last executing test programs:

1m42.120458396s ago: executing program 3 (id=44):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
r1 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2})
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r1, 0x12, 0x0, 0x0)

1m41.987987688s ago: executing program 3 (id=46):
socket$pppl2tp(0x18, 0x1, 0x1)
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m41.651499875s ago: executing program 3 (id=48):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81, 0x20000009}]}}}}}}}, 0x0)

1m41.588342536s ago: executing program 3 (id=49):
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/../file0\x00')
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00')

1m41.496590288s ago: executing program 3 (id=50):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80, &(0x7f0000000200)=ANY=[@ANYBLOB="626172726965722c63726561746f723d5a1b3b9a2c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',nobarrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6465636f6d706f73652c6e6c733d61736369692c00cee75bcdc1f0956160f9a133a39cdb37a556d32b64f617bdb89ef4e86432c1d3cd000252cf2ff7ce4cb7f1cb79e82cd6a781dcebb2add8a2e4d25e2d8ac31d62fb9fe0fbe16ec31b399c3a2738edb790046f7a6bd1d23c73359316de5b83e30367873b4e9490449c1dd6340bddd3860bdc8d72700370c4d2748302022311504dffd276a81777833bc1809e465d1aa76ca123cd18474de12ba73f42274b4f57cb9cbac0214e2f91f96b5da4"], 0x44, 0x71b, &(0x7f00000007c0)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getdents64(r0, &(0x7f00000000c0)=""/97, 0x61)

1m41.232178383s ago: executing program 3 (id=51):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x1000)
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file7\x00', 0x305043, 0x28)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0)

1m40.836548781s ago: executing program 32 (id=51):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x1000)
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file7\x00', 0x305043, 0x28)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0)

7.988096643s ago: executing program 2 (id=982):
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110, 0x1, 0xfffffffc}}], 0x18, 0x4c00}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004441)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0xe429, @none, 0x401}, 0xe)
socket(0x2b, 0x6, 0x8000)

3.608405369s ago: executing program 4 (id=1023):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002d00)={0x9, {{0xa, 0x4e23, 0x1000, @mcast2, 0x3}}, {{0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb0}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x5, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r1, 0x2)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

2.594925549s ago: executing program 4 (id=1037):
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000000010101020000000000000040000000000c00198008000200050000000600124000030000380002802c00018014000300fec000000000000000000000000000bb14000400fe880000000000000000000000000001040003"], 0x60}}, 0x0)

2.451532842s ago: executing program 4 (id=1040):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000bc0)={{@my=0x0}, {@my=0x0, 0x4000}, 0x400, "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"}, 0x418})
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0)
r1 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x4005759, 0x0, 0x3, 0x7fe}, &(0x7f00000003c0)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7})
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100})
io_uring_enter(r1, 0x2311, 0x5, 0x0, 0x0, 0x0)

2.379250973s ago: executing program 0 (id=1041):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
close(0xffffffffffffffff)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket(0x8, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000)
bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfd, 0x80}, 0xc)

2.290486315s ago: executing program 4 (id=1043):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9)
sendto$inet6(r1, &(0x7f00000000c0)="b2", 0x1, 0x24004844, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x9}, 0x1c, &(0x7f00000004c0)}}], 0x1, 0x2400c044)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x970b)
shutdown(0xffffffffffffffff, 0x1)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0x8, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000080008400000000a0400164008001540000000030400170058000d"], 0xd4}}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x20000010)
unshare(0x62040200)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r5 = socket$pppoe(0x18, 0x1, 0x0)
sendmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@phonet={0x23, 0xff, 0x5, 0x9}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x3a0}}], 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.708354466s ago: executing program 0 (id=1046):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002d00)={0x9, {{0xa, 0x4e23, 0x1000, @mcast2, 0x3}}, {{0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb0}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x5, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r1, 0x2)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

1.665057637s ago: executing program 2 (id=1047):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYRES8=r1], 0x10)
close(r0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r2, 0xd75)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1, <r3=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r3, &(0x7f0000000200)}, 0x20)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r4, &(0x7f0000002c00)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x17}, 0xc}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@dstopts_2292={{0x14, 0x29, 0x4, {0x2c}}}], 0x14}}], 0x1, 0x40010)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@ipv6_newrule={0x60, 0x20, 0x803, 0x70bd26, 0x25dfdbfb, {0xa, 0x10, 0x80, 0x8, 0xdd, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'syzkaller1\x00'}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x20}}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x10001}]}, 0x60}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f00000001c0)={'erspan0\x00', <r6=>0x0, 0x7, 0x8000, 0x3, 0x3, {{0x14, 0x4, 0x0, 0x7, 0x50, 0x67, 0x0, 0x5f, 0x29, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x14, 0x44, 0x0, 0x0, [0x12a6, 0x4, 0x3, 0x3]}, @ssrr={0x89, 0x7, 0x72, [@multicast2]}, @noop, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0x11, [@empty, @multicast1, @empty, @broadcast, @empty, @rand_addr=0x64010101]}]}}}}})
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="b000000008021100000108021100000008021100000010000000020000005819ea9fa1794bcb5a59e8cfee4e79a3a9fa906975f6e8c5e5fb4b2a7752d4f0577b8b1d139029cb85ebeccb91abbc45aeff414735599e0ffd6cc09be0941fcdcf0576a6b6905ab527f5d429e46f76cd9300fd3d6e25ecc487fdf313e106ab8f143bf99a2d6dd77b80ee0dac72e6fe8dda6411512da1be22b01577d6bea07ad502631d36af03"], 0x1e)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000180)={0x0, 0x0, 0xffffffff}, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r7, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r9 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x2e, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r10, {0x4, 0x8001}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2006c805}, 0x20040054)

1.068201089s ago: executing program 1 (id=1053):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001480)="9f", 0x0, 0x9, r0}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

979.995731ms ago: executing program 1 (id=1054):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)

971.806571ms ago: executing program 1 (id=1055):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, 0x0, 0x0)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001300))
readv(r0, &(0x7f0000001440)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1)

835.665154ms ago: executing program 1 (id=1056):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40, 0x0, 0x0, 0x100}]}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd01000000000014"], 0xfdef)

690.549676ms ago: executing program 2 (id=1057):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r1, r0, 0x2f}, 0x20)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000940)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f0000000400000004000000", @ANYBLOB="f6ec4df7f5"], 0x20)

676.867776ms ago: executing program 0 (id=1058):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23)

488.04777ms ago: executing program 2 (id=1059):
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_setup(0xed9, &(0x7f0000000280)={0x0, 0x0, 0x1000, 0x3, 0x36b}, 0x0, 0x0)
inotify_init()
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
epoll_create1(0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x3)
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3)

487.83829ms ago: executing program 0 (id=1060):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f8002400000000000000200000001000000000008", 0x1b)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r1, 0x8b2a, &(0x7f0000000040))
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

395.064582ms ago: executing program 1 (id=1061):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, 0x0, 0x20008850)
sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000066c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {0x10, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

345.333483ms ago: executing program 0 (id=1062):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001480)="9f", 0x0, 0x9, r0}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

302.417174ms ago: executing program 2 (id=1063):
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9f00f0ffffffffffff559a85603b", 0x22}], 0x2)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x9, 0xd05, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'})

205.855156ms ago: executing program 4 (id=1064):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="34000000050601030000000000000000000000040900020073797a41000000000900030073797a30000000000500010007"], 0x34}, 0x1, 0x0, 0x0, 0x4084}, 0x14000800)

152.092187ms ago: executing program 0 (id=1065):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000680)=0x1090, 0x4)

135.404307ms ago: executing program 1 (id=1066):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYRES8=r1], 0x10)
close(r0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r2, 0xd75)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1, <r3=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r3, &(0x7f0000000200)}, 0x20)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r4, &(0x7f0000002c00)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x17}, 0xc}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@dstopts_2292={{0x14, 0x29, 0x4, {0x2c}}}], 0x14}}], 0x1, 0x40010)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@ipv6_newrule={0x60, 0x20, 0x803, 0x70bd26, 0x25dfdbfb, {0xa, 0x10, 0x80, 0x8, 0xdd, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'syzkaller1\x00'}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x20}}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x10001}]}, 0x60}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f00000001c0)={'erspan0\x00', <r6=>0x0, 0x7, 0x8000, 0x3, 0x3, {{0x14, 0x4, 0x0, 0x7, 0x50, 0x67, 0x0, 0x5f, 0x29, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x14, 0x44, 0x0, 0x0, [0x12a6, 0x4, 0x3, 0x3]}, @ssrr={0x89, 0x7, 0x72, [@multicast2]}, @noop, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0x11, [@empty, @multicast1, @empty, @broadcast, @empty, @rand_addr=0x64010101]}]}}}}})
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="b000000008021100000108021100000008021100000010000000020000005819ea9fa1794bcb5a59e8cfee4e79a3a9fa906975f6e8c5e5fb4b2a7752d4f0577b8b1d139029cb85ebeccb91abbc45aeff414735599e0ffd6cc09be0941fcdcf0576a6b6905ab527f5d429e46f76cd9300fd3d6e25ecc487fdf313e106ab8f143bf99a2d6dd77b80ee0dac72e6fe8dda6411512da1be22b01577d6bea07ad502631d36af03"], 0x1e)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000042000000b700000000000010950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836801ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d09a0a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a504a0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000180)={0x0, 0x0, 0xffffffff}, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r7, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r9 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x2e, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r10, {0x4, 0x8001}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2006c805}, 0x20040054)

113.439608ms ago: executing program 2 (id=1067):
poll(0x0, 0x0, 0xfff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0x12)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)

