708268][ T5661] Use struct sctp_sack_info instead
[  132.745520][ T5661] sctp: [Deprecated]: syz.5.338 (pid 5661) Use of struct sctp_assoc_value in delayed_ack socket option.
[  132.745520][ T5661] Use struct sctp_sack_info instead
[  132.773041][ T1427] ieee802154 phy0 wpan0: encryption failed: -22
[  132.779797][ T1427] ieee802154 phy1 wpan1: encryption failed: -22
[  132.988732][ T2304] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  133.568739][ T2304] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  133.582514][ T2304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.592858][ T2304] usb 1-1: Product: syz
[  133.597212][ T2304] usb 1-1: Manufacturer: syz
[  133.606470][ T2304] usb 1-1: SerialNumber: syz
[  133.618341][ T2304] usb 1-1: config 0 descriptor??
[  133.659635][ T2304] hub 1-1:0.0: bad descriptor, ignoring hub
[  133.667475][ T2304] hub: probe of 1-1:0.0 failed with error -5
[  133.871862][ T5686] overlayfs: failed to clone upperpath
[  133.878517][ T2304] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  133.899619][ T2304] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  133.949057][ T2304] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  133.963203][ T2304] usb 1-1: media controller created
[  134.001565][ T2304] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  134.079670][ T5662] dib0700: tx buffer length is larger than 4. Not supported.
[  134.146994][ T2304] DVB: Unable to find symbol dib7000p_attach()
[  134.158223][ T2304] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  134.298803][ T2304] rc_core: IR keymap rc-dib0700-rc5 not found
[  134.307753][ T2304] Registered IR keymap rc-empty
[  134.311065][ T5709] VFS: Mount too revealing
[  134.321755][ T2304] dvb-usb: could not initialize remote control.
[  134.333015][ T2304] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[  134.371345][ T2304] usb 1-1: USB disconnect, device number 4
[  134.440083][ T2304] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[  134.769955][ T5721] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  134.790640][ T5725] binder_alloc: 5724: pid 5724 spamming oneway? 2 buffers allocated for a total size of 6144
[  135.507127][ T5750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.371'.
[  136.031851][ T5771] device bridge_slave_1 left promiscuous mode
[  136.079563][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.147881][ T5771] device bridge_slave_0 left promiscuous mode
[  136.234665][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.687088][ T5792] loop5: detected capacity change from 0 to 128
[  136.714872][ T5792] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  136.756147][ T5792] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  136.805157][ T5794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.385'.
[  136.819576][ T5794] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  136.834468][ T5794] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  137.170471][ T5805] bridge0: port 3(syz_tun) entered blocking state
[  137.182958][ T5805] bridge0: port 3(syz_tun) entered disabled state
[  137.198854][ T5805] device syz_tun entered promiscuous mode
[  137.223284][ T5805] bridge0: port 3(syz_tun) entered blocking state
[  137.229868][ T5805] bridge0: port 3(syz_tun) entered forwarding state
[  137.290856][ T5808] bridge0: port 3(syz_tun) entered learning state
[  137.311564][ T5805] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  137.541510][ T5822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.392'.
[  139.933546][ T5847] netlink: 12 bytes leftover after parsing attributes in process `syz.5.402'.
[  140.109531][ T5850] overlayfs: failed to clone upperpath
[  140.461439][ T5856] loop5: detected capacity change from 0 to 164
[  140.720007][ T5867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.410'.
[  141.517700][ T5885] netlink: 20 bytes leftover after parsing attributes in process `syz.5.417'.
[  141.608068][ T5888] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  141.995580][ T5902] netlink: 20 bytes leftover after parsing attributes in process `syz.2.423'.
[  142.045953][ T5902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  142.053899][ T5902] IPv6: NLM_F_CREATE should be set when creating new route
[  142.103610][ T5902] netlink: 20 bytes leftover after parsing attributes in process `syz.2.423'.
[  142.131745][ T5905] netlink: 'syz.4.424': attribute type 1 has an invalid length.
[  144.505734][ T5971] Set syz0 is full, maxelem 0 reached
[  144.542559][ T5971] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  145.194150][ T5989] fuse: Bad value for 'fd'
[  145.510689][ T5998] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  145.558737][ T5998] overlayfs: failed to set xattr on upper
[  145.608536][ T5998] overlayfs: ...falling back to index=off,metacopy=off.
[  145.620167][ T5998] overlayfs: conflicting lowerdir path
[  146.581651][ T6032] Set syz0 is full, maxelem 0 reached
[  146.858526][ T4523] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  146.934609][ T6046] loop5: detected capacity change from 0 to 1024
[  147.033233][ T6046] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  147.095807][ T6046] EXT4-fs (loop5): Errors on filesystem, clearing orphan list.
[  147.111306][ T6046] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  147.228736][ T4523] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  147.242531][ T4523] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  147.409020][ T4523] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  147.464470][ T4523] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.489630][ T4523] usb 1-1: Product: syz
[  147.514291][ T4523] usb 1-1: Manufacturer: syz
[  147.531255][ T4523] usb 1-1: SerialNumber: syz
[  147.547693][ T4523] usb 1-1: config 0 descriptor??
[  147.853618][ T6032] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  149.611410][ T5228] usb 1-1: USB disconnect, device number 5
[  149.798563][ T4232] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  149.808160][ T6102] bond1: (slave veth3): making interface the new active one
[  149.818111][ T6102] bond1: (slave veth3): Enslaving as an active interface with an up link
[  149.872911][ T6107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.497'.
[  149.928680][ T6107] 8021q: adding VLAN 0 to HW filter on device bond1
[  150.048620][ T4232] usb 6-1: Using ep0 maxpacket: 32
[  150.168891][ T4232] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  150.186171][ T4232] usb 6-1: config 0 has no interface number 0
[  150.379635][ T6123] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  150.379635][ T6123] The task syz.3.511 (6123) triggered the difference, watch for misbehavior.
[  150.403962][ T4232] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  150.427829][ T4232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.450663][ T4232] usb 6-1: Product: syz
[  150.454988][ T4232] usb 6-1: Manufacturer: syz
[  150.466090][ T4232] usb 6-1: SerialNumber: syz
[  150.493014][ T4232] usb 6-1: config 0 descriptor??
[  150.540051][ T4232] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  150.562670][ T4232] usb 6-1: selecting invalid altsetting 1
[  150.579809][ T4232] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  150.762246][ T4232] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  150.772767][ T4232] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  150.781159][ T4232] usb 6-1: media controller created
[  150.797265][ T4232] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  150.904271][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  151.098958][ T4232] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  151.143784][ T4232] zl10353_read_register: readreg error (reg=127, ret==-71)
[  151.274629][ T4232] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  151.791139][ T6139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.508'.
[  151.826913][ T4232] usb 6-1: USB disconnect, device number 5
[  152.590862][    C0] bridge0: port 3(syz_tun) entered forwarding state
[  154.684296][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.5.528'.
[  154.766411][ T6202] overlayfs: failed to clone upperpath
[  155.288653][ T6227] 9pnet: p9_errstr2errno: server reported unknown error 0x000000
[  157.772205][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807cca0000: rx timeout, send abort
[  158.149202][ T6273] Bluetooth: (null): Invalid header checksum
[  158.272276][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807cca0400: rx timeout, send abort
[  158.281934][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807cca0000: abort rx timeout. Force session deactivation
[  159.139391][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807cca3c00: rx timeout, send abort
[  159.148304][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807cca0400: abort rx timeout. Force session deactivation
[  159.159418][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807cca3c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  160.670487][ T6298] bridge0: port 3(syz_tun) entered disabled state
[  160.765384][ T6298] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.772919][ T6298] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.557584][ T6298] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  162.657462][ T6298] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.655981][ T6298] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.666620][ T6298] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.683253][ T6298] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.694311][ T6298] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.794250][ T6302] netlink: 'syz.0.565': attribute type 1 has an invalid length.
[  163.878467][ T6339] netlink: 156 bytes leftover after parsing attributes in process `syz.4.580'.
[  163.924977][ T6343] netlink: 156 bytes leftover after parsing attributes in process `syz.4.580'.
[  163.974820][ T6345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.580'.
[  166.036736][ T6417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.603'.
[  166.185539][ T6419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.604'.
[  166.413610][ T6421] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  166.520306][ T6424] loop5: detected capacity change from 0 to 4096
[  166.644924][ T6424] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  166.680867][   T26] audit: type=1800 audit(1781622641.803:8): pid=6424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.607" name="file1" dev="loop5" ino=15 res=0 errno=0
[  167.428533][ T4927] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  167.445503][ T6469] netlink: 'syz.4.626': attribute type 1 has an invalid length.
[  167.481358][ T6469] 8021q: adding VLAN 0 to HW filter on device bond1
[  167.506163][ T6469] bond1: (slave veth3): Enslaving as an active interface with a down link
[  167.533532][ T6469] bond1: (slave dummy0): making interface the new active one
[  167.571502][ T6469] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  167.648253][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  167.663494][ T6471] netlink: 'syz.4.626': attribute type 10 has an invalid length.
[  167.679899][ T6471] netlink: 40 bytes leftover after parsing attributes in process `syz.4.626'.
[  167.693025][ T6471] device dummy0 entered promiscuous mode
[  167.701376][ T4927] usb 6-1: Using ep0 maxpacket: 16
[  167.708678][ T6471] bond1: (slave dummy0): Releasing active interface
[  167.818763][ T4927] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  167.829153][ T4927] usb 6-1: config 0 has no interface number 0
[  168.044681][ T4927] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  168.054646][ T4927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.063285][ T4927] usb 6-1: Product: syz
[  168.067535][ T4927] usb 6-1: Manufacturer: syz
[  168.083418][ T6486] kvm: pic: non byte write
[  168.088018][ T4927] usb 6-1: SerialNumber: syz
[  168.095572][ T4927] usb 6-1: config 0 descriptor??
[  168.119218][ T6486] kvm: vcpu 0: requested 1920 ns lapic timer period limited to 200000 ns
[  168.141101][ T4927] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  168.148728][ T6486] kvm: pic: non byte write
[  168.552969][ T4520] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  168.839165][ T4520] usb 1-1: Using ep0 maxpacket: 16
[  168.968689][ T4520] usb 1-1: config index 0 descriptor too short (expected 52, got 36)
[  168.977801][ T4520] usb 1-1: config 0 has an invalid interface number: 251 but max is 0
[  168.986544][ T4520] usb 1-1: config 0 has no interface number 0
[  168.993094][ T4520] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  169.003446][ T4520] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  169.178768][ T4520] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  169.193170][ T4520] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.201736][ T4520] usb 1-1: Product: syz
[  169.205945][ T4520] usb 1-1: Manufacturer: syz
[  169.210986][ T4520] usb 1-1: SerialNumber: syz
[  169.218011][ T4520] usb 1-1: config 0 descriptor??
[  169.247213][ T6518] VFS: Mount too revealing
[  169.252204][ T6492] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  169.268657][ T6492] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  169.482526][ T6492] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  169.498659][ T6492] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  169.938606][ T4520] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  169.958464][ T4520] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71
[  169.997789][ T4520] asix: probe of 1-1:0.251 failed with error -71
[  170.011989][ T4520] usb 1-1: USB disconnect, device number 6
[  170.060513][   T26] audit: type=1326 audit(1781622645.183:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6523 comm="syz.4.647" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a21d8de59 code=0x0
[  170.308708][ T4927] gspca_spca1528: reg_r err -71
[  170.313686][ T4927] spca1528: probe of 6-1:0.1 failed with error -71
[  170.331595][ T4927] usb 6-1: USB disconnect, device number 6
[  171.063329][ T6547] device veth0_macvtap left promiscuous mode
[  171.152284][ T6553] ODEBUG: Out of memory. ODEBUG disabled
[  171.281683][ T6559] misc userio: The device must be registered before sending interrupts
[  171.519085][ T6547] syz.4.654 (6547) used greatest stack depth: 20368 bytes left
[  171.807382][ T6571] netlink: 'syz.5.663': attribute type 3 has an invalid length.
[  171.855745][ T6571] netlink: 'syz.5.663': attribute type 3 has an invalid length.
[  172.077270][ T6584] netlink: 20 bytes leftover after parsing attributes in process `syz.3.666'.
[  172.334609][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.5.670'.
[  172.365344][ T6594] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.382848][ T6594] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.399311][ T6594] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.409955][ T6594] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.501780][ T6597] bond1: option mode: unable to set because the bond device has slaves
[  172.538344][ T6601] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  172.622229][ T3854] device veth0_macvtap entered promiscuous mode
[  172.658661][ T4927] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  172.783193][ T6610] loop5: detected capacity change from 0 to 2048
[  172.842612][ T6610] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  172.890071][ T6610] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  173.058822][ T4927] usb 1-1: config 0 has an invalid interface number: 166 but max is 0
[  173.079487][ T4927] usb 1-1: config 0 has no interface number 0
[  173.085653][ T4927] usb 1-1: config 0 interface 166 has no altsetting 0
[  173.263799][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.678'.
[  173.272776][ T4520] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  173.280607][ T4927] usb 1-1: New USB device found, idVendor=2639, idProduct=0013, bcdDevice=d6.9c
[  173.294936][ T4927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.308502][ T4927] usb 1-1: Product: syz
[  173.312774][ T4927] usb 1-1: Manufacturer: syz
[  173.317865][ T4927] usb 1-1: SerialNumber: syz
[  173.325645][ T4927] usb 1-1: config 0 descriptor??
[  173.568576][ T4520] usb 6-1: Using ep0 maxpacket: 16
[  173.622168][ T4927] usb 1-1: USB disconnect, device number 7
[  173.708821][ T4520] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  173.911102][ T4520] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  173.925095][ T4520] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.935828][ T4520] usb 6-1: Product: syz
[  173.941327][ T4520] usb 6-1: Manufacturer: syz
[  173.946141][ T4520] usb 6-1: SerialNumber: syz
[  173.957368][ T4520] usb 6-1: config 0 descriptor??
[  174.005722][ T4520] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  174.015975][ T4520] em28xx 6-1:0.0: DVB interface 0 found: bulk
[  174.348734][ T4520] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  174.508762][ T4520] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  174.516985][ T4520] em28xx 6-1:0.0: board has no eeprom
[  174.580940][ T6686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.694'.
[  174.634749][ T6688] Set syz0 is full, maxelem 0 reached
[  174.668569][ T4520] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  174.687935][ T4520] em28xx 6-1:0.0: dvb set to bulk mode.
[  174.705208][ T4520] usb 6-1: USB disconnect, device number 7
[  174.722770][ T4520] em28xx 6-1:0.0: Disconnecting em28xx
[  174.753775][   T13] em28xx 6-1:0.0: Binding DVB extension
[  174.835549][   T13] em28xx 6-1:0.0: Registering input extension
[  174.845633][ T4520] em28xx 6-1:0.0: Closing input extension
[  174.872663][ T4520] em28xx 6-1:0.0: Freeing device
[  176.044712][ T6706] VFS: Mount too revealing
[  176.330370][ T4338] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  176.703663][ T4338] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  176.728010][ T4338] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  176.754825][ T4338] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  176.784622][ T4338] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  176.968727][ T4338] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  176.999254][ T4338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.017537][ T4338] usb 1-1: Product: syz
[  177.027667][ T4338] usb 1-1: Manufacturer: syz
[  177.037781][ T4338] usb 1-1: SerialNumber: syz
[  177.064440][ T4338] usb 1-1: config 0 descriptor??
[  177.124942][ T4338] ums-isd200 1-1:0.0: USB Mass Storage device detected
[  177.683494][ T4338] scsi host1: usb-storage 1-1:0.0
[  177.717901][ T4338] usb 1-1: USB disconnect, device number 8
[  177.791497][ T6744] VFS: Mount too revealing
[  177.808366][ T6748] netlink: 'syz.3.714': attribute type 1 has an invalid length.
[  177.969161][ T6748] 8021q: adding VLAN 0 to HW filter on device bond2
[  178.108710][ T6750] bond2: (slave veth5): Enslaving as an active interface with a down link
[  178.151099][ T6752] bond2: (slave dummy0): making interface the new active one
[  178.167320][ T6752] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  178.177787][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  178.192566][ T6753] netlink: 12 bytes leftover after parsing attributes in process `syz.5.715'.
[  178.395763][ T6753] 8021q: adding VLAN 0 to HW filter on device bond2
[  178.491301][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.718'.
[  178.512666][ T6768] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  178.541645][ T6770] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  179.149408][ T4927] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  179.545347][ T6789] loop0: detected capacity change from 0 to 128
[  179.598740][ T4927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  179.631882][ T4927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.710893][ T6791] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.727'.
[  179.720643][ T4927] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  179.720676][ T4927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.754962][ T6789] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  179.771236][ T4927] usb 6-1: config 0 descriptor??
[  179.778141][ T6789] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  179.789513][ T6791] netlink: 24 bytes leftover after parsing attributes in process `syz.4.727'.
[  180.333548][ T6796] netlink: 1320 bytes leftover after parsing attributes in process `syz.0.729'.
[  180.543884][ T4927] usb 6-1: language id specifier not provided by device, defaulting to English
[  180.880830][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.732'.
[  180.974356][ T6802] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  180.984087][ T6802] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  180.993184][ T6802] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  181.001981][ T6802] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  181.028807][ T4927] uclogic 0003:256C:006D.0004: interface is invalid, ignoring
[  181.225887][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.732'.
[  181.296453][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  181.315244][ T4482] usb 6-1: USB disconnect, device number 8
[  181.432557][ T6814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.737'.
[  181.507528][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.738'.
[  181.541561][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.738'.
[  181.688997][ T4520] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  181.838696][ T4927] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  182.015339][ T6841] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  182.062063][ T6841] batman_adv: batadv0: Removing interface: batadv_slave_0
[  182.087555][ T6841] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  182.127369][ T6841] batman_adv: batadv0: Removing interface: batadv_slave_1
[  182.288644][ T6850] tipc: Started in network mode
[  182.304887][ T6850] tipc: Node identity 4609726f9fb5, cluster identity 4711
[  182.353397][ T6850] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.509064][ T4927] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  182.570988][ T6851] tipc: Disabling bearer <eth:syzkaller0>
[  182.900049][ T6861] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  182.922785][ T4520] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  182.962542][ T4520] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  183.007407][ T6862] kvm: pic: non byte write
[  183.023809][ T4927] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  184.573615][ T6914] __nla_validate_parse: 2 callbacks suppressed
[  184.573631][ T6914] netlink: 12 bytes leftover after parsing attributes in process `syz.5.771'.
[  184.663506][ T6910] bond1: (slave ip6gretap1): making interface the new active one
[  184.691497][ T6910] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  184.832042][ T6930] device batadv_slave_1 entered promiscuous mode
[  186.413198][ T6951] loop0: detected capacity change from 0 to 512
[  186.762528][ T6951] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,nogrpid,init_itable,,errors=continue. Quota mode: writeback.
[  186.778894][ T6951] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  187.308632][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  187.403099][ T6982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.794'.