0s ago: executing program 4 (id=1068):
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e1a, @rand_addr=0x64010108}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x84, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2})
write$tun(0xffffffffffffffff, 0x0, 0xdc)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@private=0xa010100, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffefffe}, {0xfffffffa, 0x3fc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffcff}]}, 0x140}}, 0x844)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.17' (ED25519) to the list of known hosts.
[   58.914890][ T5774] cgroup: Unknown subsys name 'net'
[   59.052753][ T5774] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   60.384668][ T5774] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.298497][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.316427][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.324154][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.332459][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.340284][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   62.347742][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.406224][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.414810][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.422371][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.436574][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.444549][ T5792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   62.451976][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.464159][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   62.467924][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.479247][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   62.487208][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   62.495424][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.503785][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.511267][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   62.519739][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   62.529446][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.547188][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   62.547289][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   62.562436][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.830342][ T5783] chnl_net:caif_netlink_parms(): no params data found
[   63.025540][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.033874][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.041274][ T5783] bridge_slave_0: entered allmulticast mode
[   63.048685][ T5783] bridge_slave_0: entered promiscuous mode
[   63.057077][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.064172][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.071395][ T5783] bridge_slave_1: entered allmulticast mode
[   63.078430][ T5783] bridge_slave_1: entered promiscuous mode
[   63.088613][ T5787] chnl_net:caif_netlink_parms(): no params data found
[   63.152939][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.165384][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.188096][ T5788] chnl_net:caif_netlink_parms(): no params data found
[   63.217389][ T5793] chnl_net:caif_netlink_parms(): no params data found
[   63.271609][ T5783] team0: Port device team_slave_0 added
[   63.281018][ T5783] team0: Port device team_slave_1 added
[   63.338845][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.346753][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.353878][ T5787] bridge_slave_0: entered allmulticast mode
[   63.361870][ T5787] bridge_slave_0: entered promiscuous mode
[   63.386573][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.393544][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.419753][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.431374][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.439466][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.446849][ T5787] bridge_slave_1: entered allmulticast mode
[   63.453457][ T5787] bridge_slave_1: entered promiscuous mode
[   63.483110][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.490202][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.516358][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.549823][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.557376][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.564617][ T5788] bridge_slave_0: entered allmulticast mode
[   63.572005][ T5788] bridge_slave_0: entered promiscuous mode
[   63.584052][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.591291][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.599102][ T5788] bridge_slave_1: entered allmulticast mode
[   63.606310][ T5788] bridge_slave_1: entered promiscuous mode
[   63.633936][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.641302][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.648752][ T5793] bridge_slave_0: entered allmulticast mode
[   63.655887][ T5793] bridge_slave_0: entered promiscuous mode
[   63.675087][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.697459][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.704600][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.712016][ T5793] bridge_slave_1: entered allmulticast mode
[   63.719303][ T5793] bridge_slave_1: entered promiscuous mode
[   63.738797][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.781772][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.794726][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.817788][ T5783] hsr_slave_0: entered promiscuous mode
[   63.824765][ T5783] hsr_slave_1: entered promiscuous mode
[   63.857556][ T5787] team0: Port device team_slave_0 added
[   63.866818][ T5787] team0: Port device team_slave_1 added
[   63.874550][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.922828][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.949562][ T5788] team0: Port device team_slave_0 added
[   63.984634][ T5788] team0: Port device team_slave_1 added
[   64.003435][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.010687][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.037089][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.050147][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.057292][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.083269][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.106442][ T5793] team0: Port device team_slave_0 added
[   64.148863][ T5793] team0: Port device team_slave_1 added
[   64.156325][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.163272][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.189865][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.238576][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.245553][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.272441][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.298588][ T5787] hsr_slave_0: entered promiscuous mode
[   64.304803][ T5787] hsr_slave_1: entered promiscuous mode
[   64.311333][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.319308][ T5787] Cannot create hsr debugfs directory
[   64.329800][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.336874][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.363108][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.399766][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.406892][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.433223][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.433337][ T5792] Bluetooth: hci0: command tx timeout
[   64.538012][ T5788] hsr_slave_0: entered promiscuous mode
[   64.546809][ T5788] hsr_slave_1: entered promiscuous mode
[   64.552841][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.560814][ T5788] Cannot create hsr debugfs directory
[   64.576268][ T5786] Bluetooth: hci1: command tx timeout
[   64.580871][ T5792] Bluetooth: hci3: command tx timeout
[   64.591407][ T5793] hsr_slave_0: entered promiscuous mode
[   64.598059][ T5793] hsr_slave_1: entered promiscuous mode
[   64.604146][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.612068][ T5793] Cannot create hsr debugfs directory
[   64.645732][ T5792] Bluetooth: hci2: command tx timeout
[   64.834815][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.859675][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.870237][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.900286][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.978740][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   64.990122][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   65.005173][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   65.016696][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   65.092983][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.115983][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.125557][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.141293][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.216444][ T5793] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.230466][ T5793] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.256143][ T5793] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.282016][ T5793] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.297611][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.361309][ T5783] 8021q: adding VLAN 0 to HW filter on device team0
[   65.397034][ T3479] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.404298][ T3479] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.421415][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.448027][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.458549][ T1326] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.465707][ T1326] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.492964][ T5787] 8021q: adding VLAN 0 to HW filter on device team0
[   65.536816][   T77] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.543931][   T77] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.562329][ T5788] 8021q: adding VLAN 0 to HW filter on device team0
[   65.574946][ T1075] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.582120][ T1075] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.618565][ T1326] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.625741][ T1326] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.648336][ T1310] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.655449][ T1310] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.740436][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.801634][ T5793] 8021q: adding VLAN 0 to HW filter on device team0
[   65.820445][   T77] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.827637][   T77] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.888147][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.895324][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.051182][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.169811][ T5783] veth0_vlan: entered promiscuous mode
[   66.221704][ T5783] veth1_vlan: entered promiscuous mode
[   66.271409][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.307154][ T5783] veth0_macvtap: entered promiscuous mode
[   66.324639][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.334767][ T5783] veth1_macvtap: entered promiscuous mode
[   66.363774][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.391370][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.403094][ T5783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.414139][ T5783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.423727][ T5783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.432873][ T5783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.488294][ T5792] Bluetooth: hci0: command tx timeout
[   66.515383][ T5788] veth0_vlan: entered promiscuous mode
[   66.534363][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.558187][ T5787] veth0_vlan: entered promiscuous mode
[   66.571738][ T5788] veth1_vlan: entered promiscuous mode
[   66.617671][ T5787] veth1_vlan: entered promiscuous mode
[   66.646979][ T5792] Bluetooth: hci3: command tx timeout
[   66.652410][ T5792] Bluetooth: hci1: command tx timeout
[   66.682047][ T3479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.698707][ T3479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.726139][ T5792] Bluetooth: hci2: command tx timeout
[   66.744517][ T5793] veth0_vlan: entered promiscuous mode
[   66.752755][ T5788] veth0_macvtap: entered promiscuous mode
[   66.774499][ T5788] veth1_macvtap: entered promiscuous mode
[   66.787046][ T3479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.799356][ T5793] veth1_vlan: entered promiscuous mode
[   66.808366][ T3479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.823972][ T5787] veth0_macvtap: entered promiscuous mode
[   66.835530][ T5787] veth1_macvtap: entered promiscuous mode
[   66.858057][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.873619][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.892467][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.918562][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.929975][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.947484][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.980686][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.995446][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.019053][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.029464][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.042230][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.053970][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.064630][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.075511][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.089903][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.104824][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.115898][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.126960][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.137816][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.149407][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.160621][ T5793] veth0_macvtap: entered promiscuous mode