[  187.437191][ T6986] loop5: detected capacity change from 0 to 64
[  187.543088][ T6986] hfs: request for non-existent node 131072 in B*Tree
[  187.573499][ T6986] hfs: request for non-existent node 131072 in B*Tree
[  187.614400][ T6990] hfs: request for non-existent node 131072 in B*Tree
[  187.646406][ T6990] hfs: request for non-existent node 131072 in B*Tree
[  187.683682][ T6986] hfs: request for non-existent node 131072 in B*Tree
[  187.698936][ T6986] hfs: request for non-existent node 131072 in B*Tree
[  187.717134][ T6986] hfs: request for non-existent node 131072 in B*Tree
[  187.736034][ T6986] hfs: request for non-existent node 131072 in B*Tree
[  187.746635][ T6986] hfs: request for non-existent node 131072 in B*Tree
[  187.776479][ T6986] hfs: request for non-existent node 131072 in B*Tree
[  187.825870][ T6986] hfs: request for non-existent node 131072 in B*Tree
[  187.838374][ T6986] hfs: request for non-existent node 131072 in B*Tree
[  187.855442][ T6986] hfs: request for non-existent node 12 in B*Tree
[  187.872316][ T6986] hfs: request for non-existent node 12 in B*Tree
[  188.048367][ T7004] device batadv_slave_1 entered promiscuous mode
[  189.227609][ T7046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.807'.
[  190.015832][ T7081] netlink: 'syz.0.822': attribute type 39 has an invalid length.
[  190.471857][ T7091] overlayfs: failed to clone lowerpath
[  191.150798][ T4482] Bluetooth: hci0: command 0x0406 tx timeout
[  191.161601][ T4482] Bluetooth: hci1: command 0x0406 tx timeout
[  191.206296][ T4482] Bluetooth: hci2: command 0x0406 tx timeout
[  191.254520][ T4482] Bluetooth: hci3: command 0x0406 tx timeout
[  192.882555][ T7126] netlink: 'syz.4.840': attribute type 10 has an invalid length.
[  192.908655][ T7126] device dummy0 left promiscuous mode
[  192.927588][ T7126] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  194.191091][ T1427] ieee802154 phy0 wpan0: encryption failed: -22
[  194.197825][ T1427] ieee802154 phy1 wpan1: encryption failed: -22
[  195.139977][ T7171] netlink: 'syz.4.857': attribute type 4 has an invalid length.
[  195.629151][ T4482] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  195.879273][ T4482] usb 1-1: Using ep0 maxpacket: 16
[  195.999238][ T4482] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  196.025603][ T4482] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  196.118561][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  196.211423][ T4482] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  196.233247][ T4482] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.260209][ T4482] usb 1-1: Product: syz
[  196.280198][ T4482] usb 1-1: Manufacturer: syz
[  196.285020][ T4482] usb 1-1: SerialNumber: syz
[  196.315574][ T4482] usb 1-1: config 0 descriptor??
[  196.382926][ T7199] netlink: 'syz.5.871': attribute type 10 has an invalid length.
[  196.422659][ T7199] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.430090][ T7199] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.462930][ T7199] device bridge0 left promiscuous mode
[  196.504605][ T7199] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.511805][ T7199] bridge0: port 2(bridge_slave_1) entered forwarding state
[  196.519588][ T7199] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.526690][ T7199] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.567777][ T7199] device bridge0 entered promiscuous mode
[  196.587087][ T7199] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  196.905661][ T7211] overlayfs: failed to clone upperpath
[  196.999413][ T7178] program syz.0.860 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  197.037329][ T4482] usb 1-1: USB disconnect, device number 9
[  200.926993][ T7281] loop0: detected capacity change from 0 to 128
[  200.966616][ T7281] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  201.139980][   T26] audit: type=1804 audit(1781622676.263:10): pid=7283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.901" name="/newroot/138/file1/file1" dev="loop0" ino=94 res=1 errno=0
[  201.235274][ T7283] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  201.264255][ T7283] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  201.409504][ T7275] loop5: detected capacity change from 0 to 32768
[  201.547764][ T7275] XFS (loop5): Mounting V5 Filesystem
[  202.473193][ T7275] XFS (loop5): Ending clean mount
[  202.621912][ T7311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.907'.
[  202.816345][ T4371] XFS (loop5): Unmounting Filesystem
[  203.010740][ T7331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.915'.
[  203.901751][ T2304] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  204.281957][ T2304] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  204.295463][ T2304] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  204.320982][ T2304] usb 6-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[  204.334530][ T2304] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.357161][ T2304] usb 6-1: config 0 descriptor??
[  204.907170][ T2304] zeroplus 0003:0C12:0030.0005: hidraw0: USB HID v0.00 Device [HID 0c12:0030] on usb-dummy_hcd.5-1/input0
[  204.963068][ T2304] zeroplus 0003:0C12:0030.0005: no inputs found
[  205.130693][ T7346] udc-core: couldn't find an available UDC or it's busy
[  205.174249][ T7346] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  205.212658][ T4520] usb 6-1: USB disconnect, device number 9
[  205.230400][ T7382] fido_id[7382]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0C12:0030.0005/report_descriptor': No such device
[  205.852389][ T7393] loop5: detected capacity change from 0 to 512
[  206.190119][ T7405] block device autoloading is deprecated and will be removed.
[  206.340599][ T7415] overlayfs: failed to clone upperpath
[  207.339246][ T7440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  207.433252][ T7440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  207.517020][ T7440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  208.261608][ T7461] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  208.338710][ T7461] overlayfs: failed to set xattr on upper
[  208.379827][ T7461] overlayfs: ...falling back to index=off,metacopy=off.
[  209.036323][ T7499] tmpfs: Bad value for 'mpol'
[  209.529070][ T2304] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  209.899217][ T2304] usb 1-1: config 0 has no interfaces?
[  210.059243][ T2304] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  210.079208][ T2304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.107804][ T2304] usb 1-1: Product: syz
[  210.122839][ T2304] usb 1-1: Manufacturer: syz
[  210.127469][ T2304] usb 1-1: SerialNumber: syz
[  210.179868][ T2304] usb 1-1: config 0 descriptor??
[  210.365325][ T7512] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  210.372647][ T7512] IPv6: NLM_F_CREATE should be set when creating new route
[  210.468870][ T2304] usb 1-1: USB disconnect, device number 10
[  210.984379][ T7490] netlink: 'syz.5.973': attribute type 28 has an invalid length.
[  211.480150][ T7490] netlink: 'syz.5.973': attribute type 3 has an invalid length.
[  211.517013][ T7490] netlink: 132 bytes leftover after parsing attributes in process `syz.5.973'.
[  211.544506][   T13] libceph: connect (1)[c::]:6789 error -101
[  211.560243][   T13] libceph: mon0 (1)[c::]:6789 connect error
[  211.597379][ T7523] ceph: No mds server is up or the cluster is laggy
[  211.608726][   T13] libceph: connect (1)[c::]:6789 error -101
[  211.614768][   T13] libceph: mon0 (1)[c::]:6789 connect error
[  211.921394][   T13] libceph: connect (1)[c::]:6789 error -101
[  211.927461][   T13] libceph: mon0 (1)[c::]:6789 connect error
[  212.009864][ T7536] loop0: detected capacity change from 0 to 32768
[  212.086230][ T7536] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.990 (7536)
[  212.144930][ T7536] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  212.154464][ T7536] BTRFS info (device loop0): turning on sync discard
[  212.161818][ T7536] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  212.171824][ T7536] BTRFS info (device loop0): use zstd compression, level 3
[  212.179786][ T7536] BTRFS info (device loop0): turning on async discard
[  212.186601][ T7536] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  212.198340][ T7536] BTRFS info (device loop0): trying to use backup root at mount time
[  212.207218][ T7536] BTRFS info (device loop0): enabling auto defrag
[  212.214317][ T7536] BTRFS info (device loop0): using free space tree
[  212.221472][ T7536] BTRFS info (device loop0): has skinny extents
[  212.575825][  T154] BTRFS warning (device loop0): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0
[  212.644731][ T7563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.993'.
[  212.672293][ T7536] BTRFS warning (device loop0): failed to read root (objectid=2): -5
[  212.681464][ T4459] BTRFS warning (device loop0): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0
[  212.719307][ T7536] BTRFS warning (device loop0): couldn't read tree root
[  212.729795][ T7536] BTRFS error (device loop0): parent transid verify failed on 5255168 wanted 5 found 7
[  212.740148][ T7536] BTRFS warning (device loop0): couldn't read tree root
[  212.784759][ T7536] BTRFS info (device loop0): enabling ssd optimizations
[  212.796874][ T7536] BTRFS info (device loop0): clearing free space tree
[  212.804053][ T7536] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  212.815779][ T7536] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  212.970055][ T7536] BTRFS info (device loop0): creating free space tree
[  212.995350][ T7536] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  213.005122][ T7536] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  213.631704][ T7536] Invalid argument reading file caps for ./file0
[  213.672003][ T7572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.995'.
[  213.892220][ T6357] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (6357)
[  213.965684][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.997'.
[  214.002371][ T7580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.997'.
[  214.028717][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  214.051741][ T7580] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  214.060560][ T7580] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  214.069344][ T7580] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  214.078073][ T7580] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  214.148120][ T7584] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  214.288331][ T7583] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  214.792736][ T7605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1007'.
[  215.309712][ T7588] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  215.800018][ T7588] usb 1-1: Using ep0 maxpacket: 8
[  215.834301][ T7616] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1009'.
[  215.989211][ T7588] usb 1-1: unable to get BOS descriptor or descriptor too short
[  216.099213][ T7588] usb 1-1: config index 0 descriptor too short (expected 8255, got 63)
[  216.107708][ T7588] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  216.156785][ T7588] usb 1-1: config 0 has no interfaces?
[  216.321869][ T7588] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  216.384340][ T7588] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.424097][ T7588] usb 1-1: Product: syz
[  216.440927][ T7588] usb 1-1: Manufacturer: syz
[  216.455547][ T7588] usb 1-1: SerialNumber: syz
[  216.510817][ T7588] usb 1-1: config 0 descriptor??
[  216.923355][ T7588] usb 1-1: USB disconnect, device number 11
[  216.990955][ T7645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1021'.