[   67.173811][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.183769][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.192921][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.201772][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.226521][ T5793] veth1_macvtap: entered promiscuous mode
[   67.280020][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.290998][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.303206][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.313748][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.323631][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.334268][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.347231][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.395260][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.419723][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.448510][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.459536][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.469578][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.480456][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.496460][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.543969][ T5793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.563727][ T5793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.572845][ T5793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.582092][ T5793] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.641085][   T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.682496][   T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.701022][ T3447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.746127][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   67.757713][ T3447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.802345][   T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.819257][   T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.883996][ T3479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.892792][ T3479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.927566][ T1075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.943661][ T1075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.004845][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.024729][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.483425][ T5882] syz.3.6[5882]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   68.520511][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   68.589986][ T5792] Bluetooth: hci0: command tx timeout
[   68.690392][ T5826] kernel write not supported for file /fb0 (pid: 5826 comm: kworker/0:4)
[   68.708994][ T5882] loop3: detected capacity change from 0 to 1024
[   68.726320][ T5792] Bluetooth: hci1: command tx timeout
[   68.731759][ T5792] Bluetooth: hci3: command tx timeout
[   68.806897][ T5792] Bluetooth: hci2: command tx timeout
[   68.959863][ T5888] sp0: Synchronizing with TNC
[   69.288381][ T5892] loop1: detected capacity change from 0 to 8
[   69.330027][ T5894] loop2: detected capacity change from 0 to 128
[   69.347320][ T5894] =======================================================
[   69.347320][ T5894] WARNING: The mand mount option has been deprecated and
[   69.347320][ T5894]          and is ignored by this kernel. Remove the mand
[   69.347320][ T5894]          option from the mount to silence this warning.
[   69.347320][ T5894] =======================================================
[   69.449526][ T5892] SQUASHFS error: xz decompression failed, data probably corrupt
[   69.458116][ T5894] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[   69.489451][ T5892] SQUASHFS error: Failed to read block 0x108: -5
[   69.507506][ T5892] SQUASHFS error: Unable to read metadata cache entry [106]
[   69.515045][ T5894] hpfs: filesystem error: improperly stopped
[   69.529534][ T5894] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   69.536340][ T5892] SQUASHFS error: Unable to read inode 0x11f
[   69.567550][ T5894] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[   69.582814][ T5894] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2
[   69.924805][ T5900] loop1: detected capacity change from 0 to 1024
[   69.936087][ T5897] loop2: detected capacity change from 0 to 1024
[   69.944922][ T5897] EXT4-fs: Ignoring removed nobh option
[   69.974138][ T5897] EXT4-fs: Ignoring removed bh option
[   70.029946][ T5900] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5
[   70.050117][ T5897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.090857][ T5900] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[   70.163168][ T5900] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.13: Failed to acquire dquot type 0
[   70.254354][ T5900] EXT4-fs error (device loop1): mb_free_blocks:1938: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[   70.285845][ T5900] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #13: comm syz.1.13: corrupted inode contents
[   70.327494][ T5900] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #13: comm syz.1.13: mark_inode_dirty error
[   70.328813][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.357859][ T5900] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #13: comm syz.1.13: corrupted inode contents
[   70.416416][ T5900] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #13: comm syz.1.13: mark_inode_dirty error
[   70.444221][ T5900] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #13: comm syz.1.13: corrupted inode contents
[   70.458273][ T5900] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[   70.483108][ T5900] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #13: comm syz.1.13: corrupted inode contents
[   70.528978][ T5900] EXT4-fs error (device loop1): ext4_truncate:4288: inode #13: comm syz.1.13: mark_inode_dirty error
[   70.548788][ T5900] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[   70.578526][ T5900] EXT4-fs (loop1): 1 truncate cleaned up
[   70.585463][ T5900] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.646378][ T5792] Bluetooth: hci0: command tx timeout
[   70.755945][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   70.807103][ T5786] Bluetooth: hci1: command tx timeout
[   70.812621][ T5792] Bluetooth: hci3: command tx timeout
[   70.919981][ T5792] Bluetooth: hci2: command tx timeout
[   70.978666][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   70.987431][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   71.080020][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   71.088818][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   71.319226][ T5900] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5
[   71.464798][ T5900] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[   71.533833][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[   71.606268][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   71.652085][ T5900] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.13: Failed to acquire dquot type 0
[   71.663559][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[   71.760887][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.892837][ T5932] netlink: 'syz.3.22': attribute type 10 has an invalid length.
[   71.909888][ T5932] syz_tun: entered promiscuous mode
[   71.930300][ T5932] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   71.935400][  T787] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   72.022516][ T5936] tipc: Started in network mode
[   72.031679][ T5936] tipc: Node identity 12345306f0eb, cluster identity 4711
[   72.062947][ T5936] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.085249][ T5936] syzkaller0: entered promiscuous mode
[   72.085391][ T5938] loop7: detected capacity change from 0 to 7
[   72.095190][ T5936] syzkaller0: entered allmulticast mode
[   72.113803][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   72.117231][ T5940] loop3: detected capacity change from 0 to 512
[   72.123200][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   72.144571][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   72.153796][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   72.182270][ T5940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.182329][ T5938] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   72.194428][  T787] usb 3-1: Using ep0 maxpacket: 8
[   72.198270][  T787] usb 3-1: unable to get BOS descriptor or descriptor too short
[   72.219892][ T5938] Buffer I/O error on dev loop7, logical block 0, async page read
[   72.229910][  T787] usb 3-1: config 4 interface 0 has no altsetting 0
[   72.242855][ T5936] tipc: Resetting bearer <eth:syzkaller0>
[   72.260922][ T5935] tipc: Resetting bearer <eth:syzkaller0>
[   72.274129][  T787] usb 3-1: string descriptor 0 read error: -22
[   72.280753][  T787] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[   72.281129][ T5938] ldm_validate_partition_table(): Disk read failed.
[   72.290041][  T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.294007][ T5940] overlayfs: invalid origin (0000007900b6f17131de1900426c7e7f197b5c7790185b086b37034a008e02b8018e120a005cb5ebbc71b90506dfe8bbe0b869740486db463fb0744ffafbfefd)
[   72.334610][ T5938] Dev loop7: unable to read RDB block 0
[   72.345324][  T787] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[   72.354450][ T5938]  loop7: unable to read partition table
[   72.363452][ T5935] tipc: Disabling bearer <eth:syzkaller0>
[   72.368280][ T5938] loop7: partition table beyond EOD, truncated
[   72.379406][  T787] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   72.407311][ T5938] loop_reread_partitions: partition scan of loop7 () failed (rc=-5)
[   72.417746][  T787] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[   72.427413][  T787] usb 3-1: media controller created
[   72.492221][  T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   72.507181][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.628474][ T5946] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   72.687230][ T5948] loop0: detected capacity change from 0 to 1024
[   72.700714][ T5948] EXT4-fs: Ignoring removed nobh option
[   72.714840][ T5948] EXT4-fs: Ignoring removed bh option
[   72.747677][ T5948] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   72.860272][ T5948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.870399][ T5955] loop3: detected capacity change from 0 to 16
[   72.912512][ T5955] erofs: (device loop3): mounted with root inode @ nid 36.
[   72.933670][   T28] audit: type=1800 audit(1757569624.549:2): pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.29" name="file2" dev="loop0" ino=16 res=0 errno=0
[   73.068763][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.271210][ T5962] loop0: detected capacity change from 0 to 4096
[   73.396121][ T5966] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   73.625657][  T787] zl10353_read_register: readreg error (reg=127, ret==0)
[   73.762709][ T5972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.37'.
[   73.778558][  T787] usb 3-1: USB disconnect, device number 2
[   74.003102][ T5974] loop3: detected capacity change from 0 to 8192
[   74.019468][ T5978] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[   74.026232][ T5978] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   74.056952][ T5974] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   74.065428][ T5978] vhci_hcd vhci_hcd.0: Device attached
[   74.307024][ T5826] usb 33-1: new low-speed USB device number 2 using vhci_hcd
[   74.315668][   T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   74.525715][   T27] usb 1-1: Using ep0 maxpacket: 16
[   74.534701][   T27] usb 1-1: config 0 has no interfaces?
[   74.540582][   T27] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[   74.571500][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.599653][   T27] usb 1-1: config 0 descriptor??
[   74.860799][ T5979] vhci_hcd: connection closed
[   74.862917][   T27] usb 1-1: USB disconnect, device number 2
[   74.885130][ T3447] vhci_hcd: stop threads
[   74.891063][ T3447] vhci_hcd: release socket
[   74.919584][ T3447] vhci_hcd: disconnect device
[   74.985937][ T5826] usb 33-1: device descriptor read/64, error -71
[   75.059886][ T6005] kvm: pic: single mode not supported
[   75.060806][ T6005] kvm: pic: level sensitive irq not supported
[   75.088627][ T6005] kvm: pic: single mode not supported
[   75.095566][ T6005] kvm: pic: single mode not supported
[   75.108524][ T6005] kvm: pic: single mode not supported
[   75.114423][ T6005] kvm: pic: single mode not supported
[   75.119883][ T6005] kvm: pic: level sensitive irq not supported
[   75.205706][ T5826] vhci_hcd: vhci_device speed not set
[   75.301253][ T5787] bond0: (slave syz_tun): Releasing backup interface
[   75.502428][ T3447] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.681486][ T3447] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.819460][ T3447] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.945902][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   76.035393][ T3447] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.416478][ T6024] loop2: detected capacity change from 0 to 4096
[   76.937828][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   76.956121][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   76.964783][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   76.997061][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   77.007511][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   77.015746][   T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   77.024813][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   77.305809][   T27] usb 2-1: Using ep0 maxpacket: 8
[   77.358039][   T27] usb 2-1: unable to get BOS descriptor or descriptor too short
[   77.392722][   T27] usb 2-1: string descriptor 0 read error: -22
[   77.411057][   T27] usb 2-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe
[   77.461662][   T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.475920][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   77.755890][   T27] asix 2-1:7.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[   77.788463][ T6044] loop2: detected capacity change from 0 to 1024
[   78.027068][   T27] asix 2-1:7.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[   78.057312][ T1075] hfsplus: b-tree write err: -5, ino 4
[   78.076708][   T27] asix 2-1:7.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0