[  217.564688][ T7655] loop0: detected capacity change from 0 to 1024
[  217.884363][ T7655] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  219.511165][ T7683] netlink: 'syz.0.1032': attribute type 2 has an invalid length.
[  219.745782][ T7687] netlink: 'syz.3.1036': attribute type 1 has an invalid length.
[  219.803579][ T7687] 8021q: adding VLAN 0 to HW filter on device bond3
[  219.834096][ T7689] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1035'.
[  219.926316][ T7694] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1035'.
[  220.012804][ T7687] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  220.059037][ T7687] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  220.068024][ T7687] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  220.132351][ T7687] bond3: (slave geneve2): making interface the new active one
[  220.164290][ T7687] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  220.205232][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  220.331384][ T7687] syz.3.1036 (7687) used greatest stack depth: 19416 bytes left
[  220.594632][ T7713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1044'.
[  223.108557][   T13] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  223.388488][   T13] usb 1-1: Using ep0 maxpacket: 16
[  223.518652][   T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  223.538901][   T13] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  223.591368][   T13] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  223.644397][   T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.680591][   T13] usb 1-1: config 0 descriptor??
[  223.732503][   T13] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  223.992885][   T13] usb 1-1: USB disconnect, device number 12
[  225.171612][ T7782] device vlan2 entered promiscuous mode
[  225.188236][ T7786] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1072'.
[  225.215074][ T7786] device ip6gre1 entered promiscuous mode
[  225.265938][ T7786] netlink: 'syz.4.1072': attribute type 6 has an invalid length.
[  225.282346][ T7786] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1072'.
[  225.384296][ T7797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1077'.
[  225.397930][ T7797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1077'.
[  225.411895][ T7797] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  225.420781][ T7797] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  225.429847][ T7797] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  225.438720][ T7797] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  225.552777][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1078'.
[  226.385308][ T7801] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  226.699999][ T7818] overlayfs: failed to resolve './file0': -2
[  227.965241][ T7827] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1087'.
[  229.240463][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1089'.
[  229.339221][ T7840] tipc: New replicast peer: 255.255.255.255
[  229.356144][ T7840] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  229.477043][ T7840] tipc: Enabled bearer <udp:syz2>, priority 10
[  229.489795][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  229.628613][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  229.768690][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  229.908555][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  230.058553][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  230.198661][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  230.338571][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  230.407721][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1094'.
[  230.419905][ T7851] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1094'.
[  230.441550][ T7851] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  230.450609][ T7851] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  230.459388][ T7851] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  230.468113][ T7851] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  230.525901][ T4931] tipc: Node number set to 3653005935
[  230.539871][ T7857] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  230.558849][ T7857] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  230.618810][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  230.898581][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  232.494073][ T7902] overlayfs: failed to resolve './file0': -2
[  233.805228][ T7914] device syzkaller0 entered promiscuous mode
[  234.285283][ T7927] device vlan2 entered promiscuous mode
[  234.330276][ T7928] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4188] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7928]
[  235.012631][    C0] net_ratelimit: 3 callbacks suppressed
[  235.012649][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  237.224519][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  238.268623][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  238.546288][ T7983] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4196] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7983]
[  239.308572][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  239.401847][   T26] audit: type=1326 audit(1781622714.533:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.4.1138" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a21d8de59 code=0x0
[  239.948455][   T13] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  240.348589][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  240.658669][   T13] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  240.667798][   T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.699021][   T13] usb 1-1: Product: syz
[  240.703258][   T13] usb 1-1: Manufacturer: syz
[  240.738567][   T13] usb 1-1: SerialNumber: syz
[  240.800572][   T13] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  240.819515][ T8012] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1148'.
[  241.388548][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  241.572344][ T4931] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  242.428573][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  243.478796][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  243.577017][   T23] Bluetooth: hci4: command 0x0406 tx timeout
[  244.368306][ T4931] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  244.375819][ T4931] ath9k_htc: Failed to initialize the device
[  244.454289][   T23] usb 1-1: USB disconnect, device number 13
[  244.508552][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  244.511822][   T23] usb 1-1: ath9k_htc: USB layer deinitialized
[  245.558289][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  246.283430][ T8075] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1172'.
[  246.588290][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  246.832344][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1179'.
[  246.919518][ T8101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1182'.
[  247.181013][ T8104] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1185'.
[  247.189449][ T8106] overlayfs: failed to clone upperpath
[  247.638239][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  248.678174][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  249.718073][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  249.757647][ T8133] netlink: 'syz.4.1193': attribute type 1 has an invalid length.
[  250.082734][ T8133] 8021q: adding VLAN 0 to HW filter on device bond2
[  250.129128][ T8134] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1193'.
[  250.154363][ T8139] Set syz0 is full, maxelem 0 reached
[  250.208809][ T8134] device bond2 entered promiscuous mode
[  250.395457][ T8142] netlink: 'syz.0.1196': attribute type 10 has an invalid length.
[  250.438587][ T8142] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  250.466089][ T8146] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  250.508197][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  250.588574][ T8152] loop0: detected capacity change from 0 to 128
[  250.655228][ T8156] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1200'.
[  250.758025][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  251.798080][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  252.583016][ T8209] overlayfs: failed to clone upperpath
[  252.853276][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  253.421948][ T8229] bond1: option mode: unable to set because the bond device has slaves
[  253.471918][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1221'.
[  253.502044][ T8229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1221'.
[  253.556994][ T8229] bond1: (slave bond0): Error -16 calling set_mac_address
[  253.874278][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  254.918695][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  255.745277][ T1427] ieee802154 phy0 wpan0: encryption failed: -22
[  255.751679][ T1427] ieee802154 phy1 wpan1: encryption failed: -22
[  255.974050][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  256.468594][ T8267] bond0: (slave dummy0): Releasing backup interface
[  256.557430][ T8267] device bridge_slave_0 left promiscuous mode
[  256.596836][ T8267] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.808460][ T8267] device bridge_slave_1 left promiscuous mode
[  256.814776][ T8267] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.902986][ T8267] bond0: (slave bond_slave_0): Releasing backup interface
[  256.972717][ T8267] bond0: (slave bond_slave_1): Releasing backup interface
[  257.015419][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  257.082030][ T8267] bond1: (slave veth3): Releasing active interface
[  257.308955][ T2304] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  257.445885][ T8279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  257.914548][ T2304] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  258.144414][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  258.721911][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1247'.
[  258.732453][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1247'.
[  259.448777][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  260.026686][ T8324] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1253'.
[  260.161597][ T8324] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1253'.
[  260.515817][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  261.552587][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  261.597403][ T8341] fuse: Bad value for 'fd'
[  262.737642][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  263.797288][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  264.243326][ T8359] syz.5.1262 sent an empty control message without MSG_MORE.
[  264.298454][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1247'.
[  264.321791][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1247'.
[  264.345756][ T8378] UBIFS error (pid: 8378): cannot open "c:::", error -22
[  264.834635][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  265.835813][ T8416] netlink: 628 bytes leftover after parsing attributes in process `syz.5.1282'.
[  265.872403][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  266.977462][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  268.406189][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  268.605817][ T8464] netlink: 'syz.2.1297': attribute type 10 has an invalid length.
[  268.657481][ T8464] 8021q: adding VLAN 0 to HW filter on device team0
[  268.675987][ T8464] bond0: (slave team0): Enslaving as an active interface with an up link
[  269.166817][ T8479] netlink: 'syz.2.1303': attribute type 4 has an invalid length.
[  269.467010][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  270.140519][ T8500] netem: change failed
[  270.551653][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  271.649790][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  273.000702][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  273.817146][ T8572] fuse: Bad value for 'fd'
[  273.886024][ T8577] overlayfs: failed to clone upperpath
[  274.047486][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  275.290989][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  275.702046][ T8614] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1351'.
[  276.174599][ T8623] netlink: 628 bytes leftover after parsing attributes in process `syz.3.1354'.
[  276.352036][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  277.402639][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  277.595691][ T8619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1352'.
[  278.776589][ T8636] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  278.785034][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  278.958225][ T8638] overlayfs: failed to clone upperpath
[  279.786391][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  280.826381][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  281.404298][ T8674] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1369'.
[  281.866323][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  282.196655][   T26] audit: type=1326 audit(2000000037.592:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8669 comm="syz.2.1368" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5756802e59 code=0x7fc00000
[  282.959482][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  283.082822][ T8693] 8021q: adding VLAN 0 to HW filter on device bond1
[  283.139792][ T8693] bond0: (slave bond1): Enslaving as an active interface with an up link
[  284.026185][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  285.076616][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  286.116003][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  286.139536][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1386'.
[  286.159534][ T8732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1386'.
[  286.267142][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1386'.
[  286.294703][ T8732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1386'.
[  286.768840][ T8749] kernel read not supported for file /!selinuxwk1�m�9ɞ*T����#j����Y��mV�vm(p�-QZ#�{�� (pid: 8749 comm: syz.2.1392)
[  287.145947][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  288.187706][ T8771] netlink: 'syz.2.1403': attribute type 10 has an invalid length.
[  288.195898][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  288.226536][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1404'.
[  288.251405][ T8773] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1404'.
[  288.386720][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1404'.
[  288.416666][ T8773] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1404'.
[  289.225923][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  289.782884][   T26] audit: type=1326 audit(2000000045.182:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8799 comm="syz.2.1411" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5756802e59 code=0x0
[  290.265784][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  291.315760][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  292.345700][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  293.395624][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  294.435537][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  294.828352][ T8845] netlink: 'syz.3.1428': attribute type 11 has an invalid length.
[  295.475625][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  296.505429][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  297.545391][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  298.585344][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  298.911971][ T8886] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.1442'.
[  299.625254][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  300.659679][ T8890] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1443'.
[  300.675190][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  301.706590][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  301.860719][ T8923] kernel read not supported for file /!selinuxwk1�m�9ɞ*T����#j����Y��mV�vm(p�-QZ#�{�� (pid: 8923 comm: syz.0.1453)
[  302.745101][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  303.785218][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  304.835104][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  305.874970][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  306.594337][ T8951] overlayfs: failed to clone upperpath
[  306.914825][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  306.929065][ T8965] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1464'.