[   78.116141][   T27] asix: probe of 2-1:7.0 failed with error -32
[   78.144987][ T6050] xt_HMARK: spi-set and port-set can't be combined
[   78.187625][   T27] usb 2-1: USB disconnect, device number 2
[   78.591978][ T6055] kvm: pic: single mode not supported
[   78.592650][ T6055] kvm: pic: level sensitive irq not supported
[   78.603120][ T6055] kvm: pic: single mode not supported
[   78.611437][ T6055] kvm: pic: single mode not supported
[   78.618275][ T6055] kvm: pic: single mode not supported
[   78.625182][ T6055] kvm: pic: single mode not supported
[   78.630657][ T6055] kvm: pic: level sensitive irq not supported
[   79.130311][ T6034] chnl_net:caif_netlink_parms(): no params data found
[   79.144096][ T5786] Bluetooth: hci1: command tx timeout
[   79.796895][ T6088] loop2: detected capacity change from 0 to 1024
[   79.893207][ T6088] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5
[   79.909643][ T6088] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[   79.925912][ T6088] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.68: Failed to acquire dquot type 0
[   80.002846][ T6088] EXT4-fs error (device loop2): mb_free_blocks:1938: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[   80.032938][ T6088] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #13: comm syz.2.68: corrupted inode contents
[   80.060360][ T6088] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #13: comm syz.2.68: mark_inode_dirty error
[   80.073193][ T6088] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #13: comm syz.2.68: corrupted inode contents
[   80.110308][ T6088] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #13: comm syz.2.68: mark_inode_dirty error
[   80.130604][ T6088] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #13: comm syz.2.68: corrupted inode contents
[   80.164248][ T6088] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[   80.195351][ T6088] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #13: comm syz.2.68: corrupted inode contents
[   80.229453][ T6088] EXT4-fs error (device loop2): ext4_truncate:4288: inode #13: comm syz.2.68: mark_inode_dirty error
[   80.269126][ T6088] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[   80.289950][ T6088] EXT4-fs (loop2): 1 truncate cleaned up
[   80.298760][ T6088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.406697][ T6088] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5
[   80.426662][ T6088] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[   80.442522][ T3479] syzkaller0: tun_net_xmit 76
[   80.452106][ T3479] syzkaller0: tun_net_xmit 48
[   80.457237][ T6088] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.68: Failed to acquire dquot type 0
[   80.470889][ T5833] syzkaller0: tun_net_xmit 76
[   80.564677][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.613883][ T6096] loop0: detected capacity change from 0 to 1024
[   80.738617][ T6034] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.768103][ T6034] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.775343][ T6034] bridge_slave_0: entered allmulticast mode
[   80.815351][ T6034] bridge_slave_0: entered promiscuous mode
[   81.056139][ T1075] hfsplus: b-tree write err: -5, ino 4
[   81.211839][ T5786] Bluetooth: hci1: command tx timeout
[   81.795127][  T786] cfg80211: failed to load regulatory.db
[   82.909171][ T6118] loop2: detected capacity change from 0 to 8
[   82.961267][ T6118] SQUASHFS error: xz decompression failed, data probably corrupt
[   82.977829][ T6118] SQUASHFS error: Failed to read block 0x108: -5
[   82.984213][ T6118] SQUASHFS error: Unable to read metadata cache entry [106]
[   82.993073][ T6118] SQUASHFS error: Unable to read inode 0x11f
[   83.212447][ T6120] loop2: detected capacity change from 0 to 1024
[   83.301725][ T5786] Bluetooth: hci1: command tx timeout
[   83.317123][   T11] hfsplus: b-tree write err: -5, ino 4
[   83.605373][ T6124] kvm: pic: single mode not supported
[   83.606310][ T6124] kvm: pic: level sensitive irq not supported
[   83.612699][ T6124] kvm: pic: single mode not supported
[   83.619940][ T6124] kvm: pic: single mode not supported
[   83.626502][ T6124] kvm: pic: single mode not supported
[   83.632404][ T6124] kvm: pic: single mode not supported
[   83.637945][ T6124] kvm: pic: level sensitive irq not supported
[   84.377393][ T6034] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.415810][ T6034] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.423046][ T6034] bridge_slave_1: entered allmulticast mode
[   84.433878][ T6034] bridge_slave_1: entered promiscuous mode
[   84.514101][ T3447] hsr_slave_0: left promiscuous mode
[   84.536615][ T3447] hsr_slave_1: left promiscuous mode
[   84.546875][ T3447] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.554365][ T3447] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.581250][ T3447] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.589103][ T3447] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.598118][ T3447] bridge_slave_1: left allmulticast mode
[   84.603787][ T3447] bridge_slave_1: left promiscuous mode
[   84.614719][ T3447] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.655025][ T3447] bridge_slave_0: left allmulticast mode
[   84.660801][ T3447] bridge_slave_0: left promiscuous mode
[   84.666971][ T3447] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.701874][ T3447] veth1_macvtap: left promiscuous mode
[   84.709631][ T3447] veth0_macvtap: left promiscuous mode
[   84.717044][ T3447] veth1_vlan: left promiscuous mode
[   84.722610][ T3447] veth0_vlan: left promiscuous mode
[   84.785840][ T5785] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   84.890793][ T6137] loop2: detected capacity change from 0 to 1024
[   84.970628][   T42] hfsplus: b-tree write err: -5, ino 4
[   84.976598][ T5785] usb 2-1: Using ep0 maxpacket: 8
[   84.988385][ T5785] usb 2-1: unable to get BOS descriptor or descriptor too short
[   85.006761][ T5785] usb 2-1: config 4 interface 0 has no altsetting 0
[   85.028364][ T5785] usb 2-1: string descriptor 0 read error: -22
[   85.035909][ T5785] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[   85.045038][ T5785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.088590][ T5785] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[   85.113070][ T5785] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   85.135939][ T5785] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[   85.149907][ T5785] usb 2-1: media controller created
[   85.191272][ T5785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   85.342340][ T6142] loop2: detected capacity change from 0 to 1024
[   85.365787][ T5786] Bluetooth: hci1: command tx timeout
[   85.706202][ T3447] team0 (unregistering): Port device team_slave_1 removed
[   85.751913][ T3447] team0 (unregistering): Port device team_slave_0 removed
[   85.798685][ T3447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   85.842978][ T3447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   86.347754][ T5785] zl10353_read_register: readreg error (reg=127, ret==0)
[   86.416175][ T5785] usb 2-1: USB disconnect, device number 3
[   86.454417][ T3447] bond0 (unregistering): Released all slaves
[   86.670009][ T6034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.797616][ T6034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.838764][   T11] syzkaller0: tun_net_xmit 76
[   86.844273][   T11] syzkaller0: tun_net_xmit 48
[   86.870408][ T5785] syzkaller0: tun_net_xmit 76
[   86.994347][    T9] syzkaller0: tun_net_xmit 76
[   87.037235][    T9] syzkaller0: tun_net_xmit 76
[   87.048519][ T6034] team0: Port device team_slave_0 added
[   87.182247][ T6165] loop1: detected capacity change from 0 to 128
[   87.240504][ T6165] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   87.261297][ T6165] hpfs: filesystem error: improperly stopped
[   87.271110][ T6165] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   87.282254][ T6165] hpfs: You really don't want any checks? You are crazy...
[   87.294771][ T6165] hpfs: hpfs_map_sector(): read error
[   87.303086][ T6165] hpfs: code page support is disabled
[   87.313026][ T6165] hpfs: hpfs_map_4sectors(): unaligned read
[   87.321750][ T6165] hpfs: hpfs_map_4sectors(): unaligned read
[   87.341884][ T6165] hpfs: filesystem error: unable to find root dir
[   87.595468][ T6175] 9pnet_fd: Insufficient options for proto=fd
[   87.803890][ T6183] loop0: detected capacity change from 0 to 16
[   87.828969][ T6183] erofs: (device loop0): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 16700)
[   88.187484][ T6183] loop0: detected capacity change from 0 to 40427
[   88.204254][ T6183] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   88.212346][ T6183] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   88.270249][ T6183] F2FS-fs (loop0): Found nat_bits in checkpoint
[   88.347772][ T6183] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   88.355057][ T6183] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   89.677830][ T6198] loop0: detected capacity change from 0 to 128
[   89.708301][ T6198] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   89.727517][ T6198] hpfs: filesystem error: improperly stopped
[   89.733547][ T6198] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   89.741510][ T6198] hpfs: You really don't want any checks? You are crazy...
[   89.770245][ T6198] hpfs: hpfs_map_sector(): read error
[   89.776139][ T6198] hpfs: code page support is disabled
[   89.797738][ T6198] hpfs: hpfs_map_4sectors(): unaligned read
[   89.803827][ T6198] hpfs: hpfs_map_4sectors(): unaligned read
[   89.811776][ T6198] hpfs: filesystem error: unable to find root dir
[   90.106890][ T6034] team0: Port device team_slave_1 added
[   90.214532][ T6034] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.223944][ T6034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.294220][ T6034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.335926][   T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   90.355375][ T6034] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.371007][ T6034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.402065][ T6034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.513897][ T6034] hsr_slave_0: entered promiscuous mode
[   90.529152][ T6034] hsr_slave_1: entered promiscuous mode
[   90.532637][ T6211] 9pnet_fd: Insufficient options for proto=fd
[   90.540953][ T6034] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.553077][   T27] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[   90.572951][   T27] usb 1-1: config 0 has no interface number 0
[   90.575636][ T6034] Cannot create hsr debugfs directory
[   90.594377][   T27] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[   90.638874][   T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.665739][   T27] usb 1-1: Product: syz
[   90.677866][   T27] usb 1-1: Manufacturer: syz
[   90.682510][   T27] usb 1-1: SerialNumber: syz
[   90.714386][   T27] usb 1-1: config 0 descriptor??
[   90.724858][ T6218] loop2: detected capacity change from 0 to 128
[   90.755251][ T6218] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   90.798900][ T6218] hpfs: filesystem error: improperly stopped
[   90.805020][ T6218] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   90.818551][ T6218] hpfs: You really don't want any checks? You are crazy...
[   90.829304][ T6218] hpfs: hpfs_map_sector(): read error
[   90.834962][ T6218] hpfs: code page support is disabled
[   90.866533][ T6218] hpfs: hpfs_map_4sectors(): unaligned read
[   90.879310][ T6218] hpfs: hpfs_map_4sectors(): unaligned read
[   90.885416][ T6218] hpfs: filesystem error: unable to find root dir
[   90.966199][   T27] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[   91.001668][   T27] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   91.056038][   T27] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[   91.064111][   T27] usb 1-1: media controller created
[   91.144192][ T6034] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   91.167571][ T6202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   91.190400][   T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   91.197393][ T6034] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   91.206288][ T6202] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   91.269096][ T6034] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   91.337791][ T6034] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   91.568143][ T6247] kvm: pic: single mode not supported
[   91.569410][ T6247] kvm: pic: level sensitive irq not supported
[   91.584809][ T6247] kvm: pic: single mode not supported
[   91.594104][ T6247] kvm: pic: single mode not supported
[   91.610464][ T6247] kvm: pic: single mode not supported
[   91.621853][ T6247] kvm: pic: single mode not supported
[   91.626772][ T6034] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.627512][ T6247] kvm: pic: level sensitive irq not supported
[   91.690822][ T6034] 8021q: adding VLAN 0 to HW filter on device team0
[   91.732636][ T1326] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.739843][ T1326] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.803203][ T1310] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.810406][ T1310] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.364235][   T27] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[   92.441300][ T6034] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.449127][   T27] usb 1-1: USB disconnect, device number 3
[   92.809891][ T6276] loop1: detected capacity change from 0 to 128
[   92.842887][ T6276] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[   92.860205][ T6276] hpfs: filesystem error: improperly stopped
[   92.891022][ T6276] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   92.939720][ T6276] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[   92.973482][ T6276] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2
[   93.217081][ T6034] veth0_vlan: entered promiscuous mode
[   93.271494][ T6034] veth1_vlan: entered promiscuous mode
[   93.378393][ T6034] veth0_macvtap: entered promiscuous mode
[   93.422369][ T6034] veth1_macvtap: entered promiscuous mode