[  307.041704][ T8965] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1464'.
[  307.411258][ T8974] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.1468'.
[  307.508739][ T8979] netlink: 'syz.5.1471': attribute type 4 has an invalid length.
[  307.945278][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  308.984757][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  309.932771][   T26] audit: type=1326 audit(2000000065.333:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.0.1474" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a29832e59 code=0x0
[  310.034776][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  310.107724][   T26] audit: type=1326 audit(2000000065.423:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.0.1474" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a29832e59 code=0x7ffc0000
[  310.200169][   T26] audit: type=1326 audit(2000000065.423:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.0.1474" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a29832e59 code=0x7ffc0000
[  310.438483][   T26] audit: type=1326 audit(2000000065.423:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.0.1474" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a29832e59 code=0x7ffc0000
[  310.639368][   T26] audit: type=1326 audit(2000000065.423:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.0.1474" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6a29832e59 code=0x7ffc0000
[  310.997717][   T26] audit: type=1326 audit(2000000065.423:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.0.1474" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a29832e59 code=0x7ffc0000
[  311.074622][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  311.288874][ T9017] delete_channel: no stack
[  311.297300][ T9017] delete_channel: no stack
[  311.657602][   T26] audit: type=1326 audit(2000000065.423:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.0.1474" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a29832e59 code=0x7ffc0000
[  311.723021][   T26] audit: type=1326 audit(2000000065.423:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.0.1474" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a29832e59 code=0x7ffc0000
[  311.753461][   T26] audit: type=1326 audit(2000000065.423:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.0.1474" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6a29832e59 code=0x7ffc0000
[  311.778892][   T26] audit: type=1326 audit(2000000065.423:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.0.1474" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a29832e59 code=0x7ffc0000
[  311.902033][ T9023] netlink: 'syz.0.1485': attribute type 27 has an invalid length.
[  311.946409][ T9023] netlink: 'syz.0.1485': attribute type 4 has an invalid length.
[  311.954329][ T9023] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1485'.
[  312.039679][ T9029] MPTCP: kernel_bind error, err=-99
[  312.114576][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  313.145315][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  314.184483][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  314.284810][ T9052] delete_channel: no stack
[  314.289426][ T9052] delete_channel: no stack
[  314.750713][ T9065] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1500'.
[  315.234374][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  316.274363][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  316.484919][ T9081] device wlan1 entered promiscuous mode
[  316.577169][ T9087] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1505'.
[  317.067203][ T1427] ieee802154 phy0 wpan0: encryption failed: -22
[  317.073656][ T1427] ieee802154 phy1 wpan1: encryption failed: -22
[  317.314237][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  318.344333][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  318.516050][ T9111] netlink: 'syz.3.1516': attribute type 4 has an invalid length.
[  318.735662][ T9111] netlink: 'syz.3.1516': attribute type 4 has an invalid length.
[  319.384190][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  320.424109][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  321.464303][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  321.934464][ T9152] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1525'.
[  321.983213][ T9152] unsupported nlmsg_type 40
[  322.435769][ T9168] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1534'.
[  322.494696][ T9168] 0�X���: renamed from caif0
[  322.503986][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  322.561461][ T9168] A link change request failed with some changes committed already. Interface 
60�X��� may have been left with an inconsistent configuration, please check.
[  323.553914][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  324.583906][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  325.409570][ T9203] overlayfs: failed to clone upperpath
[  325.623784][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  326.673747][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  327.303745][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  327.588199][ T9238] tipc: Failed to remove unknown binding: 66,0,0/0:748936268/748936270
[  327.599958][ T9237] netlink: 'syz.0.1556': attribute type 11 has an invalid length.
[  327.614290][ T9238] tipc: Failed to remove unknown binding: 66,0,0/0:748936268/748936269
[  327.653415][ T9241] tipc: Failed to remove unknown binding: 66,0,0/0:748936268/748936270
[  327.673236][ T9241] tipc: Failed to remove unknown binding: 66,0,0/0:748936268/748936269
[  327.703652][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  327.825679][ T9218] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1549'.
[  328.107352][ T9244] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1549'.
[  328.743665][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  329.783561][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  330.750073][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1569'.
[  330.766182][ T9277] overlayfs: failed to clone upperpath
[  330.833622][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  331.863433][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  332.903373][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  333.943322][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  334.735942][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1590'.
[  335.414683][ T9336] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  335.422187][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  336.423174][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  336.794384][ T9360] netlink: 'syz.0.1599': attribute type 1 has an invalid length.
[  336.976906][ T9360] device bond2 entered promiscuous mode
[  336.997192][ T9360] 8021q: adding VLAN 0 to HW filter on device bond2
[  337.473547][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  337.512153][ T9373] bond2: (slave bridge5): making interface the new active one
[  337.756031][ T9373] device bridge5 entered promiscuous mode
[  337.864733][ T9373] bond2: (slave bridge5): Enslaving as an active interface with an up link
[  337.963311][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  338.440225][ T9389] netlink: 'syz.3.1608': attribute type 1 has an invalid length.
[  338.513094][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  339.543941][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  339.586771][ T9392] bond4: (slave gretap1): making interface the new active one
[  339.656425][ T9392] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  339.701769][ T9395] bond4: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  340.582967][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  341.357956][ T9399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1621'.
[  341.622897][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  342.607375][ T9425] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1618'.
[  342.664630][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  342.711424][ T9425] device ip6gre1 entered promiscuous mode
[  342.779952][ T9436] netlink: 'syz.2.1618': attribute type 6 has an invalid length.
[  342.789171][ T9435] overlayfs: failed to clone upperpath
[  342.851826][ T9436] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1618'.
[  343.489327][ T9452] mmap: syz.4.1628 (9452) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  343.608049][ T9452] cgroup: Setting release_agent not allowed
[  343.702824][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  343.738061][ T9457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1630'.
[  344.197513][ T9479] overlayfs: failed to clone upperpath
[  344.742705][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  345.576825][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1645'.
[  345.639952][ T9507] netlink: 'syz.3.1646': attribute type 1 has an invalid length.
[  345.725237][ T9507] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address
[  345.782697][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  345.807444][ T9507] bond5: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  345.849868][ T9507] bond5: (slave vxcan1): Error -22 calling dev_set_mtu
[  345.933980][ T9511] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address
[  345.982851][ T9511] bond5: (slave vxcan1): Error -22 calling dev_set_mtu
[  346.094437][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1647'.
[  346.311644][ T9525] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1653'.
[  346.822703][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  347.862558][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  348.808198][ T9569] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1666'.
[  348.845724][ T9569] device geneve2 entered promiscuous mode
[  348.912495][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  349.942449][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  350.125317][ T4927] libceph: connect (1)[c::]:6789 error -101
[  350.131476][ T4927] libceph: mon0 (1)[c::]:6789 connect error
[  350.189395][ T9590] ceph: No mds server is up or the cluster is laggy
[  350.222066][   T26] kauditd_printk_skb: 61 callbacks suppressed
[  350.222155][   T26] audit: type=1326 audit(2000000105.625:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9583 comm="syz.3.1669" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72b3fd1e59 code=0x0
[  350.982368][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  351.067981][ T9604] 9pnet: p9_errstr2errno: server reported unknown error ��'I�$�۷=��
[  351.220267][ T9609] 9pnet: p9_errstr2errno: server reported unknown error ��'I�$�۷=�
[  352.022312][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  352.274710][ T9642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1692'.
[  352.287199][ T9642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1692'.
[  353.062276][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  354.102218][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  354.642164][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1696'.
[  355.152125][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  356.299386][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  356.530995][ T9670] sch_fq: defrate 53322 ignored.
[  356.858176][ T9696] netlink: 'syz.2.1706': attribute type 1 has an invalid length.
[  356.887933][ T9696] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1706'.
[  357.101353][ T9710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1714'.
[  357.175944][ T9710] 8021q: adding VLAN 0 to HW filter on device bond3
[  357.197354][ T9708] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1713'.
[  357.246817][ T9708] HTB: quantum of class 80160008 is small. Consider r2q change.
[  357.302019][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  357.557376][ T9737] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1722'.
[  357.632445][ T9737] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1722'.
[  357.692550][ T9737] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1722'.
[  357.737626][ T9737] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1722'.
[  358.342504][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  359.391874][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  359.807695][   T26] audit: type=1804 audit(2000000115.206:86): pid=9790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1742" name="bus" dev="ramfs" ino=50879 res=1 errno=0
[  359.848143][   T26] audit: type=1804 audit(2000000115.206:87): pid=9790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1742" name="bus" dev="ramfs" ino=50879 res=1 errno=0
[  360.422059][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  361.311103][ T9820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1752'.
[  361.351560][ T9820] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1752'.
[  361.363517][ T9820] HTB: quantum of class 8017000C is small. Consider r2q change.
[  361.461772][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  361.648589][ T9833] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  362.511920][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  362.653032][ T9853] netlink: 'syz.5.1767': attribute type 1 has an invalid length.