[   93.483096][ T6034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.509040][ T6034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.520829][ T6034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.533231][ T6034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.541206][ T6293] loop2: detected capacity change from 0 to 4096
[   93.549986][ T6034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.563060][ T6034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.577114][ T6034] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.610811][ T6034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.624631][ T6034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.634935][ T6034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.649067][ T6034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.660124][ T6034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.671901][ T6034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.683776][ T6034] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.733022][ T6034] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.757681][ T6034] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.776518][ T6034] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.785255][ T6034] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.829794][ T6300] netlink: 'syz.1.126': attribute type 10 has an invalid length.
[   93.911571][ T6304] 9pnet_fd: Insufficient options for proto=fd
[   93.913460][ T6300] team0: Port device netdevsim0 added
[   94.277242][ T3447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.285113][ T3447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.401933][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.427432][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.234363][ T6357] loop4: detected capacity change from 0 to 512
[   95.329569][ T6357] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.146: iget: bad extended attribute block 1
[   95.409838][ T6357] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.146: couldn't read orphan inode 15 (err -117)
[   95.452184][ T6357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.455498][ T6362] loop2: detected capacity change from 0 to 4096
[   95.540072][ T6357] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[   95.602261][ T6371] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   95.724054][ T6034] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.955700][ T6383] loop4: detected capacity change from 0 to 64
[   96.026160][ T6383] hfs: unable to locate alternate MDB
[   96.031830][ T6383] hfs: continuing without an alternate MDB
[   96.376759][ T6372] mmap: syz.0.149 (6372) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   96.524363][ T6402] netlink: 180 bytes leftover after parsing attributes in process `syz.4.158'.
[   96.537565][ T6402] netlink: 180 bytes leftover after parsing attributes in process `syz.4.158'.
[   96.632939][ T6405] loop0: detected capacity change from 0 to 64
[   96.921275][ T6415] loop6: detected capacity change from 0 to 7
[   96.933125][ T5795]  loop6: [CUMANA/ADFS] p1 [ADFS] p1
[   96.942068][ T5795] loop6: partition table partially beyond EOD, truncated
[   96.950943][ T5795] loop6: p1 size 1585496431 extends beyond EOD, truncated
[   97.000233][ T6415]  loop6: [CUMANA/ADFS] p1 [ADFS] p1
[   97.015731][ T6415] loop6: partition table partially beyond EOD, truncated
[   97.050059][ T6415] loop6: p1 size 1585496431 extends beyond EOD, truncated
[   97.169306][ T5795] udevd[5795]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[   97.279559][ T5795] udevd[5795]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[   97.620084][ T6399] loop2: detected capacity change from 0 to 40427
[   97.644859][ T6399] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff
[   97.670655][ T6399] F2FS-fs (loop2): invalid crc value
[   97.712396][ T6399] F2FS-fs (loop2): Found nat_bits in checkpoint
[   97.829309][ T6399] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   97.925522][ T6445] loop4: detected capacity change from 0 to 128
[   97.947041][ T6445] EXT4-fs: Ignoring removed nobh option
[   97.957102][ T5788] syz-executor: attempt to access beyond end of device
[   97.957102][ T5788] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   97.984439][ T5788] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   98.008127][    T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   98.035015][ T6445] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   98.086419][   T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   98.095188][ T6445] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.200049][ T6034] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   98.237031][    T9] usb 1-1: Using ep0 maxpacket: 16
[   98.254505][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.269390][    T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   98.282822][   T27] usb 2-1: Using ep0 maxpacket: 16
[   98.305698][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.311711][   T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.331903][    T9] usb 1-1: Product: syz
[   98.343649][   T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.346599][    T9] usb 1-1: Manufacturer: syz
[   98.365061][   T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   98.383928][   T27] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[   98.385050][    T9] usb 1-1: SerialNumber: syz
[   98.408341][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.441301][   T27] usb 2-1: config 0 descriptor??
[   98.467846][   T27] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5
[   98.522823][ T5146] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[   98.582667][ T5146] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[   98.641118][ T5778] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[   98.690268][ T5146] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[   98.728163][ T6440] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[   98.769705][ T5146] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[   98.793965][ T5146] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[   98.804325][ T5833] usb 2-1: USB disconnect, device number 4
[   98.847291][ T5146] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -19
[   98.928223][ T6461] 9pnet_fd: Insufficient options for proto=fd
[   99.203741][ T6473] loop4: detected capacity change from 0 to 256
[   99.293399][ T6473] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x86abdf17, utbl_chksum : 0xe619d30d)
[   99.324821][ T6473] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186)
[   99.401319][ T6479] loop2: detected capacity change from 0 to 128
[   99.406991][ T6473] capability: warning: `syz.4.179' uses 32-bit capabilities (legacy support in use)
[   99.431413][ T6479] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   99.485256][ T6479] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   99.486913][    T9] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[   99.524084][    T9] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[   99.531588][    T9] cdc_ncm 1-1:1.0: setting rx_max = 2048
[   99.641080][ T6483] overlayfs: statfs failed on './file0'
[   99.731985][ T5788] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   99.750828][    T9] cdc_ncm 1-1:1.0: setting tx_max = 184
[   99.823611][    T9] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[   99.905992][    T9] usb 1-1: USB disconnect, device number 4
[   99.935315][    T9] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP)
[  100.147407][ T6495] loop4: detected capacity change from 0 to 2048
[  100.205357][ T6495] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  100.423633][ T6509] loop0: detected capacity change from 0 to 512
[  100.485907][ T6509] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  100.545769][ T6509] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  100.570431][ T6509] EXT4-fs (loop0): 1 truncate cleaned up
[  100.607095][ T6509] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.671666][ T6512] KVM: debugfs: duplicate directory 6512-4
[  100.715032][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.232174][ T6542] loop4: detected capacity change from 0 to 1024
[  101.395810][    T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  101.412899][   T28] audit: type=1326 audit(1757569653.049:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff484d8eba9 code=0x7ffc0000
[  101.459325][ T6550] autofs4:pid:6550:autofs_fill_super: called with bogus options
[  101.480883][   T28] audit: type=1326 audit(1757569653.079:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff484d8eba9 code=0x7ffc0000
[  101.562382][   T28] audit: type=1326 audit(1757569653.089:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ff484d8eba9 code=0x7ffc0000
[  101.619240][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  101.625732][   T28] audit: type=1326 audit(1757569653.089:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff484d8eba9 code=0x7ffc0000
[  101.635431][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  101.703092][   T28] audit: type=1326 audit(1757569653.089:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff484d8eba9 code=0x7ffc0000
[  101.715648][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  101.741913][   T28] audit: type=1326 audit(1757569653.089:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7ff484d8eba9 code=0x7ffc0000
[  101.810503][    T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  101.835688][    T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  101.844589][   T28] audit: type=1326 audit(1757569653.089:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff484d8eba9 code=0x7ffc0000
[  101.861081][    T9] usb 3-1: Manufacturer: syz
[  101.902794][   T28] audit: type=1326 audit(1757569653.089:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7ff484d8eba9 code=0x7ffc0000
[  101.936284][    T9] usb 3-1: config 0 descriptor??
[  101.951246][   T28] audit: type=1326 audit(1757569653.089:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff484d8eba9 code=0x7ffc0000
[  102.031258][   T28] audit: type=1326 audit(1757569653.089:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff484d8eba9 code=0x7ffc0000
[  102.221381][    T9] usb 3-1: USB disconnect, device number 3
[  102.234298][ T6575] loop4: detected capacity change from 0 to 256
[  102.279711][ T6575] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d)
[  102.697331][ T6595] loop0: detected capacity change from 0 to 64
[  102.709659][ T6592] loop4: detected capacity change from 0 to 2048
[  102.724025][ T6595] hfs: unable to locate alternate MDB
[  102.750364][ T6595] hfs: continuing without an alternate MDB
[  102.769929][ T6592] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  103.216183][ T5833] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  103.271735][ T6615] netlink: 'syz.4.222': attribute type 10 has an invalid length.
[  103.298533][ T6615] syz_tun: entered promiscuous mode
[  103.338998][ T6615] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  103.426782][ T5833] usb 3-1: Using ep0 maxpacket: 16
[  103.463165][ T5833] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  103.485665][ T5833] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  103.508124][ T5833] usb 3-1: config 0 has no interface number 0
[  103.519762][ T5833] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  103.535256][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.558036][ T5833] usb 3-1: Product: syz
[  103.572975][ T5833] usb 3-1: Manufacturer: syz
[  103.584635][ T5833] usb 3-1: SerialNumber: syz
[  103.609604][ T5833] usb 3-1: config 0 descriptor??
[  103.621115][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.224'.
[  103.852245][ T5833] usb 3-1: Found UVC 0.00 device syz (046d:08d3)
[  103.875310][ T5833] usb 3-1: No valid video chain found.
[  103.940560][ T6634] loop4: detected capacity change from 0 to 128
[  103.977735][ T6634] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  104.007876][ T6634] hpfs: filesystem error: improperly stopped
[  104.028053][ T6634] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  104.055734][ T6634] hpfs: You really don't want any checks? You are crazy...
[  104.083779][ T5833] usb 3-1: USB disconnect, device number 4
[  104.124329][ T6634] hpfs: hpfs_map_sector(): read error
[  104.138674][ T6634] hpfs: code page support is disabled
[  104.153862][ T6634] hpfs: hpfs_map_4sectors(): unaligned read
[  104.160378][ T6634] hpfs: hpfs_map_4sectors(): unaligned read
[  104.177638][ T6634] hpfs: filesystem error: unable to find root dir
[  104.325070][ T6648] 9pnet_fd: Insufficient options for proto=fd
[  104.486954][ T6653] netlink: 'syz.4.232': attribute type 10 has an invalid length.
[  104.889455][ T6672] loop4: detected capacity change from 0 to 128
[  104.918913][ T6672] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  104.945644][ T6672] hpfs: filesystem error: improperly stopped
[  104.959118][ T6672] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  104.985715][ T6672] hpfs: You really don't want any checks? You are crazy...
[  105.001304][ T6672] hpfs: hpfs_map_sector(): read error
[  105.015970][ T6672] hpfs: code page support is disabled
[  105.021568][ T6672] hpfs: hpfs_map_4sectors(): unaligned read
[  105.034158][ T6672] hpfs: hpfs_map_4sectors(): unaligned read
[  105.044170][ T6672] hpfs: filesystem error: unable to find root dir
[  105.109717][ T6682] fuse: Bad value for 'fd'
[  105.757018][ T6712] (null): rxe_set_mtu: Set mtu to 1024
[  106.285218][ T6712] infiniband syz0: set active
[  106.340540][ T6712] infiniband syz0: added batadv_slave_0
[  106.392181][ T6735] 9pnet_fd: Insufficient options for proto=fd
[  106.522998][ T6712] RDS/IB: syz0: added
[  106.527990][ T6712] smc: adding ib device syz0 with port count 1
[  106.534342][ T6712] smc:    ib device syz0 port 1 has pnetid 
[  106.877561][    T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  106.935245][ T6754] loop2: detected capacity change from 0 to 7
[  106.943216][ T6754] Dev loop2: unable to read RDB block 7
[  106.951145][ T6754]  loop2: unable to read partition table
[  106.959593][ T6754] loop2: partition table beyond EOD, truncated