[  362.734568][ T9853] 8021q: adding VLAN 0 to HW filter on device bond3
[  362.807326][ T9862] bond3: (slave vlan2): making interface the new active one
[  362.818722][ T9862] bond3: (slave vlan2): Enslaving as an active interface with an up link
[  362.838451][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  362.956775][ T9876] device lo left promiscuous mode
[  362.987275][ T9876] device tunl0 left promiscuous mode
[  363.031728][ T9876] device gre0 left promiscuous mode
[  363.286043][ T9876] device gretap0 left promiscuous mode
[  363.340071][ T9876] device erspan0 left promiscuous mode
[  363.395306][ T9876] device ip_vti0 left promiscuous mode
[  363.438304][ T9876] device ip6_vti0 left promiscuous mode
[  363.497189][ T9876] device sit0 left promiscuous mode
[  363.541693][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  363.601420][ T9876] device ip6tnl0 left promiscuous mode
[  363.646083][ T9876] device ip6gre0 left promiscuous mode
[  363.708294][ T9876] device ip6gretap0 left promiscuous mode
[  363.778448][ T9876] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.785758][ T9876] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.854051][ T9876] device bond0 left promiscuous mode
[  363.870813][ T9876] device bond_slave_0 left promiscuous mode
[  363.903484][ T9876] device bond_slave_1 left promiscuous mode
[  363.934954][ T9876] device bridge0 left promiscuous mode
[  364.014869][ T9876] device dummy0 left promiscuous mode
[  364.068250][ T9876] device nlmon0 left promiscuous mode
[  364.075982][ T9876] device caif0 left promiscuous mode
[  364.582122][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  365.621580][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  365.872160][ T9876] device bond1 left promiscuous mode
[  365.877539][ T9876] device veth3 left promiscuous mode
[  366.033436][ T9876] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  366.043327][ T9876] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  366.053091][ T9876] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  366.129778][ T9876] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  366.139372][ T9876] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  366.149359][ T9876] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  366.159749][ T9876] device geneve2 left promiscuous mode
[  366.225145][ T9906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1783'.
[  366.297653][ T9913] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1784'.
[  366.308526][ T9913] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1784'.
[  367.361757][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  367.598127][ T9942] xt_NFQUEUE: number of queues (8) out of range (got 65537)
[  370.359838][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  370.574842][ T9966] mac80211_hwsim hwsim6 ������: renamed from wlan0
[  370.624673][ T9966] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1803'.
[  371.381419][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  372.421195][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  372.628837][ T9994] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1811'.
[  373.019475][T10009] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1817'.
[  373.157704][T10014] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1820'.
[  373.462274][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  374.501088][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  375.541241][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  376.580949][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  377.630998][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  378.660794][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  378.791241][ T1427] ieee802154 phy0 wpan0: encryption failed: -22
[  379.581809][ T1427] ieee802154 phy1 wpan1: encryption failed: -22
[  379.700801][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  380.085255][T10083] xt_hashlimit: size too large, truncated to 1048576
[  380.112288][T10083] xt_hashlimit: invalid rate
[  380.160563][T10069] netlink: 'syz.4.1837': attribute type 16 has an invalid length.
[  380.168650][T10069] netlink: 'syz.4.1837': attribute type 17 has an invalid length.
[  380.269585][T10069] IPv6: ADDRCONF(NETDEV_CHANGE): sit0: link becomes ready
[  380.740709][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  381.208066][T10069] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready
[  381.291165][T10069] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready
[  381.314962][T10069] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  381.402934][T10069] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  381.510974][T10104] netlink: 'syz.4.1850': attribute type 1 has an invalid length.
[  381.561302][T10104] netlink: 'syz.4.1850': attribute type 4 has an invalid length.
[  381.596687][T10104] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1850'.
[  381.780662][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  382.820583][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  383.870543][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  384.900428][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  385.616117][T10117] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  385.633162][T10117] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  385.643111][T10117] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  385.652507][T10117] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  385.892146][T10117] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  385.901288][T10117] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  385.910242][T10117] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  385.919228][T10117] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  385.950380][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  386.209088][T10117] syz.4.1854 (10117) used greatest stack depth: 19352 bytes left
[  386.990328][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  387.549911][T10215] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4188] was attempted by "$x`vO�x�H`���CBn܀��y��>
b�w��x\x1bL5? Cݭ8`d�����Jg�39T��&�tWCm�<��\x1bRby� Vq�/��\x5cDw,XT,�W�[es�����\x0d1�\x07�^���|�;d�g8 �꥛~�u�}G��g6W]�M��þlxM�=�M�h\x09�5�$�Z���EO�1Jc��&�O�P�5y9\x0dNi�I�<��5�Ў��d\x22�T*��˘s�x)��
�ʯ\x22v:���|M\x0a�
����)\x0b�ꋻwRI� �����;�H�P?Lt�M[w̲S�7�&�Q瑃����Y�=N�ݝ�\x22��߆FS�B�Ҙ�Rx�9ʼnR_4�~}�e���}x�b�H\x0d��%DŽޑR�]�cÂ��x�8�m�5'y��Z�x��^M���y=:�:�UVvҼb�8��s\x0d0�c���A�L��=���;��k��[i��qK�g��@�8�Z\x22&�iy?��m9���d���<5�]�p2w����A��1�Ȧ4qLctG�9N��_f2so�p�)�^��FISn08�a��S�*Ē�rX��\x1b/\x22`�W�rwr\x22�!7��X�~���Ӱ���D�Ep��7�e�h�Nk�2I�s
��,>r_<�-�!�}��jnW8-�l�e�Ú�Q���Œ6Dg�fr�Z�!�V\x0b�����*���>����ħk?p>n�U���`I�����W�� ����\x1b��D��6��������\x5cj����v��(���=�}t�x�p:�Ԑ�ގ�_����ս�<‹('���(tc�(����#2�o�ڏ0x���Y4W�.v��oD�S�\x0cX濩�V�,�5a#zkP�d���0a.
[  388.020321][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  389.221095][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  389.498878][T10235] overlayfs: failed to clone upperpath
[  390.270182][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  391.300145][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  391.965211][T10273] netlink: 'syz.3.1896': attribute type 10 has an invalid length.
[  392.028301][T10273] team0: Port device netdevsim0 added
[  392.340051][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  393.157838][T10301] netlink: 'syz.2.1904': attribute type 1 has an invalid length.
[  393.217546][T10301] 8021q: adding VLAN 0 to HW filter on device bond2
[  393.233623][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1903'.
[  393.304709][T10305] 8021q: adding VLAN 0 to HW filter on device bond2
[  393.372094][T10305] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  393.382853][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  393.464888][T10305] bond2: (slave vxcan3): Error -22 calling dev_set_mtu
[  393.561897][T10301] device gretap1 entered promiscuous mode
[  393.591422][T10301] bond2: (slave gretap1): making interface the new active one
[  393.636737][T10301] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  394.183452][T10335] netlink: 798 bytes leftover after parsing attributes in process `syz.0.1913'.
[  394.419953][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  395.149829][T10355] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1914'.
[  395.469847][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  395.933059][T10370] overlayfs: missing 'lowerdir'
[  396.395110][T10380] netlink: 'syz.5.1924': attribute type 10 has an invalid length.
[  396.427201][T10380] netlink: 'syz.5.1924': attribute type 10 has an invalid length.
[  396.468988][T10380] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  396.511754][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  396.953506][T10388] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  397.079435][T10391] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1928'.
[  397.090898][T10394] bond2: (slave dummy0): Releasing active interface
[  397.142866][T10394] bond0: (slave bond_slave_0): Releasing backup interface
[  397.243893][T10394] bond0: (slave bond_slave_1): Releasing backup interface
[  397.761585][T10394] team0: Port device team_slave_0 removed
[  398.007496][T10394] team0: Port device team_slave_1 removed
[  398.014594][T10394] batman_adv: batadv0: Removing interface: batadv_slave_0
[  398.023896][T10394] batman_adv: batadv0: Removing interface: batadv_slave_1
[  398.230124][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  398.705239][T10394] team0: Port device netdevsim0 removed
[  398.911515][T10394] bond1: (slave veth3): Releasing backup interface
[  398.920356][T10394] bond1: (slave ip6gretap1): making interface the new active one
[  400.834047][T10394] bond1: (slave ip6gretap1): Releasing backup interface
[  400.946601][T10394] bond2: (slave veth5): Releasing active interface
[  400.971970][T10394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  400.999088][T10394] bond3: (slave geneve2): Releasing active interface
[  401.025661][T10394] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  401.048666][T10394] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  401.073397][T10394] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  401.089061][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  401.192971][T10394] bond4: (slave gretap1): Releasing active interface
[  401.238119][T10398] team0: Mode changed to "roundrobin"
[  401.272007][T10403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1929'.
[  401.387505][T10420] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1935'.
[  401.413346][T10420] device bond0 entered promiscuous mode
[  401.430201][T10420] device wlan1 entered promiscuous mode
[  401.456767][T10420] device bond0 left promiscuous mode
[  401.467209][T10420] device wlan1 left promiscuous mode
[  401.929452][T10452] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1944'.
[  402.117845][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  403.149457][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  403.163555][T10473] ����: renamed from team_slave_1
[  404.179383][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  405.219377][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  405.373361][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1958'.
[  405.762788][T10495] tipc: Failed to remove unknown binding: 66,0,0/0:4125665798/4125665800
[  405.781582][T10495] tipc: Failed to remove unknown binding: 66,0,0/0:4125665798/4125665799
[  405.817620][T10499] tipc: Failed to remove unknown binding: 66,0,0/0:4125665798/4125665800
[  405.881054][T10499] tipc: Failed to remove unknown binding: 66,0,0/0:4125665798/4125665799
[  406.136055][T10511] netlink: 'syz.3.1965': attribute type 1 has an invalid length.
[  406.377825][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  406.405292][T10511] 8021q: adding VLAN 0 to HW filter on device bond6
[  406.446380][T10513] 8021q: adding VLAN 0 to HW filter on device bond6
[  406.465087][T10513] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address
[  406.484287][T10513] bond6: (slave vxcan1): Error -22 calling dev_set_mtu
[  407.379213][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  407.898590][T10525] SET target dimension over the limit!
[  409.228335][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  410.824758][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  411.192425][T10549] overlayfs: missing 'lowerdir'
[  412.116470][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  412.715057][T10575] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1981'.
[  412.724102][T10575] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1981'.
[  412.733123][T10575] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1981'.
[  412.742117][T10575] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1981'.
[  412.751114][T10575] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1981'.