[  106.967584][ T6754] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  107.083347][    T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  107.113026][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.150832][    T9] usb 3-1: config 0 descriptor??
[  107.164616][    T9] cp210x 3-1:0.0: cp210x converter detected
[  107.582851][    T9] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[  107.608146][    T9] usb 3-1: cp210x converter now attached to ttyUSB0
[  107.735873][ T5826] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  107.798891][    T9] usb 3-1: USB disconnect, device number 5
[  107.817797][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  107.833838][    T9] cp210x 3-1:0.0: device disconnected
[  107.938463][ T5826] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  107.949217][ T5826] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  107.958430][ T5826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.969894][ T5826] usb 5-1: config 0 descriptor??
[  107.981163][ T5826] pwc: Askey VC010 type 2 USB webcam detected.
[  108.257493][ T6777] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  108.286138][ T3479] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.384882][ T5826] pwc: recv_control_msg error -32 req 02 val 2b00
[  108.416613][ T5826] pwc: recv_control_msg error -32 req 02 val 2700
[  108.433944][ T5826] pwc: recv_control_msg error -32 req 02 val 2c00
[  108.454361][ T5826] pwc: recv_control_msg error -32 req 04 val 1000
[  108.478781][ T5826] pwc: recv_control_msg error -32 req 04 val 1300
[  108.497559][ T5826] pwc: recv_control_msg error -32 req 04 val 1400
[  108.505452][ T5826] pwc: recv_control_msg error -32 req 02 val 2000
[  108.536062][ T5826] pwc: recv_control_msg error -32 req 02 val 2100
[  108.562169][ T5826] pwc: recv_control_msg error -32 req 04 val 1500
[  108.584750][ T5826] pwc: recv_control_msg error -32 req 02 val 2500
[  108.596803][ T5826] pwc: recv_control_msg error -32 req 02 val 2400
[  108.604210][ T5826] pwc: recv_control_msg error -32 req 02 val 2600
[  108.616093][ T5826] pwc: recv_control_msg error -32 req 02 val 2900
[  108.824174][ T6798] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  108.842722][ T5826] pwc: recv_control_msg error -71 req 04 val 1100
[  108.852569][ T5826] pwc: recv_control_msg error -71 req 04 val 1200
[  108.896425][ T5826] pwc: Registered as video103.
[  108.915475][ T5826] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6
[  108.976619][ T5826] usb 5-1: USB disconnect, device number 2
[  109.672392][ T6820] loop0: detected capacity change from 0 to 256
[  109.738274][ T6820] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[  109.935742][ T5833] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  109.949729][ T6823] Bluetooth: MGMT ver 1.22
[  109.954620][ T6823] Bluetooth: hci0: unsupported parameter 5148
[  109.975841][ T6823] Bluetooth: hci0: invalid len left 4, exp >= 117
[  110.165773][ T5833] usb 5-1: Using ep0 maxpacket: 32
[  110.177618][ T5833] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  110.196911][ T5833] usb 5-1: config 0 has no interface number 0
[  110.213248][ T5833] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  110.259193][ T5833] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  110.278758][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.294533][ T5833] usb 5-1: Product: syz
[  110.303287][ T5833] usb 5-1: Manufacturer: syz
[  110.309369][ T5833] usb 5-1: SerialNumber: syz
[  110.325423][ T5833] usb 5-1: config 0 descriptor??
[  110.340609][ T5833] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  110.359114][ T5833] em28xx 5-1:0.132: Video interface 132 found:
[  110.493035][ T6841] loop0: detected capacity change from 0 to 64
[  110.527057][ T6841] hfs: unable to locate alternate MDB
[  110.532469][ T6841] hfs: continuing without an alternate MDB
[  110.643591][ T6845] loop2: detected capacity change from 0 to 1024
[  110.752507][ T5833] em28xx 5-1:0.132: unknown em28xx chip ID (0)
[  110.844716][ T5833] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  110.874266][ T5833] em28xx 5-1:0.132: board has no eeprom
[  110.938842][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.308'.
[  110.965772][ T5833] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  110.973645][ T5833] em28xx 5-1:0.132: analog set to bulk mode.
[  111.007176][ T5846] em28xx 5-1:0.132: Registering V4L2 extension
[  111.038893][ T5833] usb 5-1: USB disconnect, device number 3
[  111.056059][ T5833] em28xx 5-1:0.132: Disconnecting em28xx
[  111.227696][ T5846] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[  111.239533][ T5846] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[  111.248550][ T5846] em28xx 5-1:0.132: No AC97 audio processor
[  111.264350][ T5846] usb 5-1: Decoder not found
[  111.276432][ T5846] em28xx 5-1:0.132: failed to create media graph
[  111.295656][ T5846] em28xx 5-1:0.132: V4L2 device video103 deregistered
[  111.334316][ T5846] em28xx 5-1:0.132: Remote control support is not available for this card.
[  111.337863][ T6868] Invalid ELF header type: 3 != 1
[  111.399222][ T5833] em28xx 5-1:0.132: Closing input extension
[  111.461989][ T5833] em28xx 5-1:0.132: Freeing device
[  111.939849][ T6887] loop4: detected capacity change from 0 to 64
[  112.275415][ T6902] loop0: detected capacity change from 0 to 1024
[  112.300435][ T6902] EXT4-fs: Ignoring removed orlov option
[  112.380773][ T6902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.596973][ T5793] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2867: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  112.703144][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.775246][   T28] kauditd_printk_skb: 8 callbacks suppressed
[  113.775261][   T28] audit: type=1326 audit(1757569665.409:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.4.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4b58eba9 code=0x7ffc0000
[  113.809241][   T28] audit: type=1326 audit(1757569665.409:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.4.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4b58eba9 code=0x7ffc0000
[  113.844426][   T28] audit: type=1326 audit(1757569665.419:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.4.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f4b58eba9 code=0x7ffc0000
[  113.899582][   T28] audit: type=1326 audit(1757569665.419:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.4.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4b58eba9 code=0x7ffc0000
[  113.958808][   T28] audit: type=1326 audit(1757569665.419:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.4.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4b58eba9 code=0x7ffc0000
[  114.001453][   T28] audit: type=1326 audit(1757569665.419:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.4.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f4b58eba9 code=0x7ffc0000
[  114.066469][   T28] audit: type=1326 audit(1757569665.419:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.4.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4b58eba9 code=0x7ffc0000
[  114.125694][   T28] audit: type=1326 audit(1757569665.419:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.4.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4b58eba9 code=0x7ffc0000
[  114.200520][   T28] audit: type=1326 audit(1757569665.419:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.4.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1f4b58eba9 code=0x7ffc0000
[  114.233517][   T28] audit: type=1326 audit(1757569665.419:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.4.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4b58eba9 code=0x7ffc0000
[  114.334748][ T6983] overlayfs: failed to clone upperpath
[  114.464030][ T6990] loop0: detected capacity change from 0 to 64
[  114.622625][ T6990] syz.0.348: attempt to access beyond end of device
[  114.622625][ T6990] loop0: rw=0, sector=1288, nr_sectors = 1 limit=64
[  114.655174][ T6995] loop2: detected capacity change from 0 to 1024
[  114.671442][ T6990] Buffer I/O error on dev loop0, logical block 1288, async page read
[  114.681391][ T6995] EXT4-fs: Ignoring removed orlov option
[  114.728567][ T6998] syz.0.348: attempt to access beyond end of device
[  114.728567][ T6998] loop0: rw=0, sector=1288, nr_sectors = 1 limit=64
[  114.773909][ T6995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.827332][ T6998] Buffer I/O error on dev loop0, logical block 1288, async page read
[  114.882195][ T6998] syz.0.348: attempt to access beyond end of device
[  114.882195][ T6998] loop0: rw=0, sector=1288, nr_sectors = 1 limit=64
[  114.896547][ T6998] Buffer I/O error on dev loop0, logical block 1288, async page read
[  115.047284][ T5826] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  115.121203][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.256536][ T5826] usb 5-1: Using ep0 maxpacket: 8
[  115.281068][ T5826] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  115.303689][ T5826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.333698][ T5826] usb 5-1: Product: syz
[  115.341732][ T5826] usb 5-1: Manufacturer: syz
[  115.351188][ T5826] usb 5-1: SerialNumber: syz
[  115.382347][ T5826] usb 5-1: config 0 descriptor??
[  115.614706][ T5826] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  115.641884][ T7041] overlayfs: failed to clone upperpath
[  115.695943][ T5785] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  115.772097][ T7046] netlink: 48 bytes leftover after parsing attributes in process `syz.1.363'.
[  115.782977][ T7046] netlink: 'syz.1.363': attribute type 10 has an invalid length.
[  115.795061][ T7046] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.818390][ T7046] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.825501][ T7046] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.841117][ T7046] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  115.854310][ T7048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.363'.
[  115.886137][ T7048] bridge_slave_1: left allmulticast mode
[  115.891830][ T7048] bridge_slave_1: left promiscuous mode
[  115.908149][ T5785] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  115.926686][ T7048] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.926896][ T5785] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  115.972690][ T5785] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  115.984730][ T7048] bridge_slave_0: left allmulticast mode
[  115.993489][ T5785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.007886][ T7048] bridge_slave_0: left promiscuous mode
[  116.018661][ T5785] usb 1-1: config 0 descriptor??
[  116.021591][ T7054] loop2: detected capacity change from 0 to 1024
[  116.032181][ T5785] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  116.040744][ T7048] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.082051][ T7054] EXT4-fs: Ignoring removed orlov option
[  116.118906][ T7048] bond0: (slave bridge0): Releasing backup interface
[  116.128937][ T7054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.372467][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.377942][ T7100] loop2: detected capacity change from 0 to 16
[  117.394858][ T7100] erofs: (device loop2): mounted with root inode @ nid 36.
[  117.418653][ T7100] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  117.432659][ T7100] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -10 in[58, 4038] out[1851]
[  117.456007][ T7100] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  117.476142][ T5826] usb write operation failed. (-71)
[  117.486425][ T5826] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  117.497293][ T5826] dvbdev: DVB: registering new adapter (Terratec H7)
[  117.504033][ T5826] usb 5-1: media controller created
[  117.511231][ T5826] usb read operation failed. (-71)
[  117.524890][ T5826] usb write operation failed. (-71)
[  117.543620][ T5826] dvb_usb_az6007: probe of 5-1:0.0 failed with error -5
[  117.557609][ T7102] loop2: detected capacity change from 0 to 512
[  117.562556][ T5826] usb 5-1: USB disconnect, device number 4
[  117.576315][ T7102] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  117.621091][ T7102] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #11: comm syz.2.379: corrupted in-inode xattr: invalid ea_ino
[  117.641763][ T7102] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.379: couldn't read orphan inode 11 (err -117)
[  117.661173][ T7102] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.724313][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.870977][ T7111] loop2: detected capacity change from 0 to 128
[  117.885056][ T7111] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  117.890004][ T7112] loop4: detected capacity change from 0 to 1024
[  117.908128][ T7112] EXT4-fs: Ignoring removed orlov option
[  117.930452][ T7111] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  117.994222][ T7112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.243851][ T6034] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.287861][ T7116] loop2: detected capacity change from 0 to 4096
[  118.306723][ T7116] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  118.362015][ T7116] ntfs3: loop2: Failed to load $Extend (-22).
[  118.389800][ T7116] ntfs3: loop2: Failed to initialize $Extend.
[  118.527427][ T5785] usb 1-1: USB disconnect, device number 5
[  118.705731][  T787] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  118.755964][ T7127] overlayfs: failed to clone upperpath
[  118.908199][  T787] usb 5-1: Using ep0 maxpacket: 32
[  118.933507][ T7134] loop2: detected capacity change from 0 to 1024
[  118.941293][  T787] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  118.966621][  T787] usb 5-1: config 0 has no interface number 0
[  118.995904][  T787] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  119.006641][ T7134] EXT4-fs: Ignoring removed bh option
[  119.012111][ T7134] EXT4-fs: inline encryption not supported
[  119.026934][ T7134] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  119.034210][  T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.051301][  T787] usb 5-1: Product: syz
[  119.062138][  T787] usb 5-1: Manufacturer: syz
[  119.067427][  T787] usb 5-1: SerialNumber: syz