[  412.760148][T10575] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1981'.
[  412.769417][T10575] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1981'.
[  412.778436][T10575] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1981'.
[  412.787498][T10575] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1981'.
[  412.796553][T10575] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1981'.
[  412.806575][T10575] device batadv_slave_1 left promiscuous mode
[  412.813308][T10575] device ip6gre1 left promiscuous mode
[  412.819064][T10575] device bond2 left promiscuous mode
[  413.612389][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  415.240711][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  415.481671][T10607] tipc: Failed to remove unknown binding: 66,0,0/0:2903619250/2903619252
[  415.521726][T10607] tipc: Failed to remove unknown binding: 66,0,0/0:2903619250/2903619251
[  415.569613][T10612] tipc: Failed to remove unknown binding: 66,0,0/0:2903619250/2903619252
[  415.608119][T10612] tipc: Failed to remove unknown binding: 66,0,0/0:2903619250/2903619251
[  416.934532][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  417.938714][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  418.523823][T10668] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  418.990640][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  419.502840][T10677] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  420.278844][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  420.438550][T10687] cgroup: Setting release_agent not allowed
[  421.536729][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  424.206306][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  424.311368][T10720] __nla_validate_parse: 173 callbacks suppressed
[  424.311419][T10720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2028'.
[  424.391009][T10720] 8021q: adding VLAN 0 to HW filter on device bond4
[  424.408976][T10724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2028'.
[  424.447074][T10724] bond4: (slave bridge2): Enslaving as an active interface with an up link
[  424.488210][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready
[  425.238579][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  426.258113][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  427.340238][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  428.121035][T10751] SET target dimension over the limit!
[  428.733984][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  428.930528][T10762] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2037'.
[  428.981880][T10760] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2036'.
[  428.997317][T10760] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2036'.
[  430.072162][    C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available
[  430.080396][    C0] ==================================================================
[  430.089312][    C0] BUG: KASAN: use-after-free in __nft_trace_packet+0x135/0x150
[  430.097141][    C0] Read of size 2 at addr ffff88804ff1c080 by task ksoftirqd/0/14
[  430.104961][    C0] 
[  430.107390][    C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0
[  430.114710][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  430.124822][    C0] Call Trace:
[  430.128204][    C0]  <TASK>
[  430.131224][    C0]  dump_stack_lvl+0x188/0x250
[  430.136083][    C0]  ? show_regs_print_info+0x20/0x20
[  430.141466][    C0]  ? _printk+0xda/0x130
[  430.145685][    C0]  ? __nft_trace_packet+0x135/0x150
[  430.150938][    C0]  ? load_image+0x400/0x400
[  430.155480][    C0]  ? nft_synproxy_do_eval+0x3c9/0x570
[  430.160979][    C0]  print_address_description+0x60/0x2d0
[  430.166570][    C0]  ? __nft_trace_packet+0x135/0x150
[  430.171819][    C0]  kasan_report+0xdf/0x130
[  430.176399][    C0]  ? __nft_trace_packet+0x135/0x150
[  430.181649][    C0]  __nft_trace_packet+0x135/0x150
[  430.186721][    C0]  nft_do_chain+0x12a5/0x14f0
[  430.191434][    C0]  ? nf_hook_slow+0x19b/0x200
[  430.196235][    C0]  ? nft_fwd_dup_netdev_offload+0x120/0x120
[  430.202288][    C0]  ? __local_bh_enable_ip+0xd7/0x1c0
[  430.207743][    C0]  ? ipv6_find_tlv+0x270/0x270
[  430.212669][    C0]  nft_do_chain_inet+0x25c/0x340
[  430.217779][    C0]  ? nft_do_chain_arp+0xf0/0xf0
[  430.222681][    C0]  ? nf_nat_ipv6_fn+0x223/0x2e0
[  430.227581][    C0]  ? nf_nat_ipv6_local_fn+0x390/0x390
[  430.233007][    C0]  ? ip6table_mangle_hook+0x23c/0x7a0
[  430.238500][    C0]  ? lock_downgrade+0x820/0x830
[  430.243480][    C0]  ? nf_nat_ipv6_local_fn+0x390/0x390
[  430.248900][    C0]  ? nft_do_chain_arp+0xf0/0xf0
[  430.253791][    C0]  nf_hook_slow+0xb9/0x200
[  430.258298][    C0]  ? ip6_input+0xa0/0xa0
[  430.262671][    C0]  NF_HOOK+0x1f2/0x390
[  430.266781][    C0]  ? ip6_input+0xa0/0xa0
[  430.271070][    C0]  ? ip6_rcv_core+0x1620/0x1620
[  430.275967][    C0]  ? ip6_input+0xa0/0xa0
[  430.280246][    C0]  ? ip6_rcv_finish_core+0x20d/0x420
[  430.285580][    C0]  ? ip6_rcv_finish+0x16b/0x240
[  430.290720][    C0]  ? refcount_add+0x80/0x80
[  430.295286][    C0]  NF_HOOK+0x303/0x390
[  430.299436][    C0]  ? refcount_add+0x80/0x80
[  430.304070][    C0]  ? ip6_rcv_core+0x1620/0x1620
[  430.308966][    C0]  ? refcount_add+0x80/0x80
[  430.313520][    C0]  ? ip6_rcv_finish_core+0x420/0x420
[  430.318854][    C0]  __netif_receive_skb+0xcc/0x290
[  430.324036][    C0]  process_backlog+0x370/0x790
[  430.328851][    C0]  ? rps_trigger_softirq+0x210/0x210
[  430.334174][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  430.340205][    C0]  ? lock_chain_count+0x20/0x20
[  430.345105][    C0]  ? __rwlock_init+0x140/0x140
[  430.349919][    C0]  __napi_poll+0xc0/0x430
[  430.354379][    C0]  ? net_rx_action+0x307/0xa10
[  430.359185][    C0]  net_rx_action+0x4d4/0xa10
[  430.363827][    C0]  ? net_tx_action+0x880/0x880
[  430.368630][    C0]  ? detach_timer+0x2b0/0x2b0
[  430.373452][    C0]  handle_softirqs+0x339/0x830
[  430.378315][    C0]  ? run_ksoftirqd+0xa4/0x100
[  430.383037][    C0]  ? do_softirq+0x210/0x210
[  430.387592][    C0]  ? run_ksoftirqd+0x81/0x100
[  430.392405][    C0]  ? ksoftirqd_should_run+0x20/0x20
[  430.398160][    C0]  ? lockdep_hardirqs_off+0x70/0x100
[  430.403761][    C0]  ? ksoftirqd_should_run+0x20/0x20
[  430.409007][    C0]  run_ksoftirqd+0xa4/0x100
[  430.413558][    C0]  ? ksoftirqd_should_run+0x20/0x20
[  430.418804][    C0]  ? preempt_schedule_thunk+0x16/0x18
[  430.424259][    C0]  ? smpboot_thread_fn+0x5bc/0x970
[  430.429517][    C0]  smpboot_thread_fn+0x4f6/0x970
[  430.434518][    C0]  kthread+0x436/0x520
[  430.438733][    C0]  ? cpu_report_death+0x180/0x180
[  430.443798][    C0]  ? kthread_blkcg+0xd0/0xd0
[  430.448435][    C0]  ret_from_fork+0x1f/0x30
[  430.452926][    C0]  </TASK>
[  430.456051][    C0] 
[  430.458402][    C0] Allocated by task 10750:
[  430.462908][    C0]  __kasan_slab_alloc+0x9c/0xd0
[  430.467849][    C0]  slab_post_alloc_hook+0x4c/0x380
[  430.473022][    C0]  kmem_cache_alloc_node+0x12d/0x2d0
[  430.478341][    C0]  __alloc_skb+0xf4/0x750
[  430.482772][    C0]  synproxy_send_client_synack_ipv6+0x161/0xc60
[  430.489052][    C0]  nft_synproxy_eval_v6+0x347/0x4e0
[  430.494307][    C0]  nft_synproxy_do_eval+0x3c9/0x570
[  430.499544][    C0]  nft_do_chain+0x48c/0x14f0
[  430.504192][    C0]  nft_do_chain_inet+0x25c/0x340
[  430.509171][    C0]  nf_hook_slow+0xb9/0x200
[  430.513622][    C0]  NF_HOOK+0x1f2/0x390
[  430.517728][    C0]  NF_HOOK+0x303/0x390
[  430.521829][    C0]  __netif_receive_skb+0xcc/0x290
[  430.526890][    C0]  process_backlog+0x370/0x790
[  430.531694][    C0]  __napi_poll+0xc0/0x430
[  430.536064][    C0]  net_rx_action+0x4d4/0xa10
[  430.540700][    C0]  handle_softirqs+0x339/0x830
[  430.545499][    C0]  __irq_exit_rcu+0x13b/0x230
[  430.550219][    C0]  irq_exit_rcu+0x5/0x20
[  430.554500][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  430.560195][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  430.566364][    C0] 
[  430.568716][    C0] Freed by task 14:
[  430.572543][    C0]  kasan_set_track+0x4b/0x70
[  430.577176][    C0]  kasan_set_free_info+0x1f/0x40
[  430.582184][    C0]  ____kasan_slab_free+0xd5/0x110