[  119.075183][  T787] usb 5-1: config 0 descriptor??
[  119.082263][  T787] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz)
[  119.108250][ T7134] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #3: block 2: comm syz.2.391: lblock 2 mapped to illegal pblock 2 (length 1)
[  119.144743][ T7134] EXT4-fs (loop2): Remounting filesystem read-only
[  119.151621][ T7134] __quota_error: 158 callbacks suppressed
[  119.151634][ T7134] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  119.165788][ T7134] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  119.175354][ T7134] EXT4-fs (loop2): 1 orphan inode deleted
[  119.182811][ T7134] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.287597][  T787] etas_es58x 5-1:0.2: could not parse product info: '辣﷘'
[  119.290799][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.371227][ T7140] loop0: detected capacity change from 0 to 4096
[  119.419799][ T7140] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  119.512733][  T787] usb 5-1: USB disconnect, device number 5
[  119.537913][  T787] etas_es58x 5-1:0.2: Disconnecting syz syz
[  119.916031][ T7155] netlink: 'syz.0.397': attribute type 10 has an invalid length.
[  119.941385][ T7155] syz_tun: entered promiscuous mode
[  119.964321][ T7155] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  119.973782][ T7159] loop2: detected capacity change from 0 to 16
[  120.055711][ T5795] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  120.326365][ T7170] loop0: detected capacity change from 0 to 1024
[  120.340548][ T7170] EXT4-fs: Ignoring removed oldalloc option
[  120.372082][ T7170] EXT4-fs: Ignoring removed nobh option
[  120.397135][ T7170] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  120.494291][ T7170] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.546999][   T28] audit: type=1800 audit(1757569672.189:189): pid=7170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.403" name="file1" dev="loop0" ino=15 res=0 errno=0
[  120.559578][ T7182] loop2: detected capacity change from 0 to 1024
[  120.592603][ T7182] EXT4-fs: Ignoring removed orlov option
[  120.657050][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.692569][ T7182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.103473][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.128771][ T7205] loop0: detected capacity change from 0 to 1024
[  121.267169][   T28] audit: type=1326 audit(1757569672.899:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873cf8eba9 code=0x7ffc0000
[  121.400048][   T28] audit: type=1326 audit(1757569672.899:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873cf8eba9 code=0x7ffc0000
[  121.501962][   T28] audit: type=1326 audit(1757569672.909:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f873cf8eba9 code=0x7ffc0000
[  121.573193][   T28] audit: type=1326 audit(1757569672.909:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873cf8eba9 code=0x7ffc0000
[  121.668364][   T28] audit: type=1326 audit(1757569672.909:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873cf8eba9 code=0x7ffc0000
[  121.693648][   T28] audit: type=1326 audit(1757569672.909:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f873cf8eba9 code=0x7ffc0000
[  121.745683][   T28] audit: type=1326 audit(1757569672.909:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873cf8eba9 code=0x7ffc0000
[  122.556474][ T7253] loop2: detected capacity change from 0 to 1024
[  122.564736][ T7253] EXT4-fs: Ignoring removed orlov option
[  122.637988][ T7253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.767167][ T7253] overlayfs: failed to resolve './bus': -2
[  122.864934][ T7263] netlink: 136 bytes leftover after parsing attributes in process `syz.0.424'.
[  122.881758][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.328020][ T7318] pim6reg: entered allmulticast mode
[  124.343818][ T7318] pim6reg: left allmulticast mode
[  127.373489][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.455'.
[  127.383835][ T7389] netlink: 84 bytes leftover after parsing attributes in process `syz.0.455'.
[  127.543618][ T7389] dvmrp8: entered allmulticast mode
[  128.002027][ T7405] netlink: 'syz.2.460': attribute type 1 has an invalid length.
[  128.085066][ T7405] bond1: entered promiscuous mode
[  128.104180][ T7405] 8021q: adding VLAN 0 to HW filter on device bond1
[  128.219634][ T7407] 8021q: adding VLAN 0 to HW filter on device bond2
[  128.232982][ T7407] bond1: (slave bond2): making interface the new active one
[  128.242549][ T7407] bond2: entered promiscuous mode
[  128.253733][ T7407] bond1: (slave bond2): Enslaving as an active interface with an up link
[  128.285220][ T7210] Set syz1 is full, maxelem 65536 reached
[  128.299858][ T7388] dvmrp8: left allmulticast mode
[  128.703052][ T7426] loop0: detected capacity change from 0 to 1024
[  128.872652][ T7432] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7
[  128.916292][ T7434] syz.2.468 uses obsolete (PF_INET,SOCK_PACKET)
[  129.769429][ T7459] Zero length message leads to an empty skb
[  129.787736][ T1075] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  129.803103][ T7462] netlink: 'syz.4.477': attribute type 10 has an invalid length.
[  129.980158][ T7467] netlink: 'syz.0.480': attribute type 1 has an invalid length.
[  130.047446][ T7467] 8021q: adding VLAN 0 to HW filter on device bond1
[  130.122628][ T7470] bond1: (slave wlan0): Enslaving as an active interface with a down link
[  130.172557][ T7467] vlan2: entered allmulticast mode
[  130.211387][ T7467] veth1: entered allmulticast mode
[  130.234548][ T7467] veth1: entered promiscuous mode
[  130.243695][ T7467] veth1: left promiscuous mode
[  130.252231][ T7467] bond1: (slave vlan2): making interface the new active one
[  130.270552][ T7467] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  130.296466][ T7467] veth1: entered promiscuous mode
[  130.306821][ T7467] vlan2: entered promiscuous mode
[  130.339986][ T7467] bond1: (slave vlan2): Enslaving as an active interface with an up link
[  130.362289][ T7478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.485'.
[  130.419496][ T7484] netlink: 'syz.2.488': attribute type 10 has an invalid length.
[  130.445052][ T7484] syz_tun: entered promiscuous mode
[  130.500242][ T7484] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  130.603603][ T7493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.492'.
[  130.634637][ T7493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.492'.
[  130.685546][ T7493] ip6gretap0: entered promiscuous mode
[  130.710344][ T7493] erspan0: entered promiscuous mode
[  131.038956][ T7515] netlink: 260 bytes leftover after parsing attributes in process `syz.4.501'.
[  131.117664][ T7517] netlink: 'syz.0.502': attribute type 10 has an invalid length.
[  131.211318][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.501'.
[  131.287869][ T7524] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  131.342531][ T7524] macvtap1: entered promiscuous mode
[  131.430208][ T7535] netlink: 'syz.0.508': attribute type 1 has an invalid length.
[  131.498127][ T7535] 8021q: adding VLAN 0 to HW filter on device bond2
[  131.562332][ T7539] 8021q: adding VLAN 0 to HW filter on device bond2
[  131.581284][ T7539] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  131.594513][ T7539] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  131.694151][ T7535] veth3: entered promiscuous mode
[  131.710943][ T7535] bond2: (slave veth3): Enslaving as an active interface with a down link
[  132.362607][ T7570] loop0: detected capacity change from 0 to 1024
[  132.371193][ T7570] EXT4-fs: Ignoring removed orlov option
[  132.403385][ T7570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.478385][ T7570] overlayfs: failed to resolve './bus': -2
[  132.525516][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.590665][ T7580] warning: `syz.1.523' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  133.104883][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  133.113029][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  133.667378][ T7618] (null): rxe_set_mtu: Set mtu to 4096
[  133.676536][ T7618] rdma_rxe: rxe_newlink: failed to add lo
[  134.509193][ T7649] vlan2: entered promiscuous mode
[  134.529416][ T7649] vlan2: entered allmulticast mode
[  134.545351][ T7649] hsr_slave_1: entered allmulticast mode
[  136.313735][ T7693] syz_tun: left promiscuous mode
[  136.506106][ T7693] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.514128][ T7693] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.208957][ T5792] Bluetooth: hci1: command tx timeout
[  137.508555][ T7693] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.533019][ T7693] infiniband syz0: set down
[  137.564645][ T7693] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.993537][ T7693] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.003134][ T7693] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.014281][ T7693] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.024068][ T7693] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.136150][ T7693] vlan2: left allmulticast mode
[  138.141059][ T7693] veth1: left allmulticast mode
[  138.165963][ T7693] veth3: left promiscuous mode
[  138.540381][ T7717] netlink: 'syz.0.575': attribute type 13 has an invalid length.
[  139.215834][ T7727] syzkaller1: entered promiscuous mode
[  139.221354][ T7727] syzkaller1: entered allmulticast mode
[  140.736570][ T7759] syzkaller1: entered promiscuous mode
[  140.742091][ T7759] syzkaller1: entered allmulticast mode
[  140.977485][ T7763] netlink: 'syz.2.595': attribute type 10 has an invalid length.
[  141.160277][ T7772] loop2: detected capacity change from 0 to 1024
[  141.196796][ T7772] EXT4-fs: Ignoring removed orlov option
[  141.270508][ T7772] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.424013][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.604916][ T7793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.603'.
[  142.916345][ T7843] loop4: detected capacity change from 0 to 1024
[  142.938387][ T7843] EXT4-fs: Ignoring removed orlov option
[  142.980646][ T7843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.269627][ T6034] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.723016][ T7876] 9pnet_fd: Insufficient options for proto=fd
[  144.505386][ T7909] netlink: 244 bytes leftover after parsing attributes in process `syz.4.651'.
[  144.534927][ T7909] netlink: 244 bytes leftover after parsing attributes in process `syz.4.651'.
[  144.705985][ T7917] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  145.321995][ T7947] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2
[  145.558984][ T7960] vlan3: entered promiscuous mode
[  145.568658][ T7960] syz_tun: entered promiscuous mode
[  146.068815][ T7983] pimreg: entered allmulticast mode
[  146.907855][ T8006] 9pnet_fd: Insufficient options for proto=fd
[  147.004313][ T8009] netlink: 5 bytes leftover after parsing attributes in process `syz.4.692'.
[  147.263612][ T8016] netdevsim netdevsim2: loading /lib/firmware// failed with error -22
[  147.279364][ T8016] netdevsim netdevsim2: Direct firmware load for / failed with error -22
[  147.288660][ T8016] netdevsim netdevsim2: Falling back to sysfs fallback for: /
[  147.605401][ T8028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.700'.
[  147.725729][ T8032] netlink: 'syz.1.702': attribute type 10 has an invalid length.
[  147.743690][ T8032] syz_tun: entered promiscuous mode
[  147.761004][ T8032] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  148.751481][ T8055] netlink: 'syz.0.712': attribute type 10 has an invalid length.
[  148.808082][ T8057] 9pnet_fd: Insufficient options for proto=fd
[  149.419012][ T8080] netlink: 'syz.4.722': attribute type 10 has an invalid length.
[  150.310245][ T8103] netlink: 'syz.4.732': attribute type 10 has an invalid length.
[  150.410680][ T8106] loop2: detected capacity change from 0 to 1024
[  150.437147][ T8108] 9pnet_fd: Insufficient options for proto=fd
[  150.450587][ T8106] EXT4-fs: Ignoring removed orlov option
[  150.548968][ T8106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.667143][ T8106] overlayfs: missing 'lowerdir'
[  150.754719][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.390910][ T8183] loop4: detected capacity change from 0 to 1024
[  152.403551][ T8183] EXT4-fs: Ignoring removed orlov option
[  152.437921][ T8183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.520836][ T8183] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  152.545120][ T8183] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  152.630513][ T6034] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.074536][ T8291] netlink: 40 bytes leftover after parsing attributes in process `syz.4.813'.
[  155.674851][ T8314] netlink: 28 bytes leftover after parsing attributes in process `syz.1.822'.
[  155.783952][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.822'.
[  157.458072][ T8376] netlink: 56 bytes leftover after parsing attributes in process `syz.0.844'.
[  157.515232][ T8379] netlink: 36 bytes leftover after parsing attributes in process `syz.1.845'.
[  157.748221][ T8378] netlink: 32 bytes leftover after parsing attributes in process `syz.4.846'.
[  160.025315][ T8429] ax25_connect(): syz.4.865 uses autobind, please contact jreuter@yaina.de
[  160.061877][ T8297] Set syz1 is full, maxelem 65536 reached
[  160.430034][ T8441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.871'.
[  160.535279][ T8443] loop0: detected capacity change from 0 to 1024
[  160.548337][ T8443] EXT4-fs: Ignoring removed orlov option
[  160.579028][ T8443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.652631][ T8443] overlayfs: missing 'workdir'
[  160.798673][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.852536][ T8463] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  161.511237][ T8483] netlink: 28 bytes leftover after parsing attributes in process `syz.2.889'.
[  162.454273][ T8530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.907'.
[  163.090204][ T8552] 9pnet: Could not find request transport: fd0x0000000000000005
[  164.340024][ T8589] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  164.620140][ T8598] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  165.150882][ T8610] 9pnet_fd: Insufficient options for proto=fd
[  165.896055][ T8635] netlink: 556 bytes leftover after parsing attributes in process `syz.0.949'.
[  167.016854][ T8659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.960'.
[  167.644276][ T8682] 9pnet_fd: Insufficient options for proto=fd
[  168.556197][ T8705] tipc: Started in network mode
[  168.561131][ T8705] tipc: Node identity 8e0b6739388a, cluster identity 4711
[  168.583592][ T8705] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  168.594333][ T8705] syzkaller0: entered promiscuous mode
[  168.604904][ T8705] syzkaller0: entered allmulticast mode
[  168.711067][ T8705] tipc: Resetting bearer <eth:syzkaller0>
[  168.753721][ T8703] tipc: Resetting bearer <eth:syzkaller0>
[  168.794578][ T8703] tipc: Disabling bearer <eth:syzkaller0>
[  170.121557][ T8753] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  170.136337][ T8752] IPVS: stopping backup sync thread 8753 ...
[  171.660829][ T8782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  172.192555][ T8787] loop0: detected capacity change from 0 to 1024
[  172.447058][ T8792] netlink: 'syz.1.1015': attribute type 3 has an invalid length.
[  173.632376][ T8829] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  174.470077][ T8856] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1043'.
[  174.596012][ T8859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1044'.
[  175.184802][ T8871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  176.616709][ T8917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  176.660793][ T8922] ==================================================================
[  176.668932][ T8922] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6b2/0x8d0
[  176.677037][ T8922] Read of size 2 at addr ffff888025950122 by task syz.4.1068/8922
[  176.684861][ T8922] 
[  176.687209][ T8922] CPU: 0 PID: 8922 Comm: syz.4.1068 Not tainted syzkaller #0
[  176.694593][ T8922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  176.704679][ T8922] Call Trace:
[  176.707974][ T8922]  <TASK>
[  176.710928][ T8922]  dump_stack_lvl+0x16c/0x230
[  176.715629][ T8922]  ? __lock_acquire+0x7c80/0x7c80
[  176.720692][ T8922]  ? show_regs_print_info+0x20/0x20
[  176.725912][ T8922]  ? load_image+0x3b0/0x3b0
[  176.730448][ T8922]  ? __virt_addr_valid+0x469/0x540
[  176.735576][ T8922]  print_report+0xac/0x220
[  176.740010][ T8922]  ? __xfrm_state_lookup+0x6b2/0x8d0
[  176.745314][ T8922]  kasan_report+0x117/0x150
[  176.749848][ T8922]  ? __xfrm_state_lookup+0x6b2/0x8d0
[  176.755161][ T8922]  __xfrm_state_lookup+0x6b2/0x8d0
[  176.760305][ T8922]  ? xfrm_state_lookup+0x1a0/0x1a0
[  176.765442][ T8922]  ? xfrm_calg_get_byname+0x193/0x280
[  176.770877][ T8922]  xfrm_state_lookup+0xef/0x1a0
[  176.775765][ T8922]  ? xfrm_state_lookup+0x36/0x1a0
[  176.780813][ T8922]  ipcomp4_init_state+0x1fc/0x9f0
[  176.785849][ T8922]  __xfrm_init_state+0xd8b/0x11c0
[  176.790875][ T8922]  ? __xfrm_init_state+0x7fc/0x11c0
[  176.796084][ T8922]  xfrm_add_sa+0x236d/0x30a0
[  176.800675][ T8922]  ? xfrm_user_rcv_msg+0x870/0x870
[  176.805776][ T8922]  ? __nla_parse+0x40/0x50
[  176.810184][ T8922]  xfrm_user_rcv_msg+0x596/0x870
[  176.815105][ T8922]  ? lockdep_hardirqs_on+0x98/0x150
[  176.820295][ T8922]  ? xfrm_netlink_rcv+0x90/0x90
[  176.825129][ T8922]  ? __local_bh_enable_ip+0x12e/0x1c0
[  176.830499][ T8922]  ? __dev_queue_xmit+0x245/0x35a0
[  176.835708][ T8922]  ? __mutex_trylock_common+0x153/0x250
[  176.841261][ T8922]  netlink_rcv_skb+0x216/0x480
[  176.846025][ T8922]  ? xfrm_netlink_rcv+0x90/0x90
[  176.850871][ T8922]  ? netlink_ack+0x1110/0x1110
[  176.855644][ T8922]  ? netlink_deliver_tap+0x2e/0x1b0
[  176.860851][ T8922]  ? __lock_acquire+0x7c80/0x7c80
[  176.865883][ T8922]  xfrm_netlink_rcv+0x79/0x90
[  176.870581][ T8922]  netlink_unicast+0x751/0x8d0
[  176.875338][ T8922]  netlink_sendmsg+0x8c1/0xbe0
[  176.880095][ T8922]  ? netlink_getsockopt+0x580/0x580
[  176.885280][ T8922]  ? aa_sock_msg_perm+0x94/0x150
[  176.890208][ T8922]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  176.895577][ T8922]  ? security_socket_sendmsg+0x80/0xa0
[  176.901115][ T8922]  ? netlink_getsockopt+0x580/0x580
[  176.906302][ T8922]  ____sys_sendmsg+0x5bf/0x950
[  176.911067][ T8922]  ? __asan_memset+0x22/0x40
[  176.915649][ T8922]  ? __sys_sendmsg_sock+0x30/0x30
[  176.920678][ T8922]  ? __import_iovec+0x5f2/0x860
[  176.925523][ T8922]  ? import_iovec+0x73/0xa0
[  176.930021][ T8922]  ___sys_sendmsg+0x220/0x290
[  176.934694][ T8922]  ? __sys_sendmsg+0x270/0x270
[  176.939469][ T8922]  __se_sys_sendmsg+0x1a5/0x270
[  176.944318][ T8922]  ? __x64_sys_sendmsg+0x80/0x80
[  176.949252][ T8922]  ? lockdep_hardirqs_on+0x98/0x150
[  176.954442][ T8922]  do_syscall_64+0x55/0xb0
[  176.958845][ T8922]  ? clear_bhb_loop+0x40/0x90
[  176.963507][ T8922]  ? clear_bhb_loop+0x40/0x90
[  176.968169][ T8922]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  176.974057][ T8922] RIP: 0033:0x7f1f4b58eba9
[  176.978747][ T8922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  176.998344][ T8922] RSP: 002b:00007f1f497f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  177.006747][ T8922] RAX: ffffffffffffffda RBX: 00007f1f4b7d5fa0 RCX: 00007f1f4b58eba9
[  177.014709][ T8922] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  177.022666][ T8922] RBP: 00007f1f4b611e19 R08: 0000000000000000 R09: 0000000000000000
[  177.030638][ T8922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  177.038686][ T8922] R13: 00007f1f4b7d6038 R14: 00007f1f4b7d5fa0 R15: 00007fff11383d88
[  177.046666][ T8922]  </TASK>
[  177.049765][ T8922] 
[  177.052083][ T8922] Allocated by task 6932:
[  177.056399][ T8922]  kasan_set_track+0x4e/0x70
[  177.060995][ T8922]  __kasan_slab_alloc+0x6c/0x80
[  177.065851][ T8922]  slab_post_alloc_hook+0x6e/0x4d0
[  177.070959][ T8922]  kmem_cache_alloc+0x11e/0x2e0
[  177.075812][ T8922]  xfrm_state_alloc+0x22/0x2a0
[  177.080606][ T8922]  __find_acq_core+0x7d8/0x19d0
[  177.085451][ T8922]  xfrm_find_acq+0x6a/0x90
[  177.089856][ T8922]  pfkey_getspi+0x64f/0xed0
[  177.094345][ T8922]  pfkey_sendmsg+0xbed/0x1050
[  177.099010][ T8922]  ____sys_sendmsg+0x5bf/0x950
[  177.103777][ T8922]  ___sys_sendmsg+0x220/0x290
[  177.108581][ T8922]  __se_sys_sendmsg+0x1a5/0x270
[  177.113434][ T8922]  do_syscall_64+0x55/0xb0
[  177.117852][ T8922]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  177.123742][ T8922] 
[  177.126057][ T8922] The buggy address belongs to the object at ffff888025950000
[  177.126057][ T8922]  which belongs to the cache xfrm_state of size 848
[  177.140020][ T8922] The buggy address is located 290 bytes inside of
[  177.140020][ T8922]  freed 848-byte region [ffff888025950000, ffff888025950350)
[  177.153825][ T8922] 
[  177.156141][ T8922] The buggy address belongs to the physical page:
[  177.162544][ T8922] page:ffffea0000965400 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888025950000 pfn:0x25950
[  177.173985][ T8922] head:ffffea0000965400 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  177.182906][ T8922] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  177.190879][ T8922] page_type: 0xffffffff()
[  177.195192][ T8922] raw: 00fff00000000840 ffff888144e67dc0 dead000000000122 0000000000000000
[  177.203767][ T8922] raw: ffff888025950000 000000008010000f 00000001ffffffff 0000000000000000
[  177.212336][ T8922] page dumped because: kasan: bad access detected
[  177.218831][ T8922] page_owner tracks the page as allocated
[  177.224574][ T8922] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6932, tgid 6929 (syz.4.329), ts 113143823901, free_ts 112307204080
[  177.245152][ T8922]  post_alloc_hook+0x1cd/0x210
[  177.249917][ T8922]  get_page_from_freelist+0x195c/0x19f0
[  177.255466][ T8922]  __alloc_pages+0x1e3/0x460
[  177.260063][ T8922]  alloc_slab_page+0x5d/0x170
[  177.264741][ T8922]  new_slab+0x87/0x2e0
[  177.268807][ T8922]  ___slab_alloc+0xc6d/0x1300
[  177.273472][ T8922]  kmem_cache_alloc+0x1b7/0x2e0
[  177.278312][ T8922]  xfrm_state_alloc+0x22/0x2a0
[  177.283065][ T8922]  __find_acq_core+0x7d8/0x19d0
[  177.287906][ T8922]  xfrm_find_acq+0x6a/0x90
[  177.292309][ T8922]  pfkey_getspi+0x64f/0xed0
[  177.296799][ T8922]  pfkey_sendmsg+0xbed/0x1050
[  177.301464][ T8922]  ____sys_sendmsg+0x5bf/0x950
[  177.306216][ T8922]  ___sys_sendmsg+0x220/0x290
[  177.310881][ T8922]  __se_sys_sendmsg+0x1a5/0x270
[  177.315718][ T8922]  do_syscall_64+0x55/0xb0
[  177.320125][ T8922] page last free stack trace:
[  177.324780][ T8922]  free_unref_page_prepare+0x7ce/0x8e0
[  177.330232][ T8922]  free_unref_page+0x32/0x2e0
[  177.334898][ T8922]  __slab_free+0x35e/0x410
[  177.339302][ T8922]  qlist_free_all+0x75/0xe0
[  177.343791][ T8922]  kasan_quarantine_reduce+0x143/0x160
[  177.349242][ T8922]  __kasan_slab_alloc+0x22/0x80
[  177.354126][ T8922]  slab_post_alloc_hook+0x6e/0x4d0
[  177.359239][ T8922]  __kmem_cache_alloc_node+0x13e/0x260
[  177.364692][ T8922]  __kmalloc_node+0xa4/0x230
[  177.369272][ T8922]  kvmalloc_node+0x70/0x180
[  177.373761][ T8922]  seq_read_iter+0x1fa/0xd50
[  177.378345][ T8922]  vfs_read+0x431/0x920
[  177.382486][ T8922]  ksys_read+0x147/0x250
[  177.386712][ T8922]  do_syscall_64+0x55/0xb0
[  177.391110][ T8922]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  177.396990][ T8922] 
[  177.399296][ T8922] Memory state around the buggy address:
[  177.404910][ T8922]  ffff888025950000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  177.412952][ T8922]  ffff888025950080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  177.420993][ T8922] >ffff888025950100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  177.429033][ T8922]                                ^
[  177.434130][ T8922]  ffff888025950180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  177.442171][ T8922]  ffff888025950200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  177.450210][ T8922] ==================================================================
[  177.507543][ T8922] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  177.514770][ T8922] CPU: 1 PID: 8922 Comm: syz.4.1068 Not tainted syzkaller #0
[  177.522145][ T8922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  177.532194][ T8922] Call Trace:
[  177.535463][ T8922]  <TASK>
[  177.538381][ T8922]  dump_stack_lvl+0x16c/0x230
[  177.543050][ T8922]  ? show_regs_print_info+0x20/0x20
[  177.548260][ T8922]  ? load_image+0x3b0/0x3b0
[  177.552748][ T8922]  panic+0x2c0/0x710
[  177.556636][ T8922]  ? bpf_jit_dump+0xd0/0xd0
[  177.561127][ T8922]  ? _raw_spin_unlock_irqrestore+0xfa/0x110
[  177.567010][ T8922]  ? _raw_spin_unlock+0x40/0x40
[  177.571857][ T8922]  ? print_memory_metadata+0x314/0x400
[  177.577303][ T8922]  ? __xfrm_state_lookup+0x6b2/0x8d0
[  177.582572][ T8922]  check_panic_on_warn+0x84/0xa0
[  177.587495][ T8922]  ? __xfrm_state_lookup+0x6b2/0x8d0
[  177.592765][ T8922]  end_report+0x6f/0x140
[  177.596992][ T8922]  kasan_report+0x128/0x150
[  177.601503][ T8922]  ? __xfrm_state_lookup+0x6b2/0x8d0
[  177.606775][ T8922]  __xfrm_state_lookup+0x6b2/0x8d0
[  177.611873][ T8922]  ? xfrm_state_lookup+0x1a0/0x1a0
[  177.616969][ T8922]  ? xfrm_calg_get_byname+0x193/0x280
[  177.622334][ T8922]  xfrm_state_lookup+0xef/0x1a0
[  177.627174][ T8922]  ? xfrm_state_lookup+0x36/0x1a0
[  177.632185][ T8922]  ipcomp4_init_state+0x1fc/0x9f0
[  177.637202][ T8922]  __xfrm_init_state+0xd8b/0x11c0
[  177.642216][ T8922]  ? __xfrm_init_state+0x7fc/0x11c0
[  177.647403][ T8922]  xfrm_add_sa+0x236d/0x30a0
[  177.651979][ T8922]  ? xfrm_user_rcv_msg+0x870/0x870
[  177.657081][ T8922]  ? __nla_parse+0x40/0x50
[  177.661487][ T8922]  xfrm_user_rcv_msg+0x596/0x870
[  177.666411][ T8922]  ? lockdep_hardirqs_on+0x98/0x150
[  177.671597][ T8922]  ? xfrm_netlink_rcv+0x90/0x90
[  177.676431][ T8922]  ? __local_bh_enable_ip+0x12e/0x1c0
[  177.681797][ T8922]  ? __dev_queue_xmit+0x245/0x35a0
[  177.686897][ T8922]  ? __mutex_trylock_common+0x153/0x250
[  177.692436][ T8922]  netlink_rcv_skb+0x216/0x480
[  177.697189][ T8922]  ? xfrm_netlink_rcv+0x90/0x90
[  177.702023][ T8922]  ? netlink_ack+0x1110/0x1110
[  177.706776][ T8922]  ? netlink_deliver_tap+0x2e/0x1b0
[  177.711964][ T8922]  ? __lock_acquire+0x7c80/0x7c80
[  177.717003][ T8922]  xfrm_netlink_rcv+0x79/0x90
[  177.721677][ T8922]  netlink_unicast+0x751/0x8d0
[  177.726441][ T8922]  netlink_sendmsg+0x8c1/0xbe0
[  177.731206][ T8922]  ? netlink_getsockopt+0x580/0x580
[  177.736395][ T8922]  ? aa_sock_msg_perm+0x94/0x150
[  177.741318][ T8922]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  177.746587][ T8922]  ? security_socket_sendmsg+0x80/0xa0
[  177.752027][ T8922]  ? netlink_getsockopt+0x580/0x580
[  177.757211][ T8922]  ____sys_sendmsg+0x5bf/0x950
[  177.761966][ T8922]  ? __asan_memset+0x22/0x40
[  177.766637][ T8922]  ? __sys_sendmsg_sock+0x30/0x30
[  177.771653][ T8922]  ? __import_iovec+0x5f2/0x860
[  177.776499][ T8922]  ? import_iovec+0x73/0xa0
[  177.780995][ T8922]  ___sys_sendmsg+0x220/0x290
[  177.785661][ T8922]  ? __sys_sendmsg+0x270/0x270
[  177.790428][ T8922]  __se_sys_sendmsg+0x1a5/0x270
[  177.795287][ T8922]  ? __x64_sys_sendmsg+0x80/0x80
[  177.800235][ T8922]  ? lockdep_hardirqs_on+0x98/0x150
[  177.805435][ T8922]  do_syscall_64+0x55/0xb0
[  177.809857][ T8922]  ? clear_bhb_loop+0x40/0x90
[  177.814521][ T8922]  ? clear_bhb_loop+0x40/0x90
[  177.819187][ T8922]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  177.825078][ T8922] RIP: 0033:0x7f1f4b58eba9
[  177.829478][ T8922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  177.851515][ T8922] RSP: 002b:00007f1f497f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  177.860112][ T8922] RAX: ffffffffffffffda RBX: 00007f1f4b7d5fa0 RCX: 00007f1f4b58eba9
[  177.868095][ T8922] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  177.876064][ T8922] RBP: 00007f1f4b611e19 R08: 0000000000000000 R09: 0000000000000000
[  177.884021][ T8922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  177.891979][ T8922] R13: 00007f1f4b7d6038 R14: 00007f1f4b7d5fa0 R15: 00007fff11383d88
[  177.899949][ T8922]  </TASK>
[  177.903298][ T8922] Kernel Offset: disabled
[  177.907609][ T8922] Rebooting in 86400 seconds..