[  430.587249][    C0]  slab_free_freelist_hook+0xea/0x170
[  430.592666][    C0]  kmem_cache_free+0x8f/0x210
[  430.597415][    C0]  nft_synproxy_eval_v6+0x34f/0x4e0
[  430.602663][    C0]  nft_synproxy_do_eval+0x3c9/0x570
[  430.607900][    C0]  nft_do_chain+0x48c/0x14f0
[  430.612524][    C0]  nft_do_chain_inet+0x25c/0x340
[  430.617502][    C0]  nf_hook_slow+0xb9/0x200
[  430.621992][    C0]  NF_HOOK+0x1f2/0x390
[  430.626096][    C0]  NF_HOOK+0x303/0x390
[  430.630198][    C0]  __netif_receive_skb+0xcc/0x290
[  430.635265][    C0]  process_backlog+0x370/0x790
[  430.640064][    C0]  __napi_poll+0xc0/0x430
[  430.644432][    C0]  net_rx_action+0x4d4/0xa10
[  430.649059][    C0]  handle_softirqs+0x339/0x830
[  430.653899][    C0]  run_ksoftirqd+0xa4/0x100
[  430.658442][    C0]  smpboot_thread_fn+0x4f6/0x970
[  430.663417][    C0]  kthread+0x436/0x520
[  430.667530][    C0]  ret_from_fork+0x1f/0x30
[  430.671984][    C0] 
[  430.674335][    C0] The buggy address belongs to the object at ffff88804ff1c000
[  430.674335][    C0]  which belongs to the cache skbuff_head_cache of size 232
[  430.689106][    C0] The buggy address is located 128 bytes inside of
[  430.689106][    C0]  232-byte region [ffff88804ff1c000, ffff88804ff1c0e8)
[  430.702422][    C0] The buggy address belongs to the page:
[  430.708112][    C0] page:ffffea00013fc700 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4ff1c
[  430.718308][    C0] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[  430.725933][    C0] raw: 00fff00000000200 dead000000000100 dead000000000122 ffff88801bbe4140
[  430.734566][    C0] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000
[  430.743188][    C0] page dumped because: kasan: bad access detected
[  430.749654][    C0] page_owner tracks the page as allocated
[  430.755415][    C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 9116, ts 319100535602, free_ts 317544009262
[  430.773182][    C0]  get_page_from_freelist+0x1bbd/0x1ca0
[  430.778857][    C0]  __alloc_pages+0x1ee/0x480
[  430.783554][    C0]  new_slab+0xc0/0x4b0
[  430.787667][    C0]  ___slab_alloc+0x80a/0xdd0
[  430.792292][    C0]  kmem_cache_alloc_node+0x1c3/0x2d0
[  430.797701][    C0]  __alloc_skb+0xf4/0x750
[  430.802065][    C0]  __pskb_copy_fclone+0xa2/0x11d0
[  430.807127][    C0]  tipc_clone_to_loopback+0x108/0x4a0
[  430.812670][    C0]  tipc_node_xmit+0xd37/0xf20
[  430.817458][    C0]  __tipc_sendmsg+0x1ea5/0x2bf0
[  430.822441][    C0]  tipc_sendmsg+0x51/0x70
[  430.826807][    C0]  ____sys_sendmsg+0x5b7/0x8f0
[  430.831672][    C0]  ___sys_sendmsg+0x236/0x2e0
[  430.836385][    C0]  __sys_sendmmsg+0x2ba/0x500
[  430.841232][    C0]  __x64_sys_sendmmsg+0x9c/0xb0
[  430.846214][    C0]  do_syscall_64+0x4c/0xa0
[  430.850665][    C0] page last free stack trace:
[  430.855359][    C0]  free_unref_page_prepare+0x637/0x6c0
[  430.860873][    C0]  free_unref_page_list+0x119/0x820
[  430.866115][    C0]  release_pages+0x186c/0x1be0
[  430.871171][    C0]  tlb_finish_mmu+0x1b4/0x370
[  430.875952][    C0]  unmap_region+0x344/0x3b0
[  430.880588][    C0]  __do_munmap+0x9f8/0xdf0
[  430.885049][    C0]  __vm_munmap+0x140/0x240
[  430.889533][    C0]  __x64_sys_munmap+0x67/0x70
[  430.894243][    C0]  do_syscall_64+0x4c/0xa0
[  430.898696][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  430.904803][    C0] 
[  430.907168][    C0] Memory state around the buggy address:
[  430.912826][    C0]  ffff88804ff1bf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  430.920921][    C0]  ffff88804ff1c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  430.929022][    C0] >ffff88804ff1c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc
[  430.937106][    C0]                    ^
[  430.941208][    C0]  ffff88804ff1c100: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[  430.949305][    C0]  ffff88804ff1c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  430.957387][    C0] ==================================================================
[  430.965452][    C0] Disabling lock debugging due to kernel taint
[  430.971761][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  430.978974][    C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Tainted: G    B             syzkaller #0
[  430.987674][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  430.998372][    C0] Call Trace:
[  431.001683][    C0]  <TASK>
[  431.004640][    C0]  dump_stack_lvl+0x188/0x250
[  431.009362][    C0]  ? show_regs_print_info+0x20/0x20
[  431.014603][    C0]  ? load_image+0x400/0x400
[  431.019150][    C0]  panic+0x2e5/0x810
[  431.023165][    C0]  ? bpf_jit_dump+0xd0/0xd0
[  431.027712][    C0]  ? _raw_spin_unlock_irqrestore+0xbc/0x120
[  431.033658][    C0]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  431.039594][    C0]  ? _raw_spin_unlock+0x40/0x40
[  431.044488][    C0]  ? print_memory_metadata+0x314/0x400
[  431.049992][    C0]  ? __nft_trace_packet+0x135/0x150
[  431.055222][    C0]  check_panic_on_warn+0x80/0xa0
[  431.060454][    C0]  ? __nft_trace_packet+0x135/0x150
[  431.065698][    C0]  end_report+0x6d/0xf0
[  431.069896][    C0]  kasan_report+0x102/0x130
[  431.074435][    C0]  ? __nft_trace_packet+0x135/0x150
[  431.079646][    C0]  __nft_trace_packet+0x135/0x150
[  431.084703][    C0]  nft_do_chain+0x12a5/0x14f0
[  431.089421][    C0]  ? nf_hook_slow+0x19b/0x200
[  431.094129][    C0]  ? nft_fwd_dup_netdev_offload+0x120/0x120
[  431.100074][    C0]  ? __local_bh_enable_ip+0xd7/0x1c0
[  431.105400][    C0]  ? ipv6_find_tlv+0x270/0x270
[  431.110216][    C0]  nft_do_chain_inet+0x25c/0x340
[  431.115182][    C0]  ? nft_do_chain_arp+0xf0/0xf0
[  431.120046][    C0]  ? nf_nat_ipv6_fn+0x223/0x2e0
[  431.124956][    C0]  ? nf_nat_ipv6_local_fn+0x390/0x390
[  431.130341][    C0]  ? ip6table_mangle_hook+0x23c/0x7a0
[  431.136880][    C0]  ? lock_downgrade+0x820/0x830
[  431.141760][    C0]  ? nf_nat_ipv6_local_fn+0x390/0x390
[  431.147160][    C0]  ? nft_do_chain_arp+0xf0/0xf0
[  431.152049][    C0]  nf_hook_slow+0xb9/0x200
[  431.156492][    C0]  ? ip6_input+0xa0/0xa0
[  431.160766][    C0]  NF_HOOK+0x1f2/0x390
[  431.164956][    C0]  ? ip6_input+0xa0/0xa0
[  431.169218][    C0]  ? ip6_rcv_core+0x1620/0x1620
[  431.174098][    C0]  ? ip6_input+0xa0/0xa0
[  431.178374][    C0]  ? ip6_rcv_finish_core+0x20d/0x420
[  431.183684][    C0]  ? ip6_rcv_finish+0x16b/0x240
[  431.188539][    C0]  ? refcount_add+0x80/0x80
[  431.193073][    C0]  NF_HOOK+0x303/0x390
[  431.197155][    C0]  ? refcount_add+0x80/0x80
[  431.201661][    C0]  ? ip6_rcv_core+0x1620/0x1620
[  431.206525][    C0]  ? refcount_add+0x80/0x80
[  431.211207][    C0]  ? ip6_rcv_finish_core+0x420/0x420
[  431.216586][    C0]  __netif_receive_skb+0xcc/0x290
[  431.221638][    C0]  process_backlog+0x370/0x790
[  431.226441][    C0]  ? rps_trigger_softirq+0x210/0x210
[  431.231781][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  431.237783][    C0]  ? lock_chain_count+0x20/0x20
[  431.242663][    C0]  ? __rwlock_init+0x140/0x140
[  431.247431][    C0]  __napi_poll+0xc0/0x430
[  431.251773][    C0]  ? net_rx_action+0x307/0xa10
[  431.256580][    C0]  net_rx_action+0x4d4/0xa10
[  431.261201][    C0]  ? net_tx_action+0x880/0x880
[  431.266084][    C0]  ? detach_timer+0x2b0/0x2b0
[  431.270782][    C0]  handle_softirqs+0x339/0x830
[  431.275553][    C0]  ? run_ksoftirqd+0xa4/0x100
[  431.280238][    C0]  ? do_softirq+0x210/0x210
[  431.284854][    C0]  ? run_ksoftirqd+0x81/0x100
[  431.289717][    C0]  ? ksoftirqd_should_run+0x20/0x20
[  431.295040][    C0]  ? lockdep_hardirqs_off+0x70/0x100
[  431.300360][    C0]  ? ksoftirqd_should_run+0x20/0x20
[  431.305568][    C0]  run_ksoftirqd+0xa4/0x100
[  431.310079][    C0]  ? ksoftirqd_should_run+0x20/0x20
[  431.315282][    C0]  ? preempt_schedule_thunk+0x16/0x18
[  431.320668][    C0]  ? smpboot_thread_fn+0x5bc/0x970
[  431.325965][    C0]  smpboot_thread_fn+0x4f6/0x970
[  431.331032][    C0]  kthread+0x436/0x520
[  431.335142][    C0]  ? cpu_report_death+0x180/0x180
[  431.340203][    C0]  ? kthread_blkcg+0xd0/0xd0
[  431.344821][    C0]  ret_from_fork+0x1f/0x30
[  431.349257][    C0]  </TASK>
[  431.352727][    C0] Kernel Offset: disabled
[  431.357159][    C0] Rebooting in 86400 seconds..